Question 1 of 26 Your company is evaluating Azure Security Center

Question 1 of 26
Your company is evaluating Azure Security Center.
Azure Security Center can alert you about threats discovered in your Azure storage account.
Select Yes if the statement is true. Otherwise, select No.
Select only one answer.
Yes
No
Question 2 of 26
Your company uses Azure Sentinel.
You need to create automatic responses to incidents in Azure Sentinel.
What should you create?
Select only one answer.
a playbook an Azure function app a workflow automation an Azure
Automation runbook a Windows PowerShell script
Question 3 of 26
Your company is monitoring threats by using Azure Security Center.
You need to use Azure Security Center to automate the responses to discovered threats.
What should you create?
Select only one answer.
a webhook an Azure function app a workflow automation an Azure
Automation runbook a Windows PowerShell script
Question 4 of 26
You have an Azure subscription named Sub1 that contains a .NET Core web app named webapp1.

You are creating an Azure pipeline named pipeline1 that will deploy updates to webapp1.
To pipeline1, you add a stage named stage1 that contains tasks based on the Azure
App Service deployment with continuous monitoring template.
You need to ensure that the deployment of the updates to webapp1 from pipeline1 will stop automatically if there are existing alerts that correspond to server exceptions, failed requests, server response times, or the availability of webapp1.
What should you do?
Select only one answer.
In stage1, configure gates in the pre-deployment conditions.
In stage1, configure triggers in the pre-deployment conditions.
In the Configure Application
Insights Alerts task of stage1, modify the inline script.
In the Configure Application
Insights Alerts task of stage1, modify the control options.
Question 5 of 26
You are designing an Azure Service Fabric-based app named SFApp1. SFApp1 will store application assets in Azure Blob storage, product reviews and recommendations in Azure Cosmos DB, and user profiles in Azure SQL Database.
Individual data updates performed by SFApp1 will occur across all three data stores.
You need to recommend an approach that will ensure that individual updates apply across all the data stores with the least impact on the performance and scalability of
SFApp1.
What should you recommend?
Select only one answer.
eventual consistency strong consistency serialization locking
Question 6 of 26
You have an Azure subscription named Sub1 that contains a .NET web app named webapp1. Webapp1 uses an Azure SQL database named db1 as the data store.
Every day, a user named User1 runs multiple consecutive queries targeting the same datasets in db1. User1 reports that webapp1 has a slow response time.

You verify that both db1 and webapp1 have sufficient resources to process the queries.
You need to improve responses for User1.
What should you do?
Select only one answer.
Configure webapp1 to use Azure Cache for Redis.
Configure webapp1 to use the Azure App Service local cache.
Modify the pricing tier of webapp1.
Modify the pricing tier of db1.
Question 7 of 26
You plan to implement a globally distributed web app that will have multiple instances deployed to different Azure regions and on-premises datacenters. The web app will be used by users globally.
You need to implement a DNS-based load balancer to ensure that the users are directed to the web app instance that has the lowest network latency. The solution must minimize administrative effort and complexity of the implementation.
What should you include in the solution?
Select only one answer.
Azure Traffic Manager with a performance routing method
Azure Traffic
Manager with a geographic routing method
Azure Standard Load Balancer with source IP affinity distribution mode
Azure Application Gateway with a path-based request routing rule
Question 8 of 26
You should apply endpoint protection at the perimeter security layer.
Select Yes if the statement is true. Otherwise, select No.
Select only one answer.
Yes
No
Question 9 of 26

Deny by default is one of the protection principles at the network security layer.
Select Yes if the statement is true. Otherwise, select No.
Select only one answer.
Yes
No
Question 10 of 26
When you enable the Use your own key Encryption option for an Azure Storage account, the tables in the storage account will be encrypted by using your own key.
Select Yes if the statement is true. Otherwise, select No.
Select only one answer.
Yes
No
Question 11 of 26
You have an Azure virtual machine named VM1 that has the following configurations:

Location: East US

Resource group: RG1

Connected to: VNET1
You enable disaster recovery and replicate VM1 to the West US location.
In which resource group is the VM1 replica stored?
Select only one answer.
RG1
RG1-asr
RG1-westus
VM1-asr
VM1-westus
Question 12 of 26
You have an Azure subscription that contains a virtual machine named VM1.
You plan to configure Azure Site Recovery for VM1.
You are defining a replication policy for VM1.
What is the maximum recovery point retention?
Select only one answer.

