QUESTION: 11 Exam Topic: Implement Azure security questions

DRAG DROP (Drag & Drop is not supported)
You develop a web application.
You need to register the application with an active Azure Active Directory (Azure AD) tenant.

Which three actions should you perform in sequence? To answer, move all actions from the list of actions to the answer area and arrange them in the correct order.

Select and Place:

See Explanation section for answer.

Answer(s): A

Explanation:

Register a new application using the Azure portal
1. Sign in to the Azure portal using either a work or school account or a personal Microsoft account.
2. If your account gives you access to more than one tenant, select your account in the upper right corner. Set your portal session to the Azure AD tenant that you want.
3. Search for and select Azure Active Directory. Under Manage, select App registrations.
4. Select New registration. (Step 1)
5. In Register an application, enter a meaningful application name to display to users.
6. Specify who can use the application. Select the Azure AD instance. (Step 2)
7. Under Redirect URI (optional), select the type of app you're building: Web or Public client (mobile & desktop). Then enter the redirect URI, or reply URL, for your application. (Step 3)
8. When finished, select Register.

Reveal Solution Next Question

QUESTION: 12 Exam Topic: Implement Azure security questions

You have a new Azure subscription. You are developing an internal website for employees to view sensitive data. The website uses Azure Active Directory (Azure AD) for authentication.

You need to implement multifactor authentication for the website.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

Configure the website to use Azure AD B2C.
In Azure AD, create a new conditional access policy.
Upgrade to Azure AD Premium.
In Azure AD, enable application proxy.
In Azure AD conditional access, enable the baseline policy.

Answer(s): B,C

Explanation:

B: MFA Enabled by conditional access policy. It is the most flexible means to enable two-step verification for your users. Enabling using conditional access policy only works for Azure MFA in the cloud and is a premium feature of Azure AD.

C: Multi-Factor Authentication comes as part of the following offerings:
-Azure Active Directory Premium licenses - Full featured use of Azure Multi-Factor Authentication Service (Cloud) or Azure Multi-Factor Authentication Server (On-premises).
-Multi-Factor Authentication for Office 365
-Azure Active Directory Global Administrators

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-getstarted

Reveal Solution Next Question

QUESTION: 13 Exam Topic: Implement Azure security questions

You are developing a Java application that uses Cassandra to store key and value data. You plan to use a new Azure Cosmos DB resource and the Cassandra API in the application. You create an Azure Active Directory (Azure AD) group named Cosmos DB Creators to enable provisioning of Azure Cosmos accounts, databases, and containers.

The Azure AD group must not be able to access the keys that are required to access the data. You need to restrict access to the Azure AD group.

Which role-based access control should you use?

DocumentDB Accounts Contributor
Cosmos Backup Operator
Cosmos DB Operator
Cosmos DB Account Reader

Answer(s): C

Explanation:

Azure Cosmos DB now provides a new RBAC role, Cosmos DB Operator. This new role lets you provision Azure Cosmos accounts, databases, and containers, but can’t access the keys that are required to access the data. This role is intended for use in scenarios where the ability to grant access to Azure Active Directory service principals to manage deployment operations for Cosmos DB is needed, including the account, database, and containers.

Reference:

https://azure.microsoft.com/en-us/updates/azure-cosmos-db-operator-role-for-role-based-access-control-rbac- is-now-available/

Reveal Solution Next Question

QUESTION: 14 Exam Topic: Implement Azure security questions

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You are developing a website that will run as an Azure Web App. Users will authenticate by using their Azure Active Directory (Azure AD) credentials.

You plan to assign users one of the following permission levels for the website: admin, normal, and reader. A user’s Azure AD group membership must be used to determine the permission level.

You need to configure authorization.

Solution: Configure the Azure Web App for the website to allow only authenticated requests and require Azure AD log on.

Does the solution meet the goal?

Answer(s): B

Explanation:

Instead in the Azure AD application’s manifest, set value of the groupMembershipClaims option to All.

Reference:

https://blogs.msdn.microsoft.com/waws/2017/03/13/azure-app-service-authentication-aad-groups/

Reveal Solution Next Question

Free AZ-204 Exam Braindumps (page: 25)

QUESTION: 11 Exam Topic: Implement Azure security questions

Explanation:

QUESTION: 12 Exam Topic: Implement Azure security questions

Explanation:

Reference:

QUESTION: 13 Exam Topic: Implement Azure security questions

Explanation:

Reference:

QUESTION: 14 Exam Topic: Implement Azure security questions

Explanation:

Reference: