NEW QUESTION 1
A company uses Azure AD Connect. The company plans to implement self-service password reset (SSPR). An administrator receives an error that password writeback could not be enabled during the Azure AD Connect configuration. The administrator observes the following event log error:
Error getting auth token
You need to resolve the issue. What should you do?

• A. Restart the Azure AD Connect service.
• B. Configure Azure AD Connect using a global administrator account that is not federated.
• C. Configure Azure AD Connect using a global administrator account with a password that is less than 256 characters.
• D. Disable password writeback and then enable password writeback using the Azure AD Connect configuration.

Answer: C

NEW QUESTION 2
A company has an Azure Active Directory (Azure AD) tenant. The company provisions an Azure Active Directory Domain Services (Azure AD DS) instance.
Users report that they are unable to sign into Azure AD DS after being provisioned from Azure AD. You verify the user accounts exist in Azure AD DS.
You need to resolve the issue. What should you do?

• A. Delete the Azure application named AzureActiveDirectoryDomainControllerServices and then enable Azure AD DS again.
• B. Deploy Azure AD Connect.
• C. Delete the Azure application named Azure AD Domain Services Sync and then enable Azure AD DS again.
• D. Instruct the users to change their password in Azure AD.

Answer: D

NEW QUESTION 3
A company uses Azure Active Directory (Azure AD) with Azure role-based access control (RBAC) for access to resources.
Some users report that they are unable to grant RBAC roles to other users. You need to troubleshoot the issue.
How should you complete the Azure Monitor query?

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 4
A company uses public Azure DNS zones.
The company reports DNS record creation and name resolution issues. You need to troubleshoot the issues.
What are the causes of the issues?

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 5
A company uses Azure AD Connect. The company plans to implement self-service password reset (SSPR). An administrator receives an error that password writeback cloud not be enabled during the Azure AD Connect configuration. The administrator observes the following event log error:
Error getting auth token
You need to resolve the issue.
Solution: Disable password writeback and then enable password writeback. Does the solution meet the goal?

• A. Yes
• B. No

Answer: B

NEW QUESTION 6
A company uses Azure Active Directory (Azure AD) for authentication. The company synchronizes Azure AD with an on-premises Active Directory domain.
The company reports that an Azure AD object fails to sync. You need to determine which objects are not syncing.
Which troubleshooting steps should you use to diagnose the failure?

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 7
A company named Contoso connects its on-premises resources to Azure by using ExpressRoute. An administrator reports that the circuit is in a failed state.
You need to resolve the issue.
How should you complete the PowerShell commands?

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 8
A company has on-premises application server that runs in System Center Virtual Machine Manager (SCVMM). The company configures Azure Site Recovery.
An administrator at the company reports that they receive an error message. The error message indicates that there are replication issues.
You need to troubleshoot the issue. Which log should you review?

• A. Network Security Group flow log
• B. Azure Monitor log
• C. Network Watcher diagnostic log
• D. SCVMM debug log

Answer: A

NEW QUESTION 9
A company uses Azure AD Connect. The company plans to implement self-service password reset (SSPR). An administrator receives an error that password writeback cloud not be enabled during the Azure AD Connect configuration. The administrator observes the following event log error:
Error getting auth token
You need to resolve the issue.
Solution: Use a global administrator account with a password that is less than 256 characters to configure Azure AD Connect.
Does the solution meet the goal?

• A. Yes
• B. No

Answer: A

NEW QUESTION 10
A company enables just-in-time (JIT) virtual machine (VM) access in Azure.
An administrator observes a list of VMs on the Unsupported tab of the JIT VM access page in the Microsoft
Defender for Cloud portal.
You need to determine why some VMs are not supported for JIT VM access. What should you conclude?

• A. The administrator is using the Microsoft Defender for Cloud free tier.
• B. The VMs were provisioned by using a classic deployment.
• C. The VMs were recently provisioned by using an Azure Resource Manager deployment.
• D. The administrator does not have the SecurityReader role.

Answer: B

NEW QUESTION 11
A company has an Azure Virtual Network gateway named VNetGW1. The company enables point-to-site connectivity on VNetGW1. An administrator configures VNetGW1 for the following:
OpenVPN for the tunnel type.
Azure certificate for the authentication type.
Users receive a certificate mismatch error when connecting by using a VPN client. You need to resolve the certificate mismatch error.
What should you do?

• A. Reissue the client certificate with client authentication enabled.
• B. Create a profile manually, add the server FQDN and reissue the client certificate.
• C. Reissue the client certificate with server authentication enabled.
• D. Install an IKEv2 VPN client on the user's computers.

Answer: B

NEW QUESTION 12
A company implements self-service password reset (SSPR).
After a firewall upgrade at the company's datacenter, SSPR stops working. You need to resolve the issue.
Which two URLs must be present on the firewalls to allow SSPR to connect?

• A. *.update.microsoft.com
• B. *.servicebus.windows.net
• C. *.passwordreset.onmicrosoft.com
• D. *.svc.ms
• E. *.adl.windows.com

Answer: AE

NEW QUESTION 13
A company migrates an on-premises Windows virtual machine (VM) to Azure. An administrator enables backups for the VM by using the Azure portal.
The company reports that the Azure VM backup job is failing. You need to troubleshoot the issue.
Solution: Configure the retention range for the current VM backup policy. Does the solution meet the goal?

• A. Yes
• B. No

Answer: A

NEW QUESTION 14
A company deploys Azure Traffic Manager load balancing for an Azure App Service solution.
Load balancing performance is showing a degraded status after deployment, and new HTTPS probes are failing to reach the Traffic Manager endpoints.
You need to troubleshoot the probe failure.
How should you complete the PowerShell script?

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 15
A company uses Azure virtual machines (VMs) in multiple regions. The VMs have the following configuration:

The backend pool of an internal Azure Load Balancer (ILB) named ILB1 contains VM1 and VM2. The ILB uses the Basic SKU and is in a resource group RG2.
Virtual network peering has been configured between VNet1 and VNet2.
Users report that they are unable to connect to resources on VM1 and VM2 by using ILB1 from VM3. You need to resolve the connectivity issues.
What should you do?

• A. Redeploy VM1 and VM2 into availability zones.
• B. Move ILB1 to RG1.
• C. Redeploy the ILB using the Standard SKU.
• D. Move VM1 and VM2 into RG3.

Answer: A

NEW QUESTION 16
A company implements Azure Firewall and deploys an Azure Firewall policy.
The policy incudes multiple application and network rules for the company's infrastructure. After deployment, an application is not accessible from on-premises computers.
You need to enable diagnostic logging for the following settings:
AzureFirewallApplicationRule
AzureFirewallNetworkRule
AzureFirewallDnsProxy
How should you complete the PowerShell cmdlet?

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 17
A company develops an Azure Cosmos DB solution. The solution has the following components:
A virtual network named VNet1 in a resource group named RG1.
A subnet named Subnet1 in VNet1.
A Private Link service.
The company is unable to configure a source IP address for the Private Link service from Subnet1. You need to resolve the issue for Subnet1.
How should you complete the PowerShell commands?

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 18
......