AZ-301

AZ-301 practice questions, page 6 of 10, with answer review and explanations.

Question 26

A company named Contoso, Ltd. has an Azure Active Directory (Azure AD) tenant that is integrated with Microsoft Office 365 and an Azure subscription. Contoso has an on-premises identity infrastructure. The infrastructure includes servers that run Active Directory Domain Services (AD DS), Active Directory Federation Services (AD FS), Azure AD Connect, and Microsoft Identity Manager (MIM). Contoso has a partnership with a company named Fabrikam, Inc. Fabrikam has an Active Directory forest and an Office 365 tenant. Fabrikam has the same on- premises identity infrastructure as Contoso. A team of 10 developers from Fabrikam will work on an Azure solution that will be hosted in the Azure subscription of Contoso. The developers must be added to the Contributor role for a resource in the Contoso subscription. You need to recommend a solution to ensure that Contoso can assign the role to the 10 Fabrikam developers. The solution must ensure that the Fabrikam developers use their existing credentials to access resources. What should you recommend?

  1. Configure a forest trust between the on-premises Active Directory forests of Contoso and Fabrikam.
  2. Configure an organization relationship between the Office 365 tenants of Fabrikam and Contoso.
  3. In the Azure AD tenant of Contoso, enable Azure Active Directory Domain Services (Azure AD DS). Create a one-way forest trust that uses selective authentication between the Active Directory forests of Contoso and Fabrikam.
  4. In the Azure AD tenant of Contoso, create guest accounts for the Fabrikam developers.

Question 27

You have a hybrid deployment of Azure Active Directory (Azure AD). You need to recommend a solution to ensure that the Azure AD tenant can be managed only from the computers on your on-premises network. What should you include in the recommendation?

  1. Azure AD roles and administrators
  2. a conditional access policy
  3. Azure AD Application Proxy
  4. Azure AD Privileged Identity Management

Question 28

You have an Azure Active Directory (Azure AD) tenant named contoso.com that contains two administrative user accounts named Admin1 and Admin2. You create two Azure virtual machines named VM1 and VM2. You need to ensure that Admin1 and Admin2 are notified when more than five events are added to the security log of VM1 or VM2 during a period of 120 seconds. The solution must minimize administrative tasks. What should you create?

  1. two action groups and one alert rule
  2. one action group and one alert rule
  3. five action groups and one alert rule
  4. two action groups and two alert rules

Question 29

You have an Azure Active Directory (Azure AD) tenant named contoso.com that contains several administrative user accounts. You need to recommend a solution to identify which administrative user accounts have NOT signed in during the previous 30 days. Which service should you include in the recommendation?

  1. Azure AD Identity Protection
  2. Azure Activity Log
  3. Azure Advisor
  4. Azure AD Privileged Identity Management (PIM)

Question 30

Your organization has developed and deployed several Azure App Service Web and API applications. The applications use Azure Key Vault to store several authentication, storage account, and data encryption keys. Several departments have the following requests to support the applications: You need to recommend the appropriate Azure service for each department request. What should you recommend? To answer, configure the appropriate options in the dialog box in the answer area. NOTE: Each correct selection is worth one point. Hot Area: