Quiz
Part1-IC
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (17)
1Your company has a Microsoft 365 ES subscription.
The Chief Compliance Officer plans to enhance privacy management in the working environment.
You need to recommend a solution to enhance the privacy management. The solution must meet the following requirements:
✑ Identify unused personal data and empower users to make smart data handling decisions.
✑ Provide users with notifications and guidance when a user sends personal data in Microsoft Teams.
✑ Provide users with recommendations to mitigate privacy risks.
What should you include in the recommendation?- Acommunication compliance in insider risk management
- BMicrosoft Viva Insights
- CPrivacy Risk Management in Microsoft Priva
- DAdvanced eDiscovery
2You have an Azure subscription that has Microsoft Defender for Cloud enabled.
Suspicious authentication activity alerts have been appearing in the Workload protections dashboard.
You need to recommend a solution to evaluate and remediate the alerts by using workflow automation. The solution must minimize development effort.
What should you include in the recommendation?- AAzure Monitor webhooks
- BAzure Event Hubs
- CAzure Functions apps
- DAzure Logics Apps
3Your company is moving a big data solution to Azure.
The company plans to use the following storage workloads:
✑ Azure Storage blob containers
✑ Azure Data Lake Storage Gen2
Azure Storage file shares -
✑ Azure Disk Storage
Which two storage workloads support authentication by using Azure Active Directory (Azure AD)? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.- AAzure Storage file shares
- BAzure Disk Storage
- CAzure Storage blob containers
- DAzure Data Lake Storage Gen2
4HOTSPOT -
Your company is migrating data to Azure. The data contains Personally Identifiable Information (PII).
The company plans to use Microsoft Information Protection for the PII data store in Azure.
You need to recommend a solution to discover PII data at risk in the Azure resources.
What should you include in the recommendation? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
- AMicrosoft information protection: 1
- BMicrosoft information protection: 2
- CMicrosoft information protection: 3
- DMicrosoft information protection: 4
- ETo triage security alerts related to resources that contain PII data: 1
- FTo triage security alerts related to resources that contain PII data: 2
- GTo triage security alerts related to resources that contain PII data: 3
- HTo triage security alerts related to resources that contain PII data: 4
5You have a Microsoft 365 E5 subscription and an Azure subscription.
You are designing a Microsoft deployment.
You need to recommend a solution for the security operations team. The solution must include custom views and a dashboard for analyzing security events.
What should you recommend using in Microsoft Sentinel?- Anotebooks
- Bplaybooks
- Cworkbooks
- Dthreat intelligence
6Your company has a Microsoft 365 subscription and uses Microsoft Defender for Identity.
You are informed about incidents that relate to compromised identities.
You need to recommend a solution to expose several accounts for attackers to exploit. When the attackers attempt to exploit the accounts, an alert must be triggered.
Which Defender for Identity feature should you include in the recommendation?- Asensitivity labels
- Bcustom user tags
- Cstandalone sensors
- Dhoneytoken entity tags
7Your company is moving all on-premises workloads to Azure and Microsoft 365.
You need to design a security orchestration, automation, and response (SOAR) strategy in Microsoft Sentinel that meets the following requirements:
✑ Minimizes manual intervention by security operation analysts
✑ Supports triaging alerts within Microsoft Teams channels
What should you include in the strategy?- AKQL
- Bplaybooks
- Cdata connectors
- Dworkbooks
8You have an Azure subscription that contains virtual machines, storage accounts, and Azure SQL databases.
All resources are backed up multiple times a day by using Azure Backup.
You are developing a strategy to protect against ransomware attacks.
You need to recommend which controls must be enabled to ensure that Azure Backup can be used to restore the resources in the event of a successful ransomware attack.
Which two controls should you include in the recommendation? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.- AEnable soft delete for backups.
- BRequire PINs for critical operations.
- CEncrypt backups by using customer-managed keys (CMKs).
- DPerform offline backups to Azure Data Box.
- EUse Azure Monitor notifications when backup configurations change.
9You are creating the security recommendations for an Azure App Service web app named App1. App1 has the following specifications:
✑ Users will request access to App1 through the My Apps portal. A human resources manager will approve the requests.
✑ Users will authenticate by using Azure Active Directory (Azure AD) user accounts.
You need to recommend an access security architecture for App1.
What should you include in the recommendation? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
- ATo enable Azure AD authentication for app 1 use: 1
- BTo enable Azure AD authentication for app 1 use: 2
- CTo enable Azure AD authentication for app 1 use: 3
- DTo enable Azure AD authentication for app 1 use: 4
- ETo enable Azure AD authentication for app 1 use: 5
- FTo implement access requests for APP 1 use: 1
- GTo implement access requests for APP 1 use: 2
- HTo implement access requests for APP 1 use: 3
- ITo implement access requests for APP 1 use: 4
- JTo implement access requests for APP 1 use: 5
10Your company uses Microsoft Defender for Cloud and Microsoft Sentinel.
The company is designing an application that will have the architecture shown in the following exhibit.
You are designing a logging and auditing solution for the proposed architecture. The solution must meet the following requirements:
✑ Integrate Azure Web Application Firewall (WAF) logs with Microsoft Sentinel.
✑ Use Defender for Cloud to review alerts from the virtual machines.
What should you include in the solution? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
- A
- BFor WAF: 1
- CFor WAF: 2
- DFor WAF: 3
- EFor WAF: 4
- FFor the Virtual Machines: 1
- GFor the Virtual Machines: 2
- HFor the Virtual Machines: 3
- IFor the Virtual Machines: 4
- JFor the Virtual Machines: 5
- A
11Your company has a third-party security information and event management (SIEM) solution that uses Splunk and Microsoft Sentinel.
You plan to integrate Microsoft Sentinel with Splunk.
You need to recommend a solution to send security events from Microsoft Sentinel to Splunk.
What should you include in the recommendation?- Aa Microsoft Sentinel data connector
- BAzure Event Hubs
- Ca Microsoft Sentinel workbook
- DAzure Data Factory
12A customer follows the Zero Trust model and explicitly verifies each attempt to access its corporate applications.
The customer discovers that several endpoints are infected with malware.
The customer suspends access attempts from the infected endpoints.
The malware is removed from the endpoints.
Which two conditions must be met before endpoint users can access the corporate applications again? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.- AThe client access tokens are refreshed.
- BMicrosoft Intune reports the endpoints as compliant.
- CA new Azure Active Directory (Azure AD) Conditional Access policy is enforced.
- DMicrosoft Defender for Endpoint reports the endpoints as compliant.
13You have a Microsoft 365 subscription and an Azure subscription. Microsoft 365 Defender and Microsoft Defender for Cloud are enabled.
The Azure subscription contains a Microsoft Sentinel workspace. Microsoft Sentinel data connectors are configured for Microsoft 365, Microsoft 365 Defender,
Defender for Cloud, and Azure.
You plan to deploy Azure virtual machines that will run Windows Server.
You need to enable extended detection and response (EDR) and security orchestration, automation, and response (SOAR) capabilities for Microsoft Sentinel.
How should you recommend enabling each capability? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
- AEDR: 1
- BEDR: 2
- CEDR: 3
- DEDR: 4
- ESOAR: 1
- FSOAR: 2
- GSOAR: 3
- HSOAR: 4
14You have a customer that has a Microsoft 365 subscription and uses the Free edition of Azure Active Directory (Azure AD).
The customer plans to obtain an Azure subscription and provision several Azure resources.
You need to evaluate the customer's security environment.
What will necessitate an upgrade from the Azure AD Free edition to the Premium edition?- AAzure AD Privileged Identity Management (PIM)
- Brole-based authorization
- Cresource-based authorization
- DAzure AD Multi-Factor Authentication
15You are designing the security standards for a new Azure environment.
You need to design a privileged identity strategy based on the Zero Trust model.
Which framework should you follow to create the design?- AMicrosoft Security Development Lifecycle (SDL)
- BEnhanced Security Admin Environment (ESAE)
- CRapid Modernization Plan (RaMP)
- DMicrosoft Operational Security Assurance (OSA)
16A customer has a hybrid cloud infrastructure that contains a Microsoft 365 E5 subscription and an Azure subscription.
All on-premises servers in the perimeter network are prevented from connecting directly to the internet.
The customer recently recovered from a ransomware attack.
The customer plans to deploy Microsoft Sentinel.
You need to recommend solutions to meet the following requirements:
✑ Ensure that the security operations team can access the security logs and the operation logs.
✑ Ensure that the IT operations team can access only the operations logs, including the event logs of the servers in the perimeter network.
Which two solutions should you include in the recommendation? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.- Aa custom collector that uses the Log Analytics agent
- Bthe Azure Monitor agent
- Cresource-based role-based access control (RBAC)
- DAzure Active Directory (Azure AD) Conditional Access policies
17Your company is developing a serverless application in Azure that will have the architecture shown in the following exhibit.
You need to recommend a solution to isolate the compute components on an Azure virtual network.
What should you include in the recommendation?
- AAzure Active Directory (Azure AD) enterprise applications
- Ban Azure App Service Environment (ASE)
- CAzure service endpoints
- Dan Azure Active Directory (Azure AD) application proxy
Information
- Description
- Quiz on Part1-IC, created by Iulian Cheptrosu on 24/12/2024.
- Author
- Iulian Cheptrosu
- Language
- English
- Views
- 1
- History
- Created on 24 Dec 2024 · updated on 24 Dec 2024
- Rating
- No ratings yet Rate this quiz