You have an Azure VM. You want to use ‘Managed Identities’ to allow the VM to access an Azure SQL Database without storing credentials in a config file. Which type of identity is deleted automatically if the VM is deleted?

Your on-premises Active Directory is syncing to Azure AD. You want to ensure that users who are flagged as ‘High Risk’ by Azure AD Identity Protection are automatically blocked from signing in. What should you configure?

You need to implement a hybrid identity solution. You want to use Azure AD Seamless Single Sign-On (Seamless SSO). Which authentication method(s) can be used in conjunction with Seamless SSO?

You need to migrate a legacy application from an old physical server to an Azure VM. The application is highly sensitive to changes in hardware IDs. Which migration method is most likely to preserve the environment exactly as is?

You need to implement a solution for highly available DHCP in a Windows Server 2022 environment. You want to ensure that both servers can lease IP addresses simultaneously from the same pool. Which mode should you configure?

You need to monitor the health of your Azure AD Connect synchronization. You want to receive alerts if synchronization has stopped for more than two hours. What should you use?

You have an Azure VM. You want to identify if it is underutilized to save costs. Which Azure service provides recommendations to ‘shutdown or resize’ VMs?

You have an Azure File Sync server. You want to move the local Server Endpoint to a different drive on the same server. What is the supported method?

You need to expand the storage of an existing Azure File Sync Server Endpoint. You have already expanded the local disk volume. What is the next step to ensure the sync agent uses the new space?

You have an Azure VM. You want to use ‘Azure Backup’. You want to ensure that even if the entire Azure Region is destroyed your backups are safe. Which storage setting for the vault is needed?

You have an on-premises Hyper-V host. You want to use Azure Site Recovery (ASR) to replicate VMs to Azure. You do not have a System Center Virtual Machine Manager (SCVMM) server. What should you install on the Hyper-V host?

You have an on-premises Windows Server 2022. You want to use ‘Azure Arc’ to manage it. What is the name of the agent service that runs on the server?

You have an Azure VM. You want to ensure it is always patched with the latest ‘Critical’ and ‘Security’ updates automatically. Which feature should you enable in the VM settings?

You have an Azure VM running Windows Server 2022. You want to use ‘Azure Disk Encryption’. What is the prerequisite for storing the encryption keys?

You need to view the effective permissions for a user on a specific folder on a Windows Server 2022 file server. Which tab in the Advanced Security Settings should you use?

You have an on-premises Windows Server 2022. You want to use it as a ‘Print Server’ for your Azure-joined laptops. Which hybrid solution enables this?

You have an Azure File Sync environment. You want to manually trigger a sync of files that were recently uploaded directly to the Azure File Share (bypassing the local server). Which PowerShell cmdlet should you use?

You have an Azure File Share. You want to use ‘Identity-based authentication’. Which identity providers are supported?

You have an Azure File Share. You want to ensure that if a file is modified incorrectly you can go back to a version from 2 hours ago. Which feature provides this?

You have an Azure VM. You want to use ‘Azure Disk Encryption’ (ADE) to encrypt the OS disk. Which underlying Windows technology does ADE use?

You have an on-premises Windows Server 2022. You want to use the ‘Azure Network Adapter’ in Windows Admin Center. What is the maximum number of Azure Network Adapters you can create on a single server?

You want to implement ‘Least Privilege’ for your administrators. You need a solution that allows them to request ‘Global Admin’ rights for only 2 hours when needed. Which Azure AD feature provides this?

You have an Azure VM running an application that requires high availability. You want to protect the VM against a single data center failure within an Azure region. What should you use?

You manage a hybrid environment. You need to deploy a tool that provides a centralized view of security alerts and automated responses across both on-premises Windows Servers and Azure VMs. Which service should you use?

You have an on-premises Windows Server 2022. You want to use ‘Azure Extended Networking’ to migrate a VM to Azure while keeping its original on-premises IP address. What is required?

You have an Azure VM running Windows Server 2022. You want to use Azure Automanage to automatically apply best practices. Which of the following is NOT a service typically managed by Azure Automanage for Windows Server?

You have an on-premises Hyper-V cluster. You want to use Azure as a cold disaster recovery site. You need to replicate the VMs to Azure with a high frequency. Which service should you use?

You have an Azure VM. You want to use the ‘Azure Serial Console’ to troubleshoot a boot issue. Which feature must be enabled on the VM for the console to work?

You have an on-premises Active Directory. You want to use Azure AD Multi-Factor Authentication (MFA) for on-premises VPN users who authenticate via RADIUS. What should you install on your NPS server?

You need to automate the deployment of 50 Azure VMs with Windows Server 2022. You want to ensure they all have the same initial configuration. Which should you use?

You have an on-premises server. You want to use the ‘Azure Network Adapter’ feature in Windows Admin Center. What does this feature do?

You need to provide high availability for a print server in a hybrid environment. You decide to use a Failover Cluster. Which type of storage is recommended for the print spooler folder in a Windows Server 2022 cluster?

You have an on-premises server with the ‘Remote Access’ role. You want to implement ‘DirectAccess’. What is a primary requirement for the client computers?

You need to manage an on-premises server that is behind a strict firewall. You have installed the Azure Arc agent. Which protocol is used for the outbound communication from the server to Azure?

You need to delegate the ability to join computers to the domain to a specific user, without making them a Domain Admin. Which tool should you use?

You have an Azure VM. You want to prevent any changes to the VM configuration (like changing the size or deleting it) even by administrators. What should you use?

You need to view the history of all administrative actions performed on an Azure Arc-enabled server via the Azure portal. Which Azure service provides this log?

You have an on-premises server named Server1. You want to enable ‘Azure Update Manager’. What is the primary prerequisite for an on-premises server to be visible in Azure Update Manager?

You need to restrict which PowerShell commands can be executed by a specific group of help desk users on a hybrid server. What should you implement?

You have an Azure VM running Windows Server 2022 Datacenter: Azure Edition. You want to apply security patches without restarting the VM. Which feature allows this?

You have an on-premises server named Server1. You need to back up files from Server1 to Azure using the Microsoft Azure Recovery Services (MARS) agent. What is the maximum number of times per day you can schedule a backup with the MARS agent?

You need to deploy a new Windows Server VM in Azure. You want to ensure that even if an entire Azure region goes offline your VM can be recovered in a different region. What should you enable?

You have an on-premises Windows Server 2022 named Server1 that is onboarded to Azure Arc. You want to use the Azure Key Vault extension to manage certificates on Server1. What is a prerequisite for the server to access the Key Vault?

You want to use ‘Just-In-Time’ (JIT) VM access for an Azure VM. Which Microsoft Defender for Cloud plan is required to enable this feature?

You want to provide secure, browser-based RDP access to your Azure VMs without exposing public IP addresses. What service should you deploy?

You have an application that requires a static IP address. You are moving it to an Azure VM. Where do you configure the static IP address for the VM?

You have an Azure VM that you want to manage using Windows Admin Center (WAC) in the Azure portal. The VM is running Windows Server 2019. Which port must be open in the VM’s Network Security Group (NSG) for WAC to function?

You need to implement a solution that allows you to manage Windows Server updates using the Azure portal for both Azure VMs and on-premises servers. You decide to use Azure Update Manager. What is a key advantage of this over the older ‘Update Management’?

You need to provide remote access to an internal web application that uses Windows Integrated Authentication. You want to use Azure AD for the sign-in experience. What should you use?

You need to migrate a Windows Server 2012 R2 DHCP server to Windows Server 2022. You want to use a tool that automates the export of settings and leases. Which tool is best suited for this?

You have an on-premises Active Directory. You want to move your ‘File Servers’ to Azure but keep the same drive mappings for users (e.g. H: drive). What is the best hybrid solution?