Home/Directory/azure

azure Practice Questions

Page 10 of 15 (1456 total questions)

You are deploying Azure AD Connect with Password Hash Synchronization (PHS). You want to ensure that corporate users automatically sign in to Azure AD-connected applications without typing their passwords when they are on their corporate Windows 10 devices connected to the internal network. What feature must you enable?
View Question & Answer ➔
You want to manage your on-premises Windows Server 2022 machines using the Azure Portal, apply Azure Policies to them, and monitor them using Azure Monitor. What should you install on the on-premises servers?
View Question & Answer ➔
You want to deploy Windows Admin Center to manage 50 on-premises Windows Servers. You want multiple IT administrators in your team to access the Windows Admin Center interface from their own web browsers. Which deployment type should you use?
View Question & Answer ➔
You have a Windows Server file server with 10 TB of files. You configure Azure File Sync to sync this server to an Azure file share. The local server only has 2 TB of free space left, and you want to ensure the local disk never runs out of space while still keeping all files visible to end-users. Which feature should you enable?
View Question & Answer ➔
You are using the Storage Migration Service to migrate file shares from an old Windows Server 2012 R2 machine to a new Windows Server 2022 machine. You want the new server to assume the exact identity, IP address, and share names of the old server so users don't need to update their mapped drives. Which step in the Storage Migration Service performs this action?
View Question & Answer ➔
You are migrating several on-premises Hyper-V virtual machines to Azure. You want to run the Hyper-V role inside an Azure VM to host these nested VMs. What must you ensure regarding the Azure VM size?
View Question & Answer ➔
You are building a 2-node Windows Server Failover Cluster (WSFC) split across two different datacenters. You need to configure a cluster quorum witness. Because the cluster is stretched across sites, you want a highly available witness hosted in the cloud. Which witness type should you configure?
View Question & Answer ➔
Your company uses VMware vSphere on-premises. You want to implement a disaster recovery solution that replicates your VMware VMs to Azure so they can be failed over as Azure VMs in the event of a disaster. Which service should you use?
View Question & Answer ➔
You need to back up individual files and folders from an on-premises Windows Server directly to Azure without deploying a separate backup server (like DPM or MABS) on-premises. Which agent should you install on the server?
View Question & Answer ➔
You are deploying a new Active Directory Domain Controller to a branch office. The physical security of the branch office is poor, and you are concerned the server could be stolen. How should you deploy the domain controller to minimize the risk of credential theft?
View Question & Answer ➔
You want to allow junior administrators to restart the DNS Server service on a Windows Server using PowerShell Remoting. However, you do NOT want to give them local Administrator rights on the server. Which feature should you configure?
View Question & Answer ➔
You are creating a new Hyper-V virtual machine that will run Windows Server 2022. You want to ensure the VM supports UEFI firmware, Secure Boot, and PXE boot using a standard network adapter. Which virtual machine generation should you select?
View Question & Answer ➔
You have a mix of Azure VMs and on-premises Windows Servers connected via Azure Arc. You want a centralized dashboard in Azure to assess the missing patches on all these servers and schedule update deployments. Which Azure service should you use?
View Question & Answer ➔
You want to replicate volumes synchronously from a Windows Server in your primary datacenter to a Windows Server in a secondary datacenter for disaster recovery. Which Windows Server feature should you use?
View Question & Answer ➔
Remote workers need to access on-premises file shares over the internet without using a traditional VPN. You want to use the SMB over QUIC protocol for secure, reliable file access. Which specific OS version is required for the file server hosting the shares?
View Question & Answer ➔
An on-premises Windows Server does not have a public IP or VPN connection to Azure. You want to easily establish a Point-to-Site VPN connection from this specific server to an Azure Virtual Network using a wizard in Windows Admin Center. What is this feature called?
View Question & Answer ➔
You want to protect cached domain credentials on a Windows Server from Pass-the-Hash and ticket-extraction attacks using virtualization-based security (VBS). Which Windows feature should you enable?
View Question & Answer ➔
You host an internal web application on an on-premises IIS server. You want remote users to access this application from the internet securely without opening inbound firewall ports or using a VPN. Which Azure AD feature should you use?
View Question & Answer ➔
You are deploying a Storage Spaces Direct (S2D) cluster using Windows Server 2022. You want to pool local NVMe and SSD drives across multiple servers to create highly available, scalable storage. What is the minimum number of nodes required to create a Storage Spaces Direct cluster?
View Question & Answer ➔
You have onboarded 100 on-premises Windows Servers to Azure Arc. You want to automatically audit whether these servers have a specific registry key configured. Which Azure service allows you to evaluate this configuration state inside the guest OS of the Arc-enabled servers?
View Question & Answer ➔
You want to deploy Endpoint Detection and Response (EDR) capabilities to your on-premises Windows Servers to detect advanced malware and security breaches. Which Azure/Microsoft 365 service provides this when integrated via Azure Arc?
View Question & Answer ➔
In Azure File Sync terminology, what defines the topology of the sync relationship, consisting of one cloud endpoint (Azure file share) and one or more server endpoints (local paths)?
View Question & Answer ➔
