AZ-304 Practice Test

Question 41

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure Active Directory (Azure AD) tenant named contoso.com. The tenant contains a group named Group1. Group1 contains all the administrative user accounts. You discover several login attempts to the Azure portal from countries where administrative users do NOT work. You need to ensure that all login attempts to the Azure portal from those countries require Azure Multi-Factor Authentication (MFA). Solution: You implement an access package. Does this meet the goal?

1. Yes
2. No

Question 42

Your company has the divisions shown in the following table. You plan to deploy a custom application to each subscription. The application will contain the following: ✑ A resource group ✑ An Azure web app Custom role assignments - ✑ An Azure Cosmos DB account You need to use Azure Blueprints to deploy the application to each subscription. What is the minimum number of objects required to deploy the application? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

Question 43

You have an Azure Active Directory (Azure AD) tenant. You plan to deploy Azure Cosmos DB databases that will use the SQL API. You need to recommend a solution to provide specific Azure AD user accounts with read access to the Cosmos DB databases. What should you include in the recommendation?

1. shared access signatures (SAS) and conditional access policies
2. certificates and Azure Key Vault
3. a resource token and an Access control (IAM) role assignment
4. master keys and Azure Information Protection policies

Question 44

You deploy an Azure virtual machine that runs an ASP.NET application. The application will be accessed from the internet by the users at your company. You need to recommend a solution to ensure that the users are pre-authenticated by using their Azure Active Directory (Azure AD) account before they can connect to the ASP.NET application. What should you include in the recommendation?

1. a public Azure Load Balancer
2. Azure Application Gateway
3. Azure Traffic Manager
4. an Azure AD enterprise application

Question 45

You have an Azure blueprint named BP1. The properties of BP1 are shown in the Properties exhibit. (Click the Properties tab.) The basic configuration of the blueprint is shown in the Basics exhibit. (Click the Basics tab.) The artifacts attached to BP1 are shown in the Artifacts exhibit. (Click the Artifacts tab.) For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area: