# Azure Fundamentals: Azure Security Services

### Question 1: Which CLI command is used to unlock a locked Azure resource group?

>az lock delete --ids

### Question 2: You are writing a PowerShell script that must determine if an Azure resource is locked prior to modification. Which PowerShell cmdlet should you use?

>Get-AzResourceLock

### Question 3: Which two items are required when creating a new Azure AD directory?

>Organization name
>Domain name

### Question 4: Which CLI command creates a custom Azure policy?

>az role definition create --role-definition d:\mycustomrole.json

### Question 5: Which of the following are valid reasons for locking Azure resources?

>Prevent modification
>Prevent deletion

### Question 6: You are creating an Azure AD group. Which of the following are valid group types?

>Office 365
>Security

### Question 7: How does multifactor authentication (MFA) enhance security?

>It requires approval through the Microsoft Authenticator app

### Question 8: Which Azure features allows synchronization between on-premises and Azure AD?

>Azure AD Connect

### Question 9: You are planning the deployment of Azure virtual machines (VMs) for a short project. You need to allow Azure IT technician assistants the ability to only start and stop virtual machines related to the project. Which solution represents the least amount of administrative effort?

>Deploy VMs to one resource group, assign the role to the resource group

### Question 10: Which statement regarding the assignment of custom roles is correct?

>They show up in the same list as built-in roles

### Question 11: Which statements regarding Azure subscriptions are correct?

>Trial subscriptions can be converted to paid
>Billing is applied to each subscription separately

### Question 12: Which of the following is NOT a valid Azure policy effect?

>Delete

### Question 13: Which term is most closely associated with Azure resource tags?

>Metadata