You are managing DHCP for your on-premises network. You want two Windows Server DHCP servers to share a subnet scope, actively dividing client requests between them to balance the load. Which DHCP failover mode should you configure?
View Question & Answer ➔
You are promoting a new Windows Server to a Domain Controller. Which prerequisite must be met regarding the server's network configuration before you run the AD DS Configuration Wizard?
View Question & Answer ➔
You are designing a serverless microservices architecture for a new startup. The application needs to handle unpredictable traffic spikes without managing any underlying infrastructure. Which compute service should you use?
View Question & Answer ➔
Your company needs to run a simple piece of code in response to a web request without managing any underlying infrastructure. Which service should you choose?
View Question & Answer ➔
Which Azure Functions hosting plan is most cost-effective for applications with infrequent and unpredictable traffic spikes?
View Question & Answer ➔
You want to create a long-running, stateful workflow using serverless functions. Which feature of Azure Functions should you use?
View Question & Answer ➔
Which trigger type should you use in Azure Functions if you want to execute code whenever a message is added to an Azure Queue Storage?
View Question & Answer ➔
You need to process data changes in a Cosmos DB container in real-time. Which Azure Functions trigger is best suited for this?
View Question & Answer ➔
In serverless computing, what does the term 'cold start' refer to?
View Question & Answer ➔
Which tool can you use to monitor the execution, performance, and errors of your Azure Functions in real-time?
View Question & Answer ➔
You need to secure an Azure Function so that it can only be called by a specific client application using an API key. Where do you configure this?
View Question & Answer ➔
Your team is using Azure Functions to build a microservices backend. They want to ensure that dependencies are managed efficiently and start times are minimized. Which language is typically recommended for fastest cold starts?
View Question & Answer ➔
You need to host a static website (HTML, CSS, JS) with the lowest possible cost and high durability. You do not need server-side processing. Which storage solution should you choose?
View Question & Answer ➔
You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?
View Question & Answer ➔
Which access tier in Azure Blob Storage is optimized for storing data that is accessed infrequently and stored for at least 30 days?
View Question & Answer ➔
You need to store data for compliance purposes that will rarely be accessed. It must be stored for at least 180 days. Which storage tier offers the lowest cost?
View Question & Answer ➔
What is the purpose of a Shared Access Signature (SAS) in Azure Blob Storage?
View Question & Answer ➔
Which Azure feature allows you to automatically move blobs to a cooler storage tier or delete them based on their age?
View Question & Answer ➔
Which redundancy option in Azure Storage provides the highest level of durability by replicating data across three physically separate availability zones within a single region?
View Question & Answer ➔
You want to enable users to view photos stored in a container without requiring any authentication. Which public access level should you set for the container?
View Question & Answer ➔
Which Azure service can be used to transfer large amounts of data (terabytes or petabytes) to Azure Storage using physical shipping devices?
View Question & Answer ➔
Which feature of Azure Blob Storage provides a hierarchical namespace, optimized for big data analytics workloads?
View Question & Answer ➔
A financial application requires a relational database that supports high availability and automated backups. The database must be fully managed to reduce operational overhead. Which service fits these requirements?
View Question & Answer ➔
Which Azure SQL Database service tier is best suited for most business workloads, providing balanced compute and storage options?
View Question & Answer ➔
Your application requires a relational database that can automatically scale compute resources up and down based on demand, and pause during periods of inactivity to save costs. Which option should you choose?
View Question & Answer ➔
Which Azure service is a fully managed relational database that provides near 100% compatibility with the latest SQL Server (Enterprise Edition) database engine?
View Question & Answer ➔
What is the purpose of Transparent Data Encryption (TDE) in Azure SQL Database?
View Question & Answer ➔
You need to store and manage relational data for multiple independent databases while sharing a fixed set of resources (CPU and memory). Which Azure SQL Database feature should you use?
View Question & Answer ➔
Which Azure SQL Database feature allows you to create a read-only replica of your database in a different Azure region for disaster recovery?
View Question & Answer ➔
Which tool provides an interactive console for running SQL queries against your Azure SQL Database directly from the Azure Portal?
View Question & Answer ➔
Which Azure service is best for migrating an existing on-premises SQL Server database to an Azure Virtual Machine without changing the database engine?
View Question & Answer ➔
You want to ensure that your Azure SQL Database has highly available storage by using three copies of the data within the same data center. Which redundancy level is this?
View Question & Answer ➔
Your application generates millions of clickstream events per second. You need a service to ingest and buffer this data in real-time before processing it. Which service fits this need?
View Question & Answer ➔
Which Azure Cosmos DB API should you use if your application is currently using a document database model and you want to migrate with minimal code changes?
View Question & Answer ➔
Your application needs a globally distributed database that provides guaranteed single-digit millisecond latency at the 99th percentile. Which service is designed for this?
View Question & Answer ➔
In Azure Cosmos DB, what is the purpose of 'Request Units' (RUs)?
View Question & Answer ➔
Which consistency level in Azure Cosmos DB provides the highest level of consistency but the highest latency and lowest availability?
