Microsoft Azure Administrator

• #101

  You have an Azure virtual machine named VM1 that runs Windows Server 2019. You sign in to VM1 as a user named User 1 and perform the following actions: Create files on drive C. Create files on drive D. Modify the screen saver timeout. Change the desktop background. You plan to redeploy VM1. Which changes will be lost after you redeploy VM1?

  • AModified screen saver timeout.
  • BNew desktop background.
  • CNew files on drive D.
  • DNew files on drive C.
  Show answer
• #102

  You are planning the move of App1 to Azure. You create a network security group (NSG). You need to recommend a solution to provide users with access to App1. What should you recommend?

  • ACreate an outgoing security rule for port 443 from the Internet. Associate the NSG to all the subnets.
  • BCreate an incoming security rule for port 443 from the Internet. Associate the NSG to all the subnets.
  • CCreate an incoming security rule for port 443 from the Internet. Associate the NSG to the subnet that contains the web servers.
  • DYes Create an outgoing security rule for port 443 from the Internet. Associate the NSG to the subnet that contains the web servers.
  Show answer
• #103

  You have the Azure virtual machines shown in the following table A DNS service is install on VM1. You configure the DNS server settings for each virtual network as shown in the following exhibit. You need 10 ensure that all the virtual machines can resolve DNS names by using the DNS service on VM1. What should you do?

  • AAdd service endpoints on VNET2 and VNET3.
  • BConfigure peering between VNE11, VNETT2, and VNET3.
  • CConfigure a conditional forwarder on VM1.
  • DAdd service endpoints on VNET1.
  Show answer
• #104

  You have Azure subscriptions named Subscription1 and Subscription2. Subscription1 has following resource groups: RG1 includes a web app named App1 in the West Europe location. Subscription2 contains the following resource groups: App1 can be moved to RG4.

  • AYes.
  • BNo.
  Show answer
• #105

  You have a sync group named Sync1 that has a cloud endpoint. The cloud endpoint includes a file named File1.txt. You on-premises network contains servers that run Windows Server 2016. The servers are configured as shown in the following table. You add Share1 as an endpoint for Sync1. One hour later, you add Share2 as an endpoint for Sync1. On Server1, Filel.txt is overwritten by File1.txt from the cloud endpoint.

  • AYes.
  • BNo.
  Show answer
• #106

  Overview Contoso, Ltd. is a manufacturing company that has offices worldwide. Contoso works with partner organizations to bring products to market. Contoso products are manufactured by using blueprint files that the company authors and maintains. Existing Environment Currently, Contoso uses multiple types of servers for business operations, including the following: File servers. Domain controllers. Microsoft SQL Server servers Your network contains an Active Directory forest named contoso.com. All servers and client computers are joined to Active Directory. You have a public-facing application named App1. App1 is comprised of the following three tiers: A SQL database. A web front end. A processing middle tier Each tier is comprised of five virtual machines. Users access the web front end by using HTTPS only. Requirements Planned Changes Contoso plans to implement the following changes to the infrastructure: – Move all the tiers of App1 to Azure. – Move the existing product blueprint files to Azure Blob storage. – Create a hybrid directory to support an upcoming Microsoft Office 365 migration project. Technical Requirements Contoso must meet the following technical requirements: Move all the virtual machines for App1 to Azure. Minimize the number of open ports between the App1 tiers. Ensure that all the virtual machines for App1 are protected by backups. Copy the blueprint files to Azure over the Internet. Ensure that the blueprint files are stored in the archive storage tier. Ensure that partner access to the blueprint files is secured and temporary. Prevent user passwords or hashes of passwords from being stored in Azure. Use unmanaged standard storage for the hard disks of the virtual machines. Ensure that when users join devices to Azure Active Directory (Azure AD), the users use a mobile phone to verify their identity. Minimize administrative effort whenever possible. User Requirements Contoso identifies the following requirements for users: Ensure that only users who are part of a group named Pilot can join devices to Azure AD. Designate a new user named Admin1 as the service administrator of the Azure subscription. Admin1 must receive email alerts regarding service outages. Ensure that a new user named User3 can create network objects for the Azure subscription. You need to implement a backup solution for App1 after the application is moved. What should you create first?

  • ARecovery plan.
  • BAzure Backup Server.
  • CBackup policy.
  • DRecovery Services vault.
  Show answer
• #107

  You have an Azure subscription that contains the following users in an Azure Active Directory tenant named contoso.onmicrosoft.com: User1 creates a new Azure Active Directory tenant named external.contoso.onmicrosoft.com. You need to create new user accounts in external.contoso.com.onmicrosoft.com. Solution: You instruct User1 to create the user accounts.

  • AYes.
  • BNo.
  Show answer
• #108

  You have an Azure subscription that contains the virtual machines shown in the following table. VM1 and VM2 use public IP addresses. From Windows Server 2019 on VM1 and VM2, you allow inbound Remote Desktop connections. Subnet1 and Subnet2 are in a virtual network named VNET1. The subscription contains two network security groups (NSGs) named NSG1 and NSG2. NSG1 uses only the default rules. NSG2 uses the default and the following custom incoming rule: Priority: 100. Name: Rule1. Port: 3389. Protocol: TCP. Source: Any. Destination: Any. Action: Allow NSG1 connects to Subnet1. NSG2 connects to the network interface of VM2. From the Internet, you can connect to VM1 by using Remote Desktop.

