An organization named ACME has an on-premises data center environment from which they host several applications. ACME is in the process of adopting Azure services for the benefit of resiliency and availability. Below are the 3 applications and their requirements:
· ACME1: this is a critical client-facing application that runs on-premises, however, this app must be able to failover to the Azure environment should something happen to the on-premises data center with an RPO of less than 20 minutes.
· ACME2: this application has a Recovery Point Objective of 25 minutes and Recovery Time Objective should be less than 20 minutes.
· ACME3: the requirement is to store data for 2 years.

Which of the following solutions would you use for ACME1?

An organization named ACME has an on-premises data center environment from which they host several applications. ACME is in the process of adopting Azure services for the benefit of resiliency and availability. Below are the 3 applications and their requirements:
· ACME1: this is a critical client-facing application that runs on-premises, however, this app must be able to failover to the Azure environment should something happen to the on-premises data center with an RPO of less than 20 minutes.
· ACME2: this application has a Recovery Point Objective of 25 minutes and Recovery Time Objective should be less than 20 minutes.
· ACME3: the requirement is to store application data for 2 years and has a Recovery Point Objective of 1 day.

Which of the following solutions would you use for ACME3?

An organization named ACME has an on-premises data center environment from which they host several applications. ACME is in the process of adopting Azure services for the benefit of resiliency and availability. Below are the 3 applications and their requirements:
· ACME1: this is a critical client-facing application that runs on-premises, however, this app must be able to failover to the Azure environment should something happen to the on-premises data center with a Recovery Point Objective (RPO) of less than 20 minutes.
· ACME2: this application has a Recovery Point Objective (RPO) of 25 minutes and Recovery Time Objective (RTO) should be less than 20 minutes.
· ACME3: the requirement is to store application data for 2 years and has a Recovery Point Objective (RPO) of 1 day.

Which of the following solutions would you use for ACME2?

An organization named Fabrikam has an on-premises data center environment from which they host several applications. Fabrikam makes use of SQL server 2014 which is installed on a VM which runs on the Hyper-V platform and leverages the Software Assurance contract they have in place with Microsoft. They need to migrate the on-premises SQL instance to Azure and leverage their existing investment.
Fabrikam decides to deploy a SQL VM in Azure. Does this meet the requirement?

An organization named Fabrikam has an on-premises data center environment from which they host several applications. Fabrikam makes use of SQL server 2014 which is installed on a VM which runs on the Hyper-V platform and leverages the Software Assurance contract they have in place with Microsoft. They need to migrate the on-premises SQL instance to Azure and leverage their existing investment.
Fabrikam decides to migrate to Azure SQL on the DTU model. Does this meet the requirement?

An organization named Fabrikam has an on-premises data center environment from which they host several applications. Fabrikam makes use of SQL server 2014 which is installed on a VM which runs on the Hyper-V platform and leverages the Software Assurance contract they have in place with Microsoft. They need to migrate the on-premises SQL instance to Azure and leverage their existing investment.
Fabrikam decides to migrate to Azure SQL on the vCore model. Does this meet the requirement?

An organization named Fabrikam has an on-premises data center environment from which they host several applications. Fabrikam makes use of SQL server 2014 which is installed on a VM which runs on the Hyper-V platform and leverages the Software Assurance contract they have in place with Microsoft. They need to migrate the on-premises SQL instance to Azure and leverage their existing investment.
Fabrikam decides to migrate to an Azure SQL Managed Instance (MI). Does this meet the requirement?

An organization named Fabrikam has an on-premises data center environment from which they host several applications. Fabrikam makes use of SQL server 2014 which is installed on a VM which runs on the Hyper-V platform and leverages the Software Assurance contract they have in place with Microsoft. They need to migrate the on-premises SQL instance to Azure and ensure encryption is applied where possible. Fabrikam decides to migrate to an IaaS SQL VM in Azure.
Which of the following encryption technologies are supported in this scenario? Choose all that apply.

As an architect, you have been tasked to identify the different key/value stores available in Azure. Choose all that apply:

As an architect, you have been tasked to identify the different relational database management systems available in Azure. Choose all that apply:

Contoso inc. is a financial company that recently migrated some of their infrastructure from on-premises to Azure. Contoso inc. has a resource group labeled “Production” which has 2 virtual networks; “Front End VNet” which has an address space of 10.20.0.0/16. The “Front End VNet” has a Virtual Machine Scale Set (VMSS) which runs the web application. The “Back End VNet” has an address space of 10.30.0.0/16, this VNet has a SQL database which is used to store data. Refer to Figure 1 for an overview diagram.
Contoso inc. has a head office in London with an employee headcount of 500, a branch office in South Africa with a headcount of 50 employees and 4 remote engineers from different geographic regions. All users have an Azure AD P2 license assigned and MFA enforced.

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

You need to configure the “Front End VNet” to communicate with the “Back End VNet” via a dedicated firewall.
Solution: You make use of custom route tables
Does this solution meet the goal?

Contoso inc. is a financial company that recently migrated some of their infrastructure from on-premises to Azure. Contoso inc. has a resource group labeled “Production” which has 2 virtual networks; “Front End VNet” which has an address space of 10.20.0.0/16. The “Front End VNet” has a Virtual Machine Scale Set (VMSS) which runs the web application. The “Back End VNet” has an address space of 10.30.0.0/16, this VNet has a SQL database which is used to store data. Refer to Figure 1 for an overview diagram.
Contoso inc. has a head office in London with an employee headcount of 500, a branch office in South Africa with a headcount of 50 employees and 4 remote engineers from different geographic regions. All users have an Azure AD P2 license assigned and MFA enforced.

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

You need to configure the “Front End VNet” to communicate with the “Back End VNet” without having to create additional resources.
Solution: Configure Virtual Network Peering.
Does this solution meet the goal?

