You have Azure subscription that includes virtual network named VNet1 in West US region.
You plan to deploy following container instances:
- instance1, running Windows container image in West US region
- instance2, running Linux container image in West US region
- instance3, running Windows container image in East US region
Which container instances can be deployed to VNet1?
Select only one answer.
instance1 and instance2 only
instance1 and instance3 only
instance1, instance2 and instance3
instance1 only
instance2 only
- storage1, configured as StorageV2 kind
- storage2, configured as BlobStorage kind
- storage3, configured as FileStorage kind
Which storage account or storage accounts can you use Lifecycle management?
Select only one answer.
storage1 and storage2 only
storage1 and storage3 only
storage1 only
Storage1, storage2 and storage3
storage2 and storage3 only
You need to ensure that a user named User1 can access storage1 only from January 1st to January 31st 2024.
What should you do?
Select only one answer.
Create a conditional access policy for User1
Provide User1 with a shared access signature (SAS)
Provide User1 with a storage1 access key
Use a condition when assigning User1 an RBAC role on storage1
You have an Azure storage account that contains a blob container named container1.
You need to configure access to container1.
Which authorization types can you use?
Select only one answer.
Microsoft Entra ID only
Microsoft Entra ID, shared access signature or certificate only
Microsoft Entra ID, storage key or shared access signature only
Microsoft Entra ID, storage key, shared access signature or certificate
Storage key or shared access signature only
You have an Azure Storage account named storage1 that is configured to use the Hot access tier.
Storage1 has a container named container1 and the lifecycle management rule with following settings:
- Move blob to cool storage: Selected
- Days after last modification: 3
- Move blob to archive storage: Selected
- Days after last modification: 5
On December 1, you create a file named File1 in container1.
On December 10, you rehydrate File1 and move the file to the Hot access tier.
When will File1 be moved to archive storage?
Select only one answer.
on December 15
on December 18
on January 1
within 24 hours
You have an Azure subscription that contains a virtual machine named VM1 and a storage account named storage1.
You need to ensure that VM1 can access storage1 by using a private IP address.
What should you use?
Select only one answer.
a point to site (P2S) connection
A service endpoint
a VPN gateway
the Azure Front Door service
You have an Azure subscription that contains the following virtual networks:
- VNet1, located in the West US region. 3 virtual machines are connected to VNet1.
- VNet2, located in the West US region. 4 virtual machines are connected to VNet2.
- VNet3, located in the East US region, 5 virtual machines are connected to VNet3.
- VNet4, located in the East US region, 2 virtual machines are connected to VNet4.
Every virtual network is peered with all other virtual networks.
You plan to protect all of the connected virtual machines by using Azure Bastion.
What is the minimum number of Azure Bastion hosts that you must deploy?
Select only one answer.
1
2
3
4
You have an Azure subscription that contains a virtual network named VNET1. VNET1 uses the following address spaces:
- 10.10.1.0/24
- 10.10.2.0/28
VNET1 contains the following subnets:
- Subnet1- has an address space of 10.10.1.0/24
- Subnet2- has an address space of 10.10.2.0/28
To Subnet1, you deploy a virtual machine named VM1 that runs Windows Server. VM1 has Remote Desktop enabled.
VM1 does NOT have a public IP address.
You need to be able to deploy Azure Bastion to protect VM1.
What should you do first?
Select only one answer.
Add a new subnet to VNET1.
Add a public IP address to VM1.
Add an extension to VM1.
Modify the address space of VNET1.
You have an Azure network security group (NSG) named NSG1 that is associated to a virtual network subnet named Subnet1. NSG1 has the following inbound security rules:
- Rule1 has a priority of 100 and allows port 3389 on TCP protocol from any source and to any destination
- Rule2 has a priority of 200 and allows ports 80 and 8080 on UDP protocol from any source and to any destination
- Rule3 has a priority of 300 and denies ports 1-2000 on TCP protocol from any source and to any destination
- Rule4 has a priority of 400 and allows ports 50-500 on TCP protocol from VirtualNetwork source and to any destination
- Rule5 has a priority of 500 and allows ports 80 and 443 on TCP protocol from any source and to any destination
You need to allow http and https connections from the internet to Subnet1.
