You have several virtual machines (VMs) that run in Azure. You also have a single System Center
2012 R2 Configuration Manager (SCCM) primary site on-premises.
You have the following requirements:
All VMs must run on the same virtual network.
Network traffic must be minimized between the on-premises datacenter and Azure.
The solution minimize complexity.
You need to use SCCM to collect inventory and deploy software to Azure VMs.
What should you do first?

You are running a Linux guest in Azure Infrastructure-as-a-Service (IaaS).
You must run a daily maintenance task. The maintenance task requires native BASH commands.
You need to configure Azure Automation to perform this task.
Which three actions should you perform? Each correct answer presents part of the solution.

A company has multiple Azure subscriptions. It plans to deploy a large number of virtual machines
(VMs) into Azure.
You install the Azure PowerShell module, but you are unable connect to all of the company’s Azure
subscriptions.
You need to automate the management of the Azure subscriptions.
Which two Azure PowerShell cmdlets should you run?

DRAG DROP
You need to automate tasks with Azure by using Azure PowerShell workflows.
How should you complete the Azure PowerShell script? To answer, drag the appropriate cmdlet to
the correct location. Each cmdlet may be used once, more than once, or not at all. You may need to
drag the split bar between panes or scroll to view content.

HOTSPOT
A company uses Azure for several virtual machine (VM) and website workloads. The company plans
to assign administrative roles to a specific group of users. You have a resource group named
GROUP1 and a virtual machine named VM2.
The users have the following responsibilities:

You need to assign the appropriate level of privileges to each of the administrators by using the
principle of least privilege.
What should you do? To answer, select the appropriate target objects and permission levels in the
answer area.

HOTSPOT

Resources must authenticate to an identity provider.
You need to configure the Azure Access Control service.
What should you recommend? To answer, select the appropriate responses for each requirement in
the answer area.

Contoso, Ltd., uses Azure websites for public-facing customer websites. The company has a mobile
app that requires customers sign in by using a Contoso customer account.
Customers must be able to sign on to the websites and mobile app by using a Microsoft, Facebook,
or Google account. All transactions must be secured in-transit regardless of device.
You need to configure the websites and mobile app to work with external identity providers.
Which three actions should you perform? Each correct answer presents part of the solution.

You are designing a solution that will interact with non-Windows applications over unreliable
network connections. You have a security token for each non-Windows application.
You need to ensure that non-Windows applications retrieve messages from the solution.
Where should you retrieve messages?

You are the administrator for a company named Contoso, Ltd.
Contoso also has an Azure subscription and uses many on-premises Active Directory products as
roles in Windows Server including the following:
Active Directory Domain Services (AD DS)
Active Directory Certificate Services (AD CS)
Active Directory Rights Management Services (AD RMS)
Active Directory Lightweight Directory Services (AD LDS)
Active Directory Federation Services (AD FS).
Contoso must use the directory management services available in Azure Active Directory.
You need to provide information to Contoso on the similarities and differences between Azure
Active Directory and the Windows Server Active Directory family of services.
Which feature does Azure Active Directory and on-premises Active Directory both support?

DRAG DROP
Contoso, Ltd., uses Azure websites for their company portal sites.
Admin users need enough access to effectively perform site monitoring or management tasks.
You need to grant admin access to a group of 10 users.
How should you configure the connection? To answer, drag the role or object to the correct
connection setting. Each item may be used once, more than once, or not at all. You may need to
drag the split bar between panes or scroll to view content.