Microsoft Azure Security Engineer Certification Microsoft Azure Security Technologies 3

Question 1

Your organization stores connection strings in Azure App Service application settings. What is the recommended security improvement?

Accepted Answer

Reference secrets from Azure Key Vault using managed identity

Answer

App Service supports Key Vault references, allowing managed identities to retrieve secrets without storing them directly in app settings.

Question 2

Which Azure Defender plan specifically protects container images in Azure Container Registry by scanning for vulnerabilities?

Accepted Answer

Microsoft Defender for Containers

Answer

Microsoft Defender for Containers scans container images in ACR for known vulnerabilities using integrated vulnerability assessment.

Question 3

A user in Azure AD is assigned the Security Reader role. Which action are they permitted to perform?

Accepted Answer

View security alerts and recommendations in Microsoft Defender for Cloud

Answer

The Security Reader role grants read-only access to security settings, alerts, and recommendations without the ability to make changes.

Question 4

An Azure SQL Database must reject connections from all IP addresses except those from within an Azure Virtual Network. What is the most secure configuration?

Accepted Answer

Private endpoint with public endpoint disabled

Answer

A private endpoint assigns a private IP to the SQL server within the VNet, and disabling the public endpoint eliminates all public internet access.

Question 5

Which tool in Microsoft Sentinel is used to create automated response actions when a specific security alert is triggered?

Accepted Answer

Playbook using Azure Logic Apps

Answer

Microsoft Sentinel playbooks are built on Azure Logic Apps and can be triggered by alerts to automate incident response actions.

Microsoft Azure Security Engineer Certification Practice Test

Microsoft Azure Security Engineer Certification Practice Test

Microsoft Azure Security Engineer Certification Microsoft Azure Security Technologies 3