Contoso, Ltd., uses Azure websites for public-facing customer websites. The company has a mobile
app that requires customers sign in by using a Contoso customer account.
Customers must be able to sign on to the websites and mobile app by using a Microsoft, Facebook,
or Google account. All transactions must be secured in-transit regardless of device.
You need to configure the websites and mobile app to work with external identity providers.
Which three actions should you perform? Each correct answer presents part of the solution.

You are designing a solution that will interact with non-Windows applications over unreliable
network connections. You have a security token for each non-Windows application.
You need to ensure that non-Windows applications retrieve messages from the solution.
Where should you retrieve messages?

You are the administrator for a company named Contoso, Ltd.
Contoso also has an Azure subscription and uses many on-premises Active Directory products as
roles in Windows Server including the following:
Active Directory Domain Services (AD DS)
Active Directory Certificate Services (AD CS)
Active Directory Rights Management Services (AD RMS)
Active Directory Lightweight Directory Services (AD LDS)
Active Directory Federation Services (AD FS).
Contoso must use the directory management services available in Azure Active Directory.
You need to provide information to Contoso on the similarities and differences between Azure
Active Directory and the Windows Server Active Directory family of services.
Which feature does Azure Active Directory and on-premises Active Directory both support?

A company has a very large dataset that includes sensitive information. The dataset is over 30 TB in
size.
You have a standard business-class ISP internet connection that is rated at 100 megabits/second.
You have 10 4-TB hard drives that are approved to work with the Azure Import/Export Service.
You need to migrate the dataset to Azure. The solution must meet the following requirements:
The dataset must be transmitted securely to Azure.
Network bandwidth must not increase.
Hardware costs must be minimized.
What should you do?

DRAG DROP
Contoso, Ltd., uses Azure websites for their company portal sites.
Admin users need enough access to effectively perform site monitoring or management tasks.
You need to grant admin access to a group of 10 users.
How should you configure the connection? To answer, drag the role or object to the correct
connection setting. Each item may be used once, more than once, or not at all. You may need to
drag the split bar between panes or scroll to view content.

You are designing an Azure web application.
All users must authenticate by using Active Directory Domain Services (AD DS) credentials.
You need to recommend an approach to enable single sign-on to the application for domainauthenticated users.
Which two actions should you recommend? Each correct answer presents part of the solution.

DRAG DROP
You have a web application on Azure.
The web application does not employ Secure Sockets Layer (SSL).
You need to enable SSL for your production deployment web application on Azure.
Which four actions should you perform in sequence? To answer, move the appropriate actions from
the list of actions to the answer area and arrange them in the correct order.

DRAG DROP
You are migrating Active Directory Domain Services (AD DS) domains to Azure.
You need to recommend the least complex directory synchronization solution.
What should you recommend? To answer, drag the appropriate solution to the correct client
requirement. Each solution may be used once, more than once, or not at all. You may need to drag
the split bar between panes or scroll to view content.

You are designing an Azure application that provides online backup storage for hundreds of media
files. Each file is larger than 1GB.
The data storage solution has the following requirements:
It must be capable of storing an average of 1TB of data for each user.
It must support sharing of data between all Windows Azure instances.
It must provide random read/write access.
You need to recommend a durable data storage solution.
What should you recommend?

DRAG DROP
You are the Azure architect for an organization. You are working with C-level management to assign
Azure role-based access control roles to a team within the organization. A single director oversees
two teams, a development team and a test team. The director is wholly responsible for the
organization’s Azure account, including billing, infrastructure, and access control. The director is the
only member of the team with the ability to alter access controls.
You have the following requirements:
Members of the development team must be able to view or alter Azure infrastructure to support
application development.
Members of the test team must be able to view Azure infrastructure to support test cases.
You need to assign built-in Azure role-based access control roles to team members within the
organization.
Which role should you assign to each team member? To answer, drag the appropriate role to the
correct team member. Each role may be used once, more than once, or not at all. You may need to
drag the split bar between panes or scroll to view content.