Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure Active Directory (Azure AD) tenant named contoso.com.
You have a CSV file that contains the names and email addresses of 500 external users.
You need to create a guest user account in contoso.com for each of the 500 external users.
Solution: From Azure AD in the Azure portal, you use the Bulk create user operation.
Does this meet the goal?
A. Yes
B. No
Show Answer
Correct Answer: B
Explanation: The Bulk create user operation in Azure AD is intended for creating internal (member) users, not external guest users. To create guest accounts for external users from a CSV file, you must use the Bulk invite users feature or an invitation-based method (such as Microsoft Graph or Azure AD B2B invitations). Therefore, the proposed solution does not meet the goal.
Question 265
You have an on-premises network that contains a database server named dbserver1.
You have an Azure subscription.
You plan to deploy three Azure virtual machines. Each virtual machine will be deployed to a separate availability zone.
You need to configure an Azure VPN gateway for a site-to-site VPN. The solution must ensure that the virtual machines can connect to dbserver1.
Which type of public IP address SKU and assignment should you use for the gateway?
A. a basic SKU and a static IP address assignment
B. a standard SKU and a static IP address assignment
C. a basic SKU and a dynamic IP address assignment
Show Answer
Correct Answer: B
Explanation: Azure VPN gateways that need to support availability zones require a Standard SKU public IP address. Basic SKU public IPs do not support availability zones. In addition, when using Standard SKU public IPs with VPN gateways (including zonal or zone-redundant gateways), the IP address assignment is static. Therefore, to ensure connectivity for virtual machines deployed across separate availability zones to the on-premises database server, the correct choice is a Standard SKU with a static IP assignment.
Question 266
You have an Azure subscription named Subscription1 that contains an Azure Log Analytics workspace named Workspace1.
You need to view the error events from a table named Event.
Which query should you run in Workspace1?
A. search in (Event) "error"
B. Event | where EventType is "error"
C. select * from Event where EventType == "error"
D. Get-Event Event | where {$_.EventType == "error"}
Show Answer
Correct Answer: A
Explanation: Azure Log Analytics uses Kusto Query Language (KQL). Among the options, only **search in (Event) "error"** is valid KQL as written and will return records from the Event table that contain the word "error". Option B is invalid because the `is` operator is not valid in KQL (and `EventType` is not a reliable column for errors), option C is SQL (not KQL), and option D is PowerShell syntax.
Question 267
HOTSPOT -
You have an Azure subscription. The subscription contains a virtual machine that runs Windows 10.
You need to join the virtual machine to an Active Directory domain.
How should you complete the Azure Resource Manager (ARM) template? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Explanation: To join a Windows VM to an Active Directory domain using an ARM template, you must deploy the JsonADDomainExtension as a VM extension resource (Microsoft.Compute/virtualMachines/extensions). Sensitive credentials such as the domain password must be placed under protectedSettings so they are encrypted and not stored in plain text.
Question 268
You plan to deploy several Azure virtual machines that will run Windows Server 2019 in a virtual machine scale set by using an Azure Resource Manager template.
You need to ensure that NGINX is available on all the virtual machines after they are deployed.
What should you use?
A. the Publish-AzVMDscConfiguration cmdlet
B. Azure Application Insights
C. Azure Custom Script Extension
D. a Microsoft Endpoint Manager device configuration profile
Show Answer
Correct Answer: C
Explanation: To ensure NGINX is available on all Windows Server 2019 virtual machines in a virtual machine scale set deployed via an ARM template, you need a mechanism to install and configure software post-deployment. The Azure Custom Script Extension is designed for this purpose: it can download and run scripts on each VM to install NGINX automatically. Other options listed do not directly perform software installation across VMs in a scale set.
Question 269
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure subscription named Subscription1 that contains the resources shown in the following table.
Subscription1 also includes a virtual network named VNET2. VM1 connects to a virtual network named VNET2 by using a network interface named NIC1.
You need to create a new network interface named NIC2 for VM1.
Solution: You create NIC2 in RG2 and Central US.
Does this meet the goal?
A. Yes
B. No
Show Answer
Correct Answer: B
Explanation: Each network interface attached to a VM must be in the same subscription and Azure region (location) as the VM and the virtual network it connects to. Since VM1 (and VNET2) are in a different location than Central US, creating NIC2 in Central US would not meet the requirement.
Question 270
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure subscription named Subscription1 that contains the resources shown in the following table.
Subscription1 also includes a virtual network named VNET2. VM1 connects to a virtual network named VNET2 by using a network interface named NIC1.
You need to create a new network interface named NIC2 for VM1.
Solution: You create NIC2 in RG1 and West US.
Does this meet the goal?
A. Yes
B. No
Show Answer
Correct Answer: A
Explanation: The goal is simply to create a new network interface (NIC2) for VM1. In Azure, a NIC must be in the same subscription and region as the VM, but it does not need to be in the same resource group. Resource groups are logical containers and have no regional dependency on the resources inside them. Since NIC2 is created in the same region (West US) and subscription as VM1, creating it in RG1 still meets the requirement. Therefore, the solution meets the goal.
Question 271
You have an Azure App Service web app named App1.
You need to collect performance traces for App1.
What should you use?
A. Azure Application Insights Profiler
B. the Activity log
C. the Deployment center
D. the Diagnose and solve problems settings
Show Answer
Correct Answer: A
Explanation: Azure Application Insights Profiler is designed to collect detailed performance traces for Azure App Service applications, capturing method-level execution data to diagnose performance issues. The Activity log tracks management events, Deployment Center handles deployment configuration, and Diagnose and solve problems provides guided troubleshooting rather than continuous performance tracing.
Question 272
HOTSPOT -
You have an Azure subscription that contains the resources shown in the following table:
You assign a policy to RG6 as shown in the following table:
To RG6, you apply the tag: RGroup: RG6.
You deploy a virtual network named VNET2 to RG6.
Which tags apply to VNET1 and VNET2? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Show Answer
Correct Answer: VNET1:
Department: D1 only
VNET2:
Label: Value1 only
Explanation: VNET1 was created before the policy assignment, so it keeps only its existing tag (Department: D1). Azure Policy does not retroactively tag existing resources without remediation. VNET2 is created after the policy is applied, so the policy appends the tag Label: Value1. Tags applied to the resource group (RGroup: RG6) are not inherited by resources.
Question 273
HOTSPOT -
You have an Azure Active Directory (Azure AD) tenant named contoso.com that contains the users shown in the following table:
User3 is the owner of Group1.
Group2 is a member of Group1.
You configure an access review named Review1 as shown in the following exhibit:
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:
Show Answer
Correct Answer: User3 can perform an access review of User1: No
User3 can perform an access review of UserA: No
User3 can perform an access review of UserB: Yes
Explanation: Review1 is scoped to **guest users only** in **Group1**, with **group owners** as reviewers. User3 is the owner, so can review eligible users. User1 and UserA are members (not guests), so they are excluded. Group2 is nested in Group1, and access reviews flatten nested groups; therefore UserB (a guest in Group2) appears in the review and can be reviewed by User3.
$19
Get all 558 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.
