- (Exam Topic 4)
You have a private project in Azure DevOps.
You need to ensure that a project manager can create custom work item queries to report on the project's progress. The solution must use the principle of least privilege.
To which security group should you add the project manager?
Correct Answer:
D
Contributors have permissions to contribute fully to the project code base and work item tracking. The main permissions they don't have or those that manage or administer resources.
Reference:
https://docs.microsoft.com/en-us/azure/devops/organizations/security/permissions
https://docs.microsoft.com/en-us/azure/devops/organizations/security/permissions-access-work-tracking?view=a
- (Exam Topic 4)
You have an on-premises app named App1 that accesses Azure resources by using credentials stored in a configuration file.
You plan to upgrade App1 to use an Azure service principal.
What is required for App1 to programmatically sign in to Azure Active Directory (Azure AD)?
Correct Answer:
C
https://docs.microsoft.com/en-us/azure/active-directory/develop/app-objects-and-service-principals "When you've completed the app registration, you've a globally unique instance of the app (the application object) which lives within your home tenant or directory. You also have a globally unique ID for your app (the app or client ID). In the portal, you can then add secrets or certificates and scopes to make your app work, customize the branding of your app in the sign-in dialog, and more."
- (Exam Topic 4)
You have an Azure Repos repository named repo1.
You need to clone repo1. The solution must clone only a directory named src/web.
How should you complete the script? To answer, drag the appropriate values to the correct targets, Each value may be used once, more than once, or not at all. You may need to drag the spirt bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point
Solution:
Text Description automatically generated with medium confidence
Does this meet the goal?
Correct Answer:
A
- (Exam Topic 4)
SIMULATION
You need to create and configure an Azure Storage account named az400lod11566895stor in a resource group named RG1lod11566895 to store the boot diagnostics for a virtual machine named VM1.
To complete this task, sign in to the Microsoft Azure portal.
Solution:
Step 1: To create a general-purpose v2 storage account in the Azure portal, follow these steps:
On the Azure portal menu, select All services. In the list of resources, type Storage Accounts. As you begin typing, the list filters based on your input. Select Storage Accounts.
On the Storage Accounts window that appears, choose Add. Select the subscription in which to create the storage account. Under the Resource group field, select RG1lod11566895
Next, enter a name for your storage account named: az400lod11566895stor Select Create.
Step 2: Enable boot diagnostics on existing virtual machine
To enable Boot diagnostics on an existing virtual machine, follow these steps: Sign in to the Azure portal, and then select the virtual machine VM1.
In the Support + troubleshooting section, select Boot diagnostics, then select the Settings tab.
In Boot diagnostics settings, change the status to On, and from the Storage account drop-down list, select the storage account az400lod11566895stor.
Save the change.
Graphical user interface, text, application, email Description automatically generated
You must restart the virtual machine for the change to take effect. Reference:
https://docs.microsoft.com/en-us/azure/storage/common/storage-account-create https://docs.microsoft.com/en-us/azure/virtual-machines/troubleshooting/boot-diagnostics
Does this meet the goal?
Correct Answer:
A
- (Exam Topic 4)
You have an Azure subscription that contains four Azure virtual machines
You need to configure the virtual machines to use a single identity. The solution must meet the following requirements:
• Ensure that the credentials for the identity are managed automatically.
• Support granting privileges to the identity. Which type of identity should you use?
Correct Answer:
C
System-assigned managed identities enable Azure resources to authenticate to cloud services without storing credentials in code. They also support granting privileges to the identity, making them the ideal choice for this scenario. Source: Microsoft