What should you change for NSG1?
Select only one answer.
Priority for Rule3 to 450
Priority for Rule4 to 250
Priority for Rule5 to 250
Protocol for Rule2 to TCP
You have a Recovery Services vault named Vault1 that has soft delete enabled.
Vault1 stores backups for the following Azure resources:
- an Azure virtual machine named VM1
- an Azure file share named share1
- a SQL Server on Azure virtual machine named SQL1
Which backups are protected by soft delete?
Select only one answer.
share1 only
VM1 and SQL1 only
VM1 only
VM1, share1, and SQL1
You recently create an Azure virtual machine standard backup policy.
You need to configure a retention period for virtual machine instant recovery snapshots.
What is the maximum number of days that can be set for the retention period?
Select only one answer.
5
7
14
30
You have an Azure subscription that contains an Azure disk named Disk1.
You plan to use an Azure Backup to backup Disk1.
What should you deploy first?
Select only one answer.
a Backup vault
a Storage account
a Recovery Services vault
an Azure Backup Server
You have an Azure subscription that contains the following virtual machines:
- VM1, a virtual machine that runs Windows Server 2019
- VM2, a virtual machine that runs Red Hat Enterprise Linux
- VM3, a virtual machine that is configure with Azure Disk encryption and runs Windows Server 2022
You use Azure Backup to back up the three virtual machines.
Which virtual machine or virtual machines can use file-level restore?
Select only one answer.
VM1 and VM2 only
VM1 and VM3 only
VM1 only
VM1, VM2 and VM3
Your company has an Azure subscription.
You plan to create a virtual machine scale set named VMSS1 that has the following settings:
- Resource group name: RG1
- Region: West US
- Orchestration mode: Uniform
- Security type: Standard
- OS disk type: SSD standard
- Key management: Platform-managed key
You need to add custom virtual machines to VMSS1.
What setting should you modify?
Select only one answer.
Key management
Orchestration mode
OS disk type
Security type
You have an Azure subscription.
You need to deploy a virtual machine that runs Windows Server 2022 Datacenter: Azure Edition.
Which security type can you select when deploying virtual machine?
Select only one answer.
Standard only
Standard or trusted launch only
Standard, trusted launch or confidential
Trusted launch or confidential only
You have an Azure subscription and an availability set named AS1 that has 5 update domains.
You deploy 27 virtual machines to AS1.
During a planned update, what is the minimum number of virtual machines that are available?
Select only one answer.
14
20
21
22
26
You have an Azure subscription.
You plan to run a data warehouse in an Azure virtual machine named VM1.
You need to ensure that VM1 is optimized for running a data warehouse.
Which VM type should you use for VM1?
Select only one answer.
Compute optimized (F-Series)
General purpose (D-Series)
High performance computing (H-Series)
Memory optimized (M-Series)
Storage optimized (Ls-Series)
You have a Microsoft Entra tenant that contains a user named User1 and a group named Group1.
You need to enable User1 the ability to add members to Group1. Your solution should minimize administrative effort.
What should you do?
Select only one answer.
Add Group1 to new administrative unit and assign built-in Microsoft Entra role to User1
Assign custom Microsoft Entra role to User1
Modify Group1 owners
Modify Group1 properties
You have a Microsoft Entra tenant that contains a user named User1.
You delete User1.
You plan to restore the User1 object.
What is the maximum number of days you have to restore User1?
Select only one answer.
7 days
30 days
90 days
48 hours
You have a Microsoft Entra tenant named contoso.com that contains a user named Ben Smith.
You configure a Password protection for contoso.com that includes the following Custom banned passwords settings:
- Enforce custom list: Yes
- Custom banned password list: Contoso
Which password can be used by Ben Smith?
Select only one answer.
C0nt0s0123
CONTOSO123
Conto123so
FgRs01
