AZ-900 TEST-10

You need to ensure that when Azure Active Directory (Azure AD) users connect to Azure AD from the Internet by using an anonymous IP address, the users are prompted automatically to change their password. Which Azure service should you use?. Azure AD Connect Health. Azure AD Privileged Identity Management. Azure Advanced Threat Protection (ATP). Azure AD Identity Protection.

DRAG DROP - Match the term to the correct definition. Instructions: To answer, drag the appropriate term form the column on the left to its description on the right. Each term may be used once, or not at all. NOTE: Each correct match is worth one point. Select and Place: Azure Government. GDPR. ISO. NIST.

To what should an application connect to retrieve security tokens?. an Azure Storage account. Azure Active Directory (Azure AD). a certificate store. an Azure key vault.

Your network contains an Active Directory forest. The forest contains 5,000 user accounts. Your company plans to migrate all network resources to Azure and to decommission the on-premises data center. You need to recommend a solution to minimize the impact on users after the planned migration. What should you recommend?. Implement Azure Multi-Factor Authentication (MEA). Sync all the Active Directory user accounts to Azure Active Directory (Azure AD). Instruct all users to change their password. Create a guest user account in Azure Active Directory (Azure AD) for each user.

For each of the following statements, select Yes if the statement is true. Othenwise, select No. NOTE: Each correct selection is worth one point. Hot Área: You can configure the Azure Active Directory (Azure AD) activity logs to appear in Azure Monitor. From Azure Monitor, you can monitor resources across multiple Azure subscriptions. From Azure Monitor, you can create alerts.

You create a resource group named RG1 in Azure Resource Manager. You need to prevent the accidental deletion of the resources in RG1. Which setting should you use? To answer, select the appropriate setting in the answer area. Hot Area:

You have a resource group named RG1. You need to prevent the creation of virtual machines in RG1. The solution must ensure that other objects can be created in RG1. What should you use?. a lock. an Azure role. a tag. an Azure policy.

You have an Azure subscription and 100 Windows 10 devices. You need to ensure that only users whose devices have the latest security patches installed can access Azure Active Directory (Azure AD)-integrated applications. What should you implement?. a conditional access policy. Azure Bastion. Azure firewall. Azure policy.

What can Azure Information Protection encrypt?. network traffic. documents and email messages. an Azure Storage accont. an Azure SQL database.

What should you use to evaluate whether your company's Azure environment meets regulatory requirements?. the Knowledge Center website. the Advisor blade from the Azure portal. Compilance Manager from the service Trust Portal. the Solutions blade from the Azure portal.

To complete the sentence, select the appropriate option in the answer area. Hot Area: "______________" enables users to authenticate to multiple Application security groups in Azure applications by using single sign-on (SSO). application security groups in Azure. Azure Active Directory (Azure AD). Azure Key Vault. Azure Security Center.

You have an Azure subscription. Where will you find details on the personal data collected by Microsoft, how Microsoft uses the data, and what the data is used for?. the Data Protection Addendum. the Microsoft Online Services Terms. the Microsoft Privacity Statement. Azure Security Center.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Azure Active Directory (Azure AD) can be used to manage access to on-premises applications. Azure Active Directory (Azure AD) provides single sign-on (SSO). IOS devices can be registered in Azure Active Directory (Azure AD).

To complete the sentence, select the appropriate option in the answer area. Hot Area: You have an Azure virtual network named VNET1 in a resource group named RG1. You assign the Azure Policy definition of Not Allowed Resource Type and specify that virtual networks are not an allowed resource type in RG1. VNET1 "_________________". is delete automatically. is moved automatically to another resource group. continues to function normally. is now a read-only object.

For each of the following statements, select Yes ¡f the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area: Trust Center is part of the Azure Security Center. Trust Center can only be accessed by users that have an Azure subscription. Trust Center provides information about the Azure compliance offerings.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area: You can use Azure Policy to apply tags to resources. You can add multiple tags to the same Azure resource. An Azure resource inherits tags from the resource group to which the resource is deployed.

DRAG DROP - Match the resources to the appropriate descriptions. To answer, drag the appropriate resource from the column on the left to its description on the right. Each resource may be used once, more than once, or not atall. NOTE: Each correct match is worth one point. Data Protection Addendum. Microsoft Privacity Statement. Online Services Terms.

Select the answer that correctly completes the sentence. Hot Area: Requiring a user to enter a password and answer a security question when signing-in to Azure Active Directory (Azure AD) is an example of "_______________________". business-to-customer (B2C) identity services. managed identities. multi-factor authentication(MFA). role-based access control (RBAC).

Select the answer that correctly completes the sentence. Hot Area: is operated by Microsoft. has feature parity whith azure global. services can be accessed from China only. is a distinct separate instance of Microsoft Azure.

What should you use to evaluate whether your company's Azure environment meets regulatory requirements?. Azure Service Health. Azure Dean Center. Microsoft Defender for Cloud. Azure Advisor.

Select the answer that correctly completes the sentence. Hot Area: You can review audit reports and compliance-related information for Azure services from "___________________". Microsoft Defender for Cloud. the Microsoft Defender for Identity admin center. the Microsoft 365 Compliance center. the Microsoft Service Trust Portal.

HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. The Microsoft Service Trust Portal can be accessed by using a Microsoft cloud services account. Compliance Manager can be used to track your company's regulatory compliance activities related to Microsoft cloud services. The My Library feature can be used to save Microsoft Service Trust Portal documents and resources in a single location.

Your company has an Azure subscription that contains resources in several regions. You need to create the Azure resource that must be used to meet the policy requirement. What should you create?. a read-only lock. an Azure policy. a management group. a reservation.

This question requires that you evaluate the undefined text to determinate if is correct. From Azure Cloud Shell,you can track your company´s regulatory standards and regulations,such as ISO27001. Instructions: Review the undefined text. if it makes the statement correct,select `No change is needed.` if the statement is incorrect, select the answer choice that makes the statement correct. No changes needed. the Microsoft Cloud Partner Portal. Compilance Manager. the Trust Center.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. You can create Group Polices in Azure Active Directory (Azure AD). You can join Windows 10 devices to Azure Active Directory (Azure AD). You can join Android devices to Azure Active Directory (Azure AD).

To complete the sentence, select the appropriate option in the answer area Hot Area: The "____________________" explains what data Microsoft processes, how Microsoft processes the data, and the purpose of processing the data. Microsoft Online Service Privacity Statement. Microsoft Product Terms. Microsoft Online Service Level Agreement. Online Subscription Agreement for Microsoft Azure.

To complete the sentence, select the appropriate option in the answer area, Hot Area: An Azure Policy initiative definition is a "____________________". Authorization. Authentication. Federation. Ticketing.

To complete the sentence, select the appropriate option in the answer area. Hot Area: Answer Area "_________________" provide organizations with the ability to manage the compliance of Azure resources across multiple subscriptions. Resource groups. Management groups. Azure polices. Azure App Service plans.

HOTSPOT - For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area: General Data Protection Regulation (GDPR) defines data protection and privacy rules. General Data Protection Regulation (GDPR) applies to companies that offer goods or services to individuals in the EU. Azure can be used to build a General Data Protection Regulation (GDPR)-compliant infrastructure.

HOTSPOT - To complete the sentence, select the appropriate option in the answer area. Hot Area: Answer Area An Azure Policy initiative definition is a "______________". collection of policy definitions. collection of Azure Policy definition assignments. group of Azure Blueprints definitions. group of role-based access control (RBAC) role assignments.