Halloween Sale Special - 75% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: big75certs

Microsoft Certified: Information Security Administrator Associate SC-500 Dumps PDF

Page: 9 / 9
Total 224 questions

Microsoft Certified: Cloud and AI Security Engineer Associate Questions and Answers

Question 33

You have an Azure virtual network named VNet1 that contains a subnet named Subnet! A network security group named NSG1 is associated with Subnet1.

Vou have a storage account named storage1.

You need to ensure that access from Subnet1 to storage! uses a private IP address in Subnet1 and ran be filtered by NSG1 Public network access to storage1 must be disabled.

What should you create?

Options:

A.

a user-defined route (UDR)

B.

a service endpoint

C.

a private endpoint

D.

an Azure Private link service

Question 34

You have a Microsoft Defender External Attack Surface Management (Defender EASM) resource that discovers internet-facing assets for a company named Contoso, Ltd.

You need to classify the assets lo meet the following requirements.

• Third-party infrastructure assets must be tracked separately from assets owned by Contoso.

• Assets with unconfirmed ownership must remain outside the owned inventory until ownership is verified.

How should you classify the assets? To answer, drag the appropriate asset states to the correct assets. Each state may be used once, more than once or not at all. You may need to drag the split bar between panes or scroll to view content.

Options:

Page: 9 / 9
Total 224 questions