View Question & Answer ➔
Which consistency level is the default for a new Azure Cosmos DB account and offers a balance between performance and consistency that is ideal for most applications?
View Question & Answer ➔
You are building a social networking application that needs to map complex relationships between users (e.g., 'friends of friends'). Which Cosmos DB API should you use?
View Question & Answer ➔
What is the primary benefit of the 'Multi-region writes' feature in Azure Cosmos DB?
View Question & Answer ➔
Which Cosmos DB feature allows you to run analytical queries on your operational data without affecting the performance of your transactional workloads?
View Question & Answer ➔
Which Azure Cosmos DB API is specifically designed for applications that require a key-value store and want to port from Azure Table Storage?
View Question & Answer ➔
You are analyzing petabytes of data for business intelligence reports. You need a fully managed, serverless enterprise data warehouse that supports SQL queries. Which service is best suited for this task?
View Question & Answer ➔
Which Azure service is an enterprise analytics service that accelerates time to insight across data warehouses and big data systems by bringing together SQL, Spark, and Data Integration?
View Question & Answer ➔
In Azure Synapse Analytics, what is the purpose of 'SQL Serverless' pools?
View Question & Answer ➔
Which component of Azure Synapse Analytics allows you to build and run machine learning models using Apache Spark?
View Question & Answer ➔
Which feature of Azure Synapse allows you to create cloud-scale data integration (ETL) workflows to move and transform data between various sources?
View Question & Answer ➔
You want to perform high-performance, large-scale data warehousing by storing data in a columnar format on a distributed architecture. Which feature of Synapse should you use?
View Question & Answer ➔
Which web-based interface is used by developers and data scientists to manage all their Synapse resources and write code (SQL/Python/Scala) in one place?
View Question & Answer ➔
What is the benefit of 'Synapse Link for Azure Cosmos DB'?
View Question & Answer ➔
Which Azure Synapse component is specifically designed to work with real-time telemetry, logs, and time-series data?
View Question & Answer ➔
You want to visualize the results of your Synapse analytics directly within the workspace. Which integration allows you to build dashboards easily?
View Question & Answer ➔
Your media company streams video content to users globally. Users in different regions are experiencing high latency. You need to improve performance by caching content closer to the users. Which service should you implement?
View Question & Answer ➔
What is the primary goal of using Azure Content Delivery Network (CDN)?
View Question & Answer ➔
What are 'Edge Locations' (or Point of Presence - PoP) in the context of Azure CDN?
View Question & Answer ➔
You want to clear the cached content from all CDN edge locations because a static file has been updated. Which action should you take?
View Question & Answer ➔
Which feature of Azure CDN allows you to serve different content based on the user's geographic location or device type?
View Question & Answer ➔
Which of the following can be an 'origin' for an Azure CDN endpoint?
View Question & Answer ➔
How can you improve security on your CDN endpoint so that only users with a valid token can access specific content?
View Question & Answer ➔
Which Azure CDN SKU provides the most advanced security features, including integrated WAF and Bot protection?
View Question & Answer ➔
What does 'Dynamic Site Acceleration' (DSA) do in Azure CDN?
View Question & Answer ➔
What is the typical 'Time to Live' (TTL) for content in the Azure CDN if you don't specify one in your origin's headers?
View Question & Answer ➔
Your public-facing web application is under a Distributed Denial of Service (DDoS) attack. You need a managed service to detect and mitigate these attacks automatically. What should you enable?
View Question & Answer ➔
Which Azure service provides protection against Distributed Denial of Service (DDoS) attacks that target your Azure resources?
View Question & Answer ➔
What is the primary difference between Azure DDoS Infrastructure Protection (Basic) and DDoS Network Protection (Standard)?
View Question & Answer ➔
Which feature of Azure DDoS Network Protection provides cost protection against resource scaling charges incurred during a documented DDoS attack?
View Question & Answer ➔
Does Azure DDoS Protection require any changes to your application's code to be effective?
View Question & Answer ➔
Which Azure tool can you use to view the logs and metrics related to a DDoS attack that was mitigated by Azure DDoS Protection?
View Question & Answer ➔
What is 'Adaptive Tuning' in the context of Azure DDoS Network Protection?
View Question & Answer ➔
Which Azure service should you combine with DDoS Protection to provide security at the Application Layer (OSI Layer 7)?
View Question & Answer ➔
Can Azure DDoS Protection be used to protect resources in an on-premises data center?
View Question & Answer ➔
Which tier of Azure DDoS Protection is automatically enabled for every Azure customer at no additional cost?
View Question & Answer ➔
Company policy requires that all database encryption keys be managed centrally and rotated annually. You need a secure, durable service to store and manage these cryptographic keys. Which service should you use?
View Question & Answer ➔
What is the primary purpose of Azure Key Vault?
View Question & Answer ➔
In Azure Key Vault, what is the difference between a 'secret' and a 'key'?
View Question & Answer ➔
Which Azure Key Vault feature allows you to recover deleted vaults or individual objects for a certain period after deletion?
View Question & Answer ➔
Which feature of Key Vault ensures that a deleted object or vault cannot be permanently deleted (purged) until the retention period has passed?
View Question & Answer ➔
You want to grant an Azure Virtual Machine access to a secret in a Key Vault without storing any credentials inside the VM's code. What should you use?
View Question & Answer ➔

