- (Exam Topic 4)
You have an Azure subscription that contains 100 virtual machines and has Azure Security Center Standard tier enabled.
You plan to perform a vulnerability scan of each virtual machine.
You need to deploy the vulnerability scanner extension to the virtual machines by using an Azure Resource Manager template.
Which two values should you specify in the code to automate the deployment of the extension to the virtual machines? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

1. A. the user-assigned managed identity
2. B. the workspace ID
3. C. the Azure Active Directory (Azure AD) ID
4. D. the Key Vault managed storage account key
5. E. the system-assigned managed identity
6. F. the primary shared key

Correct Answer: AC

- (Exam Topic 4)
You have been tasked with applying conditional access policies for your company’s current Azure Active Directory (Azure AD).
The process involves assessing the risk events and risk levels.
Which of the following is the risk level that should be configured for users that have leaked credentials?

1. A. None
2. B. Low
3. C. Medium
4. D. High

Correct Answer: D
These six types of events are categorized in to 3 levels of risks – High, Medium & Low: Table Description automatically generated

Reference:
http://www.rebeladmin.com/2018/09/step-step-guide-configure-risk-based-azure-conditional-access-policies/

- (Exam Topic 4)
You have an Azure subscription that contains the virtual machines shown in the following table.

All the virtual networks are peered. You deploy Azure Bastion to VNET2.
Which virtual machines can be protected by the bastion host?

1. A. VM1, VM2, VM3, and VM4
2. B. VM1, VM2, and VM3 only
3. C. VM2 and VM4 only
4. D. VM2 only

Correct Answer: A
https://docs.microsoft.com/en-us/azure/bastion/vnet-peering

- (Exam Topic 4)
You have an Azure subscription that contains an Azure key vault. The role assignments for the key vault are shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

Solution:


Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

- (Exam Topic 4)
You have an Azure Active Directory (Azure AD) tenant that contains the users shown in the following table.

The tenant contains the named locations shown in the following table.

You create the conditional access policies for a cloud app named App1 as shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Solution:


Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A