Online Access Free AZ-101 Practice Test

You have an Azure subscription named Subscription1.
In Subscription1, you create an Azure web app named WebApp1. WebApp1 will access an external service that requires certificate authentication.
You plan to require the use of HTTPS to access WebApp1.
You need to upload certificates to WebApp1.
In which formats should you upload the certificate? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation

A PFX file contains the public key file (SSL Certificate) and its unique private key file. This is required for HTTPS access. The web app will distribute the public key (in a CER file) to clients that connect to the web app.
The CER file is an SSL Certificate which has the public key of the external service. The external service will have the private key associated with the public key contained in the CER file.

You create an Azure subscription that is associated to a basic Azure Active Directory (Azure AD) tenant. You need to receive an email notification when any user activates an administrative role.
What should you do?

• A.Purchase Azure AD Premium 92 and configure Azure AD Privileged Identity Management,
• B.Purchase Enterprise Mobility + Security E3 and configure conditional access policies.
• C.Purchase Azure AD Premium PI and enable Azure AD Identity Protection.
• D.Purchase Enterprise Mobility + Security E5 and create a custom alert rule in Azure Security Center.

You are the global administrator for an Azure Active Directory (Azure AD) tenant named adatum.com. From the Azure Active Directory blade, you assign the Conditional Access Administrator role to a user You need to ensure that Admin1 has just-in-time access as a conditional access administrator.
What should you do next?

• A.Enable Azure AD Identity Protection.
• B.Admin1 as Eligible for the Conditional Access Administrator role.
• C.Enable Azure AD Multi-Factor Authentication (MFA).
• D.Set Admin1 as Eligible for the Privileged Role Administrator role.

You have five Azure virtual machines that run Windows Server 2016.
You have an Azure load balancer named LB1 that provides load balancing se You need to ensure that visitors are serviced by the same web server for each request.
What should you configure?

• A.Session persistence to None
• B.a health probe
• C.Session persistence to Client IP
• D.Floating IP (direct server return) to Disable

You plan to create a new Azure Active Directory (Azure AD) role.
You need to ensure that the new role can view all the resources in the Azure subscription and issue support requests to Microsoft. The solution must use the principle of least privilege.
How should you complete the JSON definition? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation

Box 1: "*/read",
*/read lets you view everything, but not make any changes.
Box 2: " Microsoft.Support/*"
The action Microsoft.Support/* enables creating and management of support tickets.
References:
https://docs.microsoft.com/en-us/azure/role-based-access-control/tutorial-custom-role-powershell
https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles