Last updated on October 16th, 2024 at 03:55 pm
Microsoft AZ900 Exam Dumps post contains real and latest questions for Microsoft Azure Fundamentals.
Microsoft AZ900 Exam Dumps – QAs 226-250
Table of Contents
Q226. DRAG DROP –
You need to complete the defense-in-depth strategy used in a datacenter.
What should you do? To answer, drag the appropriate layers to the correct positions in the model. Each layer may be used once, more than once, or not at all.
You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Select and Place:
Correct Answer
Q227. HOTSPOT –
To complete the sentence, select the appropriate option in the answer area.
Hot Area:
Correct Answer
Reference:
https://docs.microsoft.com/en-us/azure/sentinel/tutorial-respond-threats-playbook
Q228. You have an Azure virtual machine named VM1.
You plan to encrypt VM1 by using Azure Disk Encryption.
Which Azure resource must you create first?
- an Azure Storage account
- an Azure Key Vault
- an Azure Information Protection policy
- an Encryption key
Correct Answer
2. an Azure Key Vault
Reference:
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/disk-encryption-overview
Q229. DRAG DROP –
Match the Azure Services service to the correct descriptions.
Instructions: To answer, drag the appropriate service from the column on the left to its description on the right. Each service may be used once, more than once, or not at all.
NOTE: Each correct match is worth one point.
Select and Place:
Correct Answer
Box 1: Azure Sentinel
Box 2: Azure Security Center
Box 3: Azure Key Vault
Reference:
https://docs.microsoft.com/en-us/azure/sentinel/overview
https://docs.microsoft.com/en-us/azure/security-center/secure-score-security-controls
https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-whatis
https://docs.microsoft.com/en-us/azure/lighthouse/overview
Q230. Which Azure service should you use to store certificates?
- Azure Security Center
- an Azure Storage account
- Azure Key Vault
- Azure Information Protection
Correct Answer
3. Azure Key Vault
References:
https://docs.microsoft.com/en-us/azure/key-vault/key-vault-overview
Q231. You have an Azure Sentinel workspace.
You need to automate responses to threats detected by Azure Sentinel.
What should you use?
- adaptive network hardening in Azure Security Center
- Azure Service Health
- Azure Monitor workbooks
- adaptive application controls in Azure Security Center
Correct Answer
3. Azure Monitor workbooks
Q232. HOTSPOT –
Select the answer that correctly completes the sentence.
Hot Area:
Correct Answer
Reference:
https://docs.microsoft.com/en-us/azure/defender-for-cloud/regulatory-compliance-dashboard
Q233. Microsoft 365 is an example of which cloud service model?
- infrastructure as a service (IaaS)
- platform as a service (PaaS)
- software as a service (SaaS)
Correct Answer
3. software as a service (SaaS)
Q234. HOTSPOT –
Select the answer that correctly completes the sentence.
Hot Area:
Correct Answer
Reference:
https://docs.microsoft.com/en-us/azure/defender-for-cloud/security-policy-concept
Q235. You need to collect and automatically analyze security events from Azure Active Directory (Azure AD).
What should you use?
- Microsoft Sentinel
- Azure Synapse Analytics
- Azure AD Connect
- Azure Key Vault
Correct Answer
1. Microsoft Sentinel
Reference:
https://docs.microsoft.com/en-us/azure/sentinel/overview
Q236. HOTSPOT –
Select the answer that correctly completes the sentence.
Hot Area:
Correct Answer
Reference:
https://docs.microsoft.com/en-us/azure/defender-for-cloud/just-in-time-access-usage
Q237. Which Azure service can you use as a security information and event management (SIEM) solution?
- Azure Analysis Services
- Microsoft Sentinel
- Azure Information Protection
- Azure Cognitive Services
Correct Answer
2. Microsoft Sentinel
Reference:
https://docs.microsoft.com/en-us/azure/sentinel/overview
Q238. You need to migrate an on-premises server by using a lift-and-shift migration.
To which type of cloud service should you migrate?
- infrastructure as a service (IaaS)
- software as a service (SaaS)
- platform as a service (PaaS)
Correct Answer
1. infrastructure as a service (IaaS)
Q239. You have an Azure subscription.
You need to review your secure score.
What should you use?
- Azure Monitor
- Azure Advisor
- Help + support
- Microsoft Defender for Cloud
Correct Answer
4. Microsoft Defender for Cloud
Q240. HOTSPOT –
To complete the sentence, select the appropriate option in the answer area.
Hot Area:
Correct Answer
Reference:
https://docs.microsoft.com/en-us/azure/ddos-protection/ddos-protection-overview
Q241. Your Azure environment contains multiple Azure virtual machines.
You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP.
What are two possible solutions? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
- Modify an Azure Traffic Manager profile
- Modify a network security group (NSG)
- Modify a DDoS protection plan
- Modify an Azure firewall
Correct Answer
2. Modify a network security group (NSG)
Reference:
https://docs.microsoft.com/en-us/azure/virtual-network/security-overview
Q242. You need to configure an Azure solution that meets the following requirements:
✑ Secures websites from attacks
✑ Generates reports that contain details of attempted attacks
What should you include in the solution?
- Azure Firewall
- a network security group (NSG)
- Azure Information Protection
- DDoS protection
Correct Answer
4. DDoS protection
Reference:
https://docs.microsoft.com/en-us/azure/security/fundamentals/ddos-best-practices
Q243. HOTSPOT –
You plan to implement several security services for an Azure environment. You need to identify which Azure services must be used to meet the following security requirements:
✑ Monitor threats by using sensors
✑ Enforce Azure Multi-Factor Authentication (MFA) based on a condition
Which Azure service should you identify for each requirement? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer
References:
https://docs.microsoft.com/en-us/azure-advanced-threat-protection/what-is-atp
https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/howto-identity-protection-configure-mfa-policy
Q244. Your company plans to automate the deployment of servers to Azure.
Your manager is concerned that you may expose administrative credentials during the deployment.
You need to recommend an Azure solution that encrypts the administrative credentials during the deployment.
What should you include in the recommendation?
- Azure Key Vault
- Azure Information Protection
- Microsoft Defender for Cloud
- Azure Multi-Factor Authentication (MFA)
Correct Answer
1. Azure Key Vault
Reference:
https://docs.microsoft.com/en-us/azure/key-vault/general/security-features
Q245. DRAG DROP –
Match the term to the appropriate description.
To answer, drag the appropriate term from the column on the left to its description on the right. Each term may be used once, more than once, or not at all.
NOTE: Each correct match is worth one point.
Select and Place:
Correct Answer
Q246. HOTSPOT –
Select the answer that correctly completes the sentence.
Hot Area:
Correct Answer
Reference:
https://docs.microsoft.com/en-us/azure/sentinel/tutorial-respond-threats-playbook
Q247. HOTSPOT –
Select the answer that correctly completes the sentence.
Hot Area:
Correct Answer
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/add-application-portal-setup-sso
Q248. HOTSPOT –
Select the answer that correctly completes the sentence.
Hot Area:
Correct Answer
Reference:
https://azure.microsoft.com/en-us/services/ddos-protection
Q249. HOTSPOT –
Select the answer that correctly completes the sentence.
Hot Area:
Correct Answer
Reference:
https://docs.microsoft.com/en-us/azure/virtual-network/network-security-groups-overview
Q250. HOTSPOT –
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer
Reference:
https://docs.microsoft.com/en-us/azure/virtual-network/network-security-groups-overview