Download Microsoft Azure Architect Technologies.AZ-300.BrainDumps.2020-01-04.137q.vcex

We need to modify the grant control of Policy1. The grant control can trigger enforcement of one or more controls. Require multi-factor authentication (Azure Multi-Factor Authentication) Require device to be marked as compliant (Intune) Require Hybrid Azure AD joined device Require approved client app Require app protection policy Note: It is now possible to explicitly apply the Require MFA for admins rule.Reference:https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/untrusted-networkshttps://docs.microsoft.com/en-us/azure/active-directory/conditional-access/concept-baseline-protection

You can verify the deployment by exploring the resource group from the Azure portal Reference:https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/deployment-manager-tutorialhttps://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/template-tutorial-create-first-template?tabs=azure-powershell

We require a virtual network gateway for VNet-to-VNet connectivity. Incorrect Answers:A: There is no need to modify the address space. If you update the address space for one VNet, the other VNet automatically knows to route to the updated address space.Reference:https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-vnet-vnet-cli

Through a create process, Azure creates an identity in the Azure AD tenant that's trusted by the subscription in use. After the identity is created, the identity can be assigned to one or more Azure service instances. Reference:https://docs.microsoft.com/en-us/azure/app-service/overview-managed-identityhttps://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview

The UPN is used by Azure AD to allow users to sign-in. The UPN that a user can use, depends on whether or not the domain has been verified. If the domain has been verified, then a user with that suffix will be allowed to sign-in to Azure AD. To do so, you need to add and verify a custom domain in Azure AD before you can start syncing the users. Reference:https://docs.microsoft.com/en-us/azure/active-directory/hybrid/plan-connect-design-concepts#azure-ad-sign-inhttps://docs.microsoft.com/en-us/azure/active-directory/hybrid/tshoot-connect-objectsync#detect-upn-mismatch-if-object-is-synced-to-azure-active-directory

In staging mode, the server is active for import and synchronization, but it does not run any exports. A server in staging mode is not running password sync or password writeback, even if you selected these features during installation. When you disable staging mode, the server starts exporting, enables password sync, and enables password writeback. Reference:https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-staging-serverhttps://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-operations

You can find unused disks in the Azure Storage Explorer console. Once you drill down to the Blob containers under a storage account, you can see the lease state of the residing VHD (the lease state determines if the VHD is being used by any resource) and the VM to which it is leased out. If you find that the lease state and the VM fields are blank, it means that the VHD in question is unused. Note: The ManagedBy property stores the Id of the VM to which Managed Disk is attached to. If the ManagedBy property is $null then it means that the Managed Disk is not attached to a VMReference:https://cloud.netapp.com/blog/reduce-azure-storage-costs

References:https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/tutorial-install-apps-template

Advisor helps you optimize and reduce your overall Azure spend by identifying idle and underutilized resources. You can get cost recommendations from the Cost tab on the Advisor dashboard. Reference:https://docs.microsoft.com/en-us/azure/advisor/advisor-cost-recommendations