Recent Posts

Posted in Microsoft Microsoft MS-500 microsoft ms-500 dumps microsoft ms-500 study guide Microsoft Role-based microsoft security ms-500 ms-500 dumps ms-500 exam questions MS-500 Microsoft 365 Security Administration ms-500 pdf

[Updated 2021] Get 13 free Microsoft MS-500 exam questions and answers

Successfully passing the Microsoft MS-500 exam to obtain certification makes it easy for you to become a top talent.

“Microsoft 365 Certified MS-500 contains many latest technologies:
implement and manage identity and access; implement and manage threat protection; implement and manage information protection; and manage governance and compliance features in Microsoft 365″

It is not a simple matter to obtain Microsoft 365 Certified MS-500 certification: first, you need to pay the exam fee of 165 dollars, secondly, you need to learn a lot of professional knowledge for the exam, and finally, you need to take the exam. This kind of process does not guarantee that you will pass the exam. Every year, many people cannot pass the exam smoothly!

I’m not trying to discourage everyone’s confidence, I just say that the Microsoft 365 Certified MS-500 exam is not easy!
So I share 13 valid Microsoft MS-500 exam questions for free to help you improve your skills and exam experience!
All the exam questions I shared are the latest updates! All MS-500 exam dumps come from Lead4pass.com!
Lead4pass will help you save a lot of money and help you pass the exam successfully for the first time! And we have the best exam credibility! You are not the first to need us!

The latest update of Microsoft MS-500 exam practice questions

The latest updated Microsoft MS-500 exam practice questions in October 2021 >> https://www.newxpass.com/microsoft-ms-500-dumps-update-with-pdf-and-vce-comes-from-lead4pass/

Table Of Content:

  1. Download Microsoft MS-500 exam pdf online
  2. Microsoft MS-500 exam video from Youtube
  3. The latest updated Microsoft MS-500 exam questions
  4. Microsoft MS-500 Exam Certification Coupon Code 2021

Microsoft MS-500 exam pdf online for free

Share the Microsoft MS-500 Dumps PDF for free From Lead4pass MS-500 Dumps part of the distraction collected on Google Drive shared by Lead4pass
https://drive.google.com/file/d/1DdSHWTkhVhTdK7pWIXvxIfVLgI0XcFmg/

[Latest update] Latest Lead4pass MS-500 Youtube

Share the latest Microsoft MS-500 exam practice questions and answers for free from Led4Pass Dumps viewed online by Youtube Videos

Microsoft 365 Certified MS-500 exam question and answer online practice exam from Lead4pass

QUESTION 1
You have a Microsoft 365 E5 subscription.
From Microsoft Azure Active Directory (Azure AD), you create a security group named Group1. You add 10 users to
Group1.
You need to apply app enforced restrictions to the members of Group1 when they connect to Microsoft Exchange
Online from non-compliant devices, regardless of their location.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area: microsoft ms-500 certification exam questions q1

Correct Answer:

microsoft ms-500 certification exam questions q1-1

Reference: https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/app-based-conditional-access

QUESTION 2
You have a Microsoft 365 subscription that uses a default domain name of fabrikam.com. You create a safe links policy,
as shown in the following exhibit.microsoft ms-500 certification exam questions q2

Which URL can a user safely access from Microsoft Word Online?
A. fabrikam.phishing.fabrikam.com
B. malware.fabrikam.com
C. fabrikam.contoso.com
D. www.malware.fabrikam.com
Correct Answer: D
References: https://docs.microsoft.com/en-us/office365/securitycompliance/set-up-a-custom-blocked-urls-list-wtih-atp

QUESTION 3
You have a Microsoft 365 subscription.
You have a Microsoft SharePoint Online site named Site1. The files in Site1 are protected by using Microsoft Azure
Information Protection.
From the Security and Compliance admin center, you create a label that designates personal data.
You need to auto-apply the new label to all the content in Site1.
What should you do first?
A. From PowerShell, run Set-ManagedContentSettings.
B. From PowerShell, run Set-ComplianceTag.
C. From the Security and Compliance admin center, create a Data Subject Request (DSR).
D. Remove Azure Information Protection from the Site1 files.
Correct Answer: D
References: https://docs.microsoft.com/en-us/office365/securitycompliance/apply-labels-to-personal-data-in-office-365

QUESTION 4
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not
appear in the review screen.
You have a Microsoft 365 subscription that contains 1,000 user mailboxes.
An administrator named Admin1 must be able to search for the name of a competing company in the mailbox of a user
named User5.
You need to ensure that Admin1 can search the mailbox of User5 successfully. The solution must prevent Admin1 from
sending email messages as User5.
Solution: You modify the privacy profile, and then create a Data Subject Request (DSR) case.
Does this meet the goal?
A. Yes
B. No
Correct Answer: B

QUESTION 5
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not
appear in the review screen.
You have a Microsoft 365 subscription that contains 1,000 user mailboxes.
An administrator named Admin1 must be able to search for the name of a competing company in the mailbox of a user
named User5.
You need to ensure that Admin1 can search the mailbox of User5 successfully. The solution must prevent Admin1 from
sending email messages as User5.
Solution: You start a message trace, and then create a Data Subject Request (DSR) case.
Does this meet the goal?
A. Yes
B. No
Correct Answer: B
References: https://docs.microsoft.com/en-us/exchange/policy-andcompliance/ediscovery/ediscovery?view=exchserver-2019

QUESTION 6
Note: This question is part of series of questions that present the same scenario. Each question in the series contains a
unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while
others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not
appear in the review screen.
You have a Microsoft 365 E5 subscription that is associated with a Microsoft Azure Active Directory (Azure AD) tenant
named contoso.com.
You use Active Directory Federation Services (AD FS) to federate on-premises Active Directory and the tenant. Azure
AD Connect has the following settings:
1.
Source Anchor: objectGUID
2.
Password Hash Synchronization: Disabled
3.
Password writeback: Disabled
4.
Directory extension attribute sync: Disabled
5.
Azure AD app and attribute filtering: Disabled
6.
Exchange hybrid deployment: Disabled
7.
User writeback: Disabled
You need to ensure that you can use leaked credentials detection in Azure AD Identity Protection.
Solution: You modify the Source Anchor settings.
Does that meet the goal?
A. Yes
B. No
Correct Answer: B

QUESTION 7
You need to ensure that a user named Allan Deyoung receives incident reports when email messages that contain data
covered by the U.K. Data Protection Act are sent outside of your organization.
To complete this task, sign in to the Microsoft 365 admin center.
Correct Answer: See below.
1.
In the Security and Compliance Center > left navigation > Data loss prevention > Policy > + Create a policy.
2.
Choose the U.K. Data Protection Act template > Next.
3.
Name the policy > Next.
4.
Choose All locations in Office 365 > Next.
5.
At the first Policy Settings step just accept the defaults,
6.
After clicking Next, you\\’ll be presented with an additional Policy Settings page
Deselect the Show policy tips to users and send them an email notification option.
Select the Detect when content that\\’s being shared contains an option, and configure the number instances to be 10.
Select the Send incident reports in the email option.
Select the Choose what to include in the report and who receives it link to add Allan Deyoung as a recipient.
7.
> Next
8.
Select the option to turn on the policy right away > Next.
9.
Click Create to finish creating the policy.
Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/create-test-tune-dlppolicy?view=o365-worldwide https://docs.microsoft.com/en-us/microsoft-365/compliance/data-loss-preventionpolicies?view=o365-worldwide https://docs.microsoft.com/en-us/microsoft-365/compliance/what-the-dlp-policytemplates-include?view=o365-worldwide

QUESTION 8
SIMULATION You need to implement a solution to manage when users select links in documents or email messages
from Microsoft Office 365 ProPlus applications or Android devices. The solution must meet the following requirements:
1.
Block access to a domain named fabrikam.com
2.
Store information when the users select links to fabrikam.com To complete this task, sign in to the Microsoft 365 portal.
Correct Answer: See below.
You need to configure a Safe Links policy.
1.
Go to the Office 365 Security and Compliance admin center.
2.
Navigate to Threat Management > Policy > Safe Links.
3.
In the Policies that apply to the entire organization section, select Default, and then click the Edit icon.
4.
In the Block the following URLs section, type in *.fabrikam.com. This meets the first requirement in the question.
5.
In the Settings that apply to content except for the email section, untick the checkbox labeled Do not track when users click
safe links. This meets the second requirement in the question.
6.
Click Save to save the changes.
Reference: https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/set-up-atp-safelinkspolicies?view=o365-worldwide

QUESTION 9
You have a Microsoft 365 subscription.
A security manager receives an email message every time a data loss prevention (DLP) policy match occurs.
You need to limit alert notifications to actionable DLP events.
What should you do?
A. From the Security and Compliance admin center, modify the Policy Tips of a DLP policy.
B. From the Cloud App Security admin center, apply a filter to the alerts.
C. From the Security and Compliance admin center, modify the User overrides settings of a DLP policy.
D. From the Security and Compliance admin center, modify the matched activities threshold of an alert policy.
Correct Answer: D
References: https://docs.microsoft.com/en-us/office365/securitycompliance/alert-policies

QUESTION 10
You need to ensure that email messages in Exchange Online and documents in SharePoint Online are retained for
eight years.
To complete this task, sign in to the Microsoft Office 365 admin center.
Correct Answer: See below.
NB: For our purposes, the retention period will be 8 years.
For retaining email messages in Exchange Online:
Step 1: Create a retention tag
1.
Navigate to the Exchange Admin Center
2.
Navigate to Compliance management > Retention tags, and then click Add +
3.
Select one of the following options:
Applied automatically to the entire mailbox (default): Select this option to create a default policy tag (DPT). You can use
DPTs to create a default deletion policy and a default archive policy, which applies to all items in the mailbox.
Applied automatically to a specific folder: Select this option to create a retention policy tag (RPT) for a default folder
such as Inbox or Deleted Items.
Applied by users to items and folders (Personal): Select this option to create personal tags. These tags allow Outlook
and Outlook on the web (formerly known as Outlook Web App) users to apply archive or deletion settings to a message
or folders that are different from the settings applied to the parent folder or the entire mailbox.
4.
The New retention tag page title and options will vary depending on the type of tag you selected. Complete the
following fields:
Name: Enter a name for the retention tag. The tag name is for display purposes and doesn\\’t have any impact on the
folder or item a tag is applied to. Consider that the personal tags you provision for users are available in Outlook and
Outlook
on the web.
Apply this tag to the following default folder: This option is available only if you selected Applied automatically to a
specific folder.
Retention action: Select one of the following actions to be taken after the item reaches its retention period:
Delete and Allow Recovery: Select this action to delete items but allow users to recover them using the Recover Deleted
Items option in Outlook or Outlook on the web. Items are retained until the deleted item retention period configured for
the mailbox database or the mailbox user is reached.
Permanently Delete: Select this option to permanently delete the item from the mailbox database.
Move to Archive: This action is available only if you\\’re creating a DPT or a personal tag. Select this action to move
items to the user\\’s In-Place Archive.
Retention period: Select one of the following options:
Never: Select this option to specify that items should never be deleted or moved to the archive.
When the item reaches the following age (in days): Select this option and specify the number of days to retain items
before they\\’s moved or deleted. The retention age for all supported items except Calendar and Tasks is calculated
from
the date an item is received or created. The retention age for Calendar and Tasks items is calculated from the end date.
Comment: User this optional field to enter any administrative notes or comments. The field isn\\’t displayed to users.
Step 2: Create a retention policy
1.
Navigate to Compliance management > Retention policies, and then click Add +
2.
In New Retention Policy, complete the following fields:
Name: Enter a name for the retention policy.
Retention tags: Click Add + to select the tags you want to add to this retention policy.
A retention policy can contain the following tags:
One DPT with the Move to Archive action.
One DPT with the Delete and Allow Recovery or Permanently Delete actions.
One DPT for voice mail messages with the Delete and Allow Recovery or Permanently Delete actions.
One RPT per default folder such as Inbox to delete items.
Any number of personal tags.
Step 3: Apply a retention policy to mailbox users
After you create a retention policy, you must apply it to mailbox users. You can apply different retention policies to
a different sets of users.
1.
Navigate to Recipients > Mailboxes.
2.
In the list view, use the Shift or Ctrl keys to select multiple mailboxes.
3.
In the details pane, click More options.
4.
Under Retention Policy, click Update.
5.
In Bulk Assign Retention Policy, select the retention policy you want to apply to the mailboxes, and then click Save.
For retaining documents in SharePoint Online
Access Security and Compliance Admin Center
1.
Navigate to the Office 365 Admin Centers
2.
From the list of available Admin Centers, click on Security and Compliancemicrosoft ms-500 certification exam questions q10 microsoft ms-500 certification exam questions q10-1

How to create and publish a Retention Policy on a SharePoint site
Now that we are in the Security and Compliance Admin Center, we are ready to create and publish a Retention Policy
on a SharePoint site. Under Data Governance, click Retention

microsoft ms-500 certification exam questions q10-2

QUESTION 11
You need to ensure that a user named Alex Wilber can register for multifactor authentication (MFA).
To complete this task, sign in to the Microsoft Office 365 admin center.
Correct Answer: See below.
Enable Modern authentication for your organization
1.
To enable modern authentication, from the admin center, select Settings > Settings, and then in the Services tab,
choose Modern authentication from the list.
2.
Check the Enable modern authentication box in the Modern authentication panel.microsoft ms-500 certification exam questions q11

Enable multi-factor authentication for your organization
1.
In the admin center, select Users and Active Users.
2.
In the Active Users section, Click on multi-factor authentication.
3.
On the Multi-factor authentication page, select user if you are enabling this for one user or select Bulk Update to enable
multiple users.
4.
Click on Enable under Quick Steps.
5.
In the Pop-up window, Click on Enable Multi-Factor Authentication.
After you set up multi-factor authentication for your organization, your users will be required to set up two-step
verification on their devices.
Reference: https://docs.microsoft.com/en-us/microsoft-365/admin/security-and-compliance/set-up-multi-factorMS-authentication?view=o365-worldwide

QUESTION 12
HOTSPOT
You have a Microsoft 365 subscription.
You create a retention label named Label1 as shown in the following exhibit.microsoft ms-500 certification exam questions q12

You publish Label1 to SharePoint sites.
Use the drop-down menus to select the answer choice that completes each statement based on the information
presented in the graphic.
NOTE: Each correct selection is worth one point.
Hot Area:

microsoft ms-500 certification exam questions q12-1

Correct Answer:

microsoft ms-500 certification exam questions q12-2

References: https://docs.microsoft.com/en-us/office365/securitycompliance/labels

QUESTION 13
You have a Microsoft 365 subscription.
A user reports that changes were made to several files in Microsoft OneDrive.
You need to identify which files were modified by which users in the user\\’s OneDrive.
What should you do?
A. From the Azure Active Directory admin center, open the audit log
B. From the OneDrive admin center, select Device access
C. From Security and Compliance, perform an eDiscovery search
D. From Microsoft Cloud App Security, open the activity log
Correct Answer: D
Reference: https://docs.microsoft.com/en-us/cloud-app-security/activity-filters

Get the latest and complete Microsoft 365 Certified MS-500 exam dumps! Help you pass the first exam successfully! Click here for more…

Microsoft 365 Certified MS-500 Exam Certification Coupon Code 2021

microsoft coupon code

You have read my entire article, and I have already told you how to successfully pass the Microsoft 365 Certified MS-500 exam. You can choose: https://www.lead4pass.com/ms-500.html and go directly to the MS-500 Exam dumps channel! Get your key to successfully pass the exam!
Wish you be happy!

ps.
Get free Microsoft MS-500 dumps PDF online: https://drive.google.com/file/d/1DdSHWTkhVhTdK7pWIXvxIfVLgI0XcFmg/

Posted in MD-101 exam dumps MD-101 exam questions MD-101 Managing Modern Desktops MD-101 practice test Microsoft Microsoft 365 Certified: Modern Desktop Administrator Associate Modern Desktop Administrator Associate exam dumps Modern Desktop Administrator Associate exam tips

The latest Modern Desktop Administrator Associate exam series exam questions are from Lead4Pass dumps

Microsoft 365 Certified: Modern Desktop Administrator Associate exam dumps

Microsoft 365 Certified: Modern Desktop Administrator Associate exam series include
(MD-100 – Windows 10, MD-101 – Managing Modern Desktops).
These are popular exams. Passing any exam will improve your career path.

Microsoft 365 Certified: Modern Desktop Administrator Associate exam series learning experience:

step 1: you definitely need to know Microsoft’s official information and exam details>> https://docs.microsoft.com/en-us/learn/certifications/modern-desktop/

In the official information, you will get certification details, skill measurement, learning path, official simulation test, certification resources.

Step 2: You should get the latest free Microsoft exam practice questions>> https://www.fulldumps.com/category/real-microsoft-exam-questions-and-answers/microsoft-role-based/

This is the test questions and answers of the Microsoft 365 Certified: Modern Desktop Administrator Associate exam series shared by Lead4Pass for free

Step 3: Pass the exam secrets and get the latest updated Microsoft 365 Certified: Modern Desktop Administrator Associate exam dumps>> https://www.lead4pass.com/microsoft-365-certified-modern-desktop-administrator-associate.html

The Microsoft 365 Certified: Modern Desktop Administrator Associate exam series includes MD-100 and MD-101 exam items. Include PDF and VCE in Lead4Pass to help you successfully pass the exam

Here: Share free Microsoft MD-101 exam practice questions

Exam answers are available at the end of the article. You can also skip this stage and get the complete MD-101 exam dumps directly https://www.lead4pass.com/md-101.html

QUESTION #1

Your company has an internal portal that uses a URL of http://contoso.com.
The network contains computers that run Windows 10. The default browser on all the computers is Microsoft Edge.
You need to ensure that all users only use Internet Explorer to connect to the internal portal. The solution must ensure
that Microsoft Edge can be used to connect to all other websites.
What should you do with each computer?

A. From the local policy, configure Enterprise Mode

B. From Microsoft Edge, configure the Advanced Site Settings

C. From Internet Explorer, configure the Compatibility View settings

D. From the Settings app, configure the default web browser settings

Reference: https://docs.microsoft.com/en-us/microsoft-edge/deploy/emie-to-improve-compatibility

QUESTION #2

HOTSPOT
Your network contains an on-premises Active Directory forest named contoso.com that syncs to Azure Active Directory
(Azure AD). Azure AD contains the users shown in the following table.

microsoft MD-101 exam questions q2
You assign Windows 10 Enterprise E5 licenses to Group1 and User2. You add computers to the network as shown in
the following table.
microsoft MD-101 exam questions q2-1

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

microsoft MD-101 exam questions q2-2

Correct Answer:

microsoft MD-101 exam questions q2-3

Reference: https://docs.microsoft.com/en-us/windows/deployment/windows-10-subscription-activation

QUESTION #3

You need to prepare for the deployment of the Phoenix office computers. What should you do first?

A. Generalize the computers and configure the Mobility (MDM and MAM) settings from the Azure Active Directory admin center.

B. Extract the hardware ID information of each computer to a CSV file and upload the file from the Microsoft Intune
blade in the Azure portal.

C. Extract the hardware ID information of each computer to an XML file and upload the file from the Devices settings in
Microsoft Store for Business.

D. Extract the serial number information of each computer to a CSV file and upload the file from the Microsoft Intune
blade in the Azure portal.

