Microsoft AZ-500 Practice Test 69
Question 680
An organization stores sensitive data in Azure Storage and needs to prevent all newly created containers from being exposed anonymously. A review identifies this consequence: Private data can be disclosed without credentials if an account and container permit anonymous reads. What is the BEST controlled recovery once this failure is recognized?
- The controlled remediation is to leave container access set to public and rely on obscure object names.
- The controlled remediation is to assume a private SAS URL guarantees the container itself is not anonymous.
- The controlled remediation is to enforce private blob access and verify unauthenticated requests fail.
- The controlled remediation is to disable Azure RBAC auditing instead of changing public access policy.
Explanation
Correct Answer
C:Test using these records: Account AllowBlobPublicAccess setting, container public access state and unauthenticated request result. Anonymous blob access is controlled by account and container public access configuration.
Incorrect Answers
A:Leave container access set to public and rely on obscure object names. This would not reliably restore the intended security boundary. Private data can be disclosed without credentials if an account and container permit anonymous reads. The appropriate controlled recovery is: Enforce private blob access and verify unauthenticated requests fail.
B:Assume a private SAS URL guarantees the container itself is not anonymous. This would not reliably restore the intended security boundary. Private data can be disclosed without credentials if an account and container permit anonymous reads. The appropriate controlled recovery is: Enforce private blob access and verify unauthenticated requests fail.
D:Disable Azure RBAC auditing instead of changing public access policy. This would not reliably restore the intended security boundary. Private data can be disclosed without credentials if an account and container permit anonymous reads. The appropriate controlled recovery is: Enforce private blob access and verify unauthenticated requests fail.
Question 681
A user accidentally deletes an important blob and recovery is required within a defined retention period. What is the BEST supported implementation or corrective action?
- Enable versioning only and assume it always has the identical delete retention semantics.
- Disable all backups after enabling a short soft delete period.
- Enable Blob soft delete with appropriate retention and verify an authorized undelete operation.
- Assume deleted blobs are recoverable forever regardless of retention.
Explanation
Correct Answer
C:Confirm the change against these records: Soft delete retention policy, deleted blob list, restore action and recovered content. Blob soft delete retains recoverable deleted object data for a configured period.
Incorrect Answers
A:Without the retention mechanism, an accidental delete may be permanent before a backup restores it. Enable versioning only and assume it always has the identical delete retention semantics.
B:Disable all backups after enabling a short soft delete period. The proposed change targets the wrong mechanism or lacks essential validation. Blob soft delete retains recoverable deleted object data for a configured period. Relevant evidence is soft delete retention policy, deleted blob list, restore action and recovered content.
D:Without the retention mechanism, an accidental delete may be permanent before a backup restores it. The intended action is: Enable Blob soft delete with appropriate retention and verify an authorized undelete operation.
Question 682
A user accidentally deletes an important blob and recovery is required within a defined retention period. Which evidence BEST verifies the intended technical behavior?
- An outdated deployment template without current effective settings.
- A storage account resource name without its encryption or retention configuration.
- Soft delete retention policy, deleted blob list, restore action and recovered content.
- The identity name without a corresponding workload data authorization test.
Explanation
Correct Answer
C:These records test the actual blob soft delete recovery behavior rather than an unrelated dashboard state. Blob soft delete retains recoverable deleted object data for a configured period.
Incorrect Answers
A:On its own, that evidence does not prove the specified security control works. The more relevant observations are: Soft delete retention policy, deleted blob list, restore action and recovered content.
B:On its own, that evidence does not prove the specified security control works. Blob soft delete retains recoverable deleted object data for a configured period.
D:On its own, that evidence does not prove the specified security control works. In the given case, a user accidentally deletes an important blob and recovery is required within a defined retention period.
Question 683
A user accidentally deletes an important blob and recovery is required within a defined retention period. Which principle BEST explains why the recommended solution is appropriate?
- A protected storage account is immune to every accidental deletion and overwrite.
- Encrypting network transport guarantees all storage at-rest and column-level security requirements.
- A running compute resource automatically enforces least-privilege Kubernetes permissions.
- Blob soft delete retains recoverable deleted object data for a configured period.
Explanation
Correct Answer
D:Confirmation depends on Soft delete retention policy, deleted blob list, restore action and recovered content. This principle supports the security response: Enable Blob soft delete with appropriate retention and verify an authorized undelete operation.
Incorrect Answers
A:A protected storage account is immune to every accidental deletion and overwrite. This is an incorrect assumption for blob soft delete recovery. The relevant security behavior is: Blob soft delete retains recoverable deleted object data for a configured period. Check evidence such as soft delete retention policy, deleted blob list, restore action and recovered content.
