Your network contains an Active Directory domain named adatum.com and an Azure Active Directory (Azure AD) tenant named adatum.onmicrosoft.com.
Adatum.com contains the user accounts in the following table.

Adatum.onmicrosoft.com contains the user accounts in the following table.

You need to implement Azure AD Connect. The solution must follow the principle of least privilege.
Which user accounts should you use? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Comment: *

Name: *

Email: *

Verification: *

You have an Azure subscription named Subscription1.
You deploy a Linux virtual machine named VM1 to Subscription1.
You need to monitor the metrics and the logs of VM1.
What should you use?

• A.Linux Diagnostic Extension (LAD) 3.0
• B.Azure Analysis Services
• C.the AzurePerformanceDiagnostics extension
• D.Azure HDInsight

Comment: *

Name: *

Email: *

Verification: *

You have an Azure subscription that contains a storage account named contoso2023. The storage account contains:
* cont1: Blob container
* share1: File share



You have a Microsoft Entra tenant that contains the users shown in the following table.
Name
Shared access signature (SAS) token for contoso2023
User1
User delegation SAS with the maximum available permissions
User2
Service SAS with the maximum available permissions
User3
Account SAS with the maximum available permissions
For each of the following statements, select Yes if the statement is true. Otherwise, select No.

Correct Answer:

Explanation:
Yes, No, No
The decisive setting is Allow storage account key access = Disabled , which disallows Shared Key authorization for the storage account. Microsoft states that when Shared Key access is disallowed, Azure Storage rejects requests authorized with account access keys, and only requests authorized with Microsoft Entra ID succeed. Microsoft's SAS behavior table is explicit: a User delegation SAS uses Microsoft Entra ID and is permitted, while a Service SAS and an Account SAS use Shared Key and are denied when AllowSharedKeyAccess is false.
Therefore, User1 can access cont1 because a user delegation SAS is Microsoft Entra-authorized and is valid for Blob Storage access. User2 cannot access cont1 because a service SAS is secured by the storage account key, which is blocked. User3 cannot access share1 because an account SAS is also secured by the storage account key and is denied for all Azure Storage services when Shared Key access is disabled.
The anonymous blob access, TLS, and portal authorization settings do not override SAS authorization behavior here. Study Guide reference: AZ-104 Implement and manage storage > configure storage security, shared access signatures, access keys, Azure Blob Storage, and Azure Files.

Comment: *

Name: *

Email: *

Verification: *

You have an Azure subscription named Subscription1. Subscription1 contains two Azure virtual machines named VM1 and VM2. VM1 and VM2 run Windows Server 2016.
VM1 is backed up daily by Azure Backup without using the Azure Backup agent.
VM1 is affected by ransomware that encrypts data.
You need to restore the latest backup of VM1.
To which location can you restore the backup? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation
Box 1 : VM1 and VM2 only
When recovering files, you can't restore files to a previous or future operating system version.You can restore files from a VM to the same server operating system, or to the compatible client operating system. Therefore -
"VM1 and VM2 only" is the best answer since both run on Windows Server 2016.
"A new Azure virtual machine only" ,this will also work but why to create unnecessary new VM in Azure if existing VM will do the task. So this option is incorrect.
Box 2 : VM1 or A new Azure virtual machine only
When restoring a VM, you can't use the replace existing VM option for encrypted VMs. This option is only supported for unencrypted managed disks. And also You can restore files from a VM to the same server operating system, or to the compatible client operating system only. Hence "VM1 or A new Azure virtual machine only" is correct answer.
A screenshot of a computer Description automatically generated

References:
https://docs.microsoft.com/en-us/azure/backup/backup-azure-arm-restore-vms
https://docs.microsoft.com/en-us/azure/backup/backup-azure-restore-files-from-vm#system-requirements

Comment: *

Name: *

Email: *

Verification: *

You have an Azure subscription named Subscription1 that contains the resources in the following table.

VM1 and VM2 run the websites in the following table.

AppGW1 has the backend pools in the following table.

DNS resolves site1.contoso.com, site2.contoso.com, and site3.contoso.com to the IP address of AppGW1.
AppGW1 has the listeners in the following table.

AppGW1 has the rules in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation

Vm1 is in Pool1. Rule2 applies to Pool1, Listener 2, and site2.contoso.com

Comment: *

Name: *

Email: *

Verification: *