Free AZ-900 Exam Braindumps (page: 64)

Page 64 of 113

You have an Azure environment that contains 10 virtual networks and 100 virtual machines.
You need to limit the amount of inbound traffic to all the Azure virtual networks.
What should you create?

  1. one application security group (ASG)
  2. 10 virtual network gateways
  3. 10 Azure ExpressRoute circuits
  4. one Azure firewall

Answer(s): D

Explanation:

You can restrict traffic to multiple virtual networks with a single Azure firewall.
Azure Firewall is a managed, cloud-based network security service that protects your Azure Virtual Network resources. It's a fully stateful firewall as a service with built-in high availability and unrestricted cloud scalability. You can centrally create, enforce, and log application and network connectivity policies across subscriptions and virtual networks. Azure Firewall uses a static public IP address for your virtual network resources allowing outside firewalls to identify traffic originating from your virtual network.

References:
https://docs.microsoft.com/en-us/azure/firewall/overview


Reference:

References:
https://docs.microsoft.com/en-us/azure/firewall/overview



This question requires that you evaluate the underlined text to determine if it is correct.
Azure Key Vault is used to store secrets for Azure Active Directory (Azure AD) user accounts.

Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If the statement is incorrect, select the answer choice that makes the statement correct.

  1. No change is needed
  2. Azure Active Directory (Azure AD) administrative accounts
  3. Personally Identifiable Information (PII)
  4. server applications

Answer(s): D

Explanation:

Key Vault is designed to store configuration secrets for server apps. It's not intended for storing data belonging to your app's users, and it shouldn't be used in the client-side part of an app.


Reference:

https://docs.microsoft.com/en-us/learn/modules/manage-secrets-with-azure-key-vault/2-what-is-key-vault https://docs.microsoft.com/en-us/azure/key-vault/key-vault-overview https://docs.microsoft.com/en-us/learn/modules/manage-secrets-with-azure-key-vault/



Your company plans to automate the deployment of servers to Azure.
Your manager is concerned that you may expose administrative credentials during the deployment.
You need to recommend an Azure solution that encrypts the administrative credentials during the deployment.
What should you include in the recommendation?

  1. Azure Key Vault
  2. Azure Information Protection
  3. Azure Security Center
  4. Azure Multi-Factor Authentication (MFA)

Answer(s): A

Explanation:

Azure Key Vault is a secure store for storage various types of sensitive information. In this question, we would store the administrative credentials in the Key Vault. With this solution, there is no need to store the administrative credentials as plain text in the deployment scripts.

All information stored in the Key Vault is encrypted.
Azure Key Vault can be used to Securely store and tightly control access to tokens, passwords, certificates, API keys, and other secrets.

Secrets and keys are safeguarded by Azure, using industry-standard algorithms, key lengths, and hardware security modules (HSMs). The HSMs used are Federal Information Processing Standards (FIPS) 140-2 Level 2 validated.

Access to a key vault requires proper authentication and authorization before a caller (user or application) can get access. Authentication establishes the identity of the caller, while authorization determines the operations that they are allowed to perform.

References:
https://docs.microsoft.com/en-us/azure/key-vault/key-vault-overview


Reference:

References:
https://docs.microsoft.com/en-us/azure/key-vault/key-vault-overview



You plan to deploy several Azure virtual machines.
You need to control the ports that devices on the Internet can use to access the virtual machines.
What should you use?

  1. a network security group (NSG)
  2. an Azure Active Directory (Azure AD) role
  3. an Azure Active Directory group
  4. an Azure key vault

Answer(s): A

Explanation:

A network security group works like a firewall. You can attach a network security group to a virtual network and/or individual subnets within the virtual network. You can also attach a network security group to a network interface assigned to a virtual machine. You can use multiple network security groups within a virtual network to restrict traffic between resources such as virtual machines and subnets.

You can filter network traffic to and from Azure resources in an Azure virtual network with a network security group. A network security group contains security rules that allow or deny inbound network traffic to, or outbound network traffic from, several types of Azure resources.

