Microsoft Azure Security Technologies Flashcards
7 cards from real Microsoft Azure Security Engineer Certification practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Microsoft Azure Security Technologies flashcards as text
A company needs to monitor all administrative operations performed on Azure resources across all subscriptions for compliance auditing. Which log source should they query?
Answer: Azure Activity Log
The Azure Activity Log records all control-plane operations (create, update, delete) across Azure resources at the subscription level.
You are designing network security for an Azure Kubernetes Service cluster. Which feature enforces network policies between pods?
Answer: Kubernetes Network Policy with Azure CNI or Calico
Kubernetes Network Policies enforce pod-to-pod traffic rules and require a compatible CNI plugin like Azure CNI with Calico.
Which encryption option in Azure allows you to maintain control of your own encryption keys stored outside of Azure?
Answer: Customer-managed keys with Bring Your Own Key (BYOK) to an on-premises HSM
BYOK allows customers to generate and manage their master keys in an on-premises HSM and import key material to Azure Key Vault Managed HSM.
An organization's Azure AD tenant has guest users from partner companies. How should you regularly review whether these guests still need access?
Answer: Azure AD Access Reviews
Azure AD Access Reviews allow periodic automated reviews where resource owners or the guests themselves confirm continued need for access.
A web application on Azure App Service is receiving SQL injection attacks. Which service should you enable to detect and block these attacks?
Answer: Azure Application Gateway with WAF in Prevention mode
Azure Application Gateway WAF in Prevention mode actively blocks requests matching OWASP CRS rules including SQL injection signatures.
Which Azure Security Center feature assigns a numeric score that helps you understand your overall security posture?
Answer: Secure Score
Secure Score in Microsoft Defender for Cloud aggregates security recommendations into a percentage-based score reflecting your security posture.
You need to allow a developer's application to access Azure Key Vault secrets without storing any credentials in the code or configuration. What is the best approach?
Answer: Assign a system-assigned managed identity to the app and grant it Key Vault access policy
A system-assigned managed identity provides an automatically managed Azure AD identity that authenticates to Key Vault without any stored credentials.
How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy
Sources & references
Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy
- learn.microsoft.com — Test delivery, retake policy, time limit, score validity, eligibility, renewal, exam information · verified Nov 2026