AZ-301 Identity & Security Solutions 2

Question 1

An architect is designing a solution where encryption keys must be managed by the customer and stored on-premises, never uploaded to Azure. Which Azure storage encryption option supports this requirement?

Accepted Answer

Customer-provided keys (SSE-C)

Answer

Customer-provided keys (SSE-C) allows clients to supply their own encryption keys with each storage request, keeping keys entirely under their control outside Azure.

Question 2

A financial company needs to detect and prevent sensitive data (PII, credit card numbers) from leaving their Azure environment via emails or uploads. Which Azure service provides this Data Loss Prevention capability?

Accepted Answer

Microsoft Purview (Information Protection)

Answer

Microsoft Purview Information Protection provides DLP policies to detect and prevent sensitive data exfiltration across Microsoft 365 and Azure services.

Question 3

An architect needs to implement network micro-segmentation within an Azure virtual network to control traffic between individual VMs without using separate subnets. Which feature enables this?

Accepted Answer

Application Security Groups

Answer

Application Security Groups (ASGs) allow logical grouping of VMs and define NSG rules based on application workloads rather than explicit IP addresses.

Question 4

A company requires that all Azure virtual machine OS and data disks are encrypted using customer-managed keys stored in Azure Key Vault. Which service provides this OS-level disk encryption?

Accepted Answer

Azure Disk Encryption (ADE)

Answer

Azure Disk Encryption uses BitLocker (Windows) or DM-Crypt (Linux) to encrypt VM OS and data disks with keys stored in Azure Key Vault.

Question 5

An architect is designing a security solution for Azure and needs centralized threat detection, security alerts, and automated response across all Azure subscriptions. Which service provides a SIEM/SOAR solution?

Accepted Answer

Microsoft Sentinel

Answer

Microsoft Sentinel is Azure's cloud-native SIEM and SOAR solution that provides intelligent security analytics, threat detection, and automated incident response.

AZ-301 - Microsoft Azure Solutions Architect Expert Practice Test

AZ-301 - Microsoft Azure Solutions Architect Expert Practice Test

AZ-301 Identity & Security Solutions 2