You have an Azure Active Directory (Azure AD) tenant that contains a user named Admin1. Admin1 is assigned the Application developer role.
You purchase a cloud app named App1 and register App1 in Azure AD.
Admin1 reports that the option to enable token encryption for App1 is unavailable.
You need to ensure that Admin1 can enable token encryption for App1 in the Azure portal.
What should you do?

• A.Upload a certificate for App1.
• B.Modify the API permissions of App1.
• C.Add App1 as an enterprise application.
• D.Assign Admin1 the Cloud application administrator role.

Comment: *

Name: *

Email: *

Verification: *

You have an Azure Active Directory (Azure AD) tenant that contains two administrative units named AU1 and AU2.
Users are assigned to the administrative units as shown in the following table.

Correct Answer:

Explanation:

Comment: *

Name: *

Email: *

Verification: *

You have an Azure subscription that contains virtual machines.
You enable just in time (JIT) VM access to all the virtual machines.
You need to connect to a virtual machine by using Remote Desktop.
What should you do first?

• A.From Azure Directory (Azure AD) Privileged Identity Management (PIM), activate the Security administrator user role.
• B.From Azure Active Directory (Azure AD) Privileged Identity Management (PIM), activate the Owner role for the virtual machine.
• C.From the Azure portal, select the virtual machine, select Connect, and then select Request access.
• D.From the Azure portal, select the virtual machine and add the Network Watcher Agent virtual machine

Comment: *

Name: *

Email: *

Verification: *

You have an Azure subscription named Sub1.
You have an Azure Active Directory (Azure AD) group named Group1 that contains all the members of your IT team.
You need to ensure that the members of Group1 can stop, start, and restart the Azure virtual machines in Sub1. The solution must use the principle of least privilege.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Correct Answer:

Reference:
https://www.petri.com/cloud-security-create-custom-rbac-role-microsoft-azure

Comment: *

Name: *

Email: *

Verification: *

You have an Azure subscription that contains the storage accounts shown in the following table.

You need to configure authorization access.
Which authorization types can you use for each storage account? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Reference:
https://docs.microsoft.com/en-us/azure/storage/common/authorize-data-access

Comment: *

Name: *

Email: *

Verification: *