Contoso inc. is a financial company that recently migrated some of their infrastructure from on-premises to Azure. Contoso inc. has a resource group labeled “Production” which has 2 virtual networks; “Front End VNet” which has an address space of 10.20.0.0/16. The “Front End VNet” has a Virtual Machine Scale Set (VMSS) which runs the web application. The “Back End VNet” has an address space of 10.30.0.0/16, this VNet has a SQL database which is used to store data. Refer to Figure 1 for an overview diagram.
Contoso inc. has a head office in London with an employee headcount of 500, a branch office in South Africa with a headcount of 50 employees and 4 remote engineers from different geographic regions. All users have an Azure AD P2 license assigned and MFA enforced.

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

You need to configure access for the remote engineers to connect securely to the “Front End VNet”.
Solution: Deploy a Virtual Network Gateway and configure Site-to-Site access.
Does this solution meet the goal?

Contoso inc. is a financial company that recently migrated some of their infrastructure from on-premises to Azure. Contoso inc. has a resource group labeled “Production” which has 2 virtual networks; “Front End VNet” which has an address space of 10.20.0.0/16. The “Front End VNet” has a Virtual Machine Scale Set (VMSS) which runs the web application. The “Back End VNet” has an address space of 10.30.0.0/16, this VNet has a SQL database which is used to store data. Refer to Figure 1 for an overview diagram.
Contoso inc. has a head office in London with an employee headcount of 500, a branch office in South Africa with a headcount of 50 employees and 4 remote engineers from different geographic regions. All users have an Azure AD P2 license assigned and MFA enforced.

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

You need to create a new storage account labeled “Network-Storage” in the “Production” Resource Group. This storage account must support SMB 3.0 as this will be mounted to all virtual machines as central storage for quick access.
Which storage service should you configure?

Contoso inc. is a financial company that recently migrated some of their infrastructure from on-premises to Azure. Contoso inc. has a resource group labeled “Production” which has 2 virtual networks; “Front End VNet” which has an address space of 10.20.0.0/16. The “Front End VNet” has a Virtual Machine Scale Set (VMSS) which runs the web application. The “Back End VNet” has an address space of 10.30.0.0/16, this VNet has a SQL database which is used to store data. Refer to Figure 1 for an overview diagram.
Contoso inc. has a head office in London with an employee headcount of 500, a branch office in South Africa with a headcount of 50 employees and 4 remote engineers from different geographic regions. All users have an Azure AD P2 license assigned and MFA enforced.

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

You need to share access to the “Network-Storage” account with a third party for integration purposes. You plan on creating a shared access signature.
True or False: You can only make use of the HTTPS protocol when creating a SAS key.

Contoso inc. is a financial company that recently migrated some of their infrastructures from on-premises to Azure. Contoso inc. has a resource group labeled “Production” which has 2 virtual networks; “Front End VNet” which has an address space of 10.20.0.0/16. The “Front End VNet” has a Virtual Machine Scale Set (VMSS) which runs the web application. The “Back End VNet” has an address space of 10.30.0.0/16, this VNet has a SQL database which is used to store data. Refer to Figure 1 for an overview diagram.

Contoso inc. has a head office in London with an employee headcount of 500, a branch office in South Africa with a headcount of 50 employees and 4 remote engineers from different geographic regions. All users have an Azure AD P2 license assigned and MFA enforced.

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one the correct solution, while others might not have a correct solution.

You need to configure the “Front End VNet” to communicate with the “Back End VNet”.
Solution: You configure a Virtual Network Gateway.
Does this solution meet the goal?

Fabrikam has 3 branches in the following locations: New York, London, and Tokyo, each office has its on-premises environment and is making use of a single Azure AD tenant on the Fabrikam.com domain. All users have Office E3 and EMS E3 licenses assigned. Users authenticate to Microsoft cloud services like exchange online, however lately the security administrators have noticed that there are a lot of sign-in attempts from other regions that Fabrikam does not operate in. You have been tasked to recommend a solution that will provide an additional layer of security for authentication when users sign in but should not affect users at the 3 legitimate branches.
You recommend making use of Azure policies. Does this meet the requirement?

Fabrikam has 3 branches in the following locations: New York, London, and Tokyo, each office has its on-premises environment and is making use of a single Azure AD tenant on the Fabrikam.com domain. All users have Office E3 and EMS E3 licenses assigned. Users authenticate to Microsoft cloud services like exchange online, however lately the security administrators have noticed that there are a lot of sign-in attempts from other regions that Fabrikam does not operate in. You have been tasked to recommend a solution that will provide an additional layer of security for authentication when users try and sign in from locations that are not originating from the 3 legitimate branches.
You recommend making use of Privileged Identity Management (Azure PIM). Does this meet the requirement?

Fabrikam has 3 branches in the following locations: New York, London, and Tokyo, each office has its on-premises environment and is making use of a single Azure AD tenant on the Fabrikam.com domain. All users have Office E3 and EMS E3 licenses assigned. Users authenticate to Microsoft cloud services like exchange online, however lately the security administrators have noticed that there are a lot of sign-in attempts from other regions that Fabrikam does not operate in. You have been tasked to recommend a solution that will provide an additional layer of security for authentication when users try and sign in from locations that are not originating from the 3 legitimate branches.
You recommend making use of Conditional Access Policies. Does this meet the requirement?

Fabrikam is a cloud-only organization with 500 users all working remotely with 15 global administrators assigned to the tenant. They have 3 subscriptions which are managed by three different departments:
· App1_Production which is managed by the development team
· App2_Test which is managed by the administrator team
· App3_B2B which is managed by a 3rd party

Fabrikam needs to assign role-based access control to these subscriptions based on the following requirements:
Requirement 1: App2_Test users should only be able to fully manage the solution including the permission to add additional users to the subscription with the permissions required
Requirement 2: App3_B2B users should only be able to view resources in the subscription
Requirement 3: App1_Production users should be able to fully manage the solution but should not be able to add additional users to the subscription
Requirement 4: Decrease the amount of statically assigned Global Administrators by means of access control management
Requirement 5: Ensure users assigned RBAC permission to resources are reviewed on a regular basis to minimize stale role assignments
Requirement 6: Decrease the amount of statically assigned RBAC users by means of access control management
Requirement 7: Allow only a specific 3rd party user to start and reboot virtual machines, but not shutdown VMs.

Which of the following RBAC roles should you assign for requirement 1?

Fabrikam is a cloud-only organization with 500 users all working remotely with 15 global administrators assigned to the tenant. They have 3 subscriptions which are managed by three different departments:
· App1_Production which is managed by the development team
· App2_Test which is managed by the administrator team
· App3_B2B which is managed by a 3rd party

Fabrikam needs to assign role-based access control to these subscriptions based on the following requirements:
Requirement 1: App2_Test users should only be able to fully manage the solution including the permission to add additional users to the subscription with the permissions required
Requirement 2: App3_B2B users should only be able to view resources in the subscription
Requirement 3: App1_Production users should be able to fully manage the solution but should not be able to add additional users to the subscription
Requirement 4: Decrease the amount of statically assigned Global Administrators by means of access control management
Requirement 5: Ensure users assigned RBAC permission to resources are reviewed on a regular basis to minimize stale role assignments
Requirement 6: Decrease the amount of statically assigned RBAC users by means of access control management
Requirement 7: Allow only a specific 3rd party user to start and reboot virtual machines, but not shutdown VMs.

Which of the following RBAC roles should you assign for requirement 2?

Fabrikam is a cloud-only organization with 500 users all working remotely with 15 global administrators assigned to the tenant. They have 3 subscriptions which are managed by three different departments:
· App1_Production which is managed by the development team
· App2_Test which is managed by the administrator team
· App3_B2B which is managed by a 3rd party

Fabrikam needs to assign role-based access control to these subscriptions based on the following requirements:
Requirement 1: App2_Test users should only be able to fully manage the solution including the permission to add additional users to the subscription with the permissions required
Requirement 2: App3_B2B users should only be able to view resources in the subscription
Requirement 3: App1_Production users should be able to fully manage the solution but should not be able to add additional users to the subscription
Requirement 4: Decrease the amount of statically assigned Global Administrators by means of access control management
Requirement 5: Ensure users assigned RBAC permission to resources are reviewed on a regular basis to minimize stale role assignments
Requirement 6: Decrease the amount of statically assigned RBAC users by means of access control management
Requirement 7: Allow only a specific 3rd party user to start and reboot virtual machines, but not shutdown VMs.

Which of the following RBAC roles should you assign for requirement 3?

Fabrikam is a cloud-only organization with 500 users all working remotely with 15 global administrators assigned to the tenant. They have 3 subscriptions which are managed by three different departments:
· App1_Production which is managed by the development team
· App2_Test which is managed by the administrator team
· App3_B2B which is managed by a 3rd party

Fabrikam needs to assign role-based access control to these subscriptions based on the following requirements:
Requirement 1: App2_Test users should only be able to fully manage the solution including the permission to add additional users to the subscription with the permissions required
Requirement 2: App3_B2B users should only be able to view resources in the subscription
Requirement 3: App1_Production users should be able to fully manage the solution but should not be able to add additional users to the subscription
Requirement 4: Decrease the amount of statically assigned Global Administrators by means of access control management
Requirement 5: Ensure users assigned RBAC permission to resources are reviewed on a regular basis to minimize stale role assignments
Requirement 6: Decrease the amount of statically assigned RBAC users by means of access control management
Requirement 7: Allow only a specific 3rd party user to start and reboot virtual machines, but not shutdown VMs.

Which of the following solutions should be used for requirement 4?

Fabrikam is a cloud-only organization with 500 users all working remotely with 15 global administrators assigned to the tenant. They have 3 subscriptions which are managed by three different departments:
· App1_Production which is managed by the development team
· App2_Test which is managed by the administrator team
· App3_B2B which is managed by a 3rd party

Fabrikam needs to assign role-based access control to these subscriptions based on the following requirements:
Requirement 1: App2_Test users should only be able to fully manage the solution including the permission to add additional users to the subscription with the permissions required
Requirement 2: App3_B2B users should only be able to view resources in the subscription
Requirement 3: App1_Production users should be able to fully manage the solution but should not be able to add additional users to the subscription
Requirement 4: Decrease the amount of statically assigned Global Administrators by means of access control management
Requirement 5: Ensure users assigned RBAC permission to resources are reviewed on a regular basis to minimize stale role assignments
Requirement 6: Decrease the amount of statically assigned RBAC users by means of access control management
Requirement 7: Allow only a specific 3rd party user to start and reboot virtual machines, but not shutdown VMs.

Which of the following solutions should be used for requirement 5?

Fabrikam is a cloud-only organization with 500 users all working remotely with 15 global administrators assigned to the tenant. They have 3 subscriptions which are managed by three different departments:
· App1_Production which is managed by the development team
· App2_Test which is managed by the administrator team
· App3_B2B which is managed by a 3rd party

Fabrikam needs to assign role-based access control to these subscriptions based on the following requirements:
Requirement 1: App2_Test users should only be able to fully manage the solution including the permission to add additional users to the subscription with the permissions required
Requirement 2: App3_B2B users should only be able to view resources in the subscription
Requirement 3: App1_Production users should be able to fully manage the solution but should not be able to add additional users to the subscription
Requirement 4: Decrease the amount of statically assigned Global Administrators by means of access control management
Requirement 5: Ensure users assigned RBAC permission to resources are reviewed on a regular basis to minimize stale role assignments
Requirement 6: Decrease the amount of statically assigned RBAC users by means of access control management
Requirement 7: Allow only a specific 3rd party user to start and reboot virtual machines, but not shutdown VMs.

Which of the following solutions should be used for requirement 6?

Fabrikam is a cloud-only organization with 500 users all working remotely with 15 global administrators assigned to the tenant. They have 3 subscriptions which are managed by three different departments:
· App1_Production which is managed by the development team
· App2_Test which is managed by the administrator team
· App3_B2B which is managed by a 3rd party

Fabrikam needs to assign role-based access control to these subscriptions based on the following requirements:
Requirement 1: App2_Test users should only be able to fully manage the solution including the permission to add additional users to the subscription with the permissions required
Requirement 2: App3_B2B users should only be able to view resources in the subscription
Requirement 3: App1_Production users should be able to fully manage the solution but should not be able to add additional users to the subscription
Requirement 4: Decrease the amount of statically assigned Global Administrators by means of access control management
Requirement 5: Ensure users assigned RBAC permission to resources are reviewed on a regular basis to minimize stale role assignments
Requirement 6: Decrease the amount of statically assigned RBAC users by means of access control management
Requirement 7: Allow only a specific 3rd party user to start and reboot virtual machines, but not shutdown VMs.

Which of the following solutions should be used for requirement 7?

Fabrikam is a cloud-only organization with 500 users all working remotely with 15 global administrators assigned to the tenant. They have 3 subscriptions which are used to deploy services in 3 different regions:
· APAC subscription
· West Europe subscription
· US Subscription
You need to control where resources can be deployed to with regards to a specific region. Which of the following can be used to achieve this?

Fabrikam is a cloud-only organization with 500 users all working remotely with 15 global administrators assigned to the tenant. They have 3 subscriptions which are used to deploy services in 3 different regions:
· APAC subscription
· West Europe subscription
· US Subscription
You have been tasked to reduce the number of permanently assigned global administrators and also implement a solution that will provide justification and notifications when users need to activate the global administrator roles. Which of the following solutions can be used to achieve this?

Fabrikam is a cloud-only organization with 500 users all working remotely with 15 global administrators assigned to the tenant. They have 3 subscriptions which are used to deploy services in 3 different regions:
· APAC subscription
· West Europe subscription
· US Subscription
Within the APAC subscription, there are several resources. You have been tasked to deploy a solution to create alerts based on specific criteria. Which of the following solutions can be used to achieve this?

The ACME Corporation is looking to deploy the following components in their Azure subscription.
· Azure Application Gateway
· Azure Virtual Machine Scale Set
· Single instance Virtual Machine
They have an SLA availability requirement of 99.95% for each component.

Based on the information provided for the application gateway, will this component meet the SLA requirements?

The ACME Corporation is looking to deploy the following components in their Azure subscription.
· Azure Application Gateway
· Azure Virtual Machine Scale Set
· Single instance Virtual Machine
They have an SLA availability requirement of 99.95% for each component.

Based on the information provided for the virtual machine instance, will this component meet the SLA requirements?

The ACME Corporation is looking to deploy the following components in their Azure subscription.
· Azure Application Gateway
· Azure Virtual Machine Scale Set
· Single instance Virtual Machine
They have an SLA availability requirement of 99.95% for each component.

Based on the information provided for the virtual machine scale set, will this component meet the SLA requirements?

The ACME Group has approached you as an architect to design a modern data warehouse solution. You have created the below flowchart; however, you need to fill in the components that are missing.

Which of the following components can be used for the preparing and training data component?

The ACME Group has approached you as an architect to design a modern data warehouse solution. You have created the below flowchart; however, you need to fill in the components that are missing.

Which of the following components can be used for the ingestion component?

The ACME Group has approached you as an architect to design a modern data warehouse solution. You have created the below flowchart; however, you need to fill in the components that are missing.

Which of the following components can be used for the Storage component?

The ACME Group has approached you as an architect to design a modern data warehouse solution. You have created the below flowchart; however, you need to fill in the components that are missing.

Which of the following components can be used for the advanced data modeling features component?

The ACME group has started to adopt Azure as their cloud platform of choice. ACME is a fashion retailer with a global presence. ACME has an application that is running in their South African data center and they are looking to deploy another instance of this application to Azure as a Web App. ACME has chosen to make use of Azure Traffic Manager to route DNS traffic between the two regions.
ACME has a requirement that all traffic should be directed to the Azure Web App first and route to the South African data center as a failover option in the event that the Azure region is unavailable without manual intervention.

TRUE or FALSE: The Web App will be available without manual intervention if the Azure region fails.

The ACME group has started to adopt Azure as their cloud platform of choice. ACME is a fashion retailer with a global presence. ACME has an application that is running in their South African data center and they are looking to deploy another instance of this application to Azure as a Web App. ACME has chosen to make use of Azure Traffic Manager to route DNS traffic between the two regions.
ACME has a requirement that all traffic should be directed to the Azure Web App first and route to the South African data center as a failover option in the event that the Azure region is unavailable without manual intervention.

TRUE or FALSE: This design caters for dynamic scaling of the web app in Azure?

The ACME group has started to adopt Azure as their cloud platform of choice. ACME is a fashion retailer with a global presence. ACME has an application that is running in their South African data center and they are looking to deploy another instance of this application to Azure as a Web App. ACME has chosen to make use of Azure Traffic Manager to route DNS traffic between the two regions.
ACME has a requirement that all traffic should be directed to the Azure Web App first and route to the South African data center as a failover option in the event that the Azure region is unavailable without manual intervention.

TRUE or FALSE: This design caters to dynamic scaling of the South African data center application?

The ACME Group is in the process of moving some of its on-premises resources to Azure. They are planning to move the following resources:
· 3 virtual machines which host 3 production applications, these hosts run on Windows server 2016 datacenter
· IIS webserver to Azure web app
Below are the requirements:
Requirement 1: Build monitoring dashboards with relevant metrics for VMs
Requirement 2: Create relevant alerts for VMs as well as Azure web app
Requirement 3: Have insights to performance issues for Azure web apps
Requirement 4: Configure alerts for current and upcoming issues such as planned maintenance of the Azure platform or changes that might affect availability.

Which of the following solutions would be best suited to address requirement 1?

The ACME Group is in the process of moving some of its on-premises resources to Azure. They are planning to move the following resources:
· 3 virtual machines which host 3 production applications, these hosts run on Windows server 2016 datacenter
· IIS webserver to Azure web app
Below are the requirements:
Requirement 1: Build monitoring dashboards with relevant metrics for VMs
Requirement 2: Create relevant alerts for VMs as well as Azure web app
Requirement 3: Have insights to performance issues for Azure web apps
Requirement 4: Configure alerts for current and upcoming issues such as planned maintenance of the Azure platform or changes that might affect availability.

Which of the following solutions would be best suited to address requirement 2?

The ACME Group is in the process of moving some of its on-premises resources to Azure. They are planning to move the following resources:
· 3 virtual machines which host 3 production applications, these hosts run on Windows server 2016 datacenter
· IIS webserver to Azure web app
Below are the requirements:
Requirement 1: Build monitoring dashboards with relevant metrics for VMs
Requirement 2: Create relevant alerts for VMs as well as Azure web app
Requirement 3: Have insights to performance issues for Azure web apps
Requirement 4: Configure alerts for current and upcoming issues such as planned maintenance of the Azure platform or changes that might affect availability.

Which of the following solutions would be best suited to address requirement 3?

The ACME Group is in the process of moving some of its on-premises resources to Azure. They are planning to move the following resources:
· 3 virtual machines which host 3 production applications, these hosts run on Windows server 2016 datacenter
· IIS webserver to Azure web app
Below are the requirements:
Requirement 1: Build monitoring dashboards with relevant metrics for VMs
Requirement 2: Create relevant alerts for VMs as well as Azure web app
Requirement 3: Have insights to performance issues for Azure web apps
Requirement 4: Configure alerts for current and upcoming issues such as planned maintenance of the Azure platform or changes that might affect availability.

Which of the following solutions would be best suited to address requirement 4?

The Contoso airline group has a web application that has been deployed across 2 virtual machines in two different regions. The web application traffic should be split between the two virtual machines for video and images respectively for load-balancing purposes at the application layer. Which of the following solutions will suffice?

The Contoso airline group has a web application that has been deployed across 2 virtual machines in two different regions. The web application traffic should be split between the two virtual machines for video and images respectively for load-balancing purposes at the application layer. You need to protect the web app from cross-site scripting and SQL injection attacks. Which of the following solutions should you implement?

The Contoso company has a requirement for VM backup retention as per regulatory compliance. Regulatory compliance requires a VM backup to be stored for a minimum of 5 years. The engineers configure the following backup policy.

What is the minimum recovery point objective (RPO) for VMs making use of this backup policy?

The Contoso company has a requirement for VM backup retention as per regulatory compliance. Regulatory compliance requires a VM backup to be stored for a minimum of 5 years. The engineers configure the following backup policy.

Will the above policy comply with the regulatory compliance request?

The Contoso organization has a web application that has been deployed by using a virtual machine scale set (VMSS) which is running Windows Server 2019 Datacenter. This application is built to be highly scalable and should be accessed via VPN from on-premises to Azure. The requirement is to allow users working remotely to access the workload securely via Point-to-Site VPN. You decide to generate certificates via the on-premises certificate authority. Which of the following would you need to upload to the virtual network gateway?

The Contoso organization has a web application that has been deployed by using a virtual machine scale set (VMSS) which is running Windows Server 2019 Datacenter. This application is built to be highly scalable and should be accessed via VPN from on-premises to Azure. The requirement is to allow users working remotely to access the workload securely via Point-to-Site VPN. You decide to generate certificates via the on-premises certificate authority. Which of the following would you need to upload and install on the remote machines?

The Fabrikam organization has a web application that has been deployed by using a virtual machine scale set (VMSS) which is running Ubuntu Linux. This application is built to be highly scalable and should only be accessed via the Site-to-Site VPN from on-premises to Azure. The requirement is to allow users working remotely to access the workload securely via Point-to-Site VPN. You decide to generate self-signed certificates. Which of the following would you need to upload to the virtual network gateway?

The Fabrikam organization has a web application that has been deployed by using a virtual machine scale set (VMSS) which is running Ubuntu Linux. This application is built to be highly scalable and should only be accessed via the Site-to-Site VPN from on-premises to Azure. The requirement is to allow users working remotely to access the workload securely via Point-to-Site VPN. You decide to generate self-signed certificates. Which of the following would you need to upload and install on the remote machines?

The Fabrikam organization has a web application that has been deployed by using a virtual machine scale set (VMSS) which is running Ubuntu Linux. This application is built to be highly scalable and should only be accessed via the Site-to-Site VPN from on-premises to Azure. The requirement is to access the scale set on only 1 private IP address via SSH which should be allowed on the Network Security Group inbound rules. Which of the following solutions should you implement?

The Fabrikam organization has developed a web service that is running on a VM on the Azure-VNet on the default subnet. The Azure API Management service has been deployed to provide access to the API service on the VM. A sister company named Contoso needs to be able to connect to the API.
The screenshot below shows the virtual network configuration for the API Management service.

TRUE or FALSE: Based on the below configuration the Contoso developers will be able to access the API management service gateway via the internet.

The Fabrikam organization has developed a web service that is running on a VM on the Azure-VNet on the default subnet. The Azure API Management service has been deployed to provide access to the API service on the VM. A sister company named Contoso needs to be able to connect to the API.
The screenshot below shows the virtual network configuration for the API Management service.

TRUE or FALSE: Based on the below configuration the gateway will be able to access data from the virtual machine (VM).

The Fabrikam organization has developed a web service that is running on a VM on the Azure-VNet on the default subnet. The Azure API Management service has been deployed to provide access to the API service on the VM. A sister company named Contoso needs to be able to connect to the API.
The screenshot below shows the virtual network configuration for the API Management service.

TRUE or FALSE: Based on the below configuration a virtual network gateway is required for the Contoso developers for access

The Fabrikam organization has developed a web service that is running on a VM on the Azure-VNet on the default subnet. The Azure API Management service has been deployed to provide access to the API service on the VM. A sister company named Contoso needs to be able to connect to the API.
The screenshot below shows the virtual network configuration for the API Management service.

TRUE or FALSE: Based on the below configuration a virtual network gateway is required for the Contoso developers for access.

The Fabrikam organization has developed a web service that is running on a VM on the Azure-VNet on the default subnet. The Azure API Management service has been deployed to provide access to the API service on the VM. A sister company named Contoso needs to be able to connect to the API.
The screenshot below shows the virtual network configuration for the API Management service.

TRUE or FALSE: Based on the below configuration the gateway will be able to access data from the virtual machine (VM).

The Fabrikam organization has the following SQL servers on-premises:
· Microsoft SQL Server 2014 which has the finance DB attached
· Microsoft SQL Server 2016 which has the sales DB attached
Fabrikam needs to migrate these DB’s to Azure and are looking at PaaS options with the following requirements:
Requirement 1: The data in the finance DB needs to be assessed and migrated to an Azure SQL database (DB)
Requirement 2: The data in the sales DB needs to be assessed and migrated to an Azure SQL Managed Instance.
Which of the following tools should you use for the assessment part for requirement 1?

The Fabrikam organization has the following SQL servers on-premises:
· Microsoft SQL Server 2014 which has the finance DB attached
· Microsoft SQL Server 2016 which has the sales DB attached
Fabrikam needs to migrate these DB’s to Azure and are looking at PaaS options with the following requirements:
Requirement 1: The data in the finance DB needs to be assessed and migrated to an Azure SQL database (DB)
Requirement 2: The data in the sales DB needs to be assessed and migrated to an Azure SQL Managed Instance.
Which of the following tools should you use for the assessment part for requirement 2?

TRUE or FALSE: Application insights can monitor the user and session count for a specific application.

TRUE or FALSE: Azure Application Gateway operates at layer 7 of the OSI model.

TRUE or FALSE: Azure Public Load Balancer operates at layer 7 of the OSI model.

TRUE or FALSE: When deploying Azure backup to a Windows VM in via the portal you need to install the Azure Backup agent.

TRUE or FALSE: You can set your default General Purpose v1 (GPv1) storage account access tier to archive.

TRUE or FALSE: You can set your default General Purpose v2 (GPv2) storage account access tier to archive.

TRUE or FALSE: You can upload self-signed certificates to virtual network gateways for Point-to-Site communication.

TRUE or FALSE: You need to use the Database Migration Service (DMS) to migrate an on-premises SQL DB to an Azure SQL Managed Instance online.

View Case Study:

Overview:

skillcertlabs is an online training provider. They have several main offices and a couple of branch offices.

Existing Environment:

• Their existing environment consists of an Active Directory domain named skillcertlabs.com. This is being hosted on a Windows Server.
• A set of web servers hosted on a VMWare environment.
• A set of Microsoft SQL server database servers hosted on physical servers.
• The company has also setup an Azure AD tenant
• Their subscription currently consists of Azure AD basic licences.

Network Infrastructure:

• Each of the main offices has a data center in place.
• Each office also has a dedicated Internet connection

Requirements:

Planned Changes:

• The company wants to setup a new office in Mumbai
• All resources for the Mumbai office will be hosted in Azure
• The On-premise Active Directory will be synchronized to Azure AD.
• All client computers in the Mumbai office will joined to the Azure AD domain

Planned Azure Networking Infrastructure:

The following Virtual networks will be setup in Azure:

Name

skillcertlab-mumbai

skillcertlab-office

skillcertlab-client

The following subnets will be in place

Virtual Network Name – Subnet

skillcertlab-mumbai – SubnetA

skillcertlab-mumbai – SubnetB

skillcertlab-client – SubnetC

skillcertlab-office – SubnetD

skillcertlab-office – SubnetE

The following additional settings will be in place:

• Default routes in Azure will be used to route traffic
• A peering connection will be established between the virtual networks skillcertlab-mumbai and skillcertlab-office
• The peering connection for skillcertlab-mumbai will have Remote gateways enabled.
• A private DNS zone will be created named skillcertlabs.local. The registration network will be set to the skillcertlab-client virtual network

The company has the following additional requirements:

• A number of web apps will be deployed. The initial settings of the web apps will be the same.
• The senior management needs to have the ability to view the costs for Azure resources from the prior week.

A development team wants to use a serverless compute service that could be used in conjunction with the web applications when they are migrated to Azure.
They decide to use the Azure Function App service.
Would this fulfil the requirement?

View Case Study:

Overview:

skillcertlabs is an online training provider. They have several main offices and a couple of branch offices.

Existing Environment:

• Their existing environment consists of an Active Directory domain named skillcertlabs.com. This is being hosted on a Windows Server.
• A set of web servers hosted on a VMWare environment.
• A set of Microsoft SQL server database servers hosted on physical servers.
• The company has also setup an Azure AD tenant
• Their subscription currently consists of Azure AD basic licences.

Network Infrastructure:

• Each of the main offices has a data center in place.
• Each office also has a dedicated Internet connection

Requirements:

Planned Changes:

• The company wants to setup a new office in Mumbai
• All resources for the Mumbai office will be hosted in Azure
• The On-premise Active Directory will be synchronized to Azure AD.
• All client computers in the Mumbai office will joined to the Azure AD domain

Planned Azure Networking Infrastructure:

The following Virtual networks will be setup in Azure:

Name

skillcertlab-mumbai

skillcertlab-office

skillcertlab-client

The following subnets will be in place

Virtual Network Name – Subnet

skillcertlab-mumbai – SubnetA

skillcertlab-mumbai – SubnetB

skillcertlab-client – SubnetC

skillcertlab-office – SubnetD

skillcertlab-office – SubnetE

The following additional settings will be in place:

• Default routes in Azure will be used to route traffic
• A peering connection will be established between the virtual networks skillcertlab-mumbai and skillcertlab-office
• The peering connection for skillcertlab-mumbai will have Remote gateways enabled.
• A private DNS zone will be created named skillcertlabs.local. The registration network will be set to the skillcertlab-client virtual network

The company has the following additional requirements:

• A number of web apps will be deployed. The initial settings of the web apps will be the same.
• The senior management needs to have the ability to view the costs for Azure resources from the prior week.

A team needs to perform a packet capture for traffic that enters the virtual machines entering the “skillcertlab-mumbai” network. Which of the following could be used for this requirement?

View Case Study:

Overview:

skillcertlabs is an online training provider. They have several main offices and a couple of branch offices.

Existing Environment:

• Their existing environment consists of an Active Directory domain named skillcertlabs.com. This is being hosted on a Windows Server.
• A set of web servers hosted on a VMWare environment.
• A set of Microsoft SQL server database servers hosted on physical servers.
• The company has also setup an Azure AD tenant
• Their subscription currently consists of Azure AD basic licences.

Network Infrastructure:

• Each of the main offices has a data center in place.
• Each office also has a dedicated Internet connection

Requirements:

Planned Changes:

• The company wants to setup a new office in Mumbai
• All resources for the Mumbai office will be hosted in Azure
• The On-premise Active Directory will be synchronized to Azure AD.
• All client computers in the Mumbai office will joined to the Azure AD domain

Planned Azure Networking Infrastructure:

The following Virtual networks will be setup in Azure:

Name

skillcertlab-mumbai

skillcertlab-office

skillcertlab-client

The following subnets will be in place

Virtual Network Name – Subnet

skillcertlab-mumbai – SubnetA

skillcertlab-mumbai – SubnetB

skillcertlab-client – SubnetC

skillcertlab-office – SubnetD

skillcertlab-office – SubnetE

The following additional settings will be in place:

• Default routes in Azure will be used to route traffic
• A peering connection will be established between the virtual networks skillcertlab-mumbai and skillcertlab-office
• The peering connection for skillcertlab-mumbai will have Remote gateways enabled.
• A private DNS zone will be created named skillcertlabs.local. The registration network will be set to the skillcertlab-client virtual network

The company has the following additional requirements:

• A number of web apps will be deployed. The initial settings of the web apps will be the same.
• The senior management needs to have the ability to view the costs for Azure resources from the prior week.

A development team wants to use a serverless compute service that could be used in conjunction with the web applications when they are migrated to Azure.
They decide to use the Azure CosmosDB service.
Would this fulfil the requirement?

View Case Study:

Overview:

skillcertlabs is an online training provider. They have several main offices and a couple of branch offices.

Existing Environment:

• Their existing environment consists of an Active Directory domain named skillcertlabs.com. This is being hosted on a Windows Server.
• A set of web servers hosted on a VMWare environment.
• A set of Microsoft SQL server database servers hosted on physical servers.
• The company has also setup an Azure AD tenant
• Their subscription currently consists of Azure AD basic licences.

Network Infrastructure:

• Each of the main offices has a data center in place.
• Each office also has a dedicated Internet connection

Requirements:

Planned Changes:

• The company wants to setup a new office in Mumbai
• All resources for the Mumbai office will be hosted in Azure
• The On-premise Active Directory will be synchronized to Azure AD.
• All client computers in the Mumbai office will joined to the Azure AD domain

Planned Azure Networking Infrastructure:

The following Virtual networks will be setup in Azure:

Name

skillcertlab-mumbai

skillcertlab-office

skillcertlab-client

The following subnets will be in place

Virtual Network Name – Subnet

skillcertlab-mumbai – SubnetA

skillcertlab-mumbai – SubnetB

skillcertlab-client – SubnetC

skillcertlab-office – SubnetD

skillcertlab-office – SubnetE

The following additional settings will be in place:

• Default routes in Azure will be used to route traffic
• A peering connection will be established between the virtual networks skillcertlab-mumbai and skillcertlab-office
• The peering connection for skillcertlab-mumbai will have Remote gateways enabled.
• A private DNS zone will be created named skillcertlabs.local. The registration network will be set to the skillcertlab-client virtual network

The company has the following additional requirements:

• A number of web apps will be deployed. The initial settings of the web apps will be the same.
• The senior management needs to have the ability to view the costs for Azure resources from the prior week.

A development team wants to use a serverless compute service that could be used in conjunction with the web applications when they are migrated to Azure.
They decide to use the Azure Logic App service.
Would this fulfil the requirement?

View Case Study:

Overview:

skillcertlabs is an online training provider. They have several main offices and a couple of branch offices.

Existing Environment:

The company currently has the following Active Directory Environment in place:

• Two Active Directory forests – One is quiz.skillcertlabs.com and the other is research.skillcertlabs.com
• Currently there is no trust relationship between the forests
• The quiz.skillcertlabs.com is the production forest that hosts all the identities required for internal user and computer authentication.
• The research.skillcertlabs.com forest is only used by the research department

The company currently has the following Networking Environment in place:

• The offices currently contain at least one domain controller from the quiz.skillcertlabs.com forest.
• The main head office contains the domain controller of the research.skillcertlabs.com forest
• All of the offices have high speed internet connections

Applications:

The company has a web application running on-premise named skillcertlab-app

• The application is running on Microsoft Internet Information Services
• The application stores its data on Microsoft SQL Server 2016
• The servers are all running on Hyper-V
• The same Hyper-V environment also hosts a staging environment to test all updates to the web application
• All Microsoft based licences have been purchased via a Microsoft Enterprise Agreement that includes Software Assurance

Planned Changes:

• The company wants to migrate its workloads to Azure.
• They also want to create a hybrid identity model along with a Microsoft Office 365 deployment
• The research department will continue to use the infrastructure in the on-premise environment.

Following are the key requirements for the migration to Azure:

• The Web application “skillcertlab-app” needs to be migrated to Azure
• Existing licences should be used wherever possible to minimize on costs
• Users need to always authenticate using their quiz.skillcertlabs.com UPN identity
• All new deployments to Azure must be redundant in the case of an Azure region failure
• PaaS deployments are preferred wherever possible
• Directory Synchronization must be established between Azure AD and the quiz.skillcertlabs.com forest. This synchronization must not be affected by a link failure between Azure and the on-premise network.

The following requirements need to be met in terms of the database:

• When the database is migrated to Azure, it needs to be ensured that metrics are recorded for the database. The database administrators should be able to analyse the metrics for suggesting any further improvements to the database environment
• Database downtime must be minimized when the database is being migrated onto Azure
• Database backup’s must be maintained for a period of 5 years

The following requirements need to be met in terms of Security:

• Administrators should be able to authenticate to Azure by using the quiz.skillcertlabs.com credentials
• Any administrative access to Azure must be complemented by multi-factor authentication

A strategy needs to be recommended for the Web application – “skillcertlab-app”. The loads on the application would be unpredictable. It needs to be ensured that the application can sustain itself at high workloads. Also, it needs to be ensured that costs are being minimized at lower workloads. Which of the following would you recommend?

View Case Study:

Overview:

skillcertlabs is an online training provider.

Current System – Financial Processing:

skillcertlabs currently has a system that consists of 3 tiers:

• Front end Web App
• Middle tier API
• Back end data store

Below is the current set of the system:

• The backend is running on Microsoft SQL server 2016
• All servers are running on Windows
• The Front and Middle tiers are written in C# and hosted on Internet Information Services
• The database is currently 1 TB in size. The growth of the database is not expected to grow beyond 3 TB.

The system currently has the following requirements:

• All data must be encrypted in rest and in transit
• The front and middle tier components currently make use of encryption keys to protect the data store. Only these tiers should have the capability to access the encryption keys.
• Database backups need to be maintained in 2 separate locations that are at least 100 miles apart
• Database backups need to be stored for up to 7 years
• Traffic to the servers needs to be controlled via source IP address and port no
• Access to the system should only be via the internal network of skillcertlabs
• The Security team needs to be able to inspect all inbound and outbound traffic

Current System – Transactional Query System:

skillcertlabs also has a Transaction Query system built on .Net. The data is stored in Azure Table storage. This .Net service currently runs on a client computer

Planned Changes:

skillcertlabs wants to migrate the Financial Processing system to Azure

Key requirements:

• Infrastructure services must remain available if a region or a data center fails.
• Failover must occur without any administrative intervention
• Wherever possible, Azure managed services must be used to management overhead
• Whenever possible, costs must be minimized.
• Collect windows security logs from the Middle tier and retain the logs for several year
• Generate alerts if any unauthorized access to the backend Virtua machines are detected.
• The number of instances assigned to the front and middle tiers should be adjusted automatically based on the CPU utilization
• An SLA of 99.95% must be guaranteed on the Infrastructure for the front and middle tier systems
• Identity management must be performed via Active directory and all password hashes must be stored on the on-premise environment.
• If there are any suspicious attempts for authentication, then that should trigger multi-factor authentication. Access should be allowed if the authentication attempt is successful.
• The data store for the transactional query system will be move from Azure Table storage to a CosmosDB account

Question:

Azure AD Connect will be installed to implement the synchronize the identities between Azure AD and the on-premise Active Directory. Which of the following would need to be configured in Azure AD Connect?

View Case Study:

Overview:

skillcertlabs is an online training provider. They have several main offices and a couple of branch offices.

Existing Environment:

• Their existing environment consists of an Active Directory domain named skillcertlabs.com. This is being hosted on a Windows Server.
• A set of web servers hosted on a VMWare environment.
• A set of Microsoft SQL server database servers hosted on physical servers.
• The company has also setup an Azure AD tenant
• Their subscription currently consists of Azure AD basic licences.

Network Infrastructure:

• Each of the main offices has a data center in place.
• Each office also has a dedicated Internet connection

Requirements:

Planned Changes:

• The company wants to setup a new office in Mumbai
• All resources for the Mumbai office will be hosted in Azure
• The On-premise Active Directory will be synchronized to Azure AD.
• All client computers in the Mumbai office will joined to the Azure AD domain

Planned Azure Networking Infrastructure:

The following Virtual networks will be setup in Azure:

Name

skillcertlab-mumbai

skillcertlab-office

skillcertlab-client

The following subnets will be in place

Virtual Network Name – Subnet

skillcertlab-mumbai – SubnetA

skillcertlab-mumbai – SubnetB

skillcertlab-client – SubnetC

skillcertlab-office – SubnetD

skillcertlab-office – SubnetE

The following additional settings will be in place:

• Default routes in Azure will be used to route traffic
• A peering connection will be established between the virtual networks skillcertlab-mumbai and skillcertlab-office
• The peering connection for skillcertlab-mumbai will have Remote gateways enabled.
• A private DNS zone will be created named skillcertlabs.local. The registration network will be set to the skillcertlab-client virtual network

The company has the following additional requirements:

• A number of web apps will be deployed. The initial settings of the web apps will be the same.
• The senior management needs to have the ability to view the costs for Azure resources from the prior week.

The company wants to lift and shift the on-premise database to Azure with minimal application and database changes. Which of the following could be used in Azure to host the database?

View Case Study:

Overview:

skillcertlabs is an online training provider. They have several main offices and a couple of branch offices.

Existing Environment:

• Their existing environment consists of an Active Directory domain named skillcertlabs.com. This is being hosted on a Windows Server.
• A set of web servers hosted on a VMWare environment.
• A set of Microsoft SQL server database servers hosted on physical servers.
• The company has also setup an Azure AD tenant
• Their subscription currently consists of Azure AD basic licences.

Network Infrastructure:

• Each of the main offices has a data center in place.
• Each office also has a dedicated Internet connection

Requirements:

Planned Changes:

• The company wants to setup a new office in Mumbai
• All resources for the Mumbai office will be hosted in Azure
• The On-premise Active Directory will be synchronized to Azure AD.
• All client computers in the Mumbai office will joined to the Azure AD domain

Planned Azure Networking Infrastructure:

The following Virtual networks will be setup in Azure:

Name

skillcertlab-mumbai

skillcertlab-office

skillcertlab-client

The following subnets will be in place

Virtual Network Name – Subnet

skillcertlab-mumbai – SubnetA

skillcertlab-mumbai – SubnetB

skillcertlab-client – SubnetC

skillcertlab-office – SubnetD

skillcertlab-office – SubnetE

The following additional settings will be in place:

• Default routes in Azure will be used to route traffic
• A peering connection will be established between the virtual networks skillcertlab-mumbai and skillcertlab-office
• The peering connection for skillcertlab-mumbai will have Remote gateways enabled.
• A private DNS zone will be created named skillcertlabs.local. The registration network will be set to the skillcertlab-client virtual network

The company has the following additional requirements:

• A number of web apps will be deployed. The initial settings of the web apps will be the same.
• The senior management needs to have the ability to view the costs for Azure resources from the prior week.

The company wants to setup a disaster recovery solution for the web-based servers. The workloads on these servers need to be available in a secondary data center in the event of a primary data center failure. Which of the following service could they use which would provide them the least RTO?