MICROSOFT CERTIFIED AZURE FUNDAMENTALS
LATEST EXAMS 2026 QUESTIONS AND ANSWERS
SURE A+
✔✔Describe the function of Network Security Group(NSG). - ✔✔It enables you to filter
network traffic to and from Azure resources in an Azure virtual network.This can be
done by source/dest. IP address, port and protocol.
✔✔As it relates to IAM(Identity & Access Management), define "Authentication(AuthN)".
- ✔✔*Authentication(AuthN)* is the process of *establishing the identity of a person or
service looking to access a resource*. It establishes if they are who they say they are!
✔✔As it relates to IAM(Identity & Access Management), define "Authorization(AuthZ)". -
✔✔*Authorization(AuthZ)* is the process of *establishing what level of access an
authenticated person or service has*. It specifies what data they're allowed to access
and what they can do with it.
✔✔Describe Azure Active Directory. - ✔✔Azure AD is a cloud-based identity service. It
has built in support for synchronizing with your existing on-premises Active Directory or
can be used stand-alone. This means that all your applications, whether on-premises, in
the cloud (including Office 365), or even mobile can share the same credentials.
, ✔✔Two or more elements that confirm Identities, are required by Azure Multi-Factor
Authentication. List three (3). - ✔✔1. *Something you know* (e.g. password / answer to
question).
2. *Something you possess* (mobile app, keyfob etc.)
3. *Something you are* (Bio-metrics: fingerprint, facescan etc.)
✔✔Where can an administrator look to begin examining the security of Azure-based
solutions? - ✔✔ANSWER: The *Azure Security Center*. It is a monitoring service that
provides threat protection across all of your services both in Azure, and on-premises.
✔✔What is the primary benefit of the Azure Security Center? - ✔✔You can use Azure
Security Center in *different stages of an incident response*. These are: DETECT,
ASSESS, DIAGNOSE, STABILIZE, CLOSE.
✔✔Describe two usage scenarios of the Azure Security Center. - ✔✔1. Incidence
Response Management.
2. Security Policy and Vulnerability Management.
✔✔What is the purpose of the Azure Key Vault? - ✔✔Encryption services all use keys
to encrypt and decrypt data, so how do we ensure that the keys themselves are secure?
Suppose we also wanted to protect passwords, certificates, and other pieces of
sensitive info? In Azure, we can use Azure Key Vault to protect our secrets.
✔✔For an administrator, what are some added benefits of the Key Vault? -
✔✔Centralized storage of secrets, secure access, permissions control, and access
logging(for e.g. see when, where and how someone gained access to resources).
✔✔Michael wishes to enable his organization to send encrypted email and to classify
and protect documents when needed. Choose an appropriate Azure service/solution. -
✔✔Microsoft Azure Information Protection (AIP) will give Michael the tools he needs.
✔✔Azure Advanced Threat Protection is one of Microsoft's cloud based security
services. What are the components of the Azure ATP? - ✔✔•*Azure ATP Portal*:
monitor and respond to suspicious activity.
•*Azure ATP Sensor*: sensors are installed directly on your domain controllers. The
sensor monitors domain controller traffic without requiring a dedicated server or
configuring port mirroring.
•*Azure Cloud Service*:runs on the Azure Service Fabric (be able to describe the
service fabric for the exam!)
✔✔Define Azure Policy. - ✔✔*Azure Policy*: a service in Azure that you use to define,
assign, and, manage standards for resources in your environment. It can prevent the
creation of disallowed resources, ensure new resources have specific settings applied,
and run evaluations of your existing resources to scan for non-compliance.
LATEST EXAMS 2026 QUESTIONS AND ANSWERS
SURE A+
✔✔Describe the function of Network Security Group(NSG). - ✔✔It enables you to filter
network traffic to and from Azure resources in an Azure virtual network.This can be
done by source/dest. IP address, port and protocol.
✔✔As it relates to IAM(Identity & Access Management), define "Authentication(AuthN)".
- ✔✔*Authentication(AuthN)* is the process of *establishing the identity of a person or
service looking to access a resource*. It establishes if they are who they say they are!
✔✔As it relates to IAM(Identity & Access Management), define "Authorization(AuthZ)". -
✔✔*Authorization(AuthZ)* is the process of *establishing what level of access an
authenticated person or service has*. It specifies what data they're allowed to access
and what they can do with it.
✔✔Describe Azure Active Directory. - ✔✔Azure AD is a cloud-based identity service. It
has built in support for synchronizing with your existing on-premises Active Directory or
can be used stand-alone. This means that all your applications, whether on-premises, in
the cloud (including Office 365), or even mobile can share the same credentials.
, ✔✔Two or more elements that confirm Identities, are required by Azure Multi-Factor
Authentication. List three (3). - ✔✔1. *Something you know* (e.g. password / answer to
question).
2. *Something you possess* (mobile app, keyfob etc.)
3. *Something you are* (Bio-metrics: fingerprint, facescan etc.)
✔✔Where can an administrator look to begin examining the security of Azure-based
solutions? - ✔✔ANSWER: The *Azure Security Center*. It is a monitoring service that
provides threat protection across all of your services both in Azure, and on-premises.
✔✔What is the primary benefit of the Azure Security Center? - ✔✔You can use Azure
Security Center in *different stages of an incident response*. These are: DETECT,
ASSESS, DIAGNOSE, STABILIZE, CLOSE.
✔✔Describe two usage scenarios of the Azure Security Center. - ✔✔1. Incidence
Response Management.
2. Security Policy and Vulnerability Management.
✔✔What is the purpose of the Azure Key Vault? - ✔✔Encryption services all use keys
to encrypt and decrypt data, so how do we ensure that the keys themselves are secure?
Suppose we also wanted to protect passwords, certificates, and other pieces of
sensitive info? In Azure, we can use Azure Key Vault to protect our secrets.
✔✔For an administrator, what are some added benefits of the Key Vault? -
✔✔Centralized storage of secrets, secure access, permissions control, and access
logging(for e.g. see when, where and how someone gained access to resources).
✔✔Michael wishes to enable his organization to send encrypted email and to classify
and protect documents when needed. Choose an appropriate Azure service/solution. -
✔✔Microsoft Azure Information Protection (AIP) will give Michael the tools he needs.
✔✔Azure Advanced Threat Protection is one of Microsoft's cloud based security
services. What are the components of the Azure ATP? - ✔✔•*Azure ATP Portal*:
monitor and respond to suspicious activity.
•*Azure ATP Sensor*: sensors are installed directly on your domain controllers. The
sensor monitors domain controller traffic without requiring a dedicated server or
configuring port mirroring.
•*Azure Cloud Service*:runs on the Azure Service Fabric (be able to describe the
service fabric for the exam!)
✔✔Define Azure Policy. - ✔✔*Azure Policy*: a service in Azure that you use to define,
assign, and, manage standards for resources in your environment. It can prevent the
creation of disallowed resources, ensure new resources have specific settings applied,
and run evaluations of your existing resources to scan for non-compliance.
