Plan and Implement Advanced Security for Compute AZ-500 Practice Questions (Page 5)

Questions 21–25

1. 21expert · medium

   Your company has a VM that is used by a third-party vendor for a limited-time project. The vendor needs RDP access to the VM, but the security team wants to ensure that the VM is not exposed to the internet and that access is automatically revoked after the project ends. The VM also has sensitive data that must be encrypted at rest. You have a limited budget. Which solution should you implement?

   • AUse Azure AD Privileged Identity Management (PIM) to grant the vendor temporary RDP access
   • BEnable Azure Disk Encryption and use a VPN for the vendor to connect
   • CUse Azure Bastion for RDP access and configure just-in-time VM access with a short approval window
   • DAssign a public IP to the VM and create an NSG rule that allows RDP only from the vendor's IP address
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which Azure service provides security monitoring and threat detection for Azure Container Apps?

   • AAzure CDN
   • BAzure Key Vault
   • CMicrosoft Defender for Cloud
   • DAzure Application Gateway
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   Your organization has deployed a microservices application on Azure Container Apps. The security team wants to detect attacks against the application, such as SQL injection and cross-site scripting, and also wants to monitor for unusual behavior in the container workloads. What should you do?

   • AEnable Microsoft Defender for Cloud and add the Container Apps environment as a protected resource.
   • BConfigure Azure Policy to enforce that all Container Apps use managed identities.
   • CUse Azure Monitor to collect container logs and create custom queries for suspicious patterns.
   • DDeploy Azure Application Gateway with a Web Application Firewall (WAF) in front of the Container Apps environment.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which authentication method can be integrated with Azure Kubernetes Service (AKS) to allow users to sign in using their Azure Active Directory credentials?

   • ALocal user accounts
   • BSSH keys only
   • CAzure Managed Identity only
   • DAzure AD integration
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   Your team runs a set of Azure Container Instances (ACI) that process sensitive data. You need to monitor these containers for security threats and ensure that the container images are scanned for vulnerabilities. What should you do?

   • ADeploy Azure Monitor and create custom alerts based on container logs.
   • BUse Azure Policy to require that all ACI containers run with a read-only root filesystem.
   • CEnable Azure Security Center's just-in-time access for the container instances.
   • DEnable Microsoft Defender for Containers and configure the ACI subscription to be monitored.
   Reveal Solution Discussion Select an answer first