The latest Microsoft AZ-900 Azure Fundamentals certification actual real practice exam question and answer (Q&A) dumps are available free, which are helpful for you to pass the Microsoft AZ-900 Azure Fundamentals exam and earn Microsoft AZ-900 Azure Fundamentals certification.
Question 171
Your company has an Azure subscription that contains the following unused resources:
- 20 user accounts in Azure Active Directory (Azure AD)
- Five groups in Azure AD
- 10 public IP addresses
- 10 network interfaces
You need to reduce the Azure costs for the company.
Which unused resources should you remove?
A. the network interfaces
B. the groups
* C. the public IP addresses
D. the user accounts
Question 172
Azure Security Center can monitor Azure resources and on-premises resources.
* A. Yes
B. No
Explanation
Azure Security Center is a unified infrastructure security management system that strengthens the security posture of your data centers, and provides advanced threat protection across your hybrid workloads in the cloud – whether they’re in Azure or not – as well as on premises.
Question 173
All Azure Security Center features are free.
A. Yes
* B. No
Explanation
Only two features: Continuous assessment and security recommendations, and Azure secure score, are free.
Question 174
From Azure Security Center, you can download a Regulatory Compliance report.
* A. Yes
B. No
Explanation
The advanced monitoring capabilities in Security Center also let you track and manage compliance and governance over time. The overall compliance provides you with a measure of how much your subscriptions are compliant with policies associated with your workload.
Question 175
You need to request that Microsoft increase a subscription quota limit for your company.
Which blade should you use from the Azure portal? To answer, select the appropriate blade in the answer area.
Answer: Help + support.
Question 176
You plan to implement several security services for an Azure environment.
You need to identify which Azure services must be used to meet the following security requirements:
- Monitor threats by using sensors
- Enforce Azure Multi-Factor Authentication (MFA) based on a condition
Which Azure service should you identify for each requirement? To answer, select the appropriate option in the answer area.
NOTE: Each correct selection is worth one point.
A. Azure Monitor
B. Azure Security Center
C. Acure Active Directory (Azure AD) Identity Protection
* D. Azure Advanced Threat Protection (ATP)
Explanation
Azure Advanced Threat Protection (ATP) is a cloud-based security solution that leverages your on-premises Active Directory signals to identify, detect, and investigate advanced threats, compromised identities, and malicious insider actions directed at your organization. Sensors are software packages you install on your servers to upload information to Azure ATP.
Azure Active Directory (Azure AD) Identity Protection: Enforce Azure Multi-Factor Authentication (MFA) based on a condition. Azure AD Identity Protection helps you manage the roll-out of Azure Multi-Factor Authentication (MFA) registration by configuring a Conditional Access policy to require MFA registration no matter what modern authentication app you are signing in to.
Question 177
An Azure subscription can have multiple account administrators.
* A. Yes
B. No
Question 178
An Azure subscription can be managed by using a Microsoft account only.
* A. Yes
B. No
Question 179
An Azure resource group can contain multiple Azure subscription.
A. Yes
* B. No
Question 180
Your Azure environment contains multiple Azure virtual machines.
You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP.
What are two possible solutions? Each correct answer presents a complete solution.
* A. You modify an Azure firewall.
B. You modify an Azure Traffic Manager profile.
C. You modify a DDoS protection plan.
* D. Modify a network security group (NGS)