Reference: https://docs.microsoft.com/en-us/windows/deployment/windows-autopilot/existing-devices

QUESTION #4

Your company has a Microsoft 365 subscription.
The company uses Microsoft Intune to manage all devices.
The company uses conditional access to restrict access to Microsoft 365 services for devices that do not comply with
the company\’s security policies.
You need to identify which devices will be prevented from accessing Microsoft 365 services.
What should you use?

A. The Device Health solution in Windows Analytics.

B. Windows Defender Security Center.

C. The Device compliance blade in the Intune admin center.

D. The Conditional access blade in the Azure Active Directory admin center.

QUESTION #5

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains
a unique solution that might meet the stated goals. Some question sets might have more than one correct solution,
while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not
appear in the review screen.

You have a Microsoft 365 subscription.

You have 20 computers that run Windows 10 and are joined to Microsoft Azure Active Directory (Azure AD).
You plan to replace the computers with new computers that run Windows 10. The new computers will be joined to Azure AD.

You need to ensure that the desktop background, the favorites, and the browsing history are available on the new
computers.

Solution: You configure roaming user profiles.
Does this meet the goal?

A. Yes

B. No

References: https://docs.microsoft.com/en-us/windows-server/storage/folder-redirection/deploy-roaming-user-profiles

QUESTION #6

You have a shared computer that runs Windows 10.
The computer is infected with a virus.
You discover that a malicious TTF font was used to compromise the computer.
You need to prevent this type of threat from affecting the computer in the future.
What should you use?

A. Windows Defender Exploit Guard

B. Windows Defender Application Guard

C. Windows Defender Credential Guard

D. Windows Defender System Guard

E. Windows Defender SmartScreen

Reference: https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-exploitguard/windows-defender-exploit-guard

QUESTION #7

HOTSPOT
You have computers that run Windows 10 and are configured by using Windows Autopilot.
A user performs the following tasks on a computer named Computer1:

1. Creates a VPN connection to the corporate network
2. Installs a Microsoft Store app named App1
3. Connects to a Wi-Fi network

You perform a Windows Autopilot Reset on Computer1.
What will be the state of the computer when the user signs in? To answer, select the appropriate options in the answer
area.
NOTE: Each correct selection is worth one point.
Hot Area:

microsoft MD-101 exam questions q7

Correct Answer:

microsoft MD-101 exam questions q7-1

Reference: https://docs.microsoft.com/en-us/windows/deployment/windows-autopilot/windows-autopilot-reset

QUESTION #8

You need to resolve the performance issues in the Los Angeles office.
How should you configure the update settings? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

microsoft MD-101 exam questions q8

Correct Answer:

microsoft MD-101 exam questions q8-1

Reference: https://docs.microsoft.com/en-us/windows/deployment/update/waas-delivery-optimization
https://2pintsoftware.com/delivery-optimization-dl-mode/

QUESTION #9

HOTSPOT
Your network contains an Active Directory domain. Active Directory is synced with Microsoft Azure Active Directory
(Azure AD).
There are 500 Active Directory domain-joined computers that run Windows 10 and are enrolled in Microsoft Intune.
You plan to implement Microsoft Defender Exploit Guard.
You need to create a custom Microsoft Defender Exploit Guard policy, and then distribute the policy to all the
computers.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

microsoft MD-101 exam questions q9

Correct Answer:

microsoft MD-101 exam questions q9-1

Reference: https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/import-exportexploit-protection-emet-xml#manage-or-deploy-a-configuration https://docs.microsoft.com/en-us/intune/endpointprotection-windows-10 https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defenderatp/enable-exploit-protection

QUESTION #10

HOTSPOT
Your company has computers that run Windows 10. The employees at the company use the computers.
You plan to monitor the computers by using the Update Compliance solution.
You create the required resources in Azure.
You need to configure the computers to send enhanced Update Compliance data.
Which two Group Policy settings should you configure? To answer, select the appropriate settings in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

microsoft MD-101 exam questions q10

Correct Answer:

microsoft MD-101 exam questions q10-1

Reference: https://docs.microsoft.com/en-us/windows/deployment/update/update-compliance-configuration-manual

QUESTION 11

HOTSPOT
Your company has an infrastructure that has the following:

1. A Microsoft 365 tenant
2. An Active Directory forest
3. Microsoft Intune
4. A Key Management Service (KMS) server
5. A Windows Deployment Services (WDS) server
6. A Microsoft Azure Active Directory (Azure AD) Premium tenant

The company purchases 100 new computers that run Windows 10.
You need to ensure that the new computers are joined automatically to Azure AD by using Windows Autopilot.
What should you use? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

microsoft MD-101 exam questions q11

Correct Answer:

microsoft MD-101 exam questions q11-1

Reference: https://docs.microsoft.com/en-us/intune/enrollment-autopilot

QUESTION #12

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains
a unique solution that might meet the stated goals. Some question sets might have more than one correct solution,
while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not
appear in the review screen.
You need to ensure that feature and quality updates install automatically during a maintenance window.
Solution: In Group policy, from the Windows Update settings, you enable Configure Automatic Updates, select 3 ? Auto
download and notify for install, and then enter a time.
Does this meet the goal?

A. Yes

B. No

References: https://docs.microsoft.com/en-us/sccm/sum/deploy-use/automatically-deploy-software-updates

QUESTION #13

HOTSPOT
You have a Microsoft Intune subscription.
You are creating a Windows Autopilot deployment profile named Profile1 as shown in the following exhibit.

microsoft MD-101 exam questions q13

Use the drop-down menus to select the answer choice that completes each statement based on the information
presented in the graphic.
NOTE: Each correct selection is worth one point.
Hot Area:

microsoft MD-101 exam questions q13-1

Correct Answer:

microsoft MD-101 exam questions q13-2

Reference:
https://docs.microsoft.com/en-us/windows/deployment/windows-autopilot/user-driven#:~:text=Windows%20Autopilot%2
0user%2Ddriven%20mode%20is%20designed%20to%20enable%20new,personnel%20ever%20touch%20the%20devic
e.

https://docs.microsoft.com/en-us/windows/deployment/windows-autopilot/white-glove

QUESTION #14

You have a hybrid Microsoft Azure Active Directory (Azure AD) tenant, a Microsoft System Center Configuration
Manager (Current Branch) environment, and a Microsoft 365 subscription. You have computers that run Windows 10 as
shown in the following table.

microsoft MD-101 exam questions q14

You plan to use Microsoft 365 Device Management.
Which computers support co-management by Configuration Manager and Device Management?

A. Computer3 only

B. Computer1 and Computer2 only

C. Computer2 only

D. Computer1, Computer2, and Computer3

Reference: https://docs.microsoft.com/en-us/mem/configmgr/comanage/overview

QUESTION #15

Your company has a Microsoft 365 subscription.
All the users in the finance department own personal devices that run iOS or Android. All the devices are enrolled in
Microsoft Intune.
The finance department adds new users each month.
The company develops a mobile application named App1 for finance department users.
You need to ensure that only the finance department users can download App1.
What should you do first?

A. Add App1 to Intune.

B. Add App1 to a Microsoft Deployment Toolkit (MDT) deployment share.

C. add App1 to Microsoft Store for Business.

D. Add App1 to the vendor stores for iOS and Android applications.

Reference: https://docs.microsoft.com/en-us/intune/apps-add

Publish the answer:

Q1Q2Q3Q4Q5Q6Q7Q8Q9Q10Q11Q12Q13Q14Q15
AimageACBAimageimageimageimageimageBimageDA

Microsoft MD-101 exam PDF share for free on google drive

In order to facilitate the study habits of more people, here is a part of the latest MD-101 exam PDF from Lead4Pass MD-101 dumps

The Microsoft 365 Certified: Modern Desktop Administrator Associate contains a wealth of exam content. The whole series contains 2 types of test words. Passing the exam is really not an easy task. In Lead4pass, you can get a dumps of the exam to help you pass the exam easily.

The free Microsoft MD-101 exam practice questions shared above are only part of the complete dumps. For complete Microsoft MD-101 dumps, Click to enter the https://www.lead4pass.com/md-101.html dumps page.

Posted in dp-300 Administering Relational Databases on Microsoft Azure Microsoft microsoft azure dp-300 Microsoft DP-300 Microsoft DP-300 dumps Microsoft DP-300 exam questions Microsoft DP-300 pdf Microsoft Role-based

Latest Updated Microsoft DP-300 certification: Administering Relational Databases on Microsoft Azure | Exam Method

This article mainly shares how to pass the Microsoft DP-300 exam. I will share the specific exam details through the link, and you can visit for more details.
Based on years of test experience, there are several modes to pass the DP-300 test:

First, study and practice for a long time to improve your own strength.

Second, pass the Microsoft Azure Database Administrator Associate exam dumps. Both methods will be shared on this site. Continue reading to get success!

Free Microsoft DP-300 exam practice questions

The test answer is at the end of the article

QUESTION 1

HOTSPOT
You are performing exploratory analysis of bus fare data in an Azure Data Lake Storage Gen2 account by using an
Azure Synapse Analytics serverless SQL pool.
You execute the Transact-SQL query shown in the following exhibit.

microsoft dp-300 exam questions q1

Use the drop-down menus to select the answer choice that completes each statement based on the information
presented in the graphic.
Hot Area:

microsoft dp-300 exam questions q1-1

Correct Answer:

microsoft dp-300 exam questions q1-2

Box 1: CSV files that have file named beginning with “tripdata_2020”
Box 2: a header
FIRSTROW = \\’first_row\\’
Specifies the number of the first row to load. The default is 1 and indicates the first row in the specified data file. The row numbers are determined by counting the row terminators. FIRSTROW is 1-based.
Reference:
https://docs.microsoft.com/en-us/azure/synapse-analytics/sql/develop-openrowset

QUESTION 2

You have an Azure Databricks resource.
You need to log actions that relate to changes in compute for the Databricks resource.
Which Databricks services should you log?

A. clusters
B. jobs
C. DBFS
D. SSH
E. workspace

Cloud Provider Infrastructure Logs.
Databricks logging allows security and admin teams to demonstrate conformance to data governance standards within
or from a Databricks workspace. Customers, especially in the regulated industries, also need records on activities like:
1. User access control to cloud data storage
2. Cloud Identity and Access Management roles
3. User access to cloud network and compute
Azure Databricks offers three distinct workloads on several VM Instances tailored for your data analytics workflow-the
Jobs Compute and Jobs Light Compute workloads make it easy for data engineers to build and execute jobs, and the
All-Purpose Compute workload makes it easy for data scientists to explore, visualize, manipulate, and share data and
insights interactively.
Reference: https://databricks.com/blog/2020/03/25/trust-but-verify-with-databricks.html

QUESTION 3

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains
a unique solution that might meet the stated goals. Some question sets might have more than one correct solution,
while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not
appear in the review screen.
You have an Azure Data Lake Storage account that contains a staging zone.
You need to design a daily process to ingest incremental data from the staging zone, transform the data by executing an R script, and then insert the transformed data into a data warehouse in Azure Synapse Analytics.
Solution: You use an Azure Data Factory schedule trigger to execute a pipeline that executes mapping data flow, and
then inserts the data into the data warehouse.
Does this meet the goal?

A. Yes
B. No

If you need to transform data in a way that is not supported by Data Factory, you can create a custom activity, not a
mapping flow,5 with your own data processing logic and use the activity in the pipeline. You can create a custom activity to run R scripts on your HDInsight cluster with R installed.
Reference: https://docs.microsoft.com/en-US/azure/data-factory/transform-data

QUESTION 4

You have an Azure SQL database. The database contains a table that uses a columnstore index and is accessed
infrequently.
You enable columnstore archival compression.
What are two possible results of the configuration? Each correct answer presents a complete solution. NOTE: Each
correct selection is worth one point.

A. Queries that use the index will consume more disk I/O.
B. Queries that use the index will retrieve fewer data pages.
C. The index will consume more disk space.
D. The index will consume more memory.
E. Queries that use the index will consume more CPU resources.

For rowstore tables and indexes, use the data compression feature to help reduce the size of the database. In addition
to saving space, data compression can help improve performance of I/O intensive workloads because the data is stored in fewer pages and queries need to read fewer pages from disk.
Use columnstore archival compression to further reduce the data size for situations when you can afford extra time and
CPU resources to store and retrieve the data.

QUESTION 5

You have an Always On availability group deployed to Azure virtual machines. The availability group contains a
database named DB1 and has two nodes named SQL1 and SQL2. SQL1 is the primary replica.
You need to initiate a full backup of DB1 on SQL2.
Which statement should you run?

A. BACKUP DATABASE DB1 TO URL=\\’https://mystorageaccount.blob.core.windows.net/ mycontainer/DB1.bak\\’ with
(Differential, STATS=5, COMPRESSION);
B. BACKUP DATABASE DB1 TO URL=\\’https://mystorageaccount.blob.core.windows.net/ mycontainer/DB1.bak\\’ with
(COPY_ONLY, STATS=5, COMPRESSION);
C. BACKUP DATABASE DB1 TO URL=\\’https://mystorageaccount.blob.core.windows.net/ mycontainer/DB1.bak\\’ with
(File_Snapshot, STATS=5, COMPRESSION);
D. BACKUP DATABASE DB1 TO URL=\\’https://mystorageaccount.blob.core.windows.net/ mycontainer/DB1.bak\\’ with
(NoInit, STATS=5, COMPRESSION);

BACKUP DATABASE supports only copy-only full backups of databases, files, or filegroups when it\\’s executed on
secondary replicas. Copy-only backups don\\’t impact the log chain or clear the differential bitmap. Incorrect Answers:
A: Differential backups are not supported on secondary replicas. The software displays this error because the
secondary replicas support copy-only database backups.
Reference:
https://docs.microsoft.com/en-us/sql/database-engine/availability-groups/windows/active-secondaries-backup-onsecondary-replicas-always-on-availability-groups

QUESTION 6

HOTSPOT
You are designing an enterprise data warehouse in Azure Synapse Analytics that will store website traffic analytics in a
star schema.
You plan to have a fact table for website visits. The table will be approximately 5 GB.
You need to recommend which distribution type and index type to use for the table. The solution must provide the
fastest query performance.
What should you recommend? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

microsoft dp-300 exam questions q6

Correct Answer:

microsoft dp-300 exam questions q6-1

Box 1: Hash
Consider using a hash-distributed table when:
The table size on disk is more than 2 GB.
The table has frequent insert, update, and delete operations.
Box 2: Clustered columnstore
Clustered columnstore tables offer both the highest level of data compression and the best overall query performance.
Reference:
https://docs.microsoft.com/en-us/azure/synapse-analytics/sql-data-warehouse/sql-data-warehouse-tables-distribute
https://docs.microsoft.com/en-us/azure/synapse-analytics/sql-data-warehouse/sql-data-warehouse-tables-index

QUESTION 7

DRAG DROP
You need to configure user authentication for the SERVER1 databases. The solution must meet the security and
compliance requirements.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions
to the answer area and arrange them in the correct order.
Select and Place:

microsoft dp-300 exam questions q7

Correct Answer:

microsoft dp-300 exam questions q7-1

Scenario: Authenticate database users by using Active Directory credentials.
The configuration steps include the following procedures to configure and use Azure Active Directory authentication.
1. Create and populate Azure AD.
2. Optional: Associate or change the active directory that is currently associated with your Azure Subscription.
3. Create an Azure Active Directory administrator. (Step 1)
4. Configure your client computers.
5. Create contained database users in your database mapped to Azure AD identities. (Step 2)
6. Connect to your database by using Azure AD identities. (Step 3)
Reference: https://docs.microsoft.com/en-us/azure/azure-sql/database/authentication-aad-overview

QUESTION 8

HOTSPOT
You have an on-premises Microsoft SQL Server 2016 server named Server1 that contains a database named DB1.
You need to perform an online migration of DB1 to an Azure SQL Database managed instance by using Azure
Database Migration Service.
How should you configure the backup of DB1? To answer, select the appropriate options in the answer area. NOTE:
Each correct selection is worth one point.
Hot Area:

microsoft dp-300 exam questions q8

Correct Answer:

microsoft dp-300 exam questions q8-1

Box 1: Full and log backups only
Make sure to take every backup on a separate backup media (backup files). Azure Database Migration Service doesn\\’t
support backups that are appended to a single backup file. Take full backup and log backups to separate backup files.
Box 2: WITH CHECKSUM
Azure Database Migration Service uses the backup and restore method to migrate your on-premises databases to SQL
Managed Instance. Azure Database Migration Service only supports backups created using checksum.
Incorrect Answers:
NOINIT Indicates that the backup set is appended to the specified media set, preserving existing backup sets. If a
media password is defined for the media set, the password must be supplied. NOINIT is the default.
UNLOAD
Specifies that the tape is automatically rewound and unloaded when the backup is finished. UNLOAD is the default
when a session begins.
Reference:
https://docs.microsoft.com/en-us/azure/dms/known-issues-azure-sql-db-managed-instance-online

QUESTION 9

HOTSPOT
You have an Azure SQL database named DB1 that contains two tables named Table1 and Table2. Both tables contain
a column named a Column1. Column1 is used for joins by an application named App1.
You need to protect the contents of Column1 at rest, in transit, and in use.
How should you protect the contents of Column1? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

microsoft dp-300 exam questions q9

Correct Answer:

microsoft dp-300 exam questions q9-1

Explanation:

Box 1: Column encryption Key
Always Encrypted uses two types of keys: column encryption keys and column master keys. A column encryption key is
used to encrypt data in an encrypted column. A column master key is a key-protecting key that encrypts one or more
column encryption keys.
Incorrect Answers:
TDE encrypts the storage of an entire database by using a symmetric key called the Database Encryption Key (DEK).

Box 2: Deterministic Always Encrypted is a feature designed to protect sensitive data, such as credit card numbers or national identification numbers (for example, U.S. social security numbers), stored in Azure SQL Database or SQL Server databases. Always Encrypted allows clients to encrypt sensitive data inside client applications and never reveal the encryption keys to the Database Engine (SQL Database or SQL Server).
Always Encrypted supports two types of encryption: randomized encryption and deterministic encryption.
Deterministic encryption always generates the same encrypted value for any given plain text value. Using deterministic
encryption allows point lookups, equality joins, grouping and indexing on encrypted columns.
Incorrect Answers:
1. Randomized encryption uses a method that encrypts data in a less predictable manner. Randomized encryption is more secure, but prevents searching, grouping, indexing, and joining on encrypted columns.
2. Transparent data encryption (TDE) helps protect Azure SQL Database, Azure SQL Managed Instance, and Azure
Synapse Analytics against the threat of malicious offline activity by encrypting data at rest. It performs real-time
encryption and decryption of the database, associated backups, and transaction log files at rest without requiring
changes to the application.
Reference: https://docs.microsoft.com/en-us/sql/relational-databases/security/encryption/always-encrypted-databaseengine

QUESTION 10

You have SQL Server on Azure virtual machines in an availability group.
You have a database named DB1 that is NOT in the availability group.
You create a full database backup of DB1.
You need to add DB1 to the availability group.
Which restore option should you use on the secondary replica?

A. Restore with Recovery
B. Restore with Norecovery
C. Restore with Standby

Prepare a secondary database for an Always On availability group requires two steps:
1. Restore a recent database backup of the primary database and subsequent log backups onto each server instance that hosts the secondary replica, using RESTORE WITH NORECOVERY
2. Join the restored database to the availability group.
Reference:
https://docs.microsoft.com/en-us/sql/database-engine/availability-groups/windows/manually-prepare-a- secondarydatabase-for-an-availability-group-sql-server

QUESTION 11

You need to implement the surrogate key for the retail store table. The solution must meet the sales transaction dataset requirements.
What should you create?