12 hours
48 hours
72 hours
7 days
Question 13 of 26
Your company plans to implement Azure Site Recovery.
During a failover, a new virtual machine is created.
Select Yes if the statement is true. Otherwise, select No.
Select only one answer.
Yes
No
Question 14 of 26
Your company plans to perform a disaster recovery drill of a replicated virtual machine.
During a disaster recovery drill, a new Azure virtual machine is created.
Select Yes if the statement is true. Otherwise, select No.
Select only one answer.
Yes
No
Question 15 of 26
Your company plans to perform a disaster recovery drill of a replicated virtual machine.
A recovery plan is required if you want to perform a disaster recovery drill of a virtual machine.
Select Yes if the statement is true. Otherwise, select No.
Select only one answer.
Yes
No
Question 16 of 26
You have an Azure virtual machine named VM1 in the East US location and the following Recovery Services vaults:


Vault1: Located in East US

Vault2: Located in Central US

Vault3: Located in West US
You need to configure site recovery and replicate VM1 to the West US location. The solution must use cross-regional disaster recovery.
Which Recovery Services vaults can you use?
Select only one answer.
Vault1 and Vault2 only
Vault1 and Vault3 only
Vault2 and Vault3 only
Vault1, Vault2, and Vault3
Question 17 of 26
You provision a new Azure subscription named Sub1 and deploy a virtual machine named VM1 based on an Ubuntu 18.04 image.
You plan to implement Azure Backup for VM1.
Which resource type should you create in Sub1 to ensure that you can implement
Azure Backup for VM1?
Select only one answer.
a Recovery Services vault an Azure key vault an Azure Storage account an Azure virtual network
Question 18 of 26
You have an Azure subscription that contains the following virtual machines:

VM1: Protected by Azure Disk Encryption and located in East US

VM2: Located in East US

VM3: Located in West US

VM4: Protected by Azure Disk Encryption and located in West US
VM1, VM2, and VM3 are backed up to a Recovery Services vault.
From the backup of which virtual machines can you perform a file level recovery on
VM4?
Select only one answer.
VM1 only
VM3 only
VM2 and VM3 only
VM1, VM2, and VM3

Question 19 of 26
Your company plans to implement the Azure SQL Database long-time retention policy.
You can configure the Azure SQL Database long-time retention policy to retain weekly LTR backups for 10 days.
Select Yes if the statement is true. Otherwise, select No.
Select only one answer.
Yes
No
Question 20 of 26
You have an Azure subscription that contains the following Azure SQL Database servers:

Sql1: Located in East US

Sql2: Located in East US

Sql3: Located in West US
Sql1 contains an Azure SQL database named DB1.
On which Azure SQL Database servers can you perform a point-in-time restore of
DB1?
Select only one answer.
sql1 only sql2 only sql1 and sql2 only sql1, sql2, and sql3
Question 21 of 26
You restore a backup of an Azure SQL database as sqldb2.
You need to rename the database to its original name.
What should you use?
Select only one answer.
Transact-SQL
the Azure portal
Azure PowerShell
Azure CLI
Question 22 of 26

Your company plans to implement the Azure SQL Database long-time retention policy.
You can configure the Azure SQL Database long-time retention policy from the Azure portal.
Select Yes if the statement is true. Otherwise, select No.
Select only one answer.
Yes
No
Question 23 of 26
You can use Azure Cost Management to configure an alert notifying you when the current spend reaches or exceeds a specific monetary amount.
Select Yes if the statement is true. Otherwise, select No.
Select only one answer.
Yes
No
Question 24 of 26
You can use Azure Cost Management to configure an alert notifying you when the current spend reaches or exceeds a specific monetary amount.
Select Yes if the statement is true. Otherwise, select No.
Select only one answer.
Yes
No
Question 25 of 26
Your company has an Azure subscription that contains a Recovery Services vault named Vault1.
You need to ensure that you can extract information from Vault1 logs by using queries.
Which Azure resource should you create?
Select only one answer.

an Azure SQL Database server an Azure Cosmos DB account an Azure
Storage account a Log Analytics workspace
Question 26 of 26
You plan to extract data from Azure resource logs.
You can use Transact-SQL to extract information from Azure Monitor log data.
Select Yes if the statement is true. Otherwise, select No.
Select only one answer.
Yes
No
Question 1 of 26
Your company has an Azure subscription.
You plan to deploy Azure Sentinel.
What must you create before you can deploy Azure Sentinel?
Select only one answer.
an Azure storage account an administrative unit an Azure SQL database a Log Analytics workspace
Question 3 of 26
Your company is evaluating Azure Security Center.
Azure Security Center can alert you about threats discovered on on-premises virtual machines.
Select Yes if the statement is true. Otherwise, select No.
Select only one answer.
Yes
No
Question 4 of 26

Your company is evaluating Azure Security Center.
Azure Security Center can alert you about threats discovered in Azure Active
Directory (Azure AD) user accounts.
Select Yes if the statement is true. Otherwise, select No.
Select only one answer.
Yes
No
Question 7 of 26
You plan to implement a solution that will consist of three instances of a two-tier application. Each instance will consist of a front-end web app running as an Azure web app and a backend database running as an Azure SQL database. Most web app operations will involve data writes.
You plan to deploy two instances of the solution in the East US Azure region and one in the Singapore region.
You need to minimize latency between the front-end and the backend tier across all three instances.
What should you do?
Select only one answer.
Implement Azure SQL Data Sync.
Implement Azure Cache for Redis.
Configure Azure SQL Database geo-replication.
Configure one Azure SQL
Database read-only replica in Singapore and one in the East US region.
Question 10 of 26
When implementing SaaS resources, you are responsible for application security.
Select Yes if the statement is true. Otherwise, select No.
Select only one answer.
Yes
No
Question 11 of 26

You plan to implement Azure Site Recovery for Azure virtual machines.
Which two resources should you create in an Azure region designated as the recovery site before you implement Azure Site Recovery?
Select all answers that apply.
an Azure Storage account an Azure virtual network an Azure key vault an Azure Automation account an Azure virtual machine
Question 12 of 26
You have an Azure subscription that contains a virtual machine named VM1. VM1 has the following settings:

Location: East US

Connected to: VNET1
VM1 replicates to the West US location by Azure Site Recovery.
The subscription contains the following virtual networks:

VNET1: Located in East US

VNET1-asr: Located in West US

VNET2: Located in West US

VNET3: Located in Central US
You plan to perform a disaster recovery drill of VM1.
To which virtual networks can you connect a test failover virtual machine?
Select only one answer.
VNET1 only
VNET1-asr only
VNET1-asr and VNET2 only
VNET1, VNET1- asr, VNET3, and VNET3
Question 13 of 26
Your company plans to implement Azure Site Recovery.
If you want to fail over multiple virtual machines together, you must create a recovery plan first.
Select Yes if the statement is true. Otherwise, select No.

Select only one answer.
Yes
No
Question 15 of 26
Your company plans to perform a disaster recovery drill of a replicated virtual machine.
A disaster recovery drill affects the production environment.
Select Yes if the statement is true. Otherwise, select No.
Select only one answer.
Yes
No
Question 16 of 26
Your company plans to implement Azure Site Recovery.
After a failover, you perform a failback by selecting the