You manage a collection of large video files that is stored in an Azure Storage account. A user
wants access to one of your video files within the next seven days. You need to allow the user
access only to the video file, and then revoke access once the user no longer needs it. What should
you do?

You manage two datacenters in different geographic regions and one branch office. You plan to
implement a geo-redundant backup solution. You need to ensure that each datacenter is a cold
site for the other. You create a recovery vault. What should you do next?

You manage an Azure web app in standard service tier at the following address:
contoso.azurewebsites.net. Your company has a new domain for the site named www.contoso.com
that must be accessible by secure socket layer(SSL) encryption. You need to add a custom domain
to the Azure web app and assign an SSL certifcate. Which three actions should you perform? Each
correct answer presents part of the solution.

Drag and Drop Question
You manage an application deployed to a cloud service that utilizes an Azure Storage account.
The cloud service currently uses the primary access key. Security policy requires that all shared
access keys are changed without causing application downtime. Which three steps should you
perform in sequence? To answer, move the appropriate actions from the list of actions to the
answer area and arrange them in the correct order.

You administer a Microsoft Azure SQL Database data base in the US Central region named
contosodb. Contosodb runs on a Standard tier within the SI performance level. You have multiple

business-critical applications that use contosodb. You need to ensure that you can bring contosodb
back online in the event of a natural disaster in the US Central region. You want to achieve this
goal with the least amount of downtime. Which two actions should you perform? Each correct
answer presents part of the solution.

You are migrating a local virtual machine (VM) to an Azure VM. You upload the virtual hard disk
(VHD) file to Azure Blob storage as a Block Blob. You need to change the Block Blob to a page
blob. What should you do?

Drag and Drop Question
You administer an Azure SQL database named contosodb that is running in Standard/Si tier. The
database is in a server named server1 that is a production environment. You also administer a
database server named server2 that is a test environment. Both database servers are in the same
subscription and the same region but are on different physical clusters. You need to copy
contosodb to the test environment. Which three steps should you perform in sequence? To answer,
move the appropriate actions from the list of actions to the answer area and arrange them in the
correct order.

Your company network includes users in multiple directories. You plan to publish a software-as-aservice application named SaasApp1 to Azure Active Directory. You need to ensure that all users
can access SaasApp1. What should you do?

You publish an application named MyApp to Azure Active Directory (Azure AD). You grant access
to the web APIs through OAuth 2.0. MyApp is generating numerous user consent prompts. You
need to reduce the amount of user consent prompts. What should you do?

You administer an Access Control Service namespace named contosoACS that is used by a web
application. ContosoACS currently utilizes Microsoft and Yahoo accounts. Several users in your
organization have Google accounts and would like to access the web application through
ContosoACS. You need to allow users to access the application by using their Google accounts.
What should you do?