AZ-300 part 5 Flashcards by Ovais Shah

You need to deploy an application gateway named appgw1015 to meet the following requirements:
Load balance internal IP traffic to the Azure virtual machines connected to subnet0.
Provide a SLA 99.99 availability for Azure VMs

Click AZ portal
Select Application gateway and name it as appgw1015
SKU size: Standard_V2
Resource group: MyresourceGroupAG
 click OK
Accept the default values 
click virtual network select subnet0

How well did you know this?

Not at all

Perfectly

You need to deploy an Azure LB named 1b1016 to your Azure subscription.
Support the Load balancing of IP traffic from the internet to Azure VM connected to VNET1016 \subnet0
Minimize Azure related costs

Step1 create a resource-> Networking -> Load balancer

step2
Myloadbalancer for name of the load balancer
Basic- for SKU version
choose VNET 1016\subnet0
step3
Accept the default values and click Create the load balancer

How well did you know this?

Not at all

Perfectly

Your company is developing an e-com Azure App service web App to support hundreds of restaurant locations around the world.
You are designing the messaging solution architecture to support the e-comm transactions and messages.
features:
Shopping cart
Inventory distribution
restaurant telemetry
You need to design asolution for the inventory distribution features?
A. Azure service bus
B. Azure Relay
C. Azure Event Grid
D. Azure Event Hub

A. Azure service bus

How well did you know this?

Not at all

Perfectly

You are responsible for Mobile app development for a company.The company develops apps on windows Mobile, IOS ,and Android.
you need to integrate push notifications into every app
You need to be able to send users alerts from a backend server.
Which two options can you use to achieve this goal?
A. Azure web App
B. Azure Mobile App Service
C. Azure SQL Database
D. Azure Notification Hubs
E. A virtual machine

B. Azure Mobile App Service

D. Azure Notification Hubs

How well did you know this?

Not at all

Perfectly

You are developing an Azure function that will be triggered using a webhook from an external application.The Azure function will recieve JSON data in the body of the request.Calling application send an account ID as part of the URL.The format for the URL resembles the following /api/account/1

Answer:

Function name 
Http trigger
Anonymouse
/account
int accountid

How well did you know this?

Not at all

Perfectly

You are developing a workflow solution using Azure technologies.
What should you implement to meet each requirement?

* Debug the solution by user visual studio
Durable function only
Logic apps only
Durable function and logic Apps
* Use a collection of ready made actions
Durable function only
Logic apps only
Durable function and logic Apps
*Deploy the components by using visual studio team services 
Durable function only
Logic apps only
Durable function and logic Apps

Debug the solution by user visual studio
Durable functions only
Use a collection of ready made actions
Logic apps only
Deploy the components by using visual studio team services
Durable functions only

How well did you know this?

Not at all

Perfectly

Your developing a SMS -based testing solution.The solution send susers a question by using SMS.Early responders may qualify for prizes.
Users must respont with an answer choice within 90 secs.You must track how long it takes each user to respond,you create a azure durable function named SendSMSQuizQuestions that use Twillio to send messages.

Answer:

D) DateTime
expiration=context.CurrentUtcDataTime.AddSeconds(90)
F) VartimeoutTask=Context.CreateTime(expiration,Cts.Token)
L) if (!cts.IsCancellationRequested)

How well did you know this?

Not at all

Perfectly

You are developing a solution that requires serverless code execution in Azure.The solution has two fuction that must run in the specific order.

Durable Orchestration Context
CallActivity/Async
CallActivity/Async

How well did you know this?

Not at all

Perfectly

You are developing an app that references data which is sharded across multiple SQL databases.

A. Elastic database transactions with horizontal partitioning.
B. Distributed transactions coordinated by micrsoft Distributed transaction coordinator (MSDTC)
C.Server-coordinated transactions from .Net application
D. Elastic database transaction with vertical partitioning

A. Elastic database transactions with horizontal partitioning.

How well did you know this?

Not at all

Perfectly

Your creating a bot for a company by using QNA maker.
you need to make sure that you can update with third party assistance.
Scnerio

*Add customer question answer content
QnA maker runtime
QnA maker management service
*Use an Azure Application insights resource for analytics
QnA maker runtime
QnA maker management service
*Update and train a knowledge base
QnA maker runtime
QnA maker management service

*Add customer question answer content
QnA maker management service
*Use an Azure Application insights resource for analytics
QnA maker runtime
*Update and train a knowledge base
QnA maker management service

How well did you know this?

Not at all

Perfectly

Your are developing a speech-enabled home automation control bot.The bot interprets some spoken words incorectly.you need to improve it

A. Askpe for business channel and use scorable dialogs for improving conversation flows
B. The web chat channel and speech priming using a bing speech service and LUIS app
C.The skpe channel and use scoarable dialogs for improving conversation flow

B. The web chat channel and speech priming using a bing speech service and LUIS app

How well did you know this?

Not at all

Perfectly

Your company develops a bot that use QnA maker knowledge base and language understanding inteligence service (LIUS).You need to integrate it,which four steps you have to take it.

A. Configure that bot app to link LUIS app intents to the knowlege base
B,Create assitance for the LUIS app that corespond to the knowledge base
C.Create intents for the LUIS app that correspond to knowledge base
D. Publish the LUIS app
E. Configure the BOT app to link LUIS app intents to the knowledge base
F. Train the LUIS app

C.Create intents for the LUIS app that correspond to knowledge base
F. Train the LUIS app
D. Publish the LUIS app
E. Configure the BOT app to link LUIS app intents to the knowledge base

How well did you know this?

Not at all

Perfectly

You creat a VM scale set named scale1 .Scale 1 is configured as shown below
Default VMS: 2 min and 20 Max
Scale out : if CPU =80 , # of VMS increase =2
Scale in: CPU=30,# of VM decrease=4

If scale1 is utilized at 85% for six minutes will be running (2,4,6,10,20 Vms)
If scale 1 first utilize at 25 % for six minutes and then utilize at 50% for six min scale1 will be running
(2,4,6,10,10 Vms)

If scale1 is utilized at 85% for six minutes will be running (6 Vms)

If scale 1 first utilize at 25 % for six minutes and then utilize at 50% for six min scale1 will be running
(2 Vms)

Instances only added when the CPU threasold reach over 80%.

How well did you know this?

Not at all

Perfectly

You company hosts multiple websites by using Azure VM scale set (VMSS) that runs IIS .All Network use SSL encrption.User session must be routed to the same server by using cookie-based session affinity.
Which IP address type should you use
( Public ,Private)
Which azure solution should you create to route the web interface traffic to VMSS?
Azure VPN gateway 
Azure Application gateway
Azure express route
Azure network watcher

What should you configure to make sure web traffic arrives at the appropriate server in VMSS.
Routing rules and backend interface
CNAME and A record
Routing menthod and DNS (TTL)
Path based redirection and WebSocket.

Which IP address type should you use
( Public )

Which azure solution should you create to route the web interface traffic to VMSS?

Azure Application gateway

What should you configure to make sure web traffic arrives at the appropriate server in VMSS.

Path based redirection and WebSocket.

How well did you know this?

Not at all

Perfectly

Create a virtual network named vnet108 that contains three subnets named subnet0,1,2,.the solution meet these reqs
connections from any of the subnets to internet must be blocked
The number of NSG and NSG rules must be minimized

Create resource-> networking->virtual network->vnet108
address 10.0.0.0/16
subnet0/1/2
subnet range:10.0.0.0/24

How well did you know this?

Not at all

Perfectly

A company is migrating an existing third party website to azure .the website is stateless.The number of visitors
varies throughout the year.

A Use an autoscale setting to scale instances vertically

B Create 100 autoscale setting per resource.

C Use Azure monitor to create autoscale setting using custom metrics

How well did you know this?