References:
https://docs.microsoft.com/en-us/azure/virtual-network/security-overview


Reference:

References:
https://docs.microsoft.com/en-us/azure/virtual-network/security-overview



Page 64 of 113



Post your Comments and Discuss Microsoft AZ-900 exam with other Community members:

Ritesh commented on December 10, 2024
Good content
Anonymous
upvote

Shean commented on November 30, 2024
Great deal of Friday deal of 50% off. Got my 3 exams and download the PDF files.
NETHERLANDS
upvote

Juan Alvarez commented on November 29, 2024
Good content
Anonymous
upvote

Ganapathy commented on November 26, 2024
Cam wr study and pass this Microsoft AZ-900 exam in India
Anonymous
upvote

sat commented on November 25, 2024
good content
Anonymous
upvote

mirnat Lime commented on November 25, 2024
I passed my exam using this Website. The Best and most accurate exam questions and answers are provided.
Anonymous
upvote

Shu commented on November 19, 2024
Considerably good.
UNITED STATES
upvote

Dag Alytus commented on November 15, 2024
This is helpful
UNITED STATES
upvote

Tina commented on November 08, 2024
Looks helpful
Anonymous
upvote

Emmanuel commented on November 04, 2024
Can a person pass AZ900 just by using this site only ?
SOUTH AFRICA
upvote

Preston commented on October 26, 2024
Hope everyone is having a wonderful day. I am because I just passed my exam. Sharing my insight... this exam dump has lots of questions from the real exam. But the exam is not easy. So I need to say that you must study hard to pass.
UNITED STATES
upvote

Shree commented on October 25, 2024
recomendeds . Thanks
Anonymous
upvote

Chris commented on October 23, 2024
Is this site currently valid for the AZ-900 exam as of October 23, 2024?
Anonymous
upvote

Jay commented on October 20, 2024
Interesting selection of questions
GREECE
upvote

Faruk commented on October 17, 2024
is free content is enough for pas az-900 ?
Anonymous
upvote

Keketso commented on October 16, 2024
This is a valuable resource for Az-900, i think
Anonymous
upvote

Rajesh K commented on October 16, 2024
fantastic contents provided by free braindumps, it is improving my accuracy.
Anonymous
upvote

raj singh commented on October 16, 2024
This is a good resource for az-900, go for it.
INDIA
upvote

Jawad commented on October 15, 2024
This is valuable resource for Az-900, i think
Anonymous
upvote

Faruk commented on October 14, 2024
This is valuable resource for Az-900, i think
Anonymous
upvote

Harry commented on October 09, 2024
This platform is the best out of the exam dumps sites. I love it.
UNITED STATES
upvote

Brook commented on October 06, 2024
Great While free AZ-900 exam braindumps might seem tempting, they often come with risks like outdated information or inaccuracies. Investing in reliable study materials, like those from this site ensures you get the latest and most accurate content to help you succeed.
Anonymous
upvote

NJ commented on October 04, 2024
Good Study Material
UNITED STATES
upvote

Ashok Kumar commented on October 03, 2024
Very good content to prep
UNITED STATES
upvote

Saurabh commented on October 03, 2024
Super Course to go ahead
INDIA
upvote

Tanu commented on September 24, 2024
Great study material to prepare for the exam
Anonymous
upvote

Tim commented on September 24, 2024
I recently used this site for my certification prep, and I’m thrilled with the outcome! The exam dumps were thorough and mirrored the actual exam content perfectly. I felt confident and well-prepared, ultimately passing with ease! I highly recommend this site to anyone aiming to succeed in their certification exams!
UNITED STATES
upvote

Joachim commented on September 24, 2024
While free AZ-900 exam braindumps might seem tempting, they often come with risks like outdated information or inaccuracies. Investing in reliable study materials, like those from this site ensures you get the latest and most accurate content to help you succeed.
UNITED STATES
upvote

Venkat commented on September 23, 2024
I am preparing for exam. It looks nice material
UNITED STATES
upvote

Brien commented on September 21, 2024
I passed my az-900 last month and I prepared myself for the exam from this site. The study material was very helpful
UNITED STATES
upvote

Cris Costa Rica commented on September 18, 2024
Great practice for the examn
Anonymous
upvote

Mazin commented on September 18, 2024
Is this still valid? I am having the exam on 21 Sept.
JORDAN
upvote

Modix commented on September 12, 2024
Thrilled to tell you that Certsleader_com helped me to passed my Az-900 exam with good score.
UNITED STATES
upvote

Octávio commented on September 04, 2024
Muito bom os testes.
ANGOLA
upvote