Microsoft AZ-500 Quiz 7 Topic 1 Questions 31-35

Question: 1

You need to create a new Azure Active Directory (Azure AD) directory named 12345678.onmicrosoft.com. The new directory must contain a new user named user1@12345678.onmicrosoft.com.

To complete this task, sign in to the Azure portal.

AExplanation:
The first step is to create the Azure Active Directory tenant.
Sign in to the Azure portal.
From the Azure portal menu, selectAzure Active Directory.
On the overview page, selectManage tenants.
Select +Create.
On the Basics tab, select Azure Active Directory.
Select Next: Configurationto move on to the Configuration tab.
For Organization name, enter 12345678.
For the Initial domain name, enter 12345678.
Leave the Country/Region as the default.
The next step is to create the user.
From the Azure portal menu, selectAzure Active Directory.
Select Users then select New user.
Enter User1 in the User name and Name fields.
Leave the default option of Auto-generate password.
Click the Create button.

Show Answer

Question: 2

You need to ensure that the rg1lod10598168n1 Azure Storage account is encrypted by using a key stored in the KeyVault10598168 Azure key vault.

To complete this task, sign in to the Azure portal.

AExplanation:
Step 1: To enable customer-managed keys in the Azure portal, follow these steps:
1. Navigate to your storage account rg1lod10598168n1
2. On the Settings blade for the storage account, click Encryption. Select the Use your own key option, as shown in the following figure.

Step 2: Specify a key from a key vault
To specify a key from a key vault, first make sure that you have a key vault that contains a key. To specify a key from a key vault, follow these steps:
4. Choose the Select from Key Vault option.
5. Choose the key vault KeyVault10598168 containing the key you want to use.
6. Choose the key from the key vault.

Show Answer

Question: 3

You need to create a new Azure Active Directory (Azure AD) directory named 10317806.onmicrosoft.com. The new directory must contain a user named user10317806 who is configured to sign in by using Azure Multi-Factor Authentication (MFA).

AExplanation:
To create a new Azure AD tenant:
1. Browse to theAzure portaland sign in with an account that has an Azure subscription.
2. Select theplus icon (+)and search forAzure Active Directory.

3. SelectAzure Active Directoryin the search results.

4. SelectCreate.
5. Provide anOrganization name(10317806) and anInitial domain name (10317806). Then selectCreate. This will create the directory named
10317806.onmicrosoft.com.

6. After directory creation is complete, select the information box to manage your new directory.
To create the user:
1. In the Azure portal, make sure you are on the Azure Active Directory fly out.

If not, select the Azure Active Directory icon from the left services navigation.

2. UnderManage, selectUsers.

3. SelectAll usersand then select+ New user.
4. Provide aNameandUser name(user10317806) for the user. When you're done, selectCreate.
To enable MFA:
1. In the Azure portal, make sure you are on the Azure Active Directory fly out.

If not, select the Azure Active Directory icon from the left services navigation.

2. UnderManage, selectUsers.

3. Click on the Multi-Factor Authentication link.
4. Tick the checkbox next to the user's name and click the Enable link.

Show Answer

Question: 4

The developers at your company plan to publish an app named App11641655 to Azure.

You need to ensure that the app is registered to Azure Active Directory (Azure AD). The registration must use the sign-on URLs of https://app.contoso.com.

To complete this task, sign in to the Azure portal and modify the Azure resources.

AExplanation:
Step 1: Register the Application
1. Sign in to your Azure Account through the Azure portal.
2. Select Azure Active Directory.
3. Select App registrations.
4. Select New registration.
5. Name the application App11641655. Select a supported account type, which determines who can use the application. Under Redirect URI, select Web for the type of application you want to create. Enter the URI: https://app.contoso.com , where the access token is sent to.

6. Click Register

Show Answer

Question: 5

You plan to connect several Windows servers to the WS11641655 Azure Log Analytics workspace.

You need to ensure that the events in the System event logs are collected automatically to the workspace after you connect the Windows servers.

To complete this task, sign in to the Azure portal and modify the Azure resources.

AExplanation:
Azure Monitor can collect events from the Windows event logs or Linux Syslog and performance counters that you specify for longer term analysis and reporting, and take action when a particular condition is detected. Follow these steps to configure collection of events from the Windows system log and Linux Syslog, and several common performance counters to start with.
Data collection from Windows VM
1. In the Azure portal, locate the WS11641655 Azure Log Analytics workspace then selectAdvanced settings.

2. SelectData, and then selectWindows Event Logs.
3. You add an event log by typing in the name of the log. TypeSystemand then select the plus sign+.
4. In the table, check the severitiesErrorandWarning. (for this question, select all severities to ensure that ALL logs are collected).
5. SelectSaveat the top of the page to save the configuration.

Show Answer

Microsoft AZ-500 Quiz:7 Topic:1 Questions:31-35