HOTSPOT
-
Select the answer that correctly completes the sentence.
Show Answer
Correct Answer: Microsoft 365 compliance center.
Explanation: Insider Risk Management is configured in the Microsoft 365 Compliance Center (now the Microsoft Purview compliance portal), not the Microsoft 365 admin center, Defender portal, or Defender for Cloud Apps portal.
Question 86
HOTSPOT
-
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: No
Yes
Yes
Explanation: Microsoft Purview Information Barriers support Microsoft Teams, SharePoint, and OneDrive. Exchange Online is not supported for Information Barriers policies in the context tested by this question.
Question 87
Which Microsoft Defender for Cloud metric displays the overall security health of an Azure subscription?
A. secure score
B. resource health
C. completed controls
D. the status of recommendations
Show Answer
Correct Answer: A
Explanation: Microsoft Defender for Cloud Secure Score is the metric that provides an overall assessment of the security posture (security health) of an Azure subscription by aggregating the implementation of security recommendations and controls. Resource Health reports service/resource availability, while completed controls and recommendation status are components rather than the overall metric.
Question 88
You have an Azure subscription that contains multiple resources.
You need to assess compliance and enforce standards for the existing resources.
What should you use?
A. Azure Blueprints
B. the Anomaly Detector service
C. Microsoft Sentinel
D. Azure Policy
Show Answer
Correct Answer: D
Explanation: Azure Policy is used to assess compliance of existing Azure resources and enforce organizational standards by evaluating resources against policy definitions and optionally denying or remediating non-compliant configurations. Azure Blueprints packages governance artifacts but is not the primary service for ongoing compliance assessment. Anomaly Detector is an AI service, and Microsoft Sentinel is a SIEM/SOAR security platform.
Question 89
HOTSPOT
-
Select the answer that correctly completes the sentence.
Show Answer
Correct Answer: Azure Monitor workbook templates.
Explanation: Microsoft Sentinel provides quick insights into data through Azure Monitor workbooks, which offer interactive reports and visualizations. Logic Apps/playbooks are for automation, and Resource Graph Explorer is for Azure resource queries.
Question 90
What are two reasons to deploy multiple virtual networks instead of using just one virtual network? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
A. to meet governance policies
B. to connect multiple types of resources
C. to separate the resources for budgeting
D. to isolate the resources
Show Answer
Correct Answer: A, D
Explanation: Multiple Azure virtual networks are commonly deployed to enforce organizational governance requirements and to isolate resources for security, compliance, or operational boundaries. Different resource types can coexist within a single virtual network, and budgeting is managed through subscriptions, resource groups, tags, and cost management rather than by creating separate virtual networks.
Question 91
What is the maximum number of resources that Azure DDoS Protection Standard can protect without additional costs?
A. 50
B. 100
C. 500
D. 1000
Show Answer
Correct Answer: B
Explanation: Azure DDoS Protection Standard pricing historically included protection for up to 100 public IP resources under the fixed monthly charge, with additional protected resources incurring extra cost. Although the service naming has evolved, the exam answer is 100.
Question 92
HOTSPOT
-
Select the answer that correctly completes the sentence.
Show Answer
Correct Answer: Microsoft Defender for Cloud
Explanation: Microsoft Defender for Cloud provides cloud workload protection (CWPP) and cloud security posture management for Azure and hybrid cloud resources.
Question 93
HOTSPOT
-
Select the answer that correctly completes the sentence.
Show Answer
Correct Answer: Azure Key Vault
Explanation: Azure Key Vault is the Azure cloud service designed to securely store and manage application secrets, keys, and certificates.
Question 94
HOTSPOT
-
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Yes
Yes
Yes
Explanation: Defender for Cloud provides threat protection for Azure Storage, foundational CSPM is available for onboarded Azure subscriptions, and Defender for Cloud assesses the security posture of Azure and on-premises/hybrid workloads.
$19
Get all 235 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.
