Question 66

Your network contains an Active Directory forest named contoso.com. You have an Azure Directory (Azure AD) tenant named contoso.com.
You plan to configure synchronization by using the Express Settings installation option in Azure AD Connect.
You need to identify which roles and groups are required to perform the planned configurations. The solution must use the principle of least privilege.
Which two roles and groups should you identify? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
  • Question 67

    From Azure Security Center, you enable Azure Container Registry vulnerability scanning of the images in Registry1.
    You perform the following actions:
    Push a Windows image named Image1 to Registry1.
    Push a Linux image named Image2 to Registry1.
    Push a Windows image named Image3 to Registry1.
    Modify Image1 and push the new image as Image4 to Registry1.
    Modify Image2 and push the new image as Image5 to Registry1.
    Which two images will be scanned for vulnerabilities? Each correct answer presents a complete solution.
    NOTE: Each correct selection is worth one point.
  • Question 68

    You plan to use Azure Sentinel to create an analytic rule that will detect suspicious threats and automate responses.
    Which components are required for the rule? To answer, select the appropriate options in the answer area.
    NOTE: Each correct selection is worth one point.

    Question 69

    You have an Azure subscription that contains the virtual machines shown in the following table.

    You create the Azure policies shown in the following table.

    You create the resource locks shown in the following table.

    For each of the following statements, select Yes if the statement is true. Otherwise, select No.
    NOTE: Each correct selection is worth one point.

    Question 70

    You have the Azure virtual networks shown in the following table.

    You have the Azure virtual machines shown in the following table.

    The firewalls on all the virtual machines allow ping traffic.
    NSG1 is configured as shown in the following exhibit.
    Inbound security rules

    Outbound security rules

    For each of the following statements, select Yes if the statement is true. Otherwise, select No.
    NOTE: Each correct selection is worth one point.