AZ-301 Risk Assessment & Management 3

Question 1

A healthcare organization must perform a risk assessment before migrating to Azure. Which Azure document describes the shared responsibility model that defines Microsoft's vs. the customer's risk obligations?

Accepted Answer

Azure Trust Center / Service Trust Portal

Answer

The Azure Service Trust Portal (trust.microsoft.com) hosts compliance documentation including the shared responsibility model and audit reports.

Question 2

An architect is performing threat modeling for an Azure-hosted web application. Which Microsoft methodology is specifically designed for structuring threat identification in application design?

Accepted Answer

STRIDE

Answer

STRIDE (Spoofing, Tampering, Repudiation, Information disclosure, Denial of service, Elevation of privilege) is Microsoft's threat modeling methodology used in Azure design.

Question 3

A company's risk assessment indicates that insider threats are a significant concern for their Azure environment. Which Azure feature provides behavioral analytics to detect anomalous internal user activity?

Accepted Answer

Microsoft Sentinel with User and Entity Behavior Analytics (UEBA)

Answer

Microsoft Sentinel's UEBA feature creates behavioral baselines and flags anomalous activities by insiders that deviate from normal patterns.

Question 4

During risk quantification, a team needs to calculate the Annual Loss Expectancy (ALE) for an Azure workload. ALE is calculated as:

Accepted Answer

Single Loss Expectancy (SLE) × Annualized Rate of Occurrence (ARO)

Answer

ALE = SLE × ARO, where SLE is the loss from a single incident and ARO is how often the incident is expected per year.

Question 5

An organization wants to reduce the risk of Azure subscription sprawl and uncontrolled resource creation. Which management hierarchy feature enforces governance across multiple subscriptions?

Accepted Answer

Azure Management Groups with Azure Policy

Answer

Azure Management Groups allow you to apply Azure Policy and RBAC across multiple subscriptions, enforcing consistent governance to control sprawl risk.

AZ-301 - Microsoft Azure Solutions Architect Expert Practice Test

AZ-301 - Microsoft Azure Solutions Architect Expert Practice Test

AZ-301 Risk Assessment & Management 3