Microsoft AZ-103 Microsoft Azure Administrator Online Training

Exam4Training is providing actual Microsoft AZ-103 Microsoft Azure Administrator Online Training for the Microsoft AZ-103 exam and has made things very easier for candidates to get themselves prepare for the AZ-103 exam. You can easily prepare the AZ-103 exam through its Microsoft AZ-103 Microsoft Azure Administrator Online Training, which can help you to pass your AZ-103 Microsoft Azure Administrator with ease. For passing the Microsoft Azure certification AZ-103 exam you must have to take help from valuable AZ-103 exam dumps available at Exam4Training.

1. You plan to automate the deployment of a virtual machine scale set that uses the Windows Server 2016 Datacenter image.

You need to ensure that when the scale set virtual machines are provisioned, they have web server components installed.

Which two actions should you perform? (Each correct answer presents part of the solution. NOTE Each correct selection is worth one point.)

2. You have an Azure subscription that contains a virtual machine named VM1. VM1 hosts a line-of- business application that is available 24 hours a day.

VM1 has one network interface and one managed disk. VM1 uses the D4s_v3 size.

You plan to make the following changes to VM1:

- Change the size to D8s_v3.

- Add a 500-GB managed disk.

- Add the Puppet Agent extension.

- Attach an additional network interface.

Which change will cause downtime for VM1?

3. You are an administrator for a company.

You have an Azure subscription that contains the resources in the following table.

Subnet1 is associated to VNet1. NIC1 attaches VM1 to Subnet1.

You need to apply ASG1 to VM1.

What should you do?

4. You have two subscriptions named Subscription1 and Subscription2. Each subscription is associated to a different Azure AD tenant.

Subscription1 contains a virtual network named VNet1.VNet1 contains an Azure virtual machine named VM1 and has an IP address space of 10.0.0.0/16.

Subscription2 contains a virtual network named VNet2. VNet2 contains an Azure virtual machine named VM2 and has an IP address space of 10.10.0.0/24.

You need to connect VNet1 to VNet2.

What should you do first?

5. You have an Azure subscription named Subscription1. In Subscription1, you create an Azure file share named share1.

You create a shared access signature (SAS) named SAS1 as shown in the following exhibit.

Which statements are true? (To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.)

6. You have an on-premises file server named Server1 that runs Windows Server 2016 and you have an Azure subscription that contains an Azure file share.

You deploy an Azure File Sync Storage Sync Service, and you create a sync group.

You need to synchronize files from Server1 to Azure.

Which three actions should you perform in sequence? (To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.)

7. Note: This question is part of a series of questions that present the same scenario. Each questions in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than one correct solution, while others might not have a correct solution. Determine whether the solution meets the stated goals.

You have an Azure subscription named Subscription1. Subscription1 contains a resource group named RG1. RG1 contains resources that were deployed by using templates.

You need to view the date and time when the resources were created in RG1.

Solution: From the Subscriptions blade, you select the subscription, and then click Programmatic deployment.

Does this meet the goal?

8. Note: This question is part of a series of questions that present the same scenario. Each questions in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than one correct solution, while others might not have a correct solution. Determine whether the solution meets the stated goals.

You have an Azure subscription named Subscription1. Subscription1 contains a resource group named RG1. RG1 contains resources that were deployed by using templates.

You need to view the date and time when the resources were created in RG1.

Solution: From the RG1 blade, you click Deployments.

Does this meet the goal?

9. Note: This question is part of a series of questions that present the same scenario. Each questions in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than one correct solution, while others might not have a correct solution. Determine whether the solution meets the stated goals.

You have an Azure subscription named Subscription1. Subscription1 contains a resource group named RG1. RG1 contains resources that were deployed by using templates.

You need to view the date and time when the resources were created in RG1.

Solution: From the Subscriptions blade, you select the subscription, and then click "Resource providers".

Does this meet the goal?

10. Note: This question is part of a series of questions that present the same scenario. Each questions in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than one correct solution, while others might not have a correct solution. Determine whether the solution meets the stated goals.

You have an Azure subscription named Subscription1. Subscription1 contains a resource group named RG1. RG1 contains resources that were deployed by using templates.

You need to view the date and time when the resources were created in RG1.

Solution: From the RG1 blade, you click Automation script.

Does this meet the goal?

11. Note: This question is part of a series of questions that present the same scenario. Each questions in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than one correct solution, while others might not have a correct solution. Determine whether the solution meets the stated goals.

You have an Azure subscription named Subscription1. Subscription1 contains a resource group named RG1. RG1 contains resources that were deployed by using templates.

You need to view the date and time when the resources were created in RG1.

Solution: You use the activity log and filter the events for the resource group RG1.

Does this meet the goal?

12. You are an administrator for a company. You have an Azure subscription that contains 10 virtual machines.

You need to ensure that you receive an email message when any virtual machines are powered off, restarted, or deallocated.

What is the minimum number of rules and action groups that you require?

13. You have an Azure subscription that contains two resource groups named RG1 and RG2.

RG2 does not contain any resources.

RG1 contains the resources in the following table.

Which resource can you move to RG2?

14. You have 100 Azure subscriptions. All the subscriptions are associated to the same Azure Active Directory (Azure AD) tenant named contoso.com.

You are a global administrator.

You plan to create a report that lists all the resources across all the subscriptions. You need to ensure that you can view all the resources in all the subscriptions.

What should you do?

15. You are an administrator for a company.

You have the Azure virtual machines shown in the following table.

