You have an Azure subscription.
You plan to deploy a storage account named storage ' by using the following Azure Resource Manager (ARM) template.


For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation:
NO
NO
YES
The provided ARM template defines an Azure Storage Account resource with the following key properties:
{
" type " : " Microsoft.Storage/storageAccounts " ,
" name " : " storage1 " ,
" location " : " East US " ,
" properties " : {
" allowBlobPublicAccess " : true,
" defaultToOAuthAuthentication " : false,
" networkAcls " : {
" bypass " : " AzureServices " ,
" defaultAction " : " Allow " ,
" ipRules " : []
},
" isVersioningEnabled " : true
}
}
Let's analyze each statement based on Azure Storage behavior and documentation:
Statement 1: "Changes made to the data in storage1 can be rolled back after seven days."
# Incorrect
The property " isVersioningEnabled " : true refers to blob versioning, which maintains previous versions of objects (blobs) when they are modified or deleted. However, there is no automatic seven-day rollback period.
Versions remain indefinitely until manually deleted or managed via lifecycle policies.
Microsoft documentation:
"When blob versioning is enabled, Azure Storage automatically maintains previous versions of an object. You can restore a previous version manually, but there is no automatic rollback period." Hence, changes can be rolled back manually, not automatically after seven days.
Statement 2: "Only users located in the East US Azure region can connect to storage1."
# Incorrect
The networkAcls section specifies:
" defaultAction " : " Allow " ,
" bypass " : " AzureServices " ,
" ipRules " : []
This configuration means all network access is allowed by default ( " defaultAction " : " Allow " ). There are no IP restrictions, so users from any region can connect.
Azure documentation states:
"If the defaultAction is set to Allow, traffic from all networks can access the storage account unless specific network rules are added." Therefore, access is not restricted to the East US region.
Statement 3: "Three copies of storage1 will be maintained in the East US Azure region."
# Correct
By default, if redundancy options like ZRS or GRS are not specified, Azure Storage uses Locally Redundant Storage (LRS).
From the Microsoft study guide:
"Locally Redundant Storage (LRS) maintains three synchronous copies of your data within a single datacenter in the primary region." Since the location is " East US " and no redundancy property is explicitly defined, the default LRS applies - meaning three copies within the same region (East US).

Comment: *

Name: *

Email: *

Verification: *

You have an Azure subscription that contains the Azure virtual machines shown in the following table.

You configure the network interfaces of the virtual machines to use the settings shown in the following table

From the settings of VNET1, you configure the DNS servers shown in the following exhibit.

The virtual machines can successfully connect to the DNS server that has an IP address of 192.168.10.15 and the DNS server that has an IP address of 193.77.134.10.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.

Correct Answer:

Reference:
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-faq#name-resolution-dns

Comment: *

Name: *

Email: *

Verification: *

You need to implement the planned changes for DCR1. Which type of query should you use?

• A.XPath
• B.WQL
• C.KQL
• D.T-SQL

Comment: *

Name: *

Email: *

Verification: *

You have an Azure subscription that contains a storage account named storage1.
You plan to use conditions when assigning role-based access control (RABC) roles to storage1 Which storage1 services support conditions when assigning roles?

• A.containers only
• B.file shares only
• C.tables only
• D.queues only
• E.containers and queues only
• F.files shares and tables only

Comment: *

Name: *

Email: *

Verification: *

You have an Azure virtual network named VNet1 that connects to your on-premises network by using a site-to-site VPN. VMet1 contains one subnet named Subnet1.
Subnet1 is associated to a network security group (NSG) named NSG1. Subnet1 contains a basic internal load balancer named ILB1. ILB1 has three Azure virtual machines in the backend pool.
You need to collect data about the IP addresses that connects to ILB1. You must be able to run interactive queries from the Azure portal against the collected data.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Reference:
https://docs.microsoft.com/en-us/azure/log-analytics/log-analytics-quick-create-workspace
https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-standard-diagnostics

Comment: *

Name: *

Email: *

Verification: *