Microsoft Certified Azure Administrator Associate AZ103 exam with verified solutions

Microsoft Certified Azure Administrator
Associate AZ103 exam with verified
solutions

You are always responsible for: - correct answer ✔1 Data
x x x x x x x x x




2 Endpoints
x




3 Accounts
x




4 Access
x




Azure Security Center tiers: - correct answer ✔Free
x x x x x x x




Standard - $15 a month per node
x x x x x x




Authentication (AuthN) - correct answer ✔Process of establishing identity of
x x x x x x x x x x


a person or service. Includes act of challenging party for their creds.
x x x x x x x x x x x x


Establishes they ARE who they say they are.
x x x x x x x




Authorization (AuthZ) - correct answer ✔Establishes what access you are
x x x x x x x x x x


allowed


Azure MFA for global admins is: - correct answer ✔Free
x x x x x x x x x




Azure MFA for non-global admins is: - correct answer ✔Not free. Requires
x x x x x x x x x x x x


specific license
x

,Identity - correct answer ✔A thing that can be authenticated: Users, Servers,
x x x x x x x x x x x x


Services, Apps x




Principle - correct answer ✔An identity with certain roles: Sudo or CMD as an
x x x x x x x x x x x x x


xadmin. Role changes even with identity staying the same. Groups are
x x x x x x x x x x x


another example or principles x x x




Service Principle - correct answer ✔Identity used by a service or application.
x x x x x x x x x x x x


Can be assigned roles.
x x x




Role-Based Access Control (RBAC) - correct answer ✔Roles are sets of
x x x x x x x x x x x


permissions, users are assigned to roles; users are assigned to groups and the
x x x x x x x x x x x x


xgroup are assigned to roles. Like editor or read only. Can be granted to
x x x x x x x x x x x x x x


access an Azure service instance
x x x x




Privileged Identity Management (PIM) - correct answer ✔A paid for service
x x x x x x x x x x x


that provides oversight of role assignments, self-service and just in time role
x x x x x x x x x x x x


activation


Symmetric encryption - correct answer ✔Uses a single key to encrypt and
x x x x x x x x x x x x


decrypt data. x




Asymmetric encryption - correct answer ✔Two keys are used; one key
x x x x x x x x x x x


encodes the message, and the other key decodes the message. Used for
x x x x x x x x x x x x


Transport Layer Security (TLS) which is used for HTTPS and data signing
x x x x x x x x x x x




Azure Storage Service Encryption - correct answer ✔Data at rest encryption.
x x x x x x x x x x x


Used for Blob storage, Azure files, etc
x x x x x x

,Azure Disk Encryption - correct answer ✔Encrypts windows or linux IaaS VM
x x x x x x x x x x x x


disks. Uses bitlocker feature of Windows and the dm-crypt feature of Linux to
x x x x x x x x x x x x


provide encryption for the OS and data disk. Integrated into Azure Key Vault
x x x x x x x x x x x x x




Transport Data Encryption (TDE) - correct answer ✔Helps protect Azure SQL
x x x x x x x x x x x


database and Azure Data Warehouse. Enabled by default. You can use Azure
x x x x x x x x x x x x


Key Vault key or bring your own key (BYOK)
x x x x x x x x




Azure Key Vault - correct answer ✔- Secret management, tokens, passwords,
x x x x x x x x x x x


certs, API keys etc.
x x x




- Key management, encryption keys
x x x x




- Certificate management, manage and use your SSL/TLS certs for your Azure
x x x x x x x x x x x x


and internally connected services
x x x




- Store secrets backed by hardware security modules (HSM). Can use software
x x x x x x x x x x x


xor FIPS HSM
x x




Benefits of Azure Key Vault include - correct answer ✔- Centralized app
x x x x x x x x x x x x


secrets
- Securely stored secrets and keys
x x x x x




- Monitor access and use
x x x x




- Simplify admin of app secrets
x x x x x




- Integrate with other Azure services
x x x x x




X.509 v3 - correct answer ✔Certs used in Azure
x x x x x x x x

, Firewall - correct answer ✔Grants access based on IP. Can check port and
x x x x x x x x x x x x x


protocol also x




Azure Firewall - correct answer ✔Managed. Cloud based. Fully stateful. Built
x x x x x x x x x x x


with high availability and unrestricted cloud scalability. Protects against
x x x x x x x x x


inbound non-HTTP/S protocols like RDP, SSH and FTP.
x x x x x x x x




Also provides outbound network level protection for all ports and protocols
x x x x x x x x x x x


and application level protection for outbound HTTP/S
x x x x x x




Azure App Gateway - correct answer ✔A load balancer that includes a Web
x x x x x x x x x x x x x


App Firewall (WAF) that protects against common known vulnerabilities in
x x x x x x x x x x


websites. Designed for HTTP traffic x x x x




Network Virtual Appliance (NVA) - correct answer ✔Ideal options for non-
x x x x x x x x x x


HTTP services on advanced configurations. Similar to hardware firewalls
x x x x x x x x




Azure DDoS protection - correct answer ✔Monitors traffic at the Azure
x x x x x x x x x x x


network edge before it effects availability.
x x x x x




It identifies DDoS traffic and blocks it while allowing legit traffic
x x x x x x x x x x




Azure DDoS Protection: Basic tier - correct answer ✔Auto enabled in Azure.
x x x x x x x x x x x x


Always on monitoring. Real time monitoring/mitigation of common network
x x x x x x x x x


level attacks. x




Azure DDoS protection: Standard tier - correct answer ✔Additional mitigation
x x x x x x x x x x


capabilities tuned specifically to Azure Virtual Network resources. Requires no
x x x x x x x x x


xapp changes. Dedicated traffic monitoring. Machine learning. Mitigate
x x x x x x x x


against: volumetric attacks, protocol attacks, resource layer attacks
x x x x x x x