Microsoft AZ900 Exam Dumps|QAs Page -10

Last updated on October 16th, 2024 at 03:55 pm

Microsoft AZ900 Exam Dumps post contains real and latest questions for Microsoft Azure Fundamentals.

Microsoft AZ900 Exam Dumps

Microsoft AZ900 Exam Dumps – QAs 226-250

Q226. DRAG DROP –
You need to complete the defense-in-depth strategy used in a datacenter.
What should you do? To answer, drag the appropriate layers to the correct positions in the model. Each layer may be used once, more than once, or not at all.
You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Select and Place:

az-900 question 226
Correct Answer
az-900 answer 226

Reference:
https://github.com/undergroundwires/Azure-in-bullet-points/blob/master/AZ-900%20Microsoft%20Azure%20Fundamentals/4.2.%20Defence%20in%20Depth.md

Q227. HOTSPOT –
To complete the sentence, select the appropriate option in the answer area.
Hot Area:

az-900 question 227
Correct Answer
az-900 answer 227

Reference:
https://docs.microsoft.com/en-us/azure/sentinel/tutorial-respond-threats-playbook

Q228. You have an Azure virtual machine named VM1.
You plan to encrypt VM1 by using Azure Disk Encryption.
Which Azure resource must you create first?

  1. an Azure Storage account
  2. an Azure Key Vault
  3. an Azure Information Protection policy
  4. an Encryption key
Correct Answer

2. an Azure Key Vault

Reference:
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/disk-encryption-overview

Q229. DRAG DROP –
Match the Azure Services service to the correct descriptions.
Instructions: To answer, drag the appropriate service from the column on the left to its description on the right. Each service may be used once, more than once, or not at all.
NOTE: Each correct match is worth one point.
Select and Place:

az-900 question 229
Correct Answer

Box 1: Azure Sentinel
Box 2: Azure Security Center
Box 3: Azure Key Vault

Reference:
https://docs.microsoft.com/en-us/azure/sentinel/overview
https://docs.microsoft.com/en-us/azure/security-center/secure-score-security-controls
https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-whatis
https://docs.microsoft.com/en-us/azure/lighthouse/overview

Q230. Which Azure service should you use to store certificates?

  1. Azure Security Center
  2. an Azure Storage account
  3. Azure Key Vault
  4. Azure Information Protection
Correct Answer

3. Azure Key Vault

References:
https://docs.microsoft.com/en-us/azure/key-vault/key-vault-overview

Q231. You have an Azure Sentinel workspace.
You need to automate responses to threats detected by Azure Sentinel.
What should you use?

  1. adaptive network hardening in Azure Security Center
  2. Azure Service Health
  3. Azure Monitor workbooks
  4. adaptive application controls in Azure Security Center
Correct Answer

3. Azure Monitor workbooks

Q232. HOTSPOT –
Select the answer that correctly completes the sentence.
Hot Area:

az-900 question 232
Correct Answer
az-900 answer 232

Reference:
https://docs.microsoft.com/en-us/azure/defender-for-cloud/regulatory-compliance-dashboard

Q233. Microsoft 365 is an example of which cloud service model?

  1. infrastructure as a service (IaaS)
  2. platform as a service (PaaS)
  3. software as a service (SaaS)
Correct Answer

3. software as a service (SaaS)

Q234. HOTSPOT –
Select the answer that correctly completes the sentence.
Hot Area:

az-900 question 234
Correct Answer
az-900 answer 234

Reference:
https://docs.microsoft.com/en-us/azure/defender-for-cloud/security-policy-concept

Q235. You need to collect and automatically analyze security events from Azure Active Directory (Azure AD).
What should you use?

  1. Microsoft Sentinel
  2. Azure Synapse Analytics
  3. Azure AD Connect
  4. Azure Key Vault
Correct Answer

1. Microsoft Sentinel

Reference:
https://docs.microsoft.com/en-us/azure/sentinel/overview

Q236. HOTSPOT –
Select the answer that correctly completes the sentence.
Hot Area:

az-900 question 236
Correct Answer
az-900 answer 236

Reference:
https://docs.microsoft.com/en-us/azure/defender-for-cloud/just-in-time-access-usage

Q237. Which Azure service can you use as a security information and event management (SIEM) solution?

