Question 1

You plan to migrate App1 to Azure. The solution must meet the authentication and authorization requirements.

Which of the endpoint should App1 use to obtain an access token?

Options :

A : Microsoft identify platform

B : Azure AD

C : Azure instance Service (IMDS)

D : Azure Service management

Answer: A

Question 2

You have an on-premises network to which you deploy a virtual appliance.

You plan to deploy several Azure virtual machines and connect the on-premises network to Azure by using a Site-to-Site connection.

All network traffic that will be directed from the Azure virtual machines to a specific subnet must flow through the virtual appliance.

You need to recommend solutions to manage network traffic.

Which two options should you recommend? Each correct answer presents a complete solution.

Options :

A : Configure Azure Traffic Manager.

B : Implement an Azure virtual network.

C : Implement Azure ExpressRoute.

D : Configure a routing table.

Answer: C,D

Question 3

Your organization is looking for a storage solution that provides a balance between performance, features, and costs. Which Azure storage options would you consider? (Choose two.)

Options :

A : Azure Blob Storage (Premium Tier)

B : Azure Disk Storage (HDD)

C : Azure Cosmos DB

D : Azure Blob Storage (Standard Tier)

Answer: A,D

Question 4

You have an Azure Active Directory (Azure AD) tenant that syncs with an on-premises Active Directory domain.

You have an internal web app named WebApp1 that is hosted on-premises. WebApp1 uses Integrated Windows authentication.

Some users work remotely and do NOT have VPN access to the on-premises network.

You need to provide the remote users with single sign-on (SSO) access to WebApp1.

Which two features should you include in the solution? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

Options :

A : Azure AD Application Proxy

B : Azure AD Privileged Identity Management (PIM)

C : Conditional Access policies

D : Azure Arc

E : Azure AD enterprise applications

F : Azure Application Gateway

Answer: A,F

Question 5

You are designing a data protection strategy for your Azure SQL Database. Which feature should you implement to ensure that your data is encrypted while at rest in the database, in motion, and during querying?

Options :

A : Transparent Data Encryption (TDE)

B : Advanced Threat Protection

C : Always Encrypted

D : Dynamic Data Masking

Answer: C