Microsoft Azure Administrator

• #1

  You have an Azure subscription named Subscription1 that contains the virtual networks in the following table. Subscription1 contains the virtual machines in the following table. In Subscription1, you create a load balancer that has the following configurations: ✑ Name: LB1 ✑ SKU: Basic ✑ Type: Internal ✑ Subnet: Subnet12 ✑ Virtual network: VNET1 For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  • ALB1 can balance the traffic between VM1 and VM2. Yes
  • BLB1 can balance the traffic between VM1 and VM2. No
  Show answer
• #2

  You need to resolve the licensing issue before you attempt to assign the license again. What should you do?

  • AFrom the Groups blade, invite the user accounts to a new group.
  • BFrom the Profile blade, modify the usage location.
  • CFrom the Directory role blade, modify the directory role.
  Show answer
• #3

  You have an Azure subscription that contains the Azure virtual machines shown in the following table. You configure the network interfaces of the virtual machines to use the settings shown in the following table. From the settings of VNET1, you configure the DNS servers shown in the following exhibit. The virtual machines can successfully connect to the DNS server that has an IP address of 192.168.10.15 and the DNS server that has an IP address of 193.77.134.10. VM1 connects to 193.77.134.10 for DNS guenes.

  • AYes.
  • BNo.
  Show answer
• #4

  You have an Azure subscription that contains the following resources: A virtual network that has a subnet named Subnet1. Two network security groups (NSGs) named NSG-VM1 and NSG-Subnet1. A virtual machine named VM1 that has the required Windows Server configurations to allow Remote Desktop connections NSG-Subnet1 has the default inbound security rules only. NSG-VM1 has the default inbound security rules and the following custom inbound security rule: Priority: 100. Source: Any. Source port range: . Destination: . Destination port range: 3389. Protocol: UDP. Action: Allow VM1 connects to Subnet1. NSG1-VM1 is associated to the network interface of VM1. NSG-Subnet1 is associated to Subnet1. You need to be able to establish Remote Desktop connections from the internet to VM1. Solution: You add an inbound security rule to NSG-Subnet1 that allows connections from the Any source to the VirtualNetwork destination for port range 3389 and uses the TCP protocol. You remove NSG-VM1 from the network interface of VM1. Does this meet the goal?

  • AYes.
  • BNo.
  Show answer
• #5

  You have an Azure subscription named Subscription1 that is used by several departments at your company. Subscription1 contains the resources in the following table: Another administrator deploys a virtual machine named VM1 and an Azure Storage account named Storage2 by using a single Azure Resource Manager template. You need to view the template used for the deployment. From which blade can you view the template that was used for the deployment?

  • ARG1.
  • BVM1.
  • CStorage1.
  • DContainer1.
  Show answer
• #6

  Topic 3, Contoso Ltd Overview Contoso, Ltd. is a manufacturing company that has offices worldwide. Contoso works with partner organizations to bring products to market. Contoso products are manufactured by using blueprint files that the company authors and maintains. Existing Environment Currently, Contoso uses multiple types of servers for business operations, including the following: ✑ File servers ✑ Domain controllers ✑ Microsoft SQL Server servers Your network contains an Active Directory forest named contoso.com. All servers and client computers are joined to Active Directory. You have a public-facing application named App1. App1 is comprised of the following three tiers: ✑ A SQL database ✑ A web front end ✑ A processing middle tier Each tier is comprised of five virtual machines. Users access the web front end by using HTTPS only. Requirements Planned Changes Contoso plans to implement the following changes to the infrastructure: – Move all the tiers of App1 to Azure. – Move the existing product blueprint files to Azure Blob storage. – Create a hybrid directory to support an upcoming Microsoft Office 365 migration project. Technical Requirements Contoso must meet the following technical requirements: ✑ Move all the virtual machines for App1 to Azure. ✑ Minimize the number of open ports between the App1 tiers. ✑ Ensure that all the virtual machines for App1 are protected by backups. ✑ Copy the blueprint files to Azure over the Internet. ✑ Ensure that the blueprint files are stored in the archive storage tier. ✑ Ensure that partner access to the blueprint files is secured and temporary. ✑ Prevent user passwords or hashes of passwords from being stored in Azure. ✑ Use unmanaged standard storage for the hard disks of the virtual machines. ✑ Ensure that when users join devices to Azure Active Directory (Azure AD), the users use a mobile phone to verify their identity. Minimize administrative effort whenever possible. User Requirements Contoso identifies the following requirements for users: ✑ Ensure that only users who are part of a group named Pilot can join devices to Azure AD. ✑ Designate a new user named Admin1 as the service administrator of the Azure subscription. ✑ Admin1 must receive email alerts regarding service outages. ✑ Ensure that a new user named User3 can create network objects for the Azure subscription. HOTSPOT You need to identify the storage requirements for Contoso. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Contoso requires a storage account that support Azure Table storage.

