AZ 104 Pics One
1. Add a custom name 2. Add a record to the public contoso.com DNS zone 3. Verify the domain
DRAG DROP -You have an Azure Active Directory (Azure AD) tenant that has the contoso.onmicrosoft.com domain name. You have a domain name of contoso.com registered at a third-party registrar. You need to ensure that you can create Azure AD users that have names containing a suffix of @contoso.com. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. Select and Place:
contosostorage.file.core.windows.net\data
DRAG DROP -You have an Azure subscription named Subscription1.You create an Azure Storage account named contosostorage, and then you create a file share named data. Which UNC path should you include in a script that references files from the data file share? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point. Select and Place:
Step 1: Prepare the drives (Attach an external disk to Server1 and then run waimportexport.exe) Step 2: Create an import job (From the Azure portal, create an import job) Step 3: Ship the drives to the Azure datacenter (Detach the external disks from Server1 and ship the disks to an Azure data center) Step 4: Update the job with tracking information (From the Azure portal, update the import job)
DRAG DROP -You have an Azure subscription that contains a storage account. You have an on-premises server named Server1 that runs Windows Server 2016. Server1 has 2 TB of data. You need to transfer the data to the storage account by using the Azure Import/Export service. In which order should you perform the actions? To answer, move all actions from the list of actions to the answer area and arrange them in the correct order. NOTE: More than one order of answer choices is correct. You will receive credit for any of the correct orders you select. Select and Place:
Box 1: Assign a tag to each resource Box 2: From the Cost analysis blade, filter the view by tag Box 3: Download the usage report
DRAG DROP -You have an Azure subscription that is used by four departments in your company. The subscription contains 10 resource groups. Each department uses resources in several resource groups.You need to send a report to the finance department. The report must detail the costs for each department.Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.Select and Place:
Key vault + access policy
DRAG DROP -You have downloaded an Azure Resource Manager (ARM) template to deploy numerous virtual machines (VMs). The ARM template is based on a current VM, but must be adapted to reference an administrative password.You need to make sure that the password cannot be stored in plain text.You are preparing to create the necessary components to achieve your goal.Which of the following should you create to achieve your goal? Answer by dragging the correct option from the list to the answer area.Select and Place:
- Hyper-V site - Azure Recovery Services Vault - Replication policy
DRAG DROP -Your company has an Azure subscription that includes a number of Azure virtual machines (VMs), which are all part of the same virtual network.Your company also has an on-premises Hyper-V server that hosts a VM, named VM1, which must be replicated to Azure.Which of the following objects that must be created to achieve this goal? Answer by dragging the correct option from the list to the answer area.Select and Place:
Azure Table Storage: storageaccount1 and storageaccount2 only Azure Blob Storage: All the storage accounts
HOTSPOT -You have Azure Storage accounts as shown in the following exhibit. Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.NOTE: Each correct selection is worth one point.Hot Area:
Box 1: User1 and User3 -----only You must use Windows Server Active Directory to update the identity, contact info, or job info for users whose source of authority is Windows Server Active Directory. Box 2: User1, User2, and User3 -----Usage location is an Azure property that can only be modified from Azure AD (for all users including Windows Server AD users synced via Azure AD Connect).
HOTSPOT -You have a hybrid deployment of Azure Active Directory (Azure AD) that contains the users shown in the following table. You need to modify the JobTitle and UsageLocation attributes for the users.For which users can you modify the attributes from Azure AD? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.Hot Area:
- Select Users & Groups : Where you have to choose all users. - Select Cloud apps or actions: To specify the Azure portal - Select Grant: To grant the MFA.
HOTSPOT -You have an Azure Active Directory (Azure AD) tenant.You need to create a conditional access policy that requires all users to use multi-factor authentication when they access the Azure portal.Which three settings should you configure? To answer, select the appropriate settings in the answer area.NOTE: Each correct selection is worth one point.Hot Area:
App1: Access control (IAM) App2: Shared access signatures (SAS)
HOTSPOT -You have an Azure Storage account named storage1.You have an Azure App Service app named App1 and an app named App2 that runs in an Azure container instance. Each app uses a managed identity. You need to ensure that App1 and App2 can read blobs from storage1. The solution must meet the following requirements:✑ Minimize the number of secrets used. Ensure that App2 can only read from storage1 for the next 30 days. What should you configure in storage1 for each app? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:
1: Network contributor on RG1 2: Network contributor on RG1
HOTSPOT -You have an Azure subscription named Subscription1 that contains a resource group named RG1.In RG1, you create an internal load balancer named LB1 and a public load balancer named LB2.You need to ensure that an administrator named Admin1 can manage LB1 and LB2. The solution must follow the principle of least privilege.Which role should you assign to Admin1 for each task? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.Hot Area:
Add a subnet to VNet1: User1 and User3 Only Assign a user the Reader role to VNet1: User1 Only
HOTSPOT -You have an Azure subscription named Subscription1 that contains a virtual network VNet1.You add the users in the following table. Which user can perform each configuration? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.Hot Area:
"/subscriptions/c276fc76-9cd4-44c9-99a7-4fd71546435e" "Microsoft.Authorization/"
HOTSPOT -You have an Azure subscription named Subscription1 that has a subscription ID of c276fc76-9cd4-44c9-99a7-4fd71546436e.You need to create a custom RBAC role named CR1 that meets the following requirements:✑ Can be assigned only to the resource groups in Subscription1✑ Prevents the management of the access permissions for the resource groups✑ Allows the viewing, creating, modifying, and deleting of resources within the resource groupsWhat should you specify in the assignable scopes and the permission elements of the definition of CR1? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.Hot Area:
azcopy make 'https://mystorageaccount.blob.core.windows.net/vmimages'
HOTSPOT -You have an Azure subscription that contains an Azure Storage account. You plan to copy an on-premises virtual machine image to a container named vmimages. You need to create the container for the planned image. Which command should you run? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:
vnet1 : departement D tag only VNET2 - Label: Value1 only
HOTSPOT -You have an Azure subscription that contains the resources shown in the following table: To RG6, you apply the tag: RGroup: RG6.You deploy a virtual network named VNET2 to RG6.Which tags apply to VNET1 and VNET2? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.Hot Area:
Locks: Sub1, RG1, and VM1 only Tags: Sub1, RG1, and VM1 only
HOTSPOT -You have the Azure resources shown on the following exhibit. You plan to track resource usage and prevent the deletion of resources.To which resources can you apply locks and tags? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.Hot Area:
--kind: StorageV2 --sku: Standard_GRS
HOTSPOT -You need to create an Azure Storage account that meets the following requirements:✑ Minimizes costs✑ Supports hot, cool, and archive blob tiers✑ Provides fault tolerance if a disaster affects the Azure region where the account resides How should you complete the command? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:
No
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have an Azure subscription that contains the following users in an Azure Active Directory tenant named contoso.onmicrosoft.com: User1 creates a new Azure Active Directory tenant named external.contoso.onmicrosoft.com.You need to create new user accounts in external.contoso.onmicrosoft.com.Solution: You instruct User2 to create the user accounts.Does that meet the goal?