You have a Recovery Services vault that protects VM1 and VM2.

You need to protect VM3 and VM4 by using Recovery Services.

What should you do first?

16. You are an administrator for your company.

You have an Azure subscription that contains the resources in the following table.

Store1 contains a file share named Data. Data contains 5,000 files.

You need to synchronize the files in Data to an on-premises server named Server1.

Which three actions should you perform? (Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.)

17. You plan to use the Azure Import/Export service to copy files to a storage account.

Which two files should you create before you create the import job? (Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.)

18. Note: This question is part of a series of questions that present the same scenario. Each questions in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than one correct solution, while others might not have a correct solution. Determine whether the solution meets the stated goals.

You have an Azure virtual machine named VM1. VM1 was deployed by using a custom Azure Resource Manager template named ARM1.json.

You receive a notification that VM1 will be affected by maintenance.

You need to move VM1 to a different host immediately.

Solution: From the Redeploy blade, you click Redeploy.

Does this meet the goal?

19. Note: This question is part of a series of questions that present the same scenario. Each questions in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than one correct solution, while others might not have a correct solution. Determine whether the solution meets the stated goals.

You have an Azure virtual machine named VM1. VM1 was deployed by using a custom Azure Resource Manager template named ARM1.json.

You receive a notification that VM1 will be affected by maintenance.

You need to move VM1 to a different host immediately.

Solution: From the Overview blade, you move the virtual machine to a different resource group.

Does this meet the goal?

20. Note: This question is part of a series of questions that present the same scenario. Each questions in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than one correct solution, while others might not have a correct solution. Determine whether the solution meets the stated goals.

You have an Azure virtual machine named VM1. VM1 was deployed by using a custom Azure Resource Manager template named ARM1.json.

You receive a notification that VM1 will be affected by maintenance.

You need to move VM1 to a different host immediately.

Solution: You configure disaster recovery for VM1.

Does this meet the goal?

21. Note: This question is part of a series of questions that present the same scenario. Each questions in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than one correct solution, while others might not have a correct solution. Determine whether the solution meets the stated goals.

You have an Azure virtual machine named VM1. VM1 was deployed by using a custom Azure Resource Manager template named ARM1.json.

You receive a notification that VM1 will be affected by maintenance.

You need to move VM1 to a different host immediately.

Solution: From the Update management blade, you click enable.

Does this meet the goal?

22. You have an Azure Active Directory (Azure AD) tenant named contosocloud.onmicrosoft.com. Your company has a public DNS zone for contoso.com.

You add contoso.com as a custom domain name to Azure AD. You need to ensure that Azure can verify the domain name.

Which type of DNS record should you create?

23. You have an Azure subscription named Subscription1. Subscription1 contains two Azure virtual machines named VM1 and VM2.

VM1 and VM2 run Windows Server 2016. VM1 is backed up daily by Azure Backup without using the Azure Backup agent.

VM1 is affected by ransomware that encrypts data.

You need to restore the latest backup of VM1.

To which location can you restore the backup? (To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.)

24. You are an administrator for a company. You purchase a new Azure subscription named Subscription1.

You create a virtual machine named VM1 in Subscription1. VM1 is not protected by Azure Backup.

You need to protect VM1 by using Azure Backup. Backups must be created at 01:00 and stored for 30 days.

What should you do? (To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.)

25. You have an availability set named AS1 that contains three virtual machines named VM1, VM2, and VM3.

You attempt to reconfigure VM1 to use a larger size. The operation fails and you receive an allocation failure message.

You need to ensure that the resize operation succeeds.

Which three actions should you perform in sequence? (To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.)

26. You have several Windows Server and Ubuntu Linux virtual machines (VMs) distributed across the two following virtual networks (VNets):

- prod-vnet-west (West US region)

- prod-vnet-east (East US region)

You need to allow VMs in either VNet to connect and to share resources by using only the Azure backbone network.

Your solution must minimize cost, complexity, and deployment time.

What should you do?

27. Your company's local environment consists of a single Active Directory Domain Services (AD DS) domain.

You plan to offer your users single sign-on (SSO) access to Azure-hosted software-as-a-service (SaaS) applications that use Azure Active Directory (Azure AD) authentication.

The tenant's current domain name is companycom.onmicrosoft.com.

You need to configure Azure AD to use company.com as the organization's owned public domain name.

What should you do?

28. Note: This question is part of a series of questions that present the same scenario. Each questions in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than one correct solution, while others might not have a correct solution. Determine whether the solution meets the stated goals.

Your company registers a domain name of contoso.com.

You create an Azure DNS Zone named contoso.com and then you add an A record to the zone for a host named www that has an IP address of 131.107.1.10.

You discover that Internet hosts are unable to resolve www.contoso.com to the 131.107.1.10 IP address.

You need to resolve the name resolution issue.

Solution: You modify the name server at the domain registrar.

Does this meet the goal?

29. Note: This question is part of a series of questions that present the same scenario. Each questions in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than one correct solution, while others might not have a correct solution. Determine whether the solution meets the stated goals.

Your company registers a domain name of contoso.com.

You create an Azure DNS Zone named contoso.com and then you add an A record to the zone for a host named www that has an IP address of 131.107.1.10.

You discover that Internet hosts are unable to resolve www.contoso.com to the 131.107.1.10 IP address.

You need to resolve the name resolution issue.

Solution: You add an NS record to the contoso.com zone.

Does this meet the goal?

30. Note: This question is part of a series of questions that present the same scenario. Each questions in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than one correct solution, while others might not have a correct solution. Determine whether the solution meets the stated goals.

