1 :-

Your company has an Azure Active Directory (Azure AD) subscription. You need to deploy five virtual machines (VMs) to your company’s virtual network subnet. The VMs will each have both a public and private IP address. Inbound and outbound security rules for all of these virtual machines must be identical. Which of the following is the least amount of network interfaces needed for this configuration?

2 :-

Your company has three virtual machines (VMs) that are included in an availability set. You try to resize one of the VMs, which returns an allocation failure message. It is imperative that the VM is resized. Which of the following actions should you take?

3 :-

You need to create a custom role that only allows the following actions to users and groups where the role is applied: • Read all network resources. Do not allow modifications to the network resources. • Create and manage support requests from Microsoft Support. • Deny modifications to permissions for other users or groups. Which Actions and NotActions configuration should you use?

A)    “ACTIONS”: [

               “MICROSOFT. NETWORK/*/READ”,

                " MICROSOFT . SUPPORT/ * "

     ]

         “ NO ACTIONS ”: [

                  “ MICROSOFT . AUTHORIZATION /*”

    ]

B)    “ ACTIONS ”:[

             “ MICROSOFT . SUPPORT /*”

   ]

     “ NOTACTIONS”: [

             “ MICROSOFT. AUTHORIZATION /*”

             “MICROSOFT. NETWORK/*/WRITE”,

              “MICROSOFT.NETWORK/*/DELETE ”

]

 C)  “ ACTIONS”:[

          "MICROSOFT.NETWORK/*/READ",

          “MICROSOFT.SUPPORT/*”

          “MICROSOFT. AUTORIZATION/*/READ”

] 

     “NOTACTIONS”:[]

4 :-

This case study contains a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets mighthave more than one correct solution, while others might not have a correct solution. NOTE: You cannot go back or review questions of this type on the actual certification exam. You deploy an Azure web app named MyApp. MyApps runs in a Free pricing tier service plan named MyPlan. During testing, you discover that MyApp stops after 60 minutes and that it cannot be restarted until the next day. You need to ensure that MyApp can run eight hours each day during the testing period. You want to keep the additional costs incurred to a minimum. Solution: You change the pricing tier for MyPlan to Standard S1. Does this solution meet the goal?

5 :-

Your company is developing a line-of-business (LOB) application that uses the Azure IoT Hub for gathering information from Internet of things (IoT) devices. The LOB application uses the IoT Hub Service SDK to read device telemetry from the IoT Hub. You need to monitor device telemetry and be able to configure alerts based on device telemetry values. Your solution should require the least administrative effort. What should you do?

6 :-

Your company has an Azure Active Directory (Azure AD) subscription. You want to implement an Azure AD conditional access policy. The policy must be configured to require members of the Global Administrators group to use MultiFactor Authentication and an Azure AD-joined device when they connect to Azure AD from untrusted locations. Solution: You access the Azure portal to alter the session control of the Azure AD conditional access policy. Does the solution meet the goal?

7 :-

You have storage accounts in your Azure subscription for different purposes. The storage accounts have blob containers and file shares configured. Some users access these storage accounts by using the Microsoft Azure Storage Explorer desktop application. They are reporting that they get the error message shown in the exhibit when they try to browse the contents of the storage account.You need to resolve the issue. What are two possible reasons why users are getting this error message? Each correct answer presents a complete solution.

8 :-

Your company has an Azure Active Directory (Azure AD) tenant that is configured for hybrid coexistence with the on-premises Active Directory domain.The on-premise virtual environment consists of virtual machines (VMs) running on Windows Server 2012 R2 Hyper-V host servers. You have created some PowerShell scripts to automate the configuration of newly created VMs. You plan to create several new VMs. You need a solution that ensures the scripts are run on the new VMs. Which of the following is the best solution?

