HOTSPOT -
You have an Azure subscription that contains an Azure Active Directory (Azure AD) tenant named contoso.com. The tenant is synced to the on-premises Active
Directory domain. The domain contains the users shown in the following table.
You enable self-service password reset (SSPR) for all users and configure SSPR to have the following authentication methods:
✑ Number of methods required to reset: 2
✑ Methods available to users: Mobile phone, Security questions
✑ Number of questions required to register: 3
✑ Number of questions required to reset: 3
You select the following security questions:
✑ What is your favorite food?
✑ In what city was your first job?
✑ What was the name of your first pet?
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:
Show Answer
Correct Answer: No
No
Yes
Explanation: Security Administrator and Billing Administrator accounts use the special administrator SSPR policy, which does not allow security questions as a verification method. A non-admin user can use the configured security questions during SSPR.
Question 286
You have an Azure subscription that contains two virtual machines named VM1 and VM2.
You create an Azure load balancer.
You plan to create a load balancing rule that will load balance HTTPS traffic between VM1 and VM2.
Which two additional load balancer resources should you create before you can create the load balancing rule? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
A. a frontend IP address
B. an inbound NAT rule
C. a virtual network
D. a backend pool
E. a health probe
Show Answer
Correct Answer: D, E
Explanation: A load balancing rule requires a backend pool containing the target VMs and a health probe to determine which backend instances are healthy. A frontend IP is already part of the load balancer configuration implied by the load balancer having been created. An inbound NAT rule is unrelated to load balancing, and a virtual network is not an additional load balancer resource.
Question 287
HOTSPOT -
You have an Azure Load Balancer named LB1.
You assign a user named User1 the roles shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Hot Area:
Show Answer
Correct Answer: assign access to other users for
delete a virtual machine from
Explanation: User Access Administrator at the LB1 resource scope allows managing RBAC role assignments for LB1, not modifying or deleting the resource. Virtual Machine Contributor inherited at the resource group scope allows managing virtual machines, including deleting VMs, but not managing load balancer rules or deploying AKS.
Question 288
You have an Azure Active Directory (Azure AD) tenant.
You plan to delete multiple users by using Bulk delete in the Azure Active Directory admin center.
You need to create and upload a file for the bulk delete.
Which user attributes should you include in the file?
A. The user principal name and usage location of each user only
B. The user principal name of each user only
C. The display name of each user only
D. The display name and usage location of each user only
E. The display name and user principal name of each user only
Show Answer
Correct Answer: B
Explanation: For Azure AD (Microsoft Entra ID) bulk delete, the CSV template requires only the User name (userPrincipalName) column to identify the users to delete. Display name and usage location are not required for the bulk delete operation.
Question 289
You have an Azure virtual machine named VM1.
You use Azure Backup to create a backup of VM1 named Backup1.
After creating Backup1, you perform the following changes to VM1:
✑ Modify the size of VM1.
✑ Copy a file named Budget.xls to a folder named Data.
✑ Reset the password for the built-in administrator account.
✑ Add a data disk to VM1.
An administrator uses the Replace existing option to restore VM1 from Backup1.
You need to ensure that all the changes to VM1 are restored.
Which change should you perform again?
A. Modify the size of VM1.
B. Reset the password for the built-in administrator account.
C. Add a data disk.
D. Copy Budget.xls to Data.
Show Answer
Correct Answer: D
Explanation: Using the Replace existing restore option replaces the VM's backed-up OS/data disks with the versions from the recovery point. Changes stored on those disks after the backup, such as a newly copied file, are lost and must be redone. VM size and the reset administrator password are retained because they are VM/resource properties rather than restored disk contents. A data disk added after the backup is not part of the recovery point; during restore it becomes detached rather than deleted, so reattaching it is not the same as adding a new data disk. Therefore the change that must be performed again is copying the file.
Question 290
HOTSPOT -
You have an Azure subscription that contains an Azure Storage account named storageaccount1.
You export storageaccount1 as an Azure Resource Manager template. The template contains the following sections.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point
Hot Area:
Show Answer
Correct Answer: Yes
Yes
No
Explanation: Network ACLs have defaultAction=Allow with no IP or VNet rules, so public IPs are allowed. A Standard_LRS StorageV2 account supports blob access tiers, and individual blobs can be moved to the Archive tier. Azure AD Global Administrator does not automatically have data-plane access to Azure Files; appropriate Azure Files identity/RBAC configuration is required.
Question 291
You have an Azure subscription that uses the public IP addresses shown in the following table.
You need to create a public Azure Standard Load Balancer.
Which public IP addresses can you use?
A. IP1, IP2, and IP3
B. IP2 only
C. IP3 only
D. IP1 and IP3 only
Show Answer
Correct Answer: C
Explanation: A Standard Azure Load Balancer requires a Standard SKU public IP address. Basic SKU public IP addresses cannot be associated with a Standard Load Balancer. Therefore, only the public IP that is Standard SKU (IP3 in the referenced table) can be used.
Question 292
You have five Azure virtual machines that run Windows Server 2016. The virtual machines are configured as web servers.
You have an Azure load balancer named LB1 that provides load balancing services for the virtual machines.
You need to ensure that visitors are serviced by the same web server for each request.
What should you configure?
A. Session persistence to Client IP and protocol
B. Protocol to UDP
C. Session persistence to None
D. Floating IP (direct server return) to Enabled
Show Answer
Correct Answer: A
Explanation: To keep a client consistently routed to the same backend web server across requests, configure the Azure Load Balancer's session persistence (source IP affinity). The 'Client IP and protocol' option uses the client IP and protocol as the hash, ensuring requests from the same client over the same protocol are directed to the same virtual machine. UDP is unrelated for typical web traffic, 'None' disables affinity, and Floating IP is for specific load-balancing scenarios, not session stickiness.
Question 293
HOTSPOT -
You need to ensure that User1 can create initiative definitions, and User4 can assign initiatives to RG2. The solution must meet the technical requirements.
Which role should you assign to each user? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Show Answer
Correct Answer: User1: Resource Policy Contributor for Sub1
User4: Contributor for RG2
Explanation: Creating initiative definitions requires Resource Policy Contributor at the subscription scope. Assigning an initiative to a resource group requires write access at that resource group, which Contributor on RG2 provides.
Question 294
HOTSPOT -
You plan to deploy an Azure container instance by using the following Azure Resource Manager template.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the template.
NOTE: Each correct selection is worth one point.
Hot Area:
Show Answer
Correct Answer: Internet users: can connect to the container from any device
If IIS in the container fails: the container will restart automatically
Explanation: The container group has a Public IP with TCP port 80 exposed, so clients can access it regardless of their operating system. The Windows osType refers to the container OS, not the client. The restartPolicy is OnFailure, so if the containerized IIS process fails, Azure Container Instances restarts the container automatically.
$19
Get all 555 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.