Your company registers a domain name of contoso.com.

You create an Azure DNS Zone named contoso.com and then you add an A record to the zone for a host named www that has an IP address of 131.107.1.10.

You discover that Internet hosts are unable to resolve www.contoso.com to the 131.107.1.10 IP address.

You need to resolve the name resolution issue.

Solution: You modify the SOA record in the contoso.com zone.

Does this meet the goal?

31. You are an administrator for a company. You create an Azure Storage account named contosostorage.

You plan to create a file share named data.

Users need to map a drive to the data file share from home computers that run Windows 10.

Which port should be open between the home computers and the data file share?

32. You have an Azure Active Directory (Azure AD) tenant named contosocloud.onmicrosoft.com. Your company has a public DNS zone for contoso.com.

You add contoso.com as a custom domain name to Azure AD. You need to ensure that Azure can verify the domain name.

Which type of DNS record should you create?

33. Note: This question is part of a series of questions that present the same scenario. Each questions in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than one correct solution, while others might not have a correct solution. Determine whether the solution meets the stated goals.

You have an Azure subscription that contains 10 virtual networks. The virtual networks are hosted in separate resource groups.

Another administrator plans to create several network security groups (NSGs) in the subscription.

You need to ensure that when an NSG is created, it automatically blocks TCP port 8080 between the virtual networks.

Solution: From the Resource providers blade, you unregister the Microsoft.ClassicNetwork provider.

Does this meet the goal?

34. Note: This question is part of a series of questions that present the same scenario. Each questions in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than one correct solution, while others might not have a correct solution. Determine whether the solution meets the stated goals.

You have an Azure subscription that contains 10 virtual networks. The virtual networks are hosted in separate resource groups.

Another administrator plans to create several network security groups (NSGs) in the subscription.

You need to ensure that when an NSG is created, it automatically blocks TCP port 8080 between the virtual networks.

Solution: You configure a custom policy definition, and then you assign the policy to the subscription.

Does this meet the goal?

35. Note: This question is part of a series of questions that present the same scenario. Each questions in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than one correct solution, while others might not have a correct solution. Determine whether the solution meets the stated goals.

You have an Azure subscription that contains 10 virtual networks. The virtual networks are hosted in separate resource groups.

Another administrator plans to create several network security groups (NSGs) in the subscription.

You need to ensure that when an NSG is created, it automatically blocks TCP port 8080 between the virtual networks.

Solution: You create a resource lock, and then you assign the lock to the subscription.

Does this meet the goal?

36. You have an Azure Active Directory (Azure AD) domain that contains 5,000 user accounts.

You create a new user account named AdminUser1.

You need to assign the User administrator administrative role to AdminUser1.

What should you do from the user account properties?

37. Your network contains an Active Directory domain named adatum.com and an Azure Active Directory (Azure AD) tenant named adatum.onmicrosoft.com.

Adatum.com contains the user accounts in the following table.

Adatum.onmicrosoft.com contains the user accounts in the following table.

You need to implement Azure AD Connect. The solution must follow the principle of least privilege.

Which user accounts should you use? (To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.)

38. You have an Azure subscription named Subscription1. Subscription1 contains a virtual machine named VM1.

You install and configure a web server and a DNS server on VM1.

VM1 has the effective network security rules shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. (NOTE: Each correct selection is worth one point.)

39. You are an administrator for your company.

You have peering configured as shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. (NOTE: Each correct selection is worth one point.)

40. You are an administrator for a company. You have an Azure subscription named Subscription1.

Subscription1 contains the virtual networks in the following table.

Subscription1 contains the virtual machines in the following table:

The firewalls on all the virtual machines are configured to allow all ICMP traffic.

You add the peerings in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. (NOTE: Each correct selection is worth one point.)

41. You have an Azure subscription that contains an Azure virtual machine named VM1. VM1 runs Windows Server 2016 and is part of an availability set.

VM1 has virtual machine-level backup enabled.

VM1 is deleted.

You need to restore VM1 from the backup. VM1 must be part of the availability set.

Which three actions should you perform in sequence? (To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.)

42. You are an administrator for your company. You have an Azure subscription named Subscription1.

You plan to deploy an Ubuntu Server virtual machine named VM1 to Subscription1.

You need to perform a custom deployment of the virtual machine. A specific trusted root certification authority (CA) must be added during the deployment.

What should you do? (To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.)

43. You have an Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com that contains 100 user accounts.

You purchase 10 Azure AD Premium P2 licenses for the tenant.

You need to ensure that 10 users can use all the Azure AD Premium features.

What should you do?

44. You have an Azure Active Directory (Azure AD) tenant that has the initial domain name. You have a domain name of contoso.com registered at a third-party registrar.

You need to ensure that you can create Azure AD users that have names containing a suffix of @contoso.com.

Which three actions should you perform in sequence? (To answer, move the appropriate cmdlets from the list of cmdlets to the answer area and arrange them in the correct order.)

45. You have an Azure subscription named Subscription1.

Subscription1 contains the resources in the following table.

VNet1 is in RG1. VNet2 is in RG2. There is no connectivity between VNet1 and Vnet2.

An administrator named Admin1 creates an Azure virtual machine named VM1 in RG1. VM1 uses a disk named Disk1 and connects to VNet1. Admin1 then installs a custom application in VM1.

You need to move the custom application to Vnet2. The solution must minimize administrative effort.

Which two actions should you perform? (To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.)

