AZ-900 - Microsoft Azure Fundamentals Azure Identity and Security Questions and Answers

Question 1

A company wants to enhance the security of its user sign-ins to Azure services.
They require users to provide a second form of verification, such as a code from their mobile phone, in addition to their password.
Which Azure service should they implement to meet this requirement?

Accepted Answer

Microsoft Entra ID Multi-Factor Authentication (MFA)

Answer

Azure Policy

Answer

Azure Key Vault

Answer

Azure Role-Based Access Control (RBAC)

Question 2

Which security concept involves implementing a series of mechanisms that are layered to protect data and resources, so that if one layer is breached, subsequent layers are already in place to prevent further exposure?

Accepted Answer

Defense in Depth

Answer

Role-Based Access Control (RBAC)

Answer

Least Privilege Principle

Answer

Shared Responsibility Model

Question 3

Which of the following is the primary purpose of Azure Role-Based Access Control (RBAC)?

Accepted Answer

To manage who has access to Azure resources, what they can do with them, and what areas they can access.

Answer

To encrypt secrets, keys, and certificates used by applications.

Answer

To enforce organizational standards and assess compliance for resources.

Answer

To filter network traffic to and from Azure resources in a virtual network.

Question 4

An organization wants a unified security management system that provides security posture recommendations and threat protection for their workloads running in Azure, on-premises, and in other clouds. Which Azure service provides these capabilities?

Accepted Answer

Microsoft Defender for Cloud

Answer

Azure Monitor

Answer

Microsoft Sentinel

Answer

Azure Firewall

Question 5

What is the primary function of Azure Key Vault?

Accepted Answer

To securely store and manage access to secrets, keys, and certificates.

Answer

To provide a second layer of authentication for user sign-ins.

Answer

To distribute network traffic across multiple servers to improve availability.

Answer

To provide a private, isolated section of the Azure cloud for networking.

Question 6

An administrator needs to ensure that all newly created virtual machines in a specific subscription are of an allowed size (SKU) to control costs. Which Azure service can be used to enforce this rule?

Accepted Answer

Azure Policy

Answer

Azure Role-Based Access Control (RBAC)

Answer

Azure Monitor

Answer

Microsoft Defender for Cloud