AZURE Question And Answer part-17
1.You have an Azure subscription that contains a storage account named storage1. The storage1 account contains a
file share named share1.
The subscription is linked to a hybrid Azure Active Directory (Azure AD) tenant that contains a security group named
Group1.
You need to grant Group1 the Storage File Data SMB Share Elevated Contributor role for share1.
What should you do first?
A. Enable Active Directory Domain Service (AD DS) authentication for storage1. Most Voted
B. Grant share-level permissions by using File Explorer.
C. Mount share1 by using File Explorer.
D. Create a private endpoint.
A. Enable Active Directory Domain Service (AD DS) authentication for storage1. Most Voted
2.You have 15 Azure subscriptions.
You have an Azure Active Directory (Azure AD) tenant that contains a security group named Group1.
You plan to purchase additional Azure subscription.
You need to ensure that Group1 can manage role assignments for the existing subscriptions and the planned
subscriptions. The solution must meet the following requirements:
1.Use the principle of least privilege.
2.Minimize administrative effort.
What should you do?
A. Assign Group1 the Owner role for the root management group.
B. Assign Group1 the User Access Administrator role for the root management group. Most Voted
C. Create a new management group and assign Group1 the User Access Administrator role for the group.
D. Create a new management group and assign Group1 the Owner role for the group.
B. Assign Group1 the User Access Administrator role for the root management group. Most Voted
3.You have two Azure subscriptions named Sub1 and Sub2.
An administrator creates a custom role that has an assignable scope to a resource group named RG1 in Sub1.
You need to ensure that you can apply the custom role to any resource group in Sub1 and Sub2. The solution must
minimize administrative effort.
What should you do?
A. Select the custom role and add Sub1 and Sub2 to the assignable scopes. Remove RG1 from the assignable
scopes. Most Voted
B. Create a new custom role for Sub1. Create a new custom role for Sub2. Remove the role from RG1.
C. Create a new custom role for Sub1 and add Sub2 to the assignable scopes. Remove the role from RG1.
D. Select the custom role and add Sub1 to the assignable scopes. Remove RG1 from the assignable scopes.
Create a new custom role for Sub2.
A. Select the custom role and add Sub1 and Sub2 to the assignable scopes. Remove RG1 from the assignable
scopes. Most Voted
4.You have an Azure subscription named Subscription1 that contains an Azure Log Analytics workspace named
Workspace1.
You need to view the error events from a table named Event.
Which query should you run in Workspace1?
A. select * from Event where Event Type == “error”
B. Event | search “error” Most Voted
C. Event | where Event Type is “error”
D. Get-Event Event | where {$_.EventType == “error”}
B. Event | search “error” Most Voted
5.You have an Azure App Services web app named App1.
You plan to deploy App1 by using Web Deploy.
You need to ensure that the developers of App1 can use their Azure AD credentials to deploy content to App1. The
solution must use the principle of least privilege.
What should you do?
A. Assign the Owner role to the developers
B. Configure app-level credentials for FTPS
C. Assign the Website Contributor role to the developers Most Voted
D. Configure user-level credentials for FTPS
C. Assign the Website Contributor role to the developers Most Voted