You want to ensure blobs can be recovered even after accidental deletion. What feature should you enable?

You want your App Service to communicate securely with a database in a private subnet. What should you configure?

You want to restrict access to a VM only to a specific IP range. What should you configure?

What is required for Application Gateway to serve traffic over HTTPS?

Your Application Gateway shows the backend pool as “Unhealthy.” What is the MOST likely cause?

You want to host multiple subdomains (like app.contoso.com, api.contoso.com) on the same Application Gateway. What must be configured?

You need to redirect all HTTP traffic on port 80 to HTTPS on port 443 using Application Gateway. What should you configure?

You're hosting an e-commerce site behind an Azure Application Gateway. You want to protect it from OWASP Top 10 vulnerabilities like SQL injection and XSS. What should you configure?

You need a fully managed Kubernetes environment to host microservices. What should you use?

You want to regularly review user access to ensure only the right people have permissions. What should you configure?

Which option ensures data durability and disaster recovery for blobs?

You're using Key Vault and want to manage access using Azure AD roles instead of Key Vault-specific access policies. What should you enable?

You're hosting multiple web apps behind an Application Gateway. You want /api requests to go to App A and /admin to App B. What should you configure?

An app must survive a full datacenter failure. What Azure feature should you implement?

You want to prevent creation of VMs with unapproved SKUs. What should you do?

You need secure communication between on-premises servers and Azure VMs. What’s the BEST approach?

You need to detect potential brute-force attacks across multiple VMs. Which solution should you use?

A web app experiences high CPU usage only during 9 AM to 5 PM. What's the MOST cost-effective solution?

You're deploying resources using an ARM template and need to ensure the template fails if one resource fails to deploy. What should you set?

You want a web app in Azure App Service to securely access a secret in Azure Key Vault without using credentials. What should you configure?

You want to distribute incoming user traffic based on the user's geographic location. Which Azure service should you use?

A VM in Azure is not accessible via RDP from on-premises. You verified that the VM is running and has a public IP. What is the MOST likely cause?

You need to deploy a resource group and an App Service in a repeatable and automated way. What should you use?

Which type of encryption is used by default for data at rest in Azure Storage?

A developer needs to deploy multiple versions of a web app for testing. What is the best approach?

You need to allow a user to manage everything in a resource group except deleting resources. What role should you assign?

You need to connect two VNets in different regions. Which option provides low latency and high throughput?

What is the Azure Secure Score, and how should it be interpreted?

You want to enforce that only specific Azure regions can be used for resource deployment. What should you implement?

You need to distribute HTTP traffic and use session affinity and SSL termination. Which Azure service should you use?

Which scenario is best suited for Azure Site Recovery (ASR)?

You need to allow users from another Azure AD tenant to access your Azure resources. What should you configure?

A company needs to store large volumes of unstructured data with infrequent access and low cost. Which storage tier is appropriate?

You have an Azure Key Vault and want to ensure only a specific app can access a particular secret. What is the best way to enforce this?

A solution must generate alerts when the CPU usage of a VM stays above 80% for more than 5 minutes. What should you do?

You need to migrate a set of on-premises servers to Azure with minimal downtime. The servers run business-critical applications. Which migration strategy should you choose?

You configure a Conditional Access policy to block access to the Azure portal from non-compliant devices. However, users are still able to access the portal. What is the MOST likely reason?

You have an Azure subscription.

You have an on-premises file server named Server1 that runs Windows Server 2019.

You manage Server1 by using Windows Admin Center.

You need to ensure that if Server1 fails, you can recover Server1 files from Azure.

Solution: You create an Azure Storage account and an Azure Storage Sync service. You configure Azure File Sync for Server1.

Does this meet the goal?

You have an Azure subscription.

You have an on-premises file server named Server1 that runs Windows Server 2019.

You manage Server1 by using Windows Admin Center.

You need to ensure that if Server1 fails, you can recover Server1 files from Azure.

Solution: From the Azure portal, you create a Recovery Services vault. On Server1, you install the Azure Backup agent and you successfully perform a backup.

Does this meet the goal?

You have an Azure subscription.

You have an on-premises file server named Server1 that runs Windows Server 2019.

You manage Server1 by using Windows Admin Center.

You need to ensure that if Server1 fails, you can recover Server1 files from Azure.

Solution: You register Windows Admin Center in Azure and configure Azure Backup.

Does this meet the goal?

You plan to configure an Azure Cosmos DB account as shown in the following table.

You need to ensure the highest level of resiliency for CosmosDB1.

What should you use?

You are developing an application that will enable users to download content from an Azure Storage account. The users must only be able to download the content for a period of seven days. You need to recommend an authentication solution to access the storage account. What should you include in the recommendation?

You have an Azure web app that runs in a Premium App Service plan.

Developers plan to update the app weekly.

You need to ensure that the app can be switched from the current version to the new version. The solution must meet the following requirements:

* Provide the developers with the ability to test the app m Azure prior to switching versions Testing must use the same app instance

* Ensure that the app version can be rolled back.