A. a table that has a FOREIGN KEYconstraint
B. a table the has an IDENTITY property
C. a user-defined SEQUENCE object
D. a system-versioned temporal table

Scenario: Contoso requirements for the sales transaction dataset include: Implement a surrogate key to account for
changes to the retail store addresses.
A surrogate key on a table is a column with a unique identifier for each row. The key is not generated from the table
data. Data modelers like to create surrogate keys on their tables when they design data warehouse models. You can
use the IDENTITY property to achieve this goal simply and effectively without affecting load performance.
Reference: https://docs.microsoft.com/en-us/azure/synapse-analytics/sql-data-warehouse/sql-data-warehouse-tablesidentity

QUESTION 12

DRAG DROP
You are building an Azure virtual machine.
You allocate two 1-TiB, P30 premium storage disks to the virtual machine. Each disk provides 5,000 IOPS.
You plan to migrate an on-premises instance of Microsoft SQL Server to the virtual machine. The instance has a
database that contains a 1.2-TiB data file. The database requires 10,000 IOPS.
You need to configure storage for the virtual machine to support the database.
Which three objects should you create in sequence? To answer, move the appropriate objects from the list of objects to
the answer area and arrange them in the correct order.
Select and Place:

microsoft dp-300 exam questions q12

Correct Answer:

microsoft dp-300 exam questions q12-1

Follow these same steps to create striped virtual disk:
1. Create Log Storage Pool.
2. Create Virtual Disk
3. Create Volume Box 1: a storage pool Box 2: a virtual disk that uses stripe layout
Disk Striping: Use multiple disks and stripe them together to get a combined higher IOPS and Throughput limit. The
combined limit per VM should be higher than the combined limits of attached premium disks.
Box 3: a volume
Reference:
https://hanu.com/hanu-how-to-striping-of-disks-for-azure-sql-server/

QUESTION 13

HOTSPOT
You have an Azure Synapse Analytics dedicated SQL pool named Pool1 and an Azure Data Lake Storage Gen2
account named Account1.
You plan to access the files in Account1 by using an external table.
You need to create a data source in Pool1 that you can reference when you create the external table.
How should you complete the Transact-SQL statement? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

microsoft dp-300 exam questions q13

Correct Answer:

microsoft dp-300 exam questions q13-1

Box 1: blob The following example creates an external data source for Azure Data Lake Gen2 CREATE EXTERNAL
DATA SOURCE YellowTaxi WITH ( LOCATION =
\\’https://azureopendatastorage.blob.core.windows.net/nyctlc/yellow/\\’,
TYPE = HADOOP)
Box 2: HADOOP
Reference: https://docs.microsoft.com/en-us/azure/synapse-analytics/sql/develop-tables-external-tables

QUESTION 14

You have an Azure SQL database that contains a table named factSales. FactSales contains the columns shown in the
following table.

microsoft dp-300 exam questions q14

FactSales has 6 billion rows and is loaded nightly by using a batch process.
Which type of compression provides the greatest space reduction for the database?

A. page compression
B. row compression
C. columnstore compression
D. columnstore archival compression

Columnstore tables and indexes are always stored with columnstore compression. You can further reduce the size of
columnstore data by configuring an additional compression called archival compression.
Note: Columnstore – The columnstore index is also logically organized as a table with rows and columns, but the data is physically stored in a column-wise data format.
Incorrect Answers:
B: Rowstore – The rowstore index is the traditional style that has been around since the initial release of SQL Server.
For rowstore tables and indexes, use the data compression feature to help reduce the size of the database. Reference:
https://docs.microsoft.com/en-us/sql/relational-databases/data-compression/data-compression

QUESTION 15

HOTSPOT
You need to recommend a configuration for ManufacturingSQLDb1 after the migration to Azure. The solution must meet the business requirements.
What should you include in the recommendation? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

microsoft dp-300 exam questions q15

Correct Answer:

microsoft dp-300 exam questions q15-1

Box 1: Node majority with witness
As a general rule when you configure a quorum, the voting elements in the cluster should be an odd number. Therefore,
if the cluster contains an even number of voting nodes, you should configure a disk witness or a file share witness.
Note: Mode: Node majority with witness (disk or file share)
Nodes have votes. In addition, a quorum witness has a vote. The cluster quorum is the majority of voting nodes in the
active cluster membership plus a witness vote. A quorum witness can be a designated disk witness or a designated file
share witness.
Box 2: Azure Standard Load Balancer
Microsoft guarantees that a Load Balanced Endpoint using Azure Standard Load Balancer, serving two or more Healthy
Virtual Machine Instances, will be available 99.99% of the time.
Scenario: Business Requirements
Litware identifies business requirements include: meet an SLA of 99.99% availability for all Azure deployments.
Incorrect Aswers:
Basic Balancer: No SLA is provided for Basic Load Balancer.
Note: There are two main options for setting up your listener: external (public) or internal. The external (public) listener
uses an internet facing load balancer and is associated with a public Virtual IP (VIP) that is accessible over the internet.
An internal listener uses an internal load balancer and only supports clients within the same Virtual Network.
Reference:
https://technet.microsoft.com/windows-server-docs/failover-clustering/deploy-cloud-witness
https://azure.microsoft.com/en-us/support/legal/sla/load-balancer/v1_0/

Publish the answer:

Q1Q2Q3Q4Q5Q6Q7Q8Q9Q10Q11Q12Q13Q14Q15
imageEBBEBimage image image image BBimageimageDimage

Microsoft DP-300 official practice test:https://www.mindhub.com/dp-300-administering-relational-databases-on-microsoft-azure-microsoft-official-practice-test/p/MU-DP-300?utm_source=microsoft&utm_medium=certpage&utm_campaign=msofficialpractice

[PDF] Microsoft DP-300 exam PDF download in Google Drive:https://drive.google.com/file/d/1XvH651-LSzW95b2rczWFkYhkxfKLZouY/

Microsoft Certified: Azure Database Administrator Associate – Microsoft DP-300 exam dumps
lead4pass DP-300 exam dumps: https://www.lead4pass.com/dp-300.html

Microsoft Ignite

In Microsoft Ignite you can know all the basic information about Microsoft exams

  • Certification process overview
  • Request accommodations
  • Register and schedule an exam
  • Prepare for an exam
  • Exam duration and question types
  • Exam scoring and score reports
Posted in AZ-500 Microsoft Azure Security Technologies az-500 Microsoft Azure Security Technologies azure az-500 azure az-500 dumps azure az-500 exam dumps azure az-500 practice test azure az-500 questions Microsoft Microsoft AZ-500 Microsoft AZ-500 microsoft az-500 azure security technologies microsoft az-500 braindump microsoft az-500 dumps microsoft az-500 exam dumps microsoft az-500 pdf microsoft az-500 practice test microsoft az-500 practice test microsoft az-500 study guide Microsoft Azure Security Engineer Associate Microsoft Role-based

AZ-500: Microsoft Azure Security Technologies – Solution

AZ-500: Microsoft Azure Security Technologies – Solution

Welcome everyone to visit,

I hope everyone gets their wish!!

Today I plan to write some exam details/online exercises/solutions – AZ-500.

First of all, you should understand the AZ-500: Microsoft Azure Security Technologies exam details.

Specifically, you need to understand the powerful functions of Security Technologies (including Manage identity and access, Implement platform protection, Manage security operations, and Secure data and applications).
Thereby improving work efficiency. Let me take you briefly on the details of how to pass the exam, study materials or links, etc.

AZ-500 exam practice questions:

QUESTION 1

You have an Azure subscription that contains a virtual machine named VM1.
You create an Azure key vault that has the following configurations:
Name: Vault5 Region: West US Resource group: RG1
You need to use Vault5 to enable Azure Disk Encryption on VM1. The solution must support backing up VM1 by using
Azure Backup.
Which key vault settings should you configure?

A. Access policies
B. Secrets
C. Keys
D. Locks

Correct Answer: A

References: https://docs.microsoft.com/en-us/azure/key-vault/key-vault-secure-your-key-vault

QUESTION 2

You have an Azure subscription that contains an Azure key vault and an Azure Storage account. The key vault contains
customer-managed keys. The storage account is configured to use the customer-managed keys stored In the key vault.
You plan to store data in Azure by using the following services:

* Azure Files
* Azure Blob storage
* Azure Log Analytics
* Azure Table storage
* Azure Queue storage

Which two services data encryption by using the keys stored in the key vault? Each correct answer presents a complete
solution. NOTE: Each correct selection is worth one point.

A. Queue storage
B. Table storage
C. Azure Files
D. Blob storage

Correct Answer: AD

QUESTION 3

You need to meet the technical requirements for VNetwork1. What should you do first?

A. Create a new subnet on VNetwork1.
B. Remove the NSGs from Subnet11 and Subnet13.
C. Associate an NSG to Subnet12.
D. Configure DDoS protection for VNetwork1.

Correct Answer: A

From scenario: Deploy Azure Firewall to VNetwork1 in Sub2.
The azure firewall needs a dedicated subnet named AzureFirewallSubnet.
References: https://docs.microsoft.com/en-us/azure/firewall/tutorial-firewall-deploy-portal

QUESTION 4

DRAG-DROP
You are configuring network connectivity for two Azure virtual networks named VNET1 and VNET2.
You need to implement VPN gateways for the virtual networks to meet the following requirements:

1. VNET1 must have six site-to-site connections that use BGP.
2. VNET2 must have 12 site-to-site connections that use BGP.
3. Costs must be minimized.

Which VPN gateway SKU should you use for each virtual network? To answer, drag the appropriate SKUs to the correct
networks. Each SKU may be used once, more than once, or not at all. You may need to drag the split bar between
panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Select and Place:

az-500 questions q4

Correct Answer:

az-500 questions q4-1

QUESTION 5

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains
a unique solution that might meet the stated goals. Some question sets might have more than one correct solution,
while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not
appear in the review screen.

You use Azure Security Center for the centralized policy management of three Azure subscriptions.
You use several policy definitions to manage the security of the subscriptions.
You need to deploy the policy definitions as a group to all three subscriptions.
Solution: You create a resource graph and an assignment that is scoped to a management group.
Does this meet the goal?

A. Yes
B. No

Correct Answer: B

Management groups in Microsoft Azure solve the problem of needing to impose governance policy on more than one
Azure subscription simultaneously. However, you need to use an initiative, not a resource graph to bundle the policy
definitions into a group that can be applied to the management group.
References: https://4sysops.com/archives/apply-governance-policy-to-multiple-azure-subscriptions-with-managementgroups/

More free AZ-500 exam practice questions for free download: https://drive.google.com/file/d/1SpYwEOBd6fFkhoTXuOfe5c7jYjg_B6Pj/view?usp=sharing

Prepare:

  1. Learn through Microsoft Event:

There are many resources to prepare for this exam, but the best I can find is a Microsoft Event or a webinar.
There are two advantages to participating in this event.

  • You will prepare for the exam for free, covering every topic.
  • You will get an exam voucher or coupon, which can be used when arranging the exam. This coupon provides you with a 100% discount on exam fees, and you can only use one coupon once. Therefore, basically, you do not need to pay any fees/fees for the exam.

2. Learn through the Microsoft Learning Path:

Although you participated in a Microsoft event, you may want to re-examine your knowledge or skills. In this case, the Microsoft learning path is the best. There are two ways to follow this learning path.

  1. Free online: Here you can learn at your own pace – Microsoft Learning Path for AZ-500
  2. Instructor Guidance-Paid
  3. Exam exercises: After you take the Microsoft Event or take the exam through the Microsoft Learning Path, you may want to practice the test questions. Find links to practice questions below:

https://www.lead4pass.com/az-500.html
On this website, you can get the latest updated AZ-500 exam dump. All questions can be used to practice the exam and its answers. Most of the questions actually come from the exam.

https://www.facebook.com/ExamcoopM
If you want to get the latest practice questions anytime, anywhere, you can go to the link above. There are exam questions-answers.

Exam format:

  • Number of questions: Most Microsoft certification exams usually contain 40-60 questions; however, the number may vary from exam to exam
  • Including: single selection, multiple selection, matching, selecting the appropriate option from the drop-down list, the necessary sequence of operations to perform a specific task, etc.
  • Duration: 60 minutes
  • Minimum score required to pass the exam: 700
  • The score is calculated in the range of 0-1000. So in short, you need to get a score of 70% to pass this exam.
  • The exam is conducted on the Pearson VUE application.
  • After the exam is over, you will immediately see your scorecard on the screen, and you will also receive it by mail.
  • The certificate is generated in your Microsoft account dashboard (the account you used to register for the exam)-the certificate section. From here you can download the certificate in pdf format.

Posted in Microsoft Microsoft Role-based pl-200 dumps pl-200 exam questions pl-200 Microsoft Power Platform Functional Consultant PL-200 practice test pl-200 study guide

Microsoft Certified PL-200 exam dumps updated in October

October is the harvest season! Have you received an exam certificate?
Have you successfully passed the Microsoft Power Certified exam? If you want to easily get the Microsoft PL-200 exam certification. Here you can get the harvest of this season! Microsoft Power Certified includes
(Microsoft Power Platform App Maker, Microsoft Power Platform Functional Consultant, Microsoft Power Platform Developer, Microsoft Power Platform Solution Architect). Success in any exam is a big reward! Here I shared the latest update Microsoft PL-200 Exam Dumps https://www.lead4pass.com/pl-200.html (PDF+VCE).
Continue reading >>> You can also practice Microsoft PL-200 online for free from Lead4Pass Part of PL-200 dumps.

The latest update of Microsoft PL-200 exam PDF

Share Microsoft PL-200 exam PDF on google cloud from a part of Lead4Pass PL-200 dumps to help you understand the latest exam content in advance

Microsoft PL-200 exam questions online practice test

Microsoft PL-200 exam practice questions are part of Lead4Pass PL-200 dumps, you can verify your true strength online! The answers to all text questions will be announced at the end of the article!

QUESTION 1
HOTSPOT
You need to ensure that there are no leads for a customer before you create a new opportunity for the customer.
How can you use duplicate detection rules to achieve this goal? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.
Hot Area:
microsoft pl-200 exam questions q1

Correct Answer:

microsoft pl-200 exam questions q1-1

 

QUESTION 2
You use Power Bl Desktop to configure Power Bl reports and dashboards.
You need to create a canvas app that displays account information and include the app in a Power Bl report.
Which three actions should you perform? Each correct answer presents part of the solution.
NOTE Each correct selection is worth one point.
A. From the Power Apps Insert menu, add a Power BI tile
B. From the Power BI Desktop menu, insert a Power Apps visual and include the required fields in the Power Apps data
C. Publish the report to the Power BI service
D. Connect to Common Data Service from Power BI Desktop
Step 1 (B): Here\\’s how we embed PowerApps into a Power BI report:
1. Download and login to the Power BI desktop application
2. Click on (…) and select “Import from the marketplace.”
Step 2: Open Power BI desktop and use “Get data” to connect with the Common Data Service data source.
Step 3: Publish the report to Power BI service.
Reference: https://purple.telstra.com/blog/powerbi-integration-with-powerapps

 

QUESTION 3
HOTSPOT
A company uses Common Data Service to manage account and contact information.
The company plans to use the Al Builder model to make key business decision.
You need to integrate prebuilt Al Builder models with Power Automate.
Which models should you use? To answer, select the appropriate option the answer area.
NOTE Each correct selection is worth one point.
Hot Area:

microsoft pl-200 exam questions q3

Correct Answer:

microsoft pl-200 exam questions q3-1

 

QUESTION 4
A customer tracks events by using a custom entity.
The custom entity includes a custom field for the venue of the events. The customer must be able to display the events
by venue in a calendar.
You need to ensure that all events display by venue in the calendar.
To which component should you add a control?
A. Form
B. view
C. Field
D. Chart
If you use unified interface, you can display any record in a calendar view via the calendar control.
1. Go to Settings->Customization->Customize the System
2. Open the configuration for the entity that you want to use the calendar control (Opportunities in our example)
3. Click the View tab
4. Click “Add Control” and select the calendar control.
5. Click the dot for every interface from which you want the calendar control to be available.
Reference: https://crmtipoftheday.com/1206/view-any-dynamics-365-record-on-a-calendar/

 

QUESTION 5
DRAG DROP
You have a business process flow.
You need to update the business process flow while minimizing administrative and maintenance efforts.
What should you implement? To answer, drag the appropriate features to the correct requirements. Each feature may
be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view
content.
NOTE: Each correct selection is worth one point.
Select and Place:microsoft pl-200 exam questions q5

Correct Answer:

microsoft pl-200 exam questions q5-1

 

QUESTION 6
You are designing a Power Virtual Agents chatbot.
The chatbot must be able to maintain customer information if the conversation topic changes during a dialog.
You need to configure variables to store customer name and email address.
Which type of variable should you create?
A. session
B. topic
C. bot
D. slot

 

QUESTION 7
HOTSPOT
You set up a new instance of Dynamics 365 for Customer Service.
Users report a variety of issues working with cases on mobile devices.
You need to configure the mobile app to be able to view cases.
NOTE: Each correct selection is worth one point.
Hot Area:microsoft pl-200 exam questions q7

Correct Answer:

microsoft pl-200 exam questions q7-1

1. User is able to login but can\\’t see Case Records –> “Configure Mobile Settings on Case Entity Level”
2. Users can open cases but cannot see the subject of the case – “configure mobile settings at the field level within the
case form
3. User reports that they cannot access the system from Dynamics 365 mobile app –> Configure a security role in the mobile permission set of the appropriate user https://docs.microsoft.com/en-us/dynamics365/customerengagement/mobile-app/set-up-dynamics-365-for-phones-and-dynamics-365-for-tablets

 

QUESTION 8
HOTSPOT
You configure an alert in Power BI.
You need to alert users when the value of a tile exceeds a threshold. To answer, select the appropriate options in the
answer area.
NOTE: Each correct selection is worth one point.
Hot Area:microsoft pl-200 exam questions q8

Correct Answer:

microsoft pl-200 exam questions q8-1

Reference: https://docs.microsoft.com/en-us/power-bi/create-reports/service-set-data-alerts

 

QUESTION 9
You are a Dynamics 365 administrator for a veterinarian clinic.
On the client appointment form, there is a dropdown field for clients to select their type of pet. If a client selects the
option Other, the veterinarian wants a text field to appear so that additional details can be added.
You need to create a dynamically visible field.
What should you configure?
A. field visibility on the form
B. workflow
C. business process flow
D. business rule
https://www.sherweb.com/blog/dynamics-365/configuring-business-rules-within-microsoft-dynamics-365-crm/

 

QUESTION 10
HOTSPOT
You are designing a canvas app that connects to Common Data Service.
You need to configure the app to meet the requirements and ensure that the canvas app is available offline.
What should you implement? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point
Hot Area:microsoft pl-200 exam questions q10

Correct Answer:

microsoft pl-200 exam questions q10-1

Reference: https://docs.microsoft.com/en-us/powerapps/maker/canvas-apps/offline-apps

 

QUESTION 11
DRAG DROP
A company uses Common Data Service to store sales data.
For the past few quarters, the company has experienced a decrease in sales revenue. The company wants to improve
sales forecasting.
The company plans to use AI Builder to implement the solution. You select fields that will be used for prediction.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions
to the answer area and arrange them in the correct order.
Select and Place:microsoft pl-200 exam questions q11

Correct Answer:

microsoft pl-200 exam questions q11-1

Step 1:
Before you can use your prediction model, you have to train it to perform the way you want.
Step 2:
After you train your model, publish it to make it available.
Publish your model when you want to make it available to users in your Power Apps environment.
Step 3: Use the model with Power Apps
Reference:
https://docs.microsoft.com/en-us/ai-builder/prediction-train-model

 

QUESTION 12
You must create a new entity to support a new feature for an app. Entity data will be transactional and will be associated
with business units.
You need to configure entity ownership.
Which entity ownership type should you use?
A. user or team owned
B. organization-owned
C. none
D. business-owned

 

QUESTION 13
You configure and test a user interface (UI) flow. You plan to run the flow as a scheduled flow.
The UI flow must run on a Windows 10 device. As part of process automation, the UI flow must sign into the Windows
10 device with the credentials for a user account named User1.
You need to ensure that the flow runs during non-peak hours and requires no physical user intervention.
What should you do?
A. Ensure that the User1 account has an active user session on the device.
B. Ensure that all user sessions are signed out.
C. Ensure that there are no active user sessions on the device.
D. Ensure that all user sessions are signed out except for locked user sessions.
Answer B is incorrect because it will work if you have disconnected sessions. The sessions do not need to be signed
out; they just cannot be active.
Reference: https://docs.microsoft.com/en-us/power-automate/ui-flows/run-ui-flow

 

QUESTION 14
DRAG DROP
You are a Dynamics 365 Customer Service developer.
A salesperson creates a chart.
You need to ensure that the chart is available to all users on the team.
Which actions should the salesperson perform? To answer, drag the appropriate actions to the correct users. Each
action may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to
view content. NOTE: Each correct selection is worth one point.
Select and Place:
microsoft pl-200 exam questions q14

Correct Answer:

microsoft pl-200 exam questions q14-1

 

QUESTION 15
You need to create the FAQ solution content What should you do first?
A. Al Builder
B. Suggest fs
C. Automate
D. Trigger phrases

Publish the answer:

Q2 Q4 Q6Q9Q12 Q13 Q15
BCDBADACA

October is worth your efforts! Efforts will help you become better! Here to help you pass the Microsoft PL-200 exam.
The complete Microsoft Microsoft PL-200 exam dumps https://www.lead4pass.com/pl-200.html (total questions: 117 Q&A). Successfully obtained the Microsoft PL-200 exam certification.

ps.