Not at all

Perfectly

You have an Azure subs named subscritions
you create several Azure virtual machines in sub1 ,all the VM belongs to same Virtual network
You have on -prem hyper V server name servers server1 hosts a VM named VM1.you plan to replicate VM1 to Azure
Which three objects you create ?
A Hyper V site
B Azure recovery service vault
C Storage account
D replication Policy
E Azure traffic manager instance
F end point

A Hyper V site
B Azure recovery service vault
D replication Policy

How well did you know this?

Not at all

Perfectly

Your company is developing an e-com Azure App service web App to support hundreds of restaurant location around the world.You need to choose the Azure messaging solution to support the restaurant Telemetry feature,
A Azure relay
B Azure event Grid
C Azure event hub
D Azure Service Bus

C Azure event hub

How well did you know this?

Not at all

Perfectly

A company is migrating an existing on prem third party website to Azure.
You need to implement a virtual machine scale set instance
A use a webhook to log autoscale failure
B Use an autoscale setting to scale instances vertically
C Use only default diagnostics metric to trigger autoscalling
D Use an autoscale setting to define more profiles that have one or more autoscale rules

C Use only default diagnostics metric to trigger autoscalling

In guest VM metrics with the Azure diagnostics extension
The Azure diagnostic extention is an agent that runs inside VM instance.You can create autoscale rules based on a more detailed awarenes of VM performence,not just CPU usage or memory consumtions.

How well did you know this?

Not at all

Perfectly

You need to meet the technical reqs for VM4
What should you create and configure ?
A An Azure notification hun 
B An Azure service Bus
C An Azure logic App 
D An Azure event Hub

D An Azure event Hub

How well did you know this?

Not at all

Perfectly

You need to prepare the environment to implement the planned changes for server2 what should you do ?
from Azure portal -> Create a recoevery service vault
On server 2 -> Install the Azure site recovery provider

from Azure portal -> Create a recoevery service vault

On server 2 -> Install the Azure site recovery provider

How well did you know this?

Not at all

Perfectly

You discover that VM3 does not meet the technical reqs
You need to verify if issue is related with NSGs

A The security recommendation in Azure adviser
B Ip Flow verity in Azure Network Watcher
C Diagnose and solve prob in traffic manger profiles
Dianostic setting in Azure montor
E diagram in Vnet1

B Ip Flow verity in Azure Network Watcher

How well did you know this?

Not at all

Perfectly

You need to recommend a solution to automate the configs foe the finace dept users.Solution should meet technical reqs.

A Dynamic groups and conditional access policies
B Azure AD identity protection
C Azure AD B2C
D An Azure logic app and the Microsoft identity management (MIM ) client

A Dynamic groups and conditional access policies

How well did you know this?

Not at all

Perfectly

You need to meet the connect reqs for the newyork office
from the Azure portal —> Create a virtual network gateway and a local network gateway
In the network office–> Configure siste to site VPN connection

from the Azure portal —> Create a virtual network gateway and a local network gateway
In the network office–> Configure site to site VPN connection

How well did you know this?

Not at all

Perfectly

Your developing an Azure web app .You configure TLS mutual authontication for the web App. You need to validate the client certificate in the web App.To answer ,select the appropriate options. Property value client certificate location HTTP request header Encoding type base64

Property value client certificate location HTTP request header Encoding type base64

You maintain an existing Azure sql db instance mangement of the database is performed by an external party.All cryptography keys are stored in the Azure key vault will each protection method meet the requirement? To answer choose Yes /No 1 Enable always Encryted encryption 2 Set the column encryption setting to disabled 3 Assign users to the public fixed database role 4 Store column encryption keys in the system catalog view in the database

Enable always Encryted encryption ( yes ) Set the column encryption setting to disabled (No) Assign users to the public fixed database role (No) Store column encryption keys in the system catalog view in the data base (No)

You have an Azure sub that contains 10 virtual machines You need to ensure that you recieve an email message when any VM are powered off what is the minimum number of rules and group that you require? A three rules anf three action groups B three rules and one action group C One rule and one action group D.One rule and three action groups

B three rules and one action group

Subscrition contain the VM in the folowing VM1 --> 10.0.1.4 VM2 -> 10.0.2.4 VM3 --> 10.0.3.4 Virtual network VNET1 Subnet1 --> 10.0.1.0/24 --> VM1 subnet2 ---> 10.02.0/24-> VM2 subnet3 ---> 10.0.3.0/24---> VM3 VM3 has multiple net work adapters,including a network adapter named NIC1 ,IP forwarding is enabled on NIC3 .Routing is enabled on VM3 You create a route table named RT1 that contains the routes in the table IP prefix Next hop type Next hop address 10.0.1.0/24 virtual appliance 10.0.3.4 10.0.2.0/24 virtual appliance 10.0.3.4 VM3 can establish a network connection to VM1 If VM3 is turned off VM2 can establish a network connection to VM1 VM1 can establish a network to VM2

VM3 can establish a network connection to VM1 (Yes) If VM3 is turned off VM2 can establish a network connection to VM1 (NO) VM1 can establish a network to VM2 (NO)

You have Azure sub that contains three Virtual network VNet1 ,VNET2,VNET3.Vnet2 contains a virtual appliance named VM2 that operate as router You are configuring the virtual Virtual network in a hub and spoke topology that uses VNET2 as the Hub network YOU plan to configure peering between VNET1 VNET2 and between VNET2 and VNEt3 which two configs will you perform? A create route filter B On the peering connections ,allow gateway transit C Create route table and assign the table to subnets D On the peering connections use remote gateways

B On the peering connections ,allow gateway transit | D On the peering connections use remote gateways

You are designing a solution to secure a company Azure resources.The environment hosts 10 teams >each team manges a project and has a project manager,a virtual machine operator ,developer and contractors Project manager must be able to manage everything except access and authontication for users,VM operator must be able to mange VMs,but not the Virtual network or storage acct to which they are connected.Developer and contractore must be able to mange storage accounts,you need to recommend the roles Contributor Reader Virtual machine contributor Storage account contributor

Project manager ---Contributor virtual machine operator----- Virtual machine contributor Developer ----- Storage account contributor Contractors ----- Storage account contributor

You have Azure service bus you need to implement a service bus que that gaurantees first in first out delivery of messages what should yo do? A Enable duplicate detection B Set a MAx size setting of the queue to 5 GB C Enable sessions D Enable Partitioning E Set the lock duration setting to 10 seconds

C Enable sessions

You have azure subcription that contains Name Type Region Resource group RG1 Resource grp Central US N/A RG2 Resource grp West US N/A VM1 Virtual machine EAst US RG2 VNet1 Virtual network East Us RG1 In RG2 you need to create new VM called VM2 that will connect to VNET1 to VM2 and will use a network interface VM2 interface In which region should you create VM2 and VM2 interface ?

VM2 will be in the Central US | VM2 interface East US

You have a virtualization environment that contains the virtualization servers in the following Name Hypervisor Run VMS Server1 Hyper-V VM1,VM2,VM3 Server2 VMware VMA,VMB,VMC Name gen memory OS disk Datadisk OS VM1 1 4gb 200gb 800gb W2012r2 VM2 1 12gb 3tb 200gb RH 7.2 VM3 2 32gb 100gb 1tb WSr2016 VMA na 8gb 100gb 2tb Wsr2012R2 VMB na 16gb 150gb 1tb RH 7,2 VMC na 24gb 500gb 6tb WSr2016 All the Vms use the basic disks .VM1 is protected by using the Bitlocker drive encryption You plan to use Azure site recovery to migrate the VM to azure,which VM can migrate ?