  • AYes.
  • BNo.
  Show answer
• #7

  You have an Azure subscription that contains an Azure file share.You have an on-premises server named Server1 that runs Windows Server 2016. You plan to set up Azure File Sync between Server1 and the Azure file share. You need to prepare the subscription for the planned Azure File Sync. Which two actions should you perform in the Azure subscription? To answer, drag the appropriate actions to the correct targets. Each action may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. Explanation: As per the official MS doc: The recommended steps to onboard on Azure File Sync for the first with zero downtime while preserving full file fidelity and access control list (ACL) are as follows:

  • AFirst action: Install the Azure File Sync agent. Second action: Run Server Registration.
  • BFirst action: Create a Storage Sync Service. Second action: Create a sync group.
  • CFirst action: Create a sync group. Second action: Create a Storage Sync Service.
  • DFirst action: Run Server Registration. Second action: Install the Azure File Sync Service.
  Show answer
• #8

  You have an Azure subscription named Subscription1. Subscription1 contains the virtual machines in the following table. Subscription1 contains a virtual network named VNet1 that has the subnets in the following table. VM3 has a network adapter named NIC3. IP forwarding is enabled on NIC3. Routing is enabled on VM3. You create a route table named RT1. RT1 is associated to Subnet1 and Subnet2 and contains the routes in the following table. You apply RT1 to Subnet1. Network traffic from VM1 can reach VM2.

  • AYes.
  • BNo.
  Show answer
• #9

  You have an Azure subscription. You plan to use Azure Resource Manager templates to deploy 50 Azure virtual machines that will be part of the same availability set. You need to ensure that as many virtual machines as possible are available if the fabric fails or during servicing. How should you configure the template?

  • ABox 1: max value. Box 2: 20.
  • BBox 1: 20. Box 2: max value.
  • CBox 1: 0. Box 2: 0.
  • DBox 1: max value. Box 2: max value.
  Show answer
• #10

  You have an Azure subscription that contains an Azure file share. You have an on-premises server named Server1 that runs Windows Server 2016. You plan to set up Azure File Sync between Server1 and the Azure file share. You need to prepare the subscription for the planned Azure File Sync. Which two actions should you perform in the Azure subscription?

  • ABox 1: Create a Storage Sync Service. Box 2: Create a sync group.
  • BBox 1: Create a sync group. Box 2: Install the Azure File Sync agend.
  • CBox 1: Run Server Registration. Box 2: Create a Storage Sync Service.
  • DBox 1: . Box 2: .???
  Show answer
• #11Choose 2

  You have an Azure subscription that contains a storage account named account1. You plan to upload the disk files of a virtual machine to account1 from your on-premises network. The on-premises network uses a public IP address space of 131.107.1.0/24. You plan to use the disk files to provision an Azure virtual machine named VM1. VM1 will be attached to a virtual network named VNet1. VNet1 uses an IP address space of 192.168.0.0/24. You need to configure account1 to meet the following requirements: Ensure that you can upload the disk files to account1. Ensure that you can attach the disks to VM1. Prevent all other access to account1. Which two actions should you perform? Each correct selection presents part of the solution.

