1. Requires your users to __________ for password reset. Administrators can require users to re-__________ after a specific period of time. They can set the number of days before users are asked to reconfirm their authentication information option to 0 to 730 days. After you enable this option, when users sign in they observe a message that says their administrator has required them to verify their authentication information.

2. Can User Accounts be added using PowerShell?

3. Can be used to limit network traffic to resources in a virtual network. Contains a list of security rules that allow or deny inbound or outbound network traffic. Can be associated to a subnet or a network interface.

4. Has three high-level capabilities: Monitor and visualize metrics; Query and analyze logs; Set up alerts and actions.

5. A collection of __________ endpoints with the same pricing tier and provider (origin). You may create multiple __________s to organize endpoints. For example, you could have __________s with endpoints to different internet domains, web applications, or storage accounts. You can create up to 8 ____________________ per subscription.

6. An advance purchase of a virtual machine for one or three years in a specified region. The commitment is made up front, and in return, you get up to 72% price savings compared to pay-as-you-go pricing.

7. A URI that grants restricted access rights to Azure Storage resources (a specific blob in this case). You can provide a __________ __________ __________ to clients who should not be trusted with your storage account key but whom you wish to delegate access to certain storage account resources. By distributing the associated URI to these clients, you grant them access to a resource for a specified period of time. Is a secure way to share your storage resources without compromising your account keys.

8. Azure __________ and External __________.

9. Command-line tool that does the following: Prepares your disk drives that are shipped for import; Facilitates copying your data to the drive; Encrypts the data on the drive with AES 128-bit BitLocker—you can use an external key protector to protect your BitLocker key; Generates the drive journal files used during import creation; Helps identify numbers of drives needed for export jobs.

10. Should you use an HTTP connection to create or distribute a Stored Access Signature?

11. A distributed network of servers that can efficiently deliver content to users. Stores cached content on edge servers that are close to end-users. Typically used to deliver static content such as images, style sheets, documents, client-side scripts, and HTML pages.

12. When are security questions used to authenticate a user?

13. The __________-based service you can use to __________ (or protect) and restore your data in the Microsoft cloud. Replaces your existing on-premises or off-site __________ solution with a cloud-based solution that is reliable, secure, and cost-competitive. Offers multiple components that you download and deploy on the appropriate computer, server, or in the cloud. The component, or agent, that you deploy depends on what you want to protect. All ____________________ components (no matter whether you're protecting data on-premises or in the cloud) can be used to __________ data to a Recovery Services vault in __________.

14. Provide robust monitoring of Azure AD Connect and provides a central location in the Azure portal to view this activity.

15. A subscription __________ that provides insight into subscription-level events that have occurred in Azure. This includes a range of data, from Azure Resource Manager operational data to updates on Service Health events. With the ____________________, you can determine the 'what, who, and when' for any write operations (PUT, POST, DELETE) taken on the resources in your subscription. You can also understand the status of the operation and other relevant properties.

16. A standalone app from Microsoft that allows you to easily work with Azure Storage data. Lets you access multiple accounts and subscriptions. Lets you create, delete, view, and edit Blob, Queue, Table, File, Cosmos DB, and Data Lake storage. Available for Windows, Mac, and Linux.

17. Supports application-consistent backups for both Windows and Linux VMs

18. One-time migration; Incremental transfer; Periodic uploads.

19. A __________ that contains only __________ VMs. Contains the IP addresses that are used by the virtual network __________. Must be named ____________________. Do not associate a Network Security Group with a ____________________.

20. How can you configure a custom domain to use with an Azure Storage Account?

21. Designed to improve the responsiveness by routing traffic to the location that is closest to the user. The closest endpoint is not necessarily measured by geographic distance. Instead Traffic Manager determines closeness by measuring network latency. Traffic Manager maintains an Internet Latency Table to track the round-trip time between IP address ranges and each Azure datacenter.

22. Integrates your on-premises directories with Azure Active Directory. This allows you to provide a common identity for your users for Office 365, Azure, and SaaS applications integrated with Azure AD.

23. Connections between an Azure VNet and an on-premises VNet.

24. App-aware backups, file/folder/volume backups, and machine state backups (bare-metal, system state). Each machine runs the DPM/MABS protection agent. App aware snapshots; full flex for when to backups; recovery granularity; linux support on Hyper-V and VMware VMs; backup and restore VMware VMs, doesn't require a System Center license. Cannot backup Oracle workloads; always requires live Azure subscription; no support for tape backup. Stores backups in recovery services vault or locally attached disk.

25. Use __________ in the IP forwarding or __________ table to direct packets into their corresponding tunnel interfaces. The tunnel interfaces then encrypt or decrypt the packets in and out of the tunnels. The policy (or traffic selector) for ____________________s are configured as any-to-any (or wild cards).