46. You have an Azure Active Directory (Azure AD) tenant named adatum.com.

Adatum.com contains the groups in the following table.

You create two user accounts that are configured as shown in the following table.

To which groups do User1 and User2 belong? (To answer. select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.)

47. You have an Azure subscription.

You need to implement a custom policy that meet the following requirements:

- Ensures that each new resource group in the subscription has a tag named organization set to a value of Contoso.

- Ensures that resource group can be created from the Azure portal.

- Ensures that compliance reports in the Azure portal are accurate.

How should you complete the policy?

(To answer, select the appropriate options in the answers area.)

48. You have a Recovery Service vault that you use to test backups. The test backups contain two protected virtual machines.

You need to delete the Recovery Services vault.

What should you do first?

49. You have an Azure subscription that contains 100 virtual machines. You regularly create and delete virtual machines.

You need to identify unused disks that can be deleted.

What should you do?

50. You have an Azure subscription named Subscription1. You deploy a Linux virtual machine named VM1 to Subscription1.

You need to monitor the metrics and the logs of VM1.

What should you use?

51. You have an Azure subscription named Subscription1. Subscription1 contains a virtual machine named VM1.

You have a computer named Computer1 that runs Windows 10. Computer1 is connected to the Internet.

You add a network interface named Interface1 to VM1 as shown in the following exhibit.

From Computer1, you attempt to connect to VM1 by using Remote Desktop, but the connection fails.

You need to establish a Remote Desktop connection to VM1.

What should you do first?

52. Your company has an Azure subscription named Subscription1. The company also has two on- premises servers named Server1 and Server2 that run Windows Server 2016.

Server1 is configured as a DNS server that has a primary DNS zone named adatum.com. Adatum.com contains 1,000 DNS records.

You manage Server1 and Subscription1 from Server2. Server2 has the following tools installed:

- The DNS Manager console

- Azure PowerShell

- Azure CLI 2.0

You need to move the adatum.com zone to Subscription1. The solution must minimize administrative effort.

What should you use?

53. You are an administrator for your company.

You have an Azure subscription that contains the resources in the following table.

To which subnets can you apply NSG1?

54. You have an Active Directory forest named contoso.com. You install and configure Azure AD Connect to use password hash synchronization as the single sign-on (SSO) method. Staging mode is enabled.

You review the synchronization results and discover that the Synchronization Service Manager does not display any sync jobs.

You need to ensure that the synchronization completes successfully.

What should you do?

55. You download an Azure Resource Manager template based on an existing virtual machine. The template will be used to deploy 100 virtual machines.

You need to modify the template to reference an administrative password. You must prevent the password from being stored in plain text.

What should you create to store the password?

56. You manage an Azure Windows Server virtual machine (VM) that hosts several SQL Server databases.

You need to configure backup and retention policies for the VM. The backup policy must include transaction log backups.

What should you do?

57. You are a cloud administrator for a company. The development team asks you to provision an Azure storage account for their use.

To remain in compliance with IT security policy, you need to ensure that the new Azure storage account meets the following requirements:

- Data must be encrypted at rest.

- Access keys must facilitate automatic rotation.

- The company must manage the access keys.

What should you do?

58. You have an Azure subscription that contains a storage account and you have an on-premises server named Server1 that runs Window Server 2016. Server1 has 2 TB of data.

You need to transfer the data to the storage account by using the Azure Import/Export service.

In which order should you perform the actions? (To answer, move all actions from the list of actions to the answer area and arrange them in the correct order. NOTE: More than one order of answer choices is correct. You will receive credit for any of the correct orders you select.)

59. You are an administrator for a company. You plan to create an Azure Storage account in the Azure region of East US 2.

You need to create a storage account that meets the following requirements:

- Replicates synchronously

- Remains available if a single data center in the region fails.

How should you configure the storage account? (To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.)

60. You have an Azure subscription named Subscription1. You create an Azure Storage account named contosostorage, and then you create a file share named data.

Which UNC path should you include in a script that references files from the data file share? (To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or not at all. NOTE: Each correct selection is worth one point.)

61. You are an administrator for a company.

You have the Azure Storage accounts as shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. (NOTE: Each correct selection is worth one point.)

62. You have an Azure subscription. The subscription includes a virtual network named VNet1. Currently, VNet1 does not contain any subnets.

You plan to create subnets on VNet1 and to use application security groups to restrict the traffic between the subnets.

You need to create the application security groups and to assign them to the subnets.

Which four cmdlets should you run in sequence? (To answer, move the appropriate cmdlets from the list of cmdlets to the answer area and arrange them in the correct order.)

63. You have an Azure subscription named Subscription1.

Subscription1 contains the virtual machines in the following table.

Subscription1 contains a virtual network named VNet1 that has the subnets shown in the following table.

VM3 has a network adapter named NIC3. IP forwarding is enabled on NIC3. Routing is enabled on VM3.

You create a route table named RT1.

RT1 is associated to Subnet1 and Subnet2 and contains the routes in the following table.

You apply RT1 to Subnet3.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. (NOTE: Each correct selection is worth one point.)

64. You plan to deploy five virtual machines to a virtual network subnet. Each virtual machine will have a public IP address and a private IP address.

Each virtual machine requires the same inbound and outbound security rules.

What is the minimum number of network interfaces and network security groups that you require? (To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.)

65. You have an Azure subscription named Subscription1.

Subscription1 contains the resources in the following table.

In Azure, you create a private DNS zone named adatum.com.

You set the registration virtual network to VNet2.

The adatum.com zone is configured as shown in the following exhibit.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. (NOTE: Each correct selection is worth one point.)

66. You have an Azure subscription that contains the resources shown in the following table.

VM1 and VM2 are deployed from the same template and host line-of-business applications accessed by using Remote Desktop.

You configure the network security group (NSG) shown in the following exhibit.

You need to prevent users of VM1 and VM2 from accessing websites on the Internet.

What should you do?

67. You have an Azure web app named WebApp1 that runs in an Azure App Service plan named ASP1. ASP1 is based on the D1 pricing tier.

You need to ensure that WebApp1 can be accessed only from computers on your on-premises network. The solution must minimize costs.

What should you configure? (To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.)

68. You are a cloud administrator for a company. You have an Azure web app named WebApp1.

You need to provide developers with a copy of WebApp1 that they can modify without affecting the production WebApp1. When the developers finish testing their changes, you must be able to switch the current online version of WebApp1 to the new version.

Which command should you run prepare the environment? (To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.)

69. You have an Azure App Service plan that hosts an Azure App Service named App1. You configure one production slot and four staging slots for App1.

You need to allocate 10 percent of the traffic to each staging slot and 60 percent of the traffic to the production slot.

What should you add to Appl1?

70. You are an administrator for a company. You have an Azure Service Bus.

You need to implement a Service Bus queue that guarantees first in first-out (FIFO) delivery of messages.

What should you do?

71. You have a Microsoft SQL Server Always On availability group on Azure virtual machines.

You need to configure an Azure internal load balancer as a listener for the availability group.

What should you do?

72. You have an Azure subscription that contains a virtual network named VNet1. VNet 1 has two subnets named Subnet1 and Subnet2.

VNet1 is in the West Europe Azure region.

The subscription contains the virtual machines in the following table.

You need to deploy an application gateway named AppGW1 to VNet1.

What should you do first?

73. You have an Azure virtual network named VNet1 that connects to your on-premises network by using a site-to-site VPN. VMet1 contains one subnet named Subnet1.

Subnet1 is associated to a network security group (NSG) named NSG1.

Subnet1 contains a basic internal load balancer named ILB1. ILB1 has three Azure virtual machines in the backend pool.

You need to collect data about the IP addresses that connects to ILB1. You must be able to run interactive queries from the Azure portal against the collected data.

What should you do? (To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.)

74. Note: This is a lab or performance-based testing (PBT) question. To answer, you will perform a set of tasks in a live environment. Some functionality (e.g. copy and paste) will not be possible by design. Scoring is based on the outcome of performing the tasks stated in the lab. It doesn't matter how you accomplish the goal.

You need to create a function app named corp7509086nl that supports sticky sessions. The solution must minimize the Azure-related costs of the App Service plan.

What should you do from the Azure portal? (This question has to be solved in a lab environment. Click on Solution to see a valid example solution. Answer "True" if you can solve the problem, otherwise select "Wrong".)

75. Note: This is a lab or performance-based testing (PBT) question. To answer, you will perform a set of tasks in a live environment. Some functionality (e.g. copy and paste) will not be possible by design. Scoring is based on the outcome of performing the tasks stated in the lab. It doesn't matter how you accomplish the goal.

You need to create a web app named corp7509086n23 that can be scaled horizontally. The solution must use the lowest possible pricing tier for the App Service plan.

What should you do from the Azure portal? (This question has to be solved in a lab environment. Click on Solution to see a valid example solution. Answer "True" if you can solve the problem, otherwise select "Wrong".)

76. Note: This is a lab or performance-based testing (PBT) question. To answer, you will perform a set of tasks in a live environment. Some functionality (e.g. copy and paste) will not be possible by design. Scoring is based on the outcome of performing the tasks stated in the lab. It doesn't matter how you accomplish the goal.

Another administrator reports that she is unable to configure a web app named corp7509086n32 to prevent all connections from an IP address of 11.0.0.11.

You need to modify corp7509086n32 to successfully prevent the connections from the IP address. The solution must minimize Azure-related costs.

What should you do from the Azure portal? (This question has to be solved in a lab environment. Click on Solution to see a valid example solution. Answer "True" if you can solve the problem, otherwise select "Wrong".)

77. Note: This is a lab or performance-based testing (PBT) question. To answer, you will perform a set of tasks in a live environment. Some functionality (e.g. copy and paste) will not be possible by design. Scoring is based on the outcome of performing the tasks stated in the lab. It doesn't matter how you accomplish the goal.

You need to add a deployment slot named staging to an Azure web app named corp7509086n32.

The solution must meet the following requirements:

- When new code is deployed to staging, the code must be swapped automatically to the production slot.

- Azure-related costs must be minimized.

What should you do from the Azure portal? (This question has to be solved in a lab environment. Click on Solution to see a valid example solution. Answer "True" if you can solve the problem, otherwise select "Wrong".)

78. Note: This is a lab or performance-based testing (PBT) question. To answer, you will perform a set of tasks in a live environment. Some functionality (e.g. copy and paste) will not be possible by design. Scoring is based on the outcome of performing the tasks stated in the lab. It doesn't matter how you accomplish the goal.

You plan to deploy an application getaway named appgw1015 to load balance IP traffic to the Azure virtual machines connected to subnet0.

You need to configure a virtual network named VNET1015 to support the planned application gateway.

What should you do from the Azure portal? (This question has to be solved in a lab environment. Click on Solution to see a valid example solution. Answer "True" if you can solve the problem, otherwise select "Wrong".)

