Microsoft Azure Management Tools and Security Solutions Week 4
In this article i am gone to share Coursera Course Microsoft Azure Management Tools and Security Solutions Week 4 Quiz Answers with you..
Course Link: Microsoft Azure Management Tools and Security Solutions
Microsoft Azure Management Tools
and Security Solutions Week 4 Quiz Answer
Also visit this link:ย Microsoft Azure Management Tools and Security Solutions Week 3
Knowledge check
Question 1)
Many Azure services include built-in security features however Azure also has specific tools to assist with securing your environment. Which of the following would be the simplest way to monitor your resources and perform automatic security assessments to identify potential vulnerabilities?
- Azure Security Center
- Azure Sentinel
- Azure Key Vault
Question 2)
Your company has migrated to Azure Cloud services. Management wants to implement security that will limit the applications that can run on certain virtual machines. Which of the following approaches provide such a solution?
- Administrators periodically review what applications are running on each VMs by creating and running PowerShell scripts.
- Connect the virtual machines to Azure Sentinel.
- Implement an application control rule in Azure Security Center.ย
Question 3)
Your company has recently migrated to Azure cloud services. Azure has various reporting and monitoring tools built in. What is the simplest tool to use to create a single report that will show all security information to be collected from all the monitoring tools?
- Azure Key Vault
- Secure Score
- Azure Sentinel
Question 4)
Your company had recently migrated to Azure cloud services and management are concerned that sensitive information such as passwords, encryption keys, and certificates will not be as secure as they were when operating an on-premises environment. What solution can you implement to allay these concerns?
- Implement Azure Sentinel.
- Implement Azure Key Vault.
- Configure a secure VM and store the Passwords and certificates in a shared folder.
Question 5)
Your company is planning to migrate to Azure cloud services however because of their type of business they are obliged to follow regulatory compliance that requires them to be the only customer using the physical machine that will host their virtual machines in the cloud. How can your company migrate to the cloud while still remaining compliant?
- They cannot, these specific systems will need to remain and operate on-premises only.
- Configure the VMโs to run on Azure Dedicated Hostย
- Configure the network so that the companyโs VMs are isolated from other VMโs running on the same host in the datacenters.
Knowledge check
Question 1)
Malicious attackers can try to overwhelm the resources of a network by sending large volumes of packets to a targeted host on the network. Which of the following Azure offerings would be most suitable in detecting this form of attack?
- Azure Firewall
- Azure DDoS Protection
- Network security groups
Question 2)
True or False
Azure Firewall provides Network Address Translation (NAT) rules that can define destination IP addresses and ports to translate inbound requests.
- True
- False
Question 3)
What service tiers are available to DDoS Protection?ย Select all options that apply.
- Basic
- Enhanced
- Standard
Question 4)
Having recently migrated to Azure cloud services you need to implement a solution that will allow the filtering of network traffic to and from Azure resources within an Azure Virtual Network. Which of the following services would be most suitable to solve this problem?
- Azure Firewall
- Network Security Groups
- DDoS protection
Question 5)
What is the simplest way for a company to implement a policy that will restrict VMs from being able to communicate with each other?
- Limit access by implementing DDoS protection.
- Place each VM on a separate virtual network.
- Use Network Security Groups to create a rule that prevents access from another VM on the same network.
Test prep
Question 1)
Your company is considering moving to Azure cloud services; however, management wants assurances. Features such as Security Reporting, similar to their existing on-premises SIEM solution need to be available. Which of the following features can be implemented that will provide a cloud-based SIEM solution?
- Implement Azure Key Vault.
- Implement Azure Sentinel.
- Configure a secure VM and store the Passwords and certificates in a shared folder.
Question 2)
Tailwind Traders has recently migrated to Azure cloud services. Azure includes various built-in reporting and monitoring tools. What is the simplest tool to use to view groups of related security recommendations showing the percentage of security controls that the company currently satisfies?
- Secure Score
- Azure Sentinel
- Azure Key Vault
Question 3)
Many Azure services include built-in security features however Azure also has specific tools to assist with securing your environment. Which of the following would be the simplest way to centrally manage your passwords and certificates in a single, central location?
- Azure Security Center
- Azure Key Vault
- Azure Sentinel
Question 4)
Having recently migrated to Azure cloud services, you need to implement a solution that will allow the monitoring of incoming and outgoing network traffic and, determine whether to allow or block specific traffic based on a defined set of security rules. Which of the following services would be most suitable to solve this problem?
- Network Security Groups
- DDoS protection
- Azure Firewall
Question 5)
Which of the following services allows for the configuration of application rules that define fully qualified domain names (FQDNs) that can be accessed from a subnet?
- DDoS Protection
- Azure Firewall
- Network Security Groups