Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure container registry named Registry1 that contains an image named image1.
You receive an error message when you attempt to deploy a container instance by using image1.
You need to be able to deploy a container instance by using image1.
Solution: You set Admin user to Enable for Registry1.
Does this meet the goal?
A. Yes
B. No
Show Answer
Correct Answer: A
Explanation: Azure Container Instances must authenticate to Azure Container Registry to pull images. Enabling the Admin user on the registry provides pull credentials that can be used (and are required when deploying via the Azure portal). If the deployment failed due to lack of authentication, enabling the Admin user resolves the issue, allowing the container instance to deploy using image1. Therefore, the solution meets the goal.
Question 39
You have an Azure subscription that contains three virtual machines named VM1, VM2, and VM3. All the virtual machines are in an availability set named AVSet1.
You need to scale up VM1 to a new virtual machine size, but the intended size is unavailable.
What should you do first?
A. Create a proximity placement group.
B. Deallocate VM1.
C. Convert AvSet1 into a managed availability set.
D. Shut down VM3 and VM3.
Show Answer
Correct Answer: B
Explanation: When a desired VM size is unavailable, it is typically due to capacity constraints on the current hardware cluster. Deallocating VM1 releases its allocated hardware, allowing Azure to move it to a different cluster where the intended size may be available. Only after deallocation can additional VM sizes appear and the resize be performed.
Question 40
You have an Azure subscription.
You create a routing table named RT1.
You need to add a route to RT1 that specifies the next hop IP address.
Which next hop type should you select?
A. Internet
B. Virtual network gateway
C. Virtual network
D. Virtual appliance
Show Answer
Correct Answer: D
Explanation: In Azure user-defined routes, only the **Virtual appliance** next hop type allows you to specify an explicit next hop IP address. This is used when routing traffic to a specific device such as a firewall or other network virtual appliance (NVA). Other next hop types (Internet, Virtual network gateway, Virtual network) do not require or allow a custom IP address.
Question 41
You have an Azure subscription that contains a storage account named storage1.
You need to allow access to storage1 from selected networks and your home office. The solution must minimize administrative effort.
What should you do first for storage1?
A. Add a private endpoint.
B. Modify the Public network access settings.
C. Select Internet routing.
D. Modify the Access Control (IAM) settings.
Show Answer
Correct Answer: B
Explanation: To allow access from selected networks and a home office with minimal administrative effort, you should first modify the storage account’s Public network access settings. This enables restricting access to selected networks and specific public IP addresses (such as a home office IP) without deploying additional infrastructure. Adding a private endpoint would require more configuration and management, IAM controls identity not network access, and Internet routing is unrelated to access restriction.
Question 42
You have an Azure subscription that contains the resources shown in the following table.
You create a public IP address named IP1.
Which two resources can you associate to IP1? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
A. VM1
B. LB1
C. NIC1
D. VPN1
E. VNet1
Show Answer
Correct Answer: B, C
Explanation: An Azure public IP address can be associated with a Load Balancer frontend configuration or directly with a network interface (NIC). Virtual machines are not associated with public IPs directly (they use NICs), virtual network gateways (VPN gateways) require a public IP but it is assigned during gateway creation and not associated like a standalone resource afterward, and virtual networks cannot have public IPs associated.
Question 43
HOTSPOT -
You have an Azure subscription that contains the resources shown in the following table.
You plan to use an Azure key vault to provide a secret to app1.
What should you create for app1 to access the key vault, and from which key vault can the secret be used? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Create a:
Managed identity
Use the secret from:
Vault1, Vault2, or Vault3
Explanation: Azure Container Apps can authenticate to Azure Key Vault using a managed identity. Key Vault access is not restricted by resource group or region, so app1 can use secrets from any of the listed key vaults as long as permissions are granted.
Question 44
HOTSPOT -
You have an Azure subscription that contains the virtual machines shown in the following table.
The subscription contains a storage account named contoso2024 as shown in the following exhibit.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
Show Answer
Correct Answer: Yes
Yes
No
Explanation: The storage account allows access from selected virtual networks and from specific public IP addresses. VM1 and VM2 have public IPs that are explicitly allowed in the storage firewall, so they can connect using those public IPs. VM3 does not have to use its private IP because no private endpoint is configured; access can still occur via the public endpoint, so it is not mandatory to use the private IP.
Question 45
HOTSPOT
-
You have an Azure subscription that uses Azure Container Instances.
You have a computer that has Azure Command-Line Interface (CLI) and Docker installed.
You create a container image named image1.
You need to provision a new Azure container registry and add image1 to the registry.
Which command should you run for each requirement? To answer, select the options in the answer area.
NOTE: Each correct answer is worth one point.
Show Answer
Correct Answer: Provision a new container registry:
az acr create
Add image1 to the registry:
docker push
Explanation: `az acr create` provisions a new Azure Container Registry. After the image is built and tagged with the registry name, `docker push` uploads the local image to the registry.
Question 46
You have an Azure virtual network named VNet1 that contains the following settings:
• IPv4 address space: 172.16.10.0/24
• Subnet name: Subnet1
• Subnet address range: 172.16.10.0/25
What is the maximum number of virtual machines that can connect to Subnet1?
A. 24
B. 25
C. 123
D. 128
E. 251
Show Answer
Correct Answer: C
Explanation: A /25 subnet provides 2^(32−25) = 128 total IPv4 addresses. In Azure, 5 addresses in each subnet are reserved (network address, broadcast address, and three Azure-reserved addresses). Therefore, usable addresses for virtual machines are 128 − 5 = 123.
Question 47
DRAG DROP -
You have a Microsoft Entra tenant.
You need to ensure that when a new Microsoft 365 group is created, the group name is automatically formatted as follows:
Which three actions should you perform in sequence in the Microsoft Entra admin center? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Show Answer
Correct Answer: Create a group naming policy.
Set Add prefix to Attribute.
Set Select type to Department.
Explanation: A Microsoft 365 group naming policy must be created first. To achieve the format <Department><Group name>, the prefix is configured to use an attribute, and the selected attribute is set to Department so it is automatically prepended to the group name.
$19
Get all 558 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.
