Security Issues in a Hybrid Cloud Environment CERTIFIED-HYBRID-CLOUD-IMPLEMENTATION-ENGINEER Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   A security assessment reveals that a cloud storage account has a public access policy that allows anyone to read the data. What is the most appropriate remediation?

   • AEncrypt the storage account with a new key
   • BEnable logging on the storage account
   • CChange the access policy to private and restrict access to authorized users only
   • DMove the storage account to a different region
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company uses Azure Sentinel to collect logs from on-premises and cloud resources. An analyst notices multiple failed sign-in attempts for a user account, followed by a successful sign-in from a new IP address. The user denies signing in from that IP. What is the most likely next step?

   • ADisable the user account immediately.
   • BInvestigate the sign-in logs for additional context, such as device, location, and any anomalies.
   • CReset the user's password and require MFA.
   • DIgnore the alert because the user denies it.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   An administrator is troubleshooting why a user cannot access a file share on a cloud VM even though the user's account has been granted permissions. Which step should be taken first to diagnose an authorization failure?

   • AReinstall the file share client software
   • BCheck the VM's network security group for inbound rules
   • CReboot the cloud VM to refresh its security token
   • DVerify that the user's account is a member of the correct group in the identity provider
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   A company stores customer data in a hybrid cloud and must comply with data residency regulations. Which action is most likely to cause a compliance violation?

   • AStoring data in a cloud region outside the required geographic boundary
   • BRegularly backing up data to an on-premises location
   • CUsing multi-factor authentication for all users
   • DEncrypting data at rest with a strong algorithm
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A company has a site-to-site VPN between on-premises and Azure. Users report that they can reach some Azure VMs but not others. The VMs are in the same VNet. What is the most likely cause?

   • AThe VPN gateway is not configured for the correct address space.
   • BThe VPN tunnel is down.
   • CThe VMs that are unreachable have a network security group that blocks traffic from the on-premises IP range.
   • DThe VMs are in a different VNet.
   Reveal Solution Discussion Select an answer first