79. Note: This is a lab or performance-based testing (PBT) question. To answer, you will perform a set of tasks in a live environment. Some functionality (e.g. copy and paste) will not be possible by design. Scoring is based on the outcome of performing the tasks stated in the lab. It doesn't matter how you accomplish the goal.

You need to deploy an application gateway named appgwl015 to meet the following requirements:

- Load balance internal IP traffic to the Azure virtual machines connected to subnet0.

- Provide a Service Level Agreement (SLA) of 99.99 percent availability for the Azure virtual machines.

What should you do from the Azure portal? (This question has to be solved in a lab environment. Click on Solution to see a valid example solution. Answer "True" if you can solve the problem, otherwise select "Wrong".)

80. Note: This is a lab or performance-based testing (PBT) question. To answer, you will perform a set of tasks in a live environment. Some functionality (e.g. copy and paste) will not be possible by design. Scoring is based on the outcome of performing the tasks stated in the lab. It doesn't matter how you accomplish the goal.

You need to deploy an Azure load balancer named lb1016 to your Azure subscription.

The solution must meet the following requirements:

- Support the load balancing of IP traffic from the Internet to Azure virtual machines connected to VNET1016subnet0.

- Provide a Service level Agreement (SLA) of 99.99 percent availability for the Azure virtual machines.

- Minimize Azure-related costs.

What should you do from the Azure portal? (This question has to be solved in a lab environment. Click on Solution to see a valid example solution. Answer "True" if you can solve the problem, otherwise select "Wrong".

To complete this task, you do NOT need to wait for the deployment to complete. Once the deployment starts in Azure, you can move to the next task.)

81. Note: This is a lab or performance-based testing (PBT) question. To answer, you will perform a set of tasks in a live environment. Some functionality (e.g. copy and paste) will not be possible by design. Scoring is based on the outcome of performing the tasks stated in the lab. It doesn't matter how you accomplish the goal.

You plan to connect a virtual network named VNET1017 to your on-premises network by using both an Azure ExpressRoute and a site-to-site VPN connection.

You need to prepare the Azure environment for the planned deployment. The solution must maximize the IP address space available to Azure virtual machines.

What should you do from the Azure portal before you create the ExpressRoute are the VPN gateway? (This question has to be solved in a lab environment. Click on Solution to see a valid example solution. Answer "True" if you can solve the problem, otherwise select "Wrong".)

82. Note: This is a lab or performance-based testing (PBT) question. To answer, you will perform a set of tasks in a live environment. Some functionality (e.g. copy and paste) will not be possible by design. Scoring is based on the outcome of performing the tasks stated in the lab. It doesn't matter how you accomplish the goal.

You plan to grant the members of a new Azure AD group named corp75099086 the right to delegate administrative access to any resource in the resource group named RG7509086.

You need to create the Azure AD group and then to assign the correct role to the group. The solution must use the principle of least privilege and minimize the number of role assignments.

What should you do from the Azure portal? (This question has to be solved in a lab environment. Click on Solution to see a valid example solution. Answer "True" if you can solve the problem, otherwise select "Wrong".)

83. Note: This question is part of a series of questions that present the same scenario. Each questions in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than one correct solution, while others might not have a correct solution. Determine whether the solution meets the stated goals.

You have an Azure web app named Appl. App1 runs in an Azure App Service plan named Plan1. Plan1 is associated to the Free pricing tier.

You discover that App1 stops each day after running continuously for 60 minutes. You need to ensure that App1 can run continuously for the entire day.

Solution: You change the pricing tier of Plan1 to Basic.

Does this meet the goal?

84. Note: This question is part of a series of questions that present the same scenario. Each questions in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than one correct solution, while others might not have a correct solution. Determine whether the solution meets the stated goals.

You have an Azure web app named Appl. App1 runs in an Azure App Service plan named Plan1. Plan1 is associated to the Free pricing tier.

You discover that App1 stops each day after running continuously for 60 minutes. You need to ensure that App1 can run continuously for the entire day.

Solution: You add a triggered WebJob to App1.

Does this meet the goal?

85. Note: This question is part of a series of questions that present the same scenario. Each questions in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than one correct solution, while others might not have a correct solution. Determine whether the solution meets the stated goals.

You have an Azure web app named Appl. App1 runs in an Azure App Service plan named Plan1. Plan1 is associated to the Free pricing tier.

You discover that App1 stops each day after running continuously for 60 minutes. You need to ensure that App1 can run continuously for the entire day.

Solution: You change the pricing tier of Plan1 to Shared.

Does this meet the goal?

86. Note: This question is part of a series of questions that present the same scenario. Each questions in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than one correct solution, while others might not have a correct solution. Determine whether the solution meets the stated goals.

You have an Azure subscription named Subscription1. The subscription contains an Azure Active Directory (Azure AD) tenant named Adatum and a resource group named Dev. Adatum contains a group named Developers.

You need to provide the Developers group with the ability to create Azure logic apps in the Dev resource group.

Solution: On Dev, you assign the Logic App Contributor role to the Developers group.

Does this meet the goal?

87. Note: This question is part of a series of questions that present the same scenario. Each questions in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than one correct solution, while others might not have a correct solution. Determine whether the solution meets the stated goals.

You have an Azure subscription named Subscription1. The subscription contains an Azure Active Directory (Azure AD) tenant named Adatum and a resource group named Dev. Adatum contains a group named Developers.

You need to provide the Developers group with the ability to create Azure logic apps in the Dev resource group.

