Your company plans to automate the deployment of servers to Azure.
Your manager is concerned that you may expose administrative credentials during the deployment.
You need to recommend an Azure solution that encrypts the administrative credentials during the deployment.
What should you include in the recommendation?
A. Azure Key Vault
B. Azure Information Protection
C. Microsoft Defender for Cloud
D. Azure Multi-Factor Authentication (MFA)
Show Answer
Correct Answer: A
Explanation: Azure Key Vault is designed to securely store and manage sensitive information such as administrative credentials, passwords, keys, and secrets. During automated Azure deployments (for example, ARM templates, Bicep, or scripts), credentials can be referenced securely from Key Vault without exposing them in plaintext. The other options focus on data classification, security monitoring, or authentication enforcement rather than encrypting and protecting credentials during deployment.
Question 116
HOTSPOT -
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:
Show Answer
Correct Answer: No
Yes
Yes
Explanation: NSGs include default rules that allow some traffic, so they do not block all traffic by default. Application security groups can be referenced in NSG rules. Every NSG contains default inbound and outbound security rules.
Question 117
HOTSPOT -
Select the answer that correctly completes the sentence.
Hot Area:
Show Answer
Correct Answer: Azure Active Directory (Azure AD)
Explanation: Azure Active Directory (now called Microsoft Entra ID) provides identity and access management and enables users to authenticate to multiple applications using single sign-on (SSO).
Question 118
HOTSPOT -
Select the answer that correctly completes the sentence.
Hot Area:
Show Answer
Correct Answer: Microsoft Defender for Cloud
Explanation: Regulatory compliance reports and dashboards for Azure resources are provided in Microsoft Defender for Cloud, which assesses compliance against standards and allows exporting compliance reports.
Question 119
HOTSPOT -
Select the answer that correctly completes the sentence.
Hot Area:
Show Answer
Correct Answer: collection of policy definitions.
Explanation: An Azure Policy initiative definition groups multiple individual Azure Policy definitions into a single object to achieve a common governance goal and simplify assignment and management.
Question 120
Which Azure service can you use as a security information and event management (SIEM) solution?
A. Azure Analysis Services
B. Microsoft Sentinel
C. Azure Information Protection
D. Azure Cognitive Services
Show Answer
Correct Answer: B
Explanation: Microsoft Sentinel is Azure’s cloud-native Security Information and Event Management (SIEM) and Security Orchestration, Automation, and Response (SOAR) solution. It collects, analyzes, and correlates security events from multiple sources to detect, investigate, and respond to threats. The other options are not SIEM services.
Question 121
HOTSPOT -
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:
Explanation: Cloud services are not limited to Windows devices and can be managed from multiple operating systems. They can be managed via command-line tools such as Azure CLI or PowerShell, and also through a web browser using portals like the Azure portal.
Question 123
HOTSPOT -
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:
Show Answer
Correct Answer: No
Yes
No
Explanation: VNets in the same region are not connected unless peering or gateways are configured.
VNet names must be unique within the same resource group.
VNet address spaces do not have to be unique within a subscription unless the VNets are connected (for example, peered).
Question 124
HOTSPOT -
Select the answer that correctly completes the sentence.
Hot Area:
Show Answer
Correct Answer: Microsoft Online Services Privacy Statement
Explanation: This document describes what data Microsoft processes, how the data is processed, and the purposes of that processing. Other options cover contractual terms or service levels, not data processing explanations.
Question 125
HOTSPOT -
Select the answer that correctly completes the sentence.
Hot Area:
Show Answer
Correct Answer: Azure Arc
Explanation: Azure Arc projects on‑premises Windows Servers into Azure Resource Manager, allowing them to be managed like native Azure resources (governance, monitoring, policies).
$19
Get all 428 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.
