- (Exam Topic 3)
You have two Azure virtual networks named Vnet1 and Vnet2.
You have a Windows 10 device named Client1 that connects to Vnet1 by using a Point-to-Site (P2S) IKEv2 VPN.
You implement virtual network peering between Vnet1 and Vnet2. Vnet1 allows gateway transit Vnet2 can use the remote gateway.
You discover that Client1 cannot communicate with Vnet2. You need to ensure that Client1 can communicate with Vnet2. Solution: You enable BGP on the gateway of Vnet1.
Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: B

- (Exam Topic 2)
You need to configure BitLocker on Server4.
On which volumes can you turn on BitLocker, and on which volumes can you turn on auto-unlock? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Solution:
Reference:
https://docs.microsoft.com/en-us/windows-server/storage/refs/refs-overview
https://docs.microsoft.com/en-us/powershell/module/bitlocker/enable-bitlockerautounlock?view=windowsserver

Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

- (Exam Topic 3)
You have 200 Azure virtual machines.
You create a recovery plan in Azure Site Recovery to fail over all the virtual machines to an Azure region. The plan has three manual actions.
You need to replace one of the manual actions with an automated process. What should you use?

1. A. an Azure Desired State Configuration (DSC) virtual machine extension
2. B. an Azure Automation runbook
3. C. an Azure PowerShell function
4. D. a Custom Script Extension on the virtual machines

Correct Answer: B
Reference:
https://docs.microsoft.com/en-us/azure/site-recovery/recovery-plan-overview

- (Exam Topic 3)
You have 50 on-premises servers that run Windows Server. You have an Azure subscription that contains 50 virtual machines that run Windows Server.
You need to create an Azure Monitor alert that will be triggered if one of the servers or virtual machines has less than 10 percent available disk space.
What should you do first?

1. A. Create an Alert Rule
2. B. Install the Azure Monitor agent on each server.
3. C. Enable System Insights on each server.
4. D. Create a Log Analytics workspace and configure the Agent management settings.

Correct Answer: A
https://learn.microsoft.com/en-us/answers/questions/165893/help-to-set-up-azure-alert-for-disk-space-alert-wh.h

- (Exam Topic 3)
You have an Azure virtual machine named VM1 that runs Windows Server. You plan to deploy a new line-of-business (LOB) application to VM1.
You need to ensure that the application can create child processes. What should you configure on VM1?

1. A. Microsoft Defender Credential Guard
2. B. Microsoft Defender Application Control
3. C. Microsoft Defender SmartScreen
4. D. Exploit protection

Correct Answer: A
Reference:
https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/customize-exploit-protection?view=