You need to ensure that the virtual machine disks are encrypted. The solution must meet the security requirements.
Which three actions should you perform in Sub1 in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Correct Answer:

1 - Register the Microsoft.Computer encryption provider feature.
2 - Create a key in KV1 and configure a disk encryption set.
3 - Deploy the virtual machines and set Encryption at host to Yes.
Reference:
https://docs.microsoft.com/en-us/azure/virtual-machines/disks-enable-host-based-encryption-portal

Comment: *

Name: *

Email: *

Verification: *

You have an Azure Active Directory (Azure AD) tenant.
You need to create a conditional access policy that requires all users to use multi-factor authentication when they access the Azure portal.
Which three settings should you configure? To answer, select the appropriate settings to the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

References: https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-access-policies

Comment: *

Name: *

Email: *

Verification: *

Note: This question is part of series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
A company backs up data to on-premises servers at their main facility. The company currently has 30 TB of archived data that infrequently used. The facility has download speeds of 100 Mbps and upload speeds of 20 Mbps.
You need to securely transfer all backups to Azure Blob Storage for long-term archival. All backup data must be sent within seven days.
Solution: Backup data to local disks and use the Azure Import/Export service to send backups to Azure Blob Storage.
Does this meet the goal?

• A.Yes
• B.No

Comment: *

Name: *

Email: *

Verification: *

You plan to create an Azure Storage account in the Azure region of East US 2.
You need to create a storage account that meets the following requirements:
* Replicates synchronously
* Remains available if a single data center in the region fails
How should you configure the storage account? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation

Box 1: Zone-redundant storage (ZRS)
Zone-redundant storage (ZRS) replicates your data synchronously across three storage clusters in a single region.
LRS would not remain available if a data center in the region fails
GRS and RA GRS use asynchronous replication.
Box 2: StorageV2 (general purpose V2)
ZRS only support GPv2.
References:
https://docs.microsoft.com/en-us/azure/storage/common/storage-redundancy
https://docs.microsoft.com/en-us/azure/storage/common/storage-redundancy-zrs

Comment: *

Name: *

Email: *

Verification: *

You have an Azure subscription named Subscription1. Subscription1 contains the resource groups in the following table.
RG1 has a web app named WebApp1. WebApp1 is located in West Europe.

You move WebApp1 to RG2.
What is the effect of the move?

• A.The App Service plan for WebApp1 moves to North Europe. Policy1 applies to WebApp1.
• B.The App Service plan for WebApp1 remains in West Europe. Policy1 applies to WebApp1.
• C.The App Service plan for WebApp1 moves to North Europe. Policy2 applies to WebApp1.
• D.The App Service plan for WebApp1 remains in West Europe. Policy2 applies to WebApp1.

Correct Answer: D

Section: [none]
Explanation:
You can move an app to another App Service plan, as long as the source plan and the target plan are in the same resource group and geographical region.
The region in which your app runs is the region of the App Service plan it's in. However, you cannot change an App Service plan's region.
References:
https://docs.microsoft.com/en-us/azure/app-service/app-service-plan-manage Testlet 2 Case study Overview ADatum Corporation is a financial company that has two main offices in New York and Los Angeles. ADatum has a subsidiary named Fabrikam, Inc. that shares the Los Angeles office.
ADatum is conducting an initial deployment of Azure services to host new line-of-business applications and is preparing to migrate its existing on-premises workloads to Azure.
ADatum uses Microsoft Exchange Online for email.
Existing Environment
On-Premises Environment
The on-premises workloads run on virtual machines hosted in a VMware vSphere 6 infrastructure. All the virtual machines are members of an Active Directory forest named adatum.com and run Windows Server 2016.
The New York office uses an IP address space of 10.0.0.0/16. The Los Angeles office uses an IP address space of 10.10.0.0/16.
The offices connect by using a VPN provided by an ISP. Each office has one Azure ExpressRoute circuit that provides access to Azure services and Microsoft Online Services. Routing is implemented by using Microsoft peering.
The New York office has a virtual machine named VM1 that has the vSphere console installed.
Azure Environment
You provision the Azure infrastructure by using the Azure portal. The infrastructure contains the resources shown in the following table.

AG1 has two backend pools named Pool11 and Pool12. AG2 has two backend pools named Pool21 and Pool22.
Requirements
Planned Changes
ADatum plans to migrate the virtual machines from the New York office to the East US Azure region by using Azure Site Recovery.
Infrastructure Requirements
ADatum identifies the following infrastructure requirements:
* A new web app named App1 that will access third-parties for credit card processing must be deployed
* A newly developed API must be implemented as an Azure function named App2. App2 will use a blob storage trigger. App2 must process new blobs immediately.
* The Azure infrastructure and the on-premises infrastructure must be prepared for the migration of the VMware virtual machines to Azure.
* The sizes of the Azure virtual machines that will be used to migrate the on-premises workloads must be identified.
* All migrated and newly deployed Azure virtual machines must be joined to the adatum.com domain.
* AG1 must load balance incoming traffic in the following manner:
1. http://corporate.adatum.com/video/* will be load balanced across Pool11
2. http://corporate.adatum.com/images/* will be load balanced across Pool12
* AG2 must load balance incoming traffic in the following manner:
1. http://www.adatum.com will be load balanced across Pool21
2. http://www.fabrikam.com will be load balanced across Pool22
* ER1 must route traffic between the New York office and the platform as a service (PaaS) services in the East US Azure region, as long as ER1 is available.
* ER2 must route traffic between the Los Angeles office and the PaaS services in the West US region, as long as ER2 is available.
* ER1 and ER2 must be configured to fail over automatically.
Application Requirements
App2 must be able to connect directly to the private IP addresses of the Azure virtual machines. App2 will be deployed directly to an Azure virtual network.
Inbound and outbound communications to App1 must be controlled by using NSGs.
Pricing Requirements
ADatum identifies the following pricing requirements:
* The cost of App1 and App2 must be minimized.
* The transactional charges of Azure Storage accounts must be minimized.

Comment: *

Name: *

Email: *

Verification: *