AZ-900 practice questions 151–160

1. Question 151 · 462 in bank

   HOTSPOT - Select the answer that correctly completes the sentence. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Box: Microsoft Defender for Cloud Microsoft Defender for Cloud helps streamline the process for meeting regulatory compliance requirements, using the regulatory compliance dashboard. You can download PDF/CSV reports as well as certification reports of your compliance status. Reference: https://docs.microsoft.com/en-us/azure/defender-for-cloud/regulatory-compliance-dashboard

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

2. Question 152 · 462 in bank

   Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. Your company's developers intend to deploy a large number of custom virtual machines on a weekly basis. They will also be removing these virtual machines during the same week it was deployed. Sixty percent of the virtual machines have Windows Server 2016 installed, while the other forty percent has Ubuntu Linux installed. You are required to make sure that the administrative effort, needed for this process, is reduced by employing a suitable Azure service. Solution: You recommend the use of Azure DevTest Labs. Does the solution meet the goal?

   • AYes
   • BNo

   Show answer

   Answer: A

   Explanation

   Use DevTest Labs for free* Answer is correct Quickly provision development and test environments Minimize waste with quotas and policies Set automated shutdowns to minimize costs Build Windows and Linux environments

   Source: Adapted from community discussion — Tommipeng

   References

   • azure.microsoft.com documentation
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • azure.microsoft.com documentation

   Next question

3. Question 153 · 462 in bank

   You need to collect and automatically analyze security events from Azure Active Directory (Azure AD). What should you use?

   • AMicrosoft Sentinel
   • BAzure Synapse Analytics
   • CAzure AD Connect
   • DAzure Key Vault

   Show answer

   Answer: A

   Explanation

   A is the answer. A is the answer. https://learn.microsoft.com/en-us/azure/sentinel/overview Microsoft Sentinel delivers intelligent security analytics and threat intelligence across the enterprise. With Microsoft Sentinel, you get a single solution for attack detection, threat visibility, proactive hunting, and threat response. https://learn.microsoft.com/en-us/azure/sentinel/overview#collect-data-by-using-data-connectors Microsoft Sentinel comes with many connectors for Microsoft solutions that are available out of the box and provide real-time integration. Some of these connectors include: - Azure service sources like Azure Active Directory, Azure Activity, Azure Storage, Azure Key Vault, Azure Kubernetes service, and more.

   Source: Adapted from community discussion — zellck

   References

   • Microsoft Learn

   Next question

4. Question 154 · 462 in bank

   HOTSPOT - Select the answer that correctly completes the sentence. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Box: Azure Active Directory (Azure AD) You can enable single sign-on for an enterprise application through Azure Active Directory (Azure AD. Incorrect: Application security groups enable you to configure network security as a natural extension of an application's structure, allowing you to group virtual machines and define network security policies based on those groups. Reference: https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/add-application-portal-setup-sso

   Source: Adapted from community discussion — zellck

   References

   • Microsoft Learn

   

   Next question

5. Question 155 · 462 in bank

   HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Box 1: No - Azure creates the default rules in each network security group that you create. These rules allow some traffic. Box 2: Yes - A network security group contains zero, or as many rules as desired. These rules can refer to application security groups. Box 3: Yes - Azure creates the Inbound and OutBound default rules in each network security group that you create. Reference: https://docs.microsoft.com/en-us/azure/virtual-network/network-security-groups-overview

   Source: Adapted from community discussion — kamal_004

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

6. Question 156 · 462 in bank

   DRAG DROP - Match the term to the appropriate description. To answer, drag the appropriate term from the column on the left to its description on the right. Each term may be used once, more than once, or not at all. NOTE: Each correct match is worth one point. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Answer: Single sign-on (SSO) >> The ability to use the same credentials to access multiple resources and applications from different providers Authentication >> The process of identifying the access level of a user or service Multi-factor authentication(MFA) - Requires several elements to identify a user or a service

   Source: Adapted from community discussion — kamal_004

   References

   • Microsoft Learn

   

   Next question

7. Question 157 · 462 in bank

   Your company plans to automate the deployment of servers to Azure. Your manager is concerned that you may expose administrative credentials during the deployment. You need to recommend an Azure solution that encrypts the administrative credentials during the deployment. What should you include in the recommendation?

   • AAzure Key Vault
   • BAzure Information Protection
   • CMicrosoft Defender for Cloud
   • DAzure Multi-Factor Authentication (MFA)

   Show answer

   Answer: A

   References

   • Microsoft Learn

   Next question

8. Question 158 · 462 in bank

   HOTSPOT - Select the answer that correctly completes the sentence. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Box: network Security group (NSG) You can use an Azure network security group to filter network traffic to and from Azure resources in an Azure virtual network. A network security group contains security rules that allow or deny inbound network traffic to, or outbound network traffic from, several types of Azure resources. For each rule, you can specify source and destination, port, and protocol. Reference: https://docs.microsoft.com/en-us/azure/virtual-network/network-security-groups-overview

   Source: Adapted from community discussion — kamal_004

   References

   • Microsoft Learn

   

   Next question

9. Question 159 · 462 in bank

   HOTSPOT - Select the answer that correctly completes the sentence. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Box: networking layer - DDoS Protection defends against a comprehensive set of network layer (layer 3/4) attacks. Reference: https://azure.microsoft.com/en-us/services/ddos-protection

   Source: Adapted from community discussion — Yiii

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

10. Question 160 · 462 in bank

    HOTSPOT - Select the answer that correctly completes the sentence. Hot Area:

    

    This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

    Show the answer figure

    Answer: See figure below

    Explanation

    Box: automatically respond to threats Playbooks are collections of procedures that can be run from Microsoft Sentinel in response to an alert or incident. A playbook can help automate and orchestrate your response, and can be set to run automatically when specific alerts or incidents are generated, by being attached to an analytics rule or an automation rule, respectively. Note: Automation rules help you triage incidents in Microsoft Sentinel. You can use them to automatically assign incidents to the right personnel, close noisy incidents or known false positives, change their severity, and add tags. They are also the mechanism by which you can run playbooks in response to incidents. Reference: https://docs.microsoft.com/en-us/azure/sentinel/tutorial-respond-threats-playbook

    Source: Adapted from community discussion — zellck

    References

    • Microsoft Learn

    

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

AZ-900 practice, question 151. 462 questions available.