Question Practice

Question 1

Can an Azure Storage Account have both a public and a private endpoint at the same time?

Answer 1

Yes.
This can be useful, when the data in the storage Account needs to be accessible both internally as well as externally.

Question 2

In IaaS what security responsibility is assumed by the cloud provider?

Answer 2

• Physical host
• physical network
• physical datacenter

Question 3

Which Microsoft Entra ID licenses are made available through Azure?

Answer 3

• Microsoft Entra ID Free
• Microsoft Entra ID P1

Question 4

What is the fastest connection type between on-premise network and Microsoft Azure?

Answer 4

Express Route

Question 5

Which Azure technology allows you to manage virtual machines running in Azure, in your own environment and in other environments such as AWS?

Answer 5

Azure Arc

Question 6

What type of documents does the Microsoft Service Trust Portal provide?

Answer 6

A list of standards that Microsoft follows, pen test results, security assessments, white papers, faqs, and other documents that can be used to show Microsofts compliance efforts

Question 7

Does Azure charge for bandwith used inbound to Azure?

Answer 7

No

Question 8

Why would someone prefer a Consumption-based pricing model as opposed to a Time-based (Fixed) pricing model?

Answer 8

You can save a lot of money if you don’t use the resource often as opposed to having it available for use 24/7

Question 9

What is the purpose of Azure Blueprints?

Answer 9

Allows you to create new subscriptions that already have policies, roles, resource groups, and ARM templates.

Question 10

What can Azure Policy be used for?

Answer 10

To add restrictions on
- storage account SKUs
- virtual machine instance types
- and rules relating to tagging of resources and groups

Question 11

What is an Example for an Azure Sovereign Region?

Answer 11

• Azure US Government
• Azure China

Question 12

True or false: Azure Cloud Shell allows access to the CLI and Powershell consoles in the Azure Portal

Answer 12

True

Question 13

How many availability zones are there in each region (for regions that have them)?

Answer 13

Three

Question 14

What are the features that Microsoft Entra ID provides?

Answer 14

• Application Management
• Authentication
• Business-To-Business
• Business-to-Customer
• Conditional Access
• Device Management
• Domain Services
• Hybrid Identity
• Monitoring and health

Question 15

Which feature within Azure collects all of the logs from various resources into a central dashboard, where you can run queries, view graphs, and create alerts on certain events?

Answer 15

Azure Monitor

Question 16

Which feature within Azure alerts you to service issues that happen in Azure itself, not specifically related to your own resources?

Answer 16

Azure Service Health

Question 17

True of false: Azure Powershell scripts and Command Line Interface (CLI) scripts are entirely compatible with each other?

Answer 17

False

Question 18

What affect does using a “read only” resource lock on a Azure Storage Account have?

Answer 18

The storage account cannot have its properties altered but it doesn’t affect the data itself

Question 19

True or False: Azure is a public cloud, and has no private cloud offerings

Answer 19

False

Some aspects of Azure are not open to the public and require a private agreement with Microsoft such as Azure Government and DoD services

Question 20

What is a core principle of Zero Trust?

Answer 20

Assume your network has been breached already.

This forces you to take a defensive posture even behind the firewall.

• All communications must be encrypted.
• All communications must be authenticated.
• Never assume any request made from a client to a server is authentic.
• Validate everything

Question 21

It can be said that most services in Azure have a public endpoint by default. What is a public endpoint?

Answer 21

Enables access to your data or application from outside the virtual network.

Question 22

Which Azure Resources are required in order to have a virtual machine? Only choose services that are required, not ones that are optional.

Answer 22

• virtual network
• network interface card (NIC)
• storage account