← PreviousPage 10 of 15Next →

azure Practice Questions

You want to manage your on-premises Windows Server 2022 machines using the Azure Portal, apply Azure Policies to them, and monitor them using Azure Monitor. What should you install on the on-premises servers?

You want to deploy Windows Admin Center to manage 50 on-premises Windows Servers. You want multiple IT administrators in your team to access the Windows Admin Center interface from their own web browsers. Which deployment type should you use?

You are migrating several on-premises Hyper-V virtual machines to Azure. You want to run the Hyper-V role inside an Azure VM to host these nested VMs. What must you ensure regarding the Azure VM size?

You are building a 2-node Windows Server Failover Cluster (WSFC) split across two different datacenters. You need to configure a cluster quorum witness. Because the cluster is stretched across sites, you want a highly available witness hosted in the cloud. Which witness type should you configure?

Your company uses VMware vSphere on-premises. You want to implement a disaster recovery solution that replicates your VMware VMs to Azure so they can be failed over as Azure VMs in the event of a disaster. Which service should you use?

You need to back up individual files and folders from an on-premises Windows Server directly to Azure without deploying a separate backup server (like DPM or MABS) on-premises. Which agent should you install on the server?

You are deploying a new Active Directory Domain Controller to a branch office. The physical security of the branch office is poor, and you are concerned the server could be stolen. How should you deploy the domain controller to minimize the risk of credential theft?

You want to allow junior administrators to restart the DNS Server service on a Windows Server using PowerShell Remoting. However, you do NOT want to give them local Administrator rights on the server. Which feature should you configure?

