DRAG DROP

You have an Azure Active Directory (Azure AD) tenant. All user accounts are synchronized from an on-premises Active Directory domain and are configured for federated authentication. Active Directory Federation Services (AD FS) servers

are published for external connections by using a farm of Web Application Proxy servers.

You need to recommend a solution to monitor the servers that integrate with Azure AD. The solution must meet the following requirements:

1.

Identify any AD FS issues and their potential resolutions.

2.

Identify any directory synchronization configuration issues and their potential resolutions

3.

Notify administrators when there are any issues affecting directory synchronization or AD FS operations.

Which monitoring solution should you recommend for each server type?

To answer, drag the appropriate monitoring solutions to the correct server types. Each monitoring solution may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

Select and Place:

HOTSPOT

You plan to migrate on-premises Microsoft SQL Server databases to Azure.

You need to recommend a deployment and resiliency solution that meets the following requirements:

Supports user-initiated backups

Supports multiple automatically replicated instances across Azure regions

Minimizes administrative effort to implement and maintain business continuity

What should you recommend? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

You have 500 Azure web apps in the same Azure region. The apps use a premium Azure Key vault for authentication. A developer reports that some authentication requests are being throttled. You need 10 recommend a solution to increase the available throughput of the key vault the solution must minimize costs. What should you recommend?

A. Increase me number of key vaults in the subscription

B. Configure geo-replication.

C. Change the pacing tier.

D. Configure load balancing for the apps.

Your network contains an on-premises Active Directory forest.

You discover that when users change jobs within your company, the membership of the user groups are not being updated. As a result, the users can access resources that are no longer relevant to their job.

You plan to integrate Active Directory and Azure Active Directory (Azure AD) by using Azure AD Connect. You need to recommend a solution to ensure that group owners are emailed monthly about the group memberships they manage.

What should you include in the recommendation?

A. conditional access policies

B. Tenant Restrictions

C. Azure AD access reviews

D. Azure AD Identity Protection

You have an Azure subscription that contains an Azure Kubernetes Service (AKS) instance named AKS1. AKS1 hosts microservice-based APIs that are configured to listen on non-default HTTP ports.

You plan to deploy a Standard tier Azure API Management instance named APIM1 that will make the APIs available to external users.

You need to ensure that the AKS1 APIs are accessible to APIM1. The solution must meet the following requirements:

Implement MTLS authentication between APIM1 and AKS1.

Minimize development effort.

Minimize costs.

What should you do?

A. Implement an external load balancer on AKS1.

B. Redeploy APIM1 to the virtual network that contains AKS1.

C. Implement an ExternalName service on AKS1.

D. Deploy an ingress controller to AKS1.