Microsoft Azure Administrator

• #61

  You have an app named App1 that is installed on two Azure virtual machines named VM1 and VM2. Connections to App1 are managed by using an Azure Load Balancer. The effective network security configurations for VM2 are shown in the following exhibit. You discover that connections to App1 from 131.107.100.50 over TCP port 443 fail. You verify that the Load Balancer rules are configured correctly. You need to ensure that connections to App1 can be established successfully from 131.107.100.50 over TCP port 443. Solution: You create an inbound security rule that allows any traffic from the AzuteLoadBalancer source and has a cost of 150. Does this meet the goal?

  • AYes.
  • BNo.
  Show answer
• #62

  Humongous Insurance is an insurance company that has three offices in Miami, Tokoyo, and Bangkok. Each has 5000 users. Active Directory Environment Humongous Insurance has a single-domain Active Directory forest named humongousinsurance.com. The functional level of the forest is Windows Server 2012. You recently provisioned an Azure Active Directory (Azure AD) tenant. Network Infrastructure Each office has a local data center that contains all the servers for that office. Each office has a dedicated connection to the Internet. Each office has several link load balancers that provide access to the servers. Active Directory Issue Several users in humongousinsurance.com have UPNs that contain special characters. You suspect that some of the characters are unsupported in Azure AD. Licensing Issue You attempt to assign a license in Azure to several users and receive the following error message: 'Licenses not assigned. License agreement failed for one user.' You verify that the Azure subscription has the available licenses. Requirements. Planned Changes. Humongous Insurance plans to open a new office in Paris. The Paris office will contain 1,000 users who will be hired during the next 12 months. All the resources used by the Paris office users will be hosted in Azure. Planned Azure AD Infrastructure. The on-premises Active Directory domain will be synchronized to Azure AD. All client computers in the Paris office will be joined to an Azure AD domain. Planned Azure Networking Infrastructure. You plan to create the following networking resources in a resource group named All_Resources: Default Azure system routes that will be the only routes used to route traffic A virtual network named Paris-VNet that will contain two subnets named Subnet1 and Subnet2 A virtual network named ClientResources-VNet that will contain one subnet named ClientSubnet A virtual network named AllOffices-VNet that will contain two subnets named Subnet3 and Subnet4. You plan to enable peering between Paris-VNet and AllOffices-VNet. You will enable the Use remote gateways setting for the Paris-VNet peerings. You plan to create a private DNS zone named humongousinsurance.local and set the registration network to the ClientResources-VNet virtual network. Planned Azure Computer Infrastructure. Each subnet will contain several virtual machines that will run either Windows Server 2012 R2, Windows Server 2016, or Red Hat Linux. Department Requirements. Humongous Insurance identifies the following requirements for the company's departments: Web administrators will deploy Azure web apps for the marketing department. Each web app will be added to a separate resource group. The initial configuration of the web apps will be identical. The web administrators have permission to deploy web apps to resource groups. During the testing phase, auditors in the finance department must be able to review all Azure costs from the past week. Authentication Requirements. Users in the Miami office must use Azure Active Directory Seamless Single Sign-on (Azure AD Seamless SSO) when accessing resources in Azure. You need to define a custom domain name for Azure AD to support the planned infrastructure. Which domain name should you use?

  • Aad.humongousinsurance.com.
  • Bhumongousinsurance.onmicrosoft.com.
  • Chumongousinsurance.local.
  • Dhumongousinsurance.com.
  Show answer
• #63

  You have an Azure virtual machine that runs Windows Server 2019 and has the following configurations: Name: VM1. Location: West US. Connected to: VNET1. Private IP address: 10.1.0.4. Public IP addresses: 52.186.85.63. DNS suffix in Windows Server: Adatum.com You create the Azure DNS zones shown in the following table. You need to identify which DNS zones you can link to VNET1 and the DNS zones to which VM1 can automatically register. Which zones should you identify?

  • ABox 1: Adatum.com only. Box 2: Adatum.com only.
  • BBox 1: The private zones only. Box 2: The private zones only.
  • CBox 1: Adatum.pri and adatum.com only. Box 2: Adatum.pri and adatum.com only.
  • DBox 1: The public zones only. Box 2: The public zones only.
  Show answer
• #64

  You have an Azure subscription that contains a user account named User1. You need to ensure that User1 can assign a policy to the tenant root management group . What should you do?

  • AAssign the Owner role to User1, and then instruct User1 to configure access management for Azure resources.
  • BAssign the Global administrator role to User1, and then instruct User1 to configure access management for Azure resources.
  • CAssign the Global administrator role to User1, and then modify the default conditional access policies.
  • DAssign the Owner role to User1, and then modify the default conditional access policies.
  Show answer
• #65

  You have an Azure subscription that contains the Azure virtual machines shown in the following table. You configure the network interfaces of the virtual machines to use the settings shown in the following table. From the settings of VNET1, you configure the DNS servers shown in the following exhibit. The virtual machines can successfully connect to the DNS server that has an IP address of 192.168.10.15 and the DNS server that has an IP address of 193.77.134.10. VM2 connects to 193.77.134.10 for DNS queries.

  • AYes.
  • BNo.
  Show answer
• #66

  You have an Active Directory domain named contoso.com that contains the objects shown in the following table. The groups have the memberships shown in the following table. OU1 and OU2 are synced to Azure Active Directory (Azure AD). You modify the synchronization settings and remove OU1 from synchronization. You sync Active Directory and Azure AD. Which objects are in Azure AD?

  • AUser4 and Group2 only.
  • BUser2, Group1, User4, and Group2 only.
  • CUser1, User2, Group1, User4, and Group2 only.
  • DUser1, User2, User3, User4, Group1, and Group2.
  Show answer
• #67

  You have an Azure Active Directory (Azure AD) tenant named contoso.com that contains the users shown in the following table: User3 is the owner of Group1. Group2 is a member of Group1. You configure an access review named Review1 as shown in the following exhibit: User3 can perform an access review of User1.

  • AYes.
  • BNo.
  Show answer
• #68

  You have a public load balancer that balances ports 80 and 443 across three virtual machines. You need to direct all the Remote Desktop Protocol (RDP) connections to VM3 only . What should you configure?

  • Aa load balancing rule.
  • Ba new public load balancer for VM3.
  • Can inbound NAT rule.
  • Da frontend IP configuration.
  Show answer
• #69

  You have a virtual network named VNET1 that contains the subnets shown in the following table: You have two Azure virtual machines that have the network configurations shown in the following table: For NSG1, you create the inbound security rule shown in the following table: For NSG2, you create the inbound security rule shown in the following table: VM2 can connect to the TCP port 1433 services on VM1.

  • AYes.
  • BNo.
  Show answer
• #70

  You have two Azure Active Directory (Azure AD) tenants named contoso.com and fabrikam.com. You have a Microsoft account that you use to sign in to both tenants. You need to configure the default sign-in tenant for the Azure portal. What should you do?

  • AFrom the Azure portal, configure the portal settings.
  • BFrom the Azure portal, change the directory.
  • CFrom Azure Cloud Shell, run Set-AzureRmContext.
  • DFrom Azure Cloud Shell, run Set-AzureRmSubscription.
  Show answer
• #71Choose 2

  You have an Azure subscription that contains an Azure file share. You have an on-premises server named Server1 that runs Windows Server 2016. You plan to set up Azure File Sync between Server1 and the Azure file share. You need to prepare the subscription for the planned Azure File Sync. Which two actions should you perform in the Azure subscription? To answer, drag the appropriate actions to the correct targets. Each action may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. Explanation: As per the official MS doc: The recommended steps to onboard on Azure File Sync for the first with zero downtime while preserving full file fidelity and access control list (ACL) are as follows:

  • ACreate a Storage Sync Service First action: Create a Storage Sync Service.
  • BCreate a sync group Second action: Create a sync group Second.
  • CInstall the Azure File Sync agent.
  • DRun Server Registration.
  Show answer
• #72

  You need to ensure that VM1 can communicate with VM4. The solution must minimize administrative effort. What should you do?

  • ACreate 2 user-defined route from VNET1 to VNET3.
  • BAssign VM4 an IP address of 10.0.1.5/24.
  • CEstablish peering between VNET1 and VNET3.
  • DCreate an NSG and associate the NSG to VMI and VM4.
  Show answer
• #73

  You have an Azure Active Directory tenant named Contoso.com that includes following users: Contoso.com includes following Windows 10 devices: You create following security groups in Contoso.com: User1 can add Device2 to Group1.

  • AYes.
  • BNo.
  Show answer
• #74

  You have an Azure subscription that contains an Azure Directory (Azure AD) tenant named contoso.com. The tenant is synced to the on-premises Active Directory domain. The domain contains the users shown in the following table. You enable self-service password reset (SSPR) for all users and configure SSPR to have the following authentication methods: Number of methods required to reset: 2. Methods available to users: Mobile phone, Security questions. Number of questions required to register: 3. Number of questions required to reset: 3 You select the following security questions:. What is your favorite food? In what city was your first job? What was the name of your first pet? SecAdmin1 must answer the following question if he wants to reset his password: In what city was your first job?Question 69 part 1

  • AYes.
  • BNo.
  Show answer
• #75

  You create an App Service plan named App1 and an Azure web app named webapp1. You discover that the option to create a staging slot is unavailable. You need to create a staging slot for App1. What should you do first?

  • AFrom webapp1, modify the Application settings.
  • BFrom webapp1, add a custom domain.
  • CFrom App1, scale up the App Service plan.
  • DFrom App1, scale out the App Service plan
  Show answer
• #76

  You need to define a custom domain name for Azure AD to support the planned infrastructure. Which domain name should you use?

  • AJoin the client computers in the Miami office to Azure.
  • BAdd http://autologon.microsoftazuread-sso.com to the intranet zone of each client computer in the Miami office.
  • CAllow inbound TCP port 8080 to the domain controllers in the Miami office.
  • DInstall Azure AD Connect on a server in the Miami office and enable Pass-through Authentication.
  • EInstall the Active Directory Federation Services (AD FS) role on a domain controller in the Miami office. A DNS service is install on VM1. You configure the DNS server settings for each virtual network as shown in the following exhibit. You need 10 ensure that all the virtual machines can resolve DNS names by using the DNS service on VM1.
  Show answer
• #77

  You have an Azure subscription that contains the resources shown in the following table. VM1 and VM2 run a website that is configured as shown in the following table. LB1 is configured to balance requests to VM1 and VM2. You configure a health probe as shown in the exhibit.You need to ensure that the health probe functions correctly. What should you do?

  • AOn LB1, change the Unhealthy threshold to 65536.
  • BOn LB1, change the port to 8080.
  • COn VM1 and VM2, create a file named Probe1.htm in the C:intepubwwwrootTemp folder.
  • DOn VM1 and VM2, create a file named Probe1.htm in the C:intepubwwwrootSiteATemp folder.
  Show answer
• #78

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. You have an Azure subscription named Subscription1. Subscription1 contains a resource group named RG1. RG1 contains resources that were deployed by using templates. You need to view the date and time when the resources were created in RG1. Solution: From the RG1 blade, you click Deployments. Does this meet the goal?

  • AYes.
  • BNo.
  Show answer
• #79

  You have an Azure subscription that contains an Azure Active Directory (Azure AD) tenant named contoso.com. The tenant is synced to the on-premises Active Directory domain. The domain contains the users shows in the following table. User1 must answer the following question during the self-service password reset What was the name of your first pet?

  • AYes
  • BNo
  Show answer
• #80

  Your company has three offices. The offices are located in Miami, Los Angeles, and New York. Each office contains a datacenter. You have an Azure subscription that contains resources in the East US and West US Azure regions. Each region contains a virtual network. The virtual networks are peered. You need to connect the datacenters to the subscription. The solution must minimize network latency between the datacenters. What should you create?

  • AThree virtual WANs and one virtual hub.
  • BThree virtual hubs and one virtual WAN.
  • CThree On-premises data gateways and one Azure Application Gateway.
  • DThree Azure Application Gateways and one On-premises data gateway.
  Show answer

Want to track your score, take timed mock exams and get AI explanations? Create a free account