Which benefit does Azure DDoS Protection provide to applications running in Azure?

It provides a web application firewall for HTTP traffic

It helps maintain availability by mitigating DDoS attacks

It automatically patches operating system vulnerabilities

It guarantees zero downtime during any network outage

A company is migrating an application to Azure. The application uses a certificate for TLS/SSL. The security team wants to manage the certificate centrally and ensure that it can be automatically renewed. What should they use?

Network security group (NSG) rules to protect the certificate file

Azure Key Vault to store the certificate and configure auto-renewal

Azure Disk Encryption to encrypt the certificate file

Azure Firewall to secure the certificate

What is the benefit of deploying Azure WAF with Azure Front Door?

It automatically scales virtual machines based on traffic

It encrypts all traffic between users and the web application

It provides protection at the network layer for all Azure resources

It enables centralized protection for web applications at the global edge

Your company uses Azure Front Door to deliver a global web application. They want to protect the application from web attacks at the edge, close to users. What should they configure?

Azure DDoS Protection Standard on Front Door

Network Security Group on the Front Door

Azure Firewall in the virtual network

Azure Web Application Firewall (WAF) policy associated with Front Door

Your organization wants to centralize network security policy management across multiple Azure subscriptions. They need to filter traffic between virtual networks and to the internet, and they require centralized logging of all filtered traffic. Which Azure service should they use?

Azure Firewall with Azure Firewall Policy

Microsoft Certified:Security, Compliance, and Identity Fundamentals

Domain 3Objective 1

Describe Core Infrastructure Security Services in Azure SC-900 Practice Questions (Page 3)

Part of the Describe the capabilities of Microsoft security solutions domain, which accounts for 35–40% of the SC-900 exam. Microsoft does not publish an official question count, but from its 45-minute exam (~20–30 total, ~7–12 in this domain), expect 2–3 from this objective — we provide 49 practice questions to prepare you well beyond it. (estimate)

49questions here

10free pages

12concepts

35–40%of the exam

12 Concepts in This Objective

Azure DDoS Protection Overview
Azure DDoS Protection Tiers
Azure Firewall Functionality
Azure Firewall Policy Management
Azure Web Application Firewall (WAF) Features
Azure WAF Deployment
Azure Virtual Networks Segmentation
Network Security Groups (NSGs) Function
NSG Rule Configuration
Azure Bastion Service
Azure Key Vault Overview
Azure Key Vault Integration

Questions 11–15

11foundation · easy
Which benefit does Azure DDoS Protection provide to applications running in Azure?
Select an answer first
12application · medium
A company is migrating an application to Azure. The application uses a certificate for TLS/SSL. The security team wants to manage the certificate centrally and ensure that it can be automatically renewed. What should they use?
Select an answer first
13foundation · easy
What is the benefit of deploying Azure WAF with Azure Front Door?
Select an answer first
14application · medium
Your company uses Azure Front Door to deliver a global web application. They want to protect the application from web attacks at the edge, close to users. What should they configure?
Select an answer first
15application · medium
Your organization wants to centralize network security policy management across multiple Azure subscriptions. They need to filter traffic between virtual networks and to the internet, and they require centralized logging of all filtered traffic. Which Azure service should they use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SC-900

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-900” is a trademark of its owner, used for identification only.