AZ-300 Test 1

Question 1

Subscription1 and Subscription2 are the names of two subscriptions you have. Each Azure AD tenant is paired with a distinct subscription.
VNet1 is a virtual network that is part of Subscription1. VNet1 has an IP address space of 10.0.0.0/16 and contains an Azure virtual machine named VM1.
VNet2 is a virtual network that is part of Subscription2. Vnet2 has an IP address space of 10.10.0.0/24 and contains an Azure virtual machine named VM2.
VNet1 must be connected to VNet2.
What should you start with?

Accepted Answer

Provision virtual network gateways

Answer

Move VM1 to Subscription2

Answer

Move VNet1 to Subscription2

Answer

Modify the IP address space of VNet2.

Question 2

You have a tenant for Azure Active Directory (Azure AD).
Policy1 is an Azure AD conditional access policy that you already have. When members of the Global Administrators group authenticate to Azure AD from untrusted sites,
Policy1 requires them to use Azure AD-joined devices.
When authenticating from untrusted locations, you must guarantee that members of the Global Administrators group are likewise obliged to use multi-factor authentication.
What are your options?

Accepted Answer

From the Azure portal, modify grant control of Policy1

Answer

From multi-factor authentication page, modify the service settings

Answer

From the Azure portal, modify session control of Policy1

Answer

From multi-factor authentication page, modify the user settings

Question 3

In the e-commerce web app, you must access user claims. What should you start with?

Accepted Answer

Make a Microsoft Graph API call from the ecommerce web app using custom code.

Answer

To access the HTTP request header values, update the e-commerce web app.

Answer

Enable cross-origin resource sharing (CORS) from the e-commerce checkout API to the e-commerce web using the Azure CU.

Answer

Using the Resource Manager create role assignment API, assign the Contributor RBAC role to the e-commerce web app.

Question 4

For Policy Service, you must meet the scaling requirements.
What kind of data should you keep in Azure Redis Cache?

Accepted Answer

HttpContext.tems

Answer

TempData

Answer

ViewState

Answer

Session state

Question 5

You must guarantee that the solution can scale to satisfy Policy Service's scaling requirements.
Which data model in Azure Application Insights should you use?

Accepted Answer

an Application Insights metric

Answer

an Application Insights event

Answer

an Application Insights trace

Answer

an Application Insights dependency

Question 6

You need to fix a problem with notification latency.
Which of the two acts should you take? Each accurate response reveals a piece of the solution.

Accepted Answer

Make that the Azure Function is using a consumption plan.

Answer

Set Always On to false

Answer

Make that the Azure Function is running on an App Service plan.

Question 7

For VM4, you must meet the technical requirements. What should you make and how should you set it up?

Accepted Answer

an Azure Logic App

Answer

an Azure Event Hub

Answer

an Azure Service Bus

Answer

an Azure Notification Hub

Question 8

You have a Subscription1 Azure subscription with an Azure virtual machine named VM1 in it. RG1 is the name of the resource group in which VM1 is located.
Services that will be utilized to deploy resources to RG1 are run on VM1.
By leveraging the identity of VM1, you must verify that a service executing on VM1 can manage the resources in RG1.
What should you start with?

Accepted Answer

Modify the value of the Managed Service Identity option for VM1 in the Azure portal.

Answer

Modify RG1's Access control (IAM) settings through the Azure portal

Answer

Modify VM1's Access control (IAM) settings through the Azure portal

Answer

Modify RG1's Policies settings via the Azure portal

Question 9

Contoso.com is the name of your Active Directory forest.
As the single sign-on (SSO) method, you install and configure AD Connect to employ password hash synchronization. The staging mode is switched on.
When you look at the synchronization results, you notice that the Synchronization Service Manager shows no sync jobs.
You must make certain that the synchronization is successful.
So, what are your options?

Accepted Answer

Run Azure AD Connect and disable staging mode

Answer

Run Start-AdSyncSycnCycle ""PolicyType Initial"" from Azure PowerShell.

Answer

Set the SSO mechanism to Pass-through Authentication in Azure AD Connect

Answer

Run a full import from Synchronization Service Manager