You need to provide remote access to a legacy on-premises application that uses Kerberos authentication. You want to use Azure AD Application Proxy. What component is required on-premises?

You have an Azure File Sync environment. You want to move a ‘Cloud Endpoint’ to a different ‘Sync Group’. What should you do?

You want to use ‘Azure Policy’ to manage the security settings of several hybrid servers. You need to ensure that the ‘Guest Configuration’ extension is working. Which two requirements must be met on the local server?

You have an Azure File Sync deployment. You need to ensure that the server ‘Server1’ uses a specific network interface for sync traffic to avoid congesting the management network. Which PowerShell cmdlet should you use?

You are configuring ‘Azure AD Connect’ for a ‘Staged Rollout’. Which two features can be tested using Staged Rollout?

You have an Azure File Share that is synced to an on-premises server using Azure File Sync. You accidentally deleted a file on the on-premises server. Where should you go to restore the file if Cloud Tiering is enabled?

You need to verify the replication health of your on-premises Active Directory. Which command-line tool provides a summary of replication status for all DCs?

Your company has an Azure environment with several virtual machines. You need to configure Azure Backup for these VMs. You want to ensure that if an administrator accidentally deletes a backup item the data is retained for 14 days. Which feature should you ensure is enabled?

You have an Azure VM. You want to use ‘Azure Policy’ to ensure that all VMs in your resource group have a specific ‘Tag’ (e.g. Environment=Prod). Which policy effect should you use?

You need to provide high availability for a Windows Server web application. You want to ensure that if one server fails, traffic is automatically routed to another. Which feature should you use?

You have an on-premises Windows Server 2022 cluster. You need to implement a storage solution that replicates volumes between servers for disaster recovery using Storage Replica. The solution must support synchronous replication. What is a requirement for this configuration?

You have an on-premises Active Directory. You want to implement ‘Azure AD Password Protection’. Which component must be installed on EVERY domain controller in the forest?

You need to provide a developer with access to an Azure VM for 4 hours to perform a specific update. You want to minimize the attack surface by not leaving RDP ports open permanently. What should you use?

You have an on-premises server named Server1. You want to use Azure File Sync. The server is currently running Windows Server 2012. What is the first thing you must do to support the Azure File Sync agent?

You have an on-premises Active Directory domain. You want to prevent users from using weak or common passwords like ‘Password123’ for both on-premises and cloud accounts. What should you implement?

You are troubleshooting Azure AD Connect ‘Cloud Sync’. You want to see why a specific user account was ‘Skipped’ during the sync process. Where should you look?

You have an on-premises Windows Server 2022 that you want to manage using the Azure portal. You have already installed the Azure Arc agent. You want to view and manage the server’s certificates. Which tool should you use within the Azure portal?

You need to implement a hybrid identity solution that allows users to use their on-premises credentials for Azure resources. You want to minimize the on-premises infrastructure required. Which method is most suitable?

You have an Azure File Share. You want to map this share as a drive letter on an on-premises Windows Server 2022. Which port must be open outbound on your corporate firewall?

You have an on-premises Active Directory forest. You need to provide users with Single Sign-On (SSO) to cloud applications while keeping the authentication process on your on-premises domain controllers for compliance. Which Azure AD Connect option should you choose?

You have an Azure VM running Windows Server 2022. You want to move it to a different Azure region to improve latency for users. Which tool simplifies this process?

Your company uses Azure File Sync. You notice that some files are not syncing. You need to check the sync status and errors on the on-premises server. Which event log should you examine?

You need to update 50 on-premises Windows Servers and 50 Azure VMs. You want a single interface to schedule and track the installation of these updates. Which Azure service should you use?

You need to implement a solution that allows users to access internal web applications from outside the corporate network without using a VPN. The solution must integrate with Azure AD for pre-authentication. What should you use?

You have an on-premises Active Directory. You want to sync a specific Organizational Unit (OU) to Azure AD, but exclude all others. Where do you configure this?

You have an Azure File Sync deployment. You notice that the local server disk is filling up despite Cloud Tiering being enabled. What should you check first?

You need to manage several Windows Server 2022 instances located in a remote branch office that has no VPN connection to your main office. You want to use a web-based management tool via the Azure portal. What should you implement?

You have an Azure VM. You want to implement ‘Automatic VM Guest Patching’. Which service orchestrates the actual installation and rebooting of the VM?

You have an Azure VM. You want to ensure that it can only be accessed via RDP during a specific window of time requested by an admin. Which security feature should you use?

You have an on-premises Windows Server 2022. You want to use ‘Azure Key Vault’ to store the BitLocker recovery keys. Which hybrid service enables this integration?

You are managing a hybrid environment. You need to provide a developer with access to an Azure Arc-enabled server’s command line directly from the Azure portal. Which feature provides this without requiring a VPN?

