You need to recommend a solution to automate the configuration for the finance department users. The solution must meet the technical requirements.
What should you include in the recommended?

• A.Azure AP B2C
• B.Azure AD Identity Protection
• C.an Azure logic app and the Microsoft Identity Management (MIM) client
• D.dynamic groups and conditional access policies

Comment: *

Name: *

Email: *

Verification: *

You have an Azure web app named WebApp1 that runs in an Azure App Service plan named ASP1. ASP1 is based on the D1 pricing tier.
You need to ensure that WebApp1 can be accessed only from computers on your on-premises network. The solution must minimize costs.
What should you configure? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation

Box 1: B1
B1 (Basic) would minimize cost compared P1v2 (premium) and S1 (standard).
Box 2: Cross Origin Resource Sharing (CORS)
Once you set the CORS rules for the service, then a properly authenticated request made against the service from a different domain will be evaluated to determine whether it is allowed according to the rules you have specified.
Note: CORS (Cross Origin Resource Sharing) is an HTTP feature that enables a web application running under one domain to access resources in another domain. In order to reduce the possibility of cross-site scripting attacks, all modern web browsers implement a security restriction known as same-origin policy. This prevents a web page from calling APIs in a different domain. CORS provides a secure way to allow one origin (the origin domain) to call APIs in another origin.
References:
https://azure.microsoft.com/en-us/pricing/details/app-service/windows/
https://docs.microsoft.com/en-us/azure/cdn/cdn-cors

Comment: *

Name: *

Email: *

Verification: *

You have an Azure subscription.
You need to implement a custom policy that meet the following requirements:
- Ensures that each new resource group in the subscription has a tag
named organization set to a value of whizlabs
- Ensures that resource group can be created from the Azure portal.
- Ensures that compliance reports in the Azure portal are accurate.
You need to complete the below policy to match this requirement

Which of the following would be the value in position 2 for the "effect" field?

• A."Append"
• B."Deny"
• C."DeployifNotExists"
• D.0

Correct Answer: B

If you look at the default policy which is in place for enforcing tags, you can see that the effect should be Deny:

Since this option is clearly mentioned in the Azure in-built policy, all other options are incorrect.
https://docs.microsoft.com/en-us/azure/governance/policy/overview

Comment: *

Name: *

Email: *

Verification: *

You have an Azure Active Directory (Azure AD) tenant that contains three global administrators named Admin1, Admin2, and Admin3.
The tenant is associated to an Azure subscription. Access control for the subscription is configured as shown in the Access control exhibit. (Click the Exhibit tab.)

You sign in to the Azure portal as Admin1 and configure the tenant as shown in the Tenant exhibit. (Click the Exhibit tab.)

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Correct Answer:

Reference:
https://docs.microsoft.com/en-gb/azure/role-based-access-control/elevate-access-global-admin

Comment: *

Name: *

Email: *

Verification: *

You have an Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com that contains 100 user accounts.
You purchase 10 Azure AD Premium P2 licenses for the tenant.
You need to ensure that 10 users can use all the Azure AD Premium features.
What should you do?

• A.From the Licenses blade of Azure AD, assign a license
• B.From the Groups blade of each user, invite the users to a group
• C.From the Azure AD domain, add an enterprise application
• D.From the Directory role blade of each user, modify the directory role

Comment: *

Name: *

Email: *

Verification: *