NEW QUESTION 1
You have the application architecture shown in the following exhibit.

Use the drop-down menus to select choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

Answer:

Explanation: References:
https://docs.microsoft.com/en-us/azure/traffic-manager/traffic-manager-routing-methods https://docs.microsoft.com/en-us/azure/traffic-manager/traffic-manager-monitoring

NEW QUESTION 2
Note: This question is part of series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure subscription that contains a resource group named RG1.
You create an Azure Active Directory (Azure AD) group named ResearchUsers that contains the user accounts of all researchers.
You need to recommend a solution that meets the following requirements:
The researchers must be allowed to create Azure virtual machines.
The researchers must only be able to create Azure virtual machines by using specific Azure Resource Manager templates.
Solution: On RG1, assign the Contributor role to the ResearchUsers group. Create a custom Azure Policy definition and assign the policy to RG1.
Does this meet the goal?

• A. Yes
• B. No

Answer: A

NEW QUESTION 3
You are designing a network connectivity strategy for a new Azure subscription. You identify the following requirements
* The Azure virtual machines on a subnet named Subnet must be accessible only from me computers in your London office.
* Engineers -equ.re access to the Azure virtual machines on a subnet named Subnets over the Internet on a specific TCP/IP management port.
* The Azure virtual machines in the West Europe Azure region must be able to communkate on all ports to the Azure virtual machine in the North Europe Azure region.
You need to recommend which components must be used to meet me requirement
What should you include m the recommendation? To answer, drag me appropriate components .a the correct requirement. Each component may be used once, more than once.
not at all You may need to drag the split bar between panes or scroll to view content NOTE: Each correct selection is worm one point

Answer:

Explanation:

NEW QUESTION 4
You need to deploy resources to host a stateless web app in an Azure subscription. The solution must meet the following requirements:
• Provide access to the full .NET framework.
• Provide redundancy if an Azure region fails.
• Grant administrators access to the operating system to install custom application dependencies. Solution: You deploy a web app in an Isolated App Service plan.
Does this meet the goal?

• A. Yes
• B. No

Answer: A

NEW QUESTION 5
You are planning to deploy an application by using the Azure Kubermets Services (AKS)> the application will reedy on having access to an encryption key that will be used to ... transmit files
What should you use to provides the encryption key AKS security?

• A. secrets
• B. Azure Storage Service Encryption
• C. a Kubernetes deployment YAML file
• D. ConfigureMap

Answer: C

NEW QUESTION 6
You need to deploy resources to host a stateless web app in an Azure subscription. The solution must meet the following requirements:
• Provide access to the full .NET framework.
• Provide redundancy if an Azure region fails.
• Grant administrators access to the operating system to install custom application dependencies.
Solution: You deploy an Azure virtual machine to two Azure regions, and you deploy an Azure Application Gateway.
Does this meet the goal?

• A. Yes
• B. No

Answer: B

NEW QUESTION 7
Your company has several Azure subscriptions that are part of a Microsoft Enterprise Agreement? The company’s compliance team creates automatic alerts by using Ware Monitor.
You need to recommend a solution to apply the alerts automatically when new subscriptions are added to the Enterprise agreement.
What should you include in the recommendation?

• A. Azure Pokey
• B. Azure Resource Manager templates
• C. Azure log Analytics alerts
• D. Azure Monitor action groups
• E. Azure Automation runboote

Answer: D

NEW QUESTION 8
You have an Azure subscription.
You need to recommend a solution to provide developers with the ability to provision Azure virtual machines. The solution must meet the following requirements:
Only allow the creation of the virtual machines in specific regions.
Only allow the creation of specific sizes of virtual machines.
What should include in the recommendation?

• A. conditional access policies
• B. Azure Policy
• C. Azure Resource Manager templates
• D. role-based access control (RBAC)

Answer: B

NEW QUESTION 9
You need to recommend a compute solution for the middle tier of the payment processing system. What should you include in the recommendation?

• A. Azure Kubernetes Service (AKS)
• B. virtual machine scale sets
• C. availability sets
• D. App Service Environments (ASEs)

Answer: B

NEW QUESTION 10
You are designing a container solution in azure that will include two containers. One container will host a web API that will be available to the public. The other container will perform health monitoring of the web API and will remain private. The two containers will be deployed together as a group.
You need to recommend a compute service for the containers. The solution must minimize costs and maintenance over head.
What should you include in the recommendation?

• A. Azure container instances
• B. Azure container Service
• C. Azure kubernetes service (aks)
• D. Azure service fabric

Answer: A

Explanation: References:
https://docs.microsoft.com/en-us/azure/container-instances/container-instances-container-groups

NEW QUESTION 11
You have an Azure subscription. The subscription contains Azure virtual machines that run Windows Server 2021 and Linux.
You need to use Azure Log Analytics design an alerting strategy for security-related events.
Which Log Analytics tables should you query? To answer, drag the appropriate tables to the correct log types. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

NEW QUESTION 12
Note: This question is part of series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure subscription named Project1. Only a group named Project1admins is assigned roles in the Project1 subscription. The Project1 subscription contains all the resources for an application named Application1.
Your company is developing a new application named Application2. The members of the Application2 development team belong to an Azure Active Directory (Azure AD) group named App2Dev.
You identify the following requirements for Application2:
The members of App2Dev must be prevented from changing the role assignments in Azure.
The members of App2Dev must be able to create new Azure resources required by Application2.
All the required role assignments for Application2 will be performed by the members of
Project1admins.
You need to recommend a solution for the role assignments of Application2.
Solution: In Project1, create a resource group named Application2RG. Assign Project1admins the Owner role for Application2RG. Assign App2Dev the Contributor role for Application2RG.
Does this meet the goal?

• A. Yes
• B. No

Answer: B

NEW QUESTION 13
Note: This question is part of series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure subscription that contains a resource group named RG1.
You create an Azure Active Directory (Azure AD) group named ResearchUsers that contains the user accounts of all researchers.
You need to recommend a solution that meets the following requirements:
The researchers must be allowed to create Azure virtual machines.
The researchers must only be able to create Azure virtual machines by using specific Azure Resource
Manager templates.
Solution: Create a lab in Azure DevTest Lab. Configure the DevTest Labs settings. Assign the DevTest Labs User role to the ResearchUsers group.
Does this meet the goal?

• A. Yes
• B. No

Answer: B

NEW QUESTION 14
You have an on-premises Active Directory forest and an Azure Active Directory (Azure AD) tenant. All Azure AD users are assigned a Premium P1 license.
You deploy Azure AD Connect.
Which two features are available in this environment that can reduce operational overhead for your company’s help desk? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.

• A. Azure AD Privileged Identity Management policies
• B. access reviews
• C. self-service password reset
• D. Microsoft Cloud App Security Conditional Access App Control
• E. password writeback

Answer: CE

NEW QUESTION 15
You plan to deploy the backup policy shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

Answer:

Explanation: References:
https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-storage-tiers#archive-access-tier-preview

NEW QUESTION 16
A company named Contoso, Ltd. has an Azure Active Directory (Azure AD) tenant that uses the BAsic license.
You plan t deploy two applications to Azure. The application has the requirements shown in the following table.

Which authentication Strategy should you recommend for each application? To answer, drag the appropriate authentication strategies to the correct applications. Each authentication strategy may be used once more than once, or not at all. You may need to drag the split bar between panes or scroll to view content
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

NEW QUESTION 17
You deploy several Azure SQL Database instances.
You plan to configure the Diagnostics settings on the databases as shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

Answer:

Explanation: In the exhibit, the SQLInsights data is configured to be stored in Azure Log Analytics for 90 days. However, the question is asking for the “maximum” amount of time that the data can be stored which is 730 days.