AZ-500 Module-3 TCS

Which feature is essential for monitoring the security of Azure Container Instances (ACIs)?

• Azure Monitor

• Ignoring all security alerts

• Disabling diagnostic logs

What enables secure remote access to Azure VMs without exposing them to the public internet?

• Azure Bastion

• Direct access using public IP addresses

• Unrestricted access through any internet connection

What encryption method is recommended for securing data at rest on Azure VMs?

• Manual encryption methods implemented at the application layer

• Azure Disk Encryption using BitLocker or dm-crypt

• Using plain text files for sensitive data storage

What best practice secures access to Azure Container Registry (ACR)?

• Public access with no authentication

• Using a single, shared administrator account for all users

• Integration with Microsoft Entra ID and RBAC

How is network isolation achieved in Azure Kubernetes Service (AKS)?

• Through unrestricted ingress and egress rules

• By disabling network policies

• Using network policies to control ingress and egress traffic

What is the purpose of Bring Your Own Key (BYOK) in Azure Key Vault?

• To transfer a key from Azure Key Vault to an on-premises Hardware Security Module (HSM)

• To securely transfer a key from an on-premises Hardware Security Module (HSM) outside Azure, into the HSM backing Azure Key Vault

• To generate a new key in Azure Key Vault for use in an on-premises HSM

What is the purpose of using Azure Key Vault to manage storage account access keys?

• To limit access to the data stored in the storage account

• To generate new access keys for each storage account

• To manage and rotate existing access keys securely

Why is database auditing enabled in Azure SQL Database?

• To track database activities and detect security violations.

• To reduce data storage requirements.

• To automatically optimize database indexes.

What is a use case for the Microsoft Purview governance portal?

• To classify and manage sensitive information across data sources.

• To increase network bandwidth.

• To directly manage virtual machine resources.

What is the purpose of Microsoft Entra database authentication in Azure SQL Database?

Authentication mechanisms are designed to secure access, rather than directly improving query performance.

• To increase database storage efficiency.

• To enhance query performance.

• To secure database access by integrating with Microsoft Entra ID.