  • AYes.
  • BNo.
  Show answer
• #109

  You have an Azure subscription named Subscription1. Subscription1 contains the virtual machines in the following table. Subscription1 contains a virtual network named VNet1 that has the subnets in the following table. VM3 has a network adapter named NIC3. IP forwarding is enabled on NIC3. Routing is enabled on VM3. You create a route table named RT1. RT1 is associated to Subnet1 and Subnet2 and contains the routes in the following table. You apply RT1 to Subnet1. Network traffic from VM3 can reach VM1.

  • AYes.
  • BNo.
  Show answer
• #110

  You have an Azure subscription that contains the Azure virtual machines shown in the following table. You configure the network interfaces of the virtual machines to use the settings shown in the following table. From the settings of VNET1, you configure the DNS servers shown in the following exhibit. The virtual machines can successfully connect to the DNS server that has an IP address of 192.168.10.15 and the DNS server that has an IP address of 193.77.134.10. VM3 connects 1o 192.168.10.15 for DNS queries.

  • AYes.
  • BNo.
  Show answer
• #111

  You have an Azure subscription named Subscription1 that contains the resources shown in the following table. In storage1, you create a blob container named blob1 and a file share named share1. Which resources can be backed up to Vault1 and Vault2?

  • ABox 1: VM1only Box 2: share1 only.
  • BBox 1: VM1 and sharel only Box 2: VM1 and sharel only.
  • CBox 1: VM1 and SQL1 only Box 2: blob1 and share1 only.
  • DBox 1: VM1, storagel, and SQL1 only Box 2: ‘storagel and SQL1 only.
  • EBox 1: VM1, blob1, sharel, and SQL1 Box 2: VM1 and sharel only.
  Show answer
• #112

  You plan to deploy five virtual machines to a virtual network subnet. Each virtual machine will have a public IP address and a private IP address. Each virtual machine requires the same inbound and outbound security rules. What is the minimum number of network interfaces and network security groups that you require? To answer, select the appropriate options in the answer area.

  • A5.
  • B10.
  • C15.
  • D20.
  Show answer
• #113

  You need to prepare the environment to meet the authentication requirements. Which two actions should you perform? Each correct answer presents part of the solution. NOTE Each correct selection is worth one point.

  • AAzure Active Directory (AD) Identity Protection and an Azure policy.
  • Ba Recovery Services vault and a backup policy.
  • Can Azure Key Vault and an access policy.
  • Dan Azure Storage account and an access policy.
  Show answer
• #114

  You have an Azure subscription that contains the following users in an Azure Active Directory tenant named contoso.onmicrosoft.com: User1 creates a new Azure Active Directory tenant named external.contoso.onmicrosoft.com. You need to create new user accounts in external.contoso.com.onmicrosoft.com. Solution: You instruct User3 to create the user accounts.

  • AYes.
  • BNo.
  Show answer
• #115

  You have an Azure subscription that contains a virtual network named VNet1. VNet1 uses an IP address space of 10.0.0.0/16 and contains the VPN Gateway and subnets in the following table: Assigned to.

  • AGateway Subnet
  • BSubnet0
  • CSubnet1 and Subnet2
  Show answer
• #116

  You have an Azure subscription named Subscription1 that contains the resources shown in the following table. You plan to configure Azure Backup reports for Vault1. You are configuring the Diagnostics settings for the AzureBackupReports log. Which storage accounts and which Log Analytics workspaces can you use for the Azure Backup reports of Vault1?

  • ABox 1: storage3 only. Box 2: Analytics3 only.
  • BBox 1: storage1, storage2, and storage3. Box 2: Analytics1 only.
  • CBox 1: storage1 only. Box 2: Analytics2 only.
  • DBox 1: storage2 only. Box 2: Analytics1, Analytics2, and Analytics3.
  Show answer
• #117

  You have an Azure subscription named Subscription1 that contains a resource group named RG1. In RG1, you create an internal load balancer named LB1 and a public load balancer named LB2. You need to ensure that an administrator named Admin1 can manage LB1 and LB2. The solution must follow the principle of least privilege. To add a backend pool to LB1. Which role should you assign to Admin1 for each task?

  • AContributor on LB1
  • BNetwork Contributor on LB1
  • CNetwork Contributor on RG1
  • DOwner on LB1
  Show answer
• #118

  You have an Azure Storage account named storage1 that uses Azure Blob storage and Azure File storage. You need to use AzCopy to copy data to the blob storage and file storage in storage1. Which authentication method should you use for each type of storage? To answer, select the appropriate options in the answer area. Blob storage:

  • AAzure Active Directory (Azure AD) only
  • BShared access signatures (SAS) only
  • CAccess keys and shared access signatures (SAS) only
  • DAzure Active Directory (Azure AD) and shared access signatures (SAS) only
  • EAzure Active Directory (Azure AD), access keys, and shared access signatures (SAS)
  Show answer
• #119

  You create a virtual machine scale set named Scale1. Scale1 is configured as shown in the following exhibit. If Scalel is first utilized at 25 percent for six minutes, and then utilized at 50 percent for six minutes, Scalel will be running [answer choice].

  • A2 virtual machines
  • B4 virtual machines
  • C6 virtual machines
  • D10 virtual machines
  • E20 virtual machines
  Show answer
• #120

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure subscription named Subscription1 that contains the resources shown in the following table. VM1 connects to a virtual network named VNET2 by using a network interface named NIC1. You need to create a new network interface named NIC2 for VM1. Solution: You create NIC2 in RG1 and West US. Does this meet the goal?

  • AYes.
  • BNo.
  Show answer

Want to track your score, take timed mock exams and get AI explanations? Create a free account