What should you use to assign access to each user?
HOTSPOT You have an Azure key vault. You need to delegate administrative access to the key vault to meet the following requirements: • Provide a user named User1 with the ability to set advanced access policies for the key vault. • Provide a user named User2 with the ability to...
Which effect requires a managed identity for the assignment?
From the Azure portal, you are configuring an Azure policy. You plan to assign policies that use the DeployIfNotExist, AuditIfNotExist, Append, and Deny effects. Which effect requires a managed identity for the assignment?A . AuditIfNotExistB . AppendC . DeployIfNotExistD . DenyView AnswerAnswer: C Explanation: When Azure Policy runs the template...
Does this meet the goal?
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you...
What should you do first?
You have an Azure subscription that contains virtual machines. You enable just in time (JIT) VM access to all the virtual machines. You need to connect to a virtual machine by using Remote Desktop. What should you do first?A . From Azure Directory (Azure AD) Privileged Identity Management (PIM), activate...
You have an Azure Active Directory (Azure AD) tenant named contoso.com that contains the users shown in the following table
HOTSPOT You create and enforce an Azure AD Identity Protection user risk policy that has the following settings: - Assignment: Include Group1, Exclude Group2 - Conditions: Sign-in risk of Medium and above - Access: Allow access, Require password change You have an Azure Active Directory (Azure AD) tenant named contoso.com...
The developers at your company plan to create a web app named App10598168 and to publish the app to https://www.contoso.com
SIMULATION The developers at your company plan to create a web app named App10598168 and to publish the app to https://www.contoso.com. You need to perform the following tasks: - Ensure that App10598168 is registered to Azure Active Directory (Azure AD). - Generate a password for App10598168. To complete this task,...
You need to create a new Azure Active Directory (Azure AD) directory named 11641655.onmicrosoft.com and a user named User1 in the new directory. The solution must ensure that User1 is enabled for Azure Multi-Factor Authentication (MFA)
SIMULATION You need to create a new Azure Active Directory (Azure AD) directory named 11641655.onmicrosoft.com and a user named User1 in the new directory. The solution must ensure that User1 is enabled for Azure Multi-Factor Authentication (MFA). To complete this task, sign in to the Azure portal.View AnswerAnswer: Step 1:...
What should you do?
You are testing an Azure Kubernetes Service (AKS) cluster. The cluster is configured as shown in the exhibit. (Click the Exhibit tab.) You plan to deploy the cluster to production. You disable HTTP application routing. You need to implement application routing that will provide reverse proxy and TLS termination for...
What is the membership of Group1 and Group2?
Testlet 2 Case Study This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that...
The developers at your company plan to create a web app named App10598168 and to publish the app to https://www.contoso.com
SIMULATION The developers at your company plan to create a web app named App10598168 and to publish the app to https://www.contoso.com. You need to perform the following tasks: - Ensure that App10598168 is registered to Azure Active Directory (Azure AD). - Generate a password for App10598168. To complete this task,...