Which service provides compliance assessments in Azure?
AAzure Security Center
BAzure Automation
CAzure Compute
DAzure DevOps
Explanation
Azure Security Center is responsible for compliance assessments, while the others focus on automation, compute resources, or development processes.
Q32
A company needs to secure API keys used in Azure Functions. What Azure feature should they use?
AAzure Key Vault
BAzure Blob Storage
CAzure Active Directory
DAzure Firewall
Explanation
Azure Key Vault is specifically designed to manage keys and secrets, whereas the others do not serve this purpose primarily.
Q33
What happens when an Azure VM is deallocated?
AAll data is lost
BThe OS is still running
CThe VM can be restarted
DBilling continues
Explanation
When a VM is deallocated, it can be restarted later, but the OS is not running and no billing occurs for the VM's compute resources.
Q34
A company needs to ensure compliance with security policies on all devices. What should you implement?
AConditional Access Policies
BGroup Policies
CDatabase Auditing
DSoftware Inventory Management
Explanation
Conditional Access Policies enforce security compliance on user devices, while the other options do not effectively manage device compliance.
Q35
Which service is used to manage and monitor device health in Azure?
AMicrosoft Intune
BAzure Security Center
CAzure DevOps
DAzure Active Directory
Explanation
Microsoft Intune specifically provides device management and health features, while the others focus on different aspects.
Q36
You are configuring Windows Autopilot. What is the significance of a device's 'Hardware Hash'?
ADevice's IP address information
BUnique identifier for provisioning
CThe OS version installed
DWindows Update status
Explanation
The 'Hardware Hash' uniquely identifies a device for provisioning in Autopilot, whereas the other options do not relate to device provisioning.
Q37
Which service is used for managing virtual machines in Azure?
AAzure Virtual Machines
BAzure Blob Storage
CAzure Active Directory
DAzure SQL Database
Explanation
Azure Virtual Machines is specifically designed for managing virtual machines, while others serve different purposes.
Q38
A company needs to remotely manage devices securely. Which Azure service should they use?
AAzure Active Directory
BMicrosoft Intune
CAzure Automation
DAzure Logic Apps
Explanation
Microsoft Intune is tailored for device management, unlike the other options.
Q39
What happens when you assign a user to multiple roles in Azure AD?
AConflicting permissions cancel each other
BUser gets union of roles' permissions
CUser inherits permissions only from the first role
DAzure AD alerts an admin
Explanation
Users accumulate permissions from all assigned roles, which is the correct behavior.
Q40
Which service provides a centralized location for monitoring security-related events?
AMicrosoft Sentinel
BAzure Monitor
CAzure Security Center
DAzure Application Insights
Explanation
Microsoft Sentinel is designed for security event monitoring, whereas others focus on performance or application insights.