Get Microsoft AZ-303 Exam Dumps

Answer : A

Assigning users and groups to individual applications in Azure AD controls the visibility of the link.

If you want only a subset of your users to see the link in the Azure AD My Apps portal, configure user assignment as follows:

In the menu on the left, select Properties.

Set User assignment required to Yes.

Click Save.

In the menu on the left, click Manage > Users and groups.

Click Add user.

Select Users.

Select the users or groups that you want to provision. If you select a group, all members of the group are provisioned.

Click Select.

Click Assign.

It might take several minutes for a link to show up in the My Apps portal.

https://cloud.google.com/architecture/identity/integrating-google-services-and-apps-with-azure-ad-portal#adding_links

Answer : C, D

C: Obtain the root CA certificate (step 4 in the picture below)

D: From KV1, create a certificate signing request (CSR) (step 2 in the picture below)

Note:

Creating a certificate with a CA not partnered with Key Vault

This method allows working with other CAs than Key Vault's partnered providers, meaning your organization can work with a CA of its choice.

The following step descriptions correspond to the green lettered steps in the preceding diagram.

In the diagram above, your application is creating a certificate, which internally begins by creating a key in your key vault.

Key Vault returns to your application a Certificate Signing Request (CSR).

Your application passes the CSR to your chosen CA.

Your chosen CA responds with an X509 Certificate.

Your application completes the new certificate creation with a merger of the X509 Certificate from your CA.

https://docs.microsoft.com/en-us/azure/key-vault/certificates/certificate-scenarios

Answer : C

Configure IP ACLing for your backends to accept traffic from Azure Front Door's backend IP address space and Azure's infrastructure services only. Refer the IP details below for ACLing your backend:

Refer AzureFrontDoor.Backend section in Azure IP Ranges and Service Tags for Front Door's IPv4 backend IP address range or you can also use the service tag AzureFrontDoor.Backend in your network security groups.

https://docs.microsoft.com/en-us/azure/frontdoor/front-door-faq

Answer : C

You grant data plane access by setting Key Vault access policies for a key vault.

Note 1: Grant our VM's system-assigned managed identity access to the Key Vault.

Select Access policies and click Add new.

In Configure from template, select Secret Management.

Choose Select Principal, and in the search field enter the name of the VM you created earlier. Select the VM in the result list and click Select.

Click OK to finishing adding the new access policy, and OK to finish access policy selection.

Note 2: Access to a key vault is controlled through two interfaces: the management plane and the data plane. The management plane is where you manage Key Vault itself. Operations in this plane include creating and deleting key vaults, retrieving Key Vault properties, and updating access policies. The data plane is where you work with the data stored in a key vault. You can add, delete, and modify keys, secrets, and certificates.

https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/tutorial-windows-vm-access-nonaad

https://docs.microsoft.com/en-us/azure/key-vault/general/secure-your-key-vault2

Answer : B

Enterprise State Roaming is available to any organization with an Azure AD Premium or Enterprise Mobility + Security (EMS) license.

https://docs.microsoft.com/bs-latn-ba/azure/active-directory/devices/enterprise-state-roaming-enable