You have an Azure subscription that contains the storage accounts shown in the following table.

All storage accounts contain blobs only.
You need to implement several lifecycle management rules for all storage accounts.
What should you do first?

• A.Upgrade contosostorage1 and contosostorage2 to General Purpose V2 accounts.
• B.Move 5 TB of blob data from contosostorage3 to contosostorage4.
• C.Move 5 TB of blob data from contosostorage1 to contosostorage2.
• D.Recreate contosostorage5 as a General Purpose V2 account.

Comment: *

Name: *

Email: *

Verification: *

Your company has the groups shown in the following table.

The company has an Azure subscription that is associated with an Azure Active Directory (Azure AD) tenant named contoso.com.
An administrator named Admin1 attempts to enable Enterprise State Roaming for all the users in the Managers group.
Admin1 reports that the options for Enterprise State Roaming are unavailable from Azure AD.
You verify that Admin1 is assigned the Global administrator role.
You need to ensure that Admin1 can enable Enterprise State Roaming.
What should you do?

• A.Assign an Azure AD Privileged Identity Management (PIM) role to Admin1.
• B.Purchase an Azure Rights Management (Azure RMS) license for each user in the Managers group.
• C.Enforce Azure Multi-Factor Authentication (MFA) for Admin1.
• D.Purchase an Azure AD Premium P1 license for each user in the Managers group.

Comment: *

Name: *

Email: *

Verification: *

You create the Azure resources shown in the following table.

You attempt to add a role assignment to a resource group as shown in the following exhibit.


What should you do to ensure that you can assign VM2 the Reader role for the resource group?

• A.Modify the Reader role at the subscription level.
• B.Configure just in time (JIT) VM access on VM2.
• C.Configure Access control (IAM) on VM2.
• D.Assign a managed identity to VM2.

Comment: *

Name: *

Email: *

Verification: *

You have an Azure subscription named Subscription1 that contains a virtual network named VNet1. You add the users in the following table.

Which user can perform each configuration? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation:
Box 1: User1 and User3 only.
The Owner Role lets you manage everything, including access to resources.
The Network Contributor role lets you manage networks, but not access to them.
Box 2: User1
The Security Admin role: In Security Center only: Can view security policies, view security states, edit security policies, view alerts and recommendations, dismiss alerts and recommendations.
References:
https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles

Comment: *

Name: *

Email: *

Verification: *

You have an Azure Active Directory (Azure AD) tenant that contains the user groups shown in the following table.

You enable self-service password reset (SSPR) for Group1.
You configure the Notifications settings as shown in the following exhibit.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation:
Box 1: Yes
Notify all admins when other admins reset their passwords: Yes.
Box 2: No
Notify users on password resets: No.
Box 3: No
* Notify users on password resets
If this option is set to Yes, then users resetting their password receive an email notifying them that their password has been changed. The email is sent via the SSPR portal to their primary and alternate email addresses that are on file in Azure AD. No one else is notified of the reset event.
* Notify all admins when other admins reset their passwords
If this option is set to Yes, then all administrators receive an email to their primary email address on file in Azure AD. The email notifies them that another administrator has changed their password by using SSPR.
Example: There are four administrators in an environment. Administrator A resets their password by using SSPR. Administrators B, C, and D receive an email alerting them of the password reset.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks
https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr

Comment: *

Name: *

Email: *

Verification: *