Share Microsoft PL-200 exam PDF on google cloud from a part of Lead4Pass PL-200 dumps to help you understand the latest exam content in advance

Posted in az-900 Microsoft Azure Fundamentals Microsoft Microsoft AZ-900 microsoft az-900 dumps microsoft az-900 dumps pdf microsoft az-900 exam actual questions microsoft az-900 exam questions microsoft az-900 practice exam microsoft az-900 practice questions Microsoft Fundamental

Microsoft Fundamentals AZ-900 exam dumps updated in October

exam Harvest season

October is the harvest season! Have you received an exam certificate?
Have you successfully passed the Microsoft Azure Fundamentals exam? If you want to easily get the Azure AZ-900 exam certification. Here you can get the harvest of this season! Microsoft Fundamentals includes
(Technology Literacy for Educators, Microsoft Azure AI Fundamentals, Microsoft Azure Fundamentals, Microsoft Azure Data Fundamentals, Microsoft Dynamics 365 Fundamentals Customer Engagement Apps (CRM), Microsoft Dynamics 365 Fundamentals Finance and Operations Apps (ERP), Microsoft 365 Fundamentals, Microsoft Power Platform Fundamentals, Microsoft Security Compliance and Identity Fundamentals).

Success in any exam is a big reward! Here I shared the latest update Microsoft AZ-900 Exam Dumps https://www.lead4pass.com/az-900.html (PDF+VCE).
Continue reading >>> You can also practice Azure AZ-900 online for free from Lead4Pass Part of AZ-900 dumps.

The latest update of Azure AZ-900 exam PDF

Share Azure AZ-900 exam PDF on google cloud from a part of Lead4Pass AZ-900 dumps to help you understand the latest exam content in advance

Azure AZ-900 exam questions online practice test

Azure AZ-900 exam practice questions are part of Lead4Pass AZ-900 dumps, you can verify your true strength online! The answers to all text questions will be announced at the end of the article!

QUESTION 1
HOTSPOT
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

microsoft az-900 exam questions q1

Correct Answer:

microsoft az-900 exam questions q1-1

QUESTION 2
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains
a unique solution that might meet the stated goals. Some question sets might have more than one correct solution,
while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not
appear in the review screen. Your company plans to purchase Azure.
The company\\’s support policy states that the Azure environment must provide an option to access support engineers
by phone or email.
You need to recommend which support plan meets the support policy requirement.
Solution: Recommend a Standard support plan.
Does this meet the goal?
A. Yes
B. No
The Standard, Professional Direct, and Premier support plans have technical support for engineers via email and
phone. References: https://azure.microsoft.com/en-gb/support/plans/

QUESTION 3
HOTSPOT
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

microsoft az-900 exam questions q3

Correct Answer:

microsoft az-900 exam questions q3-1

QUESTION 4
HOTSPOT
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

microsoft az-900 exam questions q4

Correct Answer:

microsoft az-900 exam questions q4-1

QUESTION 5
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct
selection is worth one point.
Hot Area:

microsoft az-900 exam questions q5

Correct Answer:

microsoft az-900 exam questions q5-1

Box 1: Yes
Box 2: Yes
Azure free account has a 5 GB blob storage limit and a 5 GB file storage limit.
Box 3: No
Azure free account has a limit of 10 web, mobile or API apps
References:
https://azure.microsoft.com/en-us/free/
https://azure.microsoft.com/en-us/free/free-account-faq/

QUESTION 6
This question requires that you evaluate the underlined text to determine if it is correct.
When planning to migrate a public website to Azure, you must plan to pay monthly usage costs.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If the
statement is incorrect, select the answer choice that makes the statement correct.
A. No change is needed
B. Deploy a VPN
C. pay to transfer all the website data to Azure
D. reduce the number of connections to the website

QUESTION 7
This question requires that you evaluate the underlined text to determine if it is correct.
Azure Germany can be used by legal residents of Germany only.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If the
statement is incorrect, select the answer choice that makes the statement correct.
A. no change is needed
B. only enterprises that are registered in Germany
C. only enterprises that purchase their azure licenses from a partner based in Germany
D. any user or enterprise that requires its data to reside in Germany
References: https://docs.microsoft.com/en-us/azure/germany/germanywelcome?toc=%2fazure%2fgermany%2ftoc.json

QUESTION 8
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains
a unique solution that might meet the stated goals. Some question sets might have more than one correct solution,
while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not
appear in the review screen.
Your company has an Azure subscription that contains the following unused resources:
20 user accounts in Azure Active Directory (Azure AD) Five groups in Azure AD 10 public IP addresses 10 network
interfaces
You need to reduce the Azure costs for the company. Solution: You remove the unused user accounts. Does this meet
the goal?
A. Yes
B. No
References: https://docs.microsoft.com/en-us/azure/advisor/advisor-cost-recommendations#reduce-costs-by-deleting-orreconfiguring-idle-virtual-network-gateways

QUESTION 9
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct
selection is worth one point.
Hot Area:

microsoft az-900 exam questions q9

Correct Answer:

microsoft az-900 exam questions q9-1

QUESTION 10
This question requires that you evaluate the underlined text to determine if it is correct.
An Azure region contains one or more data centers that are connected by using a low-latency network.
Instructions: Review the underlined text. If it makes the statement correct, select “No change is needed”. If the
statement is incorrect, select the answer choice that makes the statement correct.
A. No change is needed
B. Is found in each country where Microsoft has a subsidiary office
C. Can be found in every country in Europe and the Americas only
D. Contains one or more data centers that are connect by using a high-latency network

QUESTION 11
HOTSPOT
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

microsoft az-900 exam questions q11

Correct Answer:

microsoft az-900 exam questions q11-1

QUESTION 12
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains
a unique solution that might meet the stated goals. Some question sets might have more than one correct solution,
while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not
appear in the review screen.
Your company plans to migrate all its data and resources to Azure.
The company\\’s migration plan states that only platform as a service (PaaS) solutions must be used in Azure.
You need to deploy an Azure environment that supports the planned migration.
Solution: You create an Azure App Service and Azure SQL databases.
Does this meet the goal?
A. Yes
B. No

QUESTION 13
To what should an application connect to retrieve security tokens?
A. an Azure Storage account
B. Azure Active Directory (Azure AD)
C. a certificate store
D. an Azure key vault

QUESTION 14
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains
a unique solution that might meet the stated goals. Some question sets might have more than one correct solution,
while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not
appear in the review screen.
Your Azure environment contains multiple Azure virtual machines.
You need to ensure that a virtual machine named VM1 is accessible from the Internet over HTTP.
Solution: You modify a network security group (NSG).
Does this meet the goal?
A. Yes
B. No

QUESTION 15
HOTSPOT
Which cloud deployment solution is used for Azure virtual machines and Azure SQL databases? To answer, select the
appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

microsoft az-900 exam questions q15

Correct Answer:

microsoft az-900 exam questions q15-1

Announce results

Q2 Q6 Q7 Q8 Q10 Q12 Q13 Q14
AADBAABA

October is worth your efforts! Efforts will help you become better! Here to help you pass the Azure 900 exam.
The complete Microsoft Azure AZ-900 exam dumps https://www.lead4pass.com/az-900.html (total questions: 363 Q&A). Successfully obtained the Azure 900 exam certification.

ps.

Share Azure AZ-900 exam PDF on google cloud from a part of Lead4Pass AZ-900 dumps to help you understand the latest exam content in advance

Posted in az-303 Microsoft Azure Architect Technologies (beta) Microsoft Microsoft AZ-303 microsoft az-303 dump microsoft az-303 exam microsoft az-303 exam dumps microsoft az-303 pdf Microsoft Role-based

The latest update of Microsoft AZ-303 online exam practice and complete exam dumps

latest updated exam

Microsoft AZ-303 exam “Microsoft Azure Architect Technologies”, get the latest updated AZ-303 exam questions and answers online, we share the AZ-303 exam questions in a variety of ways, you can practice the test online, download the free AZ-303 PDF. Complete Microsoft AZ-303 exam dumps https://www.lead4pass.com/az-303.html (PDF +VCE). 480 exam questions and answers. 99.5% exam pass rate.
All issues are updated and corrected to ensure that they are true and effective.

Free Microsoft AZ-303 dumps PDF

The free AZ-303 dumps PDF comes from a part of the Lead4Pass AZ-303 exam dumps. Lead4Pass AZ-303 includes two modes of VCE and PDF, you can choose any.

Microsoft AZ-303 free online practice test

Annotation: 1. The question-answer is displayed at the end 2. The picture answer is displayed in the current

QUESTION 1

Note: This question is part of series of questions that present the same scenario. Each question in the series contains a
unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not
appear in the review screen.

You have an Azure Active Directory (Azure AD) tenant named Adatum and an Azure subscription named Subscription1.
Adam contains a group named Developers. Subscription1 contains a resource group named Dev.
You need to provide the Developers group with the ability to create Azure logic apps in the Dev resource group.
Solution: On Subscription1, you assign the DevTest Labs User role to the Developers group.

Does this meet the goal?

A. Yes
B. No

QUESTION 2

Note: This question is part of series of questions that present the same scenario. Each question in the series contains a
unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not
appear on the review screen. You have an Azure subscription.
You have an on-premises file server named Server1 that runs Windows Server 2019.
You manage Server1 by using Windows Admin Center.
You need to ensure that if Server1 fails, you can recover the data from Azure.
Solution: You create an Azure Storage account and an Azure Storage Sync service. You configure Azure File Sync for
Server1. Does this meet the goal?

A. Yes
B. No

QUESTION 3

You have an app named App1 that uses data from two on-premises Microsoft SQL Server databases named DB1 and
DB2. You plan to move DB1 and DB2 to Azure.
You need to implement Azure services to host DB1 and DB2. The solution must support server-side transactions across
DB1 and DB2. Solution: You deploy DBI and DB2 to SQL Server on an Azure virtual machine.
Does this meet the goal?

A. Yes
B. NO

QUESTION 4

Note: This question is part of series of questions that present the same scenario. Each question in the series contains a
unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not
appear on the review screen. You have an Azure Active Directory (Azure AD) tenant named contoso.com.

A user named Admin1 attempts to create an access review from the Azure Active Directory admin center and discovers
that the Access reviews settings are unavailable. Admin1 discovers that all the other Identity Governance settings are
available. Admin1 is assigned the User administrator, Compliance administrator, and Security administrator roles.
You need to ensure that Admin1 can create access reviews in contoso.com.

Solution: You purchase an Azure Directory Premium P2 license for contoso.com.

Does this meet the goal?

A. Yes
B. No

QUESTION 5

You need to meet the security requirements. What should you use?

A. HTTP Strict Transport Security (HSTS)
B. Direct Line API
C. Multi-Factor Authentication (MFA)
D. Bot Framework Portal
E. Bot Framework authentication

QUESTION 6

HOTSPOT
You have an Azure subscription that contains multiple resource groups. You create an availability set as shown in the
the following exhibit.

microsoft az-303 exam questions q6

You deploy 10 virtual machines to AS1.
Use the drop-down menus to select the answer choice that completes each statement based on the information
presented in the graphic.
NOTE: Each correct selection is worth one point.
Hot Area:

microsoft az-303 exam questions q6-1

Correct Answer:

microsoft az-303 exam questions q6-2

Box 1: 6
Two out of three update domains would be available, each with at least 3 VMs.
An update domain is a group of VMs and underlying physical hardware that can be rebooted at the same time.
As you create VMs within an availability set, the Azure platform automatically distributes your VMs across these update
domains. This approach ensures that at least one instance of your application always remains running as the Azure
platform undergoes periodic maintenance.
Box 2: the West Europe region and the RG1 resource group

References:
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/regions-and-availability

QUESTION 7

You have an Azure subscription named Subscription1. You deploy a Linux virtual machine named VM1 to
Subscription1. You need to monitor the metrics and the logs of VM1.

What should you use?

A. the AzurePerformanceDiagnostics extension
B. Linux Diagnostic Extension (LAD) 3.0
C. Azure Analysis Services
D. Azure HDInsight

QUESTION 8

SIMULATION
Another administrator attempts to establish connectivity between two virtual networks named VNET1 and VNET2. The
administrator reports that connections across the virtual networks fail.
You need to ensure that network connections can be established successfully between VNET1 and VNET2 as quickly
as possible.

What should you do from the Azure portal?

Correct Answer: See solution below.
You can connect one VNet to another VNet using either a Virtual network peering or an Azure VPN Gateway.
To create a virtual network gateway Step 1: In the portal, on the left side, click +Create a resource and type \’ virtual network gateway\’ in search. Locate Virtual network gateway in the search return and click the entry. On the Virtual network gateway page, click Create at the bottom of the page to open the Create virtual network gateway page.
Step 2: On the Create virtual network gateway page, fill in the values for your virtual network gateway.

microsoft az-303 exam questions q8
microsoft az-303 exam questions q8-1

Name: Name your gateway. This is not the same as naming a gateway subnet. It\’s the name of the gateway object you
are creating. Gateway type: Select VPN. VPN gateways use the virtual network gateway type VPN.
Virtual network: Choose the virtual network to which you want to add this gateway. Click Virtual network to open the
\’Choose a virtual network\’ page. Select the VNet. If you don\’t see your VNet, make sure the Location field is pointing
to the region in which your virtual network is located.
Gateway subnet address range: You will only see this setting if you did not previously create a gateway subnet for your
virtual network. If you previously created a valid gateway subnet, this setting will not appear.
Step 4: Select Create New to create a Gateway subnet.

microsoft az-303 exam questions q8-2

Step 5: Click Create to begin creating the VPN gateway. The settings are validated and you\’ll see the “Deploying
Virtual network gateway” tile on the dashboard. Creating a gateway can take up to 45 minutes. You may need to refresh your portal page to see the completed status.

References: https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-vnet-vnet-resource-managerportal?

QUESTION 9

Note: This question is part of series of questions that present the same scenario. Each question in the series contains a
unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not
appear in the review screen.

Your network contains an Active Directory forest named fabrikam.com. The forest contains two child domains named
corp.fabrikam.com and research.fabrikam.com.

You have an Azure subscription that contains an Azure Active Directory (Azure AD) tenant named contoso.com.
You install Azure AD Connect and sync all the on-premises user accounts to the Azure AD tenant. You implement
seamless single sign-on (SSO).

You plan to change the source of authority for all the user accounts in research.fabrikam.com to Azure AD.
You need to prevent research.fabrikam.com from resyncing to Azure AD.
Solution: You use Active Directory Domains and Trusts from a computer joined to fabrikam.com.

Does this meet the goal?

A. Yes
B. No

QUESTION 10

HOT SPOT
You have an Azure subscription that contains the Azure SQL servers shown in the following table.

microsoft az-303 exam questions q10

The subscription contains the elastic pool shown in the following table.

microsoft az-303 exam questions q10-1

The subscription contains the Azure SQL databases shown in the following table

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct
selection is worth one point.
Hot Area:

Correct Answer:

Note: You cannot add databases from different servers into the same pool
Box 1: Yes
Pool2 contains DB2 but DB1 and DB2 are on Sql1. DB1 can thus be added to Pool2.
Box 2: Yes
Pool3 is empty.
Box 3: Yes
Pool1 contains DB1 but DB3 and DB1 are on Sql1. DB3 can thus be added to Pool1.

References:
https://docs.microsoft.com/en-us/azure/sql-database/sql-database-elastic-pool

QUESTION 11

You have an Azure SQL database named Db1 that runs on an Azure SQL server named SQLserver1.
You need to ensure that you can use the query editor on the Azure portal to query Db1.

What should you do?

A. Modify the Advanced Data Security settings of Db1
B. Configure the Firewalls and virtual networks settings for SQLserver1
C. Copy the ADO.NET connection string of Db1 and paste the string to the query editor
D. Approve private endpoint connections for SQLserver1

QUESTION 12

HOTSPOT
You have an Azure subscription that contains the resource groups shown in the following table.

microsoft az-303 exam questions q12

You create an Azure Resource Manager template named Template1 as shown in the following exhibit.

microsoft az-303 exam questions q12-1

From the Azure portal, you deploy Template1 four times by using the settings shown in the following table.

microsoft az-303 exam questions q12-2

What is the result of the deployment? To answer, select the appropriate options in the answer area. NOTE: Each correct
selection is worth one point.
Hot Area:

microsoft az-303 exam questions q12-3

Correct Answer:

microsoft az-303 exam questions q12-4

QUESTION 13

You configure Azure AD Connect for Azure Active Directory Seamless Single Sign-On (Azure AD Seamless SSO) for an
on-premises network.

Users report that when they attempt to access myapps.microsoft.com, they are prompted multiple times to sign in and
are forced to use an account name that ends with onmicrosoft.com.

You discover that there is a UPN mismatch between Azure AD and the on-premises Active Directory.
You need to ensure that the users can use single-sign-on (SSO) to access Azure resources.

What should you do first?

A. From an on-premises network, deploy Active Directory Federation Services (AD FS).
B. From Azure AD, add and verify a custom domain name.
C. From the on-premises network, request a new certificate that contains the Active Directory domain name.
D. From the server that runs Azure AD Connect, modify the filtering options.

QUESTION 14

HOTSPOT
You have a web server app named App1 that is hosted in three Azure regions.
You plan to use Azure Traffic Manager to distribute traffic optimally for App1.
You need to enable Real User Measurements to monitor the network latency data for App1.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

microsoft az-303 exam questions q14

Correct Answer:

microsoft az-303 exam questions q14-1

Box 1: Select Generate key
You can configure your web pages to send Real User Measurements to Traffic Manager by obtaining a Real User
Measurements (RUM) key and embedding the generated code to the web page.
Obtain a Real User Measurements key The measurements you take and send to Traffic Manager from your client
application are identified by the service using a unique string, called the Real User Measurements (RUM) Key. You can
get a RUM key using the Azure portal, a REST API, or by using the PowerShell or Azure CLI.

To obtain the RUM Key using the Azure portal:

1. From a browser, sign in to the Azure portal. If you don\’t already have an account, you can sign up for a free one-month trial.

2. In the portal\’s search bar, search for the Traffic Manager profile name that you want to modify, and then click the
Traffic Manager profile in the results that the displayed.

3. In the Traffic Manager profile blade, click Real User Measurements under Settings.

4. Click Generate Key to create a new RUM Key.

Box 2: Embed the Traffic Manager JavaScript code snippet.
Embed the code to an HTML web page
After you have obtained the RUM key, the next step is to embed this copied JavaScript into an HTML page that your
end-users visit. This example shows how to update an HTML page to add this script. You can use this guide to adapt it to your HTML source management workflow.

1. Open the HTML page in a text editor

2. Paste the JavaScript code you had copied in the earlier step to the BODY section of the HTML (the copied code is on
lines 8 and 9, see figure 3).

microsoft az-303 exam questions q14-2

Reference: https://docs.microsoft.com/en-us/azure/traffic-manager/traffic-manager-create-rum-web-pages

QUESTION 15

Note: This question is part of series of questions that present the same scenario. Each question in the series contains a
unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not
appear on the review screen. Your network contains an Active Directory forest named fabrikam.com. The forest contains two child domains named corp.fabrikam.com and research.fabrikam.com.

You have an Azure subscription that contains an Azure Active Directory (Azure AD) tenant named contoso.com.
You install Azure AD Connect and sync all the on-premises user accounts to the Azure AD tenant. You implement
seamless single sign-on (SSO).

You plan to change the source of authority for all the user accounts in research.fabrikam.com to Azure AD.
You need to prevent research.fabrikam.com from resyncing to Azure AD.
Solution: You use the Synchronization Service Manager.

Does this meet the goal?

A. Yes
B. No

Solutions:

NumberAnswerWhy
QUESTION 1BThe DevTest Labs User role lets you connect, start, restart, and shut down your virtual machines in your Azure DevTest Labs.

References: https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#devtest-labs-user
QUESTION 2AUse Azure File Sync to centralize your organization\’s file shares in Azure Files, while keeping the flexibility, performance, and compatibility of an on-premises file server. Azure File Sync transforms Windows Server into a quick cache of your
Azure file share. Azure Files offers fully managed file shares in the cloud that are accessible via the industry standard Server Message Block (SMB) protocol. Azure file shares can be mounted concurrently by cloud or on-premises deployments of Windows, Linux, and macOS. Additionally, Azure file shares can be cached on Windows Servers with Azure File Sync for fast access near where the data is being used.

Azure file shares can be used to:

Replace or supplement on-premises file servers:

Azure Files can be used to completely replace or supplement traditional on-premises file servers or NAS devices.

Popular operating systems such as Windows, macOS, and Linux can directly mount Azure file shares wherever they are in the world. Azure file shares can also be replicated with Azure File Sync to Windows Servers, either on-premises or in the cloud, for performance and distributed caching of the data where it\’s being used.

References:
https://docs.microsoft.com/en-us/azure/storage/files/storage-files-introduction
https://docs.microsoft.com/en-us/azure/storage/files/storage-sync-files-deployment-guide?tabs=azure-portal
QUESTION 3B
QUESTION 4BInstead, use Azure AD Privileged Identity Management.
Note: PIM essentially helps you manage the who, what, when, where, and why for resources that you care about. Key

features of PIM include: Conduct access reviews to ensure users still need roles

References: https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure
QUESTION 5E
QUESTION 7AYou can use extensions to configure diagnostics on your VMs to collect additional metric data.
The basic host metrics are available, but to see more granular and VM-specific metrics, you need to install the Azure diagnostics extension on the VM. The Azure diagnostics extension allows additional monitoring and diagnostics data to be retrieved from the VM.

References:
https://docs.microsoft.com/en-us/azure/virtual-machines/linux/tutorial-monitoring
QUESTION 9BInstead, you should customize the default synchronization rule.

Note:
To delete a custom domain name, you must first ensure that no resources in your directory rely on the domain name.
You can\’t delete a domain name from your directory if:

1. Any user has a user name, email address, or proxy address that includes the domain name.
2. Any group has an email address or proxy address that includes the domain name.
3. Any application in your Azure AD has an App ID URI that includes the domain name.

References: https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-create-custom-sync-rule
QUESTION 11BReference: https://docs.microsoft.com/en-us/azure/sql-database/sql-database-connect-query-portal
QUESTION 13B
QUESTION 15BInstead, you should customize the default synchronization rule.
Note: The Synchronization Service Manager UI is used to configure more advanced aspects of the sync engine and to see the operational aspects of the service.

References:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-create-custom-sync-rule
Get moreAZ-303 Dumpshttps://www.lead4pass.com/az-303.html (Total Questions: 480 Q&A)

Summary:

We share the latest updated Microsoft Azure 303 exam practice questions for free to help you understand the current exam situation and improve your exam experience.
The free AZ-303 exam practice questions cannot help you pass the exam 100% successfully. If you want to pass the exam successfully for the first time, please choose Lead4Pass Azure 303 exam dumps

ps.

The free AZ-303 dumps PDF comes from a part of the Lead4Pass AZ-303 exam dumps. Lead4Pass AZ-303 includes two modes of VCE and PDF, you can choose any

Posted in AZ-204 Developing Solutions for Microsoft Azure Microsoft Microsoft AZ-204 microsoft az-204 dumps microsoft az-204 exam actual questions microsoft az-204 exam dumps microsoft az-204 pdf microsoft az-204 practice test microsoft az-204 preparation Microsoft Role-based Uncategorized

The latest update of Microsoft AZ-204 online exam practice and complete exam dumps

exam practice

Microsoft AZ-204 exam “Developing Solutions for Microsoft Azure”, get the latest updated AZ-204 exam questions and answers online, we share the AZ-204 exam questions in a variety of ways, you can practice the test online, download the free AZ-204 PDF.
Complete Microsoft AZ-204 exam dumps https://www.lead4pass.com/az-204.html (PDF +VCE). 324 exam questions and answers. 99.5% exam pass rate.
All issues are updated and corrected to ensure that they are true and effective.

Free Microsoft AZ-204 dumps PDF

The free AZ-204 dumps PDF comes from a part of the Lead4Pass AZ-204 exam dumps. Lead4Pass AZ-204 includes two modes of VCE and PDF, you can choose any.

Microsoft AZ-204 free online practice test

Annotation: 1. The question-answer is displayed at the end 2. The picture answer is displayed in the current

QUESTION 1

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear on the review screen.

You develop Azure solutions.

You must grant a virtual machine (VM) access to specific resource groups in Azure Resource Manager.

You need to obtain an Azure Resource Manager access token.

Solution: Use the Reader role-based access control (RBAC) role to authenticate the VM with Azure Resource Manager.

Does the solution meet the goal?

A. Yes
B. No

QUESTION 2

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains
a unique solution that might meet the stated goals. Some question sets might have more than one correct solution,
while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not
appear in the review screen.

You are developing an Azure solution to collect point-of-sale (POS) device data from 2,000 stores located throughout
the world. A single device can produce 2 megabytes (MB) of data every 24 hours. Each store location has one to five
devices that send data.

You must store the device data in Azure Blob storage. Device data must be correlated based on a device identifier.
Additional stores are expected to open in the future.

You need to implement a solution to receive the device data.

Solution: Provision an Azure Event Grid. Configure event filtering to evaluate the device identifier.
Does the solution meet the goal?

A. Yes
B. No

QUESTION 3

You need to resolve a notification latency issue.

Which two actions should you perform?

Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

A. Set Always On to true.
B. Ensure that the Azure Function is using an App Service plan.
C. Set Always On to false.
D. Ensure that the Azure Function is set to use a consumption plan.

QUESTION 4

DRAG-DROP

You plan to create a Docker image that runs as an ASP.NET Core application named ContosoApp.

You have a setup script named setup script. ps1 and a series of application files including ContosoApp.dll.

You need to create a Dockerfile document that meets the following requirements: Call setup script.ps1 when the container is built. Run ContosoApp.dll when the container starts.

The Docker document must be created in the same folder where ContosoApp.dll and setup script.ps1 is stored.

Which four commands should you use to develop the solution?

To answer, move the appropriate commands from the list of commands to the answer area and arrange them in the correct order. Select and Place:

microsoft az-204 exam questions q4
Correct Answer:
microsoft az-204 exam questions q4-1

Step 1: WORKDIR /apps/ContosoApp
Step 2: COPY ./The Docker document must be created in the same folder where ContosoApp.dll and setup script.ps1
are stored.
Step 3: EXPOSE ./ContosApp/ /app/ContosoApp
Step 4: CMD powershell ./setupScript.ps1
ENTRYPOINT [“dotnet”, “ContosoApp.dll”]
You need to create a Dockerfile document that meets the following requirements:
Call setup script.ps1 when the container is built.
Run ContosoApp.dll when the container starts.

References:
https://docs.microsoft.com/en-us/azure/app-service/containers/tutorial-custom-docker-image

QUESTION 5

A company is developing a solution that allows smart refrigerators to send temperature information to a central location. You have an existing Service Bus. The solution must receive and store messages until they can be processed. You create an Azure Service Bus instance by providing a name, pricing tier, subscription, resource group, and location.
You need to complete the configuration.

Which Azure CLI or PowerShell command should you run?

microsoft az-204 exam questions q5

A. Option A
B. Option B
C. Option C
D. Option D

QUESTION 6

You are developing an e-commerce solution that uses a microservice architecture.
You need to design a communication backplane for communicating transactional messages between various parts of
the solution. Messages must be communicated in a first-in-first-out (FIFO) order.

What should you use?

A. Azure Storage Queue
B. Azure Event Hub
C. Azure Service Bus
D. Azure Event Grid

QUESTION 7

DRAG-DROP

You are developing a solution for a hospital to support the following use cases:
1. The most recent patient status details must be retrieved even if multiple users in different locations have updated the
patient record.
2. Patient health monitoring data retrieved must be the current version or the prior version.
3. After a patient is discharged and all charges have been assessed, the patient billing record contains the final charges.
You provision a Cosmos DB NoSQL database and set the default consistency level for the database account to Strong.
You set the value for Indexing Mode to Consistent.
You need to minimize latency and any impact on the availability of the solution. You must override the default
consistency level at the query level to meet the required consistency guarantees for the scenarios.
Which consistency levels should you implement? To answer, drag the appropriate consistency levels to the correct
requirements. Each consistency level may be used once, more than once, or not at all. You may need to drag the split
bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Select and Place:

microsoft az-204 exam questions q7

Correct Answer:

microsoft az-204 exam questions q7-1

Explanation:

Box 1: Strong
Strong: Strong consistency offers a linearizability guarantee. The reads are guaranteed to return the most recent
committed version of an item. A client never sees an uncommitted or partial write. Users are always guaranteed to read
the latest committed write.

Box 2: Bounded staleness
Bounded staleness: The reads are guaranteed to honor the consistent prefix guarantee. The reads might lag behind
writes by at most “K” versions (that is “updates”) of an item or by “t” time interval. When you choose bounded staleness, the “staleness” can be configured in two ways:
The number of versions (K) of the item The time interval (t) by which the reads might lag behind the writes

Box 3: Eventual
Eventual: There\’s no ordering guarantee for reads. In the absence of any further writes, the replicas eventually
converge.
Incorrect Answers:
Consistent prefix: Updates that are returned contain some prefix of all the updates, with no gaps. Consistent prefix
guarantees that read never see out-of-order writes.

Reference:
https://docs.microsoft.com/en-us/azure/cosmos-db/consistency-levels

QUESTION 8

You are developing a solution that will use Azure messaging services.

You need to ensure that the solution uses a publish-subscribe model and eliminates the need for constant polling.

What are two possible ways to achieve the goal?

Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

A. Service Bus
B. Event Hub
C. Event Grid
D. Queue

QUESTION 9

HOTSPOT

You are configuring a new development environment for a Java application.
The environment requires a Virtual Machine Scale Set (VMSS), several storage accounts, and networking components.
The VMSS must not be created until the storage accounts have been successfully created and an associated load
balancer and virtual network are configured.

How should you complete the Azure Resource Manager template? To answer, select the appropriate options in the
answer area.

NOTE: Each correct selection is worth one point.
Hot Area:

microsoft az-204 exam questions q9
microsoft az-204 exam questions q9-1

Box 1: copyIndex
Notice that the name of each resource includes the copyIndex() function, which returns the current iteration in the loop. copy index() is zero-based.

Box 2: copy
By adding the copy element to the resources section of your template, you can dynamically set the number of resources to deploy.

Box 3: dependsOn
Example:
“type”: “Microsoft.Compute/virtualMachineScaleSets”, “apiVersion”: “2020-06-01”, “name”: “[variables(\’namingInfix\’)]”,
“location”: “[parameters(\’location\’)]”, “sku”: { “name”: “[parameters(\’vmSku\’)]”, “tier”: “Standard”, “capacity”:
“[parameters(\’instanceCount\’)]” }, “dependsOn”: [ “[resourceId(\’Microsoft.Network/loadBalancers\’,
variables(\’loadBalancerName\’))]”, “[resourceId(\’Microsoft.Network/virtualNetworks\’,
variables(\’virtualNetworkName\’))]” ],

Reference: https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/copy-resources
https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/quick-create-template-windows

QUESTION 10

A company is developing a solution that allows smart refrigerators to send temperature information to a central location.

You have an existing Service Bus.

The solution must receive and store messages until they can be processed. You create an Azure Service Bus instance
by providing a name, pricing tier, subscription, resource group, and location. You need to complete the configuration.

microsoft az-204 exam questions q10

Which Azure CLI or PowerShell command should you run?

A. Option A
B. Option B
C. Option C
D. Option D

QUESTION 11

You need to monitor ContentUploadService according to the requirements. Which command should you use?

A. az monitor metrics alert create –n alert –g … – -scopes … – -condition “avg Percentage CPU > 8”
B. az monitor metrics alert create –n alert –g … – -scopes … – -condition “avg Percentage CPU > 800”
C. az monitor metrics alert create –n alert –g … – -scopes … – -condition “CPU Usage > 800”
D. az monitor metrics alert create –n alert –g … – -scopes … – -condition “CPU Usage > 8”

QUESTION 12

DRAG-DROP

You need to add code at line EG15 in EventGridController.cs to ensure that the Log policy applies to all services.
How should you complete the code? To answer, drag the appropriate code segments to the correct locations. Each
code segment may be used once, more than once, or not at all. You may need to drag the split bar between panes or
scroll to view content.

NOTE: Each correct selection is worth one point.
Select and Place:

microsoft az-204 exam questions q12

Correct Answer:

microsoft az-204 exam questions q12-1

Scenario, Log policy: All Azure App Service Web Apps must write logs to Azure Blob storage.

Box 1: Status

Box 2: Succeeded

Box 3: operation name
Microsoft.Web/sites/write is a resource provider operation. It creates a new Web App or updates an existing one.

Reference: https://docs.microsoft.com/en-us/azure/role-based-access-control/resource-provider-operations

QUESTION 13

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains
a unique solution. Determine whether the solution meets the stated goals.

You are developing and deploying several ASP.NET web applications to Azure App Service.

You plan to save session state information and HTML output. You must use a storage mechanism with the following requirements:

1. Share session state across all ASP.NET web applications.
2. Support controlled concurrent access to the same session state data for multiple readers and a single writer.
3. Save full HTTP responses for concurrent requests. You need to store the information.

Proposed Solution: Deploy and configure Azure Cache for Redis. Update the web applications.
Does the solution meet the goal?

A. Yes
B. No

QUESTION 14

HOTSPOT

You need to configure security and compliance for the corporate website files.
Which Azure Blob storage settings should you use? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Correct Answer:

Box 1: role-based access control (RBAC)
Azure Storage supports authentication and authorization with Azure AD for the Blob and Queue services via Azure role-based access control (Azure RBAC).
Scenario: File access must restrict access by IP, protocol, and Azure AD rights.

Box 2: storage account type
Scenario: The website uses files stored in Azure Storage
Auditing of the file updates and transfers must be enabled to comply with General Data Protection Regulation (GDPR).

Creating a diagnostic setting:
1. Sign in to the Azure portal.
2. Navigate to your storage account.
3. In the Monitoring section, click Diagnostic settings (preview).
4. Choose the file as the type of storage that you want to enable logs for.
5. Click Add diagnostic setting.

Reference: https://docs.microsoft.com/en-us/azure/storage/common/storage-introduction https://docs.microsoft.com/enus/azure/storage/files/storage-files-monitoring

QUESTION 15

A company uses Azure SQL Database to store data for an app. The data includes sensitive information.
You need to implement measures that allow only members of the manager’s group to see sensitive information.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

A. Include the manager’s group.
B. Exclude the manager’s group.
C. Exclude the administrator’s group.
D. Navigate to the following URL: PUT https://management.azure.com/subscriptions/00000000-1111-2222-3333-44444
4444444/resouceGroupos/rg01/providers/Microsoft.Sql/servers/server01/databases/customers/transparentDataEncryption/current?api-version=2014-04-01
E. Run the following Azure PowerShell command: New-AzureRmSqlDatabaseDataMaskingRule -SchemaName “dbo”
-TableName “customers” -ColumnName “ssn” -MaskingFunction “Default”

Solutions:

NumberAnswerWhy
QUESTION 1BInstead, run the Invoke-RestMethod cmdlet to make a request to the local managed identity for the Azure resource’s endpoint.

Reference: https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/tutorial-windowsvm-access-arm
QUESTION 2BInstead use an Azure Service Bus, which is used for order processing and financial transactions.
Note: An event is a lightweight notification of a condition or a state change. Event hubs are usually used to react to status changes.

Reference:
https://docs.microsoft.com/en-us/azure/event-grid/compare-messaging-services
QUESTION 3ABAzure Functions can run on either a Consumption Plan or a dedicated App Service Plan. If you run in a dedicated mode, you need to turn on the Always On setting for your Function App to run properly. The Function runtime will go idle after a few minutes of inactivity, so only HTTP triggers will actually “wake up” your functions. This is similar to how WebJobs must have Always On enabled.

Scenario: Notification latency: Users report that anomaly detection emails can sometimes arrive several minutes after an anomaly is detected.

Anomaly detection service: You have an anomaly detection service that analyzes log information for anomalies. It is implemented as an Azure Machine Learning model. The model is deployed as a web service. If an anomaly is detected, an Azure Function that emails administrators is called by using an HTTP WebHook.

Reference: https://github.com/Azure/Azure-Functions/wiki/Enable-Always-On-when-running-on-dedicated-App-ServicePlan
QUESTION 5AA service bus instance has already been created (Step 2 below). Next is step 3, Create a Service Bus queue.
Note:
Steps:

Step 1: # Create a resource group
resourceGroupName=”myResourceGroup”
az group create –name $resourceGroupName –location Erastus

Step 2: # Create a Service Bus messaging namespace with a unique name
namespaceName=myNameSpace$RANDOM az servicebus namespace create –resource-group $resourceGroupName –name $namespaceName –location eastus

Step 3: # Create a Service Bus queue
az servicebus queue create –resource-group $resourceGroupName –namespace-name $namespaceName –name BasicQueue

Step 4: # Get the connection string for the namespace
connectionString=$(az servicebus namespace authorization-rule keys list –resource-group $resourceGroupName –namespace-name $namespaceName –name RootManageSharedAccessKey –query primaryConnectionString
–output tsv)

Reference:
https://docs.microsoft.com/en-us/azure/service-bus-messaging/service-bus-quickstart-cli
QUESTION 6AAs a solution architect/developer, you should consider using Service Bus queues when:
Your solution requires the queue to provide a guaranteed first-in-first-out (FIFO) ordered delivery.
Reference:

https://docs.microsoft.com/en-us/azure/service-bus-messaging/service-bus-azure-and-service-bus-queues-comparedcontrasted
QUESTION 8ACIt is strongly recommended to use available messaging products and services that support a publish-subscribe model, rather than building your own. In Azure, consider using Service Bus or Event Grid. Other technologies that can be used for pub/sub messaging include Redis, RabbitMQ, and Apache Kafka.

Reference: https://docs.microsoft.com/en-us/azure/architecture/patterns/publisher-subscriber
QUESTION 10DA service bus instance has already been created (Step 2 below). Next is step 3, Create a Service Bus queue. Note: Steps:

Step 1: # Create a resource group
resourceGroupName=”myResourceGroup” az group create –name $resourceGroupName –location Erastus

Step 2: # Create a Service Bus messaging namespace with a unique name
namespaceName=myNameSpace$RANDOM az servicebus namespace create –resource-group $resourceGroupName –name $namespaceName –location eastus

Step 3: # Create a Service Bus queue
az servicebus queue create –resource-group $resourceGroupName –namespace-name $namespaceName –name BasicQueue

Step 4: # Get the connection string for the namespace
connectionString=$(az servicebus namespace authorization-rule keys list –resource-group $resourceGroupName –namespace-name $namespaceName –name RootManageSharedAccessKey –query primaryConnectionString –output tsv)

References:
https://docs.microsoft.com/en-us/azure/service-bus-messaging/service-bus-quickstart-cli
QUESTION 11BScenario: An alert must be raised if the ContentUploadService uses more than 80 percent of available CPU-cores

Reference: https://docs.microsoft.com/sv-se/cli/azure/monitor/metrics/alert
QUESTION 13AThe session state provider for Azure Cache for Redis enables you to share session information between different instances of an ASP.NET web application.
The same connection can be used by multiple concurrent threads.
Redis supports both read and write operations.
The output cache provider for Azure Cache for Redis enables you to save the HTTP responses generated by an ASP.NET web application.

Note: Using the Azure portal, you can also configure the eviction policy of the cache, and control access to the cache by adding users to the roles provided. These roles, which define the operations that members can perform, include Owner, Contributor, and Reader. For example, members of the Owner role have complete control over the cache (including security) and its contents, members of the Contributor role can read and write information in the cache, and members of the Reader role can only retrieve data from the cache.

Reference: https://docs.microsoft.com/en-us/azure/architecture/best-practices/caching
QUESTION 15BEDynamic data masking helps prevent unauthorized access to sensitive data by enabling customers to designate how much of the sensitive data to reveal with minimal impact on the application layer.
SQL users excluded from masking – A set of SQL users or AAD identities that get unmasked data in the SQL query results.

Note: The New-AzureRmSqlDatabaseDataMaskingRule cmdlet creates a data masking rule for an Azure SQL database.

References: https://docs.microsoft.com/en-us/powershell/module/azurerm.sql/newazurermsqldatabasedatamaskingrule?view=azurermps-6.13.0
Get MoreAZ-204 Dumpshttps://www.lead4pass.com/az-204.html (Total Questions: 324 Q&A)

Summary:

We share the latest updated Microsoft Azure 204 exam practice questions for free to help you understand the current exam situation and improve your exam experience.
The free AZ-204 exam practice questions cannot help you pass the exam 100% successfully. If you want to pass the exam successfully for the first time, please choose Lead4Pass Azure 204 exam dumps

ps.

The free AZ-204 dumps PDF comes from a part of the Lead4Pass AZ-204 exam dumps. Lead4Pass AZ-204 includes two modes of VCE and PDF, you can choose any

Posted in AZ-104 Microsoft Azure Administrator Microsoft Microsoft AZ-104 microsoft az-104 dumps microsoft az-104 dumps pdf microsoft az-104 exam dumps microsoft az-104 pdf microsoft az-104 practice test microsoft az-104 study guide Microsoft Role-based Uncategorized

[15% off] Microsoft Azure Administrator – AZ-104 Exam dumps

Microsoft Azure Administrator exam dumps

Welcome! We go directly to the topic. This is a blog about Microsoft AZ-104 exam questions.
We shared the newly updated Microsoft AZ-104 exam questions and answers. You can practice the test online.
You can also download the AZ-104 exam PDF online for free on Google Drive.
All free content comes from Lead4Pass AZ-104 exam dumps https://www.lead4pass.com/az-104.html (PDF+VCE).
Lead4Pass has complete AZ-104 exam questions and answers. All exam questions have been updated to ensure immediate validity!

Microsoft AZ-104 exam discount code comes from Lead4Pass

Our topic today includes the exam discount code for AZ-104, so here’s a look at the latest updates for 2021!

microsoft coupon code

Microsoft AZ-104 Exam pdf

Microsoft AZ-104 Exam pdf is part of the Lead4Pass AZ-104 exam dumps, and free content is also up-to-date,
helping you stay up-to-date with some of the latest exam content

Microsoft AZ-104 free online practice test

QUESTION 1

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains
a unique solution that might meet the stated goals. Some question sets might have more than one correct solution,
while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it.
As a result, these questions will not appear on the review screen.
Your company registers a domain name of contoso.com.
You create an Azure DNS zone named contoso.com, and then you add an A record to the zone for a host named www
that has an IP address of 131.107.1.10. You discover that Internet hosts are unable to resolve www.contoso.com to the
131.107.1.10 IP address.
You need to resolve the name resolution issue.
Solution: You create a PTR record for www in the contoso.com zone.
Does this meet the goal?

A. Yes
B. No

Correct Answer: B

Modify the Name Server (NS) record.
An NS record would be created automatically and you cannot modify it (but you can add to it to support co-hosting
domains). You can add additional name servers to this NS record set, to support co-hosting domains with more than one DNS provider. You can also modify the TTL and metadata for this recordset. However, you cannot remove or modify the prepopulated Azure DNS name servers.
References: https://docs.microsoft.com/en-us/azure/dns/dns-delegate-domain-azure-dns

QUESTION 2

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains
a unique solution that might meet the stated goals. Some question sets might have more than one correct solution,
while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear on the review screen. You manage a virtual network named VNet1 that is hosted in the West US Azure region. VNet1 hosts two virtual machines named VM1 and VM2 that run Windows Server. You need to inspect all the network traffic from VM1 to VM2 for a period of three hours. Solution: From Azure Network Watcher, you create a packet capture. Does this meet the goal?

A. Yes
B. No

Correct Answer: A

https://azure.microsoft.com/en-us/updates/general-availability-azure-network-watcher-connection- monitor-inall-publications/

QUESTION 3

Your company registers a domain name of contoso.com.
You create an Azure DNS named contoso.com and then you add an A record to the zone for a host named www that
has an IP address of 131.107.1.10.
You discover that Internet hosts are unable to resolve www.contoso.com to the 131.107.1.10 IP address.
You need to resolve the name resolution issue.
Solution: You modify the name server at the domain registrar.
Does this meet the goal?

A. Yes
B. No

Correct Answer: B

References: https://docs.microsoft.com/en-us/azure/dns/dns-delegate-domain-azure-dns

QUESTION 4

You have an Azure virtual machine mat that runs Windows Server 2019 and has the following configurations:
*
Name: VM1
*
Location: Welt US
*
Connected to: VNfT1
*
Private IP address: 10.1.0.4
*
Public IP address: 52 18685.63
*
DNS suffix m Windows Server.Adatum.com
You create the Azure DNS zones shown in the following table.

microsoft az-104 exam questions q4

1.
Adatum.com only
2.
Adatum. pri and adatum.com only

QUESTION 5

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains
a unique solution that might meet the stated goals. Some question sets might have more than one correct solution,
while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear on the review screen. You have an Azure Active Directory (Azure AD) tenant named Adatum and an Azure Subscription named Subscription1. Adatum contains a group named Developers. Subscription1 contains a resource group named Dev.
You need to provide the Developers group with the ability to create Azure logic apps in the Dev resource group.
Solution: On Dev, you assign the Logic App Contributor role to the Developers group.
Does this meet the goal?

A. Yes
B. No

Correct Answer: A

The Logic App Contributor role lets you manage the logic app, but not access them. It provides access to view, edit, and update a logic app.
References:
https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles
https://docs.microsoft.com/en-us/azure/logic-apps/logic-apps-securing-a-logic-app

QUESTION 6

Which blade should you instruct the finance department auditors to use?

A. Partner information
B. Overview
C. Payment methods
D. Invoices

Correct Answer: D

You can opt-in and configure additional recipients to receive your Azure invoice in an email. This feature may not be available for certain subscriptions such as support offers, Enterprise Agreements, or Azure in Open.

microsoft az-104 exam questions q6

Click Opt in and accept the terms.
Scenario: During the testing phase, auditors in the finance department must be able to review all Azure costs from the past week.
References: https://docs.microsoft.com/en-us/azure/billing/billing-download-azure-invoice-daily-usage-date

QUESTION 7

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains
a unique solution that might meet the stated goals. Some question sets might have more than one correct solution,
while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear on the review screen.
You deploy an Azure Kubernetes Service (AKS) cluster named AKS1.
You need to deploy a YAML file to AKS1.
Solution: From the Azure CLI, you run a copy.
Does this meet the goal?

A. Yes
B. No

Correct Answer: B

Kubectl is not installed by installing AZ CLI. As stated Azure CLI is already available but installing Azure CLI doesn\’t mean that the Azure Kubernetes client is also installed. So before running any aks command, we have to install kubectl, the Kubernetes command-line client. az aks install-CLI Reference: https://docs.microsoft.com/en-us/azure/aks/kuberneteswalkthrough#connect-to-the-cluster

QUESTION 8

You have an Azure subscription that contains two resource groups named RG1 and RG2. RG2 does not contain any
resources. RG1 contains the resources in the following table.

microsoft az-104 exam questions q8

Which resource can you move to RG2?

A. W10_OsDisk
B. VNet1
C. VNet3
D. W10

Correct Answer: B

When moving a virtual network, you must also move its dependent resources. For example, you must move gateways with the virtual network. VM W10, which is in Vnet1, is not a dependent resource. Incorrect Answers:
A: Managed disks don\’t support the move.
C: Virtual networks (classic) can\’t be moved.
D: Virtual machines with the managed disks cannot be moved. References:
https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-move- resources#virtual-machineslimitations

QUESTION 9

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains
a unique solution that might meet the stated goals. Some question sets might have more than one correct solution,
while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear on the review screen. You have an Azure subscription named Subscription1. Subscription1 contains a resource group named RG1. RG1 contains resources that were deployed by using templates. You need to view the date and time when the resources were created in RG1. Solution: From the Subscriptions blade, you select the subscription, and then click Resource providers. Does this meet the goal?

A. Yes
B. No

Correct Answer: B

Through activity logs, you can determine:
1. what operations were taken on the resources in your subscription
2. who started the operation
3. when the operation occurred
4. the status of the operation
5. the values of other properties that might help you research the operation
1. On the Azure portal menu, select Monitor, or search for and select Monitor from any page
2. Select Activity Log.

microsoft az-104 exam questions q9
microsoft az-104 exam questions q9-1
  1. You see a summary of recent operations. A default set of filters is applied to the operations. Notice the information on
    the summary includes who started the action and when it happened.
microsoft az-104 exam questions q9-2

Reference: https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/view-activity-logs

QUESTION 10

HOTSPOT
You have an Azure subscription.
You plan to use Azure Resource Manager templates to deploy 50 Azure virtual machines that will be part of the same
availability set. You need to ensure that as many virtual machines as possible are available in the fabric fails or during servicing. How should you configure the template? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

microsoft az-104 exam questions q10

Correct Answer:

microsoft az-104 exam questions q10-1

as per https://docs.microsoft.com/en-us/rest/api/compute/availabilitysets/createorupdate

you can only specify an integer, so 3 and 20 are the answers (not max, and for sure not 0) Request Body Name Required Type Description properties.platformFaultDomainCount integer Fault Domain count. properties.platformUpdateDomainCount integer Update Domain count. Use two fault domains. 2 or 3 is the max value, depending on which region you are in. Use 20 for platformUpdateDomainCount Increasing the update domain (platformUpdateDomainCount) helps with capacity and availability planning when the platform reboots nodes. A higher number for the pool (20 is max) means that fewer of their nodes in any given availability set would be rebooted at once.
References:
https://www.itprotoday.com/microsoft-azure/check-if-azure-region-supports-2-or-3-fault-domains-managed-disks
https://github.com/Azure/acs-engine/issues/1030

QUESTION 11

You have an Azure subscription named Subscription 1 that contains two Azure virtual networks named VNet1 and
VNet2. VNet1 contains a VPN gateway named VPNGW1 that uses static routing. There is a site-to-site VPN connection
between your on-premises network and VNet1. On a computer named Client1 that runs Windows 10, you configure a
point-to-site VPN connection to VNet1. You configure virtual network peering between VNet1 and VNet2. You verify that you can connect to VNet2 from the on-premises network. Client1 is unable to connect to VNet2. You need to ensure that you can connect Client1 to VNet2.
What should you do?

A. Select Allow gateway transit on VNet2.
B. Select Allow gateway transit on VNet1.
C. Download and re-install the VPN client configuration package on Client1.
D. Enable BGP on VPNGW1

Correct Answer: C

References: https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-point-to-site-routing

QUESTION 12

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains
a unique solution that might meet the stated goals. Some question sets might have more than one correct solution,
while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear on the review screen. You have an Azure Active Directory (Azure AD) tenant named Adatum and an Azure subscription named Subscription1. Adatum contains a group named Developers. Subscription1 contains a resource group named Dev.
You need to provide the Developers group with the ability to create Azure logic apps in the Dev resource group.
Solution: On Subscription1, you assign the DevTest Labs User role to the Developers group.
Does this meet the goal?

A. Yes
B. No

Correct Answer: B

DevTest Labs User role only lets you connect, start, restart, and shutdown virtual machines in your Azure DevTest
Labs. You would need the Logic App Contributor role.

References:
https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles
https://docs.microsoft.com/en-us/azure/logic-apps/logic-apps-securing-a-logic-app

QUESTION 13

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains
a unique solution that might meet the stated goals. Some question sets might have more than one correct solution,
while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear on the review screen.
You have an Azure subscription that contains 10 virtual networks. The virtual networks are hosted in separate resource
groups. Another administrator plans to create several network security groups (NSGs) in the subscription. You need to ensure that when an NSG is created, it automatically blocks TCP port 8080 between the virtual networks.
Solution: From the Resource provider’s blade, you unregister Microsoft.ClassicNetwork provider.
Does this meet the goal?

A. Yes
B. No

Correct Answer: B

You should use a policy definition.
Reference:
https://docs.microsoft.com/en-us/azure/azure-policy/policy-definition

QUESTION 14

HOTSPOT
You have an Azure subscription named Subscription1 that contains the resources in the following table.

microsoft az-104 exam questions q14

VM1 and VM2 run the websites in the following table.

microsoft az-104 exam questions q14-1

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct
selection is worth one point.
Hot Area:

microsoft az-104 exam questions q14-2

Correct Answer:

microsoft az-104 exam questions q14-3

Vm1 is in Pool1. Rule2 applies to Pool1, Listener 2, and site2.contoso.com

QUESTION 15

You have an Azure subscription that contains an Azure Active Directory (Azure AD) tenant named contoso.com and an
Azure Kubernetes Service (AKS) cluster named AKS1. An administrator reports that she is unable to grant access to
AKS1 to the users in contoso.com. You need to ensure that access to AKS1 can be granted to the contoso.com users.
What should you do first?

A. From contoso.com, modify the Organization relationships settings.
B. From contoso.com, create an OAuth 2.0 authorization endpoint.
C. Recreate AKS1.
D. From AKS1, create a namespace.

Correct Answer: B

With Azure AD-integrated AKS clusters, you can grant users or groups access to Kubernetes resources within a
namespace or across the cluster. To obtain a kubectl configuration context, a user can run the az aks get-credentials
command.
When a user then interacts with the AKS cluster with kubectl, they\’re prompted to sign in with their Azure AD
credentials. This approach provides a single source for user account management and password credentials. The user
can only access the resources as defined by the cluster administrator.
Azure AD authentication is provided to AKS clusters with OpenID Connect. OpenID Connect is an identity layer built on
top of the OAuth 2.0 protocol. For more information on OpenID Connect, see the Open ID connect documentation.
From inside of the Kubernetes cluster, Webhook Token Authentication is used to verify authentication tokens. Webhook token authentication is configured and managed as part of the AKS cluster.

microsoft az-104 exam questions q15

Reference:
https://kubernetes.io/docs/reference/access-authn-authz/authentication/ https://docs.microsoft.com/enus/azure/aks/concepts-identity

Summary:

This article shares the latest updated Microsoft AZ-104 exam dumps https://www.lead4pass.com/az-104.html (Total Questions: 500 Q&A). Free online practice test, free online download of exam pdf, and Lead4pass 15% exam discount code 2021.

ps.

Microsoft AZ-104 Exam pdf is part of the Lead4Pass AZ-104 exam dumps, and free content is also up-to-date,
helping you stay up-to-date with some of the latest exam content

Posted in 98-365 dumps 98-365 exam questions 98-365 practice test 98-365 Windows Server Administration Fundamentals Microsoft Microsoft MTA Uncategorized

[15% off] Windows Server Administration Fundamentals – 98-365 Exam dumps

microsoft mta exam dumps

Welcome! We go directly to the topic. This is a blog about Microsoft 98-365 exam questions.
We shared the newly updated Microsoft 98-365 exam questions and answers. You can practice the test online.
You can also download the 98-365 exam PDF online for free on Google Drive.
All free content comes from Lead4Pass 98-365 exam dumps https://www.lead4pass.com/98-365.html (PDF+VCE).
Lead4Pass has complete 98-365 exam questions and answers. All exam questions have been updated to ensure immediate validity!

Microsoft 98-365 exam discount code comes from Lead4Pass

Our topic today includes the exam discount code for 98-365, so here’s a look at the latest updates for 2021!

microsoft coupon code

Microsoft 98-365 Exam pdf

Microsoft 98-365 Exam pdf is part of the Lead4Pass 98-365 exam dumps, and free content is also up-to-date,
helping you stay up-to-date with some of the latest exam content

Microsoft 98-365 free online practice test

QUESTION 1

Distributed File System (DFS) is used to:

A. Delegate permissions to a global distribution group.
B. Implement parity.
C. Group shared folders from different servers.
D. Configure spanned and extended volumes.

Correct Answer: C

Distributed File System (DFS) is a set of client and server services that allow an organization using Microsoft Windows servers to organize many distributed SMB file shares into a distributed file system. DFS provides location transparency and redundancy to improve data availability in the face of failure or heavy load by allowing shares in multiple different locations to be logically grouped under one folder or DFS root.

QUESTION 2

You buy a new USB hard drive for your server. After connecting the drive, you need to make this drive available to
Windows. In Computer Management Disk Management you see the drive, but it is not visible in Explorer\’s Computer view, as shown in the following image:

microsoft 98-365 exam questions q2

Use the drop-down menus to select the answer choice that completes each statement. Each correct selection is worth
one point. Hot Area:

microsoft 98-365 exam questions q2-1

Correct Answer:

microsoft 98-365 exam questions q2-2

Use simple to get a separate volume.
Use NTFS to be able to use the whole drive. exFAT and FAT32 have restrictions on size.
Simple. This will assign a new drive letter to your new disk and each drive will work independently of the other. Spanned. Your new HDD will show up as part of your current HDD.

QUESTION 3

You are an IT technician for a company that has an environment consisting entirely of computers running Windows
Server 2016 or Windows 10. Your network is configured as an Active Directory Domain Services (AD DS) domain.
You need to establish a secure method that allows employees to work remotely but still have access to the internal
network resources. What are two possible ways to achieve this goal? (Choose two.)

A. Offline Files
B. DirectAccess
C. Network Access Protection (NAP)
D. Virtual Private Network (VPN)
E. Distributed File System (DFS) Namespace
F. Remote Desktop

Correct Answer: BD

B: DirectAccess, also known as Unified Remote Access, is a VPN-like technology that provides intranet connectivity to client computers when they are connected to the Internet.

D: The remote users can get secure remote access through a VPN. References: http://en.wikipedia.org/wiki/DirectAccess

QUESTION 4

Which file extension indicates a Hyper-V virtual disk file?

A. . xml
B. . vhd
C. ,vud
D. . vsd

Correct Answer: B

QUESTION 5

Which type of additional drivers does the Windows 10 installation phase prompt for?

A. Video
B. Network
C. Use
D. Storage

Correct Answer: D

You might be prompted for the mass storage device driver.
When installing Windows 10, you might see one of the following error messages:
References: http://windows.microsoft.com/en-us/windows7/windows-7-installation-problem-hard-drive-not-found

QUESTION 6

You are working on a Windows 2016 environment.
You find that some applications are not responding while creating a project. You want to terminate these applications
anyhow and start a new session.

What will you do to accomplish the task?

A. Use Device Manager.
B. Use Network Monitor.
C. Use System Monitor.
D. Use Task Manager.

Correct Answer: D

In order to accomplish the task, you should use Task Manager. A task manager is a program used to provide
information about the processes and programs running on a computer, as well as the general status of the computer. It can also be used to terminate processes and programs, as well as change the process’s priority. The task manager is most commonly accessed by pressing the buttons Control-Alt-Delete. The task manager also displays all the services that are currently running as well as those that were stopped. All information\’s about the services such as Process ID and their group if they are applicable.

Incorrect Answers:
A: Device Manager is a tool that can be used to manage devices on a computer. Using Device Manager, users can view and change device properties, update device drivers, configure device settings, and uninstall devices. Device Manager is organized in a tree format with the top branches representing device categories. Users can use Device Manager to identify port resource conflicts. Device Manager can also be used to enable or disable a device.

B: Network Monitor is a tool used to monitor data sent and received by the local computer. Network Monitor can perform the following functions:
Capturing or tracing data and filtering it based on different attributes.
Monitoring throughput based on bytes or frames.
Monitoring bandwidth based on a percentage of the network used.
Monitoring errors, which can be a possible consequence of an overloaded network.

C: System Monitor is a Windows utility that enables users to monitor server activity and performance using predefined objects and counters or user-defined counters. It tracks items such as I/O, memory usage, user connections, and locks. Although it can monitor the number of locks held, it cannot be used to capture information on particular locks and activities.

QUESTION 7

You work as a Server Administrator for company Inc. The company has a Windows Server 2016 domain-based
network. The network contains twenty Windows Server 2016 and 600 Windows 10 client computers.
You want to manage the installation of Windows updates on the client computers so that each client does not have to
download updates for his computer. You also want only those updates to be installed on the client computers that you
have tested and approved.

Which of the following tools will you use to accomplish the task?

A. EMS
B. DISM
C. SCCM
D. SCOM

Correct Answer: C

In order to accomplish the task, you should use SCCM (System Center Configuration Manager). It is used to
automatically install Windows updates on the computer. It allows an administrator to test and approve the updates to be installed on the client computers. System Center Configuration Manager (SCCM), formerly Systems Management Server (SMS), is a systems management software product by Microsoft for managing large groups of Windows-based computer systems. Configuration Manager provides remote control, patch management, software distribution, operating system deployment, network access protection, and hardware and software inventory.

Incorrect Answers:

A: Emergency Management Services (EMS) is a Windows Server 2016 tool that allows a server to be controlled when it is in a minimally functional state. It allows administrators to take control of the server by connecting through a serial port using an application such as Telnet. EMS also enables administrators to perform all normal server management tasks through the command line. EMS is a helpful tool in case of emergency when other methods of administration are not available. Most organizations use EMS to manage a server that is not responding to normal management technologies.

B: DISM stands for Deployment Image Servicing and Management. DISM is a command-line tool used to service Windows images offline before deployment. This tool is also used to install, uninstall, configure, and update Windows features, packages, drivers, and international settings. DISM is also distributed in the Windows OEM Pre-installation Kit and the Windows Automated Installation Kit (Windows AIK). It has replaced several Windows OPK tools, including PEimg, Intlcfg, and Package Manager.

D: System Center Operations Manager (SCOM) is a tool that offers service-oriented monitoring that enables
administrators to monitor information technology services, scale monitoring across large organizations, and use Microsoft application and operating system knowledge to resolve operational problems. It provides an easy-to-use monitoring environment that monitors a large number of servers, applications, and clients to provide a comprehensive view of the health of an organization\’s IT environments.

QUESTION 8

You plan to repurpose an existing computer to run a clean installation of Windows Server 2016 Standard edition. Which type of hard drive interface should you use for the boot drive?

A. PATA
B. ATA
C. SATA
D. IDE

Correct Answer: C

References: https://www.ifixit.com/Wiki/Hard_Drive_Interfaces

QUESTION 9

What port do Remote Desktop and Remote Assistance use?

A. 1471
B. 3389
C. 4043
D. 8080

Correct Answer: B

To access a computer running Remote Desktop Services, you use Remote Desktop Connections to access a
computer\’s graphical user interface, including the desktop, start menu, and programs, just as if you were sitting in front of the computer. Two technologies that allow you to remotely access a computer\’s desktop are Remote Desktop and Remote Assistance over TCP port 3389.

QUESTION 10

What boot option starts Windows with a minimal set of drivers and services?

A. Safe mode
B. Last Known Good Configuration
C. Directory Services Restore Mode
D. Debugging Mode

Correct Answer: A

Safe mode starts Windows with a minimal set of drivers and services. If you make a change to the system and Windows no longer boots, you can try safe mode.

QUESTION 11

You are viewing the Device Manager on a computer running Windows Server 2016. What does a down black arrow
indicate?

A. The device is having down and having problems.
B. The device is disabled.
C. The device is a generic driver.
D. The device is not connected.

Correct Answer: B

A down black arrow indicates a disabled device. A disabled device is physically present in the computer and is consuming resources, but it does not have a driver loaded.

QUESTION 12

This question requires that you evaluate the underlined text to determine if it is correct.
You install three 600GB hard disks in a computer running Windows Server 2016 Standard edition. You need to
configure at least 1TB of fault-tolerant storage from the hard disks.
You configure that hard disk as a RAID 5 configuration.
Review the underlined text. If it makes the statement correct, select “No change is needed”. If the statement is incorrect, select the answer choice that makes the statement correct.

A. RAID 0
B. RAID 1
C. RAID 10
D. No change is needed

Correct Answer: C

References: https://www.prepressure.com/library/technology/raid

QUESTION 13

You work as a Server Administrator for company Inc. The company has a virtual server hosted on a Windows Server
2016 server with the Hyper-V role installed.
You have upgraded an application on the virtual server. You experience that this upgrade causes problems. Now, you
want to quickly revert back to the point before the changes are made. Which of the following will you use to accomplish the task?

A. Virtual Server Migration Toolkit
B. Checkpoints
C. Windows System Resource Manager
D. Logical unit number

Correct Answer: B

In order to accomplish the task, you should use checkpoints. Snapshots have been improved in Windows Server 2016 and are now called checkpoints.
Checkpoints are files that contain the configuration and data in a virtualized machine.
The Hyper-V Manager Console provides the facility to take a snapshot of a virtual machine running under Hyper-V. This snapshot can be used to quickly roll back the instance of an operating system when the snapshot was taken. In-state of any disaster such as malfunctioning virtual machines, these snapshots are very helpful to recover from such situations.

Incorrect Answers:

A: The Virtual Server Migration Toolkit (VSMT), a command-line-based tool provided by Windows Server 2016, is used to migrate existing servers in the network environment to a virtualized partition of Windows Server 2016. VSMT has been specially designed for administrators to handle a small number of servers that need to be virtualized.
It, however, cannot be used to manage these servers. It uses XML files to store configuration data during the migration process. The tool is compatible with both the Hyper-V and the Virtual Server 2005 R2.

C: Windows System Resource Manager (WSRM) is a tool for resource management and enables the allocation of resources, including processor and memory resources, among multiple applications based on business priorities. With WSRM, a system administrator can set CPU and memory allocation policies on applications, manage CPU utilization, and apply policies to users or groups on a Terminal Services application server. WSRM also applies limits to process working set size and committed memory consumption.

D: The logical unit number or LUN is the identifier of a SCSI logical unit, and by extension of a Fibre Channel or iSCSI logical unit. A logical unit is a SCSI protocol entity, which performs classic storage operations such as read and writes. Each SCSI target provides one or more logical units. A logical unit typically corresponds to a storage volume and is represented within a computer operating system as a device.

QUESTION 14

Which type of group can contain any user or group in any domain and can be assigned to any resource in any domain?

A. domain local group
B. global group
C. universal group
D. distribution group

Correct Answer: C

Universal group scope is designed to contain global groups from multiple domains. Universal groups can contain global groups, other universal groups, and user accounts. Because global catalogs replicate universal group membership, you should limit the membership to global groups.

QUESTION 15

You work as a Network Administrator for Net Perfect Inc. The company has a Windows Server 2016 network
environment.
The network is configured as a Windows Active Directory-based single forest single domain network. You use
Distributed File System Replication (DFSR) to replicate SYSVOL.
Which of the following statements are true about Distributed File System Replication (DFSR)? Each correct answer
represents a complete solution. (Choose three.)

A. It makes use of a staging folder for staging the file before the file is send or received.
B. It can detect insertions, removals, and rearrangement of data in files.
C. It is considered a state-based, Multimaster replication engine that is used in replication scheduling and bandwidth
throttling.
D. It replicates the entire file when a file is changed.

Correct Answer: ABC

Distributed File System Replication (DFSR) is considered a state-based, Multimaster replication engine that is used in replication scheduling and bandwidth throttling. It can detect insertions, removals, and rearrangement of data in files.

This permits DFSR to replicate the file blocks that are changed when files get updated. It detects changes on the volume using the Update Sequence Number journal, and then DFSR replicates changes only after the file is closed. It makes use of a staging folder for staging the file before the file is sent or received. The RDC protocol supports finding the blocks that have changed in the file.

Incorrect Answers:

D: DFSR does not replicate the entire file when a file is changed. It replicates only the changed blocks when the file is changed.
References: https://msdn.microsoft.com/en-us/library/windows/desktop/bb540031(v=vs.85).aspx

More popular MTA exam dumps

Share some of the most popular Microsoft MTA exam series

Exam NameExam PDFExam PracticeAdvanced Exam Dumps
98-36198-361 pdf98-361 exam practicehttps://www.lead4pass.com/98-361.html
98-36498-364 pdf 98-364 exam practice https://www.lead4pass.com/98-364.html
98-37598-375 pdf 98-375 exam practice https://www.lead4pass.com/98-375.html
98-38298-382 pdf 98-382 exam practice https://www.lead4pass.com/98-382.html
98-38898-388 pdf 98-388 exam practice https://www.lead4pass.com/98-388.html

Summary:

This article shares the latest updated Microsoft 98-365 exam dumps https://www.lead4pass.com/98-365.html (Total Questions: 400 Q&A). Free online practice test, free online download of exam pdf, and Lead4pass 15% exam discount code 2021.

ps.

Microsoft 98-365 Exam pdf is part of the Lead4Pass 98-365 exam dumps, and free content is also up-to-date,
helping you stay up-to-date with some of the latest exam content

Posted in Microsoft Microsoft Certified: Security Operations Analyst Associate sc-200 exam dumps sc-200 exam Microsoft Security Operations Analyst sc-200 exam pdf sc-200 exam questions sc-200 practice test Uncategorized

[15% off] Microsoft Security Operations Analyst – SC-200 Exam dumps

sc-200 discount

Welcome! We go directly to the topic. This is a blog about Microsoft SC-200 exam questions.
We shared the newly updated Microsoft SC-200 exam questions and answers. You can practice the test online.
You can also download the SC-200 exam PDF online for free on Google Drive.
All free content comes from Lead4Pass sc-200 exam dumps https://www.lead4pass.com/sc-200.html (PDF+VCE).
Lead4Pass has complete SC-200 exam questions and answers. All exam questions have been updated to ensure immediate validity!

Microsoft SC-200 exam discount code comes from Lead4Pass

Our topic today includes the exam discount code for sc-200, so here’s a look at the latest updates for 2021!

microsoft coupon code

Microsoft sc-200 Exam pdf

Microsoft sc-200 Exam pdf is part of the Lead4Pass sc-200 exam dumps, and free content is also up-to-date,
helping you stay up-to-date with some of the latest exam content

Microsoft sc-200 free online practice test

QUESTION #1

You have a Microsoft 365 subscription that uses Microsoft Defender for Office 365.

You have Microsoft SharePoint Online sites that contain sensitive documents.

The documents contain customer account numbers that each consists of 32 alphanumeric characters.

You need to create a data loss prevention (DLP) policy to protect sensitive documents.

What should you use to detect which documents are sensitive?

A. SharePoint search
B. a hunting query in Microsoft 365 Defender
C. Azure Information Protection
D. RegEx pattern matching
Correct Answer: C

Reference: https://docs.microsoft.com/en-us/azure/information-protection/what-is-information-protection

QUESTION #2

DRAG-DROP
You open the Cloud App Security portal as shown in the following exhibit.

microsoft sc-200 exam questions q2

You need to remediate the risk for the Launchpad app.

Which four actions should you perform in sequence?

To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. Select and Place:

microsoft sc-200 exam questions q2-1

Correct Answer:

microsoft sc-200 exam questions q2-2

QUESTION #3

Note: This question is part of a series of questions that present the same scenario.

Each question in the series contains a unique solution that might meet the stated goals.

Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it.

As a result, these questions will not appear on the review screen.

You are configuring Microsoft Defender for Identity integration with Active Directory.

From the Microsoft Defender for identity portal, you need to configure several accounts for attackers to exploit.

Solution: From Entity tags, you add the accounts as Honeytoken accounts.

Does this meet the goal?

A. Yes
B. No
Correct Answer: A

Reference: https://docs.microsoft.com/en-us/defender-for-identity/manage-sensitive-honeytoken-accounts

QUESTION #4

DRAG-DROP

You are informed of a new common vulnerabilities and exposures (CVE) vulnerability that affects your environment.

You need to use Microsoft Defender Security Center to request remediation from the team responsible for the affected
systems if there is a documented active exploit available.

Which three actions should you perform in sequence?

To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Select and Place:

microsoft sc-200 exam questions q4

Correct Answer:

microsoft sc-200 exam questions q4-1

QUESTION #5

DRAG-DROP

You are investigating an incident by using Microsoft 365 Defender.

You need to create an advanced hunting query to detect failed sign-in authentications on three devices named CFOLaptop, CEOLaptop, and COOLaptop.

How should you complete the query?

To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Select and Place:

microsoft sc-200 exam questions q5
Correct Answer:
microsoft sc-200 exam questions q5-1

QUESTION #6

Your company uses Azure Sentinel to manage alerts from more than 10,000 IoT devices.

A security manager at the company reports that tracking security threats is increasingly difficult due to a large number
of incidents.

You need to recommend a solution to provide a custom visualization to simplify the investigation of threats and to infer threats by using machine learning.

What should you include in the recommendation?

A. built-in queries
B. Livestream
C. notebooks
D. bookmarks
Correct Answer: C

Reference: https://docs.microsoft.com/en-us/azure/sentinel/notebooks

QUESTION #7

Note:

This question is part of a series of questions that present the same scenario.

Each question in the series contains a unique solution that might meet the stated goals.

Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it.

As a result, these questions will not appear on the review screen.

You use Azure Security Center. You receive a security alert in Security Center.

You need to view recommendations to resolve the alert in Security Center.

Solution: From Security alerts, you select the alert, select Take Action, and then expand the Mitigate the threat section.

Does this meet the goal?

A. Yes
B. No

Correct Answer: A

Reference: https://docs.microsoft.com/en-us/azure/security-center/security-center-managing-and-responding-alerts

QUESTION #8

Your company uses Azure Security Center and Azure Defender.

The security operations team at the company informs you that it does NOT receive email notifications for security
alerts.

What should you configure in Security Center to enable the email notifications?

A. Security solutions
B. Security policy
C. Pricing and settings
D. Security alerts
E. Azure Defender
Correct Answer: C

Reference: https://docs.microsoft.com/en-us/azure/security-center/security-center-provide-security-contact-details

QUESTION #9

HOTSPOT

You manage the security posture of an Azure subscription that contains two virtual machines named vm1 and vm2.

The secure score in Azure Security Center is shown in the Security Center exhibit. (Click the Security Center tab.)

Azure Policy assignments are configured as shown in the Policies exhibit. (Click the Policies tab.)

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Hot Area:

microsoft sc-200 exam questions q9

Correct Answer:

microsoft sc-200 exam questions q9-1

QUESTION #10

You need to visualize Azure Sentinel data and enrich the data by using third-party data sources to identify indicators of
compromise (IoC).

What should you use?

A. notebooks in Azure Sentinel
B. Microsoft Cloud App Security
C. Azure Monitor
D. hunting queries in Azure Sentinel
Correct Answer: A

Reference: https://docs.microsoft.com/en-us/azure/sentinel/notebooks

QUESTION #11

DRAG-DROP

You plan to connect an external solution that will send Common Event Format (CEF) messages to Azure Sentinel.
You need to deploy the log forwarder.

Which three actions should you perform in sequence?

