HOTSPOT

You have an Azure subscription named Subscription1 that has a subscription ID of c276fc76-9cd4-44c9-99a7-4fd71546436e.

You need to create a custom RBAC role named CR1 that meets the following requirements:

Can be assigned only to the resource groups in Subscription1

Prevents the management of the access permissions for the resource groups

Allows the viewing, creating, modifying, and deleting of resource within the resource groups

What should you specify in the assignable scopes and the permission elements of the definition of CR1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Lösung einblenden Lösung ausblenden

Richtige Antwort:

Explanation:

Box 1: "/subscription/c276fc76-9cd4-44c9-99a7-4fd71546436e"

In the assignableScopes you need to mention the subscription ID where you want to implement the

RBAC

Box 2: "Microsoft.Authorization/*"

Microsoft.Authorization/* is used to Manage authorization

Reference:

https://docs.microsoft.com/en-us/azure/role-based-access-control/resource-provider-operations#microsoftauthorization

https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles

Reference:

https://docs.microsoft.com/en-us/azure/role-based-access-control/custom-roles

https://docs.microsoft.com/en-us/azure/role-based-access-control/resource-provider-operations#microsoftresources

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have a Microsoft Entra tenant named contoso.com.

You have a CSV file that contains the names and email addresses of 500 external users.

You need to create a guest user account in contoso.com for each of the 500 external users.

Solution; From Microsoft Entra ID in the Azure portal, you use the Bulk invite users’ operation.

Does this meet the goal?

Lösung einblenden Lösung ausblenden

HOTSPOT

You have an Azure subscription.

The subscription contains a storage account named storage1 that has the lifecycle management rules shown in the following table.

On June 1, you store two blobs in storage1 as shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Lösung einblenden Lösung ausblenden

Richtige Antwort:

HOTSPOT

You have an Azure App Service web app named appl. You configure autoscaling as shown in following exhibit.

You configure the auto scale rule criteria as shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

Lösung einblenden Lösung ausblenden

Richtige Antwort:

HOTSPOT

You have an Azure subscription named Sub1 that contains the resources shown in the following table.

Sub1 contains the following alert rule:

• Name: Alert1

• Scope: All resource groups in Sub1 o Include all future resources

• Condition: All administrative operations

• Actions: Action1

Sub1 contains the following alert processing rule:

• Name: Rule1

• Scope: Sub1

• Rule type: Suppress notifications

• Apply the rule: On a specific time

o Stan: August 10. 2022

o End: August 13. 2022

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Lösung einblenden Lösung ausblenden

Richtige Antwort:

Explanation:

https://learn.microsoft.com/en-us/azure/azure-monitor/alerts/alerts-processing-rules?tabs=portal#what-should-this-rule-do Suppression: This action removes all the action groups from the affected fired alerts. So, the fired alerts won’t invoke any of their action groups, not even at the end of the maintenance window. Those fired alerts will still be visible when you list your alerts in the portal, Azure Resource Graph, API, or PowerShell.

The alert rule named Alert1 has a scope of all resource groups in Sub1 and includes all future resources. This means that any administrative operation performed on any resource group in Sub1 will trigger the alert rule. The condition of the alert rule is all administrative operations, which includes creating a resource group1. Therefore, if you create a resource group in Sub1 on August 11, 2022, Alert1 will be fired and listed in the Azure portal.

The alert processing rule named Rule1 has a scope of Sub1 and a rule type of suppress notifications. This means that any alert fired in Sub1 will have its notifications suppressed by the rule. The rule applies on a specific time range from August 10, 2022 to August 13, 2022. Therefore, if you create a resource group in Sub1 on August 12, 2022, Alert1 will be fired but no email message will be sent to [email protected] because of Rule1.

The alert processing rule named Rule1 does not apply after August 13, 2022. Therefore, if you add a tag to RG1 on August 15, 2022, Alert1 will be fired and an email message will be sent to [email protected] as specified by the action group Action1.

HOTSPOT

You need to meet the connection requirements for the New York office.

What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Lösung einblenden Lösung ausblenden

Richtige Antwort:

Explanation:

Box 1: Create a virtual network gateway and a local network gateway.

Azure VPN gateway. The VPN gateway service enables you to connect the VNet to the on-premises network through a VPN appliance. For more information, see Connect an on-premises network to a Microsoft Azure virtual network. The VPN gateway includes the following elements:

Virtual network gateway. A resource that provides a virtual VPN appliance for the VNet. It is responsible for routing traffic from the on-premises network to the VNet.

Local network gateway. An abstraction of the on-premises VPN appliance. Network traffic from the cloud application to the on-premises network is routed through this gateway.

Connection. The connection has properties that specify the connection type (IPSec) and the key shared with the on-premises VPN appliance to encrypt traffic.

Gateway subnet. The virtual network gateway is held in its own subnet, which is subject to various requirements, described in the Recommendations section below.

Box 2: Configure a site-to-site VPN connection

On premises create a site-to-site connection for the virtual network gateway and the local network gateway.

Scenario: Connect the New York office to VNet1 over the Internet by using an encrypted connection.

Incorrect Answers:

Azure ExpressRoute: Established between your network and Azure, through an ExpressRoute partner.

This connection is private. Traffic does not go over the internet.

Reference: https://docs.microsoft.com/en-us/azure/architecture/reference-architectures/hybrid-networking/vpn

You need to add VM1 and VM2 to the backend poo! of LB1.

What should you do first?

Lösung einblenden Lösung ausblenden

You need to add VM1 and VM2 to the backend poo! of LB1.

What should you do first?

Lösung einblenden Lösung ausblenden

You have an Azure Active Directory (Azure AD) tenant named contoso.com.

You have a CSV file that contains the names and email addresses of 500 external users.

You need to create a quest user account in contoso.com for each of the 500 external users.

Solution: from Azure AD in the Azure portal, you use the Bulk create user operation.

Does this meet the goal?

Lösung einblenden Lösung ausblenden

You have an Azure subscription that contains the storage accounts shown in the following table.

You deploy a web app named App1 to the West US Azure region. You need to back up App1. The solution must minimize costs.

Which storage account should you use as the target for the backup?

Lösung einblenden Lösung ausblenden