Solution: On Subscription1, you assign the Logic App Operator role to the Developers group.

Does this meet the goal?

88. Note: This question is part of a series of questions that present the same scenario. Each questions in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than one correct solution, while others might not have a correct solution. Determine whether the solution meets the stated goals.

You have an Azure subscription named Subscription1. The subscription contains an Azure Active Directory (Azure AD) tenant named Adatum and a resource group named Dev. Adatum contains a group named Developers.

You need to provide the Developers group with the ability to create Azure logic apps in the Dev resource group.

Solution: On Subscription1, you assign the DevTest Labs User role to the Developers group.

Does this meet the goal?

89. Note: This question is part of a series of questions that present the same scenario. Each questions in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than one correct solution, while others might not have a correct solution. Determine whether the solution meets the stated goals.

You manage a virtual network named VNet1 that is hosted in the West US Azure region. VNet1 hosts two virtual machines named VM1 and VM2 that run Windows Server.

You need to inspect all the network traffic from VM1 to VM2 for a period of three hours.

Solution: From Performance Monitor, you create a Data Collector Set (DCS).

Does this meet the goal?

90. Note: This question is part of a series of questions that present the same scenario. Each questions in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than one correct solution, while others might not have a correct solution. Determine whether the solution meets the stated goals.

You manage a virtual network named VNet1 that is hosted in the West US Azure region. VNet1 hosts two virtual machines named VM1 and VM2 that run Windows Server.

You need to inspect all the network traffic from VM1 to VM2 for a period of three hours.

Solution: From Azure Network Watcher, you create a packet capture.

Does this meet the goal?

91. Note: This question is part of a series of questions that present the same scenario. Each questions in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than one correct solution, while others might not have a correct solution. Determine whether the solution meets the stated goals.

You manage a virtual network named VNet1 that is hosted in the West US Azure region. VNet1 hosts two virtual machines named VM1 and VM2 that run Windows Server.

You need to inspect all the network traffic from VM1 to VM2 for a period of three hours.

Solution: From Azure Monitor, you create a metric on Network In and Network Out.

Does this meet the goal?

92. You have an Azure subscription named Subscription1 that contains an Azure virtual machine named VM1. VM1 is in a resource group named RG1.

VM1 runs services that will be used to deploy resources to RG1.

You need to ensure that a service running on VM1 can manage the resources in RG1 by using the identity of VM1.

What should you do?

93. You are configuring Azure Active Directory (AD) Privileged Identity Management.

You need to provide a user named Admin1 with read access to a resource group named RG1 for only one month.

The user role must be assigned immediately.

What should you do?

94. You are an administrator for a company. You plan to create a new Azure Active Directory (Azure AD) role.

You need to ensure that the new role can view all the resources in the Azure subscription and issue support requests to Microsoft. The solution must use the principle of least privilege.

How should you complete the JSON definition? (To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.)

95. You have an Azure Active Directory (Azure AD) tenant named Tenant1 and an Azure subscription named Subscription1. You enable Azure AD Privileged Identity Management.

You need to secure the members of the Lab Creator role. The solution must ensure that the lab creators request access when they create labs.

What should you do first?

96. You create an Azure subscription that is associated to a basic Azure Active Directory (Azure AD) tenant. You need to receive an email notification when any user activates an administrative role.

What should you do?

97. You have an Azure Active Directory (Azure AD) tenant that contains three global administrators named Admin1, Admin2, and Admin3.

The tenant is associated to an Azure subscription.

Access control for the subscription is configured as shown in the following exhibit.

You sign in to the Azure portal as Admin1 and configure the tenant as shown in the following exhibit.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. (NOTE: Each correct selection is worth one point.)

98. You are an administrator for a company. You have an Azure Active Directory (Azure AD) tenant.

You have an existing Azure AD conditional access policy named Policy1. Policy1 enforces the use of Azure AD-joined devices when members of the Global Administrators group authenticate to Azure AD from untrusted locations.

You need to ensure that members of the Global Administrators group will also be forced to use multi- factor authentication when authenticating from untrusted locations.

What should you do?

99. You have an azure subscription that contains a virtual network named VNet1. VNet1 contains four subnets named Gateway, Perimeter, NVA, and Production.

The NVA subnet contains two network virtual appliances (NVAs) that will perform network traffic inspection between the perimeter subnet and the production subnet.

You need to implement an Azure load balancer for the NVAs.

The solution must meet the following requirements:

- The NVAs must run in an active-active configuration that uses automatic failover.

- The NVA must load balance traffic to two services on the Production subnet. The services have different IP addresses.

Which three actions should you perform? (Each correct answer presents parts of the solution. NOTE: Each correct selection is worth one point.)

100. You have five Azure virtual machines that run Windows Server 2016 and you have an Azure load balancer named LB1 that provides load balancing services.

You need to ensure that visitors are serviced by the same web server for each request.

What should you configure?

101. You have an Azure subscription that contains a policy-based virtual network gateway named GW1 and a virtual network named VNet1.

You need to ensure that you can configure a point-to-site connection from VNet1 to an on-premises computer.

Which two actions should you perform? (Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.)

102. From the MFA Server blade, you open the Block/unblock users blade as shown in the exhibit.

What caused ChrisGreen to be blocked?

103. You are the global administrator for an Azure Active Directory (Azure AD) tenant named adatum.com.

From the Azure Active Directory blade, you assign the Conditional Access Administrator role to a user named Admin1.

You need to ensure that Admin1 has just-in-time access as a conditional access administrator.

What should you do next?

