HOTSPOT -
To complete the sentence, select the appropriate option in the answer area.
Hot Area:
Show Answer
Correct Answer: Azure Active Directory (Azure AD)
Explanation: Azure AD (now Microsoft Entra ID) provides identity and access management and enables single sign-on (SSO) across multiple applications.
Question 220
HOTSPOT -
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:
Show Answer
Correct Answer: Yes
Yes
Yes
Explanation: Cloud computing offers elastic (on‑demand) scalability.
Public cloud shifts infrastructure costs from CapEx to OpEx, minimizing CapEx.
Virtualization enables multi‑tenancy, allowing multiple customers to share resources securely.
Question 221
You have an Azure subscription and 100 Windows 10 devices.
You need to ensure that only users whose devices have the latest security patches installed can access Azure Active Directory (Azure AD)-integrated applications.
What should you implement?
A. a conditional access policy
B. Azure Bastion
C. Azure Firewall
D. Azure Policy
Show Answer
Correct Answer: A
Explanation: To ensure that only users on devices with the latest security patches can access Azure AD–integrated applications, you use Azure AD Conditional Access. Conditional Access policies can require that a device be marked as compliant (for example, via Intune, which checks update and patch status) before granting access. Azure Bastion, Azure Firewall, and Azure Policy do not control user sign-in access based on device patch compliance.
Question 222
DRAG DROP -
Match the Azure service to the appropriate description.
To answer, drag the appropriate service from the column on the left to its description on the right. Each service may be used once, more than once, or not at all.
NOTE: Each correct match is worth one point.
Select and Place:
Show Answer
Correct Answer: Azure Synapse Analytics
Azure Cosmos DB
Azure HDInsight
Explanation: Azure Synapse Analytics is a fully managed data warehouse with built-in security. Azure Cosmos DB is a globally distributed database that supports NoSQL. Azure HDInsight provides managed Apache Hadoop clusters for large-scale data processing.
Question 223
HOTSPOT -
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:
Show Answer
Correct Answer: No
No
Yes
Explanation: Azure Files is a fully managed storage service and not IaaS.
A DNS server running on an Azure VM is IaaS, not PaaS.
Microsoft Intune is delivered as a cloud application, which is SaaS.
Question 224
HOTSPOT -
To complete the sentence, select the appropriate option in the answer area.
Hot Area:
Show Answer
Correct Answer: Microsoft Online Services Privacy Statement
Explanation: This document describes what data Microsoft processes for its online services, how the data is processed, and the purposes of that processing.
Question 225
HOTSPOT -
You plan to extend your company's network to Azure.
The network contains a VPN appliance that uses an IP address of 131.107.200.1.
You need to create an Azure resource that defines the VPN appliance in Azure.
Which Azure resource should you create? To answer, select the appropriate resource in the answer area.
Hot Area:
Show Answer
Correct Answer: Local network gateway
Explanation: A Local Network Gateway is the Azure resource that represents the on‑premises VPN appliance, including its public IP address (131.107.200.1). It defines the on‑premises VPN device and address prefixes for a site‑to‑site VPN connection to Azure.
Question 226
What does a customer provide in a software as a service (SaaS) model?
A. application data
B. data storage
C. compute resources
D. application software
Show Answer
Correct Answer: A
Explanation: In a SaaS model, the provider supplies the application software, infrastructure, compute, and storage. The customer’s primary responsibility is to provide and manage their own application data entered into and processed by the service.
Question 227
DRAG DROP -
Match the Azure Services service to the correct descriptions.
Instructions: To answer, drag the appropriate service from the column on the left to its description on the right. Each service may be used once, more than once, or not at all.
NOTE: Each correct match is worth one point.
Select and Place:
Show Answer
Correct Answer: Azure Sentinel, Azure Security Center, Azure Key Vault
Explanation: Azure Sentinel is the cloud-native SIEM/SOAR used to collect and analyze security logs and automate responses. Azure Security Center (now Microsoft Defender for Cloud) provides security posture management, recommendations, and secure score. Azure Key Vault is used to securely store and manage secrets such as passwords, keys, and certificates.
Question 228
HOTSPOT -
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:
Show Answer
Correct Answer: No
Yes
Yes
Explanation: Microsoft Sentinel stores data in an Azure Monitor Log Analytics workspace, not directly in a Storage account.
It can automatically remediate incidents using playbooks (Logic Apps).
It can collect Windows Defender Firewall logs from Azure virtual machines.
$19
Get all 428 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.
