Microsoft Practice Questions, Discussions & Exam Topics by our Authors
You administer a solution in Azure that is currently having performance issues. You need to find the cause of the performance issues pertaining to metrics on the Az...To troubleshoot performance issues related to Azure infrastructure metrics, Azure Monitor is the best tool for the task. Let’s analyze each option and explain why some are more appropriate than others: A) Azure Traffic Analytics: - Use case: Azure Traffic Analytics is primarily used to monitor and analyze traffic patterns, such as network traffic and connectivity within virtual networks, to detect issues like bottlenecks or inefficient routing. - Why it's rejected: It doesn’t provide comprehensive infrastructure performance metrics such as CPU utilization, memory usage, or disk I/O on Azure resources. While useful for analyzing network traffic, it isn’t the tool for diagnosing broad performance issues related to Azure infrastructure. B) Azure Monitor: - Use case: Azure Monitor is designed for monitoring the performance and health of applications and infrastructure on Azure. It provides rich insights through metrics, logs, and alerts for all Azure services. It can track things like resource utilization (e.g., CPU, memory, disk), network performance, and service health. - Why it's selected: Azure Monitor gives the complete suite of monitoring tools for diagnosing performance issues at both the infrastructure and application levels. It is directly suited to address performance problems with metrics in Azure infrastructure, such as VM... Author: Aditya · Last updated Jun 25, 2026 |
Your company has an Azure subscription that includes a Recovery Services vault. You want to use Azure Backup to schedule a backup of your company's virtual machines (VMs) to the Recovery S...When scheduling backups for VMs in Azure, it's important to consider the supported operating systems and VM states that Azure Backup can handle. Let’s evaluate each option based on the criteria: A) VMs that run Windows 10: - Use case: Azure Backup supports backing up VMs running Windows Server operating systems (such as Windows Server 2012 or higher) but does not support backing up Windows 10 virtual machines. - Why it’s rejected: Windows 10 is not a supported operating system for Azure Backup, as Azure Backup is designed primarily for server OS versions in production environments, not client OS like Windows 10. B) VMs that run Windows Server 2012 or higher: - Use case: This is the correct option. Azure Backup supports virtual machines running Windows Server 2012 or higher. These operating systems are fully supported for backup, and they include the necessary backup agents and integration with the Recovery Services vault. - Why it’s selected: Azure Backup provides full support for Windows Server OS, and it works seamlessly with these versions to schedule and manage backups. C) VMs that have NOT been shut down: - Use case: Azure Backup does not require that VMs be running (active) or that they be in a specific powered state for backup. In fact, VMs can be backed up even if they are not actively running as long as the VM is properly configured. - Why it’s ... Author: Henry · Last updated Jun 25, 2026 |
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure Active Directory (Azure AD) tenant named contoso.com. You have a CSV file that contains the names and email a...Let’s evaluate the solution described and see if it meets the goal of creating guest user accounts for external users in Azure Active Directory (Azure AD). The Task: You need to create guest user accounts in the contoso.com Azure AD tenant for 500 external users, using the data in a CSV file containing the names and email addresses of these users. Solution: The solution is to create a PowerShell script that uses the New-AzureADUser cmdlet for each user. Analysis of the solution: New-AzureADUser Cmdlet: - The New-AzureADUser cmdlet is primarily used to create regular users in Azure AD. This cmdlet does not have a direct option to specify the creation of guest users (external users). - For creating guest users in Azure AD, the cmdlet to use would be New-AzureADMSInvitation, which specifically handles inviting external users (guests) by sending an invitation email. This cmdlet is designed for adding external users as guest accou... Author: Sam · Last updated Jun 25, 2026 |
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure Active Directory (Azure AD) tenant named contoso.com. You have a CSV file that contains the names and em...Goal: You need to create guest user accounts for 500 external users in Azure Active Directory (Azure AD) using a CSV file that contains their names and email addresses. Solution: The solution provided involves using the Bulk create user operation in the Azure portal. Analysis: Bulk Create User Operation: - The Bulk create user operation in the Azure AD portal allows you to create multiple users in bulk by uploading a CSV file. The CSV file must contain the required details such as userPrincipalName (email address) and other necessary attributes. - For guest users, the process is slightly different compared to internal users. When creating external (guest) users, the system typically sends an invitation email to the user to allow them to accept the invitation and complete their account setup. How it works for guest users: - Azure AD's Bulk create user operation supports creating internal users (users within the same organization), but it is not designed to directly handle the guest user invitation process. For external users (guests), you would typically use the New-Az... Author: Ryan · Last updated Jun 25, 2026 |
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure Active Directory (Azure AD) tenant named contoso.com. You have a CSV file that contains the names and email addresses of ...Goal: You need to create guest user accounts in Azure Active Directory (Azure AD) for 500 external users using a CSV file that contains their names and email addresses. Solution: The solution is to create a PowerShell script that runs the New-AzureADMSInvitation cmdlet for each external user. Analysis: New-AzureADMSInvitation Cmdlet: - The New-AzureADMSInvitation cmdlet is designed specifically for inviting external users (guest users) to your Azure AD tenant. It sends an invitation to the email address provided, and upon acceptance, the external user is added as a guest in Azure AD. - This is the correct approach for creating guest user accounts because it handles the entire invitation process, which is required for adding external users as guests. Using PowerShell with New-AzureADMSInvitation: - Powe... Author: Matthew · Last updated Jun 25, 2026 |
SNAPSHOT - You have an Azure subscription named Subscription1 that contains a resource group named RG1. In RG1, you create an internal load balancer named LB1 and a public load balancer named LB2. You need to ensure that an administrator named Admin1 can manage LB1 and LB2. The solution must follow the principle of least privilege. Which role should you...Author: StarryEagle42 · Last updated Jun 25, 2026 |
