Correct Answer:

Box 1: "/subscription/c276fc76-9cd4-44c9-99a7-4fd71546436e" In the assignableScopes you need to mention the subscription ID where you want to implement the RBAC

Box 2: "Microsoft.Authorization/*" Microsoft.Authorization/* is used to Manage authorization

References: https://docs.microsoft.com/en-us/azure/role-based-access-control/resource-provider- operations#microsoftauthorization https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles

Correct Answer:

Box 1: retained until manually deleted

Since by default PeekLock shall be enabled in Queue, so it will move to DeadLetter after 2hours and stays there until manually deleted. Messages in the dead letter queue should be deleted manually.

Box 2: deleted immediately

Once a message is pulled, it will be deleted immediately. It does not make sense to keep the message further 5 minutes "locked" in the queue. Locking the message makes sense, for the case, when processing the message from a receiver,

to lock the message, to avoid processing/receiving the message simultaneously by another receiver.

The receiving client initiates settlement of a received message with a positive acknowledgment when it calls Complete at the API level. This indicates to the broker that the message has been successfully processed and the message is

removed from the queue or subscription.

Reference:

https://docs.microsoft.com/en-us/azure/service-bus-messaging/message-expiration https://docs.microsoft.com/en-us/azure/service-bus-messaging/message-transfers-locks-settlement

Correct Answer:

Reference: https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#virtual-machine-contributor https://docs.microsoft.com/en-us/azure/role-based-access-control/rbac-and-directory-admin-roles

Correct Answer: B

You need to create a name server (NS) record for the zone. References: https://docs.microsoft.com/en-us/azure/dns/delegate-subdomain

Correct Answer: B

Network performance monitor allows you to monitor connectivity and latencies across hybrid network architectures, Expressroute circuits, and service/application endpoints. With an data collector set we can count specified network traffic, but we cannot inspect it. For this we would need a network watcher Packet Capture.

References: https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-monitoring-overview https://docs.microsoft.com/en-us/azure/azure-monitor/insights/network-performance-monitor References: https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-monitoring-overview

Correct Answer: B

You should use the Resource Group blade Reference: https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-manager-export-template

Correct Answer: B

Correct Answer: B

Virtual WAN: The virtualWAN resource represents a virtual overlay of your Azure network and is a collection of multiple resources. It contains links to all your virtual hubs that you would like to have within the virtual WAN. Virtual WANs are isolated from each other and can't contain a common hub. Virtual hubs in different virtual WANs don't communicate with each other.

Hub: A virtual hub is a Microsoft-managed virtual network. The hub contains various service endpoints to enable connectivity. From your on-premises network (vpnsite), you can connect to a VPN gateway inside the virtual hub, connect ExpressRoute circuits to a virtual hub, or even connect mobile users to a point-to-site gateway in the virtual hub. The hub is the core of your network in a region. Multiple virtual hubs can be created in the same region.

Reference: https://learn.microsoft.com/en-us/azure/virtual-wan/virtual-wan-about

Correct Answer: A

Scenario:

1.

Designate a new user named Admin1 as the service admin for the Azure subscription.

2.

Admin1 must receive email alerts regarding service outages.

Follow these steps to change the Service Administrator in the Azure portal.

1.

Make sure your scenario is supported by checking the limitations for changing the Service Administrator.

2.

Sign in to the Azure portal as the Account Administrator.

3.

Open Cost Management + Billing and select a subscription.

4.

In the left navigation, click Properties.

5.

Click Service Admin.

Reference: https://docs.microsoft.com/en-us/azure/role-based-access-control/classic-administrators

Correct Answer: D

A Recovery Services vault is a logical container that stores the backup data for each protected resource, such as Azure VMs. When the backup job for a protected resource runs, it creates a recovery point inside the Recovery Services vault.

Scenario:

There are three application tiers, each with five virtual machines.

Move all the virtual machines for App1 to Azure.

Ensure that all the virtual machines for App1 are protected by backups.

Reference:

https://docs.microsoft.com/en-us/azure/backup/quick-backup-vm-portal