Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You develop Azure solutions.
You must grant a virtual machine (VM) access to specific resource groups in Azure Resource Manager.
You need to obtain an Azure Resource Manager access token.
Solution: Run the Invoke-RestMethod cmdlet to make a request to the local managed identity for Azure resources endpoint.
Does the solution meet the goal?
Get an access token using the VM's system-assigned managed identity and use it to call Azure Resource Manager
You will need to use PowerShell in this portion.
In the portal, navigate to Virtual Machines and go to your Windows virtual machine and in the Overview, click Connect.
Enter in your Username and Password for which you added when you created the Windows VM.
Now that you have created a Remote Desktop Connection with the virtual machine, open PowerShell in the remote session.
Using the Invoke-WebRequest cmdlet, make a request to the local managed identity for Azure resources endpoint to get an access token for Azure Resource Manager.
Example:
$response = Invoke-WebRequest -Uri 'http://169.254.169.254/metadata/identity/oauth2/token?api-version=2018-02-01&resource=https://management.azure.com/' -Method GET -Headers @{Metadata='true'}
https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/tutorial-windows-vm-access-arm
D18912E1457D5D1DDCBD40AB3BF70D5D
You are building a website that uses Azure Blob storage for data storage. You configure Azure Blob storage lifecycle to move all blobs to the archive tier after 30 days.
Customers have requested a service-level agreement (SLA) for viewing data older than 30 days.
You need to document the minimum SLA for data recovery.
Which SLA should you use?
The archive access tier has the lowest storage cost. But it has higher data retrieval costs compared to the hot and cool tiers. Data in the archive tier can take several hours to retrieve depending on the priority of the rehydration. For small objects, a high priority rehydrate may retrieve the object from archive in under 1 hour.
https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-storage-tiers?tabs=azure-portal
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this question, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are developing a solution that will be deployed to an Azure Kubernetes Service (AKS) cluster. The solution will include a custom VNet, Azure Container Registry images, and an Azure Storage account.
The solution must allow dynamic creation and management of all Azure resources within the AKS cluster.
You need to configure an AKS cluster for use with the Azure APIs.
Solution: Create an AKS cluster that supports network policy. Create and apply a network to allow traffic only from within a defined namespace.
Does the solution meet the goal?
When you run modern, microservices-based applications in Kubernetes, you often want to control which components can communicate with each other. The principle of least privilege should be applied to how traffic can flow between pods in an Azure Kubernetes Service (AKS) cluster. Let's say you likely want to block traffic directly to back-end applications. The Network Policy feature in Kubernetes lets you define rules for ingress and egress traffic between pods in a cluster.
https://docs.microsoft.com/en-us/azure/aks/use-network-policies
You are developing an Azure App Service web app.
The web app must securely store session information in Azure Redis Cache.
You need to connect the web app to Azure Redis Cache.
Which three Azure Redis Cache properties should you use? Each correct answer presents part of the solution.
Each correct selection is worth one point.
https://learn.microsoft.com/en-us/azure/azure-cache-for-redis/cache-web-app-howto
You develop applications that integrate with a Microsoft Entra tenant. You plan to implement a permission classification in the tenant. You need to select permissions to include in your classification. Which permissions should you select?
Stephaine
5 days agoMabel
12 days agoGenevive
20 days agoCharlesetta
27 days agoJamal
1 month agoKyoko
1 month agoAmira
2 months agoAshley
2 months agoMarti
2 months agoAnnabelle
2 months agoZack
3 months agoNana
3 months agoMajor
3 months agoJoanna
3 months agoDenise
4 months agoWenona
4 months agoBarb
4 months agoWalton
4 months agoJeniffer
5 months agoTabetha
5 months agoEthan
5 months agoCecilia
5 months agoMarva
6 months agoFelicidad
6 months agoRickie
6 months agoLuis
6 months agoTaryn
6 months agoAleshia
7 months agoTequila
7 months agoTaryn
9 months agoGladys
9 months agoYuki
10 months agoRene
11 months agoLeonor
1 year agoLarue
1 year agoEmilio
1 year agoLaurena
1 year agoStefania
1 year agoAbel
1 year agoOna
1 year agoDesiree
1 year agoPrecious
1 year agoMalissa
1 year agoIzetta
1 year agoFatima
1 year agoTeri
1 year agoDenae
1 year agoAnnelle
1 year agoStaci
1 year agoSylvia
1 year agoJoanna
1 year agoMaurine
1 year agoVeronique
1 year agoRusty
1 year agoLetha
1 year agoKara
2 years agoStefania
2 years agoIzetta
2 years agoKanisha
2 years agoTomas
2 years agoGaynell
2 years agoDelpha
2 years agoDelsie
2 years agoJoseph
2 years agoJuan
2 years agoDoyle
2 years agoCarmela
2 years agoPerrysa
2 years ago