Your company has an Azure subscription that contains multiple resource groups.
You have to design a resource governance solution that would meet the following requirements:
- Ensure that all ExpressRoute resources are created in a resource
group named pass4tests-rg
- Ensure that creation of ExpressRoute resources is delegated to an
Azure AD resource group named pass4test-dmin
- Use the principle of least privilege
Which of the following needs to be included in the solution to meet the following requirement?
"Ensure that all ExpressRoute resources are created in a resource group named pass4test-rg"

• A.A custom RBAC role assignment at the level of the resource group - pass4test-rg
• B.A custom RBAC role assignment at the subscription level
• C.An Azure Policy at the subscription level that has an exclusion
• D.Multiple Azure Policy assignments at the resource group level except for pass4test-rg

Comment: *

Name: *

Email: *

Verification: *

You plan to develop a new app that will store business critical dat
a. The app must meet the following requirements:
* Prevent new data from being modified for one year.
* Maximize data resiliency.
* Minimize read latency.
What storage solution should you recommend for the app? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Correct Answer:

Comment: *

Name: *

Email: *

Verification: *

You are designing an Azure solution.
The network traffic for the solution must be securely distributed by providing the following features:
* HTTPS protocol
* Round robin routing
* SSL offloading
You need to recommend a load balancing option.
What should you recommend?

• A.Azure Load Balancer
• B.Azure Traffic Manager
• C.Azure Internal Load Balancer (ILB)
• D.Azure Application Gateway

Comment: *

Name: *

Email: *

Verification: *

You are planning an Azure Storage solution for sensitive data. The data will be accessed daily. The data set is less than 10 GB.
You need to recommend a storage solution that meets the following requirements:
* All the data written to storage must be retained for five years.
* Once the data is written, the data can only be read. Modifications and deletion must be prevented.
* After five years, the data can be deleted, but never modified.
* Data access charges must be minimized
What should you recommend? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation:
Graphical user interface, text, application Description automatically generated

Box 1: General purpose v2 with Archive acce3ss tier for blobs
Archive - Optimized for storing data that is rarely accessed and stored for at least 180 days with flexible latency requirements, on the order of hours.
Cool - Optimized for storing data that is infrequently accessed and stored for at least 30 days.
Hot - Optimized for storing data that is accessed frequently.
Box 2: Storage account resource lock
As an administrator, you can lock a subscription, resource group, or resource to prevent other users in your organization from accidentally deleting or modifying critical resources. The lock overrides any permissions the user might have.
Note: You can set the lock level to CanNotDelete or ReadOnly. In the portal, the locks are called Delete and Read-only respectively.
CanNotDelete means authorized users can still read and modify a resource, but they can't delete the resource.
ReadOnly means authorized users can read a resource, but they can't delete or update the resource.
Applying this lock is similar to restricting all authorized users to the permissions granted by the Reader role.
Reference:
https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-storage-tiers

Comment: *

Name: *

Email: *

Verification: *

You need to design an architecture to capture the creation of users and the assignment of roles. The captured data must be stored in Azure Cosmos DB.
Which Azure services should you include in the design? To answer, drag the appropriate services to the correct targets. Each service may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Correct Answer:

Comment: *

Name: *

Email: *

Verification: *