Question 81

A company uses Azure AD Connect. The company plans to implement self-service password reset (SSPR).
An administrator receives an error that password writeback cloud not be enabled during the Azure AD Connect configuration. The administrator observes the following event log error:
Error getting auth token
You need to resolve the issue.
Solution: Use a global administrator account that is not federated to configure Azure AD Connect.
Does the solution meet the goal?
  • Question 82

    A company has an Azure point-to-site virtual private network (VPN) that uses certificate-based authentication.
    A user reports that the following error message when they try to connect to the VPN by using a VPN client on
    a Windows 11 machine:
    A certificate could not be found
    You need to resolve the issue.
    Which three actions should you perform?
  • Question 83

    A company creates an Azure resource group named RG1. RG1 has an Azure SQL Database logical server
    named sqlsvr1 that hosts the following resources:

    An administrator grants a user named User1 the Reader RBAC role in RG1. The administrator grants User2
    the Contributor role in sqlsvr1.
    User1 reports that they can connect to SQLDB1 from the IP address 155.127.95.212. User1 cannot connect to
    SQLDB2. User2 can connect to both SQLDB1 and SQLDB2 from the IP address 121.19.27.18. Both users can
    successfully connect to SQLDB1 and SQLDB2 from VM1.
    You are helping the administrator troubleshoot the issue. You run the following PowerShell command:
    Get-AzSqlServerFirewallRule -ResourceGroupName 'RG1' -ServerName 'sqlsvr1'
    The following output displays:

    You need to identify the cause for the reported issue and resolve User1's issues. The solution must satisfy the
    principle of least privilege.
    What should you do?

    Question 84

    A company connects their on-premises network by using Azure VPN Gateway. The on-premises environment
    includes three VPN devices that separately tunnel to the gateway by using Border Gateway Protocol (BGP).
    A new subnet should be unreachable from the on-premises network.
    You need to implement a solution.
    Solution: Configure subnet delegation.
    Does the solution meet the goal?
  • Question 85

    A company uses Azure Site Recovery (ASR) to replicate and recover Azure virtual machines (VM) between Azure regions.
    An administrator receives the following warning from ASR about a VM that uses P10 disks: Data change rate beyond supported limits You add OS Disk Write Bytes/Sec and Data Disk Write Bytes/Sec to the list of metrics for monitoring. You discover that the VM consistently has a data churn of greater than 8 MB/s but less than 10 MB/s.
    You need to resolve the issue.
    What should you do?