You have a web app named WebApp1.You create a web application firewall (WAF) policy named WAF1.You need to protect WebApp1 by using WAF1.What should you do first?

You have an Azure subscription named Sub1 that contains the Azure key vaults shown in the following table:In Sub1, you create a virtual machine that has the following configurations:Name: VM1Size: DS2v2Resource group: RG1Region: West EuropeOperating system: Windows Server 2016You plan to enable Azure Disk Encryption on VM1.In which key vaults can you store the encryption key for VM1?

You have an Azure subscription that contains an Azure SQL database named sql1.You plan to audit sql1.You need to configure the audit log destination. The solution must meet the following requirements:Support querying events by using the Kusto query language. Minimize administrative effort.What should you configure?

You have a Microsoft Entra tenant that contains a user named User1. You plan to enable passwordless authentication for the tenant. You need to ensure that User1 can enable the combined registration experience. The solution must use the principle of least privilege. Which role should you assign to User1?

You have an Azure subscription that contains an Azure Key Vault Standard key vault named Vault1. Vault1 hosts a 2048-bit RSA key named key1. You need to ensure that key1 is rotated every 90 days. What should you do first?

You have an Azure Kubernetes Service (AKS) cluster that will connect to an Azure Container Registry. You need to use the automatically generated service principal for the AKS cluster to authenticate to the Azure Container Registry. What should you create?

You have an Azure subscription named Sub1. Sub1 contains a virtual network named VNet1 that contains one subnet named Subnet1. Subnet1 contains an Azure virtual machine named VM1 that runs Ubuntu Server 20.04. You create a service endpoint for Microsoft. Storage in Subnet1. You need to ensure that when you deploy Docker containers to VM1, the containers can access Azure Storage resources by using the service endpoint. What should you do on VM1 before you deploy the container?

You have an Azure subscription that contains a virtual machine named VM1.You create an Azure key vault that has the following configurations:Name: Vault5Region: West USResource group: RG1You need to use Vault5 to enable Azure Disk Encryption on VM1. The solution must support backing up VM1 by using AzureBackup.Which key vault settings should you configure?

You have an Azure subscription named Sub1 that contains the resources shown in the following table.You need to ensure that you can provide VM1 with secure access to a database on SQL1 by using a contained databaseuser.What should you do?

You have an Azure subscription that contains four Azure SQL managed instances.You need to evaluate the vulnerability of the managed instances to SQL injection attacks.What should you do first?

You have an Azure subscription that uses Microsoft Defender for Cloud. You have an Amazon Web Service (AWS) account named AWS1 that is connected to defender for Cloud. You need to ensure that AWS foundational Security Best Practices. The solution must minimize administrate effort. What should do you in Defender for Cloud?