- (Exam Topic 5)
You have the Azure management groups shown in the following table.

You add Azure subscriptions to the management groups as shown in the following table.

You create the Azure policies shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Solution:
Box 1: No
Virtual networks are not allowed at the root and is inherited. Deny overrides allowed.
Box 2: No
Box 3: Yes
Subscriptions can be moved between Management Groups provided the user has the required RBAC permissions.
Reference:
https://docs.microsoft.com/en-us/azure/governance/management-groups/overview
https://docs.microsoft.com/en-us/azure/governance/management-groups/manage#moving-management-groups-a

Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

- (Exam Topic 6)
You have an Azure subscription.
You have 100 Azure virtual machines.
You need to quickly identify underutilized virtual machines that can have their service tier changed to a less expensive offering.
Which blade should you use?

1. A. Metrics
2. B. Customer insights
3. C. Monitor
4. D. Advisor

Correct Answer: D
References:
https://docs.microsoft.com/en-us/azure/advisor/advisor-cost-recommendations https://docs.microsoft.com/bs-latn-ba/azure/cost-management/tutorial-acm-opt-recommendations
Advisor helps you optimize and reduce your overall Azure spend by identifying idle and underutilized resources. You can get cost recommendations from the Cost tab on the Advisor dashboard.

- (Exam Topic 3)
You need to implement a backup solution for App1 after the application is moved. What should you create first?

1. A. a recovery plan
2. B. an Azure Backup Server
3. C. a backup policy
4. D. a Recovery Services vault

Correct Answer: D
A Recovery Services vault is a logical container that stores the backup data for each protected resource, such as Azure VMs. When the backup job for a protected resource runs, it creates a recovery point inside the Recovery Services vault.
Scenario:
There are three application tiers, each with five virtual machines. Move all the virtual machines for App1 to Azure.
Ensure that all the virtual machines for App1 are protected by backups.
References: https://docs.microsoft.com/en-us/azure/backup/quick-backup-vm-portal

- (Exam Topic 6)
You are planning to deploy an Ubuntu Server virtual machine to your company’s Azure subscription.
You are required to implement a custom deployment that includes adding a particular trusted root certification authority (CA).
Which of the following should you use to create the virtual machine?

1. A. The New-AzureRmVm cmdlet.
2. B. The New-AzVM cmdlet.
3. C. The Create-AzVM cmdlet.
4. D. The az vm create command.

Correct Answer: D
https://docs.microsoft.com/en-us/azure/virtual-machines/linux/tutorial-automate-vm-deployment

- (Exam Topic 6)
You have an Azure subscription that contains the resources shown in the following table.

You need to assign User1 the Storage File Data SMB Share Contributor role for share1. What should you do first?

1. A. Modify the security profile for the file shares in storage1.
2. B. Configure Access control (I AM) for share1.
3. C. Select Default to Azure Active Directory authorization in the Azure portal for storage!.
4. D. Enable identity-based data access for the file shares in storage1.

Correct Answer: A