az-500 5th set

Question 1

when you enable MFA, what should you set?

Answer 1

azure ad conditional access policy

Question 2

while roles has access to delegate access?

Answer 2

owner role

Question 3

which role can onboard Azure AD Identity Protection

Answer 3

global administrator

Question 4

what pieces of information is needed to descript encrypted db in azql sql?

Answer 4

the column encryption key, the column master key

Question 5

what would you need to include in containerized environment to ensure that the application container and the validation container are scheduled to be deployed together. The containers must communicate to each other only on ports that are not externally exposed

Answer 5

container groups. A container group is a collection of containers that get scheduled on the same host machine. The containers in a container group share a lifecycle, resources, local network, and storage volumes. It’s similar in concept to a pod in Kubernetes.

Question 6

What role should you provide to the application developer to register his apps?

Answer 6

Application Developer Role

Question 7

which to storage soltution support keys managed by cleints

Answer 7

blob storage and azure files

Question 8

which license is needed for MFA

Answer 8

Azure AD Premium P2

Question 9

What steps do you need to perform to encrypt a vm?

Answer 9

1) create an azure key vault 2) configure access policies for the key vault 3) run set-azVMDiskEncryptionExtension

Question 10

if you have a VM running on linux what is name of diagnostics collector?

Answer 10

Linux Diagnostic Extension

Question 11

what type of security doyou have on express route?

Answer 11

IPsec and MACsec

Question 12

what two services can create alerts

Answer 12

Azure Monitor and Azure Sentinel