You register a DNS domain with a third-party registrar.
You need to host the DNS zone on Azure.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

You have an Azure subscription. The subscription contains an Azure application gateway that has the following configurations:
• Name: AppGW1
• Tier Standard V2
• Autoscaling: Disabled
You create a user named User1.
You need to ensure that User1 can change the tier of AppGW1. The solution must use the principle of least privilege.
Which role should you assign to User1. and to which tiers can AppGW1 be changed? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

You have an Azure subscription that contains the resources shown in the following table.

You need to control access to storage1 by using NSG1 What should you configure first?
You have an Azure subscription that contains a virtual network. The virtual network contains two subnets named Subnet1 and Subnet2. You have an instance of Azure Application Gateway v2 named AppGw1 that is connected to Subnet 1.
You need to move AppGw1 to Subnet2. The solution must minimize downtime.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

You have an Azure subscription that contains a user named User1 and the resources shown in the following table.

You need to ensure that User1 can associate Policy1 to FW1 by using Azure Firewall Manager. The solution must follow the principle of least privilege.
Which role should you assign to User1 for each resource group? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Task 5
You need to archive all the metrics of VNET1 to an existing storage account.
Task 2
You need to ensure that you can deploy Azure virtual machines to the France Central Azure region. The solution must ensure that virtual machines in the France Central region are in a network segment that has an IP address range of 10.5.1.0/24.
Your company has an Azure subscription that contains a virtual network named VNet1 and an Azure VPN gateway named vGW1. The company has 50 users that have Windows 11 devices.
You need to ensure that the users can access the resources on VNet1. The solution must meet the following requirements:
• Ensure that the users can establish Point-to-Site (P2S) VPN connections to vGW1.
• Ensure that the users can authenticate by using only their Microsoft Entra credentials
Which type of tunnel should you configure, and which VPN client should you configure on the users ' devices? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Task 6
You need to ensure that all hosts deployed to subnet3-2 connect to the internet by using the same static public IP address. The solution must minimize administrative effort when adding hosts to the subnet.
You have an Azure subscription that contains the resources shown in the following table.

You create a service endpoint policy that has the following settings:
• Associated subnets: Subnet 1
• Service: Microsoft.Storage
• Scope: Single account
• Resource: storage1
Which resources can VM1 access?