AZ-303 Exam Question 81

You create the Azure resources shown in the following table.

You attempt to add a role assignment to a resource group as shown in the following exhibit.


What should you do to ensure that you can assign VM2 the Reader role for the resource group?
  • AZ-303 Exam Question 82

    Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
    After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
    You manage an Active Directory domain named contoso.local.
    You install Azure AD Connect and connect to an Azure Active Directory (Azure AD) tenant named contoso.com without syncing any accounts.
    You need to ensure that only users who have a UPN suffix of contoso.com in the contoso.local domain sync to Azure AD.
    Solution: You use the Synchronization Service Manager to modify the Active Directory Domain Services (AD DS) Connector.
    Does this meet the goal?
  • AZ-303 Exam Question 83

    You are designing a solution to secure a company's Azure resources. The environment hosts 10 teams. Each team manages a project and has a project manager, a virtual machine (VM) operator, developers, and contractors.
    Project managers must be able to manage everything except access and authentication for users. VM operators must be able to manage VMs, but not the virtual network or storage account to which they are connected. Developers and contractors must be able to manage storage accounts.
    You need to recommend roles for each member.
    What should you recommend? To answer, drag the appropriate roles to the correct employee types. Each role may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
    NOTE: Each correct selection is worth one point.

    AZ-303 Exam Question 84

    You need to move the blueprint files to Azure.
    What should you do?
  • AZ-303 Exam Question 85

    You network contains an Active Directory domain named adatum.com and an Azure Active Directory (Azure AD) tenant named adatum.onmicrosoft.com.
    Adatum.com contains the user accounts in the following table.

    Adatum.onmicrosoft.com contains the user accounts in the following table.

    You need to implement Azure AD Connect. The solution must follow the principle of least privilege.
    Which user accounts should you use? To answer, select the appropriate options in the answer area.
    NOTE: Each correct selection is worth one point.