HOTSPOT -
You are evaluating whether to use Azure Traffic Manager and Azure Application Gateway to meet the connection requirements for App1.
What is the minimum numbers of instances required for each service? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Explanation: Traffic Manager is a global DNS-based service, so a single instance can direct traffic across regions. Application Gateway is a regional service, requiring one gateway per region, so two gateways are needed for a two-region deployment.
Question 140
HOTSPOT -
You plan to migrate App1 to Azure.
You need to recommend a high-availability solution for App1. The solution must meet the resiliency requirements.
What should you include in the recommendation? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Show Answer
Correct Answer: Number of host groups: 3
Number of virtual machine scale sets: 3
Explanation: A dedicated host group is scoped to a single availability zone. To achieve zone-level resiliency across three availability zones, deploy one host group per zone. A VM scale set using dedicated hosts must match the host group's availability zone, so you need one VM scale set per zone.
Question 141
HOTSPOT -
To meet the authentication requirements of Fabrikam, what should you include in the solution? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Show Answer
Correct Answer: 1
1
2
Explanation: Use a single Azure AD tenant, add one custom domain for the organization, and create two Conditional Access policies: one to require MFA for administrative Azure portal access and another to restrict access based on the required location/access conditions.
Question 143
You have an Azure subscription.
You need to recommend a solution to provide developers with the ability to provision Azure virtual machines. The solution must meet the following requirements:
✑ Only allow the creation of the virtual machines in specific regions.
✑ Only allow the creation of specific sizes of virtual machines.
What should you include in the recommendation?
A. Attribute-based access control (ABAC)
B. Azure Policy
C. Conditional Access policies
D. role-based access control (RBAC)
Show Answer
Correct Answer: B
Explanation: Azure Policy is designed to enforce governance rules on resource creation and configuration. Built-in or custom policies can restrict allowed Azure regions (locations) and allowed virtual machine SKUs (sizes). RBAC controls who can perform actions, not resource properties; ABAC provides finer-grained authorization conditions but does not enforce resource governance like allowed locations/sizes; Conditional Access governs user sign-in and access conditions, not VM provisioning.
Question 144
You have an on-premises line-of-business (LOB) application that uses a Microsoft SQL Server instance as the backend.
You plan to migrate the on-premises SQL Server instance to Azure virtual machines.
You need to recommend a highly available SQL Server deployment that meets the following requirements:
✑ Minimizes costs
Minimizes failover time if a single server fails
What should you include in the recommendation?
A. an Always On availability group that has premium storage disks and a virtual network name (VNN)
B. an Always On Failover Cluster Instance that has a virtual network name (VNN) and a standard file share
C. an Always On availability group that has premium storage disks and a distributed network name (DNN)
D. an Always On Failover Cluster Instance that has a virtual network name (VNN) and a premium file share
Show Answer
Correct Answer: C
Explanation: Always On Availability Groups provide the fastest database failover for a single server failure. In Azure SQL Server VMs, using a Distributed Network Name (DNN) listener avoids the Azure Load Balancer dependency required by a VNN, reducing failover latency. Premium storage is the appropriate choice for SQL Server workloads and supports high availability performance. Although an FCI protects the entire instance, it relies on shared storage and typically does not minimize failover time compared to an AG.
Question 145
You need to implement the Azure RBAC role assignments for the Network Contributor role. The solution must meet the authentication and authorization requirements.
What is the minimum number of assignments that you must use?
A. 1
B. 2
C. 5
D. 10
E. 15
Show Answer
Correct Answer: B
Explanation: The minimum is two RBAC role assignments because Azure management groups and their root management group are scoped to a single Azure AD tenant. With two separate Azure AD tenants, a single management group cannot span both tenants. Assign the Network Contributor role once at the root management group (or appropriate management group) in each tenant, and the permissions inherit to all subscriptions in that tenant.
Question 146
You need to recommend a solution to generate a monthly report of all the new Azure Resource Manager (ARM) resource deployments in your Azure subscription.
What should you include in the recommendation?
A. Azure Activity Log
B. Azure Arc
C. Azure Analysis Services
D. Azure Monitor action groups
Show Answer
Correct Answer: A
Explanation: Azure Activity Log records subscription-level management events, including Azure Resource Manager create (write) operations for resources. It can be queried or exported to generate a monthly report of newly deployed ARM resources. Azure Arc manages hybrid resources, Azure Analysis Services is an analytics service, and Azure Monitor action groups are for alert notifications rather than reporting.
Question 147
HOTSPOT -
You have an Azure App Service web app that uses a system-assigned managed identity.
You need to recommend a solution to store the settings of the web app as secrets in an Azure key vault. The solution must meet the following requirements:
✑ Minimize changes to the app code.
✑ Use the principle of least privilege.
What should you include in the recommendation? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Show Answer
Correct Answer: Key Vault integration method: Key Vault references in Application settings
Key Vault permissions for the managed identity: Secrets: Get
Explanation: Using Key Vault references in App Service Application Settings avoids application code changes because App Service resolves the secret reference. Following least privilege, the managed identity only needs the Secrets:Get permission to retrieve the referenced secret.
Question 148
HOTSPOT -
You plan to migrate DB1 and DB2 to Azure.
You need to ensure that the Azure database and the service tier meet the resiliency and business requirements.
What should you configure? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Show Answer
Correct Answer: Database: An Azure SQL Database elastic pool
Service tier: Business Critical
Explanation: Business Critical provides the required high availability, low latency, and zone-redundant resiliency. For two Azure SQL databases with shared resource efficiency, an elastic pool is the appropriate choice among the listed options.
Question 149
HOTSPOT -
You design a solution for the web tier of WebApp1 as shown in the exhibit.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:
Show Answer
Correct Answer: Yes
Yes
No
Explanation: Traffic Manager across two regional Azure Web Apps provides redundancy and automatic failover. Azure App Service supports autoscaling (with appropriate App Service plans), and Traffic Manager does not require manual reconfiguration when a region fails.
$19
Get all 271 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.
