QUESTION 137
Hotspot Question
You have an Azure Active Directory (Azure AD) tenant.
You need to create a conditional access policy that requires all users to use multi-
factor authentication when they access the Azure portal.
Which three settings should you configure? To answer, select the appropriate settings
in the answer area. (see pdf helpful)
Name: Policy1
Assignments and Access Controls
A. Users and Groups
B. Cloud Apps
C. Conditions
D. Grant
E. Session
Give this one a try later!
, ACD
QUESTION 118
Drag and Drop Question
You have an Azure Active Directory (Azure AD) tenant that has the initial domain
name.
You have a domain name of contoso.com registered at a third-party registrar. You
need to ensure that you can create Azure AD users that have names containing a
suffix of @contoso.com.
Which three actions should you perform in sequence? To answer, move the
appropriate cmdlets from the list of cmdlets to the answer area and arrange them in
the correct order.
A. Configure company branding
B. Add an Azure AD tenant
C. Verify the domain
D. Create an Azure DNS zone
E. Add a custom domain name
F. Add a record to the public contoso.com DNS zone
Give this one a try later!
EFC
Azure Active Directory for developers
Give this one a try later!
Build apps that sign in all Microsoft identities, get tokens to call Microsoft
Graph, other Microsoft APIs, or custom APIs
,Enterprise Users (AAD)
Give this one a try later!
Manage license assignment, access to apps, and set up delegates using
groups and administrator roles
QUESTION 114
Hotspot Question
You have an Azure subscription named Subscription1. Subscription1 contains the
resources in
the following table.
(see pdf)
In Azure, you create a private DNS zone named adatum.com.
You set the registration virtual network to VNet2. The adatum.com zone is configured
as shown in
the following exhibit.
(see pdf)
For each of the following statements, select Yes if the statement is true. Otherwise,
select No.
NOTE: Each correct selection is worth one point.
Statements
The A record for VM5 will be registered automatically in the adatum.com.zone
VM5 can resolve VM9.adatum.com
VM6 can resolve VM9.adatum.com
A. No No Yes
B. Yes Yes No
C. No Yes No
D. Yes No Yes
Give this one a try later!
, A
Reports & Monitoring (AAD)
Give this one a try later!
Gain insights into the security and usage patterns in your environment.
What is a Scope?
Give this one a try later!
Boundary for the level of access that is requested
Service Administrator
Give this one a try later!
CLASSIC azure subscription admin role that enables you to manage all
Azure resources, including access.
Role has the equivalent access of a user who is assigned Owner role at the
subscription scope.
Configure Self-Service Password Reset
Hotspot Question
You have an Azure Active Directory (Azure AD) tenant.
You need to create a conditional access policy that requires all users to use multi-
factor authentication when they access the Azure portal.
Which three settings should you configure? To answer, select the appropriate settings
in the answer area. (see pdf helpful)
Name: Policy1
Assignments and Access Controls
A. Users and Groups
B. Cloud Apps
C. Conditions
D. Grant
E. Session
Give this one a try later!
, ACD
QUESTION 118
Drag and Drop Question
You have an Azure Active Directory (Azure AD) tenant that has the initial domain
name.
You have a domain name of contoso.com registered at a third-party registrar. You
need to ensure that you can create Azure AD users that have names containing a
suffix of @contoso.com.
Which three actions should you perform in sequence? To answer, move the
appropriate cmdlets from the list of cmdlets to the answer area and arrange them in
the correct order.
A. Configure company branding
B. Add an Azure AD tenant
C. Verify the domain
D. Create an Azure DNS zone
E. Add a custom domain name
F. Add a record to the public contoso.com DNS zone
Give this one a try later!
EFC
Azure Active Directory for developers
Give this one a try later!
Build apps that sign in all Microsoft identities, get tokens to call Microsoft
Graph, other Microsoft APIs, or custom APIs
,Enterprise Users (AAD)
Give this one a try later!
Manage license assignment, access to apps, and set up delegates using
groups and administrator roles
QUESTION 114
Hotspot Question
You have an Azure subscription named Subscription1. Subscription1 contains the
resources in
the following table.
(see pdf)
In Azure, you create a private DNS zone named adatum.com.
You set the registration virtual network to VNet2. The adatum.com zone is configured
as shown in
the following exhibit.
(see pdf)
For each of the following statements, select Yes if the statement is true. Otherwise,
select No.
NOTE: Each correct selection is worth one point.
Statements
The A record for VM5 will be registered automatically in the adatum.com.zone
VM5 can resolve VM9.adatum.com
VM6 can resolve VM9.adatum.com
A. No No Yes
B. Yes Yes No
C. No Yes No
D. Yes No Yes
Give this one a try later!
, A
Reports & Monitoring (AAD)
Give this one a try later!
Gain insights into the security and usage patterns in your environment.
What is a Scope?
Give this one a try later!
Boundary for the level of access that is requested
Service Administrator
Give this one a try later!
CLASSIC azure subscription admin role that enables you to manage all
Azure resources, including access.
Role has the equivalent access of a user who is assigned Owner role at the
subscription scope.
Configure Self-Service Password Reset
