You have an Azure subscription that contains a Microsoft Defender External Attack Surface Management (Defender EASM) resource named EASM1. You review the Attack Surface Summary dashboard. You need to identify the following insights:
• Deprecated technologies that are no longer supported
• Infrastructure that will soon expire
Which section of the dashboard should you review?

A. Securing the Cloud

B. Sensitive Services

C. attack surface composition

D. Attack Surface Priorities

You have an Azure Active Directory (Azure AD) tenant and a root management group. You create 10 Azure subscriptions and add the subscriptions to the rout management group. You need to create an Azure Blueprints definition that will be stored in the root management group. What should you do first?

A. Add an Azure Policy definition to the root management group.

B. Modify the role-based access control (RBAC) role assignments for the root management group.

C. Create a user-assigned identity.

D. Create a service principal.

You have an Azure Active Directory (Azure AD) tenant that contains the users shown in the following table.

You have an Azure subscription that contains an Azure SQL database named SQLDB1. SQLDB1 contains the columns shown in the following table.

You have an Azure subscription that is linked to an Azure AD tenant and contains the resources shown in the following table.

A. Managed1 and App1 only

B. Group1 and Managed1 only

C. Group1. Managed1, and VM2only

D. Group1, Managed1, VM1. and App1 only

You have an Azure subscription that contains the resources shown in the following table.

You have an Azure subscription that contains a user named Adminl1 and a virtual machine named VM1. VM1 runs Windows Server 2019 and was deployed by using an Azure Resource Manager template. VM1 is the member of a backend pool of a public Azure Basic Load Balancer.
Admin1 reports that VM1 is listed as Unsupported on the Just in time VM access blade of Azure Security Center.
You need to ensure that Admin1 can enable just in time (JIT) VM access for VM1.
What should you do?

A. Create and configure an additional public IP address for VM 1.

B. Replace the Basic Load Balancer with an Azure Standard Load Balancer.

C. Assign an Azure Active Directory Premium Plan 1 license to Admin1.

D. Create and configure a network security group (NSG).

You have an Azure subscription that contains the resources shown in the following table.

You create an Azure subscription.
You need to ensure that you can use Azure Active Directory (Azure AD) Privileged Identity Management (PIM) to secure Azure AD roles.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

You have an Azure subscription that contains a key vault and an Azure SQL server. You need to deploy an Azure SQL database that uses Transparent Data Encryption (TDE) and a customer-managed key. What should you create before you deploy the database?

A. An app registration

B. A standard general-purpose v2 storage account

C. A user-assigned managed identity

D. A user account that is assigned the SQL Security Manager role

You have an Azure subscription that contains the resources shown in the following table.



You plan to deploy an Azure Private Link service named APL1.
Which resource must you reference during the creation of APL1?

A. VMSS1

B. VM1

C. SQL

D. LB1

You have an Azure subscription that contains an Azure key vault and an Azure SQL database named SQL1.
You generate a key named Key1.
You need to enable Transparent Data Encryption (TDE) for SQL1 by using Key1.
Which two settings should you modify for Key1? To answer, select the appropriate settings in the answer area.
NOTE: Each correct selection is worth one point.