Which two actions should you perform?
You administer an Azure Active Directory (Azure AD) tenant that has a SharePoint web application named
TeamSite1. TeamSite1 accesses your Azure AD tenant for user information.The application access key for TeamSite1 has been compromised.
You need to ensure that users can continue to use TeamSite1 and that the compromised key does not allow
access to the data in your Azure AD tenant.
Which two actions should you perform? Each correct answer presents part of the solution.
How should you configure MyApp’s manifest JSON file?
DRAG DROP
You publish a multi-tenant application named MyApp to Azure Active Directory (Azure AD).
You need to ensure that only directory administrators from the other organizations can access MyApp’s web
API.
How should you configure MyApp’s manifest JSON file? To answer, drag the appropriate PowerShell command
to the correct location in the application’s manifest JSON file. Each value may be used once, more than once,
or not at all. You may need to drag the split bar between panes or scroll to view content.
Select and Place:
You need to remove only Box from the list of applicatio…
You administer an Azure Active Directory (Azure AD) tenant where Box is configured for:
An employee moves to an organizational unit that does not require access to Box through the Access Panel.
You need to remove only Box from the list of applications only for this user.
What should you do?
You need to ensure that SaasApp1 can access directory o…
You manage a software-as-a-service application named SaasApp1 that provides user management features in
a multi-directory environment.
You plan to offer SaasApp1 to other organizations that use Azure Active Directory.
You need to ensure that SaasApp1 can access directory objects.
What should you do?
Which two actions should you perform?
Your company plans to migrate from On-Premises Exchange to Exchange Online in Office 365.
You plan to integrate your existing Active Directory Domain Services (AD DS) infrastructure with Azure AD.
You need to ensure that users can log in by using their existing AD DS accounts and passwords. You need to
achieve this goal by using minimal additional systems.
Which two actions should you perform? Each answer presents part of the solution.
Which settings should you use?
DRAG DROP
Your company network includes a single forest with multiple domains. You plan to migrate from On-Premises
Exchange to Exchange Online.
You want to provision the On-Premises Windows Active Directory (AD) and Azure Active Directory (Azure AD)
service accounts.
You need to set the required permissions for the Azure AD service account.
Which settings should you use? To answer, drag the appropriate permission to the service account. Each
permission may be used once, more than once, or not at all. You may need to drag the split bar between panes
or scroll to view content.
Select and Place:
Hot Area:
HOTSPOT
You administer an Azure Active Directory (Azure AD) tenant.
You add a custom application to the tenant.
The application must be able to:
Read data from the tenant directly.
Write data to the tenant on behalf of a user.
In the table below, identify the permission that must be granted to the application. Make only one selection in
each column.
Hot Area:
You need to give anonymous users read access to all of …
Your company is launching a public website that allows users to stream videos.
You upload multiple video files to an Azure storage container.
You need to give anonymous users read access to all of the video files in the storage container.
What should you do?
Hot Area:
HOTSPOT
You manage a public-facing web application which allows authenticated users to upload and download large
files. On the initial public page there is a promotional video.
You plan to give users access to the site content and promotional video.
In the table below, identify the access method that should be used for the anonymous and authenticated parts
of the application. Make only one selection in each column.
Hot Area:
Hot Area:
HOTSPOT
You have an Azure SQL Database named Contosodb. Contosodb is running in the Standard/S2 tier and has a
service level objective of 99 percent.
You review the service tiers in Microsoft Azure SQL Database as well as the results of running performance
queries for the usage of the database for the past week as shown in the exhibits. (Click the Exhibits button.)
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
Hot Area: