Plan and Implement Security AZ-140 Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   You are implementing network security for Azure Virtual Desktop. Which Azure resource allows you to control inbound and outbound traffic to session hosts at the subnet or NIC level?

   • ANetwork Security Group (NSG)
   • BAzure Firewall
   • CUser-defined route (UDR)
   • DAzure Bastion
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   You are onboarding a fleet of Azure Virtual Desktop session hosts to Microsoft Defender for Endpoint. The session hosts are not domain-joined and are managed through Azure Arc. You have downloaded the onboarding package from the Microsoft 365 Defender portal. You need to complete the onboarding process on each session host. What should you do?

   • ARun the onboarding script (MicrosoftDefenderATPOnboarding.ps1) locally on each session host with administrative privileges.
   • BDeploy the onboarding package using a Group Policy Object (GPO) to the session hosts.
   • CEnable the Microsoft Defender for Endpoint integration in Microsoft Defender for Cloud.
   • DUse Microsoft Endpoint Configuration Manager to deploy the onboarding package.
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   You are planning to deploy Azure Virtual Desktop session hosts that require hardware-level isolation from the hypervisor. Which Azure VM security feature should you use?

   • AAzure confidential VMs
   • BAzure Bastion
   • CTrusted Launch
   • DMicrosoft Defender for Endpoint
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   When planning Microsoft Defender for Cloud for Azure Virtual Desktop session hosts, which capability is provided by enabling the Defender for Servers plan?

   • AJust-in-time (JIT) VM access
   • BApp Control for Business
   • CAzure Bastion service
   • DNetwork Security Group (NSG) rules
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   You manage an Azure Virtual Desktop environment that uses session hosts running Windows 10 Enterprise. Your security team wants to use Microsoft Defender for Cloud to assess the session hosts for missing security updates and to recommend Microsoft Defender Antivirus configurations. You need to ensure that the session hosts are visible in Microsoft Defender for Cloud with the necessary security assessments. What should you do first?

   • AConfigure the session hosts to use Azure Policy guest configuration to apply the Defender for Cloud recommendations.
   • BEnable the Azure Defender for Servers plan in Microsoft Defender for Cloud and enable the Log Analytics agent on the session hosts.
   • CEnable the Microsoft Defender for Cloud regulatory compliance dashboard and assign a custom initiative.
   • DInstall the Microsoft Defender for Endpoint sensor on the session hosts and configure it to report to Microsoft Defender for Cloud.
   Reveal Solution Discussion Select an answer first