You have an on-premises app named App1. Remote users access App1 by using VPN connections. You have a third-party software as a service (SaaS) app named App2. You need to deploy Global Secure Access to manage access to App1 and App2. What should you use for each app?

You have an on-premises app that processes Personally Identifiable Information (PII) and sends the data to Azure .

The app includes the following components:

• APIs that receive and send the PII

• A data ingestion pipeline that stores the PII in an Azure Data Lake Storage Gen2 account

A compliance policy requires that all the PII data be encrypted by using encryption keys that are regularly rotated and stored in a central repository.

You need to recommend a solution that adhere to the compliance policy. The solution must minimize administrative effort.

Which two components should you include in the recommendation? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point

You have a Microsoft 365 subscription that contains 1,000 users and a group named Group1. All the users have Windows 11 devices. The users sign in to their devices by using their Microsoft Entra account. The users do NOT have administrative rights to their devices.

The members of Group1 remotely assist the users by taking control of user sessions. The remote control sessions run in the security context of the users they are assisting.

You need to recommend a solution that will enable the Group1 members to run apps that require administrative rights to the users ' devices. The solution must ensure that the apps are run in the context of each signed-in standard user.

What should you include in the recommendation?

You have a Microsoft 365 tenant.

You need to recommend a Microsoft 365 Defender solution to enhance security for the tenant. The solution must meet the following requirements:

• Identify users that are downloading an unusually high number of files from Microsoft SharePoint Online sites and are possibly involved in a data exfiltration attempt.

• Block Microsoft Teams messages that contain potentially malicious content by using zero-hour auto purge (ZAP).

What should you recommend for each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

You have an Azure Kubernetes Service (AKS) cluster that hosts Linux nodes.

You need to recommend a solution to ensure that deployed worker nodes have the latest kernel updates. The solution must minimize administrative effort.

What should you recommend?

Your company has a Microsoft 365 E5 subscription.

The company wants to identify and classify data in Microsoft Teams, SharePoint Online, and Exchange Online.

You need to recommend a solution to identify documents that contain sensitive information.

What should you include in the recommendation?

You have an Azure subscription that contains 100 virtual machines. The virtual machines run either Linux or Windows Server.

You need to recommend a solution to discover which virtual machines are internet-facing. What should you include in the recommendation?

You have an Azure subscription that is used as an Azure landing zone for an application. You need to evaluate the security posture of all the workloads in the landing zone. What should you do first?

You have a Microsoft Entra tenant that contains 800 Microsoft Entra joined devices and 700 users. Each user is assigned a single device. All the devices are onboarded to Global Secure Access.

You use a software as a service (SaaS) app named App1 that is hosted by a third party. Users access App1 through the internet.

You need to ensure that all the devices access App1 by using the Global Secure Access client.

What should you use?

Your network contains an Active Directory Domain Services (AD DS) domain named Domain! You have a Microsoft Entra tenant.

Domain1 syncs with the tenant by using Microsoft Entra Connect Sync. You need to monitor Domainl for privilege escalation attacks. What should you use?