01. You have an Azure subscription that contains a resource group named RG1. RG1 contains an Azure virtual machine named VM1. You need to use VM1 as a template to create a new Azure virtual machine. Which three methods can you use to complete the task?
Each correct answer presents a complete solution.
a) From Azure Cloud Shell, run the Save-AzDeploymentTemplate and New-AzResourceGroupDeployment cmdlets.
b) From Azure Cloud Shell, run the Get-AzVM and New-AzVM cmdlets.
c) From Azure Cloud Shell, run the Save-AzDeploymentScriptLog and New-AzResourceGroupDeployment cmdlets.
d) From RG1, select Export template, select Download, and then, from Azure Cloud Shell, run the New-AzResourceGroupDeployment cmdlet.
e) From VM1, select Export template, and then select Deploy.
02. You have an Azure subscription that contains a tenant named contoso.com. All users in contoso.com are currently able to invite external users to B2B collaboration. You need to ensure that only members of the Guest Inviter, User Administrator, and Global Administrator roles can invite guest users.
What should you configure?
a) Cross-tenant access settings
b) External collaboration settings
c) Access reviews
d) Conditional Access
03. You have an Azure virtual network that contains four subnets. Each subnet contains 10 virtual machines. You plan to configure a network security group (NSG) that will allow inbound traffic over TCP port 8080 to two virtual machines on each subnet.
The NSG will be associated to each subnet. You need to recommend a solution to configure the inbound access by using the fewest number of NSG rules possible.
What should you use as the destination in the NSG?
a) an application security group
b) Virtual network gateway
c) the subnets of the virtual machines
d) a service tag
04. You have a Microsoft Entra tenant named contoso.com. Microsoft Entra Connect is configured to sync users to the tenant. You need to assign licenses to the users based on Microsoft Entra ID attributes. The solution must minimize administrative effort. Which two actions should you perform?
Each correct answer presents part of the solution.
a) Create an automatic assignment policy.
b) Assign the licenses to the security groups.
c) Assign the licenses to the dynamic groups.
d) Create security groups.
e) Create dynamic groups.
05. You have an Azure virtual network named VNet1. You create an Azure Private DNS zone named contoso.com. You need to ensure that the virtual machines on VNet1 register in the contoso.com private DNS zone. What should you do?
a) Configure VNet1 to use a custom DNS server.
b) Add Azure DNS Private Resolver to VNet1.
c) Configure each virtual machine to use a custom DNS server.
d) Add a virtual network link to contoso.com.
06. You migrate a web app from on-premises to an Azure virtual machine. The web app was configured by using load balancing in Azure. Users experience issues when accessing the web app. You suspect an issue with the web server and must check whether the server is listening on port 80.
Which command should you run?
a) Test-NetConnection localhost
b) netstat -an
c) `Get-AzVirtualNetworkUsageList `
d) `nbtstat -c`
07. You have an Azure subscription that contains a resource group named RG1. RG1 contains an application named App1 and a container app named containerapp1. App1 is experiencing performance issues when attempting to add messages to the containerapp1 queue.
You need to create a job to perform an application resource cleanup when a new message is added to a queue. Which command should you run?
a) az containerapp job start \ --name "my-job" --resource-group " RG1" -trigger-type "Event" \ -replica-timeout 60 --replica-retry-limit 1 ...
b) az containerapp job start \ --name "my-job" --resource-group " RG1" -trigger-type "Schedule" \ -replica-timeout 60 --replica-retry-limit 1 ...
c) az containerapp job create \ --name "my-job" --resource-group "RG1" -trigger-type "Event" \ -replica-timeout 60 --replica-retry-limit 1 ...
d) az containerapp job create \ --name "my-job" --resource-group " RG1" -trigger-type "Manual" \ -replica-timeout 60 --replica-retry-limit 1 ...
08. You have an Azure subscription that contains several storage accounts. You need to provide a user with the ability to perform the following tasks:
- Manage containers within the storage accounts.
- View storage account access keys.
The solution must use the principle of least privilege. Which role should you assign to the user?
a) Owner
b) Storage Blob Data Contributor
c) Reader
d) Storage Account Contributor
09. You have an Azure virtual machine named VM1 and an Azure key vault named Vault1. On VM1, you plan to configure Azure Disk Encryption to use a key encryption key (KEK) You need to prepare Vault1 for Azure Disk Encryption. Which two actions should you perform on Vault1?
Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
a) Select Azure Virtual machines for deployment
b) Select Azure Disk Encryption for volume encryption
c) Create a new key.
d) Configure a key rotation policy.
e) Create a new secret.
10. You have an Azure Storage account named corpimages and an on-premises shared folder named \\server1\images. You need to migrate all the contents from \\server1\images to corpimages. Which two commands can you use?
Each correct answer presents a complete solution? Select all answers that apply.
a) Get-ChildItem -Path \\server1\images -Recurse | Set-AzStorageBlobContent -Container " corpimages"
d) Set-AzStorageBlobContent -Container "ContosoUpload" -File "\\server1\images" -Blob " corporateimages "