AZ-500 Final quiz GSI

You are a security engineer for a company that uses Azure Storage accounts to store sensitive data. You need to ensure that data is encrypted at rest and in transit. Which of the following actions should you take? (Choose two)

• Enable Azure Storage Service Encryption (SSE)

• Use Azure Disk Encryption

• Enable HTTPS for the storage account

• Use Azure Key Vault to manage encryption keys

Your organization wants to implement Azure AD Privileged Identity Management (PIM) to manage and monitor privileged roles. Which of the following features does PIM provide? (Choose three)

• Just-in-time privileged access

• Multi-factor authentication enforcement

• Automatic role assignment

• Access reviews

You need to configure Azure Firewall to control outbound traffic from your virtual network to the internet. Which of the following steps should you take? (Choose two)

• Create a route table and associate it with the subnet

• Configure network rules in Azure Firewall

• Enable DDoS protection

• Configure application rules in Azure Firewall

Your company wants to use Azure Security Center to improve its security posture. Which of the following features does Azure Security Center provide? (Choose three)

• Security recommendations

• Just-in-time VM access

• Automated threat response

• Network performance monitoring

You are responsible for managing secrets and certificates in Azure Key Vault. Which of the following actions can you perform with Azure Key Vault? (Choose two)

• Generate encryption keys

• Monitor network traffic

• Store secrets

• Manage virtual networks

Your organization is concerned about potential DDoS attacks on its web applications. Which of the following steps should you take to configure Azure DDoS Protection? (Choose two)

• Enable DDoS Protection Standard

• Configure WAF policies

• Enable Azure Firewall

• Configure DDoS Protection plans

You need to implement conditional access policies to secure access to your company's resources. Which of the following conditions can you configure in a conditional access policy? (Choose three)

• User risk

• Device compliance

• Network location

• Application type

Your company wants to use Azure Sentinel for security information and event management (SIEM). Which of the following features does Azure Sentinel provide? (Choose three)

• Data connectors

• Incident response

• Automated backups

• Threat intelligence

You need to manage role-based access control (RBAC) in your Azure environment. Which of the following actions can you perform with Azure RBAC? (Choose two)

• Assign roles to users

• Monitor application performance

• Create custom roles

• Configure network security groups

Your organization wants to enforce compliance with company policies in Azure. Which of the following actions can you perform with Azure Policy? (Choose two)

• Create policy definitions

• Monitor network traffic

• Assign policies to resources

• Configure virtual networks