AZ-303 Updated Dumps-Microsoft Azure Architect Technologies

1. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure subscription.

You have an on-premises file server named Server1 that runs Windows Server 2019.

You manage Server1 by using Windows Admin Center.

You need to ensure that if Server1 fails, you can recover Server1 files from Azure.

Solution: You register Windows Admin Center in Azure and configure Azure Backup.

Does this meet the goal?

2. HOTSPOT

You are designing a virtual network to support a web application. The web application uses Blob storage to store large images. The web application will be deployed to an Azure App Service Web App.

You have the following requirements:

✑ Secure all communications by using Secured Socket layer (SSL)

✑ SSL encryption and decryption must be processed efficiently to support high traffic load on the web application

✑ Protect the web application from web vulnerabilities and attacks without modification to backend code

✑ Optimize web application responsiveness and reliability by routing HTTP request and responses to the endpoint with the lowest network latency for the client.

You need to configure the Azure components to meet the requirements.

What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

3. You have an Azure subscription that contains 20 virtual machines. The virtual machines require authenticated access to several Azure resources.

You need to ensure that the virtual machines can authenticate by using Azure Active Directory (Azure AD).

Solution: You create and configure an app registration in the Azure AD tenant.

Does this meet the goal?

4. You create an Azure Kubernetes Service (AKS) cluster configured as shown in the exhibit. (Click the Exhibit tab.)





You deploy a containerized application named App1 to the agentPool node pool.

You need to create a containerized application named App2 that runs on four nodes of size DS3 v2.

What should you do first?

5. HOTSPOT

You network contains an Active Directory domain named adatum.com and an Azure Active Directory (Azure AD) tenant named adatum.onmicrosoft.com.

Adatum.com contains the user accounts in the following table.





Adatum.onmicrosoft.com contains the user accounts in the following table.





You need to implement Azure AD Connect. The solution must follow the principle of least privilege.

Which user accounts should you use? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

6. HOTSPOT

You have the Azure SQL Database servers shown in the following table.





You have the Azure SQL databases shown in the following table.





You create a failover group named failover1 that has the following settings:

• Primary server: sqlserver1

• Secondary server: sqlserver2

• Read/Write failover policy: Automatic

• Read/Write grace period (hours): 1 hour

7. Your on-premises network contains 100 virtual machines that run Windows Server 2019.

You have an Azure subscription that contains an Azure Log Analytics workspace named Workspace1.

You need to collect errors from the Windows event logs on the virtual machines.

Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

8. HOTSPOT

You plan to create an Azure Storage account in the Azure region of East US 2.

You need to create a storage account that meets the following requirements:

✑ Replicates synchronously

✑ Remains available if a single data center in the region fails

How should you configure the storage account? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

9. Note: This question is part of series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure Active Directory (Azure AD) tenant named contoso.com.

A user named Admin1 attempts to create an access review from the Azure Active Directory admin center and discovers that the Access reviews settings are unavailable. Admin1 discovers that all the other Identity Governance settings are available.

Admin1 is assigned the User administrator, Compliance administrator, and Security administrator roles.

You need to ensure that the Admin1 can create access reviews in contoso.com.

Solution: You purchase an Azure Directory Premium P2 license for contoso.com.

Does this meet the goal?

10. An administrator plans to create a function app in Azure that will have the following settings:

✑ Runtime stack: .NET Core

✑ Operating System: Linux

✑ Plan type: Consumption

✑ Enable Application Insights: Yes

You need to ensure that you can back up the function app.

Which settings should you recommend changing before creating the function app?

11. Your network contains an on-premises Active Directory and an Azure Active Directory (Azure AD) tenant.

You deploy Azure AD Connect and configure pass-through authentication?

Your Azure subscription contains several web apps that are accessed from the Internet.

You plan to enable Azure Multi-Factor Authentication (MFA) for the Azure tenant.

You need to recommend a solution to prevent users from being prompted for Azure MFA when they access the web apps from the on-premises network.

What should you include in the recommendation?

12. HOTSPOT

You are developing an Azure Web App. You configure TLS mutual authentication for the web app.

You need to validate the client certificate in the web app. To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

13. A company plans to use third-party application software to perform complex data analysis processes. The software will use up to 500 identical virtual machines (VMs) based on an Azure Marketplace VM image.

You need to design the infrastructure for the third-party application server.

The solution must meet the following requirements:

✑ The number of VMs that are running at any given point in time must change when the user workload changes.

✑ When a new version of the application is available in Azure Marketplace it must be deployed without causing application downtime.

✑ Use VM scale sets.

✑ Minimize the need for ongoing maintenance.

Which two technologies should you recommend? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

14. HOTSPOT

You create a virtual machine scale set named Scale1. Scale1 is configured as shown in the following exhibit.

The subscription contains the Azure SQL databases shown in the following table.





Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

15. HOTSPOT

You have an Azure subscription that contains the Azure SQL servers shown in the following table.





The subscription contains the elastic pool shown in the following table.





The subscription contains the Azure SQL databases shown in the following table.





For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

16. You have an Azure subscription that contains the Azure virtual machines shown in the following table.





You create an Azure key vault named Vaultl in the East US location.

You need to identify which virtual machines can enable Azure Disk Encryption by using Vaultl.

Which virtual machines should you identify?

17. HOTSPOT

You need to design an authentication solution that will integrate on-premises Active Directory and Azure Active Directory (Azure AD).

The solution must meet the following requirements:

✑ Active Directory users must not be able to sign in to Azure AD-integrated apps outside of the sign-in hours configured in the Active Directory user accounts.

✑ Active Directory users must authenticate by using multi-factor authentication (MFA) when they sign in to Azure AD-integrated apps.

✑ Administrators must be able to obtain Azure AD-generated reports that list the Active Directory users who have leaked credentials.

✑ The infrastructure required to implement and maintain the solution must be minimized.

What should you include in the solution? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

18. Your on-premises network contains several Hyper-V hosts.

You have an hybrid deployment of Azure Active Directory (Azure AD).

You create an Azure Migrate project.

You need to ensure that you can evaluate virtual machines by using Azure Migrate.

Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

19. Note: This question is part of series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have a server named Server1 that runs Windows Server 2019. Server1 is a container host.

You are creating a Dockerfile to build a container image.

You need to add a file named File1.txt from Server1 to a folder named C:Folder1 in the container image.

Solution: You add the following line to the Dockerfile.

Copy-Item File1.txt C:Folder1File1.txt

You then build the container image.

Does this meet the goal?

20. You have an Azure key vault named KV1.

You need to ensure that applications can use KV1 to provision certificates automatically from an external certification authority (CA).

Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

21. Note: This question is part of series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure Active Directory (Azure AD) tenant named contoso.com.

A user named Admin1 attempts to create an access review from the Azure Active Directory admin center and discovers that the Access reviews settings are unavailable. Admin1 discovers that all the other Identity Governance settings are available.

Admin1 is assigned the User administrator, Compliance administrator, and Security administrator roles.

You need to ensure that Admin1 can create access reviews in contoso.com.

Solution: You assign the Service administrator role to Admin1.

Does this meet the goal?

22. You monitor Azure virtual machines by using Azure Monitor.

You plan to restart the virtual machines when CPU usage exceeds 95 percent for more than 30 minutes.

You need to create an alert in Azure Monitor to restart the virtual machines. The solution must minimize administrative effort.

Which type of action should you use in the alert?

23. You have an application that is hosted across multiple Azure regions.

You need to ensure that users connect automatically to their nearest application host based on network latency.

What should you implement?

24. N NO: 246

You have an Azure Kubernetes Service (AKS) cluster named Clus1 in a resource group named RG1.

An administrator plans to manage Clus1 from an Azure AD-joined device.

You need to ensure that the administrator can deploy the YAML application manifest file for a container application.

You install the Azure CLI on the device.

Which command should you run next?

25. HOTSPOT

You plan to implement an access review to meet the following requirements:

✑ The access review must be enforced until otherwise configured.

✑ Each user or group that has access to the Azure environment must be in the scope of the access review.

✑ The access review must be completed within two weeks.

✑ A lack of response must not cause changes in the operational environment.

An administrator creates the access review shown in the answer area.

Which two sections of the access review should you modify to meet the requirements? To answer, select the appropriate sections in the answer area. NOTE: Each correct selection is worth one point.

26. HOTSPOT

You create a virtual machine scale set named Scale1. Scale1 is configured as shown in the following exhibit.





Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

27. DRAG DROP

You have an Azure virtual machine named VM1 that runs Windows Server 2016.

You install a line-to-business application on VM1.

You need to create an Azure virtual machine by using VM1 as a custom image.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

28. You have a server named Server1 that runs Windows Server 2019. Server! is a container host.

You plan to create a container image.

You create the following instructions in a text editor.





You need 10 be able to automate the container image creation by using the instructions.

