You plan to configure an Azure Cosmos DB account as shown in the following table.

You need to ensure the highest level of resiliency for CosmosDB1.
What should you use?

• A.availability zones
• B.multi-region writes
• C.geo-redundant storage (GRS)
• D.an availability set

Comment: *

Name: *

Email: *

Verification: *

You have an Azure Active Directory (Azure AD) tenant linked to an Azure subscription. The tenant contains a group named Admins.
You need to prevent users, except for the members of Admins, from using the Azure portal and Azure PowerShell to access the subscription.
What should you do?

• A.From Azure AD, configure the User settings.
• B.From Azure AD, create a conditional access policy.
• C.From the Azure subscription, assign an Azure policy.
• D.From the Azure subscription, configure Access control (IAM).

Comment: *

Name: *

Email: *

Verification: *

You have Azure Storage accounts as shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

Correct Answer:

References:
https://docs.microsoft.com/en-us/azure/storage/common/storage-account-options

Comment: *

Name: *

Email: *

Verification: *

SIMULATION
Click to expand each objective. To connect to the Azure portal, type https://portal.azure.com in the browser address bar.






When you are finished performing all the tasks, click the 'Next' button.
Note that you cannot return to the lab once you click the 'Next' button. Scoring occur in the background while you complete the rest of the exam.
Overview
The following section of the exam is a lab. In this section, you will perform a set of tasks in a live environment.
While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.
Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn't matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.
Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.
Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.
To start the lab
You may start the lab by clicking the Next button.
Another administrator reports that she is unable to configure a web app named corplod10217507n3 to prevent all connections from an IP address of 11.0.0.11.
You need to modify corplod10217507n3 to successfully prevent the connections from the IP address. The solution must minimize Azure-related costs.
What should you do from the Azure portal?

Correct Answer:

See explanation below.
Section: [none]
Explanation:
Step 1:
Find and select application corplod10217507n3:
1. In the Azure portal, on the left navigation panel, click Azure Active Directory.
2. In the Azure Active Directory blade, click Enterprise applications.
Step 2:
To add an IP restriction rule to your app, use the menu to open Network>IP Restrictions and click on Configure IP Restrictions

Step 3:
Click Add rule
You can click on [+] Add to add a new IP restriction rule. Once you add a rule, it will become effective immediately.

Step 4:
Add name, IP address of 11.0.0.11, select Deny, and click Add Rule

References:
https://docs.microsoft.com/en-us/azure/app-service/app-service-ip-restrictions

Comment: *

Name: *

Email: *

Verification: *

You have two Azure SQL Database managed instances in different Azure regions.
You plan to configure the managed instances in an instance failover group.
What should you configure before you can add the managed instances to the instance failover group?

• A.an internal Azure Load Balancer instance that has managed instance endpoints in a backend pool
• B.Azure Private Link that has endpoints on two virtual networks
• C.an Azure Application Gateway that has managed instance endpoints in a backend pool
• D.a Site-to-Site VPN between the virtual networks that contain the instances

Comment: *

Name: *

Email: *

Verification: *