  • AFrom the Firewalls and virtual networks blade of account1, add the 131.107.1.0/24 IP address range.
  • BFrom the Firewalls and virtual networks blade of account1, select Selected networks.
  • CFrom the Firewalls and virtual networks blade of acount1, add VNet1.
  • DFrom the Firewalls and virtual networks blade of account1, select Allow trusted Microsoft services to access this storage account. From the Service endpoints blade of VNet1, add a service endpoint.
  • EFrom the Service endpoints blade of VNet1, add a service endpoint.
  Show answer
• #12

  You have an Azure subscription named Subscription1. You deploy a Linux virtual machine named VM1 to Subscription1. You need to monitor the metrics and the logs of VM1 . What should you use?

  • ALinux Diagnostic Extension (LAD) 3.0.
  • BAzure Analysis Services.
  • Cthe AzurePerformanceDiagnostics extension.
  • DAzure HDInsight.
  Show answer
• #13Choose 2

  You need to prepare the environment to meet the authentication requirements. Which two actions should you perform?

  • AAzure Active Directory (AD) Identity Protection and an Azure policy.
  • BRecovery Services vault and a backup policy.
  • CAzure Key Vault and an access policy.
  • DAzure Storage account and an access policy.
  Show answer
• #14

  If you delete Rule1, LB1 will balance all the requests between VM1 and VM2 for all the ports.

  • AYes.
  • BNo.
  Show answer
• #15

  You have an Azure virtual machine named VM1. Azure collects events from VM1. You are creating an alert rule in Azure Monitor to notify an administrator when an error is logged in the System event log of VM1. You need to specify which resource type to monitor. What should you specify?

  • AMetric alert.
  • BAzure Log Analytics workspace.
  • CVirtual machine.
  • DVirtual machine extension.
  Show answer
• #16

  You have Azure virtual machines that run Windows Server 2019 and are configured as shown in the following table.You create a public Azure DNS zone named adatum.com and a private Azure DNS zone named contoso.com. For contoso.com, you create a virtual network link named link1 as shown in the exhibit. (Click the Exhibit tab.)You discover that VM1 can resolve names in contoso.com but cannot resolve names in adatum.com. VM1 can resolve other hosts on the internet. You need to ensure that VM1 can resolve host names in adatum.com.

  • AUpdate the DNS suffix on VM1 to be adatum.com.
  • BCreate an SRV record in the contoso.com zone.
  • CConfigure the name servers for adatum.com at the domain registrar.
  • DModify the Access control (IAM) settings for link1.
  Show answer
• #17

  You have an Azure virtual machine named VM1. You use Azure Backup to create a backup of VM1 named Backup1. After creating Backup1, you perform the following changes to VM1: Modify the size of VM1. Copy a file named Budget.xls to a folder named Data. Reset the password for the built-in administrator account. Add a data disk to VM1. An administrator uses the Replace existing option to restore VM1 from Backup1. You need to ensure that all the changes to VM1 are restored. Which change should you perform again?

  • AModify the size of VM1.
  • BAdd a data disk.
  • CReset the password for the built-in administrator account.
  • DCopy Budget.xls to Data.
  Show answer
• #18

  You have a sync group named Sync1 that has a cloud endpoint. The cloud endpoint includes a file named File1.txt. You add Share1 as an endpoint for Sync1. One hour later, you add Share2 as an endpoint for Sync1. On the cloud endpoint, On Server1, File1.txt is overwritten by file1.txt from the cloud endpoint.

  • AYes.
  • BNo.
  Show answer
• #19

  You need to resolve the Active Directory issue. What should you do?

  • AFrom Active Directory Users and Computers, select the user accounts, and then modify the User Principal Name value.
  • BRun idfix.exe, and then use the Edit action.
  • CFrom Active Directory Domains and Trusts, modify the list of UPN suffixes.
  • DFrom Azure AD Connect, modify the outbound synchronization rule.
  Show answer
• #20

  You create an Azure VM named VM1 that runs Windows Server 2019. VM1 is configured as shown in the exhibit. You need to enable Desired State Configuration for VM1. What should you do first?

  • AConfigure a DNS name for VM1.
  • BStart VM1.
  • CConnect to VM1.
  • DCapture a snapshot of VM1.
  Show answer

Want to track your score, take timed mock exams and get AI explanations? Create a free account