To which file should you save the instructions?

29. Your company has an office in Seattle.

You have an Azure subscription that contains a virtual network named VNET1.

You create a site-to-site VPN between the Seattle office and VNET1.

VNET1 contains the subnets shown in the following table.





You need to redirect all Internet-bound traffic from Subnet1 to the Seattle office.

What should you create?

30. HOTSPOT

You deploy an Azure virtual machine scale set named VSSI that contains 30 virtual machine instances across three zones in the same Azure region. The instances host an application named App1 that must be accessible by using HTTP and HTTPS traffic. Currently, VSS1 is inaccessible from the internet.

You need to use Azure Load Balancer to provide access to App1 across all the instances from the internet by using a single IP address.

What should you configure? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

31. You create a new Azure subscription. You create a resource group named RG1.

In RG1. you create the resources shown in the following table.





You need to configure an encrypted tunnel between your on-premises network and VNET1.

Which two additional resources should you create in Azure? Each correct answer presents part of the solution.

32. HOTSPOT

You have an Azure Resource Manager template named Template1 in the library as shown in the following exhibit.





Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

33. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You manage an Active Directory domain named contoso.local.

You install Azure AD Connect and connect to an Azure Active Directory (Azure AD) tenant named contoso.com without syncing any accounts.

You need to ensure that only users who have a UPN suffix of contoso.com in the contoso.local domain sync to Azure AD.

Solution: You use the Synchronization Service Manager to modify the Active Directory Domain Services (AD DS) Connector.

Does this meet the goal?

34. HOTSPOT

You have an on-premises data center and an Azure subscription. The data center contains two VPN devices. The subscription contains an Azure virtual network named VNet1. VNet1 contains a gateway subnet.

You need to create a site-to-site VPN. The solution must ensure that is a single instance of an Azure VPN gateway fails, or a single on-premises VPN device fails, the failure will not cause an interruption that is longer than two minutes.

What is the minimum number of public IP addresses, virtual network gateways, and local network gateways required in Azure? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

35. You have an Azure subscription that contains an Azure Cosmos DB account. The account is in the East US Azure region and contains three databases. You need to migrate the metadata and databases of the account to the West US Azure region. The solution must minimize administrative effort.

What should you do first?

36. HOTSPOT

You have an Azure Resource Manager template for a virtual machine named Template1.

Template1 has the following parameters section.





For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

37. You have an Azure subscription that contains 20 virtual machines. The virtual machines require authenticated access to several Azure resources.

You need to ensure that the virtual machines can authenticate by using Azure Active Directory (Azure AD).

Solution: You configure the Access control (IAM) settings for each virtual machine.

Does this meet the goal?

38. You are creating an app that will transcribe speech-to-text in Chinese. The app will use the Speech service in Azure and will authenticate by using a service principal. You configure the app to use the Application ID of the service principal and the client secret.

Which other value should you add to the app to authenticate to the Speech service?

39. You plan to create an Azure Storage account named storage! that will store blobs and be accessed by Azure Databricks.

You need to ensure that you can set permissions for individual blobs by using Azure Active Directory (Azure AD) authentication.

Which Advanced setting should you enable for storage1?

40. You have an Azure Kubernetes Service (AKS) cluster named aks1.

You need to enable the cluster autoscaler on aks1.

Which command should you run in Azure CLI?

41. HOTSPOT

You have an Azure App Service web app named webapp1 and an Azure key vault named kv1.

You need to ensure that webapp1 can retrieve secrets stored in kv1.

What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

42. You create the Azure resources shown in the following table.





You attempt to add a role assignment to a resource group as shown in the following exhibit.





What should you do to ensure that you can assign VM2 the Reader role for the resource

group?

43. You have three Azure SQL Database servers shown in the following table.





You plan to specify sqlserver1 as the primary server in a failover group.

Which servers can be used as a secondary server?

44. You have an Azure subscription that contains the virtual networks shown in the following table.





You need to recommend a connectivity solution that will enable the virtual machines on VNET1 and VNET2 to communicate through the Microsoft backbone infrastructure.

What should you include in the recommendation?

45. You have an Azure subscription that contains the resource groups shown in the following table.





The subscription contains the storage accounts shown in the following table.





You create a Recovery Services vault named Vault1 in RG1 in the West US location.

You need to identify which storage accounts can be used to archive the diagnostics logs of Vault1.

Which storage accounts should you identify?

46. HOTSPOT

You have an Azure Active Directory (Azure AD) tenant.