B:Encrypting network transport guarantees all storage at-rest and column-level security requirements. This is an incorrect assumption for blob soft delete recovery. The relevant security behavior is: Blob soft delete retains recoverable deleted object data for a configured period. Check evidence such as soft delete retention policy, deleted blob list, restore action and recovered content.
C:A running compute resource automatically enforces least-privilege Kubernetes permissions. This is an incorrect assumption for blob soft delete recovery. The relevant security behavior is: Blob soft delete retains recoverable deleted object data for a configured period. Check evidence such as soft delete retention policy, deleted blob list, restore action and recovered content.
Question 684
A user accidentally deletes an important blob and recovery is required within a defined retention period. Suppose the operator instead follows this unsafe shortcut: Enable versioning only and assume it always has the identical delete retention semantics. What is the MOST significant failure introduced by that shortcut?
- Keeping historic blob versions is the cause of the missing RBAC assignment.
- The security flaw is that the team retained a tested database backup.
- Inspecting encryption settings itself disables a healthy disk.
- Without the retention mechanism, an accidental delete may be permanent before a backup restores it.
Explanation
Correct Answer
D:The suitable control is: Enable Blob soft delete with appropriate retention and verify an authorized undelete operation. This is a material consequence of the incorrect shortcut.
Incorrect Answers
A:This does not explain the real blob soft delete recovery weakness after the shortcut. The material failure is: Without the retention mechanism, an accidental delete may be permanent before a backup restores it.
B:This does not explain the real blob soft delete recovery weakness after the shortcut. Inspect evidence such as soft delete retention policy, deleted blob list, restore action and recovered content.
C:This does not explain the real blob soft delete recovery weakness after the shortcut. In the given case, a user accidentally deletes an important blob and recovery is required within a defined retention period.
Question 685
A user accidentally deletes an important blob and recovery is required within a defined retention period. A review identifies this consequence: Without the retention mechanism, an accidental delete may be permanent before a backup restores it. What is the BEST controlled recovery once this failure is recognized?
- Disable all backups after enabling a short soft delete period.
- Assume deleted blobs are recoverable forever regardless of retention.
- Enable versioning only and assume it always has the identical delete retention semantics.
- Set adequate retention and test deletion and recovery in a nonproduction sample.
Explanation
Correct Answer
D:Test using these records: Soft delete retention policy, deleted blob list, restore action and recovered content. This addresses the observed security problem while providing a verifiable outcome.
Incorrect Answers
A:Disable all backups after enabling a short soft delete period. This would not reliably restore the intended security boundary. Without the retention mechanism, an accidental delete may be permanent before a backup restores it. The appropriate controlled recovery is: Set adequate retention and test deletion and recovery in a nonproduction sample.
B:Assume deleted blobs are recoverable forever regardless of retention. This would not reliably restore the intended security boundary. Without the retention mechanism, an accidental delete may be permanent before a backup restores it. The appropriate controlled recovery is: Set adequate retention and test deletion and recovery in a nonproduction sample.
C:Enable versioning only and assume it always has the identical delete retention semantics. This would not reliably restore the intended security boundary. Without the retention mechanism, an accidental delete may be permanent before a backup restores it. The appropriate controlled recovery is: Set adequate retention and test deletion and recovery in a nonproduction sample.
Question 686
A data protection design needs to recover deleted blob data after an application error. Which configuration decision MOST directly resolves the issue?
- For this Azure workload, the team should disable all backups after enabling a short soft delete period.
- For this Azure workload, the team should assume deleted blobs are recoverable forever regardless of retention.
- For this Azure workload, the team should enable versioning only and assume it always has the identical delete retention semantics.
- For this Azure workload, the team should enable Blob soft delete with appropriate retention and verify an authorized undelete operation.
Explanation
Correct Answer
D:Confirm the change against these records: Soft delete retention policy, deleted blob list, restore action and recovered content.
Incorrect Answers
A:Disable all backups after enabling a short soft delete period. The proposed change targets the wrong mechanism or lacks essential validation. Blob soft delete retains recoverable deleted object data for a configured period. Relevant evidence is soft delete retention policy, deleted blob list, restore action and recovered content.
B:Without the retention mechanism, an accidental delete may be permanent before a backup restores it. In the given case, a data protection design needs to recover deleted blob data after an application error.
C:Enable versioning only and assume it always has the identical delete retention semantics.
Question 687
A data protection design needs to recover deleted blob data after an application error. What evidence most directly confirms the intended security behavior?
- In this security review, examine a database online indicator without a log of the protected operation.
- In this security review, examine soft delete retention policy, deleted blob list, restore action and recovered content.
- In this security review, examine an outdated deployment template without current effective settings.
- In this security review, examine a storage account resource name without its encryption or retention configuration.
