Genera Flashcards
All the Azure resources deployed to a single resource group must share the same Azure region.
TRUE
Which Azure service should you use to correlate events from multiple resources into a centralized repository? A. Azure Event Hubs. B. Azure Analysis Services. C. Azure Monitor. D. Azure Log Analytics.
D. Azure Log Analytics.
You have an Azure environment that contains multiple Azure virtual machines.
You plan to implement a solution that enables the client computers on your on-premises network to communicate to the Azure virtual machines.
You need to recommend which Azure resources must be created for the planned solution.
Which two Azure resources should you include in the recommendation? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
A. A virtual network gateway. B. A load balancer. C. An application gateway. D. A virtual network. E. A gateway subnet.
D. A virtual network.
E. A gateway subnet.
To what should an application connect to retrieve security tokens? A. An Azure Storage account. B. Azure Active Directory (Azure AD). C. A certificate store. D. An Azure key vault.
B. Azure Active Directory (Azure AD).
What can Azure Information Protection encrypt? A. Network traffic. B. Documents and email messages. C. An Azure Storage account. D. An Azure SQL database.
B. Documents and email messages.
What should you use to evaluate whether your company’s Azure environment meets regulatory requirements?
A. The Knowledge Center website.
B. The Advisor blade from the Azure portal.
C. Compliance Manager from the Security Trust Portal.
D. The Security Center blade from the Azure portal.
D. The Security Center blade from the Azure portal.
You have an Azure virtual network named VNET1 in a resource group named RG1.
You assign an Azure policy specifying that virtual networks are not an allowed resource type in RG1. VNET1 ** IS DELETED AUTOMATICALLY **.
A. No change is needed.
B. Is moved automatically to another resource group.
C. Continues to function normally.
D. Is now a read-only object.
C. Continues to function normally.
What is required to use Azure Cost Management? A. A Dev/Test subscription. B. Software Assurance. C. An Enterprise Agreement (EA). D. A pay-as-you-go subscription.
C. An Enterprise Agreement (EA).
D. A pay-as-you-go subscription.
You deploy an Azure resource. The resource becomes unavailable for an extended period due to a service outage. Microsoft will * AUTOMATICALLY REFUND YOUR BANK ACCOUNT*.
A. No change is needed.
B. Automatically migrate the resource to another subscription.
C. Automatically credit your account.
D. Send you a coupon code that you can redeem for Azure credits.
C. Automatically credit your account.
You have two Azure Active Directory (Azure AD) tenants named contoso.com and fabrikam.com.
You have a Microsoft account that you use to sign in to both tenants.
You need to configure the default sign-in tenant for the Azure portal.
What should you do?
A. From Azure Cloud Shell, run Set-AzureRmSubscription.
B. From Azure Cloud Shell, run Set-AzureRmContext.
C. From the Azure portal, configure the portal settings.
D. From the Azure portal, change the directory.
B. From Azure Cloud Shell, run Set-AzureRmContext.
*** AZURE POLICIES PROVIDE *** a common platform for deploying objects to a cloud infrastructure and for implementing consistency across the Azure environment. A. No change is needed. B. Resource groups provide. C. Azure Resource Manager provides. D. Management groups provide.
C. Azure Resource Manager provides.
You have an Azure DNS zone named adatum.com.
You need to delegate a subdomain named research.adatum.com to a different DNS server in Azure.
What should you do?
A. Create an A record named *.research in the adatum.com zone.
B. Create a PTR record named research in the adatum.com zone.
C. Modify the SOA record of adatum.com.
D. Create an NS record named research in the adatum.com zone.
D. Create an NS record named research in the adatum.com zone.
You create an Azure Storage account named contosostorage.
You plan to create a file share named data.
Users need to map a drive to the data file share from home computers that run Windows 10.
Which outbound port should you open between the home computers and the data file share? A. 80. B. 443. C. 445. D. 3389.
C. 445.
You have an Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com.
You hire a temporary vendor. The vendor uses a Microsoft account that has a sign-in of user1@outlook.com.
You need to ensure that the vendor can authenticate to the tenant by using user1@outlook.com.
What should you do?
A. From the Azure portal, add a custom domain name, create a new Azure AD user, and then specify user1@outlook.com as the username.
B. From Azure Cloud Shell, run the New-AzureADUser cmdlet and specify the “?UserPrincipalName user1@outlook.com” parameter.
C. From the Azure portal, add a new guest user, and then specify user1@outlook.com as the email address.
D. From Windows PowerShell, run the New-AzureADUser cmdlet and specify the “?UserPrincipalName user1@outlook.com” parameter.
D. From Windows PowerShell, run the New-AzureADUser cmdlet and specify the “?UserPrincipalName user1@outlook.com” parameter.
You have an Azure virtual machine named VM1 that you use for testing. VM1 is protected by Azure Backup.
You delete VM1.
You need to remove the backup data stored for VM1.
What should you do first A. Delete the Recovery Services vault. B. Delete the storage account. C. Stop the backup. D. Modify the backup policy.
D. Modify the backup policy.