You have an Azure subscription that contains the following users in an Azure Active Directory tenant named contoso.onmicrosoft.com:
User1 creates a new Azure Active Directory tenant named external.contoso.onmicrosoft.com. You need to create new user accounts in external.contoso.onmicrosoft.com.
Solution: You instruct User2 to create the user accounts. Does that meet the goal?
Yes No.
You have an Azure subscription that contains the following users in an Azure Active Directory tenant named contoso.onmicrosoft.com:
User1 creates a new Azure Active Directory tenant named external.contoso.onmicrosoft.com.
You need to create new user accounts in external.contoso.onmicrosoft.com.
Solution: You instruct User4 to create the user accounts. Does that meet the goal?
Yes No.
You have an Azure subscription that contains the following users in an Azure Active Directory tenant named contoso.onmicrosoft.com:
User1 creates a new Azure Active Directory tenant named external.contoso.onmicrosoft.com.
You need to create new user accounts in external.contoso.onmicrosoft.com.
Solution: You instruct User3 to create the user accounts. Does that meet the goal?
Yes No.
You have an Azure subscription that contains an Azure Active Directory (Azure AD) tenant named contoso.com and an Azure Kubernetes Service (AKS) cluster named AKS1.
An administrator reports that she is unable to grant access to AKS1 to the users in contoso.com. You need to ensure that access to AKS1 can be granted to the contoso.com users.
What should you do first?
From contoso.com, modify the Organization relationships settings From contoso.com, create an OAuth 2.0 authorization endpoint Recreate AKS1 From AKS1, create a namespace.
You need to meet the user requirement for Admin1. What should you do?
From the Azure Active Directory blade, modify the Groups From the Azure Active Directory blade, modify the Properties From the Subscriptions blade, select the subscription, and then modify the Access control (IAM) settings From the Subscriptions blade, select the subscription, and then modify the Properties .
You have an on-premises server that contains a folder named D:\Folder1.
You need to copy the contents of D:\Folder1 to the public container in an Azure Storage account named contosodata.
Which command should you run?
https://contosodata.blob.core.windows.net/public azcopy sync D:\folder1 https://contosodata.blob.core.windows.net/public --snapshot azcopy copy D:\folder1 https://contosodata.blob.core.windows.net/public --recursive az storage blob copy start-batch D:\Folder1 https://contosodata.blob.core.windows.net/public.
You have an Azure subscription named Subscription1 that contains the storage accounts shown in the following table:
You plan to use the Azure Import/Export service to export data from Subscription1. You need to identify which storage account can be used to export the data. What should you identify?
storage1 storage2 storage3 storage4.
You have Azure subscription that includes data in following locations:
You plan to export data by using Azure import/export job named Export1. You need to identify the data that can be exported by using Export1. Which data should you identify?
DB1 container1 Share1 Table1.
You need to implement a backup solution for App1 after the application is moved. What should you create first?
a recovery plan an Azure Backup Server a backup policy a Recovery Services vault .
You need to move the blueprint files to Azure. What should you do?
Generate an access key. Map a drive, and then copy the files by using File Explorer Use Azure Storage Explorer to copy the files Use the Azure Import/Export service Generate a shared access signature (SAS). Map a drive, and then copy the files by using File Explorer.
You have an Azure subscription named Subscription1 that is used by several departments at your company. Subscription1 contains the resources in the following table:
Another administrator deploys a virtual machine named VM1 and an Azure Storage account named storage2 by using a single Azure Resource Manager template. You need to view the template used for the deployment.
From which blade can you view the template that was used for the deployment?
VM1 RG1 storage2 container1 .
You have an Azure web app named App1. App1 has the deployment slots shown in the following table:
In webapp1-test, you test several changes to App1. You back up App1.
You swap webapp1-test for webapp1-prod and discover that App1 is experiencing performance issues.
You need to revert to the previous version of App1 as quickly as possible. What should you do?
Redeploy App1 Swap the slots Clone App1 Restore the backup of App1 .
You have an Azure virtual machine named VM1 that runs Windows Server 2016.
You need to create an alert in Azure when more than two error events are logged to the System event log on VM1 within an hour.
Solution: You create an Azure Log Analytics workspace and configure the data settings. You add the Microsoft Monitoring Agent VM extension to VM1. You create an alert in Azure Monitor and specify the Log Analytics workspace as the source.
Does this meet the goal?
Yes No.
You discover that VM3 does NOT meet the technical requirements. You need to verify whether the issue relates to the NSGs.
What should you use?
Diagram in VNet1 Diagnostic settings in Azure Monitor Diagnose and solve problems in Traffic Manager profiles The security recommendations in Azure Advisor IP flow verify in Azure Network Watcher .
You have an Azure subscription that contains 10 virtual networks. The virtual networks are hosted in separate resource groups. Another administrator plans to create several network security groups (NSGs) in the subscription.
You need to ensure that when an NSG is created, it automatically blocks TCP port 8080 between the virtual networks.
Solution: You configure a custom policy definition, and then you assign the policy to the subscription. Does this meet the goal?
Yes No.
You have two Azure virtual networks named VNet1 and VNet2. VNet1 contains an Azure virtual machine named VM1. VNet2 contains an Azure virtual machine named VM2.
VM1 hosts a frontend application that connects to VM2 to retrieve data. Users report that the frontend application is slower than usual.
You need to view the average round-trip time (RTT) of the packets from VM1 to VM2. Which Azure Network Watcher feature should you use?
IP flow verify Connection troubleshoot Connection monitor NSG flow logs .
You are planning the move of App1 to Azure. You create a network security group (NSG).
You need to recommend a solution to provide users with access to App1. What should you recommend?
Create an incoming security rule for port 443 from the Internet. Associate the NSG to the subnet that contains the web servers. Create an outgoing security rule for port 443 from the Internet. Associate the NSG to the subnet that contains the web servers. Create an incoming security rule for port 443 from the Internet. Associate the NSG to all the subnets. Create an outgoing security rule for port 443 from the Internet. Associate the NSG to all the subnets.
You have an Azure subscription that contains the following users in an Azure Active Directory tenant named contoso.onmicrosoft.com:
User1 creates a new Azure Active Directory tenant named external.contoso.onmicrosoft.com.
You need to create new user accounts in external.contoso.onmicrosoft.com. Solution: You instruct User1 to create the user accounts. Does that meet the goal?
Yes No.
You have an existing Azure subscription that contains 10 virtual machines.
You need to monitor the latency between your on-premises network and the virtual machines. What should you use?
Service Map Connection troubleshoot Network Performance Monitor Effective routes .
You have an Azure virtual machine named VM1. Azure collects events from VM1. You are creating an alert rule in Azure Monitor to notify an administrator when an error is logged in the System event log of VM1.
Which target resource should you monitor in the alert rule?
virtual machine extension virtual machine metric alert Azure Log Analytics workspace .
You need to recommend a solution to automate the configuration for the finance department users. The solution must meet the technical requirements. What should you include in the recommendation?
Azure AD B2C dynamic groups and conditional access policies Azure AD Identity Protection an Azure logic app and the Microsoft Identity Management (MIM) client .
|
