A company needs to centralize user management across multiple Azure subscriptions. What should they use?
AAzure Resource Manager
BAzure Active Directory
CAzure Policy
DAzure DevOps
Explanation
Azure Active Directory manages identities across subscriptions, unlike the others, which focus on resource management or policies.
Q102
You are configuring Multi-Geo in Microsoft 365: What does this mean for your data?
AIt is replicated across all geos.
BData residency is restricted to account's geo.
CUsers must be part of multiple regions.
DContent can be stored in specific regions.
Explanation
Multi-Geo allows for specific regional content storage based on user location, unlike the other options which are incorrect interpretations.
Q103
Which service provides a cloud-based file storage solution?
AAzure Blob Storage
BAzure Functions
CAzure Kubernetes Service
DAzure Logic Apps
Explanation
Azure Blob Storage is designed for cloud-based file storage, whereas others serve different purposes.
Q104
A company needs to create a guest account for a temporary contractor in Azure AD. What must they do first?
ACreate an admin account
BAdd the user to a security group
CUse Azure AD B2B collaboration
DShare their password with the contractor
Explanation
Azure AD B2B collaboration allows inviting guest users securely, unlike the other options.
Q105
You are configuring Conditional Access policies in Azure AD. What happens if a user does not meet the conditions?
AUser gets logged out immediately
BUser can still access resources
CAccess is blocked according to policy
DUser will receive an email alert
Explanation
Access is blocked if conditions are not met per policy, while the others do not accurately describe the outcome.
Q106
Which service is primarily used for automating application deployment in Azure?
AAzure DevOps
BAzure Monitor
CAzure Security Center
DAzure Virtual Network
Explanation
Azure DevOps is designed for CI/CD automation, while the others serve different purposed functions.
Q107
A company needs to regulate access to a sensitive SharePoint site. What should they implement?
AAzure AD Conditional Access
BSharePoint File Permissions
CAzure Role-Based Access Control
DMicrosoft Intune Policies
Explanation
Azure AD Conditional Access can enforce policies based on user context, providing dynamic access control.
Q108
What happens when you delete an Azure resource group and enable 'soft delete'?
AThe resources are immediately removed.
BThe resources are recoverable for 30 days.
CThe resources cannot be recovered.
DThe delete is denied by default.
Explanation
With 'soft delete', resources can be recovered within a specified retention period, unlike immediate deletion.
Q109
Which service is primarily used for managing user access in Microsoft 365?
AAzure Active Directory
BSharePoint Online
CMicrosoft Teams
DOneDrive for Business
Explanation
Azure Active Directory controls user access, while others serve different purposes.
Q110
A company needs to implement a data loss prevention (DLP) policy. Which action should they prioritize first?
AAssess data compliance requirements
BConfigure retention policies
CTrain all employees
DEnable automatic data encryption
Explanation
Assessing compliance is essential before configuring DLP policies or actions.