You have an Azure subscription that contains the resources shown in the following table.
You create a public IP address named IP1.
Which two resources can you associate to IP1? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
A. VM1
B. LB1
C. NIC1
D. VPN1
E. VNet1
Show Answer
Correct Answer: B, C
Explanation: A public IP can be associated with a load balancer frontend or a network interface. A VM itself is not directly associated with the IP; it uses the public IP through its NIC. A virtual network gateway uses a public IP configured for the gateway rather than an ordinary association to an already deployed gateway.
Question 11
You have a Microsoft Entra tenant.
You plan to perform a bulk import of users.
You need to ensure that imported user objects are added automatically as the members of a specific group based on each user's department. The solution must minimize administrative effort.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
A. Create groups that use the Assigned membership type.
B. Create an Azure Resource Manager (ARM) template.
C. Create groups that use the Dynamic User membership type.
D. Write a PowerShell script that parses an import file.
E. Create an XML file that contains user information and the appropriate attributes.
F. Create a CSV file that contains user information and the appropriate attributes.
Show Answer
Correct Answer: C, F
Explanation: Use Dynamic User membership groups with a rule based on the department attribute so users are added automatically after import. Bulk user import into Microsoft Entra ID is performed using a CSV file that includes the required user attributes, such as department. This minimizes administrative effort by avoiding manual assignment or custom scripting.
Question 11
You have an Azure subscription that contains the resources shown in the following table.
You create a route table named RT1 in the East US Azure region.
To which resources can you associate RT1?
A. VNet1 only
B. Subnet1 only
C. VNet1 and NIC1 only
D. Subnet1 and NIC1 only
E. VNet1, Subnet1, and NIC1
Show Answer
Correct Answer: B
Explanation: Azure route tables are associated with subnets, not directly with virtual networks or network interfaces. Therefore, RT1 can be associated with Subnet1 only.
Question 11
HOTSPOT -
You have an Azure subscription that contains the resource groups shown in the following table.
You create the following Azure Resource Manager (ARM) template named deploy.json.
You deploy the template by running the following cmdlet.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: 1. Yes
2. No
3. No
Explanation: The copy loop targets RG0 through RG3. RG0 is new, while RG1 and RG2 already exist, so the template does not create four new groups. The template specifies East US for the groups; the cmdlet’s West US location is for deployment metadata, not RG3.
Question 12
You have two Azure subscriptions named Sub1 and Sub2 that are linked to separate Microsoft Entra tenants.
You have the virtual networks shown in the following table.
Which virtual networks can you peer with VNet1?
A. VNet2 only
B. VNet2 and VNet3 only
C. VNet2 and VNet4 only
D. VNet2, VNet3, and VNet4 only
E. VNet2, VNet3, VNet4, and VNet5
Show Answer
Correct Answer: E
Explanation: Virtual network peering supports VNets in different regions, subscriptions, and Microsoft Entra tenants. Therefore, all four VNets can be peered with VNet1, provided their address spaces do not overlap and the required permissions and peering configuration are in place.
Question 12
HOTSPOT -
You have an Azure subscription that contains the virtual networks shown in the following table.
The subscription contains the virtual machines shown in the following table.
Each virtual machine contains only a private IP address.
You create an Azure bastion for VNet1 as shown in the following exhibit.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: 1. No
2. Yes
3. No
Explanation: Basic-tier Bastion does not support connections using the native Remote Desktop client (mstsc.exe). The Azure portal can use Bastion to SSH to VM2 because VNet2 is directly peered with VNet1. VM3 is unreachable through Bastion1 because VNet peering is not transitive.
Question 13
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure container registry named Registry1 that contains an image named image1.
You receive an error message when you attempt to deploy a container instance by using image1.
You need to be able to deploy a container instance by using image1.
Solution: You assign the AcrPull role to ACR-Tasks-Network for Registry1.
Does this meet the goal?
A. Yes
B. No
Show Answer
Correct Answer: B
Explanation: Assigning the AcrPull role to ACR-Tasks-Network does not enable Azure Container Instances to pull images from the registry. The AcrPull role must be granted to the identity used by the container instance (such as its managed identity or the service principal/user performing the pull). Therefore, assigning the role to ACR-Tasks-Network does not meet the stated goal.
Question 13
You have an Azure subscription that contains the resources shown in the following table.
You need to ensure that data transfers between storage1 and VM1 do NOT traverse the internet
What should you configure for storage1?
A. data protection
B. a private endpoint
C. Public network access in the Firewalls and virtual networks settings
D. a shared access signature (SAS)
Show Answer
Correct Answer: B
Explanation: Configure a private endpoint for storage1. It gives the storage account a private IP address reachable from VM1’s virtual network, so the connection uses the Microsoft backbone rather than the public internet.
Question 13
HOTSPOT -
You have an Azure subscription that contains the virtual machines shown in the following table.
You create an Azure Compute Gallery named ComputeGallery1 as shown in the Azure Compute Gallery exhibit. (Click the Azure Compute Gallery tab.)
In ComputeGallery1, you create a virtual machine image definition named Image1 as shown in the image definition exhibit. (Click the Image Definition tab.)
For each of the following statements, select Yes if the statement is true. Otherwise, select No,
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: VM1: Yes
VM2: Yes
VM3: Yes
Explanation: Each OS disk can be selected as a source for an image version. The different regions and recommended vCPU range do not prevent selection, and the VM generation setting does not prevent selecting VM1’s OS disk as the source.
Question 14
You have an Azure subscription named Subscription1 that contains the resources shown in the following table.
You create virtual machines in Subscription1 as shown in the following table.
You plan to use Vault1 for the backup of as many virtual machines as possible.
Which virtual machines can be backed up to Vault1?
A. VM1 only
B. VM3 and VMC only
C. VM1, VM2, VM3, VMA, VMB, and VMC
D. VM1, VM3, VMA, and VMC only
E. VM1 and VM3 only
Show Answer
Correct Answer: D
Explanation: A Recovery Services vault must be in the same Azure region as the VMs it protects; the VMs do not need to be in the same resource group as the vault. Vault1 is in West Europe, so it can back up VM1, VM3, VMA, and VMC. VM2 and VMB are in North Europe.
$19
Get all 558 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.
