AZ-102 試験問題を無料オンラインアクセス

You have an Azure Active Directory (Azure AD) tenant named Tenant1 and an Azure subscription named You enable Azure AD Privileged Identity Management.
You need to secure the members of the Lab Creator role. The solution must ensure that the lab creators request access when they create labs.
What should you do first?

• A.From Subscription1 edit the members of the Lab Creator role.
• B.From Azure AD Identity Protection, creates a user risk policy.
• C.From Azure AD Privileged Identity Management, discover the Azure resources of Conscription.
• D.From Azure AD Privileged Identity Management, edit the role settings for Lab Creator.

You have an Azure DNS zone named adatum.com. You need to delegate a subdomain named research.adatum.com to a different DNS server in Azure. What should you do?

• A.Create an PTR record named research in the adatum.com zone.
• B.Create an NS record named research in the adatum.com zone.
• C.Create an A record named ".research in the adatum.com zone.
• D.Modify the SOA record of adatum.com.

You have an Azure subscription named Subscription1. Subscription1 contains a virtual machine named VM1.
You install and configure a web server and a DNS server on VM1.
VM1 has the effective network security rules shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

正解：

Explanation

You have an Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com that contains 100 user accounts.
You purchase 10 Azure AD Premium P2 licenses for the tenant.
You need to ensure that 10 users can use all the Azure AD Premium features.
What should you do?

• A.From the Groups blade of each user, invite the users to a group.
• B.From the Licenses blade of Azure AD, assign a license.
• C.From the Directory role blade of each user, modify the directory role.
• D.From the Azure AD domain, add an enterprise application.

Another administrator reports that she is unable to configure a web app named corplod7509086n3 to prevent all connections from an IP address of 11.0.0.11.
You need to modify corplod7509086n3 to successfully prevent the connections from the IP address. The solution must minimize Azure-related costs.
What should you do from the Azure portal?

正解：

See explanation below.
Explanation
Step 1:
Find and select application corplod7509086n3:
1. In the Azure portal, on the left navigation panel, click Azure Active Directory.
2. In the Azure Active Directory blade, click Enterprise applications.
Step 2:
To add an IP restriction rule to your app, use the menu to open Network>IP Restrictions and click on Configure IP Restrictions

Step 3:
Click Add rule
You can click on [+] Add to add a new IP restriction rule. Once you add a rule, it will become effective immediately.

Step 4:
Add name, IP address of 11.0.0.11, select Deny, and click Add Rule

References:
https://docs.microsoft.com/en-us/azure/app-service/app-service-ip-restrictions