← All AZ-900 Flashcard Decks

Azure Identity and Security Flashcards

7 cards from real AZ-900 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Azure Identity and Security flashcards as text
  1. Which security concept ensures that data cannot be read by unauthorized parties while stored?

    Answer: Encryption at rest

    Encryption at rest protects stored data so it cannot be read without the proper decryption key.

  2. What protects data as it moves between a client and an Azure service over the network?

    Answer: Encryption in transit

    Encryption in transit, typically using TLS, protects data while it travels across networks.

  3. Which Azure feature lets you grant users access based on their job function using predefined or custom roles?

    Answer: Role-Based Access Control (RBAC)

    RBAC assigns permissions to users, groups, and applications through roles scoped to resources.

  4. Which feature prevents accidental deletion or modification of an Azure resource?

    Answer: Resource locks

    Resource locks (CanNotDelete or ReadOnly) prevent accidental deletion or changes to critical resources.

  5. What service helps you securely connect to a VM over RDP/SSH without exposing a public IP address?

    Answer: Azure Bastion

    Azure Bastion provides secure RDP and SSH connectivity to VMs directly through the Azure portal without public IPs.

  6. Which Azure tool helps enforce organizational standards and assess compliance across resources?

    Answer: Azure Policy

    Azure Policy enforces rules and evaluates resources for compliance with organizational standards.

  7. Which dashboard provides a single view of regulatory compliance status across Azure resources?

    Answer: Microsoft Purview Compliance Manager / Compliance dashboard

    The compliance dashboard in Defender for Cloud and Compliance Manager track regulatory compliance posture.

How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy

Sources & references

Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy

  1. learn.microsoft.com — Renewal, score validity, registration, retake fee, passing score, time limit, test delivery, eligibility · verified Oct 2026