AZ-301 Risk Assessment & Management 2

Question 1

A financial services company needs to assess the risk of storing sensitive customer data in Azure Blob Storage. Which Azure service provides continuous compliance assessment and security score?

Accepted Answer

Microsoft Defender for Cloud

Answer

Microsoft Defender for Cloud provides a continuous security assessment with a Secure Score that tracks your compliance posture and identifies risks.

Question 2

An architect is designing a risk management strategy for an Azure deployment. Which framework does Microsoft recommend for evaluating cloud risks aligned with industry standards?

Accepted Answer

Cloud Adoption Framework (CAF)

Answer

Microsoft's Cloud Adoption Framework (CAF) includes governance and risk management guidance aligned with industry standards for Azure deployments.

Question 3

A company wants to ensure that only compliant Azure resources are deployed. Which Azure feature allows you to define rules that evaluate resource properties against business requirements?

Accepted Answer

Azure Policy

Answer

Azure Policy defines and enforces rules that evaluate resource properties to ensure they meet organizational compliance and risk standards.

Question 4

During a risk assessment, a team identifies that a critical VM could be unavailable due to Azure datacenter failure. What is the BEST architecture mitigation for this availability risk?

Accepted Answer

Deploy VMs across Availability Zones

Answer

Deploying VMs across Availability Zones distributes them across physically separate datacenters, protecting against single-datacenter failures.

Question 5

An organization's risk register identifies unauthorized access to Azure Key Vault secrets as a high-risk item. Which control BEST mitigates this risk?

Accepted Answer

Use Key Vault firewall and virtual network service endpoints

Answer

Key Vault firewall and virtual network service endpoints restrict access to Key Vault to specific trusted networks, directly mitigating unauthorized access risk.

AZ-301 - Microsoft Azure Solutions Architect Expert Practice Test

AZ-301 - Microsoft Azure Solutions Architect Expert Practice Test

AZ-301 Risk Assessment & Management 2