You have an Azure subscription that contains The storage accounts shown in the following table.

You deploy a web app named Appl to the West US Azure region.
You need to back up Appl. The solution must minimize costs.
Which storage account should you use as the target for the backup?

• A.storage1
• B.storage2
• C.storage3
• D.storage4

Comment: *

Name: *

Email: *

Verification: *

You have an Azure subscription that contains a resource group named RG1.
You need to prevent administrators from inadvertently modifying the resources in RG1.
How should you complete the PowerShell command? To answer, select the options in the answer area.
NOTE: Each correct answer is worth one point.

Correct Answer:

Explanation:

Azure provides resource locks to prevent accidental changes or deletion of critical resources. This is a core governance feature covered in the Microsoft Azure Administrator (AZ-104) study materials under resource management and protection.
To prevent administrators from inadvertently modifying resources in a resource group, you must apply a ReadOnly lock at the resource group scope. A ReadOnly lock allows users to view resources but blocks any modification or deletion, even for users with high privileges, unless the lock is first removed.
There are two primary lock levels in Azure:
ReadOnly - Users can read resources but cannot modify or delete them.
CanNotDelete (Delete) - Users can modify resources but cannot delete them.
Since the requirement is to prevent modification, the correct lock level is ReadOnly, not DeleteResources or CanNotDelete.
From Microsoft Azure Administrator documentation:
"A ReadOnly lock prevents users from making changes to a resource. Authorized users can still remove the lock if needed." To create this lock using PowerShell, the correct cmdlet is New-AzResourceLock, which is used to create management locks at the subscription, resource group, or resource level.
Applying the lock to RG1 ensures all resources within the group inherit the protection, meeting the requirement with minimal administrative effort.
Correct PowerShell Command (Conceptual Form)
New-AzResourceLock `
-LockName LockGroup `
-LockLevel ReadOnly `
-ResourceGroupName RG1
Final Hotspot Selections
Cmdlet: New-AzResourceLock
LockName: LockGroup
LockLevel: ReadOnly
ResourceGroupName: RG1

Comment: *

Name: *

Email: *

Verification: *

You have a hybrid deployment of Azure Active Directory (Azure AD) that contains the users shown in the following table.

You need to modify the JobTitle and UsageLocation attributes for the users.
For which users can you modify the- attributes from Azure AD? To answer, select the appropriate options in the answer area.

Correct Answer:

Reference:
https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-users-profile-azure-portal

Comment: *

Name: *

Email: *

Verification: *

Hotspot Question
You have peering configured as shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation:
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-manage- peering#requirements-and-constraints

Comment: *

Name: *

Email: *

Verification: *

You have an Azure subscription named Subscription1 that has a subscription ID of c276fc76-9cd4-44c9-99a7-4fd71546436e.
You need to create a custom RBAC role named CR1 that meets the following requirements:
Can be assigned only to the resource groups in Subscription1
Prevents the management of the access permissions for the resource groups Allows the viewing, creating, modifying, and deleting of resource within the resource groups What should you specify in the assignable scopes and the permission elements of the definition of CR1? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Reference:
https://docs.microsoft.com/en-us/azure/role-based-access-control/resource-provider-operations#microsoftauthorization
https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles
https://docs.microsoft.com/en-us/azure/role-based-access-control/custom-roles
https://docs.microsoft.com/en-us/azure/role-based-access-control/resource-provider-operations#microsoftresources

Comment: *

Name: *

Email: *

Verification: *