Implement Security for an Azure Cosmos DB Solution DP-420 Practice Questions (Page 3)

Questions 11–15

1. 11application · easy

   A company is deploying a new Azure Cosmos DB account. They want to ensure that data is encrypted at rest without any additional configuration. What should they do?

   • AEnable Azure Active Directory authentication to encrypt data at rest.
   • BUse platform-managed keys, which are enabled by default.
   • CEnable customer-managed keys in Azure Key Vault.
   • DConfigure a private endpoint to encrypt data at rest.
   Reveal Solution Discussion Select an answer first
2. 12application · easy

   A startup is building a new application on Azure Cosmos DB and wants to ensure that their data is encrypted at rest with minimal operational overhead. They do not have specific compliance requirements for key control. What should they use?

   • AAzure Disk Encryption on the Cosmos DB account.
   • BDisable encryption at rest to reduce costs.
   • CCustomer-managed keys in Azure Key Vault.
   • DPlatform-managed encryption keys.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which Azure service is used to authenticate users for control plane access to Azure Cosmos DB?

   • AAzure Active Directory
   • BAzure DNS
   • CAzure Key Vault
   • DAzure Monitor
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A financial services company is deploying a new application in Azure that will access an Azure Cosmos DB account. The application runs on Azure VMs in a virtual network. The company requires that all traffic to Cosmos DB remain within the Azure backbone network and never traverse the public internet. They also want to minimize the attack surface by removing public endpoints. What should you do?

   • AEnable a virtual network service endpoint for Cosmos DB and add the VM subnet to the allowed networks.
   • BConfigure the Cosmos DB account's IP firewall to allow only the VM's public IP address.
   • CCreate a private endpoint for the Cosmos DB account in the VM's subnet and disable public network access.
   • DUse Azure Bastion to connect to the Cosmos DB account from the VMs.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is the primary purpose of Azure Private Link for Azure Cosmos DB?

   • ATo enable public internet access to the Cosmos DB account.
   • BTo provide a private IP address for the Cosmos DB account within a virtual network.
   • CTo authenticate users using Azure Active Directory.
   • DTo encrypt data at rest using customer-managed keys.
   Reveal Solution Discussion Select an answer first