HOTSPOT
-
You have an Azure subscription that contains the virtual networks shown in the following table.
Each virtual network has 50 connected virtual machines.
You need to implement Azure Bastion. The solution must meet the fallowing requirements:
• Support host scaling.
• Support uploading and downloading files.
• Support the virtual machines on both VNet1 and VNet2.
• Minimize the number of addresses on the Azure Bastion subnet.
How should you configure Azure Bastion? To answer, select the options in the answer area.
NOTE: Each correct answer is worth one point.
Show Answer
Correct Answer: Subnet size: /26
Public IP: Standard SKU with a static allocation
Explanation: Azure Bastion Standard is required for host scaling and file upload/download. Bastion requires a Standard static public IP. To minimize addresses while supporting host scaling, use the minimum supported AzureBastionSubnet size of /26.
Question 72
HOTSPOT
-
You have an Azure subscription. The subscription contains a storage account named storage1 that has the lifecycle management rules shown in the following table.
On June 1, you store two blobs in storage1 as shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: No
Yes
No
Explanation: Rule 2 (no prefix) applies to all blobs after more than 5 days unless a cheaper applicable action overrides it. File1 is already archived by the container1 rule, so it is not in Cool on June 6. File2 moves to Cool after more than 5 days, then is deleted after more than 10 days by the container2 delete rule, so it never reaches Archive on June 16.
Question 74
You have an Azure subscription that contains the storage accounts shown in the following table.
Which storage account can be converted to zone-redundant storage (ZRS) replication?
A. storage1
B. storage2
C. storage3
D. storage4
Show Answer
Correct Answer: B
Explanation: Based on the available information, the only storage account that can be confidently identified as eligible for conversion to ZRS is storage2. Azure supports changing to ZRS for supported account types such as Standard general-purpose v2 (StorageV2), Premium BlockBlobStorage, and FileStorage, subject to current replication constraints. The prompt does not include the storage account table, so storage4 cannot be confirmed.
Question 75
You have an Azure subscription that contains the devices shown in the following table.
On which devices can you install Azure Storage Explorer?
A. Device1 only
B. Device1 and Device2 only
C. Device1 and Device3 only
D. Device1, Device2, and Device3 only
E. Device1, Device3, and Device4 only
Show Answer
Correct Answer: D
Explanation: Azure Storage Explorer is supported on the major desktop operating systems: Windows, macOS, and Linux. Therefore, it can be installed on the three devices running those supported desktop operating systems, but not on an unsupported platform.
Question 76
HOTSPOT -
You have an Azure subscription that contains two storage accounts named contoso101 and contoso102.
The subscription contains the virtual machines shown in the following table.
VNet1 has service endpoints configured as shown in the Service endpoints exhibit. (Click the Service endpoints tab.)
The Microsoft.Storage service endpoint has the service endpoint policy shown in the Microsoft.Storage exhibit. (Click the Microsoft.Storage tab.)
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: No
Yes
No
Explanation: Storage service endpoint is enabled only on Subnet1 and its endpoint policy allows only contoso101, so VM1 cannot access contoso102 via the service endpoint. VM2 is on Subnet2 without a Storage service endpoint, so it can still reach contoso101 through its public endpoint (absent any storage firewall restriction). Microsoft.AzureActiveDirectory service endpoints are for ADLS Gen1 scenarios; Microsoft Entra ID/Azure AD itself is not accessed via a private IP using service endpoints.
Question 77
You have an Azure subscription that contains a virtual machine named VM1.
You plan to deploy an Azure Monitor alert rule that will trigger an alert when CPU usage on VM1 exceeds 80 percent.
You need to ensure that the alert rule sends an email message to two users named User1 and User2.
What should you create for Azure Monitor?
A. an action group
B. a mail-enabled security group
C. a distribution group
D. a Microsoft 365 group
Show Answer
Correct Answer: A
Explanation: Azure Monitor uses an action group to define the notifications and actions that occur when an alert is triggered. To send email notifications to User1 and User2 when the CPU alert fires, create an action group and configure both users as email recipients. Mail-enabled security groups, distribution groups, and Microsoft 365 groups are not the Azure Monitor resource used to configure alert notifications.
Question 78
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure Active Directory (Azure AD) tenant named contoso.com.
You have a CSV file that contains the names and email addresses of 500 external users.
You need to create a guest user account in contoso.com for each of the 500 external users.
Solution: You create a PowerShell script that runs the New-MgUser cmdlet for each user.
Does this meet the goal?
A. Yes
B. No
Show Answer
Correct Answer: B
Explanation: New-MgUser creates user objects in Microsoft Entra ID but is not the correct cmdlet for creating guest users from external identities. To onboard external users as guests (B2B), you should use the invitation API/cmdlet such as New-MgInvitation, which creates the guest account and sends or manages the invitation process.
Question 79
You have an Azure subscription that contains an Azure SQL database named DB1.
You plan to use Azure Monitor to monitor the performance of DB1. You must be able to run queries to analyze log data.
Which destination should you configure in the Diagnostic settings of DB1?
A. Send to a Log Analytics workspace.
B. Archive to a storage account.
C. Stream to an Azure event hub.
Show Answer
Correct Answer: A
Explanation: To run queries and analyze Azure SQL Database diagnostic logs with Azure Monitor, configure Diagnostic settings to send logs to a Log Analytics workspace. Log Analytics supports Kusto Query Language (KQL) queries, analytics, alerts, and visualization. A storage account is for archival, and Event Hubs is for streaming to external consumers.
Question 80
You have an Azure subscription that contains a storage account named storage1. The storage1 account contains a container named container1.
You need to configure access to container1. The solution must meet the following requirements:
• Only allow read access.
• Allow both HTTP and HTTPS protocols.
• Apply access permissions to all the content in the container.
What should you use?
A. an access policy
B. a shared access signature (SAS)
C. Azure Content Delivery Network (CDN)
D. access keys
Show Answer
Correct Answer: B
Explanation: A shared access signature (SAS) provides delegated, time-bound access to Azure Storage resources with granular permissions. It can be configured for read-only access, set to allow both HTTP and HTTPS protocols, and when created for a container, applies to the resources within that container. An access policy alone does not grant access; it is used with SAS. Access keys grant full account access, and Azure CDN is not an access control mechanism.
Question 81
You need to create an Azure Storage account named storage1. The solution must meet the following requirements:
• Support Azure Data Lake Storage.
• Minimize costs for infrequently accessed data.
• Automatically replicate data to a secondary Azure region.
Which three options should you configure for storage1? Each correct answer presents part of the solution.
NOTE: Each correct answer is worth one point.
A. zone-redundant storage (ZRS)
B. the Cool access tire
C. geo-redundant storage (GRS)
D. the Hot access tier
E. hierarchical namespace
Show Answer
Correct Answer: B, C, E
Explanation: Azure Data Lake Storage Gen2 requires the hierarchical namespace feature. To minimize storage costs for infrequently accessed data, use the Cool access tier. To automatically replicate data to a secondary Azure region, choose geo-redundant storage (GRS). Zone-redundant storage (ZRS) only replicates within a region, and the Hot tier is intended for frequently accessed data.
$19
Get all 555 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.
