Question 31

You have two Azure subscriptions that are linked to an Azure Active Directory (Azure AD) tenant named contoso.com and contain an Azure Virtual Desktop deployment. The tenant contains a user named User1.
When User1 signs in to Azure Security Center, the user receives the message shown in the following exhibit.
You need to ensure that User1 can manage security information for the tenant. The solution must use the principle of least privilege.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Question 32

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have the following:
A Microsoft 365 E5 tenant
An on-premises Active Directory domain
A hybrid Azure Active Directory (Azure AD) tenant
An Azure Active Directory Domain Services (Azure AD DS) managed domain
An Azure Virtual Desktop deployment
The Azure Virtual Desktop deployment contains personal desktops that are hybrid joined to the on-premises domain and enrolled in Microsoft Intune.
You need to configure the security settings for the Microsoft Edge browsers on the personal desktops.
Solution: You configure a configuration profile in Intune.
Does this meet the goal?
  • Question 33

    You have an Azure subscription that contains the resources shown in the following table.

    You create a recovery services vault named Vault1.
    Which resources can you back up using Azure Backup to Vault1?
  • Question 34

    You have an Azure Virtual Desktop deployment.
    You need to create a host pool. The solution must ensure that during periods of tow CPU usage, credits can be accumulated, and then used to raise performance above the purchased baseline during periods of high CPU usage.
    Which virtual machine series should you specify when you create the pool?
  • Question 35

    Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
    After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
    You have a Windows Virtual Desktop host pool named Pool1 that is integrated with an Azure Active Directory Domain Services (Azure AD DS) managed domain.
    You need to configure idle session timeout settings for users that connect to the session hosts in Pool1.
    Solution: From an Azure AD DS-joined computer, you modify the AADDC Computers GPO settings.
    Does that meet the goal?