[&] Which of the following Azure features can be used to protect Cosmos DB data?
- Service Endpoint -- Correct
- Azure advanced threat detection
- Security tokens for granular access control -- Correct
- Azure AD authentication for data level access

[&] Which of the following statements are true regarding Azure HDInsights? (choose 2)
- The customer is responsible for network security -- Correct
- Cluster updates and OS patches are handled by Azure
- HDInsight uses Azure AD authentication by default
- HDInsight can use Azure AD DS for authentication -- Correct