You have an Azure subscription that contains an Azure Active Directory (Azure AD) tenant named contoso.com and an Azure Kubernetes Service (AKS) cluster named AKS1. An administrator reports that she is unable to grant access to AKS1 to the users in contoso.c...Goal: You need to ensure that access to the AKS1 cluster can be granted to the users in contoso.com, the Azure Active Directory (Azure AD) tenant. Analysis of the Options: A) From contoso.com, modify the Organization relationships settings: - Use case: The Organization relationships settings in Azure AD are used to manage external collaboration (B2B) scenarios, allowing users from another Azure AD tenant or external organization to access resources within your tenant. This is generally for enabling cross-tenant collaboration. - Why it is rejected: This option is relevant for external user access from different tenants or external organizations, but it doesn't address the issue of granting access to AKS1 for users within the same tenant (contoso.com). Contoso.com users are internal, so this setting is unnecessary in this context. B) From contoso.com, create an OAuth 2.0 authorization endpoint: - Use case: OAuth 2.0 authorization endpoints are used for authentication and authorization scenarios involving applications and services. While OAuth 2.0 is a key authentication mechanism, this setting is not specific to granting access to an AKS cluster. - Why it is rejected: Setting up an OAuth 2.0 endpoint is not directly related to enabling Azure AD integration for access to an AKS cluster. This step is part of custom authentication flows for web apps and services, but it doesn't specifically help with integrating Azure AD users to AKS. C) Recreate AKS1: - Use case: Recreating an AKS cluster might address some issues, but it's an extreme measure that would disrupt the existing configuration and any workloads already running on the cluster. - Why it is rejected: This is an unnecessary step. You don’t need to ... Author: Emma · Last updated Jun 25, 2026 |
You have a Microsoft 365 tenant and an Azure Active Directory (Azure AD) tenant named contoso.com. You plan to grant three users named User1, User2, and User3 access to a temporary Microsoft SharePoint document library named Library1. You need to create groups for the users. The solution must ensure that the groups are deleted automatically af...Goal: You need to create groups for three users (User1, User2, and User3) in Azure AD and Microsoft 365, which will be granted access to a temporary Microsoft SharePoint document library (Library1). The groups should be automatically deleted after 180 days. Analysis of Options: A) A Microsoft 365 group that uses the Assigned membership type: - Use case: A Microsoft 365 group with the Assigned membership type means that users are manually added to the group (not dynamic). - Why it could be selected: Microsoft 365 groups can be configured for automatic expiration (i.e., deletion after a set period) if the appropriate settings are applied. When using the Assigned membership type, you have full control over the group membership, and the group can be set to expire automatically after 180 days using group expiration policies. - Why it's a correct choice: Microsoft 365 groups with Assigned membership are ideal for scenarios where you want to manually manage membership but still apply expiration policies. These groups can be automatically deleted after 180 days through the Azure AD Group expiration policy. B) A Security group that uses the Assigned membership type: - Use case: A Security group with the Assigned membership type also allows for manual user assignments. - Why it could be selected: Like the Microsoft 365 group, a Security group with Assigned membership can be set for automatic deletion using Azure AD Group expiration policies. You can specify an expiration period of 180 days, and the group will be deleted automatically once the period expires. - Why it's a correct choice: Security groups with Assigned membership are suitable for manually managing membership and are compatible with the expiration policies. These groups can also be configured to automatically delete after 180 days. C) A Microsoft 365 group that uses the Dynamic User membership type: - Use case: A Microsoft 365 group with the Dynamic User membership type automatically includes users based on user attributes in Azure AD (e.g., department, location, ro... Author: Henry · Last updated Jun 25, 2026 |
SNAPSHOT - You have an Azure Active Directory (Azure AD) tenant named contoso.com that contains the users shown in the following table: User3 is the owner of Group1. Group2 is a member of Group1. You configure an access review named Review1 as shown in the following exhibit: For each of the followin...Author: Ming · Last updated Jun 25, 2026 |
SNAPSHOT - You have the Azure management groups shown in the following table: You add Azure subscriptions to the management groups as shown in the following table: You create the Azure policies shown in the following table: For each of the following statements, s...Author: Lucas Carter · Last updated Jun 25, 2026 |
You have an Azure policy as shown in the following exhibit: What is the effect of the policy?To answer the question accurately, I would need to see the Azure Policy that is being referred to in the exhibit, as the specifics of the policy definition directly affect the decision-making process. However, based on typical Azure policies that restrict or allow resources to be deployed to certain locations or resource groups, here's a general breakdown of the possible effects for each option. Understanding the Options: 1. A) You are prevented from creating Azure SQL servers anywhere in Subscription 1. - This would happen if the policy specifically restricts Azure SQL servers at a subscription-wide level. 2. B) You can create Azure SQL servers in ContosoRG1 only. - This is likely the case if the policy allows the creation of SQL servers only in a specific resource group (ContosoRG1) and restricts them in all other resource groups in Subscription 1. 3. C) You are prevented from creating Azure SQL Servers in ContosoRG1 only. - If the policy explicitly blocks Azure SQL servers in the ContosoRG1 resource group but allows creation in others, this option could be valid. 4. D) You can create Azure SQL servers in any resource group within Subscription 1. - This would apply if there were no specific restrictions defined by the policy, allowing creation in any resource group within Subscription 1. Analyzing the Key Factors: - Policy Scope: The scope of the polic... Author: Samuel · Last updated Jun 25, 2026 |
SNAPSHOT - You have an Azure subscription that contains the resources shown in the following table: You assign a policy to RG6 as shown in the following table: To RG6, you apply the tag: RGroup: RG6. You deploy a virtual network named VNET2 to RG6. Which tags apply to VNET1 and VNE...Author: VioletCheetah55 · Last updated Jun 25, 2026 |
You have an Azure subscription named AZPT1 that contains the resources shown in the following table: You create a new Azure subscription named AZPT2. You need to identify ...To determine which resources can be moved from one Azure subscription to another (from AZPT1 to AZPT2), we need to understand the concept of resource moves in Azure. Azure allows certain resources to be moved between subscriptions, but there are specific conditions and limitations based on the type of resource. Key Factors for Resource Move: 1. Azure Virtual Machines (VMs): Virtual machines can typically be moved between subscriptions, but the underlying resources like the virtual network (VNET), storage, and managed disks may need to be handled in a coordinated way to ensure that the VM functions correctly after the move. 2. Storage Accounts: Storage accounts can be moved between subscriptions as long as the associated resources are supported by the move. However, depending on the type of storage, there may be restrictions. 3. Virtual Networks (VNETs): Moving a VNET is supported, but it is subject to conditions, such as ensuring there are no dependencies in the source subscription that would affect the move. 4. Azure Key Vault (RVAULT1): Resource moves for Key Vaults depend on the region, but Key Vaults can typically be moved to a different subscription. However, if the vault contains sensitive data or complex dependencies (e.g., references to secrets or certificates), special care is needed. 5. Managed Resources: Managed resources like managed disks or managed identities are often treated differently than other resources like VMs. Moving managed resources can have specific limitations depending on their dependencies. Evaluating the Options: 1. A) VM1, storage1, VNET1, and VM1Managed only: - This option includes VM1, storage1, VNET1, and VM1M... Author: Emily · Last updated Jun 25, 2026 |
You recently created a new Azure subscription that contains a user named Admin1. Admin1 attempts to deploy an Azure Marketplace resource by using an Azure Resource Manager template. Admin1 deploys the template by using Azure PowerShell and receives the following error message: `User failed validation to purchase resources. Error message: `Legal terms have not been accepted for this item on this subscription. To accept legal terms, please go to the Azure portal (http://go.microsoft.com/fwlink/?Lin...To address the issue described, we need to understand the error message and the solution options. The error message indicates that legal terms have not been accepted for the Marketplace item, which prevents the deployment of a resource from the Azure Marketplace. When a user attempts to deploy a Marketplace resource for the first time, they must accept the legal terms associated with that resource. If this has not been done, it results in the error you're seeing. Breakdown of Options: 1. A) From Azure PowerShell, run the Set-AzApiManagementSubscription cmdlet: - This cmdlet is related to API Management subscriptions, and it does not have anything to do with accepting legal terms for Azure Marketplace resources. This option is not applicable to the issue at hand. 2. B) From the Azure portal, register the Microsoft.Marketplace resource provider: - Registering the Microsoft.Marketplace resource provider ensures that the subscription is enabled to use resources from the Azure Marketplace. However, this action does not specifically address the need to accept the legal terms for a specific Marketplace resource. This might be a part of the overall setup but does not directly resolve the error message about accepting legal terms. So, this is partially helpful but not the main solution. 3. C... Author: NebulaEagle11 · Last updated Jun 25, 2026 |
You have an Azure Active Directory (Azure AD) tenant that contains 5,000 user accounts. You create a new user account named AdminUser1. You need to assign the User administrator adminis...To assign the User administrator administrative role to AdminUser1, the correct step involves modifying the directory role of the user. Let’s break down the available options and analyze why the other options are not suitable. Key Factors: - User administrator role: This role is typically assigned from within the Directory role blade in Azure Active Directory (Azure AD), as it specifically grants administrative privileges related to user management within the directory. Analyzing the Options: 1. A) From the Licenses blade, assign a new license: - This option involves assigning a license to the user. While licenses are important for giving users access to services, licenses are unrelated to administrative roles like the User administrator role. Assigning a license won't allow the user to perform administrative tasks. Therefore, this option is not suitable for assigning an administrative role. 2. B) From the Directory role blade, modify the directory role: - This opti... Author: Leah Davis · Last updated Jun 25, 2026 |
You have an Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com that contains 100 user accounts. You purchase 10 Azure AD Premium P2 licenses for the tenant. You need to e...To ensure that 10 users can use all the Azure AD Premium P2 features, you need to assign the Azure AD Premium P2 license to the users. Here’s an explanation of why option A is the correct one and why the other options are not applicable: A) From the Licenses blade of Azure AD, assign a license - Correct Answer: The Licenses blade in Azure AD is the appropriate place to assign Azure AD Premium licenses to users. By assigning the Azure AD Premium P2 license to the users, you will enable them to access all the Premium P2 features such as Identity Protection, Privileged Identity Management, Conditional Access, and more. - Why this works: This option directly addresses the goal of assigning licenses, which is the key to activating the Azure AD Premium P2 features for users. B) From the Groups blade of each user, invite the users to a group - Incorrect: Groups are typically used for organizing users and applying policies or access control, but groups themselves do not grant licenses. Group membership can help with conditional access or resource access, but it doesn't enable Azure AD Premium P2 features unless the license is explicitly assigned. - Why this doesn’t work: Licensing isn’t tied to group membership; you would still need to assign the license directly for the users to use Premium features. C) From the Azure AD domain, add an enterprise application - Incorrect: Enterprise applications are used to integrate externa... Author: Ethan · Last updated Jun 25, 2026 |
You have an Azure subscription named Subscription1 and an on-premises deployment of Microsoft System Center Service Manager. Subscription1 contains a virtual machine named VM1. You need to ensure that an alert is set in Service...To ensure that an alert is triggered in Microsoft System Center Service Manager when the available memory on VM1 falls below 10%, the most appropriate first step is to deploy the IT Service Management Connector (ITSM). Here's an explanation of the reasoning behind this choice and why the other options are rejected: A) Create an automation runbook - Incorrect: An automation runbook is typically used for automating tasks or responding to events (such as automatically remediating issues like restarting a VM) rather than setting up alerts. While it can be used to manage tasks related to VM health, it is not directly responsible for integrating monitoring alerts with Service Manager. - Why this doesn’t work: This is more about automating workflows, and doesn't directly connect monitoring alerts with Service Manager, which is the main goal here. B) Deploy a function app - Incorrect: A function app is part of Azure Functions, and while it can execute small pieces of code in response to triggers (e.g., monitoring data or event notifications), it is not directly related to creating or handling alerts within Service Manager. It would require additional configuration to integrate with Service Manager, and it isn't specifically designed for this use case. - Why this doesn’t work: This approach would be overcomplicated for the simple task of setting an alert in Service Manager based on available memory. It's also not the built-in way to integrate Azure monitoring data directly into Service Manager. C) Deploy the IT Service Management Connector (ITSM) - Correct Answer: The IT Service Management Connector (ITSM) is specifically designed to integrate Azure Monitor alerts with System Center Service Manager. By deploying this connector, you can ensure that monitoring data, such as alerts triggered when VM1’s available memory drops below 10%, is routed directly to Service ... Author: StarryEagle42 · Last updated Jun 25, 2026 |
