Correct Answer: C

All of them. Moving a resource only moves it to a new Resource Group or Subscription. It doesn't change the location of the resource.

Reference:

https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/move-support-resources

https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/move-support-resources#microsoftcompute

https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/move-support-resources#microsoftnetwork

https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/move-support-resources#microsoftstorage

https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/move-support-resources#microsoftrecoveryservices

Correct Answer: C

Set-AzMarketplaceTerms -Publisher <String> -Product <String> -Name <String> [-Accept] [-Terms <PSAgreementTerms>] [-DefaultProfile <IAzureContextContainer>] [-WhatIf] [-Confirm] [<CommonParameters>]

Reference:

https://docs.microsoft.com/en-us/powershell/module/Az.MarketplaceOrdering/Set-AzMarketplaceTerms?view=azps-4.6.0

Correct Answer: B

Active Directory -> Manage Section -> Roles and administrators-> Search for Admin and assign a user to it.

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-users-assign-role-azure-portal

Correct Answer: A

Active Directory-> Manage Section > Choose Licenses -> All Products -> Select Azure Active Directory Premium P2 -> Then assign a user to it.

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/license-users-groups

Correct Answer: C

IT Service Management Connector (ITSMC) allows you to connect Azure to a supported IT Service Management (ITSM) product or service. Azure services like Azure Log Analytics and Azure Monitor provide tools to detect, analyze, and troubleshoot problems with your Azure and non-Azure resources. But the work items related to an issue typically reside in an ITSM product or service. ITSMC provides a bi-directional connection between Azure and ITSM tools to help you resolve issues faster. ITSMC supports connections with the following ITSM tools: ServiceNow, System Center Service Manager, Provance, Cherwell.

Reference:

https://docs.microsoft.com/en-us/azure/azure-monitor/alerts/itsmc-overview

Correct Answer: A

When you connect a Windows device with Azure AD using an Azure AD join, Azure AD adds the following security principles to the local administrators group on the device:

✑ The Azure AD global administrator role

✑ The Azure AD device administrator role

✑ The user performing the Azure AD join

In the Azure portal, you can manage the device administrator role on the Devices page. To open the Devices page:

1. Sign in to your Azure portal as a global administrator or device administrator.

2. On the left navbar, click Azure Active Directory.

3. In the Manage section, click Devices.

4. On the Devices page, click Device settings.

5. To modify the device administrator role, configure Additional local administrators on Azure AD joined devices.

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/devices/assign-local-admin

User1 can add Device2 to Group1: No

User2 can add Device1 to Group1: Yes

User2 can add Device2 to Group2: No

Explaination:

Groups can contain both registered and joined devices as members.

As a global administrator or cloud device administrator, you can manage the registered or joined devices. Intune Service administrators can update and delete devices. User administrator can manage users but not devices.

User1 is a cloud device administrator. Users in this role can enable, disable, and delete devices in Azure AD and read Windows 10 BitLocker keys (if present) in the Azure portal. The role does not grant permissions to manage any other properties on the device.

User2 is the owner of Group1. He can add Device1 to Group1.

Group2 is configured for dynamic membership. The properties on which the membership of a device in a group of the type dynamic device are defined cannot be changed by either an end user or an user administrator. User2 cannot add any device to Group2.

Reference: https://docs.microsoft.com/en-us/azure/active-directory/devices/device-management-azure-portal

Answer: C (Stop the backup of SQLDB01) is correct.

In addition to removing all the resources, You can do the following.

- need to stop the backup up first

- disable the Soft Delete Feature in Recovery Vault (because if you delete the backup then it will be in the recycle bin for the next 14 days and until that you wouldn't be able to remove the RV [RV > Properties > Security Settings > Soft Delete > Disable].

- Delete the all backup

- now you will be able to delete all resources along with RV.

Has full access to all resources including the right to delegate access to others.

Note:

There are several versions of this question in the exam. The question can have other incorrect answer options, including the following:

1. Name Server (NS)

2. Assign User1 the Contributor role for VNet1.

3. Remove User1 from the Security Reader and Reader roles for Subscription1. Assign User1 the Contributor role for Subscription1.

Reference:

https://docs.microsoft.com/en-us/azure/role-based-access-control/overview

When you add a custom domain in azure, you are not allowed to use that unless u prove its your domain.So once you add the custom domain name azure asks you to verify and you have to provide some inputs to verify that its your these inputs can be provided in TXT or MX. So its MX in this case.