QUESTION: 49 Exam Topic: Manage security operations questions

You have an Azure environment.
You need to identify any Azure configurations and workloads that are non-compliant with ISO 27001:2013 standards.
What should you use?

Azure Sentinel
Azure Active Directory (Azure AD) Identity Protection
Microsoft Defender for Cloud
Microsoft Defender for Identity

Answer(s): C

Explanation:

Reference:

https://docs.microsoft.com/en-us/azure/security-center/security-center-compliance-dashboard

Reveal Solution Next Question

QUESTION: 50 Exam Topic: Manage security operations questions

DRAG DROP (Drag and Drop is not supported) (Drag and Drop is not supported)
You have an Azure subscription that contains 100 virtual machines. Azure Diagnostics is enabled on all the virtual machines.
You are planning the monitoring of Azure services in the subscription.
You need to retrieve the following details:
-Identify the user who deleted a virtual machine three weeks ago.
-Query the security events of a virtual machine that runs Windows Server 2016.
What should you use in Azure Monitor? To answer, drag the appropriate configuration settings to the correct details. Each configuration setting may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Select and Place:

See Explanation section for answer.

Answer(s): A

Explanation:

Box1: Activity log
Azure activity logs provide insight into the operations that were performed on resources in your subscription. Activity logs were previously known as ג€audit logsג€ or
ג€operational logs,ג€ because they report control-plane events for your subscriptions.
Activity logs help you determine the ג€what, who, and whenג€ for write operations (that is, PUT, POST, or DELETE).
Box 2: Logs
Log Integration collects Azure diagnostics from your Windows virtual machines, Azure activity logs, Azure Security Center alerts, and Azure resource provider logs. This integration provides a unified dashboard for all your assets, whether they're on-premises or in the cloud, so that you can aggregate, correlate, analyze, and alert for security events.

Reference:

https://docs.microsoft.com/en-us/azure/security/azure-log-audit

Reveal Solution Next Question

QUESTION: 51 Exam Topic: Manage security operations questions

HOTSPOT (Drag and Drop is not supported) (Drag and Drop is not supported)
You have an Azure subscription that contains the resources shown in the following table.
VM1 and VM2 are stopped.
You create an alert rule that has the following settings:
-Resource: RG1
-Condition: All Administrative operations
-Actions: Action groups configured for this alert rule: ActionGroup1
-Alert rule name: Alert1
You create an action rule that has the following settings:
-Scope: VM1
-Filter criteria: Resource Type = "Virtual Machines"
-Define on this scope: Suppression
-Suppression config: From now (always)
-Name: ActionRule1
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
Note: Each correct selection is worth one point.
Hot Area:

See Explanation section for answer.

Answer(s): A

Explanation:

Box 1:
The scope for the action rule is set to VM1 and is set to suppress alerts indefinitely.
Box 2:
The scope for the action rule is not set to VM2.
Box 3:
Adding a tag is not an administrative operation.
References:
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/alerts-activity-log https://docs.microsoft.com/en-us/azure/azure-monitor/platform/alerts-action-rules

Reference:

References:
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/alerts-activity-log https://docs.microsoft.com/en-us/azure/azure-monitor/platform/alerts-action-rules

Reveal Solution Next Question

QUESTION: 52 Exam Topic: Manage security operations questions

DRAG DROP (Drag and Drop is not supported) (Drag and Drop is not supported)
You have an Azure subscription named Sub1 that contains an Azure Log Analytics workspace named LAW1.
You have 500 Azure virtual machines that run Windows Server 2016 and are enrolled in LAW1.
You plan to add the System Update Assessment solution to LAW1.
You need to ensure that System Update Assessment-related logs are uploaded to LAW1 from 100 of the virtual machines only.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Select and Place:

See Explanation section for answer.

Answer(s): A

Explanation:

Reference:

https://docs.microsoft.com/en-us/azure/azure-monitor/insights/solution-targeting

Reveal Solution Next Question

Free AZ-500 Exam Braindumps (page: 59)

QUESTION: 49 Exam Topic: Manage security operations questions

Explanation:

Reference:

QUESTION: 50 Exam Topic: Manage security operations questions

Explanation:

Reference:

QUESTION: 51 Exam Topic: Manage security operations questions

Explanation:

Reference:

QUESTION: 52 Exam Topic: Manage security operations questions

Explanation:

Reference: