NEW QUESTION 1
You have an Azure subscription for used for testing and development purposes only. The subscription contains Azure virtual machines that unmanaged, standard hard disk drives (HDD).
You need to recommend a recovery strategy for the virtual machines if an Azure region fails for a sustained period. The recovery time objective WTO) can be up to seven days. The solution must minimize costs.
What should you include in the recommendation?

• A. Store the disks in a Standard_LRS storage accoun
• B. Configure Azure site Recover
• C. IF a failure occurs, initiate a manual failure over.
• D. Store the disks in a Standard_GRS storage accoun
• E. Configure Azure Recover
• F. If a failure occurs, initiate a manual failover.
• G. Store the disks in a Standrs_LRS storage accoun
• H. If a disaster occurs, manually create the virtual machines by used Azure Rsources Mnaager templates.
• I. Store the disks in a Standard_GRS storage accoun
• J. If a disaster occurs, manually create the virtual machines by Azure Resource Manager templates.

Answer: B

NEW QUESTION 2
You are designing a data protection strategy for Azure virtual machines. All the virtual machines are in the Standard tier and use managed disks.
You need to recommend a solution that meets the following requirements:
The use of encryption keys is audited.
All the data is encrypted at rest always.
You manage the encryption keys, not Microsoft.
What should you include in the recommendation?

• A. BitLocker Drive Encryption (BitLocker)
• B. Azure Storage Service Encryption
• C. client-side encryption
• D. Azure Disk Encryption

Answer: D

Explanation: References:
https://docs.microsoft.com/en-us/azure/security/azure-security-disk-encryption-overview

NEW QUESTION 3
Your company has three branch offices and an Azure subscription. Each branch office contains a Hyper-V host that hosts application servers.
You need to recommend a storage solution for the branch offices. The solution must ensure that the application servers can connect to a central storage device by using iSCSI connections. Data saved to the iSCSI storage device from the application servers must be uploaded to Azure automatically.
Which components should you include in the recommendation? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Answer:

Explanation: References:
https://docs.microsoft.com/en-us/azure/storsimple/storsimple-ova-overview

NEW QUESTION 4
You are planning an Azure solution that will host production database for a high-performance application. The solution will include the following components:
Two virtual machines that will run Microsoft SQL Server 2021, will be deployed to different data centers in the same Azure region, and will be part of an Always On availability group.
SQL server data that will be backed up by using the Automated Backup feature of the SQL Server IassS Agent Extension (SQLIaaSExtension)
You identify the storage priorities for various data type as shown in the following table.

Which storage type should you recommend for each data type? To answer, drag the appreciate storage types to the correct data types. Each storage type may be used once, more than once, or not at all. You may need to drag the spilt bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

NEW QUESTION 5
Note: This question is part of series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure subscription that contains a resource group named RG1.
You create an Azure Active Directory (Azure AD) group named ResearchUsers that contains the user accounts of all researchers.
You need to recommend a solution that meets the following requirements:
The researchers must be allowed to create Azure virtual machines.
The researchers must only be able to create Azure virtual machines by using specific Azure Resource
Manager templates.
Solution: Create a lab in Azure DevTest Lab. Configure the DevTest Labs settings. Assign the DevTest Labs User role to the ResearchUsers group.
Does this meet the goal?

• A. Yes
• B. No

Answer: B

NEW QUESTION 6
You have 20 Azure virtual machines that run windows Server 2021 based on a custom virtual machine image. Each virtual machine an instance of a VSS-capable app that was developed in-house. Each instance is accessed by public endpoint . Each instance separate database. The average database size is 200 GB.
You need to design a disaster recovery solution for individual instances.
• Provide a recovery objective time object (RTO] of six hours.
• Provide a recovery point objective (RPO) at eight hours.
• Support recovery to a different Azure region.
• Support VSS- based backups.
• Minimize VSS-based backups.
What should you include in the recommendation? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point

Answer:

Explanation:

NEW QUESTION 7
A company named Contoso Ltd., has a single-domain Active Directory forest named contoso.com.
Contoso is preparing to migrate all workloads to Azure. Contoso wants users to use single sign-on (SSO) when they access cloud-based services that integrate with Azure Active Directory (Azure AD).
You need to identify any objects in Active Directory that will fail to synchronize to Azure AD due to formatting issues. The solution must minimize costs.
What should you include in the solution?

• A. Azure Advisor
• B. Microsoft Office 365 IdFix
• C. Azure AD Connect Health
• D. Password Export Server version 3.1 (PES v3.1) in Active Directory Migration Tool (ADMT)

Answer: B

NEW QUESTION 8
You need to recommend a solution to meet the database retention requirement. What should you recommend?

• A. Configure a long-term retention policy for the database.
• B. Configure Azure Site Recovery.
• C. Configure geo replication of the database.
• D. Use automatic Azure SQL Database backups.

Answer: A

NEW QUESTION 9
You have the network topology shown in the following exhibit.

You have a user-defined route that has a default route of 0.0.0.0/0 and the next hop set to the network virtual appliance.
You configure the Azure Storage account to use virtual network service endpoints.
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Answer:

Explanation: References:
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-udr-overview

NEW QUESTION 10
You deploy several Azure SQL Database instances.
You plan to configure the Diagnostics settings on the databases as shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

Answer:

Explanation: In the exhibit, the SQLInsights data is configured to be stored in Azure Log Analytics for 90 days. However, the question is asking for the “maximum” amount of time that the data can be stored which is 730 days.

NEW QUESTION 11
You plan to deploy logical Azure SQL Database servers to The East US Azure region and the Wen US Azure region. Each server will contain 20 database accessed by a different user who reads in a different on premises location. The databases will be configured to use active geo-replication.
You need to recommend a solution that meets the following requirement!;
• Restricts user access to each database
• Restricts network access to each database based on each user's respective location
• Ensures that the databases remain accessible from down applications if the local Azure region fails
What should you include in the recommendation? To answer, select the appropriate options m the answer area NOTE: Each correct selection is worth one point.

Answer:

Explanation:


Topic 3, Case Study B
Overview
Contoso,Ltd is a US-base finance service company that has a main office New York and an office in San Francisco.
Payment Processing Query System
Contoso hosts a business critical payment processing system in its New York data center. The system has three tiers a front-end web app a middle -tier API and a back end data store implemented as a Microsoft SQL Server 2014 database All servers run Windows Server 2012 R2.
The front -end and middle net components are hosted by using Microsoft Internet Inform-non Services (IK) The application rode is written in C# and middle- tier API uses the Entity framework to communicate the SQL Server database. Maintenance of the database e performed by using SQL Server Ago-
The database is currently J IB and is not expected to grow beyond 3 TB.
The payment processing system has the following compliance related requirement
• Encrypt data in transit and at test. Only the front-end and middle-tier components must be able to access the encryption keys that protect the date store.
• Keep backups of the two separate physical locations that are at last 200 miles apart and can be restored for op to seven years.
• Support blocking inbound and outbound traffic based on the source IP address, the description IP address, and the port number
• Collect Windows security logs from all the middle-tier servers and retain the log for a period of seven years,
• Inspect inbound and outbound traffic from the from-end tier by using highly available network appliances.
• Only allow all access to all the tiers from the internal network of Contoso.
Tape backups ate configured by using an on-premises deployment or Microsoft System Center Data protection Manager (DPMX and then shaped ofsite for long term storage
Historical Transaction Query System
Contoso recently migrate a business-Critical workload to Azure. The workload contains a NET web server for querying the historical transaction data residing in azure Table Storage. The NET service is accessible from a client app that was developed in-house and on the client computer in the New Your office. The data in the storage is 50 GB and is not except to increase.
Information Security Requirement
The IT security team wants to ensure that identity management n performed by using Active Directory. Password hashes must be stored on premises only.
Access to all business-critical systems must rely on Active Directory credentials. Any suspicious authentication attempts must trigger multi-factor authentication prompt automatically Legitimate users must be able to authenticate successfully by using multi-factor authentication.
Planned Changes
Contoso plans to implement the following changes:
* Migrate the payment processing system to Azure.
* Migrate the historical transaction data to Azure Cosmos DB to address the performance issues.
Migration Requirements
Contoso identifies the following general migration requirements:
Infrastructure services must remain available if a region or a data center fails. Failover must occur without any administrative intervention
• Whenever possible. Azure managed serves must be used to management overhead
• Whenever possible, costs must be minimized.
Contoso identifies the following requirements for the payment processing system:
• If a data center fails, ensure that the payment processing system remains available without any administrative intervention. The middle-tier and the web front end must continue to operate without any additional configurations-
• If that the number of compute nodes of the from -end and the middle tiers of the payment processing system can increase or decrease automatically based on CPU utilization.
• Ensure that each tier of the payment processing system is subject to a Service level Agreement (SLA) of 9959 percent availability
• Minimize the effort required to modify the middle tier API and the back-end tier of the payment processing system.
• Generate alerts when unauthorized login attempts occur on the middle-tier virtual machines.
• Insure that the payment processing system preserves its current compliance status.
• Host the middle tier of the payment processing system on a virtual machine.
Contoso identifies the following requirements for the historical transaction query system:
• Minimize the use of on-premises infrastructure service.
• Minimize the effort required to modify the .NET web service querying Azure Cosmos DB.
• If a region fails, ensure that the historical transaction query system remains available without any administrative intervention.
Current Issue
The Contoso IT team discovers poor performance of the historical transaction query as the queries frequently cause table scans.
Information Security Requirements
The IT security team wants to ensure that identity management is performed by using Active Directory. Password hashes must be stored on-premises only.
Access to all business-critical systems must rely on Active Directory credentials. Any suspicious authentication attempts must trigger a multi-factor authentication prompt automatically. legitimate users must be able to authenticate successfully by using multi-factor authentication.

NEW QUESTION 12
Your company identifies the following business continuity and disaster recovery objectives for virtual machines that host sales, finance, and reporting application in the company's on-premises data center.
•The finance application requires that data be retained for seven years. In the event ot a disaster, the application must be able to run from Azure. The recovery in objective (RTO) is 10 minutes,
• The reporting application must be able to recover point in-time data al a daily granularity. The RTO is eight hours.
•The sales application must be able to fail over to second on-premises data center.
You need to recommend which Azure services meet the business community and disaster recovery objectives. The solution must minimize costs.
What should you recommend for each application? To answer, drag the appropriate services to the correct application. Each service may be used owe. More than once not at an You may need to drag the spin bar between panes or scroll 10 view content.

Answer:

Explanation:

NEW QUESTION 13
You have 100 Microsoft SQL Server Integration Services (SSISJ packages that are configuted to use 10 on-premrees SQ1 Server databases as their destinations.
You plan to migrate the 10 on-premises databases to Azure SQL Database. You need to recommend a solution to host the SS1S packages in Azure.
The solution must ensure that the packages can target the SQL Database instances as the* destinations. What should you include m the recommendation?

• A. Azure Data Catalog
• B. SQL Server Migration Assistant (SSMS)
• C. Data Migration Assistant
• D. Azure Data Factory

Answer: A

NEW QUESTION 14
Note: This question is part of series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure subscription that contains a resource group named RG1.
You create an Azure Active Directory (Azure AD) group named ResearchUsers that contains the user accounts of all researchers.
You need to recommend a solution that meets the following requirements:
The researchers must be allowed to create Azure virtual machines.
The researchers must only be able to create Azure virtual machines by using specific Azure Resource Manager templates.
Solution: Create an Azure DevOps Project. Configure the DevOps Project settings. Does this meet the goal?

• A. Yes
• B. No

Answer: B

NEW QUESTION 15
You have an Azure subscription. The subscription contains Azure virtual machines that run Windows Server 2021 and Linux.
You need to use Azure Log Analytics design an alerting strategy for security-related events.
Which Log Analytics tables should you query? To answer, drag the appropriate tables to the correct log types. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

NEW QUESTION 16
You need to recommend a solution for the network configuration of the front-end tier of the payment processing.
What should you include in the recommendation?

• A. Azure Application Gateway
• B. Traffic Manager
• C. a Standard Load Balancer
• D. a Basic load Balancer

Answer: B

NEW QUESTION 17
You need to recommend a solution for configuring the Azure Multi-Factor Authentication (MFA) settings. What should you include in the recommendation? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Answer:

Explanation: References:
https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/howto-sign-in-risk-policy https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/howto-mfa-policy