You have an Azure subscription named Subscription1.
You have 5 TB of data that you need to transfer to Subscription1.
You plan to use an Azure Import/Export job.
What can you use as the destination of the imported data?
A. an Azure Cosmos DB database
B. Azure Blob storage
C. Azure Data Lake Store
D. the Azure File Sync Storage Sync Service
Show Answer
Correct Answer: B
Explanation: Azure Import/Export supports importing data by shipping disk drives into Azure Blob storage and Azure Files. Among the listed options, only Azure Blob storage is a supported destination. Azure Cosmos DB, Azure Data Lake Store, and Azure File Sync Storage Sync Service are not direct Import/Export destinations.
Question 276
You have two Azure virtual machines named VM1 and VM2. You have two Recovery Services vaults named RSV1 and RSV2.
VM2 is backed up to RSV1.
You need to back up VM2 to RSV2.
What should you do first?
A. From the RSV1 blade, click Backup items and stop the VM2 backup
B. From the RSV2 blade, click Backup. From the Backup blade, select the backup for the virtual machine, and then click Backup
C. From the VM2 blade, click Disaster recovery, click Replication settings, and then select RSV2 as the Recovery Services vault
D. From the RSV1 blade, click Backup Jobs and export the VM2 job
Show Answer
Correct Answer: A
Explanation: An Azure virtual machine can be protected by only one Recovery Services vault at a time. Before configuring backup in a different Recovery Services vault, you must first stop protection (backup) in the current vault. After stopping backup (and, if required, deleting retained backup data/disassociating the item), you can enable backup in the new vault.
Question 277
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure subscription that contains the following users in an Azure Active Directory tenant named contoso.onmicrosoft.com:
User1 creates a new Azure Active Directory tenant named external.contoso.onmicrosoft.com.
You need to create new user accounts in external.contoso.onmicrosoft.com.
Solution: You instruct User3 to create the user accounts.
Does that meet the goal?
A. Yes
B. No
Show Answer
Correct Answer: B
Explanation: User3's permissions in the original Microsoft Entra ID (Azure AD) tenant do not automatically carry over to a newly created tenant. When User1 creates the new tenant, User1 becomes the initial Global Administrator of that tenant. Unless User3 is explicitly added to the new tenant and assigned an appropriate directory role (such as User Administrator or Global Administrator), User3 cannot create user accounts there.
Question 278
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure subscription that contains the following users in an Azure Active Directory tenant named contoso.onmicrosoft.com:
User1 creates a new Azure Active Directory tenant named external.contoso.onmicrosoft.com.
You need to create new user accounts in external.contoso.onmicrosoft.com.
Solution: You instruct User1 to create the user accounts.
Does that meet the goal?
A. Yes
B. No
Show Answer
Correct Answer: A
Explanation: When a user creates a new Microsoft Entra ID (Azure AD) tenant, that user becomes the first user in the tenant and is automatically assigned the Global Administrator role. A Global Administrator can create user accounts in that tenant. Therefore, instructing User1, who created the new tenant, to create the user accounts meets the goal.
Question 279
Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.
Your company's Azure subscription includes two Azure networks named VirtualNetworkA and VirtualNetworkB.
VirtualNetworkA includes a VPN gateway that is configured to make use of static routing. Also, a site-to-site VPN connection exists between your company's on- premises network and VirtualNetworkA.
You have configured a point-to-site VPN connection to VirtualNetworkA from a workstation running Windows 10. After configuring virtual network peering between
VirtualNetworkA and VirtualNetworkB, you confirm that you are able to access VirtualNetworkB from the company's on-premises network. However, you find that you cannot establish a connection to VirtualNetworkB from the Windows 10 workstation.
You have to make sure that a connection to VirtualNetworkB can be established from the Windows 10 workstation.
Solution: You download and re-install the VPN client configuration package on the Windows 10 workstation.
Does the solution meet the goal?
A. Yes
B. No
Show Answer
Correct Answer: A
Explanation: For Windows point-to-site VPN clients, when the virtual network topology changes (such as adding a peered VNet), the VPN client configuration package must be downloaded and reinstalled so the client receives the updated route list. Since on-premises connectivity to the peered VNet already works, the remaining issue is the P2S client's route configuration.
Question 280
HOTSPOT -
You have an Azure subscription named Subscription1.
Subscription1 contains the virtual machines in the following table:
Subscription1 contains a virtual network named VNet1 that has the subnets in the following table:
VM3 has multiple network adapters, including a network adapter named NIC3. IP forwarding is enabled on NIC3. Routing is enabled on VM3.
You create a route table named RT1 that contains the routes in the following table:
You apply RT1 to Subnet1 and Subnet2.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:
Show Answer
Correct Answer: Yes
No
Yes
Explanation: RT1 is associated only with Subnet1 and Subnet2. VM3 in Subnet3 uses default VNet routing and can reach VM1. Traffic between VM1 and VM2 is forced through VM3 (virtual appliance). If VM3 is off, that path fails. With VM3 running and IP forwarding/routing enabled, VM1 can reach VM2 via VM3.
Question 281
HOTSPOT -
You have an Azure subscription named Subscription1 that contains the following resource group:
✑ Name: RG1
✑ Region: West US
✑ Tag: `tag1`: `value1`
You assign an Azure policy named Policy1 to Subscription1 by using the following configurations:
✑ Exclusions: None
✑ Policy definition: Append a tag and its value to resources
✑ Assignment name: Policy1
✑ Parameters:
✑ Tag name: tag2
Tag value: value2 -
After Policy1 is assigned, you create a storage account that has the following configuration:
✑ Name: storage1
✑ Location: West US
✑ Resource group: RG1
✑ Tags: `tag3`: `value3`
You need to identify which tags are assigned to each resource.
What should you identify? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Show Answer
Correct Answer: RG1: "tag1": "value1" only
storage1: "tag2": "value2" and "tag3": "value3" only
Explanation: The built-in 'Append a tag and its value to resources' policy applies to resources created or updated after assignment and does not apply to resource groups. Resource tags are not inherited from the resource group, so the new storage account keeps tag3 and receives tag2 from the policy, but not tag1.
Question 282
HOTSPOT -
You have two Azure App Service app named App1 and App2. Each app has a production deployment slot and a test deployment slot.
The Backup Configuration settings for the production slots are shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:
Show Answer
Correct Answer: Yes
No
Yes
Explanation: Retention set to 0 is treated as keeping only the latest backup when 'Keep at least one backup' is enabled in this exam context. Backup settings shown apply only to production slots, so there is no Jan 15 backup for the test slot. A retained production backup can be restored to another deployment slot, and the Jan 6 backup is still within the 30-day retention period on Jan 15.
Question 283
You have an Azure subscription named Subscription1 that contains a virtual network named VNet1. VNet1 is in a resource group named RG1.
Subscription1 has a user named User1. User1 has the following roles:
✑ Reader
✑ Security Admin
✑ Security Reader
You need to ensure that User1 can assign the Reader role for VNet1 to other users.
What should you do?
A. Remove User1 from the Security Reader role for Subscription1. Assign User1 the Contributor role for RG1.
B. Assign User1 the Owner role for VNet1.
C. Assign User1 the Contributor role for VNet1.
D. Assign User1 the Network Contributor role for VNet1.
Show Answer
Correct Answer: B
Explanation: To assign Azure RBAC roles (such as Reader) on a resource, a user must have permissions like Microsoft.Authorization/roleAssignments/write, which are included in the Owner and User Access Administrator roles. Contributor and Network Contributor can manage resources but cannot grant RBAC access. Assigning the Owner role scoped to VNet1 gives User1 the ability to assign the Reader role for that virtual network.
Question 284
HOTSPOT -
You have an Azure Storage account named storage1 that stores images.
You need to create a new storage account and replicate the images in storage1 to the new account by using object replication.
How should you configure the new account? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Show Answer
Correct Answer: Account type: StorageV2 only
Object type to create in the new account: Container
Explanation: Azure Blob object replication supports general-purpose v2 (StorageV2) and premium BlockBlobStorage accounts. Since the option lists BlobStorage (legacy) rather than BlockBlobStorage, the valid choice is StorageV2 only. Blob replication occurs between blob containers, so create a container.
$19
Get all 555 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.