Explanation
Correct Answer
B:These records test the actual blob soft delete recovery behavior rather than an unrelated dashboard state. The intended action is: Enable Blob soft delete with appropriate retention and verify an authorized undelete operation.
Incorrect Answers
A:On its own, that evidence does not prove the specified security control works. In the given case, a data protection design needs to recover deleted blob data after an application error.
C:The more relevant observations are: Soft delete retention policy, deleted blob list, restore action and recovered content.
D:Blob soft delete retains recoverable deleted object data for a configured period.
Question 688
A data protection design needs to recover deleted blob data after an application error. Which security principle best explains the intended decision?
- The applicable security principle is that a running compute resource automatically enforces least-privilege Kubernetes permissions.
- The applicable security principle is that blob soft delete retains recoverable deleted object data for a configured period.
- The applicable security principle is that a protected storage account is immune to every accidental deletion and overwrite.
- The applicable security principle is that setting a registry image tag guarantees security monitoring of the running workload.
Explanation
Correct Answer
B:Confirmation depends on Soft delete retention policy, deleted blob list, restore action and recovered content.
Incorrect Answers
A:A running compute resource automatically enforces least-privilege Kubernetes permissions. This is an incorrect assumption for blob soft delete recovery. The relevant security behavior is: Blob soft delete retains recoverable deleted object data for a configured period. Check evidence such as soft delete retention policy, deleted blob list, restore action and recovered content.
C:A protected storage account is immune to every accidental deletion and overwrite. This is an incorrect assumption for blob soft delete recovery. The relevant security behavior is: Blob soft delete retains recoverable deleted object data for a configured period. Check evidence such as soft delete retention policy, deleted blob list, restore action and recovered content.
D:Setting a registry image tag guarantees security monitoring of the running workload. This is an incorrect assumption for blob soft delete recovery. The relevant security behavior is: Blob soft delete retains recoverable deleted object data for a configured period. Check evidence such as soft delete retention policy, deleted blob list, restore action and recovered content.
Question 689
A data protection design needs to recover deleted blob data after an application error. Suppose the operator instead follows this unsafe shortcut: Enable versioning only and assume it always has the identical delete retention semantics. Which resulting risk or fault should the reviewer identify?
- The resulting security weakness is that inspecting encryption settings itself disables a healthy disk.
- The resulting security weakness is that without the retention mechanism, an accidental delete may be permanent before a backup restores it.
- The resulting security weakness is that the observed issue is fully explained by the service display name.
- The resulting security weakness is that the security flaw is that the team retained a tested database backup.
Explanation
Correct Answer
B:The suitable control is: Enable Blob soft delete with appropriate retention and verify an authorized undelete operation. Blob soft delete retains recoverable deleted object data for a configured period.
Incorrect Answers
A:This does not explain the real blob soft delete recovery weakness after the shortcut. In the given case, a data protection design needs to recover deleted blob data after an application error.
C:This does not explain the real blob soft delete recovery weakness after the shortcut. The observed issue is fully explained by the service display name.
D:This does not explain the real blob soft delete recovery weakness after the shortcut. The security flaw is that the team retained a tested database backup.
Question 690
A data protection design needs to recover deleted blob data after an application error. A review identifies this consequence: Without the retention mechanism, an accidental delete may be permanent before a backup restores it. Which remediation most directly restores the intended behavior?
- The controlled remediation is to set adequate retention and test deletion and recovery in a nonproduction sample.
- The controlled remediation is to assume deleted blobs are recoverable forever regardless of retention.
- The controlled remediation is to enable versioning only and assume it always has the identical delete retention semantics.
- The controlled remediation is to disable all backups after enabling a short soft delete period.
Explanation
Correct Answer
A:Test using these records: Soft delete retention policy, deleted blob list, restore action and recovered content. Blob soft delete retains recoverable deleted object data for a configured period.
Incorrect Answers
B:Assume deleted blobs are recoverable forever regardless of retention. This would not reliably restore the intended security boundary. Without the retention mechanism, an accidental delete may be permanent before a backup restores it. The appropriate controlled recovery is: Set adequate retention and test deletion and recovery in a nonproduction sample.
C:Enable versioning only and assume it always has the identical delete retention semantics. This would not reliably restore the intended security boundary. Without the retention mechanism, an accidental delete may be permanent before a backup restores it. The appropriate controlled recovery is: Set adequate retention and test deletion and recovery in a nonproduction sample.
D:Disable all backups after enabling a short soft delete period. This would not reliably restore the intended security boundary. Without the retention mechanism, an accidental delete may be permanent before a backup restores it. The appropriate controlled recovery is: Set adequate retention and test deletion and recovery in a nonproduction sample.
