Q: 2
DRAG DROP You need to complete the defense-in-depth strategy used in a datacenter, What should you do? To answer, drag the appropriate layers to the correct positions in the model. Each layer may be used once, more than once, or not at all. NOTE: Each correct selection is worth one point. 
Drag & Drop
Discussion
Physical Security, Perimeter, Application is the order that matched my exam exactly. Confident this is right.
Another one of those drag and drops where Microsoft loves to trip people up. Physical Security to Bucket 1, Perimeter to Bucket 2, Application to Bucket 3-seen the same mapping in practice tests. If anyone's gotten something else marked correct on an actual exam, post it.
Ugh, wish Microsoft would stop mixing up their diagrams on these. Mapping is Physical Security → Bucket 1, Perimeter → Bucket 2, Application → Bucket 3. That's the classic outermost to innermost defense-in-depth model with physical barriers first, then network edge (firewalls etc), then app-level protection. I've seen this order in similar questions and practice tests-pretty sure it's what they want here. If someone has proof of a different mapping getting marked right, I'd be interested.
Physical Security > Perimeter > Application matches what's in Microsoft docs and lines up with how defense in depth layers work. Physical is always the first barrier, then network edge/perimeter, then application. Pretty confident, but I'm open if someone saw a different mapping on their exam.
Physical Security to Bucket 1, Perimeter to Bucket 2, Application to Bucket 3. Saw exactly this sequence in a recent practice.
Physical Security > Perimeter > Application is what I'd use here. Each layer gets you closer to the asset, so start from the outside (Physical Security like guards/doors), then Perimeter (firewall/edge devices), finally Application. Pretty sure this lines up with Azure docs and general defense in depth models. If anyone has seen a variation on live exams, let me know, but this looks best to me.
Physical Security to Bucket 1, Perimeter to Bucket 2, Application to Bucket 3.
Physical Security → Bucket 1, Perimeter → Bucket 2, Application → Bucket 3 is what I've seen in practice sets and matches the usual defense-in-depth order (outermost to innermost). Had something like this in a mock, and they wanted physical first every time. Fairly confident but happy to be proven wrong if Azure changed anything recently.
Physical Security goes first, then Perimeter, then Application for the last bucket. Saw a similar order in multiple practice sets. Watch out, some get tripped up putting Perimeter before Physical but that's not correct here.
Nah, Perimeter before Application would be a trap here. Physical Security goes in Bucket 1, Perimeter is Bucket 2, Application is last. Matches typical Azure defense-in-depth order from outer to inner layers. If someone's seen it swapped on the real exam, let me know.
Be respectful. No spam.
