Your company has several business units. Each business unit requires 20 different Azure resources for daily operation. All the business units require the same type of Azure resources. You need to recommend a solution to automate the creation of the Azure resources. What should you include in the recommendations?

You need to configure an Azure solution that meets the following requirements:

· Secures websites from attacks

· Generates reports that contain details of attempted attacks

What should you include in the solution?

You plan to implement several security services for an Azure environment. You need to identify which Azure services must be used to meet the following security requirements:

· Monitor threats by using sensors

· Enforce Azure Multi-Factor Authentication (MFA) based on a condition

Which Azure service should you identify for each requirement?

Monitor threats by using sensors:

You plan to implement several security services for an Azure environment. You need to identify which Azure services must be used to meet the following security requirements:

· Monitor threats by using sensors

· Enforce Azure Multi-Factor Authentication (MFA) based on a condition

Which Azure service should you identify for each requirement?

Enforce Azure Multi-Factor Authentication (MFA) based on a condition:

Your Azure environment contains multiple Azure virtual machines. You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP. What are two possible solutions?

You can enable just in time (JIT) VM access by using:

You can associate a network security group (NSG) to a virtual network subnet.

You can associate a network security group (NSG) to a virtual network.

You can associate a network security group (NSG) to a network interface.

You have an Azure environment that contains 10 virtual networks and 100 virtual machines. You need to limit the amount of inbound traffic to all the Azure virtual networks. What should you create?

Azure Key Vault is used to store secrets for Azure Active Directory (Azure AD) user accounts. Does the underlined phrase need to be changed?

Your company plans to automate the deployment of servers to Azure. Your manager is concerned that you may expose administrative credentials during the deployment. You need to recommend an Azure solution that encrypts the administrative credentials during the deployment. What should you include in the recommendation?

You plan to deploy several Azure virtual machines. You need to control the ports that devices on the Internet can use to access the virtual machines. What should you use?

After you create a virtual machine, you need to modify the _____________ to allow connections to TCP port 8080 on the virtual machine.

You can create custom Azure roles to control access to resources.

A user account can be assigned to multiple Azure roles.

A resource group can have the Owner role assigned to multiple users.

Your Azure environment contains multiple Azure virtual machines. You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP.

Solution: You modify a network security group (NSG). Does this meet the goal?

Your Azure environment contains multiple Azure virtual machines. You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP.

Solution: You modify a DDoS protection plan. Does this meet the goal?

You need to collect and automatically analyze security events from Azure Active Directory (Azure AD). What should you use?

Your Azure environment contains multiple Azure virtual machines. You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP.

Solution: You modify an Azure firewall. Does this meet the goal?

Your Azure environment contains multiple Azure virtual machines. You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP.

Solution: You modify an Azure Traffic Manager profile. Does this meet the goal?

Your company plans to deploy several web servers and several database servers to Azure. You need to recommend an Azure solution to limit the types of connections from the web servers to the database servers. What should you include in the recommendation?

From ___________ you can view which user turned off specific virtual machine during the last 14 days.

Which service provides network traffic filtering across multiple Azure subscriptions and virtual networks?

Which Azure service should you use to store certificates?

Which Azure service can you use as a security information and event management (SIEM) solution?

Azure Sentinel stores collected events in an Azure Storage account.

Azure Sentinel can remediate incidents automatically.

Azure Sentinel can collect Windows Defender Firewall logs from Azure virtual machines.

Match the Azure Services service to the correct descriptions.

“Analyze security log files from azure virtual machine”

Match the Azure Services service to the correct descriptions.

“Display secure score for an Azure subscription”

Match the Azure Services service to the correct descriptions.

“Store passwords for use by Azure Function applications”

Azure Firewall will encrypt all the network traffic sent from Azure to the Internet.

A network security group (NSG) will encrypt all the network traffic sent from Azure to the Internet.

Azure virtual machines that run Windows Server 2016 can encrypt network traffic sent to the Internet.

Azure Security Center can monitor Azure resources and on-premises resources.

All Azure Security Center features are free.

From Azure Security Center, you can download a Regulatory Compliance report.

Your company implements __________ to automatically add a watermark to Microsoft Word documents that contain credit card information.

You have an Azure virtual network named VNET1 in a resource group named RG1. You assign the Azure policy definition of Not Allowed Resource Type and specify that virtual networks are not an allowed resource type in RG1. VNET1 ________.

Your company has an Azure subscription that contains resources in several regions. A company policy states that administrators must only be allowed to create additional Azure resources in a region in the country where their office is located. You need to create the Azure resource that must be used to meet the policy requirement. What should you create?

From Azure Cloud Shell, you can track your company’s regulatory standards and regulations, such as ISO 27001. Does the underlined phrase need to be changed?

You can create Group Polices in Azure Active Directory (Azure AD).

You can join Windows 10 devices to Azure Active Directory (Azure AD).

You can join Android devices to Azure Active Directory (Azure AD).

The ________________ explains what data Microsoft processes, how Microsoft processes the data, and the purpose of processing the data.

_____________ is the process of verifying a user's credentials.

An Azure Policy initiative definition is a ______________.

_______________ provide organizations with the ability to manager the compliance of Azure resources across multiple subscriptions.