You have a registered DNS domain named contoso.com. You create a public Azure
DNS zone named contoso.com. You need to ensure that records created in the
contoso.com zone are resolvable from the internet. What should you do?
Give this one a try later!
Modify the NS records in the DNS domain registrar.
You have 15 Azure subscriptions. You have an Azure Active Directory (Azure AD)
tenant that contains a security group named Group1.You plan to purchase additional
Azure subscription. You need to ensure that Group1 can manage role assignments for
the existing subscriptions and the planned subscriptions. The solution must meet the
following requirements:✑ Use the principle of least privilege.✑ Minimize
administrative effort. What should you do?
Give this one a try later!
, Assign Group1 the User Access Administrator role for the root management
group.
You have an Azure subscription named Subscription1 that contains an Azure Log
Analytics workspace named Workspace1. You need to view the error events from a
table named Event. Which query should you run in Workspace1?
Give this one a try later!
search in (Event) "error"
You have an Azure subscription named Subscription1 that contains an Azure virtual
machine named VM1. VM1 is in a resource group named RG1.VM1 runs services that
will be used to deploy resources to RG1. You need to ensure that a service running on
VM1 can manage the resources in RG1 by using the identity of VM1. What should you
do first?
Give this one a try later!
From the Azure portal, modify the Managed Identity settings of VM1
You have an Azure subscription that contains a storage account named storage1. The
storage1 account contains a file share named share1. The subscription is linked to a
hybrid Azure Active Directory (Azure AD) tenant that contains a security group named
Group1.You need to grant Group1 the Storage File Data SMB Share Elevated
Contributor role for share1. What should you do first?
Give this one a try later!
, Enable Active Directory Domain Service (AD DS) authentication for
storage1.
HOTSPOT -You have an Azure subscription that contains a storage account named
storage1. The subscription is linked to an Azure Active Directory (Azure AD) tenant
named contoso.com that syncs to an on-premises Active Directory domain. The
domain contains the security principals shown in the following table.
- Share Contributor role to User1 for share1 -
- Share Reader role to Computer1 for share1 -
- Elevated Contributor role to User2 for share1 -
Give this one a try later!
Yes
No
Yes
You have an Azure Subscription that contains a storage account named
storageacct1234 and two users named User1 and User2. You assign User1 the roles
shown in the following exhibit.
Which two actions can User1 perform?
Give this one a try later!
, - Assign roles to User2 for storageacct1234.
- View file shares in storageacct1234.
HOTSPOT -You have an Azure subscription named Sub1 that contains the Azure
resources shown in the following table. (image)
You assign an Azure policy that has the following settings:
✑ Scope: Sub1
✑ Exclusions: Sub1/RG1/VNET1
✑ Policy definition: Append a tag and its value to resources
✑ Policy enforcement: Enabled
✑ Tag name: Tag4
✑ Tag value: value4
You assign tags to the resources as shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise,
select No.
- RG1 has the Tag2:IT tag assigned only
- Storage1 has the Tag1:subscription, Tag2:IT, Tag3:value1, and Tag4:value4 tags
assigned
- VNET1 has the Tag2:IT and Tag3:value2 tags assigned only
Give this one a try later!
- No
- No
- No
DNS zone named contoso.com. You need to ensure that records created in the
contoso.com zone are resolvable from the internet. What should you do?
Give this one a try later!
Modify the NS records in the DNS domain registrar.
You have 15 Azure subscriptions. You have an Azure Active Directory (Azure AD)
tenant that contains a security group named Group1.You plan to purchase additional
Azure subscription. You need to ensure that Group1 can manage role assignments for
the existing subscriptions and the planned subscriptions. The solution must meet the
following requirements:✑ Use the principle of least privilege.✑ Minimize
administrative effort. What should you do?
Give this one a try later!
, Assign Group1 the User Access Administrator role for the root management
group.
You have an Azure subscription named Subscription1 that contains an Azure Log
Analytics workspace named Workspace1. You need to view the error events from a
table named Event. Which query should you run in Workspace1?
Give this one a try later!
search in (Event) "error"
You have an Azure subscription named Subscription1 that contains an Azure virtual
machine named VM1. VM1 is in a resource group named RG1.VM1 runs services that
will be used to deploy resources to RG1. You need to ensure that a service running on
VM1 can manage the resources in RG1 by using the identity of VM1. What should you
do first?
Give this one a try later!
From the Azure portal, modify the Managed Identity settings of VM1
You have an Azure subscription that contains a storage account named storage1. The
storage1 account contains a file share named share1. The subscription is linked to a
hybrid Azure Active Directory (Azure AD) tenant that contains a security group named
Group1.You need to grant Group1 the Storage File Data SMB Share Elevated
Contributor role for share1. What should you do first?
Give this one a try later!
, Enable Active Directory Domain Service (AD DS) authentication for
storage1.
HOTSPOT -You have an Azure subscription that contains a storage account named
storage1. The subscription is linked to an Azure Active Directory (Azure AD) tenant
named contoso.com that syncs to an on-premises Active Directory domain. The
domain contains the security principals shown in the following table.
- Share Contributor role to User1 for share1 -
- Share Reader role to Computer1 for share1 -
- Elevated Contributor role to User2 for share1 -
Give this one a try later!
Yes
No
Yes
You have an Azure Subscription that contains a storage account named
storageacct1234 and two users named User1 and User2. You assign User1 the roles
shown in the following exhibit.
Which two actions can User1 perform?
Give this one a try later!
, - Assign roles to User2 for storageacct1234.
- View file shares in storageacct1234.
HOTSPOT -You have an Azure subscription named Sub1 that contains the Azure
resources shown in the following table. (image)
You assign an Azure policy that has the following settings:
✑ Scope: Sub1
✑ Exclusions: Sub1/RG1/VNET1
✑ Policy definition: Append a tag and its value to resources
✑ Policy enforcement: Enabled
✑ Tag name: Tag4
✑ Tag value: value4
You assign tags to the resources as shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise,
select No.
- RG1 has the Tag2:IT tag assigned only
- Storage1 has the Tag1:subscription, Tag2:IT, Tag3:value1, and Tag4:value4 tags
assigned
- VNET1 has the Tag2:IT and Tag3:value2 tags assigned only
Give this one a try later!
- No
- No
- No
