Chapter 2: Platform Protection (Alan R)

Question 1

Your company has the following Infrastructure in place. There are 3 Azure virtual networks. appvm1 and appvm2 are part of app-network1. appvm3 is part of app-network2. And appvm4 is part of app-network3. There are virtual network peering connections across all networks.

An Azure bastion host is deployed to app-network3.

Can you use the Azure bastion host to connect to appvm1?

A. Yes
B. No

Answer 1

A. Yes

Explanation:
Azure Bastion hosts can be used to connect to virtual machines in peered virtual networks

Question 2

Your development team is deploying an application to the Azure Web App service. They want to protect the web application against Internet-based attacks such as cross-site scripting attacks. Which of the following can be done to achieve this requirement?

A. Deploy an Azure Bastion Host in front of the web app
B. Deploy an Azure Firewall in front of the web app
C. Deploy an Azure Front Door in front of the web app

Answer 2

C. Deploy an Azure Front Door in front of the web app

Explanation:
One solution is to deploy the Azure Front Door service in front of the web application. You can then use the Web Application Firewall in Azure Front Door to protect the web application

Question 3

Can you deploy the update management to virtual machines in a stopped state?

A. Yes
B. No

Answer 3

B. No

Explanation:
The machine needs to be in the started state to apply Update Management

Question 4

Does Update management support both Windows and Linux?

A. Yes
B. No

Answer 4

A. Yes

Explanation:
Yes, both Windows and Linux-based systems are supported by Update Management.

Question 5

Your company needs to deploy an application that is based on containers. The containers need to be deployed to Azure Container Instances. The application consists of two containers. One container hosts a web application. And the other hosts a database server. The web application talks to the database server. You have to ensure that the containers are deployed together. You also need to ensure that the database container ports are not exposed to the Internet. Which of the following would you include in the deployment of this solution?

A. Application Security Groups
B. Network Security Groups
C. Container Groups
D. Virtual Network Peering

Answer 5

C. Container Groups

Explanation:
Here you can deploy the containers as part of a container group. For more information on container groups, one can visit the below URL - https://docs.microsoft.com/en-us/azure/container-instances/container-instances-container-groups