You sign up for Azure Active Directory (Azure AD) Premium P2. You need to add a user named [email protected] as an administrator on all the computers that will be...To add [email protected] as an administrator on all the computers that will be joined to the Azure AD domain, you need to configure the Device settings from the Devices blade in Azure AD. Here’s an explanation of why this is the correct option and why the others are not applicable: A) Device settings from the Devices blade - Correct Answer: The Device settings in Azure AD allow you to configure which users or groups have administrative privileges on devices that are joined to Azure AD. Specifically, you can configure the "Additional local administrators on Azure AD joined devices" setting. This allows you to specify a user (in this case, [email protected]) or a group to be added as a local administrator on all devices that are joined to Azure AD. - Why this works: By setting this configuration, [email protected] can automatically be granted local administrator rights on all computers that are Azure AD-joined. B) Providers from the MFA Server blade - Incorrect: The MFA Server blade is used to configure multi-factor authentication (MFA) settings, which are related to verifying the identity of users, not for configuring device-specific administrative rights. It doesn’t allow you to assign local administrator rights on devices. - Why this doesn’t work: This option is not related to managing local administrator rights on Azure AD-joined devices. It’s focused on identity security, specifically multi-factor authentication. C) User settings from the Users blade - Incorrect: The User settings in the Users blade manage user properties like profile settings, licenses, and group memberships, but it does not specifically allow you to assign administrative privileges on devices. While users can be assigned roles, such as Global Administrator or Dev... Author: ThunderBear · Last updated Jun 25, 2026 |
SNAPSHOT - You have Azure Active Directory tenant named Contoso.com that includes following users: Contoso.com includes following Windows 10 devices: You create following security groups in Contoso.com: For each of the following statements, select Y...Author: Liam123 · Last updated Jun 25, 2026 |
You have an Azure subscription that contains a resource group named RG26. RG26 is set to the West Europe location and is used to create temporary resources for a project. RG26 contains the resources shown in the following table. SQLDB01 is backed up to RGV1. When the project is complet...To successfully delete RG26, which contains several resources, the key issue is that SQLDB01 is backed up to RGV1, and this backup is likely preventing the deletion of the resource group. Here’s an explanation of the reasoning behind the correct choice and why the others are not applicable: A) Delete VM1 - Incorrect: While VM1 is a resource within RG26, deleting it will not directly address the issue preventing the deletion of RG26. The primary issue is related to the backup of SQLDB01 to RGV1. - Why this doesn’t work: Deleting VM1 may free up resources, but the problem preventing RG26 deletion is related to the backup, not just the VM. B) Stop VM1 - Incorrect: Stopping VM1 will not resolve the problem because stopping a virtual machine doesn't affect the backup or resource dependencies that are preventing the deletion. The issue is likely with the backup configuration of SQLDB01 to RGV1. - Why this doesn’t work: Stopping VM1 does not impact the backup process or the resources that are causing the deletion failure. C) Stop the backup of SQLDB01 - Correct Answer: Since SQLDB01 is backed up to RGV1, the backup operation is likely preventing the deletion of RG26. Stopping or deleting the backup will ensure that there are no dependencies between RG26 and RGV1 that would block the deletion of the resource group. - Why this works... Author: Noah · Last updated Jun 25, 2026 |
You have an Azure subscription named Subscription1 that contains a virtual network named VNet1. VNet1 is in a resource group named RG1. Subscription1 has a user named User1. User1 has the following roles: * Reader * Security Admin * Security Re...To allow User1 to assign the Reader role for VNet1 to other users, we need to understand both the role-based access control (RBAC) mechanism in Azure and the specific permissions required for this task. Explanation of Options: A) Remove User1 from the Security Reader and Reader roles for Subscription1. - Reasoning: Removing User1 from these roles would only restrict their access at the subscription level. It does not provide them the capability to assign roles to others on VNet1. - Why Rejected: Removing User1's existing roles does not directly grant the ability to assign the Reader role on VNet1. In fact, removing the Reader role would limit their access even further. B) Assign User1 the User Access Administrator role for VNet1. - Reasoning: The User Access Administrator role allows the user to manage access to resources, including the ability to assign roles (like Reader) to others on that resource. This is the key permission needed to enable User1 to assign roles to other users on VNet1. - Why Accepted: This role is specifically designed for managing role assignments and would grant User1 the necessary permissions to assign the Reader role on VNet1. C) Assign User1 the Network Contributor role for VNet1. - ... Author: Andrew · Last updated Jun 25, 2026 |
You have an Azure Active Directory (Azure AD) tenant named contosocloud.onmicrosoft.com. Your company has a public DNS zone for contoso.com. You add contoso.com as a custom domain name to Azure AD. You need to...To verify a custom domain name in Azure Active Directory (Azure AD), you need to create a specific DNS record type that Azure can use to confirm ownership of the domain. Here's an analysis of each option: Explanation of Options: A) MX (Mail Exchange) record - Reasoning: An MX record is typically used to route email traffic by specifying the mail servers for a domain. During domain verification in Azure AD, Azure provides an MX record with a unique value that you need to add to your domain's DNS settings. This allows Azure to verify that you own the domain. - Why Selected: The MX record is commonly used for domain verification because it confirms ownership of the domain and is relatively easy to implement. Azure AD expects to find this record during the verification process. B) NSEC (Next Secure) record - Reasoning: An NSEC record is part of DNSSEC (DNS Security Extensions) and is used to provide cryptographic proof of non-existence for DNS records. This is related to DNS security, not domain verification in Azure AD. - Why Rejected: NSEC records are not used for domain veri... Author: Matthew · Last updated Jun 25, 2026 |
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure Directory (Azure AD) tenant named Adatum and an Azure Subscription named Subscription1. Adatum contains a group named Developers. Subscription1 contain...To assess whether assigning the DevTest Labs User role to the Developers group allows them to create Azure Logic Apps in the Dev resource group, we need to understand the permissions provided by this role and whether it includes the ability to create Logic Apps. Explanation of the DevTest Labs User role: The DevTest Labs User role is primarily designed for managing DevTest Labs resources, which are specific to environments for development and testing. This role provides access to DevTest Labs functionality, such as managing VMs within a DevTest Lab, but it does not grant permissions for managing other Azure resources like Logic Apps. ... Author: Akash · Last updated Jun 25, 2026 |
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure Directory (Azure AD) tenant named Adatum and an Azure Subscription named Subscription1. Adatum contains a group named Developers. Subscription1 contain...To determine if assigning the Logic App Operator role to the Developers group allows them to create Azure Logic Apps in the Dev resource group, we need to understand the Logic App Operator role and its permissions. Explanation of the Logic App Operator role: The Logic App Operator role is designed to provide read-only access to Azure Logic Apps. Users with this role can monitor, view, and run Logic Apps, but they cannot create or modify Logic Apps. Required Permissions for Creating Logic Apps: To create Azure Logic Apps, a user needs permissions that allow them to manage r... Author: Sofia · Last updated Jun 25, 2026 |
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure Directory (Azure AD) tenant named Adatum and an Azure Subscription named Subscription1. Adatum contains a group named Developers. Subscripti...To assess whether assigning the Contributor role to the Developers group on the Dev resource group allows them to create Azure Logic Apps, we need to understand the Contributor role and the required permissions for creating Logic Apps. Explanation of the Contributor role: The Contributor role is a built-in Azure role that provides users with the permissions to manage all resources within a resource group, except for managing access (i.e., role-based access control). This includes the ability to create, modify, and delete resources like Logic Apps. Required Permissions for Creating L... Author: Charlotte · Last updated Jun 25, 2026 |
DRAG DROP - You have an Azure subscription that is used by four departments in your company. The subscription contains 10 resource groups. Each department uses resources in several resource groups. You need to send a report to the finance department. The report must detail the costs for each department. Which three actions should you perform in ...Author: Emma Brown · Last updated Jun 25, 2026 |
You have an Azure subscription named Subscription1 that contains an Azure Log Analytics workspace named Workspace1. You need to view the error events fr...To view the error events from a table named Event in the Azure Log Analytics workspace Workspace1, we need to analyze the correct query syntax and approach to querying Log Analytics data. Explanation of Options: A) Get-Event Event | where {$_.EventType =3D=3D "error"} - Reasoning: This option uses PowerShell syntax (`Get-Event`) rather than the Kusto Query Language (KQL), which is used in Azure Log Analytics. The `where` clause is using PowerShell syntax (comparison operator `==`), but this is not compatible with Log Analytics queries, which rely on KQL. - Why Rejected: This is not valid syntax for querying data in Azure Log Analytics. PowerShell queries are not used in the Log Analytics workspace. B) search in (Event) "error" - Reasoning: This query searches within the Event table for the term "error". However, it doesn’t specifically filter on the EventType column. It searches for the term "error" anywhere in the table, which could return broader results than just error events based on the EventType. - Why Rejected: This query does not specifically filter error events by their EventType, which is not the most efficient way to find error events. Searching for the term "error" may lead to br... Author: Maya · Last updated Jun 25, 2026 |
SNAPSHOT - You have an Azure subscription that contains a virtual network named VNET1 in the East US 2 region. A network interface named VM1-NI is connected to VNET1. You successfully deploy the following Azure Resource Manager template. For each of the following statements...Author: Maya · Last updated Jun 25, 2026 |
You have an Azure subscription named Subscription1. Subscription1 contains the resource groups in the following table. RG1 has a web app named WebApp1. WebApp1 is located...When you move WebApp1 from RG1 (resource group 1) to RG2 (resource group 2), the effect on the App Service plan and policies depends on a few key factors, including the region of the web app and the policies assigned to the respective resource groups. Key Factors to Consider: 1. App Service Plan Location: The App Service plan for a web app dictates where the web app is hosted. If WebApp1 is moved to a new resource group but the App Service plan remains in its original region, the web app stays in the same region as before unless specifically moved. 2. Resource Group Policies: The policies assigned to a resource group apply to the resources within it. When a resource is moved to a different resource group, the policy of the new resource group applies to the moved resource. Analysis of Each Option: A) The App Service plan for WebApp1 remains in West Europe. Policy2 applies to WebApp1. - Reasoning: When a web app is moved to a different resource group, the App Service plan does not move automatically. It remains in the same region (West Europe in this case) as the original location of the web app. Additionally, since WebApp1 was moved to RG2, the policy assigned to RG2 (which is Policy2) will apply to WebApp1. - Why Accepted: This is the correct answer because the App Service plan remains in West Europe, and the new resource group (RG2) applies its policy (Policy2) to WebApp1. B) The App Service plan for WebApp1 moves to ... Author: MysticJaguar44 · Last updated Jun 25, 2026 |
SNAPSHOT - You have an Azure subscription named Subscription1 that has a subscription ID of c276fc76-9cd4-44c9-99a7-4fd71546436e. You need to create a custom RBAC role named CR1 that meets the following requirements: * Can be assigned only to the resource groups in Subscription1 * Prevents the management of the access permissions for the resource groups * Allows the viewing, creating, modifying, and deleting of resources within the resource groups What should you sp...Author: NightmareDragon2025 · Last updated Jun 25, 2026 |
You have an Azure subscription. Users access the resources in the subscription from either home or from customer sites. From home, users must establish a point-to-site VPN to access the Azure resources. The users on the customer sites access the Azure resources by using site-to-site VPNs. You have a line-of-business-app named App1 that runs on several Azure virtual machine. The virtual machines run Windows Server 2016. You need to ensure that the connections to Ap...To address the requirement of spreading connections to App1 across several Azure virtual machines (VMs), let's evaluate each option based on the scenario: A) An internal load balancer - Explanation: An internal load balancer (ILB) distributes traffic among virtual machines (VMs) within a virtual network (VNet) in Azure. It’s often used for distributing traffic for applications hosted within a private network or requiring internal access. Since the users are accessing the resources either through point-to-site or site-to-site VPNs (both private), an internal load balancer would be ideal for this scenario as it ensures traffic is distributed across the VMs in the internal network. - Why it works: This solution is useful when the resources are accessed only within a private VNet and needs to balance traffic across backend VMs. - Conclusion: This option is correct for the given scenario. B) A public load balancer - Explanation: A public load balancer distributes incoming traffic from the internet to backend resources (typically VMs or other services). Since users are accessing resources either via point-to-site or site-to-site VPN (which are internal), there would be no need to expose traffic to the public internet. - Why it's rejected: A public load balancer would typically be used for internet-facing applications, not for VPN-based connections where the resources are accessed privately. Hence, this isn't the most suitable option. - Conclusion: This option is incorrect for the given scenario. C) An Azure Content Delivery Network (CDN) - Explanation: An Azure CDN is used for caching and delivering content (such as static files, images, videos, etc.) to users globally. It works by distributing content to edge nodes around the world to reduce latency and improve performance. It is not used for load balancing or distributing traffic to backend services like VMs running an application. - Why it's rejected: ... Author: Ravi Patel · Last updated Jun 25, 2026 |
You have an Azure subscription. You have 100 Azure virtual machines. You need to quickly identify underutilized virtual machines that can have their service ti...To identify underutilized virtual machines (VMs) in your Azure subscription, you need a tool that can help you assess the usage and performance of your VMs, so you can consider changing their service tier to a less expensive option. Let's evaluate each option: A) Monitor - Explanation: Azure Monitor collects and analyzes data about your resources and applications, offering performance monitoring, diagnostics, and log management. While it can help you gather detailed metrics about the performance of your VMs, it doesn't specifically offer recommendations for cost optimization based on underutilization. - Why it's rejected: While Azure Monitor provides data, it does not provide cost-saving recommendations such as identifying underutilized resources or suggesting a tier change for VMs. - Conclusion: This option is incorrect for identifying underutilized VMs and recommending tier changes. B) Advisor - Explanation: Azure Advisor is a personalized cloud consultant that analyzes your resource configurations and usage telemetry to provide best practices recommendations. One of its key features is recommending cost-saving actions, including identifying underutilized resources such as VMs and suggesting changes to a less expensive service tier or size. - Why it works: Azure Advisor specifically provides recommendations for underutilized VMs based on performance data and can suggest resizing or changing the tier for cost optimization. It’s the most efficient tool for identifying opportunities to reduce cos... Author: Noah · Last updated Jun 25, 2026 |
SNAPSHOT - You have an Azure Active Directory (Azure AD) tenant. You need to create a conditional access policy that requires all users to use multi-factor authentication when they access the Azure portal. Which three settings should you configure? To answer,...Author: Liam · Last updated Jun 25, 2026 |
You have an Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com. The User administrator role is assigned to a user named Admin1. An external partner has a Microsoft account that uses the [email protected] sign in. Admin1 attempts to invite the external partner to sign in to the Azure AD tenant and receives the following error message: `Unable to invite user user1@o...In this scenario, Admin1 is trying to invite an external partner to sign in to the Azure AD tenant, but they encounter a "Generic authorization exception" error. This likely indicates a restriction in the external user invitation process due to Azure AD's external collaboration settings. Let's evaluate each option: A) From the Users settings blade, modify the External collaboration settings - Explanation: The External collaboration settings in Azure AD control whether users in the directory can invite external users to join the tenant, and it allows admins to configure restrictions on who can invite external users. If the external collaboration settings are configured to block invitations or restrict external invites to certain domains, Admin1 might not be able to invite the external partner ([email protected]). Modifying these settings would allow Admin1 to invite users from external domains. - Why it works: Adjusting the external collaboration settings enables or allows invitations from external users, which would resolve the authorization issue Admin1 is facing. - Conclusion: This option is correct because it addresses the specific problem with inviting external users to the Azure AD tenant. B) From the Custom domain names blade, add a custom domain - Explanation: Adding a custom domain in Azure AD allows the organization to verify its domain names and configure them for email, authentication, and other identity-related functions. However, this is not related to enabling or blocking external invitations. - Why it's rejected: Adding a custom domain does not directly address the issue of inviting external users or modifying the external collaboration settings. The issue at hand is more about permission settings for external invi... Author: Stella · Last updated Jun 25, 2026 |
You have an Azure subscription linked to an Azure Active Directory tenant. The tenant includes a user account named User1. You need to ensure that User1 can ass...To ensure that User1 can assign a policy to the tenant root management group, let's review each option carefully based on the specific task at hand: A) Assign the Owner role for the Azure Subscription to User1, and then modify the default conditional access policies. - Explanation: The Owner role for an Azure subscription gives full control over the resources within the subscription but does not automatically grant permission to manage or assign policies at the tenant root management group level. Furthermore, modifying conditional access policies typically requires permissions at the Azure AD level, not just at the subscription level. - Why it’s rejected: This option does not grant the necessary permissions for User1 to assign a policy to the tenant root management group. The Owner role in the Azure subscription allows control within the subscription, but it doesn’t extend to managing policies at the management group or tenant level. - Conclusion: This option is incorrect because it doesn't address the management group or tenant root policy assignment. B) Assign the Owner role for the Azure subscription to User1, and then instruct User1 to configure access management for Azure resources. - Explanation: The Owner role in an Azure subscription grants full access to manage the subscription resources, but this does not directly provide the ability to assign policies at the tenant root management group level. Configuring access management for Azure resources refers to managing resources within the subscription, not assigning policies to management groups. - Why it’s rejected: While User1 would have full control over the subscription's resources, they would not have the permissions to assign policies at the tenant root management group level unless specifically granted. Azure policies at this level require roles like Policy Contributor or Management Group Contributor. - Conclusion: This option is incorrect because it doesn't provide the necessary permissions to assign a policy at the management group level. C) A... Author: Grace · Last updated Jun 25, 2026 |
SNAPSHOT - You have an Azure Active Directory (Azure AD) tenant named adatum.com. Adatum.com contains the groups in the following table. You create two user accounts that are configured as shown in the following table. Of which groups are User1 and User2 members? To a...Author: Sofia2021 · Last updated Jun 25, 2026 |
SNAPSHOT - You have a hybrid deployment of Azure Active Directory (Azure AD) that contains the users shown in the following table. You need to modify the JobTitle and UsageLocation attributes for the users. For which users can you modify the attributes from Azure AD? To ...Author: Manish · Last updated Jun 25, 2026 |
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You need to ensure that an Azure Active Directory (Azure AD) us...Understanding the Scenario: The goal is to ensure that Admin1 can enable Traffic Analytics for an Azure subscription. To enable Traffic Analytics, specific permissions are required to configure and access network monitoring data, and this task generally involves working with Network Watcher and associated features, like Traffic Analytics. Analysis of the Solution: The solution suggests assigning the Network Contributor role at the subscription level to Admin1. A) Yes - Explanation: The Network Contributor role in Azure allows users to manage network resources, such as virtual networks, network interfaces, load balancers, and network security groups (NSGs). Importantly, the Network Contributor role also grants permissions to manage Network Watcher, which is the service used to configure and enable Traffic Analytics. - Why it works: Traffic Analytics is built on Network Wat... Author: Maya2022 · Last updated Jun 25, 2026 |
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You need to ensure that an Azure Active Directory (Az...Understanding the Scenario: The goal is to ensure that Admin1 is assigned the required role to enable Traffic Analytics for an Azure subscription. Traffic Analytics requires specific permissions related to managing Network Watcher, which is the service used for monitoring network traffic and enabling analytics. Analysis of the Solution: The solution suggests assigning the Owner role at the subscription level to Admin1. A) Yes - Explanation: The Owner role at the subscription level grants full permissions across all resources in the subscription, including the ability to configure Network Watcher and enable Traffic Analytics. While the Owner role is broader than necessary for this task (it grants all permissions, including the ability to manage resources across the entire subscription), it does meet the requirement of enabling Traffic Analyt... Author: Max · Last updated Jun 25, 2026 |
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You need to ensure that an Azure Active Directory (Az...Understanding the Scenario: The goal is to ensure that Admin1 is assigned the required role to enable Traffic Analytics for an Azure subscription. Traffic Analytics requires the ability to configure Network Watcher and manage network resources to gather traffic data and perform analytics. Analysis of the Solution: The solution suggests assigning the Reader role at the subscription level to Admin1. A) Yes - Explanation: The Reader role in Azure grants read-only access to resources. While this allows a user to view resource configurations and their properties, it does not provide the ability to modify configurations or enable features like Traffic Analytics, which require permissions to manage resources. - Why it's rejected: Enabling Traffic Analytics requires permissions to manage Network Watcher and configure analytics settings, which is beyond the scope of the Reader role. Reader role only allo... Author: FrostFalcon88 · Last updated Jun 25, 2026 |
You have an Azure subscription that contains a user named User1. You need to ensure that User1 can deploy virtual machines and manage virtual networks. The solution must use the principle of leas...To determine which Azure role to assign to User1, we need to consider the principle of least privilege, which ensures that User1 has only the minimum permissions necessary to accomplish the task. Let's break down the options and analyze them: A) Owner - Permissions: The Owner role has full access to all resources in the Azure subscription, including the ability to assign roles to others. - Reason for Rejection: This is excessive and violates the principle of least privilege because User1 would have far more permissions than necessary to just deploy virtual machines and manage virtual networks. - Scenario: The Owner role should be used when someone needs full administrative control, including role assignments. B) Virtual Machine Contributor - Permissions: The Virtual Machine Contributor role allows the user to create, manage, and delete virtual machines, but it does not give permissions to manage virtual networks or other resources. - Reason for Rejection: While it allows managing virtual machines, it doesn't cover virtual networks, which User1 also needs to manage. Therefore, this role does not fulfill the full requirement of the task. - Scenario: This would be suitable if only virtual machine management was needed, but in this case, network management is also requir... Author: Samuel · Last updated Jun 25, 2026 |
SNAPSHOT - You have an Azure Active Directory (Azure AD) tenant that contains three global administrators named Admin1, Admin2, and Admin3. The tenant is associated to an Azure subscription. Access control for the subscription is configured as shown in the Access control exhibit. (Click the Access Control tab.) You sign in to the Azure portal as Admin1 and configure the tenant as shown in the Tenant exhibit. (Cl...Author: Kai · Last updated Jun 25, 2026 |
You have an Azure subscription named Subscription1 that contains an Azure virtual machine named VM1. VM1 is in a resource group named RG1. VM1 runs services that will be used to deploy resources to RG1. You need to ensure that a service ...To ensure that a service running on VM1 can manage resources in RG1 using the identity of VM1, we need to leverage Managed Identity for VM1. This allows the service running on VM1 to authenticate and interact with Azure resources securely, without using credentials or secrets. Let's go through each option and evaluate it: A) From the Azure portal, modify the Managed Identity settings of VM1 - Explanation: Enabling a Managed Identity for VM1 will allow it to authenticate against Azure services. Once the identity is enabled, it can be granted permissions via Azure Role-Based Access Control (RBAC) to access and manage resources in RG1. - Reason for Selection: This is the first step needed to set up the mechanism by which the service running on VM1 can interact with Azure resources. Enabling Managed Identity provides the service with an identity that can be used to access other Azure resources securely. - Scenario: This option is necessary when you want VM1 to have its own identity for authentication purposes, enabling secure access to resources in the subscription. B) From the Azure portal, modify the Access control (IAM) settings of RG1 - Explanation: Modifying the Access control (IAM) settings of RG1 allows you to assign roles to users, groups, or managed identities (like VM1). However, this is a second step in the process after enabling the Managed Identity on VM1. - Reason for Rejection: This option alone won't enable VM1 to manage resources in RG1. The identity for VM1 needs to be enabled first before pe... Author: Aarav · Last updated Jun 25, 2026 |
You have an Azure subscription that contains a resource group named TestRG. You use TestRG to validate an Azure deployment. TestRG contains the following ...To delete a resource group in Azure, all resources within the resource group must be deletable. This means that we need to ensure there are no configurations, locks, or dependencies that would prevent the deletion of the resources. Let’s analyze each option: A) Modify the backup configurations of VM1 and modify the resource lock type of VNET1 - Explanation: This option suggests modifying the backup configurations of VM1 and the resource lock on VNET1. However, the backup configurations do not directly block resource deletion. The resource lock is the main concern for preventing the deletion of resources. - Reason for Rejection: While backup configurations are important, they don't directly prevent deletion of the resource group. Additionally, the backup configuration itself wouldn't prevent deleting VM1. The resource lock on VNET1 needs to be removed to ensure it can be deleted, but the backup configuration part is unnecessary in this case. - Scenario: This option is partially correct in addressing the lock, but it introduces an unnecessary step regarding backup configurations. B) Remove the resource lock from VNET1 and delete all data in Vault1 - Explanation: Resource locks are used to prevent the accidental deletion or modification of resources. If VNET1 has a resource lock, it will need to be removed before you can delete it. Vault1 might be a key vault or backup vault, and if it contains critical data, you would typically need to delete the data before deleting the vault itself. - Reason for Selection: This option addresses both critical tasks: 1. Removing the resource lock on VNET1... Author: Ravi Patel · Last updated Jun 25, 2026 |
You have an Azure DNS zone named adatum.com. You need to delegate a subdomain named research.adatum.com to a di...To delegate a subdomain (such as research.adatum.com) to a different DNS server, the correct approach involves creating a NS (Name Server) record within the parent DNS zone (adatum.com) that points to the DNS servers responsible for the research.adatum.com subdomain. Let’s analyze each option: A) Create an NS record named research in the adatum.com zone - Explanation: An NS record is used to delegate a subdomain to another set of authoritative DNS servers. By creating an NS record named research in the adatum.com zone, you would be delegating the management of research.adatum.com to another DNS server (or set of servers) in Azure, which is the correct approach to delegating the subdomain. - Reason for Selection: This option is the correct one because creating an NS record allows you to delegate a subdomain (like research.adatum.com) to other DNS servers, which is exactly what is needed in this scenario. - Scenario: This would be used when you need to delegate a subdomain to different DNS servers (in this case, for the subdomain research.adatum.com). B) Create a PTR record named research in the adatum.com zone - Explanation: A PTR record is used for reverse DNS lookups. It maps an IP address to a domain name, not for delegating subdomains to other DNS servers. - Reason for Rejection: This option is not applicable because PTR records are for reverse DNS lookups and do not allow for subdomain delegation. It doesn’t address the delegation of a subdomain to another DNS server. - Scenario: This ... Author: Ethan Smith · Last updated Jun 25, 2026 |
DRAG DROP - You have an Azure Active Directory (Azure AD) tenant that has the contoso.onmicrosoft.com domain name. You have a domain name of contoso.com registered at a third-party registrar. You need to ensure that you can create Azure AD users that have names containing a suffix of @contoso.com. Which three actions should you perform in se...Author: Sofia2021 · Last updated Jun 25, 2026 |
You have an Azure subscription named Subscription1 that contains an Azure Log Analytics workspace named Workspace1. You need to view the error events fr...To view error events from the Event table in an Azure Log Analytics workspace, we need to use the correct query language, which is Kusto Query Language (KQL), specific to Azure Monitor and Log Analytics. Let's break down each option: A) Get-Event Event | where {$_.EventType =3D=3D "error"} - Explanation: This query appears to be written in PowerShell, not Kusto Query Language (KQL), which is what Azure Log Analytics uses for querying data. The `Get-Event` cmdlet is a PowerShell command, and while it could retrieve event data in PowerShell, it is not valid in the context of Log Analytics. - Reason for Rejection: This is not the correct query language for Azure Log Analytics, as it's written in PowerShell syntax rather than KQL. B) Event | search "error" - Explanation: The `search` command in KQL is used to search across all columns for a specific string, which in this case is `"error"`. While this would return records containing the string "error," it is not as efficient or specific as filtering the `EventType` directly. - Reason for Rejection: Although this query will find occurrences of "error," it is not ideal because it does not specifically target the `EventType` column. It is a broad search across all columns and may not be as efficient or accurate when dealing with structured data where errors are categorized by the `EventType` field. C) select... Author: John · Last updated Jun 25, 2026 |
You have a registered DNS domain named contoso.com. You create a public Azure DNS zone named contoso.com. You need to ensure that records created in the con...To ensure that the records created in the Azure DNS zone (contoso.com) are resolvable from the internet, the key step involves ensuring that the authoritative DNS servers for contoso.com are correctly defined. This is achieved by configuring the NS (Name Server) records in the domain registrar to point to the Azure DNS servers. Let's go through each option: A) Create NS records in contoso.com - Explanation: NS records within the contoso.com Azure DNS zone are used to indicate the name servers for that zone, but they are not enough by themselves to ensure resolvability from the internet. The NS records in the Azure DNS zone indicate which name servers are authoritative for the domain, but the registrar needs to be aware of them for global resolution. - Reason for Rejection: While NS records in the Azure DNS zone are needed, they must be reflected at the domain registrar to ensure that the internet can resolve the records in the contoso.com zone. B) Modify the SOA record in the DNS domain registrar - Explanation: The SOA (Start of Authority) record defines the start of authority for the DNS zone and provides key information about the zone's primary DNS server. However, the SOA record alone doesn't impact the ability of external resolvers to access the records in your Azure DNS zone. - Reason for Rejection: Modifying the SOA record at the domain registrar would not make the Azure DNS zone re... Author: StarryEagle42 · Last updated Jun 25, 2026 |
SNAPSHOT - You have an Azure subscription that contains a storage account named storage1. The subscription is linked to an Azure Active Directory (Azure AD) tenant named contoso.com that syncs to an on-premises Active Directory domain. The domain contains the security principals shown in the following table. In Azure AD, you create a user named User2. The storage1 account contains a file share named share1 and has the f...Author: Lucas Carter · Last updated Jun 25, 2026 |
SNAPSHOT - You have an Azure subscription named Subscription1 that contains a virtual network VNet1. You add the users in the following table. Which user can perform each configuration? To answer, select the approp...Author: William · Last updated Jun 25, 2026 |