Your company has the divisions shown in the following table.
Sub1 contains an Azure App Service web app named App1. App1 uses Azure AD for single-tenant user authentication. Users from contoso.com can authenticate to App1.
You need to recommend a solution to enable users in the fabrikam.com tenant to authenticate to App1.
What should you recommend?
A. Use Azure AD entitlement management to govern external users.
B. Enable Azure AD pass-through authentication and update the sign-in endpoint.
C. Configure a Conditional Access policy.
D. Configure assignments for the fabrikam.com users by using Azure AD Privileged Identity Management (PIM).
Show Answer
Correct Answer: A
Explanation: To allow users from another Microsoft Entra ID (Azure AD) tenant to access a single-tenant application, they must be onboarded as external (B2B) users and governed appropriately. Azure AD Entitlement Management provides access packages and lifecycle governance for external users. The other options do not make a single-tenant app accessible to another tenant: pass-through authentication is unrelated, Conditional Access controls access but does not enable cross-tenant sign-in, and PIM is for privileged role activation rather than application access.
Question 76
DRAG DROP
-
You have an Azure AD tenant that contains an administrative unit named MarketingAU. MarketingAU contains 100 users.
You create two users named User1 and User2.
You need to ensure that the users can perform the following actions in MarketingAU:
• User1 must be able to create user accounts.
• User2 must be able to reset user passwords.
Which role should you assign to each user? To answer, drag the appropriate roles to the correct users. Each role may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: User1: User Administrator for MarketingAU
User2: Helpdesk Administrator for MarketingAU
Explanation: Use administrative unit–scoped roles to follow least privilege. User Administrator scoped to the administrative unit can manage users (including creating user accounts relevant to that scope). Helpdesk Administrator scoped to the administrative unit can reset passwords for users in that administrative unit.
Question 77
HOTSPOT
-
You have an Azure AD tenant that contains a management group named MG1.
You have the Azure subscriptions shown in the following table.
The subscriptions contain the resource groups shown in the following table.
The subscription contains the Azure AD security groups shown in the following table.
The subscription contains the user accounts shown in the following table.
You perform the following actions:
Assign User3 the Contributor role for Sub1.
Assign Group1 the Virtual Machine Contributor role for MG1.
Assign Group3 the Contributor role for the Tenant Root Group.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Yes
No
Yes
Explanation: VM Contributor at MG1 applies to Sub1/RG1, so User1 can create VMs there. Contributor cannot grant RBAC permissions, so User2 cannot grant permissions. Contributor at the Tenant Root Group propagates to descendant scopes, and nested group membership grants the role to User3, allowing creation of a storage account in RG2.
Question 79
You need to design a highly available Azure SQL database that meets the following requirements:
• Failover between replicas of the database must occur without any data loss.
• The database must remain available in the event of a zone outage.
• Costs must be minimized.
Which deployment option should you use?
A. Azure SQL Database Hyperscale
B. Azure SQL Database Premium
C. Azure SQL Database Basic
D. Azure SQL Database Serverless
Show Answer
Correct Answer: B
Explanation: Premium (DTU model) maps to the Business Critical architecture, which provides multiple synchronous replicas with automatic failover and can be configured for zone redundancy to survive an availability zone outage without data loss. Basic and Serverless do not meet these high-availability requirements, and Hyperscale prioritizes scalability rather than this combination of synchronous zero-data-loss failover and minimized cost among the listed HA-capable options.
Question 80
You need to design a highly available Azure SQL database that meets the following requirements:
• Failover between replicas of the database must occur without any data loss.
• The database must remain available in the event of a zone outage.
• Costs must be minimized.
Which deployment option should you use?
A. Azure SQL Database Standard
B. Azure SQL Managed Instance General Purpose
C. Azure SQL Database Serverless
D. Azure SQL Database Premium
Show Answer
Correct Answer: D
Explanation: The requirements imply synchronous replication with zero data loss on failover and zone resilience. Azure SQL Database Premium uses the Business Critical architecture with multiple synchronous replicas and supports zone-redundant high availability. Standard and General Purpose do not provide the same zero-data-loss local failover architecture, and Serverless is a compute tier rather than an HA architecture and does not by itself satisfy these requirements.
Question 81
You plan to deploy an Azure Database for MySQL flexible server named Server1 to the East US Azure region.
You need to implement a business continuity solution for Server1. The solution must minimize downtime in the event of a failover to a paired region.
What should you do?
A. Create a read replica.
B. Store the database files in Azure premium file shares.
C. Implement Geo-redundant backup.
D. Configure native MySQL replication.
Show Answer
Correct Answer: A
Explanation: To minimize downtime during a regional failover for Azure Database for MySQL Flexible Server, deploy a cross-region read replica in the paired region and promote it if the primary region fails. Geo-redundant backups provide disaster recovery but require a restore operation, resulting in a longer recovery time. Native MySQL replication is not the recommended managed solution here, and Azure Files is unrelated.
Question 82
HOTSPOT
-
You have an app that generates 50,000 events daily.
You plan to stream the events to an Azure event hub and use Event Hubs Capture to implement cold path processing of the events. The output of Event Hubs Capture will be consumed by a reporting system.
You need to identify which type of Azure storage must be provisioned to support Event Hubs Capture, and which inbound data format the reporting system must support.
What should you identify? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Storage type: Azure Data Lake Storage Gen2
Data format: Avro
Explanation: Event Hubs Capture supports capturing to Azure Blob Storage or Azure Data Lake Storage Gen2 (not premium storage). From the given options, Azure Data Lake Storage Gen2 is correct. Event Hubs Capture stores captured events in Avro format by default.
Question 83
You are developing a sales application that will contain several Azure cloud services and handle different components of a transaction. Different cloud services will process customer orders, billing, payment, inventory, and shipping.
You need to recommend a solution to enable the cloud services to asynchronously communicate transaction information by using XML messages.
What should you include in the recommendation?
A. Azure Notification Hubs
B. Azure Queue Storage
C. Azure Blob Storage
D. Azure Application Gateway
Show Answer
Correct Answer: B
Explanation: Azure Queue Storage is designed for asynchronous communication between application components by storing messages for later processing. It is suitable for decoupling services such as orders, billing, payment, inventory, and shipping, and queue messages can contain XML payloads. Notification Hubs are for push notifications, Blob Storage is for object storage, and Application Gateway is a web traffic load balancer.
Question 84
You are designing an app that will use Azure Cosmos DB to collate sales from multiple countries.
You need to recommend an API for the app. The solution must meet the following requirements:
• Support SQL queries.
• Support geo-replication.
• Store and access data relationally.
Which API should you recommend?
A. Apache Cassandra
B. PostgreSQL
C. MongoDB
D. NoSQL
Show Answer
Correct Answer: B
Explanation: The requirements include relational data storage, SQL support, and geo-replication. Azure Cosmos DB for PostgreSQL is the relational offering that supports standard SQL and is designed for distributed, scalable PostgreSQL workloads. Cassandra and MongoDB are NoSQL models, and 'NoSQL' is not a relational API.
Question 85
You need to design a highly available Azure SQL database that meets the following requirements:
• Failover between replicas of the database must occur without any data loss.
• The database must remain available in the event of a zone outage.
• Costs must be minimized.
Which deployment option should you use?
A. Azure SQL Database Hyperscale
B. Azure SQL Database Premium
C. Azure SQL Database Standard
D. Azure SQL Managed Instance General Purpose
Show Answer
Correct Answer: B
Explanation: Azure SQL Database Premium uses the Business Critical architecture with multiple synchronous replicas, enabling automatic failover with no data loss (RPO 0). It supports zone-redundant deployment for availability during an availability zone outage. Among the listed options, Standard and Managed Instance General Purpose do not meet the zero-data-loss synchronous HA requirement, and Hyperscale is generally a higher-cost option than Premium for this requirement.
$19
Get all 271 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.