You need to connect an on-premises Windows Server 2022 to an Azure VNet. You want to use ‘Azure Extended Networking’ to migrate a VM while keeping its original on-premises IP address. Which two components are required?

You need to implement ‘Azure AD Password Protection’ in a forest with three child domains. Where must you install the ‘Proxy’ service?

You need to implement a hybrid backup solution for a SQL Server instance running on a physical on-premises server. Which two Azure-integrated components can back up the database directly to the cloud?

You need to implement ‘Azure AD Password Protection’ for your on-premises Active Directory. You want to test the impact of the banned password list before enforcing it. Which two actions should you take?

You are using ‘Azure Site Recovery’ (ASR). You need to enable ‘Encryption-at-rest’ for the data replicated to Azure. Which two options are available?

You need to migrate a Windows Server 2012 R2 workload to Azure. You decide to use the ‘Azure Migrate: Server Migration’ tool. You want to minimize downtime during the final cutover. Which two actions help achieve this?

You are using Azure Site Recovery (ASR). You need to replicate an on-premises VM that has a 40 TB data disk. What is the maximum disk size supported by ASR for a single managed disk in Azure?

You are troubleshooting a ‘Pass-through Authentication’ (PTA) deployment. The PTA agents are showing a status of ‘Inactive’. What is the most common cause?

You are using ‘Azure Migrate’ to migrate a physical server. During the ‘Replication’ phase, you notice the performance of the source server is significantly degraded. Which component of the Migrate appliance should you throttle?

You need to audit who accessed sensitive files on an on-premises server that is synced via Azure File Sync. You want to use Azure-native tools for this. Which two steps are required?

You have an Azure File Sync server. You want to exclude all ‘.tmp’ files from being synchronized to the cloud. Which file should you modify on the local server?

You are managing an Azure Stack HCI cluster. You need to enable ‘ReFS Integrity Streams’ on a specific volume. Which tool should you use to ensure this is done correctly for an HCI environment?

You have an Azure Arc-enabled server. You need to view the ‘Inventory’ of all installed software on the machine. Which feature within the Azure portal provides this without needing to log in to the machine?

You are troubleshooting a hybrid VPN connection. You see ‘Phase 1’ is successful, but ‘Phase 2’ (IPsec) is failing. Which setting is likely mismatched between the on-premises device and the Azure VPN Gateway?

You need to manage a fleet of hybrid servers. You want to use ‘Azure Policy’ to ensure that all servers have a specific security baseline. Which two steps are required for on-premises servers?

You need to implement a ‘Just-In-Time’ (JIT) administration model for your hybrid Windows Servers. You want to ensure that users can only perform specific administrative tasks on specific servers for a limited time. Which two features should you use?

You have an Azure Stack HCI cluster. You want to use ‘Azure Monitor’ to see a visual map of how your VMs are connected to other services. Which feature should you enable?

You need to implement Azure File Sync for a branch office. The branch office has limited internet bandwidth. Which two features or tools can help you manage the bandwidth used by the synchronization process?

You have an Azure Arc-enabled server. You want to use the ‘Azure Policy’ to ensure that a specific Windows Feature (e.g., Telnet-Client) is UNINSTALLED. Which ‘Guest Configuration’ policy effect should you use?

You manage a Windows Server 2022 machine named Server1. You need to use the Azure portal to manage the local firewall and view real-time performance metrics without establishing a VPN. Which two steps are required?

You are managing a hybrid identity. You want to enable ‘Password Hash Sync’ (PHS) as a backup for ‘Pass-through Authentication’ (PTA). What is the primary benefit of this configuration?

You are troubleshooting Azure AD Connect ‘Health’. You want to monitor the ‘latency’ of the password hash synchronization. Which metric in the Health portal provides this?

You are implementing Azure AD Application Proxy for an internal IIS-based website. The website uses ‘Header-based’ authentication. Which two components are needed to support this?

You manage several Azure Arc-enabled servers. You need to automate the deployment of a specific software package across all these servers. Which two Azure features can you use?

You have an on-premises SQL Server. You want to use ‘Azure SQL Managed Instance’ but need to keep the data on-premises for compliance. Which feature allows you to extend the cloud SQL engine to your local hardware?

You are managing an Azure Stack HCI cluster. You want to use ‘GPU Partitioning’ (GPU-P) to share a physical GPU across multiple virtual machines. Which OS is required for the guest VMs to support GPU-P?

You are using ‘Azure Site Recovery’ (ASR). You need to change the ‘Recovery Point Retention’ from 24 hours to 72 hours. Where do you modify this setting?

You are managing a hybrid identity. You want to use ‘Azure AD Identity Protection’ to detect risky sign-ins for your on-premises users. Which authentication method provides the best telemetry for this?

You have an Azure File Sync server. You want to see which files were *successfully* tiered to the cloud in the last hour. Which Event Log should you check?