QUESTION: 141 Exam Topic: Develop a security and compliance plan Questions

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You plan to update the Azure DevOps strategy of your company.

You need to identify the following issues as they occur during the company’s development process:
-Licensing violations
-Prohibited libraries

Solution: You implement continuous deployment. Does this meet the goal?

Answer(s): B

Explanation:

Instead implement continuous integration.

Note: WhiteSource is the leader in continuous open source software security and compliance management. WhiteSource integrates into your build process, irrespective of your programming languages, build tools, or development environments. It works automatically, continuously, and silently in the background, checking the security, licensing, and quality of your open source components against WhiteSource constantly-updated deﬁnitive database of open source repositories.

Reference:

https://azuredevopslabs.com/labs/vstsextend/whitesource/

Reveal Solution Next Question

QUESTION: 142 Exam Topic: Develop a security and compliance plan Questions

SIMULATION
You manage a website that uses an Azure SQL Database named db1 in a resource group named RG1lod11566895. You need to modify the SQL database to protect against SQL injection.
To complete this task, sign in to the Microsoft Azure portal.

See Explanation section for answer.

Answer(s): A

Explanation:

Set up Advanced Threat Protection in the Azure portal
1. Sign into the Azure portal.
2. Navigate to the configuration page of the server you want to protect. In the security settings, select Advanced Data Security.
3. On the Advanced Data Security configuration page:

4. Enable Advanced Data Security on the server.

Note: Advanced Threat Protection for Azure SQL Database detects anomalous activities indicating unusual and potentially harmful attempts to access or exploit databases. Advanced Threat Protection can identify Potential SQL injection, Access from unusual location or data center, Access fromunfamiliar principal or potentially harmful application, and Brute force SQL credentials

Reference:

https://docs.microsoft.com/en-us/azure/storage/common/storage-account-create https://docs.microsoft.com/en-us/azure/azure-sql/database/threat-detection-configure

Reveal Solution Next Question

QUESTION: 143 Exam Topic: Develop a security and compliance plan Questions

HOTSPOT (Drag and Drop is not supported)
Your company has an Azure subscription.

The company requires that all resource groups in the subscription have a tag named organization set to a value of Contoso. You need to implement a policy to meet the tagging requirement.
How should you complete the policy? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.
Hot Area:

See Explanation section for answer.

Answer(s): A

Explanation:

Box 1: " Microsoft.Resources/subscriptions/resourceGroups"

Box 2: "Deny",
Sample - Enforce tag and its value on resource groups

},
"policyRule": {
"if": {
"allOf": [
{
"field": "type",
"equals": "Microsoft.Resources/subscriptions/resourceGroups"
},
{
"not": {
"field": "[concat('tags[',parameters('tagName'), ']')]",
"equals": "[parameters('tagValue')]"
}
}
]
},
"then": {
"effect": "deny"
}
}
}
}

Reference:

https://docs.microsoft.com/en-us/azure/governance/policy/samples/enforce-tag-on-resource-groups

Reveal Solution Next Question

QUESTION: 144 Exam Topic: Develop a security and compliance plan Questions

You need to configure GitHub to use Azure Active Directory (Azure AD) for authentication. What should you do first?

Create a conditional access policy in Azure AD.
Register GitHub in Azure AD.
Create an Azure Active Directory B2C (Azure AD B2C) tenant.
Modify the Security settings of the GitHub organization.

Answer(s): B

Explanation:

When you connect to a Git repository from your Git client for the first time, the credential manager prompts for credentials. Provide your Microsoft account or Azure AD credentials.

Note: Git Credential Managers simplify authentication with your Azure Repos Git repositories. Credential managers let you use the same credentials that you use for the Azure DevOps Services web portal. Credential managers support multi-factor authentication through Microsoft account or Azure Active Directory (Azure AD). Besides supporting multi-factor authentication with Azure Repos, credential managers also support two-factor authentication with GitHub repositories.

Reference:

https://docs.microsoft.com/en-us/azure/devops/repos/git/set-up-credential-managers

Reveal Solution Next Question

Free AZ-400 Exam Braindumps (page: 36)

QUESTION: 141 Exam Topic: Develop a security and compliance plan Questions

Explanation:

Reference:

QUESTION: 142 Exam Topic: Develop a security and compliance plan Questions

Explanation:

Reference:

QUESTION: 143 Exam Topic: Develop a security and compliance plan Questions

Explanation:

Reference:

QUESTION: 144 Exam Topic: Develop a security and compliance plan Questions

Explanation:

Reference: