Your company has the offices shown in the following table.

The network contains an Active Directory domain named contoso.com that is synced to Azure Active Directory (Azure AD).
All users connect to an application hosted in Microsoft 365.
You need to recommend a solution to ensure that all the users use Azure Multi-Factor Authentication (MFA) to connect to the application from one of the offices.
What should you include in the recommendation?

• A.a named location and two Microsoft Cloud App Security policies
• B.a conditional access policy and two virtual networks
• C.a virtual network and two Microsoft Cloud App Security policies
• D.a conditional access policy and two named locations

Comment: *

Name: *

Email: *

Verification: *

You are designing an Azure resource deployment that will use Azure Resource Manager templates. The deployment will use Azure Key Vault to store secrets.
You need to recommend a solution to meet the following requirements:
Prevent the IT staff that will perform the deployment from retrieving the secrets directly from Key Vault.
Use the principle of least privilege.
Which two actions should you recommend? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

• A.Create a Key Vault access policy that allows all get key permissions, get secret permissions, and get certificate permissions.
• B.From Access policies in Key Vault, enable access to the Azure Resource Manager for template deployment.
• C.Create a Key Vault access policy that allows all list key permissions, list secret permissions, and list certificate permissions.
• D.Assign the IT staff a custom role that includes the Microsoft.KeyVault/Vaults/Deploy/Action permission.
• E.Assign the Key Vault Contributor role to the IT staff.

Comment: *

Name: *

Email: *

Verification: *

Your company has the infrastructure shown in the following table.

The on-premises Active Directory domain syncs to Azure Active Directory (Azure AD).
Server1 runs an application named Appl that uses LDAP queries to verify user identities in the on-premises Active Directory domain.
You plan to migrate Server1 to a virtual machine in Subscription1.
A company security policy states that the virtual machines and services deployed to Subscription! must be prevented from accessing the on-premises network.
You need to recommend a solution to ensure that Appl continues to function after the migration. The solution must meet the security policy.
What should you include in the recommendation?

• A.Azure AD Domain Services (Azure AD DS)
• B.an Azure VPN gateway
• C.the Active Directory Domain Services role on a virtual machine
• D.Azure AD Application Proxy

Comment: *

Name: *

Email: *

Verification: *

You have an existing implementation of Microsoft SQL Server Integration Services (SSIS) packages stored in an SSISDB catalog on your on-premises network. The on-premises network does not have hybrid connectivity to Azure by using Site-to-Site VPN or ExpressRoute.
You want to migrate the packages to Azure Data Factory.
You need to recommend a solution that facilitates the migration while minimizing changes to the existing packages. The solution must minimize costs.
What should you recommend? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation

Box 1: Azure SQL database
You can't create the SSISDB Catalog database on Azure SQL Database at this time independently of creating the Azure-SSIS Integration Runtime in Azure Data Factory. The Azure-SSIS IR is the runtime environment that runs SSIS packages on Azure.
Box 2: Azure-SQL Server Integration Service Integration Runtime and self-hosted integration runtime The Integration Runtime (IR) is the compute infrastructure used by Azure Data Factory to provide data integration capabilities across different network environments. Azure-SSIS Integration Runtime (IR) in Azure Data Factory (ADF) supports running SSIS packages.
Self-hosted integration runtime can be used for data movement in this scenario.
Reference:
https://docs.microsoft.com/en-us/azure/data-factory/create-azure-integration-runtime
https://docs.microsoft.com/en-us/sql/integration-services/lift-shift/ssis-azure-connect-to-catalog-database

Comment: *

Name: *

Email: *

Verification: *

Your company is designing a multi-tenant application that will use elastic pools and Azure SQL databases.
The application will be used by 30 customers.
You need to design a storage solution for the application. The solution must meet the following requirements:
* Operational costs must be minimized.
* All customers must have their own database.
* The customer databases will be in one of the following three Azure regions: East US, North Europe, or South Africa North.
What is the minimum number of elastic pools and Azure SQL Database servers required? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation

Box 1: 3
The server, its pools & databases must be in the same Azure region under the same subscription.
Box 2: 3
A server can have up to 5000 databases associated to it.
Reference:
https://vincentlauzon.com/2016/12/18/azure-sql-elastic-pool-overview/

Comment: *

Name: *

Email: *

Verification: *