Microsoft Azure Administrator

• #141

  You have an Azure policy as shown in the following exhibit. What is the effect of the policy? Which of the following statements are true?

  • AYou can create Azure SQL servers in ContosoRG1.
  • BYou are prevented from creating Azure SQL servers anywhere in Subscription 1.
  • CYou are prevented from creating Azure SQL Servers in ContosoRG1 only.
  • DYou can create Azure SQL servers in any resource group within Subscription 1.
  Show answer
• #142

  You have an Azure subscription that contains the resources shown in the following table. VM1 connects to VNET1. You need to connect VM1 to VNET2. Solution: You turn off VM1, and then you add a new network interface to VM1. Does this meet the goal?

  • AYes.
  • BNo.
  Show answer
• #143

  You have a sync group named Sync1 that has a cloud endpoint. The cloud endpoint includes a file named File1.txt. You add Share1 as an endpoint for Sync1. One hour later, you add Share2 as an endpoint for Sync1. On the cloud endpoint, file1.txt is overwritten by file1.txt from share1.

  • AYes.
  • BNo.
  Show answer
• #144

  You have an Azure subscription named Subscription1. Subscription1 contains the virtual machines in the following table. Subscription1 contains a virtual network named VNet1 that has the subnets in the following table. VM3 has a network adapter named NIC3. IP forwarding is enabled on NIC3. Routing is enabled on VM3. You create a route table named RT1. RT1 is associated to Subnet1 and Subnet2 and contains the routes in the following table. You apply RT1 to Subnet1. If VM3 is turned off, network traffic from VM2 can reach VM1.

  • AYes.
  • BNo.
  Show answer
• #145

  You create an Azure VM named VM1 that runs Windows Server 2019. VM1 is configured as shown in the exhibit. (Click the Exhibit button.) You need to enable Desired State Configuration for VM1. What should you do first?

  • AConfigure a DNS name for VM1.
  • BStart VM1.
  • CConnect to VM1.
  • DCapture a snapshot of VM1.
  Show answer
• #146

  You have an Azure subscription named Subscription1 that contains a virtual network named VNet1. You add the users in the following table. Which 2?

  • ABox 1: User1 only. Box 2: User1, User2, and User3.
  • BBox 1: User1, User2, and. Box 2: User2 and User3 only.
  • CBox 1: User2 and User3 only. Box 2: User1 and User2 only.
  • DBox 1: User1 and User3 only. Box 2: User1 only.
  Show answer
• #147

  You have an Azure subscription that contains a virtual machine scale set. The scale set contains four instances that have the following configurations. Operating system: Windows Server 2016. Size: Standard_D1_v2. You run the get-azvmss cmdlet as shown in the following exhibit:

  • ABox 1: 0. Box 2: 4.
  • BBox 1: 1. Box 2: 2.
  • CBox 1: 3. Box 2: 3.
  • DBox 1: 4. Box 2: 1.
  Show answer
• #148

  You have two Azure virtual machines named VM1 and VM2. You have two Recovery Services vaults named RSV1 and RSV2. VM2 is protected by RSV1. You need to use RSV2 to protect VM2. What should you do first?

  • AFrom the RSV1 blade, click Backup items and stop the VM2 backup.
  • BFrom the RSV1 blade, click Backup Jobs and export the VM2 backup.
  • CFrom the RSV1 blade, click Backup. From the Backup blade, select the backup for the virtual machine, and then click Backup.
  • DFrom the VM2 blade, click Disaster recovery, click Replication settings, and then select RSV2 as the Recovery Services vault.
  Show answer
• #149

  You have an Azure subscription that contains a storage account. You have an on-premises server named Server1 that runs Window Server 2016. You need to transfer the data to the storage account by using the Azure Import/Export service. In which order should you perform the actions?