You are creating a new Hyper-V virtual machine that will run Windows Server 2022. You want to ensure the VM supports UEFI firmware, Secure Boot, and PXE boot using a standard network adapter. Which virtual machine generation should you select?

You have a mix of Azure VMs and on-premises Windows Servers connected via Azure Arc. You want a centralized dashboard in Azure to assess the missing patches on all these servers and schedule update deployments. Which Azure service should you use?

You want to replicate volumes synchronously from a Windows Server in your primary datacenter to a Windows Server in a secondary datacenter for disaster recovery. Which Windows Server feature should you use?

Remote workers need to access on-premises file shares over the internet without using a traditional VPN. You want to use the SMB over QUIC protocol for secure, reliable file access. Which specific OS version is required for the file server hosting the shares?

An on-premises Windows Server does not have a public IP or VPN connection to Azure. You want to easily establish a Point-to-Site VPN connection from this specific server to an Azure Virtual Network using a wizard in Windows Admin Center. What is this feature called?

You want to protect cached domain credentials on a Windows Server from Pass-the-Hash and ticket-extraction attacks using virtualization-based security (VBS). Which Windows feature should you enable?

You host an internal web application on an on-premises IIS server. You want remote users to access this application from the internet securely without opening inbound firewall ports or using a VPN. Which Azure AD feature should you use?

You are deploying a Storage Spaces Direct (S2D) cluster using Windows Server 2022. You want to pool local NVMe and SSD drives across multiple servers to create highly available, scalable storage. What is the minimum number of nodes required to create a Storage Spaces Direct cluster?

You have onboarded 100 on-premises Windows Servers to Azure Arc. You want to automatically audit whether these servers have a specific registry key configured. Which Azure service allows you to evaluate this configuration state inside the guest OS of the Arc-enabled servers?

You want to deploy Endpoint Detection and Response (EDR) capabilities to your on-premises Windows Servers to detect advanced malware and security breaches. Which Azure/Microsoft 365 service provides this when integrated via Azure Arc?

In Azure File Sync terminology, what defines the topology of the sync relationship, consisting of one cloud endpoint (Azure file share) and one or more server endpoints (local paths)?

You are managing DHCP for your on-premises network. You want two Windows Server DHCP servers to share a subnet scope, actively dividing client requests between them to balance the load. Which DHCP failover mode should you configure?

You are promoting a new Windows Server to a Domain Controller. Which prerequisite must be met regarding the server's network configuration before you run the AD DS Configuration Wizard?

You are designing a serverless microservices architecture for a new startup. The application needs to handle unpredictable traffic spikes without managing any underlying infrastructure. Which compute service should you use?

Your company needs to run a simple piece of code in response to a web request without managing any underlying infrastructure. Which service should you choose?

Which Azure Functions hosting plan is most cost-effective for applications with infrequent and unpredictable traffic spikes?

You want to create a long-running, stateful workflow using serverless functions. Which feature of Azure Functions should you use?

Which trigger type should you use in Azure Functions if you want to execute code whenever a message is added to an Azure Queue Storage?

You need to process data changes in a Cosmos DB container in real-time. Which Azure Functions trigger is best suited for this?

In serverless computing, what does the term 'cold start' refer to?

Which tool can you use to monitor the execution, performance, and errors of your Azure Functions in real-time?

You need to secure an Azure Function so that it can only be called by a specific client application using an API key. Where do you configure this?

Your team is using Azure Functions to build a microservices backend. They want to ensure that dependencies are managed efficiently and start times are minimized. Which language is typically recommended for fastest cold starts?

You need to host a static website (HTML, CSS, JS) with the lowest possible cost and high durability. You do not need server-side processing. Which storage solution should you choose?

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Which access tier in Azure Blob Storage is optimized for storing data that is accessed infrequently and stored for at least 30 days?

You need to store data for compliance purposes that will rarely be accessed. It must be stored for at least 180 days. Which storage tier offers the lowest cost?

What is the purpose of a Shared Access Signature (SAS) in Azure Blob Storage?

Which Azure feature allows you to automatically move blobs to a cooler storage tier or delete them based on their age?

Which redundancy option in Azure Storage provides the highest level of durability by replicating data across three physically separate availability zones within a single region?

You want to enable users to view photos stored in a container without requiring any authentication. Which public access level should you set for the container?