No
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have an Azure subscription that contains the following users in an Azure Active Directory tenant named contoso.onmicrosoft.com: User1 creates a new Azure Active Directory tenant named external.contoso.onmicrosoft.com.You need to create new user accounts in external.contoso.onmicrosoft.com.Solution: You instruct User3 to create the user accounts.Does that meet the goal?
No
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have an Azure subscription that contains the following users in an Azure Active Directory tenant named contoso.onmicrosoft.com: User1 creates a new Azure Active Directory tenant named external.contoso.onmicrosoft.com.You need to create new user accounts in external.contoso.onmicrosoft.com.Solution: You instruct User4 to create the user accounts.Does that meet the goal?
Question #11Topic 3
Question #11Topic 3
Question #13Topic 3
Question #13Topic 3
File1: Endpoint1 ----only It is a cloud endpoint, and it is scanned by the detection job every 24 hours. File2: Endpoint1, Endpoint2 and Endpoint3 ---With the on-premises servers the file is scanned and synced automatically after it's being added.
Question #16Topic 3 HOTSPOT -You have an Azure File sync group that has the endpoints shown in the following table. Cloud tiering is enabled for Endpoint3.You add a file named File1 to Endpoint1 and a file named File2 to Endpoint2.On which endpoints will File1 and File2 be available within 24 hours of adding the files? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.Hot Area:
Question #26Topic 2
Question #26Topic 2
Question #2Topic 3
Question #2Topic 3
Question #34Topic 2
Question #34Topic 2
Question #40Topic 2
Question #40Topic 2
Question #47Topic 2
Question #47Topic 2
Question #51Topic 2
Question #51Topic 2
Question 17 topic 2
Question 17 topic 2
Question 7 Topic 2
Question 7 Topic 2
Question 8 Topic 2
Question 8 Topic 2
Blob container1
You have Azure subscription that includes data in following locations: You plan to export data by using Azure import/export job named Export1.You need to identify the data that can be exported by using Export1.Which data should you identify?
You can create Azure SQL servers in ContosoRG1 only.
You have an Azure policy as shown in the following exhibit: What is the effect of the policy?
VM1, storage1, VNET1, VM1Managed, and RVAULT1
You have an Azure subscription named AZPT1 that contains the resources shown in the following table: You create a new Azure subscription named AZPT2.You need to identify which resources can be moved to AZPT2.Which resources should you identify?
storage4
You have an Azure subscription named Subscription1 that contains the storage accounts shown in the following table: You plan to use the Azure Import/Export service to export data from Subscription1.You need to identify which storage account can be used to export the data.What should you identify?
The App Service plan for WebApp1 remains in West Europe. Policy2 applies to WebApp1.
You have an Azure subscription named Subscription1. Subscription1 contains the resource groups in the following table. RG1 has a web app named WebApp1. WebApp1 is located in West Europe.You move WebApp1 to RG2.What is the effect of the move?
Stop the backup of SQLDB01
You have an Azure subscription that contains a resource group named RG26.RG26 is set to the West Europe location and is used to create temporary resources for a project. RG26 contains the resources shown in the following table. SQLDB01 is backed up to RGV1.When the project is complete, you attempt to delete RG26 from the Azure portal. The deletion fails.You need to delete RG26.What should you do first?
Remove the resource lock from VNET1 and delete all data in Vault1
You have an Azure subscription that contains a resource group named TestRG.You use TestRG to validate an Azure deployment.TestRG contains the following resources: You need to delete TestRG. What should you do first?
Step 1: Install the Azure File Sync agent on Server1. The Azure File Sync agent is a downloadable package that enables Windows Server to be synced with an Azure file share. Step 2: Register Server1. Register Windows Server with Storage Sync Service. Registering your Windows Server with a Storage Sync Service establishes a trust relationship between your server and the Storage Sync Service. Step 3: Create a sync group and a cloud endpoint. A sync group defines the sync topology for a set of files. Endpoints within a sync group are kept in sync with each other. A sync group must contain one cloud, which represents an Azure file share and one or more server endpoints. A server endpoint represents a path on registered server.
You have an Azure subscription that contains the resources in the following table. Store1 contains a file share named data. Data contains 5,000 files.You need to synchronize the files in the file share named data to an on-premises server named Server1.Which three actions should you perform? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.
