[&] Which of the following Azure features can be used to protect Cosmos DB data?
- Service Endpoint
- Azure advanced threat detection
- Security tokens for granular access control
- Azure AD authentication for data level access

[&] Which of the following statements are true regarding Azure HDInsights? (choose 2)
- The customer is responsible for network security
- Cluster updates and OS patches are handled by Azure
- HDInsight uses Azure AD authentication by default
- HDInsight can use Azure AD DS for authentication