9 :-

Your Azure subscription has multiple resource groups that host project-level resources. All team members that use the subscription have contributor access at the subscription level and are allowed to manage resources for all projects. The company1-network-rg resource group contains all the network resources like virtual networks (VNets), network security groups (NSGs), DNS zones, and route tables. As the need arises, network administrators will add new DNS entries and routes and create additional subnets and NSGs. You need to ensure that no team member, including the network administrators, deletes any resources hosted in the company1-network-rg resource group. You must implement the solution to require minimal ongoing administrative effort. What should you do?

10 :-

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You are the global administrator for an Azure Active Directory (Azure AD) tenant that has several subscriptions. You need to create a report that lists all the resources for the tenant. Solution: You open the Azure portal and modify the properties of the Azure AD tenant. Does this meet the goal?

11 :-

Your organization has 2 TB of data in on-premises storage that they want to move to a storage account on Microsoft Azure. You need to identify the solution that best meets the following requirements: • Data would need to be stored for many years. • Data will be accessed rarely. • Data should be available for immediate access when the need arises. • The cost of data storage should be minimized. Which Storage Account Access tier should you recommend?

12 :-

Your company has serval departments. Each department has a number of virtual machines (VMs). The company has an Azure subscription that contains a resource group named RG1. All VMs are located in RG1. You want to associate each VM with its respective department. What should you do?

13 :-

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. Your company has an Azure Active Directory (Azure AD) tenant named weyland.com that is configured for hybrid coexistence with the on-premises Active Directory domain. You have a server named DirSync1 that is configured as a DirSync server. You create a new user account in the on-premise Active Directory. You now need to replicate the user information to Azure AD immediately. Solution: You restart DirSync1. Does the solution meet the goal?

14 :-

Your company makes use of Multi-Factor Authentication for when users are not in the office. The Per Authentication option has been configured as the usage model. After the acquisition of a smaller business and the addition of the new staff to Azure Active Directory (Azure AD) obtains a different company and adding the new employees to Azure Active Directory (Azure AD), you are informed that these employees should also make use of MultiFactor Authentication. To achieve this, the Per Enabled User setting must be set for the usage model. Solution: You reconfigure the existing usage model via the Azure portal. Does the solution meet the goal?

15 :-

Your company is migrating data stored on on-premises file servers to Azure file shares. You create a FileStorage account. You need to configure storage replication to optimize availability. Which redundancy option should you configure?

16 :-

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. Your company’s Azure solution makes use of Multi-Factor Authentication for when users are not in the office. The Per Authentication option has been configured as the usage model. After the acquisition of a smaller business and the addition of the new staff to Azure Active Directory (Azure AD) obtains a different company and adding the new employees to Azure Active Directory (Azure AD), you are informed that these employees should also make use of MultiFactor Authentication. To achieve this, the Per Enabled User setting must be set for the usage model. Solution: You reconfigure the existing usage model via the Azure CLI. Does the solution meet the goal?

17 :-

You are planning to deploy an Ubuntu Server virtual machine to your company’s Azure subscription. You are required to implement a custom deployment that includes adding a particular trusted root certification authority (CA). Which of the following should you use to create the virtual machine?

18 :-

Your company has an Azure subscription. You create a Recovery Services vault named RSV1. You have a virtual machine (VM) named VM1 that is deployed in the East US region. You create a backup policy for backing up VM1 to RSV1 on a recurring schedule. You are preparing to run your first backup and find the Backup Pre-Check status displays a status of Warning. You need to determine the possible cause of this status. Which condition would result in a Warning status?

19 :-

Your company has an Azure subscription that includes a Recovery Services vault. You want to use Azure Backup to schedule a backup of your company's virtual machines (VMs) to the Recovery Services vault. Which of the following VMs can you back up? Choose all that apply.

20 :-

You deploy an Azure Application Gateway to host multiple instances of an application. User session state is saved locally on a server for a user session. You need to ensure that the Application Gateway is configured to support this requirement. Which feature do you need to configure?