Which Azure service can be used to transfer large amounts of data (terabytes or petabytes) to Azure Storage using physical shipping devices?

Which feature of Azure Blob Storage provides a hierarchical namespace, optimized for big data analytics workloads?

A financial application requires a relational database that supports high availability and automated backups. The database must be fully managed to reduce operational overhead. Which service fits these requirements?

Which Azure SQL Database service tier is best suited for most business workloads, providing balanced compute and storage options?

Your application requires a relational database that can automatically scale compute resources up and down based on demand, and pause during periods of inactivity to save costs. Which option should you choose?

Which Azure service is a fully managed relational database that provides near 100% compatibility with the latest SQL Server (Enterprise Edition) database engine?

What is the purpose of Transparent Data Encryption (TDE) in Azure SQL Database?

You need to store and manage relational data for multiple independent databases while sharing a fixed set of resources (CPU and memory). Which Azure SQL Database feature should you use?

Which Azure SQL Database feature allows you to create a read-only replica of your database in a different Azure region for disaster recovery?

Which tool provides an interactive console for running SQL queries against your Azure SQL Database directly from the Azure Portal?

Which Azure service is best for migrating an existing on-premises SQL Server database to an Azure Virtual Machine without changing the database engine?

You want to ensure that your Azure SQL Database has highly available storage by using three copies of the data within the same data center. Which redundancy level is this?

Your application generates millions of clickstream events per second. You need a service to ingest and buffer this data in real-time before processing it. Which service fits this need?

Which Azure Cosmos DB API should you use if your application is currently using a document database model and you want to migrate with minimal code changes?

Your application needs a globally distributed database that provides guaranteed single-digit millisecond latency at the 99th percentile. Which service is designed for this?

In Azure Cosmos DB, what is the purpose of 'Request Units' (RUs)?

Which consistency level in Azure Cosmos DB provides the highest level of consistency but the highest latency and lowest availability?

Which consistency level is the default for a new Azure Cosmos DB account and offers a balance between performance and consistency that is ideal for most applications?

You are building a social networking application that needs to map complex relationships between users (e.g., 'friends of friends'). Which Cosmos DB API should you use?

What is the primary benefit of the 'Multi-region writes' feature in Azure Cosmos DB?

Which Cosmos DB feature allows you to run analytical queries on your operational data without affecting the performance of your transactional workloads?

Which Azure Cosmos DB API is specifically designed for applications that require a key-value store and want to port from Azure Table Storage?

You are analyzing petabytes of data for business intelligence reports. You need a fully managed, serverless enterprise data warehouse that supports SQL queries. Which service is best suited for this task?

Which Azure service is an enterprise analytics service that accelerates time to insight across data warehouses and big data systems by bringing together SQL, Spark, and Data Integration?

In Azure Synapse Analytics, what is the purpose of 'SQL Serverless' pools?

Which component of Azure Synapse Analytics allows you to build and run machine learning models using Apache Spark?

Which feature of Azure Synapse allows you to create cloud-scale data integration (ETL) workflows to move and transform data between various sources?

You want to perform high-performance, large-scale data warehousing by storing data in a columnar format on a distributed architecture. Which feature of Synapse should you use?

Which web-based interface is used by developers and data scientists to manage all their Synapse resources and write code (SQL/Python/Scala) in one place?

What is the benefit of 'Synapse Link for Azure Cosmos DB'?

Which Azure Synapse component is specifically designed to work with real-time telemetry, logs, and time-series data?

You want to visualize the results of your Synapse analytics directly within the workspace. Which integration allows you to build dashboards easily?

Your media company streams video content to users globally. Users in different regions are experiencing high latency. You need to improve performance by caching content closer to the users. Which service should you implement?

What is the primary goal of using Azure Content Delivery Network (CDN)?

What are 'Edge Locations' (or Point of Presence - PoP) in the context of Azure CDN?

You want to clear the cached content from all CDN edge locations because a static file has been updated. Which action should you take?

Which feature of Azure CDN allows you to serve different content based on the user's geographic location or device type?

Which of the following can be an 'origin' for an Azure CDN endpoint?

How can you improve security on your CDN endpoint so that only users with a valid token can access specific content?

Which Azure CDN SKU provides the most advanced security features, including integrated WAF and Bot protection?