Question 1

For end-to-end encryption in Azure App Service, which of the following configurations ensures that inbound and outbound traffic from your app is encrypted?

Options :

A : HTTPS Only

B : Managed Service Identity

C : IP Restrictions

D : Custom Domain SSL

Answer: A

Question 2

You have an Azure subscription that contains an Azure key vault named Vault1.

In Vault1, you create a secret named Secret1.

An application developer registers an application in Azure Active Directory (Azure AD).

You need to ensure that the application can use Secret1.

What should you do?

Options :

A : In Azure AD, create a role.

B : In Azure Key Vault, create a key.

C : In Azure Key Vault, create an access policy.

D : In Azure AD, enable Azure AD Application Proxy.

Answer: C

Question 3

Your company has an Azure subscription named Sub1 that is associated to an Azure Active Directory (Azure AD) tenant named contoso.com.

The company develops an application named App1. App1 is registered in Azure AD.

You need to ensure that App1 can access secrets in Azure Key Vault on behalf of the application users.

What should you configure?

Options :

A : an application permission without admin consent

B : a delegated permission without admin consent

C : a delegated permission that requires admin consent

Answer: B

Question 4

To leverage your organization's key management standards and ensure that Azure doesn't have access to keys, which of the following configurations should you use for your Azure Storage?

Options :

A : Azure Managed Keys

B : Service Managed Keys

C : Customer Managed Keys

D : RBAC keys

Answer: C

Question 5

You need to centralize the management of security configurations for multiple Azure subscriptions. Which Azure service should you utilize to ensure consistent application of configurations?

Options :

A : Azure Management Groups

B : Azure Policy

C : Azure Blueprint

D : Azure Landing Zone

Answer: A