Previous

Next

Knowledge check

Completed

Consider the following scenario.

Tailwind Traders is moving its online payment system from its datacenter to the cloud. The payment system consists of virtual machines (VMs) and SQL Server databases.

Here are a few security requirements that the company identifies as it plans the migration:

• It wants to ensure a good security posture across all of its systems, both on Azure and on-premises.
• In the datacenter, access to VMs requires a TLS certificate. The company needs a place to safely store and manage its certificates.

Here are some additional requirements that relate to regulatory compliance:

• Tailwind Traders must store certain customer data on-premises, in its datacenter.
• For certain workloads, the company must be the only customer running VMs on the physical hardware.
• The company must only run approved business applications on each VM.

See the following diagram that shows the proposed architecture.

On Azure, Tailwind Traders will use both standard VMs and VMs that run on dedicated physical hardware. In the datacenter, the company will run VMs that can connect to databases within its internal network.

Choose the best response for each question. Then select Check your answers.

Check your knowledge

1.

How can Tailwind Traders enforce having only certain applications run on its VMs?

Connect your VMs to Azure Sentinel.

Create an application control rule in Azure Security Center.

Periodically run a script that lists the running processes on each VM. The IT manager can then shut down any applications that shouldn't be running.

2.

What's the easiest way for Tailwind Traders to combine security data from all of its monitoring tools into a single report that it can take action on?

Collect security data in Azure Sentinel.

Build a custom tool that collects security data, and displays a report through a web application.

Look through each security log daily and email a summary to your team.

3.

Which is the best way for Tailwind Traders to safely store its certificates so that they're accessible to cloud VMs?

Place the certificates on a network share.

Store them on a VM that's protected by a password.

Store the certificates in Azure Key Vault.

4.

How can Tailwind Traders ensure that certain VM workloads are physically isolated from workloads being run by other Azure customers?

Configure the network to ensure that VMs on the same physical host are isolated.

This is not possible. These workloads need to be run on-premises.

Run the VMs on Azure Dedicated Host.

You must answer all questions before checking your work.

Continue