104. You are the global administrator for an Azure Active Directory (Azure AD) tenet named adatum.com.

You need to enable two-step verification for Azure users.

What should you do?

105. You have an Azure subscription named Subscription1 that contains a virtual network named VNet1.

You add the users in the following table.

Which user can perform each configuration? (To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.)

106. You are an administrator for a company.

You have an Azure subscription that contains the following resources:

- A virtual network named VNet1.

- A replication policy named ReplPolicy1.

- A Recovery Services vault named Vault1.

- An Azure Storage account named Storage1.

You have an Amazon Web Services (AWS) EC2 virtual machine named VM1 that runs Windows Server.

You need to migrate VM1 to VNet1 by using Azure Site Recovery.

Which three actions should you perform in sequence? (To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.)

107. You have an on-premises network that contains a Hyper-V host named Host1. Host1 runs Windows Server 2016 and hosts 10 virtual machines that run Windows Server 2016.

You plan to replicate the virtual machines to Azure by using Azure Site Recovery.

You create a Recovery Services vault named ASR1 and a Hyper-V site named Site1.

You need to add Host1 to ASR1.

What should you do?

108. You plan to move services from your on-premises network to Azure.

You identify several virtual machines that you believe can be hosted in Azure.

The virtual machines are shown in the following table.

Which two virtual machines can you access by using Azure migrate? (Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.)

109. You create an Azure Migrate project named TestMig in a resource group named test-migration.

You need to discover which on-premises virtual machines to assess for migration.

Which three actions should you perform in sequence? (To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.)

110. You are an administrator for a company. Your company has offices in New York and Los Angeles.

You have an Azure subscription that contains an Azure virtual network named VNet1. Each office has a site-to-site VPN connection to VNet1.

Each network uses the address spaces shown in the following table.

You need to ensure that all Internet-bound traffic from VNet1 is routed through the New York office.

What should you do? (To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.)

111. You have an Azure subscription named Subscription1 that contains the resources in the following table.

VM1 and VM2 run the websites in the following table.

AppGW1 has the backend pools in the following table.

DNS resolves site1.contoso.com, site2.contoso.com, and site3.contoso.com to the IP address of AppGW1.

AppGW1 has the listeners in the following table.

AppGW1 has the rules in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. (NOTE: Each correct selection is worth one point.)

112. You create an Azure web app named WebApp1.

WebApp1 has the autoscale settings shown in the following exhibit.

The scale out and scale in rules are configured to have a duration of 10 minutes and a cool down time of five minutes.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. (NOTE: Each correct selection is worth one point.)

113. You have an Azure subscription that contains an Azure Service Bus named Bus1.

Your company plans to deploy two Azure web apps named App1 and App2.

The web apps will create messages that have the following requirements:

- Each message created by App1 must be consumed by only a single consumer.

- Each message created by App2 will be consumed by multiple consumers.

Which resource should you create for each web app? (To answer, drag the appropriate resources to the correct web apps. Each resource may be used once, more than once, or not at all. NOTE: Each correct selection is worth one point.)

114. You are developing an Azure web app named WebApp1. WebApp1 uses an Azure App Service plan named Plan1 that uses the B1 pricing tier.

You need to configure WebApp1 to add additional instances of the app when CPU usage exceeds 70 percent for 10 minutes.

Which three actions should you perform in sequence? (To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.)

115. A web developer creates a web application that you plan to deploy as an Azure web app.

Users must enter credentials to access the web application.

You create a new web app named WebApp1 and deploy the web application to WebApp1.

You need to disable anonymous access to WebApp1.

What should you configure?

116. You are building a custom Azure function app to connect to Azure Event Grid.

You need to ensure that resources are allocated dynamically to the function app. Billing must be based on the executions of the app.

What should you configure when you create the function app?

117. You have an Azure App Service plan named AdatumASP1 that uses the P2v2 pricing tier. AdatumASP1 hosts an Azure web app named AdatumWebApp1.

You need to delegate the management of AdatumWebApp1 to a group named Devs.

Devs must be able to perform the following tasks:

- Add deployment slots.

- View the configuration of AdatumASP1.

- Modify the role assignment for AdatumWebApp1.

Which role should you assign to the Devs group?

118. You have an on-premises data center and an Azure subscription. The data center contains two VPN devices. The subscription contains an Azure virtual network named VNet1. VNet1 contains a gateway subnet.

You need to create a site-to-site VPN. The solution must ensure that if a single instance of an Azure VPN gateway fails, or a single on-premises VPN device fails, the failure will not cause an interruption that is longer than two minutes.

What is the minimum number of public IP addresses, virtual network gateways, and local network gateways required in Azure? (To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.)

119. You have an Azure virtual network named VNet1 that contains a subnet named Subnet1. Subnet1 contains three Azure virtual machines. Each virtual machine has a public IP address.

The virtual machines host several applications that are accessible over port 443 to users on the Internet.

Your on-premises network has a site-to-site VPN connection to VNet1.

You discover that the virtual machines can be accessed by using the Remote Desktop Protocol (RDP) from the Internet and from the on-premises network.

You need to prevent RDP access to the virtual machines from the Internet, unless the RDP connection is established from the on-premises network. The solution must ensure that all the applications can still be accesses by the Internet users.

What should you do?

120. You have a public load balancer that balances ports 80 and 443 across three virtual machines.

You need to direct all the Remote Desktop protocol (RDP) traffic to VM3 only.

What should you configure?


 

Leave a Reply

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <s> <strike> <strong>