You are designing a large Azure environment that will contain many subscriptions. You plan to use Azure Policy as part of a governance solution. To which three scopes can you assign Azure Policy definitions? Each correct answer presents a complete…
You plan to deploy an application named App1 that will run on five Azure virtual machines. Additional virtual machines will be deployed later to run App1. You need to recommend a solution to meet the following requirements for the virtual…
You have an Azure subscription that contains a custom application named Application1. Application1 was developed by an external company named Fabrikam, Ltd. Developers at Fabrikam were assigned role-based access control (RBAC) permissions to the Application1 components. All users are licensed…
You have an Azure Active Directory (Azure AD) tenant. You plan to provide users with access to shared files by using Azure Storage. The users will be provided with different levels of access to various Azure file shares based on…
You have an Azure subscription that contains resources in three Azure regions. You need to implement Azure Key Vault to meet the following requirements: In the event of a regional outage, all keys must be readable. All the resources in…
You are designing an Azure resource deployment that will use Azure Resource Manager templates. The deployment will use Azure Key Vault to store secrets. You need to recommend a solution to meet the following requirements: Prevent the IT staff that…
You have an Azure Active Directory (Azure AD) tenant and Windows 10 devices. You configure a conditional access policy as shown in the exhibit. (Click the Exhibit tab.) What is the result of the policy? A. All users will always…
You have an Azure Active Directory (Azure AD) tenant. You plan to deploy Azure Cosmos DB databases that will use the SQL API. You need to recommend a solution to provide specific Azure AD user accounts with read access to…
HOTSPOT To meet the authentication requirements of Fabrikam, what should you include in the solution? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:
What should you include in the identity management strategy to support the planned changes? A. Move all the domain controllers from corp.fabrikam.com to virtual networks in Azure. B. Deploy domain controllers for the rd.fabrikam.com forest to virtual networks in Azure.…