Your company has an on-premises network and an Azure subscription.The company does NOT have a Site-to-Site VPN or an ExpressRoute connection to Azure.You are designing the security standards for Azure App Service web apps. The web apps will access Microsoft SQL Server databases on the network.You need to recommend security standards that will allow the web apps to access the databases. The solution must minimize the number of open internet- accessible endpoints to the on-premises network.What should you include in the recommendation?
HOTSPOT -You need to recommend a solution to meet the compliance requirements.What should you include in the recommendation? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.Hot Area:
HOTSPOT -Your company wants to optimize using Azure to protect its resources from ransomware.You need to recommend which capabilities of Azure Backup and Azure Storage provide the strongest protection against ransomware attacks. The solution must follow Microsoft Security Best Practices.What should you recommend? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.
You are creating an application lifecycle management process based on the Microsoft Security Development Lifecycle (SDL).You need to recommend a security standard for onboarding applications to Azure. The standard will include recommendations for application design, development, and deployment.What should you include during the application design phase?
You have an Azure subscription that has Microsoft Defender for Cloud enabled.You have an Amazon Web Services (AWS) implementation.You plan to extend the Azure security strategy to the AWS implementation. The solution will NOT use Azure Arc.Which three services can you use to provide security for the AWS resources? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point.
You have a Microsoft 365 subscription and an Azure subscription. Microsoft 365 Defender and Microsoft Defender for Cloud are enabled.The Azure subscription contains 50 virtual machines. Each virtual machine runs different applications on Windows Server 2019.You need to recommend a solution to ensure that only authorized applications can run on the virtual machines. If an unauthorized application attempts to run or be installed, the application must be blocked automatically until an administrator authorizes the application.Which security control should you recommend?
