Q16. You want to configure the AKS instance running the Kinetico Inventory App to use Azure Active Directory (AD) for user authentication. To integrate with AKS with Azure AD which steps should you perform first?

• Create a service principal in Azure then assign the service principal AKS.
• Add users an Azure AD security group. Then assign the group permissions to AKS.
• Create a service principal in Azure AD. Then add user to the AKS security group. <<<<----Correct
• Create an App ID in Azure AD. Then create a service principal for the server app.

Q17. Which access protocol does Azure Files not support?

• Network File System (NFS)
• HTTP <<<<----Correct
• REST API
• Server Message Block(SMB)

Q18. You are writing an app for a sales team. You need to implement security in SQL Server to ensure that sales representatives see customer financial information only for customers whom they manage. Your app must make this transparent to the user. Which SQL data security option should you choose?

• Dynamic Data Masking <<<<----Correct
• Transparent Data Encryption
• Row-Level Security
• Always Encrypted

Q19. You configure access to secrets in Azure Key Vault with _____.

• service principals
• certificates
• access policies
• RBAC roles <<<<----Correct

Q20. Your Kineteco Web App experiences occasional spikes in usage that cause resource shortages that generate an alert. When this occurs, you want to configure scale out of the App Service plan resources. The solution should minimize cost and administrative effort. What should you do?

• Create a Logic App. Then configure an action group with the Logic App action type.
• Create an Azure Automation Runbook. Then configure an action group with the Automation Runbook action type.
• Configure an rule based on a metric. <<<<----Correct
• Create an Azure function. Then configure an action group with the Secure Webhook action type.

Q21. You have CI/CD pipeline for a modern web application in Azure DevOps. The CI/CD process includes both a build and a release pipeline. You need to ensure that user testing (UAT) is successful before triggering the release pipeline. The process should be automated as possible. What should you add to your build pipeline?

• Query Work Items gate
• Manual Intervention task
• Approval gate <<<<----Correct
• Invoke REST API gate

Q22. The Kineteco Web App is running on AKS to meet a spike in demand, the horizontal pod autoscaler recently provisioned additional pods, which are no longer needed. What should you do to scale down unnecessary pods?

• Trigger scale down in Azure Container Instances.
• Trigger scale down in the HPA from the Azure CLI.
• Manually deprovision unneeded pods.
• Do nothing. EPA will initiate scale down automatically. <<<<----Correct

Q23. Your ARM template, created in VS Code, is failing validation in the build pipeline in Azure DevOps. You need to correct syntax issues at authoring time with a minimum of cost and effort. What should you do?

• Install Azure extension in VS Code. <<<<----Correct
• Install Visual Studio 2019 Enterprise edition.
• Install Visual Studio 2019 Community edition.
• Install Visual Studio Code Intellicode extension in VS Code.

Q24. You need to migrate the backlog of a development project for a newly acquired subsidiary. The development team currently uses a Kanban board to track stories, tasks, and bugs. Which process framework should you select in Azure Boards?

• Agile <<<<----Correct
• Waterfall
• Basic
• CMMI

Q25. You have set of SQL databases used with various PaaS applications with predictable usage patterns. You are planning to move these databases to Azure SQL and need to choose the right deployment option. Your priorities are minimizing costs, and having the ability to assign CPU and resources to individual databases. Which option should you choose?

• Azure SQL elastic pool <<<<----Correct
• SQL on Azure VMs
• Azure SQL Database
• SQL Managed Instance

Q26. Your photo app hosted in Azure records user operations in a log for historical reference. Records must not be overwritten. Which storage type should you select to host log data?

• append blob <<<<----Correct
• table storage
• page blob
• block blob

Q27. The Kineteco Retail App uses keys for signing and encryption of some data transfers. How should you write your app to invoke keys?

• Azure CLI
• Azure Portal <<<<----Correct
• Azure PowerShell
• REST API