Azure Security

Overview

Rewards

FAQs

Overview

Microsoft Azure , top cloud platform, is chosen by 95% of Fortune 500 companies for its robust, flexible infrastructure supporting diverse languages and open-source technologies. Azure’s exceptional security, backed by substantial investments, is a key factor for enterprises entrusting sensitive data to the cloud. While Microsoft provides cutting-edge infrastructure, collaboration with customers is crucial for safeguarding assets. Understanding Azure security’s key aspects and leveraging Microsoft’s tools is vital for users fortifying their workloads and data in the cloud.

Take this assessment to check how good you are with Azure Security.

Click the Rewards tab for eligibility requirements.

Read the FAQs tab carefully for Instructions before beginning the assessment.

Rewards

NYXPoints are used to generate the Leaderboard (coming soon). They are awarded for achieving a certain score.

200 nyxpoints for a passing score of 80% or more
300 nyxpoints for a perfect score of 100%
Didn’t pass? You still get 30 nyxpoints for attempting the assesment

FAQs

IMPORTANT instructions for taking the Assessment

The timer starts when you click Start Assessment
DO NOT refresh/reload the page or use the back button to navigate away from the page.
Navigating away from the assessment page DOES NOT stop/pause the timer and the will restart the assessment when you come back to it. The answers are NOT saved.

General

There are NO pre-requisites to take this assessment. Take this assessment even if you are completely new to Linux.
The assessment is completely FREE.
Preferably take it in a closed book mode.
DO NOT copy/paste, share or upload questions elsewhere.

Eligible Rewards

300 NyxCoins*

* NyxCoins vary on score

Questions

Minutes

1 %

Passing Score

Time limit: 0

Assessment Summary

0 of 30 Questions completed

Questions:

Information

You have already completed the assessment before. Hence you can not start it again.

Assessment is loading…

You must sign in or sign up to start the assessment.

You must first complete the following:

Results

Assessment complete. Results are being recorded.

Results

0 of 30 Questions answered correctly

Your time:

Time has elapsed

You have reached 0 of 0 point(s), (0)

Earned Point(s): 0 of 0, (0)
0 Essay(s) Pending (Possible Point(s): 0)

Average score
Your score

Categories

Not categorized 0%

Current
Review
Answered
Correct
Incorrect

Question 1 of 30

1. Question
What does Azure Key Vault provide for managing keys?
- Hardware Security Modules (HSMs)
- Secure password storage
- Encryption algorithms
- Virtual machine backup
Correct

Incorrect
Question 2 of 30

2. Question
Azure Active Directory B2B Collaboration enable ____________.
- Access to corporate applications and data with self-managed identities
- Centralized management for Windows 10 devices
- Integration across mobile and web platforms
- Single sign-in using social media accounts
Correct

Incorrect
Question 3 of 30

3. Question
What is the purpose of Azure Network Security Groups (NSG)?
- It provides application layer inspection
- It authenticates access controls
- It filters network traffic based on a 5-tuple
- It manages DNS servers
Correct

Incorrect
Question 4 of 30

4. Question
What is the primary function of Application Insights?
- Analyzing security events in Azure logs
- Monitoring live web applications and detecting performance anomalies
- Managing Azure resources
- Providing security recommendations for Azure deployments
Correct

Incorrect
Question 5 of 30

5. Question
What does Azure role-based access control (Azure RBAC) enable you to do?
- Grant specific permissions to users, groups, or applications based on their job duties
- Force periodic password rotation
- Impose length and complexity requirements on passwords
- Lock accounts after failed authentication attempts
Correct

Incorrect
Question 6 of 30

6. Question
What are the two major advantages of Web Server Diagnostics for App Service web apps?
- Real-time state information and detailed trace events
- Data encryption and secure sockets layer
- SQL injection protection and cross-site scripting prevention
- DDoS attack detection and mitigation
Correct

Incorrect
Question 7 of 30

7. Question
What is the purpose of implementing a Defence-in-depth strategy?
- To rely on a single layer of protection for security
- To slow down an attack and provide alert information for action
- To only focus on physical security measures
- To protect user’s data
Correct

Incorrect
Question 8 of 30

8. Question
The Web Application Firewall (WAF) in Azure Application Gateway protects against ______________.
- DDoS Attacks
- Web-based attacks like SQL injection and XSS
- Network vulnerabilities
- Data breaches
Correct

Incorrect
Question 9 of 30

9. Question
What does Azure Confidential Computing provide?
- Encryption only at rest
- Encryption only in motion
- Encryption at rest, in motion, and in memory
- Encryption only in motion through the network
Correct

Incorrect
Question 10 of 30

10. Question
Which layer of defense is responsible for securing access to virtual machines?
- Physical security layer
- Identity and access layer
- Compute layer
- Data layer
Correct

Incorrect
Question 11 of 30

11. Question
What does Azure Disk Encryption do for Linux and Windows VMs?
- Encrypts IaaS virtual machine disks
- Encrypts data in motion
- Encrypts data only at rest
- Encrypts data on external drives
Correct

Incorrect
Question 12 of 30

12. Question
How does Azure Monitor contribute to security?
- It provides personalized cloud consulting
- It offers visualization and alerting on security-related events in Azure logs
- It analyses resource configuration and usage telemetry
- It monitors application performance.
Correct

Incorrect
Question 13 of 30

13. Question
What does Integrated identity management (hybrid identity) allow you to do?
- Create separate user identities for authentication
- Control access across internal DC and cloud platforms with a single user identity
- Deploy domain controllers for Azure VMs
- Implement anomaly detection capabilities
Correct

Incorrect
Question 14 of 30

14. Question
Which Azure service provides threat protection for cloud workloads running in Azure?
- Azure Sentinel
- Azure Firewall
- Azure Advisor
- Azure Monitor
Correct

