question in the series contains a unique solution that might meet the stated goals. Some question 

sets might have more than one correct solution, while others might not have a correct solution. 

After you answer a question in this section, you will NOT be able to return to it. As a result, these 

questions will not appear in the review screen. 

You have an Azure subscription named Subscription1. Subscription1 contains a resource group 

named RG1. RG1 contains resources that were deployed by using templates. 

You need to view the date and time when the resources were created in RG1. 

Solution: From the Subscriptions blade, you select the subscription, and then click Resource 

providers. 

Does this meet the goal? 

A. Yes 

B. No

question in the series contains a unique solution that might meet the stated goals. Some question 

sets might have more than one correct solution, while others might not have a correct solution. 

After you answer a question in this section, you will NOT be able to return to it. As a result, these 

questions will not appear in the review screen. 

You manage a virtual network named VNet1 that is hosted in the West US Azure region.  

VNet1 hosts two virtual machines named VM1 and VM2 that run Windows Server. 

You need to inspect all the network traffic from VM1 to VM2 for a period of three hours. 

Solution: From Azure Monitor, you create a metric on Network in and Network Out. 

Does this meet the goal? 

A. Yes 

B. No 

question in the series contains a unique solution that might meet the stated goals. Some question 

sets might have more than one correct solution, while others might not have a correct solution. 

After you answer a question in this section, you will NOT be able to return to it. As a result, these 

questions will not appear in the review screen. 

You have an Azure subscription that contains 10 virtual networks. The virtual networks are hosted in 

separate resource groups. 

Another administrator plans to create several network security groups (NSGs) in the subscription. 

You need to ensure that when an NSG is created, it automatically blocks TCP port 8080 between the 

virtual networks. 

Solution: You assign a built-in policy definition to the subscription. 

Does this meet the goal? 

A. Yes 

B. No 

question in the series contains a unique solution that might meet the stated goals. Some question 

sets might have more than one correct solution, while others might not have a correct solution. 

After you answer a question in this section, you will NOT be able to return to it. As a result, these 

questions will not appear in the review screen. 

Your company has 100 users located in an office in Paris. 

The on-premises network contains the servers shown in the following table.

（含图）

You create a new subscription. You need to move all the servers to Azure. 

Solution: You use Azure Site Recovery. 

Does this meet the goal? 

A. Yes 

B. No 

question in the series contains a unique solution that might meet the stated goals. Some question 

sets might have more than one correct solution, while others might not have a correct solution. 

After you answer a question in this section, you will NOT be able to return to it. As a result, these 

questions will not appear in the review screen. 

You need to ensure that an Azure Active Directory (Azure AD) user named Admin1 is assigned the 

required role to enable Traffic Analytics for an Azure subscription. 

Solution: You assign the Network Contributor role at the subscription level to Admin1. 

Does this meet the goal? 

A. Yes 

B. No 

question in the series contains a unique solution that might meet the stated goals. Some question 

sets might have more than one correct solution, while others might not have a correct solution. 

After you answer a question in this section, you will NOT be able to return to it. As a result, these 

questions will not appear in the review screen. 

You deploy an Azure Kubernetes Service (AKS) cluster named AKS1. 

You need to deploy a YAML file to AKS1. 

Solution: From the Azure CLI, you run the kubectl client. 

Does this meet the goal? 

A. Yes 

B. No 

However, every question has a distinctive result. Establish if the solution satisfies the requirements. 

Your company has an Azure Active Directory (Azure AD) tenant named weyland.com that is 

configured for hybrid coexistence with the on-premises Active Directory domain. 

You have a server named DirSync1 that is configured as a DirSync server. 

You create a new user account in the on-premise Active Directory. You now need to replicate the 

user information to Azure AD immediately. 

Solution: You restart the NetLogon service on a domain controller. 

Does the solution meet the goal? 

A. Yes 

B. No 

question in the series contains a unique solution that might meet the stated goals. Some question 

sets might have more than one correct solution, while others might not have a correct solution. 

After you answer a question in this section, you will NOT be able to return to it. As a result, these 

questions will not appear in the review screen. 

You manage a virtual network named VNet1 that is hosted in the West US Azure region. 

VNet1 hosts two virtual machines named VM1 and VM2 that run Windows Server. 

You need to inspect all the network traffic from VM1 to VM2 for a period of three hours. 

Solution: From Azure Network Watcher, you create a packet capture. 

Does this meet the goal? 

A. Yes 

B. No

question in the series contains a unique solution that might meet the stated goals. Some question 

sets might have more than one correct solution, while others might not have a correct solution. 

After you answer a question in this section, you will NOT be able to return to it. As a result, these 

questions will not appear in the review screen. 

Your company has 100 users located in an office in Paris. 

The on-premises network contains the servers shown in the following table. 

（含图）

You create a new subscription. You need to move all the servers to Azure. 

Solution: You use the Data Migration Assistant tool. 

Does this meet the goal? 

A. Yes 

B. No 

However, every question has a distinctive result. Establish if the solution satisfies the requirements. 

Your company has an Azure Active Directory (Azure AD) subscription. 

You want to implement an Azure AD conditional access policy. 

The policy must be configured to require members of the Global Administrators group to use Multi

Factor Authentication and an Azure AD-joined device when they connect to Azure AD from untrusted 

locations. 

Solution: You access the Azure portal to alter the session control of the Azure AD conditional access 

policy. 

Does the solution meet the goal? 

A. Yes 

B. No 

question in the series contains a unique solution that might meet the stated goals. Some question 

sets might have more than one correct solution, while others might not have a correct solution. 

After you answer a question in this section, you will NOT be able to return to it. As a result, these 

questions will not appear in the review screen. 

You have an Azure Active Directory (Azure AD) tenant named Adatum and an Azure Subscription 

named Subscription1. Adatum contains a group named Developers. Subscription1 contains a 

resource group named Dev. 

You need to provide the Developers group with the ability to create Azure logic apps in the Dev 

resource group. 

Solution: On Dev, you assign the Logic App Contributor role to the Developers group. 

Does this meet the goal? 

A. Yes 

B. No 

However, every question has a distinctive result. Establish if the solution satisfies the requirements. 

Your company has an Azure Active Directory (Azure AD) tenant named weyland.com that is 

configured for hybrid coexistence with the on-premises Active Directory domain. 

You have a server named DirSync1 that is configured as a DirSync server. 

You create a new user account in the on-premise Active Directory. You now need to replicate the 

user information to Azure AD immediately. 

Solution: You run the Start-ADSyncSyncCycle -PolicyType Initial PowerShell cmdlet. 

Does the solution meet the goal? 

A. Yes 

B. No 

an Active Directory domain. 

The tenant contains the users shown in the following table. 

（含图）

The user have the attributes shown in the following table. 

（含图）

You need to ensure that you can enable Azure Multi-Factor Authentication (MFA) for all four users. 

Solution: You create a new user account in Azure AD for User3. 

Does this meet the goal? 

A. Yes 

B. No 

virtual machines named VM1 and VM2, both running Windows Server, are on VNet1. You need to 

monitor traffic between VM1 and VM2 for a period of five hours. 

As a solution, you propose to create a connection monitor in Azure Network Watcher. Does this 

solution meet the goal? 

A. Yes 

B. No 

question in the series contains a unique solution that might meet the stated goals. Some question 

sets might have more than one correct solution, while others might not have a correct solution. 

After you answer a question in this section, you will NOT be able to return to it. As a result, these 

questions will not appear in the review screen. 

You need to ensure that an Azure Active Directory (Azure AD) user named Admin1 is assigned the 

required role to enable Traffic Analytics for an Azure subscription. 

Solution: You assign the Owner role at the subscription level to Admin1. 

Does this meet the goal? 

A. Yes 

B. No 

（含图）

VM1 connects to VNET1. 

You need to connect VM1 to VNET2. 

Solution: You turn off VM1, and then you add a new network interface to VM1. Does this meet the 

goal? 

A. Yes 

B. No 

However, every question has a distinctive result. Establish if the solution satisfies the requirements. 

Your company's Azure solution makes use of Multi-Factor Authentication for when users are not in 

the office. The Per Authentication option has been configured as the usage model. 

After the acquisition of a smaller business and the addition of the new staff to Azure Active Directory 

(Azure AD) obtains a different company and adding the new employees to Azure Active Directory 

(Azure AD), you are informed that these employees should also make use of Multi-Factor 

Authentication. 

To achieve this, the Per Enabled User setting must be set for the usage model. 

Solution: You reconfigure the existing usage model via the Azure CLI. 

Does the solution meet the goal? 

A. Yes 

B. No

You create an Azure DNS named contoso.com and then you add an A record to the zone for a host 

named www that has an IP address of 131.107.1.10. 

You discover that Internet hosts are unable to resolve www.contoso.com to the 131.107.1.10 IP 

address. 

You need to resolve the name resolution issue.  

Solution: You modify the name server at the domain registrar. 

Does this meet the goal? 

A. Yes 

B. No 

question in the series contains a unique solution that might meet the stated goals. Some question 

sets might have more than one correct solution, while others might not have a correct solution. 

After you answer a question in this section, you will NOT be able to return to it. As a result, these 

questions will not appear in the review screen. 

You have an Azure subscription named Subscription1. Subscription1 contains a resource group 

named RG1. RG1 contains resources that were deployed by using templates. 

You need to view the date and time when the resources were created in RG1. 

Solution: From the RG1 blade, you click Automation script. 

Does this meet the goal? 

A. Yes 

B. No 

Which command should you run before you create Role1? To answer, select the appropriate options 

in the answer area. 

NOTE: Each correct selection is worth one point. 

（含图）