An administrator needs to restrict the creation of specific Azure resource types within a resource group. Which Azure feature should be used to enforce these compliance requirements?

You have an Azure storage account named 'storage1'. You need to ensure that any data deleted from the 'data' blob container can be recovered for up to 14 days. What should you configure?

An organization has several Azure virtual machines (VMs) that must be able to communicate with each other over a private IP address space, even though they are in different virtual networks (VNets) within the same region. What is the most efficient way to connect these VNets?

An administrator is configuring an Azure Load Balancer to distribute traffic to a backend pool of virtual machines. Which rule is required to map a specific public port and protocol to a different private port and protocol on a specific virtual machine within the backend pool?

You are managing an Azure environment and need to delegate the task of managing all resources within a specific subscription to a new team member, without granting them the ability to manage access to those resources. Which built-in Azure Role-Based Access Control (RBAC) role should you assign?

An administrator needs to move a large amount of data from an on-premises file server to an Azure Blob storage container. The solution must support synchronization and ensure that only changed files are copied after the initial transfer. Which tool is best suited for this task?

An administrator needs to ensure that a virtual machine named 'VM1' can be automatically moved to a different physical server in the same Azure data center if the underlying hardware fails. Which feature should be used to ensure high availability for multiple VMs by distributing them across different racks to avoid a single point of failure?

An administrator needs to provide remote management access to an Azure Virtual Machine (VM) over RDP and SSH directly through the Azure portal, without exposing the VM via a public IP address. Which service should be implemented?

An administrator needs to ensure that all resources in a subscription are automatically tagged with a specific department name as they are created. If a resource is created without the tag, the creation should be prevented. Which Azure service is designed to enforce this requirement?

An administrator needs to connect an on-premises data center to an Azure Virtual Network. The solution must provide a dedicated, private connection that does not traverse the public internet and supports speeds up to 100 Gbps. Which service should be used?

An Azure Resource Manager (ARM) template is a JavaScript Object Notation (JSON) file that defines the infrastructure and configuration for a project. Which section of the ARM template is used to define the actual infrastructure objects, such as Virtual Machines or Storage Accounts, that will be deployed?

When deploying an Azure Resource Manager (ARM) template, you want to ensure that a Virtual Machine is only created after a specific Storage Account has been successfully provisioned. Which element should you use within the Virtual Machine resource definition to enforce this deployment sequence?

You are developing an Azure Resource Manager (ARM) template and need to dynamically generate a unique name for a storage account based on the unique ID of the resource group. Which template function should you use to ensure the name is both deterministic and unique to the subscription?

In an Azure Resource Manager (ARM) template, which section allows you to define values that can be passed during the deployment process to customize the configuration for different environments, such as development or production?

In an Azure Resource Manager (ARM) template, you need to set the value of a property by retrieving a secret stored in an Azure Key Vault. Which object within the 'parameters' file or 'parameters' section should you use to securely reference this value without hardcoding it?

When deploying an Azure Resource Manager (ARM) template, you want to deploy multiple instances of a resource, such as several data disks for a Virtual Machine, without manually repeating the code. Which element should you add to the resource definition to achieve this repetition?

An ARM template developer needs to retrieve the IP address of a Public IP Address resource after it has been deployed to use it as an input for a different resource in the same template. Which function should be used for this purpose?

When deploying an Azure Resource Manager (ARM) template, you can choose between two deployment modes. Which mode deletes resources in the resource group that are not defined in the template?

In an Azure Resource Manager (ARM) template, which section is used to define custom expressions or reusable logic that can be called throughout the template to simplify complex string manipulations or calculations?

In an Azure Resource Manager (ARM) template, you want to perform a deployment only if a specific boolean parameter is set to true. Which element should you use within the resource definition to control this behavior?

An administrator needs to create a new Azure Resource Group and must ensure the operation is performed using a cross-platform command-line tool that can run natively on macOS, Linux, and Windows. Which command is the correct choice?

When using Azure PowerShell to manage resources, which command must be executed first in a new session to authenticate and set the active subscription context?

An administrator needs to deploy a complex infrastructure involving multiple interconnected virtual networks and storage accounts. Which tool provides a graphical user interface (GUI) that is most suitable for users who prefer visual wizards and manual configuration over scripting?

An IT professional needs to update the tags of an existing Virtual Machine named "VM1" using the Azure CLI. Which command structure is the correct way to achieve this task?

An administrator wants to view all existing Virtual Machines in a specific resource group named "SalesRG" using Azure PowerShell. Which cmdlet should be used to retrieve this list?

An administrator needs to quickly switch between Bash and PowerShell environments without leaving the web browser or installing local software. Which Azure tool is specifically designed to provide this integrated, browser-based management experience?

An administrator needs to create multiple Azure storage accounts using a PowerShell script. To ensure the script is using the correct Azure subscription context when multiple subscriptions are available, which cmdlet should be used to change the current active subscription?

An administrator needs to programmatically determine the output of an Azure CLI command in a format that is easily parsed by other scripts or applications. Which global parameter should be appended to the command to retrieve the data in JSON format?

An administrator is managing Azure resources via the CLI and wants to filter the results of a command to show only the 'name' and 'location' properties of all Virtual Machines in a table format. Which command part should be added to 'az vm list' to achieve this?

An administrator needs to ensure that users can only access Microsoft 365 services if they are connecting from a specific range of corporate IP addresses and have a compliant device. Which Microsoft Entra ID feature should be used to enforce these requirements?

An organization wants to implement a mechanism where guest users' access to a specific team is automatically revoked after 90 days unless a manager confirms the access is still required. Which feature of Microsoft Entra ID should be configured?

An administrator needs to grant a technician the ability to reset passwords for non-administrative users for a limited period of 2 hours. Which Microsoft Entra ID feature is best suited for providing this 'just-in-time' access?

A company wants to group users automatically based on their department attribute in Microsoft Entra ID. When a user's department changes to "Sales", they should automatically gain access to sales-related resources. Which group type and membership combination should be used?

An organization wants to delegate the management of a specific subset of users, such as the 'Marketing' department, to a local administrator without granting them permissions over the entire Microsoft Entra tenant. What is the most appropriate feature to use?

An administrator is investigating a security alert where a user's sign-in was flagged as 'high risk' because it originated from an anonymous IP address. Which Microsoft Entra ID feature provides this risk-based detection and allows for the automation of remedial actions such as requiring a password change?

An administrator wants to simplify the login experience for users on company-owned Windows 10/11 devices so they can sign in to the OS using their Microsoft Entra credentials and gain Single Sign-On (SSO) to cloud resources. Which device identity state should be achieved?

An administrator needs to allow a partner organization to access an internal application without creating a new managed user account in the home tenant. Which feature of Microsoft Entra ID enables this cross-organization collaboration?

An administrator needs to enable an Azure-hosted virtual machine to authenticate to an Azure Key Vault secret without storing any credentials, such as a password or client secret, within the application's code or configuration files. What is the most secure Microsoft Entra ID feature to implement?

Which Microsoft Entra ID feature allows an organization to extend its cloud-based identity and access management to on-premises web applications without the need for a traditional VPN or DMZ deployment?