Incorrect
Question 15 of 30

15. Question
What does SQL VM TDE stand for?
- SQL Virtual Machine Table Data Encryption
- Secure Transaction Data Encryption
- Transparent Data Encryption
- Table Definition Encryption
Correct

Incorrect
Question 16 of 30

16. Question
How does Azure Disk Encryption secure virtual machine disks?
- Using BitTorrent encryption
- Applying industry-standard encryption features
- Utilizing VPN encryption
- Applying hardware-based encryption
Correct

Incorrect
Question 17 of 30

17. Question
Which Azure feature isolates network traffic in your deployments from other Azure customers?
- Azure Backup
- Azure Site Recovery
- Virtual Networking
- Azure Key Vault
Correct

Incorrect
Question 18 of 30

18. Question
Which feature of Azure Application Gateway protects web applications against common web vulnerabilities?
- TLS Offload
- SQL Injection Protection
- Web Application Firewall
- Layer 7 Load Balancing
Correct

Incorrect
Question 19 of 30

19. Question
What is the purpose of Forced Tunnelling in Azure network security?
- To ensure that all traffic to and from an Azure Virtual Network goes through a virtual security appliance
- To allow incoming connections and respond to them
- To establish secure connections between Azure Virtual Networks
- To optimize web farm productivity
Correct

Incorrect
Question 20 of 30

20. Question
What is the primary goal of network access control in Azure?
- To restrict access to specific devices or subnets
- To ensure high network performance
- To manage Azure Virtual Machines
- To provide application layer inspection
Correct

Incorrect
Question 21 of 30

21. Question
What does Azure Private Link allow you to do?
- Access Azure PaaS Services over a public endpoint
- Access Azure PaaS Services privately in your virtual network
- Expose your virtual network to the public internet
- Control access to Azure Virtual Networks
Correct

Incorrect
Question 22 of 30

22. Question
Which measure is essential to prevent Remote Desktop Protocol (RDP) access from the internet?
- Disable SSH access on network security groups from the internet
- Ensure that 'secure transfer required' is arranged to enable
- Ensure that 'storage service encryption' is set to enabled
- Disable RDP access on network security groups from the internet
Correct

Incorrect
Question 23 of 30

23. Question
You are concerned about overall security in your Azure environment, not just data at rest. Which Azure feature can help you monitor, assess, and remediate security issues across your resources?
- Azure Disk Encryption
- Azure Key Vault
- Azure Security Centre
- Transparent Data Encryption
Correct

Incorrect
Question 24 of 30

24. Question
You are a data administrator responsible for managing data in an Azure environment. You need to ensure compliance with data sovereignty regulations. What does data sovereignty refer to?
- The information is stored in binary digital form
- The data is subject to the laws of the country or region where it is located
- The data is replicated within a selected geographic area
- The data must be stored in multiple data centers for redundancy
Correct

Incorrect
Question 25 of 30

25. Question
What is the role of the Database Encryption Key (DEK) in Transparent Data Encryption (TDE)?
- It secures the master database
- It encrypts data during transmission
- It encrypts data and log files in real-time
- It is a symmetric key used for encrypting data and is secured by a certificate
Correct

Incorrect
Question 26 of 30

26. Question
What could be a potential issue if the Azure Management app ID is excluded in the Apps section of the MFA CA policy?
- Defender for Cloud recommendations will be generated
- MFA will be enforced for all applications
- The CA policy will not work properly
- Conditional Access will be disabled
Correct

Incorrect
Question 27 of 30

27. Question
What is the primary focus of the Microsoft Security Response Centre (MSRC) in terms of security monitoring?
- Monitoring customer environments for potential threats
- Analysing security alerts in Defender for Cloud
- Protecting Azure infrastructure from malicious activity
- Responding to security incidents in real-time
Correct

Incorrect
Question 28 of 30

28. Question
What additional responsibilities come with using Infrastructure as a Service (IaaS) services in Azure?
- Application security and identity management
- OS, infrastructure configuration, and network controls
- Data encryption and endpoint security
- Azure portal access and user authentication
Correct

Incorrect
Question 29 of 30

29. Question
Which Azure services have additional default encryptions in place, apart from the default encryption for Azure storage?
- Azure Virtual Machines
- Azure Cosmos DB and Azure Data Lake
- Azure App Service
- Azure Kubernetes Service
Correct

Incorrect
Question 30 of 30

30. Question
For your Azure databases, you need to implement encryption to protect data at rest. Which combination of features should you use?
- Transparent Data Encryption and Azure Disk Encryption
- Always Encrypted and Azure Security Centre
- Azure Key Vault and Transparent Data Encryption
- Always Encrypted and Transparent Data Encryption
Correct

Incorrect

Cookie	Duration	Description
cookielawinfo-checkbox-analytics	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Analytics".
cookielawinfo-checkbox-functional	11 months	The cookie is set by GDPR cookie consent to record the user consent for the cookies in the category "Functional".
cookielawinfo-checkbox-necessary	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookies is used to store the user consent for the cookies in the category "Necessary".
cookielawinfo-checkbox-others	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Other.
cookielawinfo-checkbox-performance	11 months	This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Performance".
viewed_cookie_policy	11 months	The cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not user has consented to the use of cookies. It does not store any personal data.

Azure Security

Eligible Rewards

300 NyxCoins*

Assessment Summary

Information

Results

Results

Categories

1. Question

2. Question

3. Question

4. Question

5. Question

6. Question

7. Question

8. Question

9. Question

10. Question

11. Question

12. Question

13. Question

14. Question

15. Question

16. Question

17. Question

18. Question

19. Question

20. Question

21. Question

22. Question

23. Question

24. Question

25. Question

26. Question

27. Question

28. Question

29. Question

30. Question