Implement Azure Security

Which two statements accurately describe managed identities for Azure resources? (Choose two.)

• can be used to authenticate to Azure services without using credentials in the code

• is free of charge with the purchase of Standard or Premium Azure Key Vault

• gives Azure services a managed identity in Azure Active Directory (Azure AD)

• involves two types of system-assigned identities in an Azure Active Directory (Azure AD) tenant

An app that runs as a background service would use which type of permission in Azure Active Directory (AD)?

• delegated permission

• application permission

• effective persmission

• static permission

Which authentication option is supported in Azure Active Directory (Azure AD)?

• mobile apps

• Google Authenticator

• smartcards

• Last-Pass Authenticator

You plan to authorize access to a browser-based, client-side app by using an OAuth 2.0 grant. Which type of OAuth 2.0 grant is best suited to this app?

• code grant

• client credentials grant

• implicit grant

• resource owner credentials grant

Which two requirements must be met for multi-tenant applications in Azure that are available to users in multiple directories? (Choose two.)

• in each directory, a user's or administrator's consent, before the app is registered.

• signing keys that are different from those used for single-tenant apps.

• a way to determine the tenant that individual users are in.

• in each directory, dynamic user consent before the app is registered.

How many segments does a JSON Web Token (JWT) contain to validate the authenticity of a client?

• 2

• 3

• 4

• 5

You want to disable the system-assigned managed identity on a virtual machine. Which role assignment or assignments must your account have for you to complete this action?

• Virtual Machine Contributor

• Managed Identity Operator

• Virtual Machine Contributor and Managed Identity Operator

• Virtual Machine Contributor or Managed Identity Operator

You develop a web app, and you want to use OpenID Connect and Azure Active Directory (Azure AD) to authorize access to it. You register the app to Azure AD, which generates an Application ID for the app. For which subsequent actions is the Application ID required?

• validating the id_token

• responding to error codes

• sending a request for an access token

• sending a signout request to a user

Which term refers to an identity that is used by apps or services to access specific Azure resources?

• service principal

• security principal

• managed identity

• role definition

Which statement accurately describes Azure Active Directory (Azure AD) administrator roles as compared to Azure role-based access control (RBAC) roles?

• allow you to create custom roles

• support specifying scope at multiple levels

• manage access to all Azure resources

• allow role info to be accessed from the Azure portal