mi104

You have an Azure subscription. Users access the resources in the subscription from either home or from customer sites. From home, users must establish a point-to-site VPN to access the Azure resources. The users on the customer sites access the Azure resources by using site-to-site VPNs. You have a line-of-business app named App1 that runs on several Azure virtual machine. The virtual machines run Windows Server 2016. You need to ensure that the connections to App1 are spread across all the virtual machines. What are two possible Azure services that you can use? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point. an Azure Application Gateway. a public load balancer. Traffic Manager. an internal load balancer. an Azure Content Delivery Network (CDN).

You have an Azure Active Directory (Azure AD) tenant. All administrators must enter a verification code to access the Azure portal. You need to ensure that the administrators can access the Azure portal only from your on-premises network. What should you configure?. the default for all the roles in Azure AD Privileged Identity Management. an Azure AD Identity Protection user risk policy. an Azure AD Identity Protection sign-in risk policy. the multi-factor authentication service settings.

This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a computer named Computer1 that has a point-to-site VPN connection to an Azure virtual network named VNet1. The point-to-site connection uses a self-signed certificate. From Azure, you download and install the VPN client configuration package on a computer named Computer2. You need to ensure that you can establish a point-to-site VPN connection to VNet1 from Computer2. Solution: You modify the Azure Active Directory (Azure AD) authentication policies. Does this meet this goal?. Yes. No.

You have an Azure tenant that contains two subscriptions named Subscription1 and Subscription2. In Subscription1, you deploy a virtual machine named Server1 that runs Windows Server 2016. Server1 uses managed disks. You need to move Server1 to Subscription2. The solution must minimize administration effort. What should you do first?. In Subscription2, create a copy of the virtual disk. Create a snapshot of the virtual disk. From Azure PowerShell, run the Move-AzureRmResource cmdlet. Create a new virtual machine in Subscription2.

You create the following resources in an subscription: * An Azure Container Registry instance named Registry1 * An Azure Kubernetes Service (AKS) cluster named Cluster1 You create a container image named App 1 on your administrative workstation. You need to deploy App1 to cluster 1. What should you do first?. Run the kubect1 apply command. Upload App1 to Registry 1. Create a host pool on Cluster1. Run the aa aks create command.

You are the global administrator for an Azure Active Directory (Azure AD) tenant named adatum.com. You need to enable two-step verification for Azure users. What should you do?. Configure a playbook in Azure AD conditional access policy. Install and configure Azure AD Connect. Create an Azure AD conditional access policy. Create and configure the Identify Hub.

Your company has a main office in Australia and several branch offices in Asia. The company's data center uses a VMware virtualization infrastructure to host several virtualized servers. You purchase an Azure subscription and plan to move all virtual machines to Azure to a resource group in the Australia Southeast location. You need to create an Azure Migrate migration project. Which geography should you select?. United States. Australia Central. Central India. Australia Southeast.

You have an on-premises server that contains a folder named D:\Folder1. You need to copy the contents of D:\Folder1 to the public container in an Azure Storage account named contoso data. Which command should you run?. https://contosodata.blob.core.windows.net/public. az storage blob copy start-batch D:\Folder1 https://contosodata.blob.core.windows.net/public. azcopy copy D:\folder1 https://contosodata.blob.core.windows.net/public --recursive. azcopy sync D:\folder1 https://contosodata.blob.core.windows.net/public --snapshot.

This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure subscription that contains 10 virtual networks. The virtual networks are hosted in separate resource groups. Another administrator plans to create several network security groups (NSGs) in the subscription. You need to ensure that when an NSG is created, it automatically blocks TCP port 8080 between the virtual networks. Solution: You configure a custom policy definition, and then you assign the policy to the subscription. Does this meet the goal?. Yes. No.

You have an Azure subscription named Subscription 1 and an on-premises deployment of Microsoft System Center Service Manager Subscription! contains a virtual machine named VM1. You need to ensure that an alert is set in Service Manager when the amount of available memory on VM1 is below 10 percent. What should you do first?. Create an automation runbook. Deploy a function app. Create a notification. Deploy the IT Service Management Connector (ITSM).

Your users want to sign-in to devices, apps, and services from anywhere. They want to sign-in using an organizational work or school account instead of a personal account. You must ensure corporate assets are protected and that devices meet standards for security and compliance. Specifically, you need to be able to enable or disable a device. What should you do? Select one. Enable the device in Azure AD. Join the device to Azure AD. Connect the device to Azure AD. Register the device with Azure AD.

Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com and an Azure Active Directory (Azure AD) domain named contoso.onmicrosoft.com. Azure AD Connect is installed and Active Directory Federation Services (AD FS) is configured. Pass-word-writeback is enabled. You need to monitor synchronization events generated by Azure AD Connect. Select one. Install Azure AD Connect Health. Deploy a domain controller for contoso.com on a virtual machine in the contoso.onmicrosoft.com tenant. Configure Authentication Caching. Launch Synchronization Service Manager and edit the properties of the connector.

Identify three differences from the following list between Azure Active Directory (AD) and Active Directory Domain Services (AD DS). Select three. Azure AD uses HTTP and HTTPS communications. Azure AD uses Kerberos authentication. There are no Organizational Units (OUs) or Group Policy Objects (GPOs) in Azure AD. Azure AD includes Federation Services. Azure AD can be queried through LDAP.

You would like to add a user who has a Microsoft account to your subscription. Which type of user account is this? Select one. Cloud identity. Directory-Synchronized. Provider identity. Guest User. Hosted identity.

You are configuring Self-service Password Reset. Which of the following is not a validation method? Select one. An email notification. A text or code sent to a user's mobile or office phone. A paging service. A set of security questions.

You are assigning Azure AD roles. Which role will allow the user to manage all the groups in your Teams tenants and be able to assign other administrator roles? Select one. Global administrator. Password administrator. Security administrator. User administrator.