AZ-301 Risk Assessment & Management 4

Question 1

A company performs a risk assessment and determines that their Azure workloads face significant DDoS risk. Which Azure service provides adaptive DDoS mitigation with attack analytics and telemetry?

Accepted Answer

Azure DDoS Protection Standard

Answer

Azure DDoS Protection Standard provides adaptive tuning, attack mitigation reports, and telemetry specifically designed to counter volumetric DDoS attacks.

Question 2

An organization's risk policy requires that all privileged Azure AD role assignments be time-limited. Which Azure AD feature enforces just-in-time privileged access to reduce standing access risk?

Accepted Answer

Azure AD Privileged Identity Management (PIM)

Answer

Azure AD PIM provides just-in-time privileged access, requiring users to activate roles for a limited time, reducing the risk from persistent privileged accounts.

Question 3

A risk register entry states: 'Risk of using deprecated TLS versions on Azure App Service.' Which Azure Policy built-in initiative directly addresses this risk?

Accepted Answer

Azure Security Benchmark – Restrict minimum TLS version

Answer

The Azure Security Benchmark includes a built-in policy to enforce minimum TLS versions on App Service, directly mitigating deprecated protocol risk.

Question 4

During a risk assessment workshop, your team identifies that Azure Logic Apps could be exploited to exfiltrate data via connectors. What is the BEST control to mitigate this risk?

Accepted Answer

Use ISE (Integration Service Environment) with private endpoints and restrict connector use via Azure Policy

Answer

Deploying Logic Apps in an ISE with private endpoints isolates them from the public internet, and Azure Policy can restrict which connectors are permitted.

Question 5

A risk assessment requires you to categorize residual risk after applying controls. If a risk has a likelihood of Medium and an impact of High after controls, how should it be treated?

Accepted Answer

Escalate it and apply additional controls to reduce it further

Answer

A Medium × High residual risk typically falls into the 'High' zone on a risk matrix and requires escalation and additional control investment, not acceptance.

AZ-301 - Microsoft Azure Solutions Architect Expert Practice Test

AZ-301 - Microsoft Azure Solutions Architect Expert Practice Test

AZ-301 Risk Assessment & Management 4