What can you use to protect against malicious links sent in email messages, chat messages, and channels?

What should you use to associate the same identity to more than one Azure virtual machine?

What should you use to associate the same identity to more than one Azure virtual machine?

In the shared responsibility model for an Azure deployment, what is Microsoft solely responsible for managing?

Which Microsoft 365 feature can you use to restrict users from sending email messages that contain lists of customers and their associated credit card numbers?

Which Microsoft portal provides information about how Microsoft cloud services comply with regulatory standard, such as International Organization forStandardization (ISO)?

Which service includes Microsoft Secure Score for Devices?

What can you use to provide a user with a two-hour window to complete an administrative task in Azure? https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure Privileged Identity Management provides time-based and approval-based role activation to mitigate the risks of excessive, unnecessary, or misused access permissions on resources that you care about. Here are some of the key features of Privileged Identity Management: Provide just-in-time privileged access to Azure AD and Azure resources Assign time-bound access to resources using start and end dates Require approval to activate privileged roles Enforce multi-factor authentication to activate any role Use justification to understand why users activate Get notifications when privileged roles are activated Conduct access reviews to ensure users still need roles Download audit history for internal or external audit Prevents removal of the last active Global Administrator role assignment

What should you use to associate the same identity to more than one Azure virtual machine?

What feature in Microsoft Defender for Endpoint provides the first line of defense against cyberthreats by reducing the attack surface? In Microsoft Defender for Endpoint, attack surface reduction (ASR) is described as the first defensive layer in the protection stack, and Network protection is a core ASR capability. Microsoft's documentation states that ''Attack surface reduction provides the first line of defense in the stack.'' It further explains that these capabilities are designed to reduce opportunities for compromise before malware can run or persistence can be established. Within ASR, Microsoft specifically defines Network protection as a feature that ''helps reduce the attack surface of your devices from Internet-based events.'' Microsoft also clarifies how it works: ''It prevents employees from using any application to access dangerous domains that may host phishing scams, exploits, and other malicious content on the Internet.'' Because the question asks for the feature in Defender for Endpoint that delivers the first line of defense by reducing the attack surface, the applicable ASR capability is Network protection. It proactively blocks access to known malicious IPs, domains, and URLs, shrinking the exploitable surface area and thereby reducing risk before an attack can execute. By contrast, automated investigation and automated remediation act after detections to contain and fix issues, and advanced hunting is an analyst-driven, query-based detection and investigation tool---not an attack-surface--reduction control. Hence, Network protection is the correct choice.

Which Microsoft 365 feature can you use to restrict users from sending email messages that contain lists of customers and their associated credit card numbers?

In the shared responsibility model for an Azure deployment, what is Microsoft solely responsible for managing?

You plan to implement a security strategy and place multiple layers of defense throughout a network infrastructure.Which security methodology does this represent?

Which Microsoft Defender for Cloud metric displays the overall security health of an Azure subscription? In Microsoft Defender for Cloud, the metric that represents the overall security health of your Azure subscription is secure score. Microsoft's documentation explains: ''Secure score provides an aggregated view of your security posture across your subscriptions and resources. It's based on security recommendations; addressing those recommendations improves your score.'' Defender for Cloud calculates secure score by assessing controls and recommendations mapped to standards, then weighting them by risk and importance: ''Each recommendation contributes to the secure score. Completing remediation steps increases the score and reduces risk.'' This single percentage view lets security teams quickly gauge how well current configurations and protections align with Microsoft's security best practices and regulatory mappings. Other elements surfaced in Defender for Cloud---like ''resource health,'' ''status of recommendations,'' or ''completed controls''---are components and statuses that feed into or relate to the scoring model, but the overall subscription security health indicator presented and tracked over time is secure score.

What should you use to associate the same identity to more than one Azure virtual machine?

In the Microsoft Cloud Adoption Framework for Azure, which two phases are addressed before the Ready phase? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

Which score measures an organization's progress in completing actions that help reduce risks associated to data protection and regulatory standards?

Which three statements accurately describe the guiding principles of Zero Trust? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point.

Which pillar of identity relates to tracking the resources accessed by a user?

What is the purpose of Azure Active Directory (Azure AD) Password Protection?

What do you use to provide real-time integration between Azure Sentinel and another security source?

What should you use to associate the same identity to more than one Azure virtual machine?

What do you use to provide real-time integration between Azure Sentinel and another security source?

Which Microsoft 365 feature can you use to restrict users from sending email messages that contain lists of customers and their associated credit card numbers?

You are planning on making use of the Azure Bastion service. Can you use the Azure Bastion service to restrict traffic from the Internet onto an Azure virtual machine?

Which feature provides the extended detection and response (XDR) capability of Azure Sentinel?

Which Microsoft portal provides information about how Microsoft cloud services comply with regulatory standard, such as International Organization for Standardization (ISO)?

What types of files can Microsoft Purview sensitive information type classifiers be used to classify?

In the Microsoft Cloud Adoption Framework for Azure, which two phases are addressed before the Ready phase? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point.

Microsoft 365 Endpoint data loss prevention (Endpoint DLP) can be used on which operating systems?

You receive an email that contains a list of words that will be used for a sensitive information type.

What can you specify in Microsoft 365 sensitivity labels?