Security pillar principles in Azure - Practice Problems & Coding Challenges

Challenge - 5 Problems

🧠 Conceptual

intermediate

Understanding Azure Security Pillar Principle: Identity and Access Management

Which Azure service is primarily used to manage user identities and control access to resources securely?

A Azure Active Directory (Azure AD)

B Azure Monitor

C Azure Virtual Network

D Azure Blob Storage

💡 Hint

Think about the service that handles user sign-in and permissions.

Azure Active Directory (Azure AD) is the core service for identity and access management in Azure. It controls who can sign in and what resources they can access.

❓ Architecture

intermediate

Designing Secure Network Architecture in Azure

Which Azure feature helps isolate network traffic and enforce security policies between different parts of your cloud environment?

A Azure Cosmos DB

B Azure Functions

C Azure Virtual Network (VNet) with Network Security Groups (NSGs)

D Azure Logic Apps

💡 Hint

Consider the service that controls traffic flow and segmentation.

Azure Virtual Network (VNet) allows you to create isolated networks, and Network Security Groups (NSGs) enforce rules to control traffic between resources.

❓ security

advanced

Azure Security Principle: Data Protection at Rest

Which Azure service or feature ensures that data stored in Azure Storage is encrypted automatically without user intervention?

A Azure Storage Service Encryption (SSE)

B Azure Traffic Manager

C Azure DevOps Pipelines

D Azure Load Balancer

💡 Hint

Think about encryption applied directly to stored data.

Azure Storage Service Encryption automatically encrypts data at rest in Azure Storage accounts to protect it from unauthorized access.

✅ Best Practice

advanced

Implementing Principle of Least Privilege in Azure

Which Azure feature allows assigning only the necessary permissions to users or services to follow the principle of least privilege?

A Azure Event Grid

B Azure Virtual Machines

C Azure CDN

D Azure Role-Based Access Control (RBAC)

💡 Hint

Consider the system that manages permissions and roles.

Azure RBAC lets you assign specific roles with limited permissions to users or services, ensuring they have only what they need.

❓ service_behavior

expert

Azure Security Center Behavior for Threat Detection

What is the primary behavior of Azure Security Center when it detects a potential security threat in your Azure environment?

A It disables all network traffic to the affected resource immediately.

B It generates a security alert and provides recommendations to remediate the threat.

C It automatically deletes the affected resources without notification.

D It sends a billing alert to increase your subscription cost.

💡 Hint

Think about how a security monitoring service helps you respond to threats.

Azure Security Center detects threats, creates alerts, and suggests actions to fix issues, helping you protect your environment.