QUESTION: 89

Which security feature is available in the free mode of Microsoft Defender for Cloud?

threat protection alerts
just-in-time (JIT) VM access to Azure virtual machines
vulnerability scanning of virtual machines
secure score

Answer(s): D

Explanation:

Basic security features (Free) - When you open Defender for Cloud in the Azure portal for the first time or if you enable it through the API, Defender for Cloud is enabled for free on all your Azure subscriptions. By default, Defender for Cloud provides the secure score, security policy and basic recommendations, and network security assessment to help you protect your Azure resources.

Reference:

https://docs.microsoft.com/en-us/azure/defender-for-cloud/enhanced-security-features-overview

Reveal Solution Next Question

QUESTION: 90

DRAG DROP (Drag and Drop is not supported)
Match the Azure networking service to the appropriate description.

To answer, drag the appropriate service from the column on the left to its description on the right. Each service may be used once, more than once, or not at all.

NOTE: Each correct match is worth one point.

See Explanation section for answer.

Answer(s): A

Explanation:

Box 1: Azure Firewall
Azure Firewall provide Source Network Address Translation and Destination Network Address Translation.

Box 2: Azure Bastion
Azure Bastion provides secure and seamless RDP/SSH connectivity to your virtual machines directly from the Azure portal over TLS.

Box 3: Network security group (NSG)
You can use an Azure network security group to filter network traffic to and from Azure resources in an Azure virtual network.

Reference:

https://docs.microsoft.com/en-us/azure/networking/fundamentals/networking-overview https://docs.microsoft.com/en-us/azure/bastion/bastion-overview https://docs.microsoft.com/en- us/azure/firewall/features
https://docs.microsoft.com/en-us/azure/virtual-network/network-security-groups-overview

Reveal Solution Next Question

QUESTION: 91

HOTSPOT (Drag and Drop is not supported)
Select the answer that correctly completes the sentence.

See Explanation section for answer.

Answer(s): A

Explanation:

Microsoft Azure Sentinel is a scalable, cloud-native, security information event management (SIEM) and security orchestration automated response (SOAR) solution.

Reference:

https://docs.microsoft.com/en-us/azure/sentinel/overview

Reveal Solution Next Question

QUESTION: 92

HOTSPOT (Drag and Drop is not supported)
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

See Explanation section for answer.

Answer(s): A

Explanation:

Box 1: Yes
Microsoft Defender for Cloud provides security alerts and advanced threat protection for virtual machines, SQL databases, containers, web applications, your network, your storage, and more

Box 2: Yes
Cloud security posture management (CSPM) is available for free to all Azure users.

Box 3: Yes
Azure Security Center is a unified infrastructure security management system that strengthens the security posture of your data centers, and provides advanced threat protection across your hybrid workloads in the cloud - whether they're in Azure or not - as well as on premises.

Reference:

https://docs.microsoft.com/en-us/azure/security-center/azure-defender
https://docs.microsoft.com/en-us/azure/security-center/defender-for-storage-introduction

https://docs.microsoft.com/en-us/azure/security-center/security-center-introduction

Reveal Solution Next Question

Free SC-900 Exam Braindumps (page: 24)

QUESTION: 89

Explanation:

Reference:

QUESTION: 90

Explanation:

Reference:

QUESTION: 91

Explanation:

Reference:

QUESTION: 92

Explanation:

Reference:

SC-900 Discussions & Posts