Azure

You have an Azure subscription that contains the following virtual machines:

• VM1: Windows Server 2022
• VM2: Windows Server 2019
• VM3: Windows Server 2016
• VM4: Windows 11
• VM5: Windows 10

You need to implement Azure Automation State Configuration.

Which virtual machines can you manage by using Azure Automation State Configuration?

You need to configure network communication between the Seattle and New York offices. The solution must meet the networking requirements.
What should you configure? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

You are planning the implementation Azure Arc to support the planned changes.
You need to configure the environment to support configuration management policies.
What should you do?

Your on-premises network contains an Active Directory Domain Services (AD DS) domain.

You plan to sync the domain with an Azure AD tenant by using Azure AD Connect cloud sync.

You need to meet the following requirements:

• Install the software required to sync the domain and Azure AD.
• Enable password hash synchronization.

What should you install, and what should you use to enable password hash synchronization? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

You have an Azure subscription that contains the storage accounts shown in the following table.



In the East US Azure region, you create a storage sync service named Sync1.

You need to create a sync group in Sync1.

Which storage accounts can you use, and what can you specify as the cloud endpoints. To answer, select the appropriate options in the answer area.

You have an on-premises DNS server named Server1 that runs Windows Server. Server1 hosts a DNS zone named fabnkam.com.
You have an Azure subscription that contains the resources shown in the following table.

You need to design a solution that will automatically resolve the names of any PaaS resources for which you configure private endpoints in Vnet1.

You have an on-premises Active Directory Domain Services (AD DS) domain that syncs with an Azure Active Directory (Azure AD) tenant. Group writeback is enabled in Azure AD Connect.
The AD DS domain contains a server named Server1. Server1 contains a shared folder named share1.
You have an Azure Storage account named storage2 that uses Azure AD-based access control. The storage2 account contains a share named share2.
You need to create a security group that meets the following requirements:
✑ Can contain users from the AD DS domain

You have an on-premises server named Server1 that runs Windows Server.

You have an Azure subscription that contains a virtual network named VNet1.

You need to connect Server1 to VNet1 by using Azure Network Adapter.

What should you use?

You have an Azure virtual machine named VM1 that runs Windows Server.
You need to configure the management of VM1 to meet the following requirements:

• Require administrators to request access to VM1 before establishing a Remote Desktop connection.
• Limit access to VM1 from specific source IP addresses.
• Limit access to VM1 to a specific management port.

What should you configure?

Your company has serval departments. Each department has a number of virtual machines (VMs).
The company has an Azure subscription that contains a resource group named RG1.
All VMs are located in RG1.
You want to associate each VM with its respective department.
What should you do?