To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. Select and Place:

microsoft sc-200 exam questions q11

Correct Answer:

microsoft sc-200 exam questions q11-1

QUESTION #12

DRAG-DROP

You create a new Azure subscription and start collecting logs for Azure Monitor.

You need to configure Azure Security Center to detect possible threats related to sign-ins from suspicious IP addresses
to Azure virtual machines.

The solution must validate the configuration.

Which three actions should you perform in a sequence?

To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. Select and Place:

microsoft sc-200 exam questions q12

Correct Answer:

microsoft sc-200 exam questions q12-1

QUESTION #13

You provision a Linux virtual machine in a new Azure subscription.

You enable Azure Defender and onboard the virtual machine to Azure Defender.

You need to verify that an attack on the virtual machine triggers an alert in Azure Defender.

Which two Bash commands should you run on the virtual machine?

Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

A. cp /bin/echo ./asc_alerttest_662jfi039n
B. ./alerttest testing eicar pipe
C. cp /bin/echo ./alerttest
D. ./asc_alerttest_662jfi039n testing eicar pipe
Correct Answer: AD

Reference: https://docs.microsoft.com/en-us/azure/security-center/security-center-alert-validation#simulate-alerts-onyour-azure-vms-linux

QUESTION #14

You provision Azure Sentinel for a new Azure subscription.

You are configuring the Security Events connector.

While creating a new rule from a template in the connector, you decide to generate a new alert for every event.

You create the following rule query.

microsoft sc-200 exam questions q14

By which two components can you group alerts into incidents?

Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

A. user
B. resource group
C. IP address
D. computer
Correct Answer: CD

QUESTION #15

You have a playbook in Azure Sentinel. When you trigger the playbook, it sends an email to a distribution group.

You need to modify the playbook to send the email to the owner of the resource instead of the distribution group.

What should you do?

A. Add a parameter and modify the trigger.
B. Add a custom data connector and modify the trigger.
C. Add a condition and modify the action.
D. Add a parameter and modify the action.
Correct Answer: D

Reference: https://azsec.azurewebsites.net/2020/01/19/notify-azure-sentinel-alert-to-your-email-automatically/

Summary:

This article shares the latest updated Microsoft sc-200 exam dump https://www.lead4pass.com/sc-200.html (Total Questions: 84 Q&A). Free online practice test, free online download of exam pdf, and Lead4pass 15% exam discount code 2021.

ps.

Microsoft sc-200 Exam pdf is part of the Lead4Pass sc-200 exam dumps, and free content is also up-to-date,
helping you stay up-to-date with some of the latest exam content

Posted in dp-203 Data Engineering on Microsoft Azure dp-203 Data Engineering on Microsoft Azure DP-203 dumps dp-203 dumps DP-203 exam questions dp-203 exam questions DP-203 pdf DP-203 practice test dp-203 practice test Microsoft Microsoft Azure Data Engineer Associate Microsoft Certified: Azure Data Engineer Associate Uncategorized

Why not try Lead4Pass DP-203 exam dumps | 100% pass exam

Because Lead4Pass is a leader in exam certification, we have many years of exam experience and have helped many people realize their dreams and successfully pass the exam!
Microsoft DP-203 exam “Data Engineering on Microsoft Azure”. This is just one product in the Microsoft exam.
We have a full range of exam content and products. You can also recommend friends to choose other products to help them successfully pass the exam.
Microsoft DP-203 exam dumps https://www.lead4pass.com/dp-203.html (PDF +VCE). All exam questions are the latest updates, Guaranteed actual validity.
We have a 99.5% exam pass rate, you can rest assured that you can choose to help you obtain a certificate.
All content on this site comes from Lead4Pass for free sharing. You can practice the test online.

Microsoft DP-203 exam PDF online download

The Microsoft DP-203 exam PDF shared on this site is part of the Lead4Pass DP-203 exam questions and answers. For the complete exam PDF, please visit Lead4Pass

Online practice test the latest updated Microsoft DP-203 exam questions

QUESTION 1
HOTSPOT
Which Azure Data Factory components should you recommend using together to import the daily inventory data from
the SQL server to Azure Data Lake Storage? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

microsoft dp-203 exm questions q1

Correct Answer:

microsoft dp-203 exm questions q1-1

Explanation:
Box 1: Self-hosted integration runtime
A self-hosted IR is capable of running copy activity between a cloud data stores and a data store in private network.
Box 2: Schedule trigger
Schedule every 8 hours
Box 3: Copy activity
Scenario:
Customer data, including name, contact information, and loyalty number, comes from Salesforce and can be imported
into Azure once every eight hours. Row modified dates are not trusted in the source table.
Product data, including product ID, name, and category, comes from Salesforce and can be imported into Azure once
every eight hours. Row modified dates are not trusted in the source table.

 

QUESTION 2
HOTSPOT
You use Azure Data Factory to prepare data to be queried by Azure Synapse Analytics serverless SQL pools.
Files are initially ingested into an Azure Data Lake Storage Gen2 account as 10 small JSON files. Each file contains the
same data attributes and data from a subsidiary of your company.
You need to move the files to a different folder and transform the data to meet the following requirements:
Provide the fastest possible query times.
Automatically infer the schema from the underlying files.
How should you configure the Data Factory copy activity? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

microsoft dp-203 exm questions q2

Correct Answer:

microsoft dp-203 exm questions q2-1

Box 1: Preserver herarchy
Compared to the flat namespace on Blob storage, the hierarchical namespace greatly improves the performance of
directory management operations, which improves overall job performance.
Box 2: Parquet
Azure Data Factory parquet format is supported for Azure Data Lake Storage Gen2.
Parquet supports the schema property.
Reference:
https://docs.microsoft.com/en-us/azure/storage/blobs/data-lake-storage-introduction
https://docs.microsoft.com/en-us/azure/data-factory/format-parquet

 

QUESTION 3
HOTSPOT
You need to design the partitions for the product sales transactions. The solution must meet the sales transaction
dataset requirements.
What should you include in the solution? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

microsoft dp-203 exm questions q3

Correct Answer:

microsoft dp-203 exm questions q3-1

Box 1: Sales date
Scenario: Contoso requirements for data integration include:
Partition data that contains sales transaction records. Partitions must be designed to provide efficient loads by month.
Boundary values must belong to the partition on the right.
Box 2: An Azure Synapse Analytics Dedicated SQL pool
Scenario: Contoso requirements for data integration include:
Ensure that data storage costs and performance are predictable.
The size of a dedicated SQL pool (formerly SQL DW) is determined by Data Warehousing Units (DWU).
Dedicated SQL pool (formerly SQL DW) stores data in relational tables with columnar storage. This format significantly
reduces the data storage costs, and improves query performance.
Synapse analytics dedicated sql pool
Reference:
https://docs.microsoft.com/en-us/azure/synapse-analytics/sql-data-warehouse/sql-data-warehouse-overview-what-is

 

QUESTION 4
You plan to create an Azure Databricks workspace that has a tiered structure. The workspace will contain the following
three workloads:
A workload for data engineers who will use Python and SQL.
A workload for jobs that will run notebooks that use Python, Scala, and SOL.
A workload that data scientists will use to perform ad hoc analysis in Scala and R.
The enterprise architecture team at your company identifies the following standards for Databricks environments:
The data engineers must share a cluster.
The job cluster will be managed by using a request process whereby data scientists and data engineers provide
packaged notebooks for deployment to the cluster.
All the data scientists must be assigned their own cluster that terminates automatically after 120 minutes of inactivity.
Currently, there are three data scientists.
You need to create the Databricks clusters for the workloads.
Solution: You create a High Concurrency cluster for each data scientist, a High Concurrency cluster for the data
engineers, and a Standard cluster for the jobs.
Does this meet the goal?
A. Yes
B. No
Correct Answer: B
Need a High Concurrency cluster for the jobs.
Standard clusters are recommended for a single user. Standard can run workloads developed in any language: Python,
R, Scala, and SQL.
A high concurrency cluster is a managed cloud resource. The key benefits of high concurrency clusters are that they
provide Apache Spark-native fine-grained sharing for maximum resource utilization and minimum query latencies.
Reference:
https://docs.azuredatabricks.net/clusters/configure.html

 

QUESTION 5
You have an Azure Synapse Analytics dedicated SQL pool that contains a large fact table. The table contains 50
columns and 5 billion rows and is a heap.
Most queries against the table aggregate values from approximately 100 million rows and return only two columns.
You discover that the queries against the fact table are very slow.
Which type of index should you add to provide the fastest query times?
A. nonclustered columnstore
B. clustered columnstore
C. nonclustered
D. clustered
Correct Answer: B
Clustered columnstore indexes are one of the most efficient ways you can store your data in dedicated SQL pool.
Columnstore tables won\\’t benefit a query unless the table has more than 60 million rows.
Reference: https://docs.microsoft.com/en-us/azure/synapse-analytics/sql/best-practices-dedicated-sql-pool

 

QUESTION 6
You have a table in an Azure Synapse Analytics dedicated SQL pool. The table was created by using the following
Transact-SQL statement.microsoft dp-203 exm questions q6

You need to alter the table to meet the following requirements:
Ensure that users can identify the current manager of employees.
Support creating an employee reporting hierarchy for your entire company.
Provide fast lookup of the managers\\’ attributes such as name and job title.
Which column should you add to the table?
A. [ManagerEmployeeID] [int] NULL
B. [ManagerEmployeeID] [smallint] NULL
C. [ManagerEmployeeKey] [int] NULL
D. [ManagerName] [varchar](200) NULL
Correct Answer: A
Use the same definition as the EmployeeID column.
Reference: https://docs.microsoft.com/en-us/analysis-services/tabular-models/hierarchies-ssas-tabular

 

QUESTION 7
HOTSPOT
You build an Azure Data Factory pipeline to move data from an Azure Data Lake Storage Gen2 container to a database
in an Azure Synapse Analytics dedicated SQL pool.
Data in the container is stored in the following folder structure.
/in/{YYYY}/{MM}/{DD}/{HH}/{mm}
The earliest folder is /in/2021/01/01/00/00. The latest folder is /in/2021/01/15/01/45.
You need to configure a pipeline trigger to meet the following requirements:
Existing data must be loaded.
Data must be loaded every 30 minutes.
Late-arriving data of up to two minutes must he included in the load for the time at which the data should have arrived.
How should you configure the pipeline trigger? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

microsoft dp-203 exm questions q7

Correct Answer:

microsoft dp-203 exm questions q7-1

Box 1: Tumbling window
To be able to use the Delay parameter we select Tumbling window.
Box 2:
Recurrence: 30 minutes, not 32 minutes
Delay: 2 minutes.
The amount of time to delay the start of data processing for the window. The pipeline run is started after the expected
execution time plus the amount of delay. The delay defines how long the trigger waits past the due time before
triggering a
new run. The delay doesn\\’t alter the window startTime.
Reference:
https://docs.microsoft.com/en-us/azure/data-factory/how-to-create-tumbling-window-trigger

 

QUESTION 8
You have an Azure Synapse Analytics dedicated SQL pool.
You need to ensure that data in the pool is encrypted at rest. The solution must NOT require modifying applications that
query the data.
What should you do?
A. Enable encryption at rest for the Azure Data Lake Storage Gen2 account.
B. Enable Transparent Data Encryption (TDE) for the pool.
C. Use a customer-managed key to enable double encryption for the Azure Synapse workspace.
D. Create an Azure key vault in the Azure subscription grant access to the pool.
Correct Answer: B
Transparent Data Encryption (TDE) helps protect against the threat of malicious activity by encrypting and decrypting
your data at rest. When you encrypt your database, associated backups and transaction log files are encrypted without
requiring any changes to your applications. TDE encrypts the storage of an entire database by using a symmetric key
called the database encryption key.
Reference: https://docs.microsoft.com/en-us/azure/synapse-analytics/sql-data-warehouse/sql-data-warehouse-overviewmanage-security

 

QUESTION 9
You need to implement the surrogate key for the retail store table. The solution must meet the sales transaction dataset
requirements. What should you create?
A. a table that has an IDENTITY property
B. a system-versioned temporal table
C. a user-defined SEQUENCE object
D. a table that has a FOREIGN KEY constraint
Correct Answer: A
Scenario: Implement a surrogate key to account for changes to the retail store addresses.
A surrogate key on a table is a column with a unique identifier for each row. The key is not generated from the table
data. Data modelers like to create surrogate keys on their tables when they design data warehouse models. You can
use the IDENTITY property to achieve this goal simply and effectively without affecting load performance.
Reference: https://docs.microsoft.com/en-us/azure/synapse-analytics/sql-data-warehouse/sql-data-warehouse-tablesidentity

 

QUESTION 10
HOTSPOT
You are creating dimensions for a data warehouse in an Azure Synapse Analytics dedicated SQL pool.
You create a table by using the Transact-SQL statement shown in the following exhibit.microsoft dp-203 exm questions q10

Use the drop-down menus to select the answer choice that completes each statement based on the information
presented in the graphic. NOTE: Each correct selection is worth one point.
Hot Area:

microsoft dp-203 exm questions q10-1

Correct Answer:

microsoft dp-203 exm questions q10-2

Box 1: Type 2
A Type 2 SCD supports versioning of dimension members. Often the source system doesn\\’t store versions, so the
data warehouse load process detects and manages changes in a dimension table. In this case, the dimension table
must use
a surrogate key to provide a unique reference to a version of the dimension member. It also includes columns that
define the date range validity of the version (for example, StartDate and EndDate) and possibly a flag column (for
example,
IsCurrent) to easily filter by current dimension members.
Incorrect Answers:
A Type 1 SCD always reflects the latest values, and when changes in source data are detected, the dimension table
data is overwritten.
Box 2: a business key
A business key or natural key is an index which identifies uniqueness of a row based on columns that exist naturally in a
table according to business rules. For example business keys are customer code in a customer table, composite of
sales
order header number and sales order item line number within a sales order details table.
Reference:
https://docs.microsoft.com/en-us/learn/modules/populate-slowly-changing-dimensions-azure-synapse-analyticspipelines/3-choose-between-dimension-types

 

QUESTION 11
You have an Azure Databricks workspace named workspace1 in the Standard pricing tier.
You need to configure workspace1 to support autoscaling all-purpose clusters. The solution must meet the following
requirements:
Automatically scale down workers when the cluster is underutilized for three minutes.
Minimize the time it takes to scale to the maximum number of workers.
Minimize costs.
What should you do first?
A. Enable container services for workspace1.
B. Upgrade workspace1 to the Premium pricing tier.
C. Set Cluster Mode to High Concurrency.
D. Create a cluster policy in workspace1.
Correct Answer: B
For clusters running Databricks Runtime 6.4 and above, optimized autoscaling is used by all-purpose clusters in the
Premium plan Optimized autoscaling:
Scales up from min to max in 2 steps.
Can scale down even if the cluster is not idle by looking at shuffle file state.
Scales down based on a percentage of current nodes.
On job clusters, scales down if the cluster is underutilized over the last 40 seconds.
On all-purpose clusters, scales down if the cluster is underutilized over the last 150 seconds.
The spark.databricks.aggressiveWindowDownS Spark configuration property specifies in seconds how often a cluster
makes down-scaling decisions. Increasing the value causes a cluster to scale down more slowly. The maximum value
is
600.
Note: Standard autoscaling
Starts with adding 8 nodes. Thereafter, scales up exponentially, but can take many steps to reach the max. You can
customize the first step by setting the spark.databricks.autoscaling.standardFirstStepUp Spark configuration property.
Scales down only when the cluster is completely idle and it has been underutilized for the last 10 minutes.
Scales down exponentially, starting with 1 node.
Reference:
https://docs.databricks.com/clusters/configure.html

 

QUESTION 12
You are creating an Azure Data Factory data flow that will ingest data from a CSV file, cast columns to specified types
of data, and insert the data into a table in an Azure Synapse Analytic dedicated SQL pool. The CSV file contains three
columns named username, comment, and date.
The data flow already contains the following:
A source transformation.
A Derived Column transformation to set the appropriate types of data.
A sink transformation to land the data in the pool.
You need to ensure that the data flow meets the following requirements:
All valid rows must be written to the destination table.
Truncation errors in the comment column must be avoided proactively.
Any rows containing comment values that will cause truncation errors upon insert must be written to a file in blob
storage.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
A. To the data flow, add a sink transformation to write the rows to a file in blob storage.
B. To the data flow, add a Conditional Split transformation to separate the rows that will cause truncation errors.
C. To the data flow, add a filter transformation to filter out rows that will cause truncation errors.
D. Add a select transformation to select only the rows that will cause truncation errors.
Correct Answer: AB
B: Example:
1.
This conditional split transformation defines the maximum length of “title” to be five. Any row that is less than or equal to
five will go into the GoodRows stream. Any row that is larger than five will go into the BadRows stream.
2.
This conditional split transformation defines the maximum length of “title” to be five. Any row that is less than or equal to
five will go into the GoodRows stream. Any row that is larger than five will go into the BadRows stream.microsoft dp-203 exm questions q12

A:
3.
Now we need to log the rows that failed. Add a sink transformation to the BadRows stream for logging. Here, we\\’ll
“auto-map” all of the fields so that we have logging of the complete transaction record. This is a text-delimited CSV file
output to a single file in Blob Storage. We\\’ll call the log file “badrows.csv”.
4.
The completed data flow is shown below. We are now able to split off error rows to avoid the SQL truncation errors and
put those entries into a log file. Meanwhile, successful rows can continue to write to our target database.

microsoft dp-203 exm questions q12-1 microsoft dp-203 exm questions q12-2

Reference: https://docs.microsoft.com/en-us/azure/data-factory/how-to-data-flow-error-rows

 

QUESTION 13
HOTSPOT
You are building an Azure Stream Analytics job to identify how much time a user spends interacting with a feature on a
webpage.
The job receives events based on user actions on the webpage. Each row of data represents an event. Each event has
a type of either \\’start\\’ or \\’end\\’.
You need to calculate the duration between start and end events.
How should you complete the query? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:microsoft dp-203 exm questions q13

Correct Answer:

microsoft dp-203 exm questions q13-1

Box 1: DATEDIFF
DATEDIFF function returns the count (as a signed integer value) of the specified datepart boundaries crossed between
the specified startdate and enddate.
Syntax: DATEDIFF ( datepart , startdate, enddate )
Box 2: LAST
The LAST function can be used to retrieve the last event within a specific condition. In this example, the condition is an
event of type Start, partitioning the search by PARTITION BY user and feature. This way, every user and feature is
treated independently when searching for the Start event. LIMIT DURATION limits the search back in time to 1 hour
between the End and Start events.
Example:
SELECT [user], feature, DATEDIFF( second, LAST(Time) OVER (PARTITION BY [user], feature LIMIT
DURATION(hour, 1) WHEN Event = \\’start\\’), Time) as duration
FROM input TIMESTAMP BY Time
WHERE Event = \\’end\\’
Reference: https://docs.microsoft.com/en-us/azure/stream-analytics/stream-analytics-stream-analytics-query-patterns


Passing the Microsoft DP-203 exam is not difficult. You can practice the test online first, and then choose the Lead4Pass DP-203 exam dumps https://www.lead4pass.com/dp-203.html (Total Questions: 107 Q&A).
All Exam questions and answers are updated in real-time! It is guaranteed to be effective immediately.

ps.
The Microsoft DP-203 exam PDF shared on this site is part of the Lead4Pass DP-203 exam questions and answers. For the complete exam PDF, please visit Lead4Pass