04 AZ-500: Manage security operation

Data collected by Azure Monitor collects fits into which two fundamental types. What are those types of data?

• Logs and Metrics
• Cross-premises network connectivity
• Traffic Manager

When running a query of the Log Analytics workspace, which query language is used?

• Kusto Query Language
• Destination inbound rules
• NAT rules

To be notified when any virtual machine in the production resource group is deleted, what should be configured?

• Activity log alert
• Load Balancer
• Azure Web Application Firewall

The IT managers would like to use a visualization tool for the Azure Monitor results. Each of the following is available, but there is a need to pick the one that will allow for insights and investigation of the data; which should be used?

• Monitor Metrics
• Add an Azure Firewall
• Add a Web Application Firewall

Which tasks are not included in the Microsoft Defender for Cloud free tier?

• Monitor non-Azure resources
• Install Azure Firewall
• Install a load balancer

An organization compliance group requires client authentication using Azure AD and Key Vault diagnostic logs. What is the easiest way to implement the requirement for client authentication

• Implement Microsoft Defender for Cloud policies
• Vulnerability assessments
• Authentication

The Microsoft Defender for Cloud dashboard presents a Secure Score. What is the description of secure score?

• The Secure Score is a calculation based on the ratio of healthy resources vs. total resources.
• Allow Azure load balancer inbound
• Allow all virtual networks inbound and outbound

An organization is working with an outside agency that needs to access a virtual machine. There's a real concern about brute-force login attacks targeted at virtual machine management ports. Which of the following components would open the management ports for a defined time range? Select one

• Just-in-Time virtual machine access
• Azure Application Gateway
• Custom routing

When using Microsoft Defender for Cloud to provide visibility into virtual machine security settings, the monitoring system will notify administrators as issues arise. Which incident below would require a different monitoring tool to discover it?

• A newer operating system version is available.
• Configure a Guest configuration on the virtual machine
• Create a custom script extension

What is the primary benefit of security automation and orchestration in Microsoft Sentinel?

• Simplification of security orchestration and task automation.
• FileVault
• BitLocker