  1. Azure Analysis Services
  2. Microsoft Sentinel
  3. Azure Information Protection
  4. Azure Cognitive Services
Correct Answer

2. Microsoft Sentinel

Reference:
https://docs.microsoft.com/en-us/azure/sentinel/overview

Q238. You need to migrate an on-premises server by using a lift-and-shift migration.
To which type of cloud service should you migrate?

  1. infrastructure as a service (IaaS)
  2. software as a service (SaaS)
  3. platform as a service (PaaS)
Correct Answer

1. infrastructure as a service (IaaS)

Q239. You have an Azure subscription.
You need to review your secure score.
What should you use?

  1. Azure Monitor
  2. Azure Advisor
  3. Help + support
  4. Microsoft Defender for Cloud
Correct Answer

4. Microsoft Defender for Cloud

Q240. HOTSPOT –
To complete the sentence, select the appropriate option in the answer area.
Hot Area:

az-900 question 240
Correct Answer
az-900 answer 240

Reference:
https://docs.microsoft.com/en-us/azure/ddos-protection/ddos-protection-overview

Q241. Your Azure environment contains multiple Azure virtual machines.
You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP.
What are two possible solutions? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.

  1. Modify an Azure Traffic Manager profile
  2. Modify a network security group (NSG)
  3. Modify a DDoS protection plan
  4. Modify an Azure firewall
Correct Answer

2. Modify a network security group (NSG)

Reference:
https://docs.microsoft.com/en-us/azure/virtual-network/security-overview

Q242. You need to configure an Azure solution that meets the following requirements:
✑ Secures websites from attacks
✑ Generates reports that contain details of attempted attacks
What should you include in the solution?

  1. Azure Firewall
  2. a network security group (NSG)
  3. Azure Information Protection
  4. DDoS protection
Correct Answer

4. DDoS protection

Reference:
https://docs.microsoft.com/en-us/azure/security/fundamentals/ddos-best-practices

Q243. HOTSPOT –
You plan to implement several security services for an Azure environment. You need to identify which Azure services must be used to meet the following security requirements:
✑ Monitor threats by using sensors
✑ Enforce Azure Multi-Factor Authentication (MFA) based on a condition
Which Azure service should you identify for each requirement? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

az-900 question 243
Correct Answer
az-900 answer 243

References:
https://docs.microsoft.com/en-us/azure-advanced-threat-protection/what-is-atp
https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/howto-identity-protection-configure-mfa-policy

Q244. Your company plans to automate the deployment of servers to Azure.
Your manager is concerned that you may expose administrative credentials during the deployment.
You need to recommend an Azure solution that encrypts the administrative credentials during the deployment.
What should you include in the recommendation?

  1. Azure Key Vault
  2. Azure Information Protection
  3. Microsoft Defender for Cloud
  4. Azure Multi-Factor Authentication (MFA)
Correct Answer

1. Azure Key Vault

Reference:
https://docs.microsoft.com/en-us/azure/key-vault/general/security-features

Q245. DRAG DROP –
Match the term to the appropriate description.
To answer, drag the appropriate term from the column on the left to its description on the right. Each term may be used once, more than once, or not at all.
NOTE: Each correct match is worth one point.
Select and Place:

az-900 question 245
Correct Answer
az-900 answer 245

Q246. HOTSPOT –
Select the answer that correctly completes the sentence.
Hot Area:

az-900 question 246
Correct Answer
az-900 answer 246

Reference:
https://docs.microsoft.com/en-us/azure/sentinel/tutorial-respond-threats-playbook

Q247. HOTSPOT –
Select the answer that correctly completes the sentence.
Hot Area:

az-900 question 247
Correct Answer
az-900 answer 247

Reference:
https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/add-application-portal-setup-sso

Q248. HOTSPOT –
Select the answer that correctly completes the sentence.
Hot Area:

az-900 question 248
Correct Answer
az-900 answer 248

Reference:
https://azure.microsoft.com/en-us/services/ddos-protection

Q249. HOTSPOT –
Select the answer that correctly completes the sentence.
Hot Area:

az-900 question 249
Correct Answer
az-900 answer 249

Reference:
https://docs.microsoft.com/en-us/azure/virtual-network/network-security-groups-overview

Q250. HOTSPOT –
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

az-900 question 250
Correct Answer
az-900 answer 250

Reference:
https://docs.microsoft.com/en-us/azure/virtual-network/network-security-groups-overview

Scroll to Top