Describe Core Infrastructure Security Services in Azure SC-900 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company wants to store SSL/TLS certificates for their web application and automatically deploy them to Azure App Service. They also need to control access to the certificates using Azure Active Directory. Which service should they use?

   • AAzure DDoS Protection
   • BAzure Bastion
   • CAzure Key Vault
   • DAzure Firewall
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   How can Azure Key Vault integrate with Azure virtual machines?

   • ABy filtering network traffic to the VM
   • BBy providing a public IP address for the VM
   • CBy automatically patching the VM's operating system
   • DBy storing disk encryption keys used to encrypt VM disks
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A company is deploying a new application in Azure. The security requirements are: (1) all outbound traffic from the application subnet must be inspected and logged, (2) inbound traffic to the application must be filtered based on FQDN, and (3) the solution must be centrally managed. The company also wants to protect against DDoS attacks. What should they implement?

   • AUse network security groups (NSGs) on the application subnet with rules for FQDN filtering and enable DDoS IP Protection
   • BDeploy Azure Firewall with a Firewall Policy, configure application rules for FQDN filtering, and enable DDoS Network Protection on the virtual network
   • CUse Azure Bastion for outbound traffic inspection and enable DDoS Network Protection
   • DDeploy Azure Application Gateway with WAF and enable DDoS Network Protection
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   How does Azure Firewall help with network security?

   • AIt prevents all unauthorized access to Azure subscriptions
   • BIt filters traffic and provides logs for monitoring and auditing
   • CIt automatically patches all virtual machines in the network
   • DIt encrypts all data stored in Azure SQL databases
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   How does Azure Bastion enhance security compared to directly exposing VMs to the internet?

   • AIt provides a VPN connection to the VNet
   • BIt encrypts the VM's operating system
   • CIt eliminates the need for public IP addresses on the VMs, reducing exposure
   • DIt automatically patches the VMs
   Reveal Solution Discussion Select an answer first