Question 1

A company enables just-in-time (JIT) virtual machine (VM) access in Azure.
An administrator observes a list of VMs on the Unsupported tab of the JIT VM access page in the Microsoft Defender for Cloud portal.
You need to determine why some VMs are not supported for JIT VM access.
What should you conclude?
  • Question 2

    A company uses Azure Active Directory (Azure AD) with Azure role-based access control (RBAC) for access to resources.
    Some users report that they are unable to grant RBAC roles to other users.
    You need to troubleshoot the issue.
    How should you complete the Azure Monitor query?

    Question 3

    A company uses an Azure Virtual Network (VNet) gateway named VNetGW1. VNetGW1 connects to a partner site by using a site-to-site VPN connection with dynamic routing.
    The company observes that the VPN disconnects from time to time.
    You need to troubleshoot the cause for the disconnections.
    What should you verify?
  • Question 4

    A company implements Azure Firewall and deploys an Azure Firewall policy.
    The policy incudes multiple application and network rules for the company's infrastructure. After deployment, an application is not accessible from on-premises computers.
    You need to enable diagnostic logging for the following settings:
    AzureFirewallApplicationRule
    AzureFirewallNetworkRule
    AzureFirewallDnsProxy
    How should you complete the PowerShell cmdlet?

    Question 5

    A company connects their on-premises network by using Azure VPN Gateway. The on-premises environment includes three VPN devices that separately tunnel to the gateway by using Border Gateway Protocol (BGP).
    A new subnet should be unreachable from the on-premises network.
    You need to implement a solution.
    Solution: Configure subnet delegation.
    Does the solution meet the goal?