HOTSPOT - You have an Azure AD tenant. You need to modify the Default user role permissions settings for the tenant. The solution must meet the following requirements: • Standard users must be prevented from creating new service principals. • Standard users must only be able to use PowerShell or Microsoft Graph to manage their own Azure resources. Which two settings should you modify? To answer, select the appropriate settings in the answer area. NOTE: Each correct answer is worth one point.
Question 132
HOTSPOT - You have an Azure subscription named Sub1 that contains the blob containers shown in the following table. Sub1 contains two users named User1 and User2. Both users are assigned the Reader role at the Sub1 scope. You have a condition named Condition1 as shown in the following exhibit. You have a condition named Condition2 as shown in the following exhibit. You assign roles to User1 and User2 as shown in the following table. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.
Question 133
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure Active Directory (Azure AD) tenant named contoso.com. You have a CSV file that contains the names and email addresses of 500 external users. You need to create a guest user account in contoso.com for each of the 500 external users. Solution: You create a PowerShell script that runs the New-MgUser cmdlet for each user. Does this meet the goal?
A. Yes
B. No
Question 134
HOTSPOT - You purchase a new Azure subscription. You create an Azure Resource Manager (ARM) template named deploy.json as shown in the following exhibit. You connect to the subscription and run the following command. New-AzDeployment –Location westus –TemplateFile “deploy.json” For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.
Question 135
Your on-premises network contains a VPN gateway. You have an Azure subscription that contains the resources shown in the following table. You need to ensure that all the traffic from VM1 to storage1 travels across the Microsoft backbone network. What should you configure?
A. Azure AD Application Proxy
B. private endpoints
C. a network security group (NSG)
D. Azure Peering Service
Question 136
Your on-premises network contains a VPN gateway. You have an Azure subscription that contains the resources shown in the following table. You need to ensure that all the traffic from VM1 to storage1 travels across the Microsoft backbone network. What should you configure?
A. Azure AD Application Proxy
B. service endpoints
C. a network security group (NSG)
D. Azure Firewall
Question 137
You have an Azure subscription named Sub1 that contains the resources shown in the following table. You create a user named Admin1. To what can you add Admin1 as a co-administrator?
A. RG1
B. MG1
C. Sub1
D. VM1
Question 138
You have an Azure subscription named Subscription1 that contains the storage accounts shown in the following table: You plan to use the Azure Import/Export service to export data from Subscription1. You need to identify which storage account can be used to export the data. What should you identify?
A. storage1
B. storage2
C. storage3
D. storage4
Azure Import/Export service supports the following of storage accounts: - Standard General Purpose v2 storage accounts (recommended for most scenarios) - Blob Storage accounts - General Purpose v1 storage accounts (both Classic or Azure Resource Manager deployments), Azure Import/Export service supports the following storage types: - Import supports Azure Blob storage and Azure File storage - Export supports Azure Blob storage Reference: https://docs.microsoft.com/en-us/azure/storage/common/storage-import-export-requirements
Question 139
HOTSPOT - You have Azure Storage accounts as shown in the following exhibit. Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point. Hot Area:
Box 1: storageaccount1 and storageaccount2 only Box 2: All the storage accounts - Note: The three different storage account options are: General-purpose v2 (GPv2) accounts, General-purpose v1 (GPv1) accounts, and Blob storage accounts. - General-purpose v2 (GPv2) accounts are storage accounts that support all of the latest features for blobs, files, queues, and tables. - Blob storage accounts support all the same block blob features as GPv2, but are limited to supporting only block blobs. - General-purpose v1 (GPv1) accounts provide access to all Azure Storage services, but may not have the latest features or the lowest per gigabyte pricing. Reference: https://docs.microsoft.com/en-us/azure/storage/common/storage-account-options
Question 140
You have Azure subscription that includes data in following locations: You plan to export data by using Azure import/export job named Export1. You need to identify the data that can be exported by using Export1. Which data should you identify?