* Minimize downtime.

what should you do?

An administrator plans to create a function app in Azure that will have the following settings:

Runtime stack: .NET Core

Operating System: Linux

Plan type: Consumption

Enable Application Insights: Yes

You need to ensure that you can back up the function app.

Which settings should you recommend changing before creating the function app?

D18912E1457D5D1DDCBD40AB3BF70D5D

You have an application named App1 that does not support Azure Active Directory (Azure AD) authentication.

You need to ensure that App1 can send messages to an Azure Service Bus queue. The solution must prevent Appl from listening to the queue.

What should you do?

You have an app named App1 that uses data from two on-premises Microsoft SQL Server databases named DB1 and DB2.
You plan to move DB1 and DB2 to Azure.
You need to implement Azure services to host DB1 and DB2. The solution must support server-side transactions across DB1 and DB2.
Solution: You deploy DB1 and DB2 to SQL Server on an Azure virtual machine.
Does this meet the goal?

You manage an Active Directory domain named contoso.local.
You install Azure AD Connect and connect to an Azure Active Directory (Azure AD) tenant named contoso.com without syncing any accounts.
You need to ensure that only users who have a UPN suffix of contoso.com in the contoso.local domain sync to Azure AD.
Solution: You use Synchronization Rules Editor to create a synchronization rule.
Does this meet the goal?

You have an Azure Cosmos DB database that contains a container named Container1. The partition key for Container1 is set to /day. Container1 contains the items shown in the following table.

You need to programmatically query Azure Cosmos DB and retrieve Item1 and Item2 only.
Solution: You run the following query.

SELECT id FROM c -
WHERE c.day = "Mon" OR c.day = "Tue"
You set the EnableCrossPartitionQuery property to False.
Does this meet the goal?

You manage an Active Directory domain named contoso.local.
You install Azure AD Connect and connect to an Azure Active Directory (Azure AD) tenant named contoso.com without syncing any accounts.
You need to ensure that only users who have a UPN suffix of contoso.com in the contoso.local domain sync to Azure AD.
Solution: You use the Synchronization Service Manager to modify the Active Directory Domain Services (AD DS) Connector.
Does this meet the goal?

You manage an Active Directory domain named contoso.local.
You install Azure AD Connect and connect to an Azure Active Directory (Azure AD) tenant named contoso.com without syncing any accounts.
You need to ensure that only users who have a UPN suffix of contoso.com in the contoso.local domain sync to Azure AD.
Solution: You use Azure AD Connect to customize the synchronization options.
Does this meet the goal?

You have a virtual network named VNet1 as shown in the exhibit. (Click the Exhibit tab.)

No devices are connected to VNet1.
You plan to peer VNet1 to another virtual network named VNet2. VNet2 has an address space of 10.2.0.0/16.
You need to create the peering.
What should you do first?

You have an Azure virtual machine named VM1 and an Azure Active Directory (Azure AD) tenant named adatum.com.
VM1 has the following settings:
✑ IP address: 10.10.0.10
✑ System-assigned managed identity: On
You need to create a script that will run from within VM1 to retrieve the authentication token of VM1.
Which address should you use in the script?

You are designing an Azure solution.
The solution must meet the following requirements:
✑ Distribute traffic to different pools of dedicated virtual machines (VMs) based on rules.
✑ Provide SSL offloading capabilities.
You need to recommend a solution to distribute network traffic.
Which technology should you recommend?

You have an Azure Cosmos DB database that contains a container named Container1. The partition key for Container1 is set to /day. Container1 contains the items shown in the following table.

You need to programmatically query Azure Cosmos DB and retrieve Item1 and Item2 only.
Solution: You run the following query.

SELECT day FROM c -
WHERE c.value = "10" OR c.value = "15"
You set the EnableCrossPartitionQuery property to True.
Does this meet the goal?

You have an Azure subscription.
You have 100 Azure virtual machines.
You need to quickly identify underutilized virtual machines that can have their service tier changed to a less expensive offering.
Which blade should you use?

You have an Azure App Service app.
You need to implement tracing for the app. The tracing information must include the following:
✑ Usage trends
✑ AJAX call responses
✑ Page load speed by browser
✑ Server and browser exceptions
What should you do?

You have an Azure subscription that contains the storage accounts shown in the following table.

You enable Storage Advanced Threat Protection (ATP) for all the storage accounts.
You need to identify which storage accounts will generate Storage ATP alerts.
Which two storage accounts should you identify?

You have an Azure subscription that contains an Azure Log Analytics workspace.
You have a resource group that contains 100 virtual machines. The virtual machines run Linux.
You need to collect events from the virtual machines to the Log Analytics workspace.
Which type of data source should you configure in the workspace?

You have an Azure subscription that contains 10 virtual machines on a virtual network.
You need to create a graph visualization to display the traffic flow between the virtual machines.
What should you do from Azure Monitor?