AZ-900学习（三）测试答案-Module3安全、隐私、合规性与信任

测试三：安全、隐私、合规性与信任

1. Azure Advisor provides advice on which of these topics:
   A. Creating an Azure account
   B. Best practices and security for your services
   C. Using the Azure portal effectively

2. True or false: Azure Cloud Shell is an interactive, browser-accessible shell for managing Azure resources?
   A. True
   B. False

3. Cloud security is a shared responsibility between you and your cloud provider. Which category of cloud services requires the greatest security effort on your part?
   == A. Infrastructure as a service (IaaS)==
   B. Platform as a service (PaaS)
   C. Software as a service (SaaS)

4. Which of these approaches is the strongest way to protect sensitive customer data?
   A. Encrypt data as it sits in your database
   B. Encrypt data as it travels over the network
   C. Encrypt data both as it sits in your database and as it travels over the network

5. There has been an attack on your public-facing website, and the application’s resources have been overwhelmed and exhausted, and are now unavailable to users. What service should you use to prevent this type of attack?
   A. DDoS protection
   B. Azure Firewall
   C. Network Security Group
   D. Application Gateway

6. You want to store certificates in Azure to centrally manage them for your services. Which Azure service should you use?
   A. AIP
   B. Azure AD
   C. Azure Key Vault
   D. Azure ATP

7. True or false: You can download published audit reports and other compliance-related information related to Microsoft’s cloud service from the Service Trust Portal.
   A. True
   B. False

8. Which Azure service allows you to configure fine-grained access management for Azure resources, enabling you to grant users only the rights they need to perform their jobs?
   A. Locks
   B. Policy
   C. Initiatives
   D. Role-based Access Control

9. Which Azure service allows you to create, assign, and, manage policies to enforce different rules and effects over your resources and stay compliant with your corporate standards and service-level agreements (SLAs)?
   A. Azure Policy
   B. Azure Blueprints
   C. Azure Security Center
   D. Role-based Access Control

10. Which of the following services provides up-to-date status information about the health of Azure services?
    A. Compliance Manager
    B. Azure Monitor
    C. Service Trust Portal
    D. Azure Service Health