- (Exam Topic 4)
You have an Azure subscription that contains the Azure virtual machines shown in the following table.

You create an MDM Security Baseline profile named Profile1.
You need to identify to which virtual machines Profile1 can be applied. Which virtual machines should you identify?

1. A. VM1 only
2. B. VM1, VM2, and VM3 only
3. C. VM1 and VM3 only
4. D. VM1, VM2, VM3, and VM4

Correct Answer: A
Reference:
https://docs.microsoft.com/en-us/mem/intune/protect/security-baselines

- (Exam Topic 4)
You have an Azure subscription named Sub1.
In Azure Security Center, you have a security playbook named Play1. Play1 is configured to send an email message to a user named User1.
You need to modify Play1 to send email messages to a distribution group named Alerts. What should you use to modify Play1?

1. A. Azure DevOps
2. B. Azure Application Insights
3. C. Azure Monitor
4. D. Azure Logic Apps Designer

Correct Answer: D
You can change an existing playbook in Security Center to add an action, or conditions. To do that you just need to click on the name of the playbook that you want to change, in the Playbooks tab, and Logic App Designer opens up.
References:
https://docs.microsoft.com/en-us/azure/security-center/security-center-playbooks

- (Exam Topic 2)
You need to meet the technical requirements for VNetwork1. What should you do first?

1. A. Create a new subnet on VNetwork1.
2. B. Remove the NSGs from Subnet11 and Subnet13.
3. C. Associate an NSG to Subnet12.
4. D. Configure DDoS protection for VNetwork1.

Correct Answer: A
From scenario: Deploy Azure Firewall to VNetwork1 in Sub2.
Azure firewall needs a dedicated subnet named AzureFirewallSubnet. References:
https://docs.microsoft.com/en-us/azure/firewall/tutorial-firewall-deploy-portal

- (Exam Topic 4)
You have an Azure AD tenant that contains the users shown in the following table.

You need to ensure that the users cannot create app passwords. The solution must ensure that User1 can continue to use the Mail and Calendar app.
What should you do?

1. A. Assign User! the Authentication Policy Administrator role.
2. B. Enable Azure AD Password Protection.
3. C. Configure a multi-factor authentication (MFA) registration policy.
4. D. Create a new app registration.

Correct Answer: C

- (Exam Topic 4)
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result these questions will not appear in the review screen.
You use Azure Security Center for the centralized policy management of three Azure subscriptions. You use several policy definitions to manage the security of the subscriptions.
You need to deploy the policy definitions as a group to all three subscriptions.
Solution: You create a policy initiative and assignments that are scoped to resource groups. Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: B