Question 31

You need to design a solution to provide administrators with secure remote access to the virtual machines. The solution must meet the following requirements:
* Prevent the need to enable ports 3389 and 22 from the internet.
* Only provide permission to connect the virtual machines when required.
* Ensure that administrators use the Azure portal to connect to the virtual machines.
Which two actions should you include in the solution? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
  • Question 32

    A customer uses Azure to develop a mobile app that will be consumed by external users as shown in the following exhibit.

    You need to design an identity strategy for the app. The solution must meet the following requirements:
    * Enable the usage of external IDs such as Google, Facebook, and Microsoft accounts.
    * Be managed separately from the identity store of the customer.
    * Support fully customizable branding for each app.
    Which service should you recommend to complete the design?
  • Question 33

    Your company is migrating data to Azure. The data contains Personally Identifiable Information (Pll). The company plans to use Microsoft Information Protection for the Pll data store in Azure. You need to recommend a solution to discover Pll data at risk in the Azure resources.
    What should you include in the recommendation? To answer, select the appropriate options in the answer area.
    NOTE: Each correct selection is worth one point.

    Question 34

    You plan to automate the development and deployment of a Nodejs-based app by using GitHub.
    You need to recommend a DevSecOps solution for the app. The solution must meet the following requirements:
    * Automate the generation of pull requests that remediate identified vulnerabilities.
    * Automate vulnerability code scanning for public and private repositories.
    * Minimize administrative effort.
    * Minimize costs.
    What should you recommend using? To answer, select the appropriate options in the answer area.
    NOTE: Each correct selection is worth one point.

    Question 35

    Your company wants to optimize using Azure to protect its resources from ransomware.
    You need to recommend which capabilities of Azure Backup and Azure Storage provide the strongest protection against ransomware attacks. The solution must follow Microsoft Security Best Practices.
    What should you recommend? To answer, select the appropriate options in the answer area.
    NOTE: Each correct selection is worth one point.