You have an Azure subscription that contains 1,000 resources.
You need to generate compliance reports for the subscription. The solution must ensure that the resources can be grouped by department.
What should you use to organize the resources?
A. application groups and quotas
B. Azure Policy and tags
C. administrative units and Azure Lighthouse
D. resource groups and role assignments
Show Answer
Correct Answer: B
Explanation: Azure tags let you label resources with metadata such as department, enabling grouping and reporting across a large subscription. Azure Policy can enforce the presence and correct values of those tags and assess compliance, which supports generating compliance reports. Other options do not provide effective cross-resource grouping by department.
Question 74
You need to recommend a solution to generate a monthly report of all the new Azure Resource Manager (ARM) resource deployments in your Azure subscription.
What should you include in the recommendation?
A. Azure Monitor action groups
B. Azure Arc
C. Azure Monitor metrics
D. Azure Activity Log
Show Answer
Correct Answer: D
Explanation: To generate a monthly report of new Azure Resource Manager (ARM) deployments, you need a data source that records management-plane operations such as resource creation and deployment events. The Azure Activity Log captures all ARM operations at the subscription level, including when resources are deployed, modified, or deleted, and it can be queried or exported for reporting. Azure Monitor metrics, action groups, and Azure Arc do not provide a historical log of ARM deployment events suitable for this purpose.
Question 75
Your company has the divisions shown in the following table.
Sub1 contains an Azure App Service web app named App1. App1 uses Azure AD for single-tenant user authentication. Users from contoso.com can authenticate to App1.
You need to recommend a solution to enable users in the fabrikam.com tenant to authenticate to App1.
What should you recommend?
A. Use Azure AD entitlement management to govern external users.
B. Enable Azure AD pass-through authentication and update the sign-in endpoint.
C. Configure a Conditional Access policy.
D. Configure assignments for the fabrikam.com users by using Azure AD Privileged Identity Management (PIM).
Show Answer
Correct Answer: A
Explanation: App1 is configured as a single-tenant Azure AD app, so users from another tenant (fabrikam.com) cannot authenticate unless they are onboarded as external (B2B) users. Azure AD Entitlement Management is designed to manage access for external users by inviting them as guests and assigning them access packages, enabling authentication without converting the app to multi-tenant. Pass-through authentication, Conditional Access, and PIM do not enable cross-tenant authentication for a single-tenant app.
Question 76
DRAG DROP
-
You have an Azure AD tenant that contains an administrative unit named MarketingAU. MarketingAU contains 100 users.
You create two users named User1 and User2.
You need to ensure that the users can perform the following actions in MarketingAU:
• User1 must be able to create user accounts.
• User2 must be able to reset user passwords.
Which role should you assign to each user? To answer, drag the appropriate roles to the correct users. Each role may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: User1: User Administrator for MarketingAU
User2: Helpdesk Administrator for MarketingAU
Explanation: User Administrator scoped to an administrative unit can create user accounts in Azure AD and manage users within that unit, satisfying the requirement to create users for MarketingAU. Helpdesk Administrator scoped to the administrative unit can reset passwords for users in that unit without granting broader tenant-wide permissions, meeting the least-privilege requirement.
Question 77
HOTSPOT
-
You have an Azure AD tenant that contains a management group named MG1.
You have the Azure subscriptions shown in the following table.
The subscriptions contain the resource groups shown in the following table.
The subscription contains the Azure AD security groups shown in the following table.
The subscription contains the user accounts shown in the following table.
You perform the following actions:
Assign User3 the Contributor role for Sub1.
Assign Group1 the Virtual Machine Contributor role for MG1.
Assign Group3 the Contributor role for the Tenant Root Group.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Yes
No
Yes
Explanation: 1) User1 is in Group1, which has Virtual Machine Contributor on MG1; this role is inherited by Sub1 and RG1, allowing VM creation.
2) Granting permissions requires Owner or User Access Administrator; User2 only has Contributor via group membership, which cannot assign roles.
3) Group3 has Contributor at the Tenant Root Group. Nested group membership applies to Azure RBAC, so User3 (via Group1/Group2 → Group3) inherits Contributor permissions and can create a storage account in RG2.
Question 78
You have an on-premises Microsoft SQL Server 2008 instance that hosts a 50-GB database.
You need to migrate the database to an Azure SQL managed instance. The solution must minimize downtime.
What should you use?
A. Azure Migrate
B. Azure Data Studio
C. WANdisco LiveData Platform for Azure
D. SQL Server Management Studio (SSMS)
Show Answer
Correct Answer: B
Explanation: To minimize downtime when migrating a SQL Server 2008 database to Azure SQL Managed Instance, the recommended Microsoft-supported approach is to use the Azure SQL migration extension in Azure Data Studio. This uses Azure Database Migration Service (DMS) to perform an online migration, keeping the source database operational during data synchronization and requiring only a short cutover downtime.
Question 79
You need to design a highly available Azure SQL database that meets the following requirements:
• Failover between replicas of the database must occur without any data loss.
• The database must remain available in the event of a zone outage.
• Costs must be minimized.
Which deployment option should you use?
A. Azure SQL Database Hyperscale
B. Azure SQL Database Premium
C. Azure SQL Database Basic
D. Azure SQL Database Serverless
Show Answer
Correct Answer: B
Explanation: The requirements call for synchronous, data‑loss‑free failover and continued availability during an Availability Zone outage while keeping costs as low as possible. Azure SQL Database Premium (Business Critical architecture) provides built‑in high availability with multiple synchronous replicas and supports zone‑redundant configurations, enabling automatic failover with zero data loss. Basic and Serverless tiers do not meet these HA guarantees, and Hyperscale is more expensive and unnecessary for this scenario.
Question 80
You need to design a highly available Azure SQL database that meets the following requirements:
• Failover between replicas of the database must occur without any data loss.
• The database must remain available in the event of a zone outage.
• Costs must be minimized.
Which deployment option should you use?
A. Azure SQL Database Standard
B. Azure SQL Managed Instance General Purpose
C. Azure SQL Database Serverless
D. Azure SQL Database Premium
Show Answer
Correct Answer: D
Explanation: The requirements are zero data loss, zone-level availability, and high availability. Azure SQL Database Premium uses the Business Critical architecture with multiple synchronous replicas in an Always On availability group, enabling automatic failover with no data loss and zone-redundant availability. Serverless and Standard tiers run on the General Purpose architecture, which relies on remote storage and does not provide synchronous replicas across zones, so they cannot guarantee no data loss during failover. Managed Instance General Purpose also lacks synchronous zone-redundant replicas. Therefore, Premium is the correct and minimal option that meets all requirements.
Question 81
You plan to deploy an Azure Database for MySQL flexible server named Server1 to the East US Azure region.
You need to implement a business continuity solution for Server1. The solution must minimize downtime in the event of a failover to a paired region.
What should you do?
A. Create a read replica.
B. Store the database files in Azure premium file shares.
C. Implement Geo-redundant backup.
D. Configure native MySQL replication.
Show Answer
Correct Answer: A
Explanation: To minimize downtime during a regional failover for Azure Database for MySQL Flexible Server, you should create a cross-region read replica in the paired region. A read replica provides a warm standby with near real-time replication that can be manually promoted to a standalone read/write server within minutes. Geo-redundant backups protect data but require provisioning a new server and restoring from backups, which results in significantly longer recovery time. Therefore, a read replica best satisfies the requirement to minimize downtime.
Question 82
HOTSPOT
-
You have an app that generates 50,000 events daily.
You plan to stream the events to an Azure event hub and use Event Hubs Capture to implement cold path processing of the events. The output of Event Hubs Capture will be consumed by a reporting system.
You need to identify which type of Azure storage must be provisioned to support Event Hubs Capture, and which inbound data format the reporting system must support.
What should you identify? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Azure Data Lake Storage Gen2
Avro
Explanation: Event Hubs Capture supports writing captured event data to Azure Blob Storage or Azure Data Lake Storage Gen2; among the given options, ADLS Gen2 is the supported and appropriate choice. Event Hubs Capture serializes captured data in Apache Avro format, so the downstream reporting system must be able to consume Avro files.
$19
Get all 273 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.