You need to recommend which virtual machines to use to host App1. The solution must meet the technical requirements for KeyVault1. Which virtual machines should you use?
Question 412
HOTSPOT - You have an Azure subscription that contains the resources shown in the following table. You create a shared access token as shown in the following exhibit. Which resources can you access by using the shared access token and Key1? To answer, select the appropriate options in the answer area. NOTE: Each correct answer is worth one point.
Question 413
You have an Azure subscription that contains an Azure SQL server named SQL1. SQL1 contains an Azure SQL database named DB1. You need to use Microsoft Defender for Cloud to complete a vulnerability assessment for DB1. What should you do first?
Question 414
HOTSPOT - You have an Azure subscription that contains the resources shown in the following table. SQL1 has the following configurations: • Auditing: Enabled • Audit log destination: storage1, Workspace1 DB1 has the following configurations: • Auditing: Enabled • Audit log destination: storage2 DB2 has auditing disabled. Where are the audit logs for DB1 and DB2 stored? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
Question 415
SIMULATION - You need to prevent HTTP connections to the rg1lod28681041n1 Azure Storage account. To complete this task, sign in to the Azure portal.
Question 416
HOTSPOT - You have an Azure subscription that contains the virtual machines shown in the following table. You have an Azure Cosmos DB account named cosmos1 configured as shown in the following exhibit. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.
Question 417
You are troubleshooting a security issue for an Azure Storage account. You enable Azure Storage Analytics logs and archive it to a storage account. What should you use to retrieve the diagnostics logs?
Question 418
You have an Azure subscription that contains an Azure Blob storage account named blob1. You need to configure attribute-based access control (ABAC) for blob1. Which attributes can you use in access conditions?
Question 419
You have an Azure subscription that contains a storage account and an Azure web app named App1. App1 connects to an Azure Cosmos DB database named Cosmos1 that uses a private endpoint named Endpoint1. Endpoint1 has the default settings. You need to validate the name resolution to Cosmos1. Which DNS zone should you use?
Question 420
You need to configure WebApp1 to meet the data and application requirements. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
A: To configure Certificates for use in Azure Websites Applications you need to upload a public Certificate. C: Over time, multiple versions of TLS have been released to mitigate different vulnerabilities. TLS 1.2 is the most current version available for apps running on Azure App Service. Incorrect Answers: B: We need support the http url as well. Note: References: https://docs.microsoft.com/en-us/azure/app-service/app-service-web-configure-tls-mutual-auth https://azure.microsoft.com/en-us/updates/app-service-and-functions-hosted-apps-can-now-update-tls-versions/