DEMO QUESTIONS

Q1: You have an Azure subscription You plan to deploy multiple containerized microservice-based apps to Azure Kubemetes Service (AKS) You need to recommend a solution that meets the following requirements: * Manages secrets * Provides encryption * Secures service-to-service communication by using mTLS encryption * Minimizes administrative effort What should you include in the recommendation?

A: Flux

B: Envoy

C: Dapr

D: Istio

Correct Answer: D

Q2: You have an on-premises server that runs Windows Server and contains a Microsoft SQL Server database named DB1. You plan to migrate DB1 to Azure. You need to recommend an encrypted Azure database solution that meets the following requirements: * Minimizes the risks of malware that uses elevated privileges to access sensitive data * Prevents database administrators from accessing sensitive data * Enables pattern matching for server-side database operations * Supports Microsoft Azure Attestation * Uses hardware-based encryption What should you include in the recommendation?

A: SQL Server on Azure Virtual Machines with virtualization-based security (VBS) enclaves

B: Azure SQL Database with virtualization-based security (VBS) enclaves

C: Azure SQL Managed Instance that has Always Encrypted configured

D: Azure SQL Database with Intel Software Guard Extensions (Intel SGX) enclaves

Correct Answer: D

Q3: Your company has an Azure subscription that has enhanced security enabled for Microsoft Defender for Cloud. The company signs a contract with the United States government. You need to review the current subscription for NIST 800-53 compliance. What should you do first?

A: From Defender for Cloud, review the secure score recommendations.

B: From Microsoft Sentinel, configure the Microsoft Defender for Cloud data connector.

C: From Defender for Cloud, review the Azure security baseline for audit report.

D: From Defender for Cloud, add a regulatory compliance standard.

Correct Answer: D

Q4: You plan to deploy 20 Azure Kubernetes Service (AKS) clusters. The cluster configuration will be managed declaratively by using Kubernetes manifest files stored in Azure Repos. You need to recommend a solution to ensure that the configuration of all the clusters remains consistent by using the manifest files stored in Azure Repos. What should you include in the recommendation?

A: Gatekeeper

B: Dependency Tracker

C: Dependency

D: Flux

Correct Answer: D

Q5: You have an Azure AD tenant that syncs with an Active Directory Domain Services (AD DS) domain. You are designing an Azure DevOps solution to deploy applications to an Azure subscription by using continuous integration and continuous deployment (CI/CD) pipelines. You need to recommend which types of identities to use for the deployment credentials of the service connection. The solution must follow DevSecOps best practices from the Microsoft Cloud Adoption Framework for Azure. What should you recommend?

A: an Azure AD user account that has a password stored in Azure Key Vault

B: a group managed service account (gMSA)

C: an Azure AD user account that has role assignments in Azure AD Privileged Identity Management {PIM)

D: a managed identity in Azure

Correct Answer: D
[acf_quiz]

Testimonials – Real Results From Real Students

Your success is our priority. We’re proud to share authentic reviews from students who trusted us, passed their exams, and reached their goals with confidence.
John Doe
John Doe
This site has been a game-changer for my certification journey. The materials are current, reliable, and best of all—free! It's clear they're committed to supporting the IT community.
Emma
Emma
I passed my CompTIA Security+ exam on the first try thanks to this site. Their practice exams and study guides are top-notch. Highly recommend it to anyone serious about IT certifications.
Liam
Liam
I’ve passed three certifications using this site. Their materials are detailed and well-structured, and the fact that it’s free makes it even better.
Isabella
Isabella
If you're studying for any IT certification, this should be your first stop. It’s comprehensive, organized, and constantly updated.
Benjamin
Benjamin
This website helped me prepare for multiple certifications, and today I’m working in cybersecurity. Without their free resources, I wouldn’t be here.

Frequently Asked Question (FAQ's)

Have questions? You’re not alone. We’ve answered the most frequently asked questions to help you feel confident and informed every step of the way.
What is Prep2Certs?

Prep2Certsis a premium service offering a comprehensive collection of exam questions and answers for over 1400 certification exams. It is regularly updated and designed to help users pass their certification exams confidently.

Please contact info@Prep2Certs.com and we will provide you with alternative payment options.

You can by Contacting our sales team.

Free updates are available for the duration of your subscription, after the subscription is expired, your access will no longer be available.