DRAG DROP
Your company network includes a single forest with multiple domains. You plan to migrate from OnPremises Exchange to Exchange Online.
You want to provision the On-Premises Windows Active Directory (AD) and Azure Active Directory (Azure
AD) service accounts.
You need to set the required permissions for the Azure AD service account.
Which settings should you use? To answer, drag the appropriate permission to the service account. Each
permission may be used once, more than once, or not at all. You may need to drag the split bar between
panes or scroll to view content.

You manage a software-as-a-service application named SaasApp1 that provides user management
features in a multi-directory environment.
You plan to offer SaasApp1 to other organizations that use Azure Active Directory.
You need to ensure that SaasApp1 can access directory objects.
What should you do?

You administer an Azure Active Directory (Azure AD) tenant where Box is configured for:
 Application Access
 Password Single Sign-on
An employee moves to an organizational unit that does not require access to Box through the Access
Panel.
You need to remove only Box from the list of applications only for this user.
What should you do?

DRAG DROP
You publish a multi-tenant application named MyApp to Azure Active Directory (Azure AD).You need to ensure that only directory administrators from the other organizations can access MyApp’s
web API.
How should you configure MyApp’s manifest JSON file? To answer, drag the appropriate PowerShell
command to the correct location in the application’s manifest JSON file. Each value may be used once,
more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

You administer an Azure Active Directory (Azure AD) tenant that has a SharePoint web application named
TeamSite1. TeamSite1 accesses your Azure AD tenant for user information.
The application access key for TeamSite1 has been compromised.
You need to ensure that users can continue to use TeamSite1 and that the compromised key does not
allow access to the data in your Azure AD tenant.
Which two actions should you perform? Each correct answer presents part of the solution.

You administer a DirSync server configured with Azure Active Directory (Azure AD).
You need to provision a user in Azure AD without waiting for the default DirSync synchronization interval.
What are two possible ways to achieve this goal? Each correct answer presents a complete solution.

HOTSPOT
You manage an Internet Information Services (IIS) 6 website named contososite1. Contososite1 runs a
legacy ASP.NET 1.1 application named LegacyApp1. LegacyApp1 does not contain any integration with any
other systems or programming languages.
You deploy contososite1 to Azure Web Sites.
You need to configure Azure Web Sites. You have the following requirements:
LegacyApp1 runs correctly.
The application pool does not recycle.
Which settings should you configure to meet the requirements? To answer, select the appropriate settings
in the answer area.

You administer an Azure Web Site named contosoweb that is used to sell various products.
Contosoweb experiences heavy traffic during weekends.
You need to analyze the response time of the product catalog page during peak times, from different
locations.
What should you do?

DRAG DROP
Your company manages several Azure Web Sites that are running in an existing web-hosting plan named
plan1.
You need to move one of the websites, named contoso, to a new web-hosting plan named plan2.
Which Azure PowerShell cmdlet should you use with each PowerShell command line? To answer, drag the
appropriate Azure PowerShell cmdlet to the correct location in the PowerShell code. Each PowerShell
cmdlet may be used once, more than once, or not at all. You may need to drag the split bar between
panes or scroll to view content.

Your company has a subscription to Azure.
You configure your contoso.com domain to use a private Certificate Authority. You deploy a web site
named MyApp by using the Shared (Preview) web hosting plan.
You need to ensure that clients are able to access the MyApp website by using https.
What should you do?