Practice Exam 1
5 of this form’s 40 questions, drawn from across its domains, free. The explanation on every one of them is free too, at every tier, and always will be.
Question 1 of 5
Secure compute, storage, and databasesAn administrator wants a VM's temp disks and disk caches encrypted at rest and in flight to the storage clusters, beyond the always on server side encryption. Which option provides that?
Question 2 of 5
Manage identity and accessA team wants one role assignment to grant a Website Contributor role for a single resource group and no wider. Which scope levels does Azure RBAC allow for that assignment?
Question 3 of 5
Manage security operationsA subnet's network security group already carries an allow rule for RDP at priority 200. Just-in-time access is then enabled for RDP on VMs in that subnet. What is the effect?
Question 4 of 5
Secure networkingA team on DDoS IP Protection wants rapid response engagement during an attack and cost protection for the scaling charges an attack causes. What has to change?
Question 5 of 5
Manage identity and accessA tenant requires approval to activate its Microsoft Entra roles, names no approvers anywhere, and holds every Privileged Role Administrator assignment as eligible only. What is the exposure?
0 of 40 completed
The other 35 questions are the rest of this form: same 120 minute clock, same 700 cut score, and the same explanation on every question, which is never behind the wall. Practice Exam 1 of 3 on Azure Security Engineer.
What this exam covers
- Manage identity and access11 questions / 28% of the exam
- Secure networking9 questions / 22% of the exam
- Secure compute, storage, and databases9 questions / 22% of the exam
- Manage security operations11 questions / 28% of the exam
Checking what you already have access to.
Every question is original, written from the published objectives. We never reproduce, paraphrase, or imitate real exam content, and neither should anything else you study from.