RDS Multi AZ practice questions

A company uses Microsoft Entra ID (Microsoft Entra ID). They want to allow users to sign in to multiple SaaS applications using their Microsoft Entra ID credentials without being prompted again for each application. Which Microsoft Entra ID feature should they enable?

Trap 1: Multi-Factor Authentication (MFA)

MFA adds an extra factor but does not eliminate reprompts between applications.

Trap 2: Conditional Access

Conditional Access enforces policies but does not provide single sign-on.

Trap 3: Identity Protection

Identity Protection identifies risky sign-ins but does not enable SSO.

A
Single Sign-On (SSO)
Correct. SSO provides seamless access to multiple apps after a single authentication.
B
Multi-Factor Authentication (MFA)
Why wrong: MFA adds an extra factor but does not eliminate reprompts between applications.
C
Conditional Access
Why wrong: Conditional Access enforces policies but does not provide single sign-on.
D
Identity Protection
Why wrong: Identity Protection identifies risky sign-ins but does not enable SSO.

Question 2easymultiple choice

A company uses Microsoft Entra ID (Microsoft Entra ID). They want to enable users to reset their own passwords without contacting the help desk. They also want to enforce multi-factor authentication (MFA) during the password reset process. Which Microsoft Entra ID feature should they enable?

Trap 1: Microsoft Entra ID Identity Protection

Identity Protection detects risky sign-ins and can trigger remediation, but it does not directly provide password reset functionality.

Trap 2: Microsoft Entra ID Privileged Identity Management (PIM)

PIM manages just-in-time access to privileged roles, not general user password resets.

Trap 3: Microsoft Entra ID Conditional Access

Conditional Access defines policies for access based on conditions like location or device, but it is not a password reset capability.

A
Microsoft Entra ID Identity Protection
Why wrong: Identity Protection detects risky sign-ins and can trigger remediation, but it does not directly provide password reset functionality.
B
Microsoft Entra ID Privileged Identity Management (PIM)
Why wrong: PIM manages just-in-time access to privileged roles, not general user password resets.
C
Microsoft Entra ID Self-Service Password Reset (SSPR)
SSPR enables users to reset their own passwords, and it can be integrated with MFA to verify identity during the reset process.
D
Microsoft Entra ID Conditional Access
Why wrong: Conditional Access defines policies for access based on conditions like location or device, but it is not a password reset capability.

Question 3mediummulti select

Your company is planning to use Azure Monitor Workbooks to create custom dashboards for IT operations. You need to select the data sources that can be used in a workbook. Which TWO data sources are supported? (Choose two.)

Trap 1: Azure SQL Database

Azure SQL Database is not a direct data source; you can query its logs via Log Analytics.

Trap 2: Microsoft Sentinel

Microsoft Sentinel uses Log Analytics as its underlying data store; workbooks can query Sentinel data via Log Analytics.

Trap 3: Azure Blob Storage

Azure Blob Storage is not a direct data source; you can analyze storage logs via Log Analytics.

A
Azure Resource Graph
Workbooks support Azure Resource Graph queries.
B
Azure SQL Database
Why wrong: Azure SQL Database is not a direct data source; you can query its logs via Log Analytics.
C
Microsoft Sentinel
Why wrong: Microsoft Sentinel uses Log Analytics as its underlying data store; workbooks can query Sentinel data via Log Analytics.
D
Log Analytics workspace
Workbooks support querying Log Analytics workspaces.
E
Azure Blob Storage
Why wrong: Azure Blob Storage is not a direct data source; you can analyze storage logs via Log Analytics.

Question 4hardmulti select

You are designing a governance and compliance solution for a large Azure environment with multiple subscriptions. The solution must enforce tagging policies, restrict resource types, and ensure compliance with regulatory standards. Which THREE Azure services or features should you use? (Choose three.)

Trap 1: Azure Resource Graph

Resource Graph is a query engine for resources, not an enforcement tool.

Trap 2: Azure Cost Management

Cost Management tracks spending, not governance or compliance enforcement.

A
Azure Resource Graph
Why wrong: Resource Graph is a query engine for resources, not an enforcement tool.
B
Azure Management Groups
Management Groups allow hierarchical organization and policy assignment at scale.
C
Azure Cost Management
Why wrong: Cost Management tracks spending, not governance or compliance enforcement.
D
Azure Blueprints (or Policy Initiatives)
Blueprints/Initiatives package policies, RBAC, and resource templates for compliance.
E
Azure Policy
Azure Policy can enforce tagging and restrict resource types across subscriptions.

Read the full DNS explanation →

Question 5mediummultiple choice

A company deploys a multi-tier application on Azure virtual machines. They need to implement disaster recovery using Azure Site Recovery. The recovery plan must ensure that the database VMs are started before the application VMs, and the application VMs before the web VMs. They also need to run a script after failover to update DNS records. Which ASR feature should they use?

Trap 1: Recovery Plan with manual steps

Manual steps require human intervention and do not automate ordering.

Trap 2: Replication policy with crash-consistent snapshots

Replication policy controls recovery points, not VM startup order or scripts.

Trap 3: Azure Automation runbook

Runbooks alone do not define VM startup order; they must be used within a recovery plan.

A
Recovery Plan with manual steps
Why wrong: Manual steps require human intervention and do not automate ordering.
B
Recovery Plan with custom groups and script actions
Custom groups define ordering, and script actions allow running PowerShell or Azure Automation after failover.
C
Replication policy with crash-consistent snapshots
Why wrong: Replication policy controls recovery points, not VM startup order or scripts.
D
Azure Automation runbook
Why wrong: Runbooks alone do not define VM startup order; they must be used within a recovery plan.