Monitor and backup azure resources

Question 1

Your company has a main office in London that contains 100 client computers.
Three years ago, you migrated to Azure Active Directory (Azure AD).
The company’s security policy states that all personal devices and corporate-owned devices must be
registered or joined to Azure AD.
A remote user named User1 is unable to join a personal device to Azure AD from a home network.
You verify that User1 was able to join devices to Azure AD in the past.
You need to ensure that User1 can join the device to Azure AD.
What should you do?
A. Assign the User administrator role to User1.
B. From the Device settings blade, modify the Maximum number of devices per user setting.
C. Create a point-to-site VPN from the home network of User1 to Azure.
D. From the Device settings blade, modify the Users may join devices to Azure AD setting.

Answer 1

B. From the Device settings blade, modify the Maximum number of devices per user setting.

Question 2

You have an existing Azure subscription that contains 10 virtual machines.
You need to monitor the latency between your on-premises network and the virtual machines.
What should you use?
A. Service Map
B. Connection troubleshoot
C. Network Performance Monitor
D. Effective routes

Answer 2

C. Network Performance Monitor

Question 3

You have an Azure virtual machine named VM1.
Azure collects events from VM1.
You are creating an alert rule in Azure Monitor to notify an administrator when an error is logged in the
System event log of VM1.
Which target resource should you monitor in the alert rule?
A. virtual machine extension
B. virtual machine
C. metric alert
D. Azure Log Analytics workspace

Answer 3

D. Azure Log Analytics workspace

Question 4

You have an Azure subscription that contains 100 virtual machines.
You regularly create and delete virtual machines.
You need to identify unattached disks that can be deleted.
What should you do?
A. From Azure Cost Management, view Cost Analysis
B. From Azure Advisor, modify the Advisor configuration
C. From Microsoft Azure Storage Explorer, view the Account Management properties
D. From Azure Cost Management, view Advisor Recommendations

Answer 4

D. From Azure Cost Management, view Advisor Recommendations

Question 5

You have an Azure web app named webapp1.
Users report that they often experience HTTP 500 errors when they connect to webapp1.

You need to provide the developers of webapp1 with real-time access to the connection errors. The solution
must provide all the connection error details.
What should you do first?
A. From webapp1, enable Web server logging
B. From Azure Monitor, create a workbook
C. From Azure Monitor, create a Service Health alert
D. From webapp1, turn on Application Logging

Answer 5

A. From webapp1, enable Web server logging

Question 6

You have an Azure subscription that has a Recovery Services vault named Vault1. The subscription
contains the virtual machines shown in the following table:

Name | Operating system | Auto-shutdown
VM1 - Windows server 2012 R2 - Off
VM2 - Windows server 2016 - 19:00
VM3 - Ubuntu Server 18.04 LTS - Off
VM4 - Windows 10 - 19:00

You plan to schedule backups to occur every night at 23:00.
Which virtual machines can you back up by using Azure Backup?
A. VM1 and VM3 only
B. VM1, VM2, VM3 and VM4
C. VM1 and VM2 only
D. VM1 only

Answer 6

B. VM1, VM2, VM3 and VM4

Question 7

You have the Azure virtual machines shown in the following table:

Name | Azure Region

VM1 - West Europe
VM2 - West Europe
VM3 - North Europe
VM4 - North Europe

You have a Recovery Services vault that protects VM1 and VM2.
You need to protect VM3 and VM4 by using Recovery Services.
What should you do first?
A. Create a new Recovery Services vault
B. Create a storage account
C. Configure the extensions for VM3 and VM4
D. Create a new backup policy

Answer 7

A. Create a new Recovery Services vault

Question 8

You have an Azure subscription that contains the identities shown in the following table.

Name | Type | Member of

User1 - User - None
User2 - User - Group1
Principal1 - Managed identity - None
Principal2 - Managed identity - Group1

User1, Principal1, and Group1 are assigned the Monitoring Reader role.
An action group named AG1 has the Email Azure Resource Manager Role notification type and is
configured to email the Monitoring Reader role.
You create an alert rule named Alert1 that uses AG1.
You need to identity who will receive an email notification when Alert1 is triggered.
Who should you identify?
A. User1 and Principal1 only
B. User1, User2, Principal1, and Principal2
C. User1 only
D. User1 and User2 only

Answer 8

C. User1 only

Question 9

(testlet)

You need to recommend a solution to automate the configuration for the finance department users. The
solution must meet the technical requirements.
What should you include in the recommendation?
A. Azure AD B2C
B. dynamic groups and conditional access policies
C. Azure AD Identity Protection
D. an Azure logic app and the Microsoft Identity Management (MIM) client

Answer 9

B. dynamic groups and conditional access policies