What happens when the Azure Policy is assigned to a management group?
AOnly applicable to subscriptions.
BAffects all policies within the group.
CInherited by all descendant subscriptions.
DOnly applies to resource groups.
Explanation
Policies assigned at the management group level are inherited by all descendant subscriptions, affecting their resources.
Q22
Which Microsoft service provides built-in support for device compliance and security policies?
AMicrosoft Intune
BAzure AD
CMS Defender
DOffice 365
Explanation
Microsoft Intune manages device compliance and security policies, while the others focus on identity, threat protection, and productivity tools.
Q23
A company needs to ensure that Azure virtual machines are protected from unauthorized access. What should be implemented?
ANetwork Security Groups (NSGs)
BAzure Blob Storage
CAzure DevOps
DAzure Functions
Explanation
Network Security Groups (NSGs) allow you to filter network traffic and secure virtual machines, unlike the other options.
Q24
What happens when an Azure AD user account is set to 'Password Never Expires'?
AUser must change password regularly
BUser's password is permanent
CUser can’t access services
DUser’s account will be disabled
Explanation
Setting 'Password Never Expires' allows the account's password to remain unchanged, unlike the options suggesting regular updates or account issues.
Q25
Which service manages Windows 10 updates in Azure?
AWindows Update for Business
BAzure Automation
CIntune
DAzure Functions
Explanation
Windows Update for Business is specifically designed to manage Windows 10 updates, while the others serve different purposes.
Q26
A company needs to deploy a new application instantly to all users. Which Azure service should they use?
AWindows Autopilot
BAzure Virtual Machines
CMicrosoft Endpoint Manager
DAzure Logic Apps
Explanation
Microsoft Endpoint Manager allows rapid application deployment across devices, whereas the others are not intended for immediate mass deployment.
Q27
What happens when a group policy is applied to a user?
AIt only applies to devices.
BIt removes local user settings.
CIt doesn't affect group memberships.
DIt defines user environment settings.
Explanation
Group policies configure environment settings for users, while the other options misrepresent how group policies function.
Q28
Which Azure service is used for centralized management of device compliance and policies?
AIntune
BAzure Active Directory
CAzure Security Center
DAzure Monitor
Explanation
Intune is specifically designed for device compliance and policy management, while the others serve different purposes.
Q29
A company needs to ensure their sensitive data is inaccessible from unmanaged devices. What Azure feature can they use?
AConditional Access
BAzure Information Protection
CMicrosoft Defender for Endpoint
DData Loss Prevention
Explanation
Conditional Access allows policies based on device management status to secure sensitive data effectively.
Q30
You are configuring an Azure virtual machine in a multi-tenancy environment. What happens when you assign a static public IP?
AIP address is permanently reserved
BIP address dynamics change
CPublic access is disabled
DOnly private access is available
Explanation
A static public IP is reserved permanently for the VM, ensuring consistent external connectivity.