You need to create a conditional access policy that requires all users to use multi-factor authentication when they access the Azure portal.

Which three settings should you configure? To answer, select the appropriate settings to the answer area. NOTE: Each correct selection is worth one point.

47. You have an Azure subscription that contains the resources shown in the following table.





You need to grant App1 read-only access to Table1.

What should you use?

48. You have a resource group named RG1 that contains the following:

• A virtual network that contains two subnets named Subnet 1 and AzureFirewallSubnet

• An Azure Storage account named contososa1

• An Azure firewall deployed to AzureFirewallSubnet

You need to ensure that contososa1 is accessible from Subnet 1 over the Azure backbone network.

What should you do?

49. You have an Azure key vault named KV1 and an Azure web app named WebApp1.

WebApp1 runs in a Shared App Service plan.

You need to grant WebApp1 permissions to KV1.

What should you do?

50. HOTSPOT

Your company has an Azure Container Registry named Registry1.

You have an Azure virtual machine named Server1 that runs Windows Server 2019.

From Server1, you create a container image named image1.

You need to add image1 to Registry1.

Which command should you run on Server1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

51. You have an Azure subscription that contains 100 virtual machines.

You have a set of Pester tests in PowerShell that validate the virtual machine environment.

You need to run the tests whenever there is an operating system update on the virtual machines. The solution must minimize implementation time and recurring costs.

Which three resources should you use to implement the tests? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

52. Topic 1, Contoso, Ltd



Overview

Contoso, Ltd. is a manufacturing company that has offices worldwide. Contoso works with partner organizations to bring products to market.



Contoso products are manufactured by using blueprint files that the company authors and maintains.



Existing Environment

Currently, Contoso uses multiple types of servers for business operations, including the following:

✑ File servers

✑ Domain controllers

✑ Microsoft SQL Server servers



Your network contains an Active Directory forest named contoso.com. All servers and client computers are joined to Active Directory.

You have a public-facing application named App1.



App1 is comprised of the following three tiers:

✑ A SQL database

✑ A web front end

✑ A processing middle tier

Each tier is comprised of five virtual machines. Users access the web front end by using HTTPS only.



Requirements

Planned Changes

Contoso plans to implement the following changes to the infrastructure:

✑ Move all the tiers of App1 to Azure.

✑ Move the existing product blueprint files to Azure Blob storage.

✑ Create a hybrid directory to support an upcoming Microsoft Office 365 migration project.



Technical Requirements

Contoso must meet the following technical requirements:

✑ Move all the virtual machines for App1 to Azure.

✑ Minimize the number of open ports between the App1 tiers.

✑ Ensure that all the virtual machines for App1 are protected by backups.

✑ Copy the blueprint files to Azure over the Internet.

✑ Ensure that the blueprint files are stored in the archive storage tier.

✑ Ensure that partner access to the blueprint files is secured and temporary.

✑ Prevent user passwords or hashes of passwords from being stored in Azure.

✑ Use unmanaged standard storage for the hard disks of the virtual machines.

✑ Ensure that when users join devices to Azure Active Directory (Azure AD), the users use a mobile phone to verify their identity.

Minimize administrative effort whenever possible.



User Requirements

Contoso identifies the following requirements for users:

Ensure that only users who are part of a group named Pilot can join devices to Azure AD.

Designate a new user named Admin1 as the service administrator of the Azure subscription.

Ensure that a new user named User3 can create network objects for the Azure subscription.



You need to move the blueprint files to Azure.

What should you do?

53. You need to implement a backup solution for App1 after the application is moved.

What should you create first?

54. You are planning the move of App1 to Azure.

You create a network security group (NSG).

You need to recommend a solution to provide users with access to App1.

What should you recommend?

55. You need to meet the user requirement for Admin1.

What should you do?

56. HOTSPOT

You need to recommend a solution for App1. The solution must meet the technical requirements.

What should you include in the recommendation? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

57. HOTSPOT

You need to configure the Device settings to meet the technical requirements and the user requirements.

Which two settings should you modify? To answer, select the appropriate settings in the answer area.

58. You need to recommend an identify solution that meets the technical requirements.

What should you recommend?

59. HOTSPOT

You need to identify the storage requirements for Contoso.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

60. Topic 2, Litware inc.



Case Study

This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.



To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study.



At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section.



To start the case study

To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an All Information tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question.



Overview. General Overview

Litware, Inc. is a medium-sized finance company. Litware recently acquired a financial services company named Fabrikam, Ltd.



