Question 1

You have an Azure subscription that contains a storage account named storage1. You plan to create a blob container named contained. You need to use customer-managed key encryption for contained. Which key should you use?

Options :

A : an EC key that uses the P-384 curve only

B : an EC key that uses the P-521 curve only

C : an EC key that uses the P-384 curve or P-521 curve only

D : an RSA key with a key size of 4096 only

E : an RSA key type with a key size of 2048, 3072. or 4096 only

Answer: E

Question 2

HOTSPOT You have an Azure Active Directory (Azure AD) tenant named contoso.com. You have two external partner organizations named fabrilcam.com and litwareinc.com. FabtAam.com is configured as a connected organization. You create an access package as shown in the Access package exhibit. (Click the Access package lab.)You configure the external user lifecycle settings as shown in the Lifecycle exhibit. (Click the lifecycle tab)For each of the following statements, select Yes if the statement is true Otherwise, select No Note: Each correct selection is worth one point.

Options :

A : Litwareinc.com users can be assigned to package1.

B : After 365 days, fabrikam.com users will be removed from Group1.

C : After 395 days, fabrikam.com users will be removed from the contoso.com tenant.

Answer: B

Question 3

You need to meet the user requirement for Admin1. What should you do?

Options :

A : From the Subscriptions blade, select the subscription, and then modify the Properties

B : From the Subscriptions blade, select the subscription, and then modify the Access control (IAM) settings.

C : From the Azure Active Directory blade, modify the Properties.

D : From the Azure Active Directory blade, modify the Groups.

Answer: A

Question 4

You need to resolve the Active Directory issue. What should you do?

Options :

A : From Active Directory Users and Computers, select the user accounts, and then modify the User Principal Name value.

B : Run idfix.exe, and then use the Edit action.

C : From Active Directory Domains and Trusts, modify the list of UPN suffixes.

D : From Azure AD Connect, modify the outbound synchronization rule.

Answer: B

Question 5

You have an Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com. The User administrator role is assigned to a user named Admin1. An external partner has a Microsoft account that uses the [email protected] sign in. Admin1 attempts to invite the external partner to sign in to the Azure AD tenant and receives the following error message: œUnable to invite user [email protected] “ Generic authorization exception. You need to ensure that Admin1 can invite the external partner to sign in to the Azure AD tenant. What should you do?

Options :

A : From the Roles and administrators blade, assign the Security administrator role to Admin1.

B : From the Organizational relationships blade, add an identity provider.

C : From the Custom domain names blade, add a custom domain.

D : From the Users settings blade, modify the External collaboration settings.

Answer: D