Azure AD Conditional Access & MFA

A company has several departments, each with its own virtual machines (VMs) inside a resource group RG1. To associate each VM with its respective department, which action should you take?

An Azure AD conditional access policy requires members of the Global Administrators group to use Multi-Factor Authentication when connecting to Azure AD from untrusted locations. Access alterations to user settings via the multi-factor authentication page will meet the stated goal.

An Azure AD conditional access policy is configured to require MFA for Global Admins. Altering the session control of the Azure AD conditional access policy via the Azure portal meets the goal of requiring MFA.

An Azure AD conditional access policy requires MFA for Global Admins. Altering the grant control of the Azure AD conditional access policy via the Azure portal can satisfy this requirement.

You need to deploy an Azure virtual machine. Which tool should you use?

A company uses MFA only when users are not in the office, configured with Per Authentication and a smaller company is acquired and needs to use MFA. Reconfiguring the existing usage model via the Azure portal will meet the goal.

A company uses MFA only when users are not in the office, configured with Per Authentication and a smaller company is acquired and needs to use MFA. Reconfiguring the existing usage model via the Azure CLI will meet the goal.

A company uses MFA only when users are not in the office, configured with Per Authentication and a smaller company is acquired and needs to use MFA. Creating a new Multi-Factor Authentication provider with a backup from the existing Multi-Factor Authentication provider data will meet the goal.

A new user account has been created in the on-premise Active Directory, and replication to Azure AD is needed immediately. Which PowerShell cmdlet should be run?

A new user account has been created in on-premise AD and you need to replicate to Azure AD immediately. Utilizing Active Directory Sites and Services to replicate the Global Catalog on a domain controller will meet the goal.

A new user account has been created in on-premise AD and replication to Azure AD is needed immediately. Restarting the NetLogon service on a domain controller will achieve this replication.

A company has datacenters in Los Angeles and New York and wants to configure them as geo-clustered sites for site resiliency. Data must be stored on multiple nodes in separate geographic locations and be readable from the secondary location. Which Azure storage redundancy option should you recommend?

A senior colleague, Jon Ross, uses a solitary Azure Resource Manager (ARM) template to deploy a virtual machine and additional storage account, accessing the Resource Group blade to determine if the ARM template reviewed satisfies the requirements.

A senior colleague, Jon Ross, uses a solitary Azure Resource Manager (ARM) template to deploy a virtual machine and additional storage account, accessing the Virtual Machine blade to determine if the ARM template reviewed satisfies the requirements.

A senior colleague, Jon Ross, uses a solitary Azure Resource Manager (ARM) template to deploy a virtual machine and additional storage account, accessing the Container blade to determine if the ARM template reviewed satisfies the requirements.

A company has three virtual machines (VMs) in an availability set. You are trying to resize one of the VMs, but it returns an allocation failure message. What action should you take to ensure the VM is resized?

You have an Azure virtual machine (VM) with a single data disk. You need to attach this data disk to another Azure VM, minimizing downtime. Which action should you take FIRST?

Match each Azure service/feature with its primary security function:

What value indicates that no limit is set in the resource manager?

A company is deploying VMs using ARM templates that must be included in an availability set. Which value for the platformUpdateDomainCount property ensures maximum accessibility during maintenance?