- (Exam Topic 4)
You have an Azure subscription that contains the resources shown in the following table.

You need to configure storage1 to regenerate keys automatically every 90 days. Which cmdlet should you run?

1. A. set -A=StorageAccount
2. B. Add-A:StorogcAccountmanagementPolicyAction
3. C. Set-A;StorageAccountimanagementPolicy
4. D. Add-AsKeyVaultmanageStorageAccount

Correct Answer: D

- (Exam Topic 4)
You have the Azure virtual machines shown in the following table.

For which virtual machine can you enable Update Management?

1. A. VM2 and VM3 only
2. B. VM2, VM3, and VM4 only
3. C. VM1, VM2, and VM4 only
4. D. VM1, VM2, VM3, and VM4
5. E. VM1, VM2, and VM3 only

Correct Answer: C
References:
https://docs.microsoft.com/en-us/azure/automation/automation-update-management?toc=%2Fazure%2Fautomat

- (Exam Topic 4)
You have an Azure subscription that contains an Azure SQL server named SQL1. SQL1 contains. You need to use Microsoft Defender for Cloud to complete a vulnerability assessment for DB1. What should you do first?

1. A. From Advanced Threat Protection types, select SQL injection vulnerability.
2. B. Configure the Send scan report to setting.
3. C. Set Periodic recurring scans to ON.
4. D. Enable the Microsoft Defender for SQL plan.

Correct Answer: A

- (Exam Topic 4)
You have an Azure subscription that contains the following resources:
• An Azure key vault
• An Azure SQL database named Database1
• Two Azure App Service web apps named AppSrv1 and AppSrv2 that are configured to use system-assigned managed identities and access Database1
You need to implement an encryption solution for Database1 that meets the following requirements:
• The data in a column named Discount in Database1 must be encrypted so that only AppSrv1 can decrypt the data.
• AppSrv1 and AppSrv2 must be authorized by using managed identities to obtain cryptographic keys. How should you configure the encryption settings fa Database1 To answer, select the appropriate options in
the answer area.
NOTE: Each correct selection is worth one point

Solution:
Text Description automatically generated with medium confidence
Reference:
https://docs.microsoft.com/en-us/azure/azure-sql/database/always-encrypted-azure-key-vault-configure?tabs=az

Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

- (Exam Topic 2)
You are evaluating the security of VM1, VM2, and VM3 in Sub2.
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Solution:


Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A