You have an Azure subscription that contains multiple resources.
You need to assess compliance and enforce standards for the existing resources.
What should you use?
A. Azure Blueprints
B. the Anomaly Detector service
C. Microsoft Sentinel
D. Azure Policy
Show Answer
Correct Answer: D
Explanation: Azure Policy is designed to assess compliance of existing Azure resources and enforce organizational standards by evaluating resources against policy definitions and applying effects such as audit or deny. The other options focus on provisioning (Blueprints), security analytics (Sentinel), or anomaly detection, not governance enforcement.
Question 83
HOTSPOT
-
Select the answer that correctly completes the sentence.
Show Answer
Correct Answer: Azure Monitor workbook templates.
Explanation: Microsoft Sentinel uses Azure Monitor workbooks to create interactive reports and dashboards that provide quick insights into collected security data.
Question 84
What are two reasons to deploy multiple virtual networks instead of using just one virtual network? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
A. to meet governance policies
B. to connect multiple types of resources
C. to separate the resources for budgeting
D. to isolate the resources
Show Answer
Correct Answer: A, D
Explanation: Deploying multiple virtual networks is commonly done to enforce governance policies (such as compliance, security boundaries, or organizational rules) and to isolate resources from each other. Isolation improves security, limits blast radius, and supports controlled access between environments. The other options are not primary reasons for choosing multiple VNets over a single VNet.
Question 86
HOTSPOT
-
Select the answer that correctly completes the sentence.
Show Answer
Correct Answer: Microsoft Defender for Cloud
Explanation: Microsoft Defender for Cloud provides cloud workload protection (CWP) for Azure, on‑premises, and hybrid cloud resources.
Question 87
HOTSPOT
-
Select the answer that correctly completes the sentence.
Show Answer
Correct Answer: Azure Key Vault
Explanation: Azure Key Vault is a cloud service designed to securely store and manage application secrets, keys, and certificates.
Question 88
HOTSPOT
-
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Yes
Yes
Yes
Explanation: Defender for Cloud includes vulnerability and threat detection for Azure Storage. CSPM (foundational) is available at no cost for all Azure subscriptions onboarded to Defender for Cloud. Defender for Cloud assesses security posture for Azure, hybrid, and on‑premises workloads.
Question 89
Microsoft 365 Endpoint data loss prevention (Endpoint DLP) can be used on which operating systems?
A. Windows 10 and newer only
B. Windows 10 and newer and Android only
C. Windows 10 and newer and iOS only
D. Windows 10 and newer, Android, and iOS
Show Answer
Correct Answer: A
Explanation: Microsoft 365 Endpoint DLP supports Windows 10 and Windows 11 (and macOS desktop versions), but it does not support Android or iOS. Since macOS is not listed in any option, the only correct choice among those provided is Windows 10 and newer only.
Question 90
Which security feature is available in the free mode of Microsoft Defender for Cloud?
A. threat protection alerts
B. just-in-time (JIT) VM access to Azure virtual machines
C. vulnerability scanning of virtual machines
D. secure score
Show Answer
Correct Answer: D
Explanation: In Microsoft Defender for Cloud, the free tier includes foundational security posture management features such as Secure Score and security recommendations. Threat protection alerts, just-in-time VM access, and vulnerability scanning are part of paid Defender plans, not the free mode.
Question 91
HOTSPOT
-
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Software tokens: No
Windows Hello: Yes
FIDO2 security keys: Yes
Explanation: In Microsoft Entra ID, software OATH tokens are typically used as a second factor and are not inherently passwordless. Windows Hello for Business and FIDO2 security keys authenticate using device-bound or hardware-backed credentials without requiring a password.
Question 92
HOTSPOT
-
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Yes
No
Yes
Explanation: Azure AD B2C allows external users to sign in with social or enterprise identities. B2C users are stored in a separate B2C tenant, not the organization’s Azure AD directory. Azure AD B2C supports custom branding on authentication pages.
$19
Get all 224 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.
