You have an Azure subscription that contains a storage account named storage1.
You need to configure a shared access signature (SAS) to ensure that users can only download blobs securely by name.
Which two settings should you configure? To answer, select the appropriate settings in the answer area.
NOTE: Each correct answer is worth one point.

Correct Answer:

Comment: *

Name: *

Email: *

Verification: *

You have the Azure resources shown on the following exhibit.

You plan to track resource usage and prevent the deletion of resources.
To which resources can you apply locks and tags? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation
A screenshot of a computer Description automatically generated

Box 1: Sub1, RG1, and VM1 only
You can lock a subscription, resource group, or resource to prevent other users in your organization from accidentally deleting or modifying critical resources.
Box 2: Sub1, RG1, and VM1 only
You apply tags to your Azure resources, resource groups, and subscriptions.
Reference:
https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/lock-resources?tabs=json
https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/tag-resources?tabs=json

Comment: *

Name: *

Email: *

Verification: *

You have an Azure subscription that contains the storage accounts shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation:

In Microsoft Azure Storage, the type and kind of a storage account determine which features and performance tiers are supported.
1## Premium File Share Support:
Premium file shares are only supported in FileStorage accounts, which provide high-performance, low-latency SSD-based storage optimized for enterprise file workloads. According to the official Azure Storage documentation (Microsoft Learn: "Azure Files performance tiers"), only the FileStorage account kind supports Premium file shares.
In the exhibit, only contoso104 is a FileStorage account. Therefore, premium file shares can only be created in contoso104.
2## Archive Access Tier Support:
The Archive access tier is available for Blob storage and General-purpose v2 (StorageV2) accounts that store block blobs. The Archive tier is used for data that is rarely accessed and provides the lowest storage cost.
From the exhibit:
* contoso101 (StorageV2) # supports archive tier.
* contoso102 (Storage) # older type, does not support access tiers beyond hot/cool.
* contoso103 (BlobStorage) # supports archive tier.
* contoso104 (FileStorage) # does not support Blob tiers.
Therefore, only contoso101, contoso102, and contoso103 allow the Archive tier, but since standard "Storage" (contoso102) doesn't support Archive, the correct accounts are contoso101 and contoso103.

Comment: *

Name: *

Email: *

Verification: *

You have an Azure AD user named User1 and a read-access geo-redundant storage (RA-GRS) account named contoso2023. You need to meet the following requirements:
* User1 must be able to write blob data to contoso2023.
* The contoso2023 account must fail over to its secondary endpoint
Which two settings should you configure? To answer, select the appropriate settings in the answer are a. NOTE: Each correct selection is worth one point.

Correct Answer:

Comment: *

Name: *

Email: *

Verification: *

You have an Azure subscription named Sub1 that contains a resource group named RG1. You need to ensure that all current and future resources in RG1 have a tag of Department =HR applied. What should you do?

• A.Apply the Departments tag directly to RG1.
• B.Create and assign an Azure policy.
• C.Apply the Departments tag to Sub1.
• D.Apply the Department =HR tag to each resource in RG1.

Comment: *

Name: *

Email: *

Verification: *