  • ABox 1: From the Azure portal, create an import job. Box 2: Attach an external disk to Server1 and then run waimportexport.exe. Box 3:From the Azure portal, update the import job. Box 4: Detach the external disks from Server1 and ship the disks to an Azure data center.
  • BBox 1:Attach an external disk to Server1 and then run waimportexport.exe. Box 2: From the Azure portal, update the import job. Box 3: Detach the external disks from Server1 and ship the disks to an Azure data center. Box 4: From the Azure portal, create an import job.
  • CBox 1:Detach the external disks from Server1 and ship the disks to an Azure data center. Box 2: From the Azure portal, update the import job.Box 3:Attach an external disk to Server1 and then run waimportexport.exe. Box 4: From the Azure portal, create an import job.
  Show answer
• #150

  You have an Azure Active Directory (Azure AD) tenant named Adatum and an Azure Subscription named Subscription1. Adatum contains a group named Developers. Subscription1 contains a resource group named Dev. You need to provide the Developers group with the ability to create Azure logic apps in the Dev resource group. Solution: On Dev, you assign the Logic App Contributor role to the Developers group. Does this meet the goal?

  • AYes.
  • BNo.
  Show answer
• #151

  Humongous Insurance Overview Existing Environment Huongous Insurance is an insurance company that has three offices in Miami, Tokoyo, and Bangkok. Each has 5000 users. Active Directory Environment Humongous Insurance has a single-domain Active Directory forest named humongousinsurance.com. The functional level of the forest is Windows Server 2012. You recently provisioned an Azure Active Directory (Azure AD) tenant. Network Infrastructure Each office has a local data center that contains all the servers for that office. Each office has a dedicated connection to the Internet. Each office has several link load balancers that provide access to the servers. Active Directory Issue Several users in humongousinsurance.com have UPNs that contain special characters. You suspect that some of the characters are unsupported in Azure AD. Licensing Issue You attempt to assign a license in Azure to several users and receive the following error message: 'Licenses not assigned. License agreement failed for one user.' You verify that the Azure subscription has the available licenses. Requirements Planned Changes Humongous Insurance plans to open a new office in Paris. The Paris office will contain 1,000 users who will be hired during the next 12 months. All the resources used by the Paris office users will be hosted in Azure. Planned Azure AD Infrastructure The on-premises Active Directory domain will be synchronized to Azure AD. All client computers in the Paris office will be joined to an Azure AD domain. Planned Azure Networking Infrastructure You plan to create the following networking resources in a resource group named All_Resources: Default Azure system routes that will be the only routes used to route traffic A virtual network named Paris-VNet that will contain two subnets named Subnet1 and Subnet2 A virtual network named ClientResources-VNet that will contain one subnet named ClientSubnet A virtual network named AllOffices-VNet that will contain two subnets named Subnet3 and Subnet4 You plan to enable peering between Paris-VNet and AllOffices-VNet. You will enable the Use remote gateways setting for the Paris-VNet peerings. You plan to create a private DNS zone named humongousinsurance.local and set the registration network to the ClientResources-VNet virtual network. Planned Azure Computer Infrastructure Each subnet will contain several virtual machines that will run either Windows Server 2012 R2, Windows Server 2016, or Red Hat Linux. Department Requirements Humongous Insurance identifies the following requirements for the company's departments: Web administrators will deploy Azure web apps for the marketing department. Each web app will be added to a separate resource group. The initial configuration of the web apps will be identical. The web administrators have permission to deploy web apps to resource groups. During the testing phase, auditors in the finance department must be able to review all Azure costs from the past week. Authentication Requirements Users in the Miami office must use Azure Active Directory Seamless Single Sign-on (Azure AD Seamless SSO) when accessing resources in Azure. Which blade should you instruct the finance department auditors to use?

  • AInvoices.
  • BPartner Information.
  • CCost Analysis.
  • DExternal Services.
  Show answer
• #152

  You have an Azure subscription named Subscription1 that contains a virtual network named VNet1. You add the users in the following table. Which user can perform each configuration? Add a subnet to VNet1: To answer, select the appropriate options in the answer area.

  • AUser1 only
  • BUser3 only
  • CUser1 and User3 only
  • DUser2 and User3 only
  • Euser1, User2, and User3
  Show answer
• #153

  You have an Azure subscription that contains a virtual network named VNet1. VNet1 uses an IP address space of 10.0.0.0/16 and contains the VPN Gateway and subnets in the following table: Address prefix.

  • A10.0.0.0/16
  • B10.0.1.0/24
  • C10.0.254.0/24
  Show answer
• #154

  You need to recommend an identify solution that meets the technical requirements. What should you recommend?

  • AFederated single-on (SSO) and Active Directory Federation Services (AD FS).
  • BPassword hash synchronization and single sign-on (SSO).
  • CCloud-only user accounts.
  • DPass-through Authentication and single sign-on (SSO).
  Show answer
• #155Choose 3

  You have an azure subscription that contain a virtual named VNet1. VNet1. contains four subnets named Gatesway, perimeter, NVA, and production. The NVA contain two network virtual appliance (NVAs) that will network traffic inspection between the perimeter subnet and the production subnet. You need to implement an Azure load balancer for the NVAs. The solution must meet the following requirements: The NVAs must run in an active-active configuration that uses automatic failover. The NVA must load balance traffic to two services on the Production subnet. The services have different IP addresses. Which three actions should you perform? Each correct answer presents parts of the solution.

  • AAdd two load balancing rules that have HA Ports enabled and Floating IP disabled.
  • BDeploy a standard load balancer.
  • CAdd a frontend IP configuration, two backend pools, and a health prob.
  • DAdd a frontend IP configuration, a backend pool, and a health probe. Add two load balancing rules that have HA Ports and Floating IP enabled. Deploy a basic load balancer.
  • EAdd two load balancing rules that have HA Ports and Floating IP enabled. Deploy a basic load balancer.
  • FDeploy a basic load balancer.
  Show answer
• #156

  You need to move the blueprint files to Azure. What should you do?

  • AGenerate a shared access signature (SAS). Map a drive, and then copy the files by using File Explorer.
  • BUse the Azure Import/Export service.
  • CGenerate an access key. Map a drive, and then copy the files by using File Explorer.
  • DUse Azure Storage Explorer to copy the files
  Show answer
• #157

  Your network contains an on-premises Active Directory domain named adatum.com. The domain contains an organizational unit (OU) named OU1. OU1 contains the objects shown in the following table. You sync OU1 to Azure Active Directory (Azure AD) by using Azure AD Connect. You need to identify which objects are synced to Azure AD. Which objects should you identify?

  • AUser1 and Group1 only.
  • BUser1, Group1, and Group2 only.
  • CUser1, Group1, Group2, and Computer1.
  • DComputer1 only.
  Show answer
• #158

  You have peering configured as shown in the following exhibit.

  • ABox 1: VNET6 only. Box 2: delete peering1.
  • BBox 1: VNET6, VNET1, and VvNET2 only. Box 2: add a service endpoint.
  • CBox 1: all the virtual networks in the subscription. Box 2: modify the address space.
  • DBox 1: VNET6 and vNET1 only. Box 2: add a service endpoint.
  Show answer
• #159

  You have an Azure Active Directory (Azure AD) tenant named adatum.com that contains the users shown in the following table Adatum.com has the following configurations: Users may join devices to Azure AD is set to User1. Additional local administrators on Azure AD joined devices is set to None. You deploy Windows 10 to a computer named Computer. User1 joins Computer1 to adatum.com. You need to identify which users are added to the local Administrators group on Computer1.

  • AUser1 only.
  • BUser1, User2, and User3 only.
  • CUser1 and User2 only.
  • DUser1, User2, User3, and User4.
  • EUser2 only.
  Show answer
• #160

  You have a virtual network named VNET1 that contains the subnets shown in the following table: You have two Azure virtual machines that have the network configurations shown in the following table: For NSG1, you create the inbound security rule shown in the following table: For NSG2, you create the inbound security rule shown in the following table: VM1 can connect to the TCP port 1433 services on VM2.

  • AYes.
  • BNo.
  Show answer

Want to track your score, take timed mock exams and get AI explanations? Create a free account