Overview. Physical Locations

Litware has a datacenter in Boston. Fabrikam has a datacenter in San Francisco.



Existing Environment. Identity Environment

The network of Litware contains an Active Directory forest named Litware.com that syncs to an Azure Active Directory (Azure AD) tenant named Litware.com by using Azure AD Connect.

Azure AD Seamless Single Sign-on (Azure AD Seamless SSO) is enabled for the Litware.com tenant.

Users at Litware have a UPN suffix of Litware.com

Litware has an internal certification authority (CA) that is trusted by all devices.

The network of Fabrikam contains an Active Directory forest named fabrikam.com. Users at Fabrikam have a UPN suffix of fabrikam.com.



Existing Environment. Azure Environment

Litware has an Azure subscription named Sub1 that is linked to the Litware.com tenant.

Sub1 contains the resources shown in the following table.





Litware has Azure Resource Manager (ARM) templates that deploy Azure Policy definitions and assignments to a management group.

Fabrikam does NOT have an Azure environment.



Existing Environment. On-Premises Environment

The on-premises network of Litware contains the resources shown in the following table.





The on-premises network of Fabrikam contains a domain member server named SERVER1 that runs Windows Server 2019.



Existing Environment. Network Environment

Litware has a site-to-site VPN connection to VNet1.

The Litware and Fabrikam datacenters are not connected.



Requirements. Planned Changes

Litware plans to implement the following changes:

✑ Establish a trust relationship between the Litware and Fabrikam forests.

✑ Migrate data from the on-premises NoSQL datastores to Azure Table storage.

✑ Containerize WebApp1 and deploy the app to an Azure Kubernetes Service (AKS) cluster on VNet1.

✑ Create an Azure blueprint named BP1 and use the blueprint to provision a resource group named RG1.



Requirements. Deployment Requirements

Litware identifies the following deployment requirements:

✑ The existing ARM templates must be used for deployments to Sub1.

✑ WebApp1 must be deployed to the AKS cluster without having to change the source code.



Requirements. Authentication and Authorization Requirements

Litware identifies the following authentication and authorization requirements:

✑ The Fabrikam users must be able to authenticate to the Litware.com tenant by using Azure AD Seamless SSO.

✑ The Fabrikam users and the Litware users must be able to manage the Azure resources in Sub1.

✑ Company policy must prohibit the creation of guest user accounts in the Litware.com tenant.

✑ You must be able to configure deny permissions for RG1 and for the resources in RG1.

✑ WebApp1 running on the AKS cluster must be able to retrieve secrets from KV1.



Requirements. Security Requirements

Litware identifies the following security requirements:

✑ On-premises Litware users must access KVI by using the private IP address of the key vault.

✑ Azure virtual machines must have all their disks encrypted, including the temporary disks.

✑ Azure Storage must encrypt all data by using keys issued by the internal CA of Litware.

✑ Inbound HTTPS traffic to WebApp1 must be inspected for SQL injection attacks.

✑ The principle of least privilege must be used.



You need to configure Azure AD Seamless SSO for Fabrikam. The solution must meet the authentication and authorization requirements.

What should you install first?

61. You migrate WebApp1 to Azure.

You need to configure the AKS cluster to enable WebApp1 to access KV1. The solution must meet the authentication and authorization requirements.

What should you do?

62. You need to ensure that the NoSQL data is encrypted. The solution must meet the security requirements.

What should you do first?

63. You need to ensure that you can implement Azure AD Seamless SSO for Fabrikam. The solution must meet the following requirements:

✑ Support the planned changes.

✑ Meet the authentication and authorization requirements.

What should you do?

64. HOTSPOT

You plan to migrate WebApp1 to Azure.

You need to implement the AKS cluster that will host WebApp1. The solution must meet the deployment requirements.

What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

65. DRAG DROP

You need to ensure that the virtual machine disks are encrypted. The solution must meet the security requirements.

Which three actions should you perform in Sub1 in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

66. You create and publish the BP1 blueprint.

You need to ensure that you can use BP1 to configure permissions for RG1. The solution must meet the authentication and authorization requirements.

What should you do?

67. HOTSPOT

You need to recommend a solution to provide KV1 with access to the on-premises network of Litware. The solution must meet the security requirements.

What should you include in the recommendation? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

68. You migrate WebApp1 to Azure.

You need to implement a traffic filtering solution for WebApp1. The solution must meet the security requirements.

What should you do?

69. Topic 3, Misc. Questions



Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an app named App1 that uses data from two on-premises Microsoft SQL Server databases named DB1 and DB2.

You plan to move DB1 and DB2 to Azure.

You need to implement Azure services to host DB1 and DB2. The solution must support server-side transactions across DB1 and DB2.

Solution: You deploy DB1 and DB2 as Azure SQL databases on the same Azure SQL Database server.

Does this meet the goal?

70. Note: This question is part of series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have a server named Server1 that runs Windows Server 2019. Server1 is a container host.

You are creating a Dockerfile to build a container image.

You need to add a file named File1.txt from Server1 to a folder named C:Folder1 in the container image.

Solution: You add the following line to the Dockerfile.

ADD File1.txt C:/Folder1/

You then build the container image.

Does this meet the goal?

71. HOTSPOT

You have several Azure virtual machines on a virtual network named VNet1.

You configure an Azure Storage account as shown in the following exhibit.





Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

72. You create an Azure Kubernetes Service (AKS) duster and an Azure Container Registry.

You need to perform continuous deployments of a containerized application to the AKS cluster as soon as the image updates in the registry.

What should you use to perform the deployments?

73. You have an Azure virtual network that contains a subnet named Subnet1. Subnet1 contains 50 virtual machines. Twenty-five of the virtual machines are web servers and the other 25 are application servers.

You need to filter traffic the web servers and the application servers by using application security groups.

Which additional resources should you provision?

74. Note: This question is part of series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure Cosmos DB database that contains a container named Container1. The partition key for Container1 is set to /day.

Container1 contains the items shown in the following table.





You need to programmatically query Azure Cosmos DB and retrieve item1 and item2 only.

Solution: You run the following query.





You set the EnableCrossPartitionQuery property to True.

Does this meet the goal?

75. DRAG DROP

You are designing a solution to secure a company’s Azure resources. The environment hosts 10 teams. Each team manages a project and has a project manager, a virtual machine (VM) operator, developers, and contractors.

Project managers must be able to manage everything except access and authentication for users. VM operators must be able to manage VMs, but not the virtual network or storage account to which they are connected. Developers and contractors must be able to manage storage accounts.

You need to recommend roles for each member.

What should you recommend? To answer, drag the appropriate roles to the correct employee types. Each role may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

76. You have an Azure subscription named Subscription1 that is used by several departments at your company.

Subscription1 contains the resources in the following table.





Another administrator deploys a virtual machine named VM1 and an Azure Storage account named Storage2 by using a single Azure Resource Manager template.

You need to view the template used for the deployment.

From which blade can you view the template that was used for the deployment?

77. You have an Azure subscription that contains the storage accounts shown in the following table.





You enable Azure Advanced Threat Protection (ATP) for all the storage accounts.

You need to identify which storage accounts will generate Azure ATP alerts.

Which two storage accounts should you identify? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

78. You have an Azure subscription that contains a resource group named RG1. RG1 contains multiple resources.

You need to trigger an alert when the resources in RG1 consume $1,000 USD.

What should you do?

79. Your company has the groups shown in the following table.





The company has an Azure subscription that contains an Azure Active Directory (Azure AD) tenant named contoso.com.

An administrator named Admin1 attempts to enable Enterprise State Roaming for all the users in the Managers group.

Admin1 reports that the options for Enterprise State Roaming are unavailable from Azure AD.

You verify that Admin1 is assigned the Global administrator role.

You need to ensure that Admin1 can enable Enterprise State Roaming.

What should you do?

80. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an app named App1 that uses data from two on-premises Microsoft SQL Server databases named DB1 and DB2.

You plan to move DB1 and DB2 to Azure.

You need to implement Azure services to host DB1 and DB2. The solution must support erver-side transactions across DB1 and DB2.

Solution: You deploy DB1 and DB2 as Azure SQL databases each on a different Azure SQL Database server.

Does this meet the goal?

81. HOTSPOT

You have an Azure subscription that contains the resource groups shown in the following table.





You create an Azure Resource Manager template named Template1 as shown in the following exhibit.





From the Azure portal, you deploy Template1 four times by using the settings shown in the following table.





What is the result of the deployment? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

82. Note: This question is part of series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have a server named Server1 that runs Windows Server 2019. Server1 is a container host.

You are creating a Dockerfile to build a container image.

You need to add a file named File1.txt from Server1 to a folder named C:Folder1 in the container image.

Solution: You add the following line to the Dockerfile.

XCOPY File1.txt C:Folder1

You then build the container image.

Does this meet the goal?