| Question.17 You have an Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com. The User administrator role is assigned to a user named Admin1. An external partner has a Microsoft account that uses the user1@outlook.com sign in. Admin1 attempts to invite the external partner to sign in to the Azure AD tenant and receives the following error message: “Unable to invite user user1@outlook.com” Generic authorization exception. You need to ensure that Admin1 can invite the external partner to sign in to the Azure AD tenant. What should you do? (A) From the Users blade, modify the External collaboration settings. (B) From the Custom domain names blade, add a custom domain. (C) From the Organizational relationships blade, add an identity provider. (D) From the Roles and administrators blade, assign the Security administrator role to Admin1. |
17. Click here to View Answer
Answer is (A) From the Users blade, modify the External collaboration settings.
You can adjust the guest user settings, their access, who can invite them from “External collaboration settings”
Azure AD -> User Settings -> External Users -> Manage external collaboration settings.
Azure AD -> External Identities -> External Collaboration Settings
Reference:
https://techcommunity.microsoft.com/t5/Azure-Active-Directory/Generic-authorization-exception-inviting-Azure-AD-gests/td-p/274742
| Question.18 You have a Recovery Service vault that you use to test backups. The test backups contain two protected virtual machines. You need to delete the Recovery Services vault. What should you do first? (A) From the Recovery Service vault, delete the backup data. (B) Modify the disaster recovery properties of each virtual machine. (C) Modify the locks of each virtual machine. (D) From the Recovery Service vault, stop the backup of each backup item. |
18. Click here to View Answer
Answer is (D) From the Recovery Service vault, stop the backup of each backup item.
You can’t delete a Recovery Services vault if it is registered to a server and holds backup data. If you try to delete a vault, but can’t, the vault is still configured to receive backup data.
Remove vault dependencies and delete vault
In the vault dashboard menu, scroll down to the Protected Items section, and click Backup Items. In this menu, you can stop and delete Azure File Servers, SQL Servers in Azure VM, and Azure virtual machines.
Reference:
https://docs.microsoft.com/en-us/azure/backup/backup-azure-delete-vault
| Question.19 You have an Azure Kubernetes Service (AKS) cluster named AKS1. You need to configure cluster autoscaler for AKS1. Which two tools should you use? (A) The kubectl command (B) The az aks command (C) The Set-AzVm cmdlet (D) The Azure portal (E) The Set-AzAks cmdlet |
19. Click here to View Answer
Answer is B & D
We need to configure autoscaler for the AKS cluster. We do not want to scale Kubernetes pods, so kubectl command is not needed.
A: kubectl command is used for configuring Kubernetes and not AKS cluster.
B: The az aks command is used for the AKS cluster configuration.
C: Set-AzVm cmdlet is used for VMs.
D: Azure portal, under node pools, press scale, then choose auto scale.
E: Set-AzAks, creates or updates an AKS cluster, the correct cmdlet is Set-AzAksCluster.
AKS clusters can scale in one of two ways:
– The cluster autoscaler watches for pods that can’t be scheduled on nodes because of resource constraints. The cluster then automatically increases the number of nodes.
– The horizontal pod autoscaler uses the Metrics Server in a Kubernetes cluster to monitor the resource demand of pods. If an application needs more resources, the number of pods is automatically increased to meet the demand.
Reference:
https://docs.microsoft.com/en-us/azure/aks/cluster-autoscaler
| Question.20 You have an Azure virtual machine named VM1 that runs Windows Server 2019. You save VM1 as a template named Template1 to the Azure Resource Manager library. You plan to deploy a virtual machine named VM2 from Template1. What can you configure during the deployment of VM2? (A) Operating system (B) Administrator username (C) Virtual machine size (D) Resource group |
20. Click here to View Answer
Answer is (D) Resource group
When you create a template, you may parameterize some values, like admin username, but you don’t have to. The RG is impossible to put in a template, therefore you must specify this at deployment.
Creating an Azure virtual machine usually includes two steps:
– Create a resource group. An Azure resource group is a logical container into which Azure resources are deployed and managed. A resource group must be created before a virtual machine.
– Create a virtual machine.
When deploying a virtual machine from a template, you must specify:
– the Resource Group name and location for the VM
– the administrator username and password
– an unique DNS name for the public IP
Reference:
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/ps-template
https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/quickstart-create-templates-use-the-portal