You have an Azure subscription that contains 10 web apps. The apps are integrated with Azure AD and are accessed by users on different project teams.
The users frequently move between projects.
You need to recommend an access management solution for the web apps. The solution must meet the following requirements:
• The users must only have access to the app of the project to which they are assigned currently.
• Project managers must verify which users have access to their project’s app and remove users that are no longer assigned to their project.
• Once every 30 days, the project managers must be prompted automatically to verify which users are assigned to their projects.
What should you include in the recommendation?
A. Azure AD Identity Protection
B. Microsoft Defender for Identity
C. Microsoft Entra Permissions Management
D. Azure AD Identity Governance
Show Answer
Correct Answer: D
Explanation: Azure AD Identity Governance (now Microsoft Entra ID Governance) includes access reviews, entitlement management, and lifecycle governance. Access Reviews can automatically prompt project managers every 30 days to review and certify user access, allowing removal of users who are no longer assigned. The other options focus on identity risk detection, threat detection, or cloud permission management rather than recurring application access governance.
Question 43
HOTSPOT
-
You have an Azure subscription. The subscription contains an Azure SQL managed instance that stores employee details, including social security numbers and phone numbers.
You need to configure the managed instance to meet the following requirements:
• The helpdesk team must see only the last four digits of an employee’s phone number.
• Cloud administrators must be prevented from seeing the employee’s social security numbers.
What should you enable for each column in the managed instance? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Phone numbers: Dynamic data masking
Social security numbers: Always Encrypted
Explanation: Dynamic data masking can reveal only the last four digits of a phone number to specific users. Always Encrypted protects sensitive column data so even cloud/database administrators cannot view plaintext without the client-side encryption keys.
Question 46
You plan to use an Azure Storage account to store data assets.
You need to recommend a solution that meets the following requirements:
• Supports immutable storage
• Disables anonymous access to the storage account
• Supports access control list (ACL)-based Azure AD permissions
What should you include in the recommendation?
A. Azure Files
B. Azure Data Lake Storage
C. Azure NetApp Files
D. Azure Blob Storage
Show Answer
Correct Answer: B
Explanation: Azure Data Lake Storage Gen2 (implemented on Azure Blob Storage with a hierarchical namespace) meets all three requirements: it supports immutable storage (WORM policies), allows anonymous access to be disabled at the storage account, and uniquely provides POSIX-style ACLs integrated with Azure AD for fine-grained file and directory permissions. Azure Blob Storage alone supports RBAC and immutability, but the ACL-based Azure AD permission requirement points to Azure Data Lake Storage Gen2.
Question 48
You are developing a sales application that will contain several Azure cloud services and handle different components of a transaction. Different cloud services will process customer orders, billing, payment, inventory, and shipping.
You need to recommend a solution to enable the cloud services to asynchronously communicate transaction information by using XML messages.
What should you include in the recommendation?
A. Azure Application Gateway
B. Azure Data Lake
C. Azure Queue Storage
D. Azure Blob Storage
Show Answer
Correct Answer: C
Explanation: Azure Queue Storage enables asynchronous communication between distributed application components by storing messages in queues. It is suitable for decoupling cloud services such as order processing, billing, inventory, and shipping. Application Gateway is for web traffic load balancing, Data Lake is for analytics storage, and Blob Storage is for object storage rather than message-based communication.
Question 49
You are developing a sales application that will contain several Azure cloud services and handle different components of a transaction. Different cloud services will process customer orders, billing, payment, inventory, and shipping.
You need to recommend a solution to enable the cloud services to asynchronously communicate transaction information by using XML messages.
What should you include in the recommendation?
A. Azure Service Bus
B. Azure Data Lake
C. Azure Traffic Manager
D. Azure Notification Hubs
Show Answer
Correct Answer: A
Explanation: Azure Service Bus provides reliable asynchronous messaging between distributed cloud services using queues and topics/subscriptions. It is designed to decouple components such as order processing, billing, payment, inventory, and shipping, and can carry XML messages. Azure Data Lake is for analytics storage, Traffic Manager is for DNS-based traffic routing, and Notification Hubs is for push notifications.
