You plan to deploy an Azure App Service web app named App1 that will service users in a single geographical region. App1 will access a highly available database named DB1 that will be hosted on two Azure virtual machines named VM1 and VM2.
You need to recommend a solution that meets the following requirements:
* Uses Azure Web Application Firewall (WAF) to minimize the risk of a web-based attack against App1
* Ensures that administrators can access VM1 and VM2 securely from the internet
* Ensures that traffic from App1 to DB1 is NOT sent via the internet
* Minimizes costs
What should you include in the recommendation for each requirement? To answer, select the appropriate options in the answer area.

Your on-premises network contains a file server named Server1 that stores 500 GB of data.
You need to use Azure Data Factory to copy the data from Server1 to Azure Storage.
You add a new data factory.
What should you do next? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Your company has multiple branch offices across North America.
You have an Azure subscription. The subscription contains three virtual networks in the US East Azure region that have a hub-and-spoke topology. The hub network contains an Azure VPN gateway that provides Site-to-Site (S2S) and Point-to-Site (P2S) VPN connectivity for the branch offices and remote users.
You need to implement ExpressRoute and migrate the hub-and-spoke topology to Azure Virtual WAN. The solution must provide fully meshed connectivity for the following network traffic:
- Traffic from a branch office via ExpressRoute to the other branch
offices and the virtual networks
- Traffic from a branch office via the S2S VPN to the other branch
offices and the virtual networks
- Traffic from the remote users via the S2S VPN to the branch offices
and the virtual networks
- Traffic from the virtual networks to the branch offices
- Traffic between the virtual networks
How many virtual network gateways are required?

You have the Azure resources shown in the following table.

You need to design a solution that provides on-premises network connectivity to SQLDB1 through PE1. How should you configure name resolution? To answer, select the appropriate options in the answer area.

You have a resource group named RG1 that contains the objects shown in the following table.

You need to configure permissions so that App1 can copy all the secrets from KV1 to KV2. App1 currently has the Get permission for the secrets in KV1.
Which additional permissions should you assign to App1? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.