Azure Data and Application Security Flashcards
6 cards from real Microsoft Azure Security Engineer Certification practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 Azure Data and Application Security flashcards as text
Which Azure key management service provides FIPS 140-2 Level 3 validated, single-tenant managed HSM capacity for organizations with strict compliance requirements?
Answer: Azure Managed HSM
Azure Managed HSM delivers a fully managed, single-tenant HSM service with FIPS 140-2 Level 3 validation for exclusive customer key control.
Which Azure Storage configuration restricts access so only traffic from specific IP ranges or VNets is accepted, blocking all other sources?
Answer: Storage account firewall and virtual network rules
Storage account firewall rules define allowed IP ranges and VNet subnets, with all other traffic blocked by the default deny.
What is the purpose of enabling soft delete on an Azure Key Vault?
Answer: Retain deleted objects in a recoverable state for a configurable retention period
Soft delete keeps deleted Key Vault objects in a recoverable deleted state for 7 to 90 days before they are permanently removed.
Which Azure App Service feature allows you to restrict inbound access based on IP address ranges, service tags, or specific HTTP header values?
Answer: Access Restrictions rules
App Service Access Restrictions let you define prioritized allow and deny rules for inbound traffic using IP, CIDR, service tags, or HTTP headers.
Which Microsoft Defender plan provides Advanced Threat Protection for Azure SQL Database, detecting SQL injection attempts and anomalous access patterns?
Answer: Microsoft Defender for SQL
Microsoft Defender for SQL detects anomalous database activities, potential SQL injections, and unusual access patterns with security alerts.
Which Azure service should you use to receive automated alerts and trigger rotation when a Key Vault secret is approaching its expiration date?
Answer: Azure Event Grid Key Vault near-expiry event with an Azure Function subscriber
Key Vault emits near-expiry events to Azure Event Grid, which can trigger a Function or Logic App to rotate the secret automatically.
How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy
Sources & references
Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy
- learn.microsoft.com — Test delivery, retake policy, time limit, score validity, eligibility, renewal, exam information · verified Nov 2026