AZ 201-250

HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area: You must have internet connectivity to manage cloud services. You must install a management app to manage cloud services. You can manage cloud services from any modern we browser.

DRAG DROP - Match the Azure service to the correct definition. Instructions: To answer, drag the appropriate Azure service from the column on the left to its description on the right. Each service may be used once, more than once, or not at all. NOTE: Each correct selection is worth one point. Select and Place: Azure Data-bricks. Azure Functions. Azure App Service. Azure Application Insights.

A team of developers at your company plans to deploy, and then remove, 50 customized virtual machines each week. Thirty of the virtual machines run Windows Server 2016 and 20 of the virtual machines run Ubuntu Linux. You need to recommend which Azure service will minimize the administrative effort required to deploy and remove the virtual machines. What should you recommend?. Azure Reserved Virtual Machines (VM) Instances. Azure virtual machine scale sets. Azure DevTest Labs. Microsoft Managed Desktop.

HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area: Azure Power-Shell modules can be installed on macOS. Azure Cloud Shell can be accessed from a web browser on a Linux computer. The Azure portal can only be accessed from a Windows device.

A support engineer plans to perform several Azure management tasks by using the Azure CLI. You install the CLI on a computer. You need to tell the support engineer which tools to use to run the CLI. Which two tools should you instruct the support engineer to use? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point. Command Prompt. Azure Resource Explorer. Windows PowerShell. Windows Defender Firewall. Network and Sharing Center.

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure environment. You need to create a new Azure virtual machine from a tablet that runs the Android operating system. Solution: You use PowerShell in Azure Cloud Shell. Does this meet the goal?. Yes. No.

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure environment. You need to create a new Azure virtual machine from a tablet that runs the Android operating system. Solution: You use the PowerApps portal. Does this meet the goal?. Yes. No.

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure environment. You need to create a new Azure virtual machine from a tablet that runs the Android operating system. Solution: You use the Azure portal. Does this meet the goal?. Yes. No.

HOTSPOT - Select the answer that correctly completes the sentence. Hot Area: The Microsoft 365 Compliance admin center. The Microsoft 365 Defender portal. Microsoft Defender for Cloud in the Azure portal. Microsoft Trust Center.

HOTSPOT - Select the answer that correctly completes the sentence. Hot Area: You can manage an on-premises Windows server as an Azure resource by using.

HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area: You can only manage cloud services from Windows devices. You can manage cloud services from the command line. You can manage cloud services by using a web browser.

HOTSPOT - To complete the sentence, select the appropriate option in the answer area. Hot Area: Azure Data-bricks. Azure Data Factory. Azure DevOps. Azure Synapse Analitics.

HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area: Azure Monitor can monitor the performance of on-premises computers. Azure monitor can send alerts to Azure Active Directory security groups. Azure Monitor can trigger alerts based on data in an Azure Log Analytics workspace.

Which Azure service provides a set of version control tools to manage code?. Azure Repos. Azure DevTest Labs. Azure Storage. Azure Cosmos DB.

HOTSPOT - You need to manage Azure by using Azure Cloud Shell. Which Azure portal icon should you select? To answer, select the appropriate icon in the answer area. Hot Area: Señalar en el icono marcado en verde. You can access Azure Cloud Shell in the Azure portal by clicking the icon.

You have a virtual machine named VM1 that runs Windows Server 2016. VM1 is in the East US Azure region. Which Azure service should you use from the Azure portal to view service failure notifications that can affect the availability of VM1?. Azure Service Fabric. Azure Monitor. Azure virtual machines. Azure Advisor.

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your Azure environment contains multiple Azure virtual machines. You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP. Solution: You modify an Azure Traffic Manager profile. Does this meet the goal?. Yes. No.

Your company plans to deploy several web servers and several database servers to Azure. You need to recommend an Azure solution to limit the types of connections from the web servers to the database servers. What should you include in the recommendation?. network security groups (NSGs). Azure Service Bus. a local network gateway. a route filter.

HOTSPOT - To complete the sentence, select the appropriate option in the answer area. Hot Area: Azure Acces Control IAM. Azure Event Hubs. Azure Activity Log. Azure Service Health.

Which service provides network traffic filtering across multiple Azure subscriptions and virtual networks?. Azure Firewall. an application security group. Azure DDoS protection. a network security group (NSG).

Which Azure service should you use to store certificates?. Azure Security Center. an Azure Storage account. Azure Key Vault. Azure Information Protection.

Which Azure service can you use as a security information and event management (SIEM) solution?. Azure Analysis Services. Azure Sentinel. Azure Information Protection. Azure Cognitive Services.

HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area: Azure Sentinel stores collected events in an Azure Storage account. Azure Sentinel can remediate incidents automatically. Azure Sentinel can collect Windows Defender Firewall logs Azure virtual machines.

DRAG DROP - Match the Azure Services service to the correct descriptions. Instructions: To answer, drag the appropriate service from the column on the left to its description on the right. Each service may be used once, more than once, or not at all. NOTE: Each correct match is worth one point. Select and Place: Azue Active Directory (Azure AD). Azure Key Vault. Azure Lighthouse. Azure Security Center. Azure Sentinel.

HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area: Azure Firewall will encrypt all the network traffic sent from Azure to the Internet. A network security group (NSG) will encrypt all the network traffic sent from Azure to the Internet. Azure virtual machines that run Windows Server 2016 can encrypt network traffic sent to the Internet.

HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area: Azure Security Center can monitor Azure resources and on-premises resources. All Azure Security Center features are free. From Azure Security Center, you can download a Regulatory Compliance report.

DRAG DROP - You need to complete the defense-in-depth strategy used in a datacenter. What should you do? To answer, drag the appropriate layers to the correct positions in the model. Each layer may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point. Select and Place: De arriba hacia abajo. Application Physical_Security Perimeter.

You have an Azure virtual machine named VM1. You plan to encrypt VM1 by using Azure Disk Encryption. Which Azure resource must you create first?. an Azure Storage account. an Azure Key Vault. an Azure Information Protection policy. an Encryption key.

Which resources can be used as a source for a Network security group inbound security rule?. Service Tags only. IP Addresses, Service tags and Application security groups. Application security groups only. IP Addresses only.

HOTSPOT - To complete the sentence, select the appropriate option in the answer area. Hot Area: Azure Sentinel uses playbooks to.

HOTSPOT - To complete the sentence, select the appropriate option in the answer area. Hot Area: Application rules. Network Address Translation (NAT) rules. Network rules. Service tags.

HOTSPOT - To complete the sentence, select the appropriate option in the answer area. Hot Area: Azure distributed denial of service (DDoS) protection is a example of protection that is implemented at the.

You have an Azure Sentinel workspace. You need to automate responses to threats detected by Azure Sentinel. What should you use?. adaptive network hardening in Azure Security Center. Azure Service Health. Azure Monitor workbooks. adaptive application controls in Azure Security Center.

DRAG DROP - Match the Azure services benefits to the correct descriptions. Instructions: To answer, drag the appropriate benefit from the column on the left to its description on the right. Each benefit may be used once, more than once, or not at all. NOTE: Each correct match is worth one point. Select and Place: Azure Active Directory (azureAD). Azure Key Vaut. Azure Lighthouse. Microsoft Defender for Cloud. Microsoft Sentinel.

Which Azure service can you use as a security information and event management (SIEM) solution?. Azure Analysis Services. Microsoft Sentinel. Azure Information Protection. Azure Cognitive Services.

HOTSPOT - Select the answer that correctly completes the sentence. Hot Area: An Azure Policy initiative definition is a.

You have an Azure subscription. You need to review your secure score. What should you use?. Azure Monitor. Azure Advisor. Help + support. Microsoft Defender for Cloud.

HOTSPOT - Select the answer that correctly completes the sentence. Hot Area: You can enable just in time (JIT) VM access by using.

HOTSPOT - Select the answer that correctly completes the sentence. Hot Area: You can view your company's regulatory compliance report from.

You need to collect and automatically analyze security events from Azure Active Directory (Azure AD). What should you use?. Microsoft Sentinel. Azure Synapse Analytics. Azure AD Connect. Azure Key Vault.

HOTSPOT - Select the answer that correctly completes the sentence. Hot Area: Application security groups in Azure. Azure Active Directory (Azure AD). Azure key Vault. Microsoft Defender for Cloud.

HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area: A network security group (NSG) will block all network traffic by default. Application security groups can be specified as part of network security group (NSG) rules. Network security groups (NSGs) always include inbound security rules and outbound security rules.

DRAG DROP - Match the term to the appropriate description. To answer, drag the appropriate term from the column on the left to its description on the right. Each term may be used once, more than once, or not at all. NOTE: Each correct match is worth one point. Select and Place: authorization. multi-factor authentication (MFA). single sign-on (SSO).

Your company plans to automate the deployment of servers to Azure. Your manager is concerned that you may expose administrative credentials during the deployment. You need to recommend an Azure solution that encrypts the administrative credentials during the deployment. What should you include in the recommendation?. Azure Key Vault. Azure Information Protection. Microsoft Defender for Cloud. Azure Multi-Factor Authentication (MFA).

HOTSPOT - Select the answer that correctly completes the sentence. Hot Area: After you create a virtual machine , you need to modify the to allow connections to TCP port 8080 on the virtual machine.

HOTSPOT - Select the answer that correctly completes the sentence. Hot Area: Azure distributed denial of service (DDoS) protection is an example of protection that is implemented at the.

HOTSPOT - Select the answer that correctly completes the sentence. Hot Area: Microsoft Sentinel uses playbooks to.

You need to configure an Azure solution that meets the following requirements: ✑ Secures websites from attacks ✑ Generates reports that contain details of attempted attacks What should you include in the solution?. Azure Firewall. a network security group (NSG). Azure Information Protection. DDoS protection.

HOTSPOT - You plan to implement several security services for an Azure environment. You need to identify which Azure services must be used to meet the following security requirements: ✑ Monitor threats by using sensors ✑ Enforce Azure Multi-Factor Authentication (MFA) based on a condition Which Azure service should you identify for each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area: Monitor threats by using sensors. Enforce Azure MFA based on a condition.

Your Azure environment contains multiple Azure virtual machines. You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP. What are two possible solutions? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point. Modify an Azure Traffic Manager profile. Modify a network security group (NSG). Modify a DDoS protection plan. Modify an Azure firewall.