- (Exam Topic 4)
You have an Azure subscription that uses Microsoft Defender for Cloud.
You need to use Defender for Cloud to review regulatory compliance with the Azure CIS 1.4,0 standard. The solution must minimize administrative effort.
What should you do first?

1. A. Assign an Azure policy.
2. B. Manually add the Azure CIS 1.4.0 standard.
3. C. Disable one of the Out of the box standards.
4. D. Add a custom initiative.

Correct Answer: A

- (Exam Topic 4)
You have an Azure subscription.
You create a new virtual network named VNet1.
You plan to deploy an Azure web app named App1 that will use VNet1 and will be reachable by using private IP addresses. The solution must support inbound and outbound network traffic.
What should you do?

1. A. Create an Azure App Service Hybrid Connection.
2. B. Configure regional virtual network integration.
3. C. Create an App Service Environment
4. D. Create an Azure application gateway.

Correct Answer: D

- (Exam Topic 4)
You have an Azure subscription that contains the storage accounts shown in the following, table.

You enable Microsoft Defender for Storage.
Which storage services of storages are monitored by Microsoft Defender for Storage, and which storage accounts are protected by Microsoft Defender for Storage? To answer, select the appropriate options in the answer area.

Solution:


Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

- (Exam Topic 4)
You have the Azure virtual machines shown in the following table.

Each virtual machine has a single network interface.
You add the network interface of VM1 to an application security group named ASG1.
You need to identify the network interfaces of which virtual machines you can add to ASG1. What should you identify?

1. A. VM2 only
2. B. VM2, VM3, VM4, and VM5
3. C. VM2, VM3, and VM5 only
4. D. Vm2 and Vm3 only

Correct Answer: D
Reference:
https://docs.microsoft.com/en-us/azure/virtual-network/application-security-groups

- (Exam Topic 4)
You have an Azure subscription that contains four Azure SQL managed instances.
You need to evaluate the vulnerability of the managed instances to SQL injection attacks. What should you do first?

1. A. Create an Azure Sentinel workspace.
2. B. Enable Advanced Data Security.
3. C. Add the SQL Health Check solution to Azure Monitor.
4. D. Create an Azure Advanced Threat Protection (ATP) instance.

Correct Answer: B