Question 50
You are developing a sales application that will contain several Azure cloud services and handle different components of a transaction. Different cloud services will process customer orders, billing, payment, inventory, and shipping.
You need to recommend a solution to enable the cloud services to asynchronously communicate transaction information by using XML messages.
What should you include in the recommendation?
A. Azure Service Bus
B. Azure Data Lake
C. Azure Application Gateway
D. Azure Notification Hubs
Show Answer
Correct Answer: A
Explanation: Azure Service Bus is designed for asynchronous messaging between distributed applications and services. It supports reliable message queues and topics, allowing different cloud services such as orders, billing, payments, inventory, and shipping to exchange XML (or JSON/plain text) messages independently. Azure Data Lake is for analytics storage, Application Gateway is a web traffic load balancer, and Notification Hubs is for push notifications to client devices.
Question 51
You need to recommend a solution to generate a monthly report of all the new Azure Resource Manager (ARM) resource deployments in your Azure subscription.
What should you include in the recommendation?
A. Application Insights
B. Azure Analysis Services
C. Azure Advisor
D. Azure Activity Log
Show Answer
Correct Answer: D
Explanation: Azure Activity Log records subscription-level events, including Azure Resource Manager (ARM) resource creation, update, and deletion operations. It is the appropriate source for generating monthly reports of new ARM resource deployments. Application Insights monitors application telemetry, Azure Analysis Services is an analytics platform, and Azure Advisor provides optimization recommendations rather than deployment event logs.
Question 52
You are developing a sales application that will contain several Azure cloud services and handle different components of a transaction. Different cloud services will process customer orders, billing, payment, inventory, and shipping.
You need to recommend a solution to enable the cloud services to asynchronously communicate transaction information by using XML messages.
What should you include in the recommendation?
A. Azure Service Bus
B. Azure Blob Storage
C. Azure Notification Hubs
D. Azure Application Gateway
Show Answer
Correct Answer: A
Explanation: Azure Service Bus is designed for reliable asynchronous messaging between distributed applications and services. It supports message queues and topics/subscriptions, making it appropriate for decoupling cloud services that exchange transaction information, including XML payloads. Azure Blob Storage is for object storage, Notification Hubs are for push notifications, and Application Gateway is a web traffic load balancer.
Question 53
You are developing a sales application that will contain several Azure cloud services and handle different components of a transaction. Different cloud services will process customer orders, billing, payment, inventory, and shipping.
You need to recommend a solution to enable the cloud services to asynchronously communicate transaction information by using XML messages.
What should you include in the recommendation?
A. Azure Service Fabric
B. Azure Traffic Manager
C. Azure Queue Storage
D. Azure Notification Hubs
Show Answer
Correct Answer: C
Explanation: Azure Queue Storage is designed for asynchronous communication between application components by decoupling producers and consumers through queues. It can carry XML payloads as message content. Azure Service Fabric is an application platform, Traffic Manager is a DNS-based load balancer, and Notification Hubs is for mobile push notifications.
Question 54
You need to design a highly available Azure SQL database that meets the following requirements:
• Failover between replicas of the database must occur without any data loss.
• The database must remain available in the event of a zone outage.
• Costs must be minimized.
Which deployment option should you use?
A. Azure SQL Database Business Critical
B. Azure SQL Database Hyperscale
C. Azure SQL Managed Instance Business Critical
D. Azure SQL Database Standard
Show Answer
Correct Answer: A
Explanation: Azure SQL Database Business Critical uses Always On availability groups with multiple synchronous replicas, enabling automatic failover without data loss. It also supports zone-redundant configuration to remain available during an Availability Zone outage. Compared with Azure SQL Managed Instance Business Critical, Azure SQL Database Business Critical is typically the lower-cost option when managed instance features are not required. Hyperscale is optimized for scale rather than zero-data-loss HA, and Standard does not meet the synchronous high-availability requirement.
$19
Get all 271 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.