You have SQL Server on an Azure virtual machine named SQL1.
You need to automate the backup of the databases on SQL1 by using Automated Backup v2 for the virtual machines. The backups must meet the following requirements:
* Meet a recovery point objective (RPO) of 15 minutes.
* Retain the backups for 30 days.
* Encrypt the backups at rest.
What should you provision as part of the backup solution?

• A.Elastic Database jobs
• B.Azure Key Vault
• C.an Azure Storage account
• D.a Recovery Services vault

Comment: *

Name: *

Email: *

Verification: *

From Azure Cosmos DB, you create the containers shown in the following table.

You add the following item to Container1.

You plan to add items to Azure Cosmos DB as shown in the following table.

You need to identify which items can be added successfully to Container1 and Container2.
What should you identify for each container? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation

Comment: *

Name: *

Email: *

Verification: *

You manage an Active Directory domain named contoso.local.
You install Azure AD Connect and connect to an Azure Active Directory (Azure AD) tenant named contoso.com without syncing any accounts.
You need to ensure that only users who have a UPN suffix of contoso.com in the contoso.local domain sync to Azure AD.
What should you do?

• A.Use the Synchronization Service Manager to modify the Metaverse Designer tab.
• B.Use Azure AD Connect to customize the synchronization options.
• C.Use the Synchronization Rules Editor to create a synchronization rule.
• D.Use Synchronization Service Manager to modify the Active Directory Domain Services (AD DS) Connector.

Correct Answer: C

Section: [none]
Explanation:
Filtering what objects are synced to Azure AD is a common request and there are many instances where filtering by OU just doesn't cut it. One option is to filter users by their UPN suffix so that only users with the public FQDN as their UPN suffix are synced to Azure AD (e.g., [email protected] would be synced while [email protected] would not).
Filtering can be configured using either the GUI or PowerShell.
Through GUI:
Using The Synchronization Rules Editor
1. Open the Synchronization Rules Editor on the server where Azure AD Connect is installed.

2. Click the Add new rule button on the View and manage your synchronization rules window.
3. Fill out the appropriate fields on the Description tab and click Next >.
4. On the Scoping filter tab, click Add group, then Add clause, add a userPrincipalName attribute filter, and click Next >.
Attribute: userPrincipalName
Operator: ENDSWITH
Value: Your internal UPN suffix prefixed with @ (e.g., @internal.acme.com). Users with this UPN suffix will NOT be synced with Office 365.

Reference:
https://www.sidekicktech.com/blog/field-notes/2019/upn-suffix-filtering-ad-connect/

Comment: *

Name: *

Email: *

Verification: *

DRAG DROP
You need to configure the Azure ExpressRoute circuits.
How should you configure Azure ExpressRoute routing? To answer, drag the appropriate configurations to the correct locations. Each configuration may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Select and Place:

Correct Answer:

Section: [none]
Explanation:
Azure compute services, namely virtual machines (IaaS) and cloud services (PaaS), that are deployed within a virtual network can be connected through the private peering domain. The private peering domain is considered to be a trusted extension of your core network into Microsoft Azure.
Services such as Azure Storage, SQL databases, and Websites are offered on public IP addresses. You can privately connect to services hosted on public IP addresses, including VIPs of your cloud services, through the public peering routing domain. You can connect the public peering domain to your DMZ and connect to all Azure services on their public IP addresses from your WAN without having to connect through the internet.
References:
https://docs.microsoft.com/en-us/azure/expressroute/expressroute-circuit-peerings

Comment: *

Name: *

Email: *

Verification: *

You have two Azure SQL Database managed instances in different Azure regions.
You plan to configure the managed instances in an instance failover group.
What should you configure before you can add the managed instances to the instance failover group?

• A.Azure Private Link that has endpoints on two virtual networks
• B.an internal Azure Load Balancer instance that has managed instance endpoints in a backend pool
• C.an Azure Application Gateway that has managed instance endpoints in a backend pool
• D.a Site-to-Site VPN between the virtual networks that contain the instances

Comment: *

Name: *

Email: *

Verification: *