Virtual machine from server1 is VM3 | Virtual machine from server2 are VMA and VMB only

You have an Azure sub that contains two Virtual network named VNet1 and Vnet2.VM connect to the Virtual networks VNET Address subnet Peering VNET1 10.1.0.0/16 10.1.0.0/24 10.1.1.0/26 VNET2 VNET2 10.2.0.0/16 10.2.0.0/24 VNET1 You need to add the address of 10.33.0.0/16 to vnet1 The solution must ensure that the host on VNET1 and VNET2 can communicate Remove VNET1 On the peering connection in VNEt2 allow gateway transit On the peering connection in vnet1 allow gateway transit Create a new Virtual network named Vnet1 Remove peering between VNET1 and VNET2 Add the 10.33.0.0/16 address space to vnet2 Recreate peering between VNET1 and VNET2

Remove peering between VNET1 and VNET2 Add the 10.33.0.0/16 address space to vnet2 Recreate peering between VNET1 and VNET2

``` You have Azure sub that contains resources Name Type VM1 virtual machine VM2 virtual machine LB1 load balancer ``` A web server runs on VM1 and VM2 when you request a webpage pagal.htm from the internet .LB1 balances the web requests to VM1 VM2 and you recieve a response On LB1, you hav rule named Rule1 as shown in rule 1 exhibit You have health probe named probe1 provide the answer to each statement If a user is served pagal,htm from VM1 and then the user refreshes the web browser pagal.htm refreshed from VM1 always (Yes/NO) If you change the protocal of rule1 all the web requests will fail (Yes/No) If you deletes probe1.htm from VM2 LB1 will route to the web requests to VM1 (Yes/No)

If a user is served pagal,htm from VM1 and then the user refreshes the web browser pagal.htm refreshed from VM1 always (NO) If you change the protocol of rule1 all the web requests will fail (Yes) If you deletes probe1.htm from VM2 LB1 will route to the web requests to VM1 (No)

You have an Azure sub named sub1 YOu deploy a linux VM name VM1 to sub 1 You need to monitor the metrics and logs to VM1 A Linus Diagnostic extension(LAD)3.0 B the Azure performence diagnostic extensuion C Azure HDinsight

B the Azure performence diagnostic extensuion

You have Azure sub 1 You create the alerts rule alert1 alert1 criteria is triggered every minute The number of email messages that alert1 will send in an hour =60,20,30 The number of SMS messages that alert1 will send in an hour =12,30,60

The number of email messages that alert1 will send in an hour =60 The number of SMS messages that alert1 will send in an hour =12

``` You have an on-prem Vm named VM1 .The setting for VM1 shown in exhibit You need to ensure that yu can use the disks attached to VM1 as a template for Azure VMs what should you modify on VM1? A The hard drive B The network adapters C The memory D Integration services E the processor ```

A The hard drive

``` Your network contain AD domain named adaturn.com and an Azure AD tenant named adatumonmicrosoft.com Adatum.com contain the user acct in the table Name Member of USER1 Domain admins User2 Schema Admin User3 Incoming forest trust builders User4 Replicators User 5 Enterprise Admins ``` ``` Adatum.onmicrosoft.com contains the user account the table Name Memeber of UserA Global Admin UserB User admin UserC Securiy Admin User D Service Admin ``` You need to implement AD connect.The solution must follow the least privilege which account should you use?

Adatum.com = User 5 Enterprise Admins Adatum.onmicrosoft.com UserA Global Admin

A company is migrating an existing On=prem third party website to Azure.The website is stateless.The company does not have access to source code for the website with not original installers. The number of visitors at the website varies throughtout the year.You need to implement a VM scale set instance. A Use an autoscale setting to define one or more profiles that have one or more autoscale rules B Use an autoscale setting with unlimited maximum number of instances C Create 100 autoscale settings per resource D Scale out by one instance when the average CPU usage of one of the instances in over 80 percent

A Use an autoscale setting to define one or more profiles that have one or more autoscale rules

You mange a solution in Azure that consist of a single app which runs on a virtual machine.Traffic to the app has increased dramatically The app must not exp any downtime and scaling must be dynamically defined. You need to define an auto scale strategy to ensure that the Vm can handle the workload Which three options should you you recommend ? A Create a VM avaialability set B Deploy app automatic horizontal scalling C Deploy app automatic vertical scaling D create a VM scale set E Deploy a custom auto-scale implementation

B Deploy app automatic horizontal scalling D create a VM scale set E Deploy a custom auto-scale implementation

You are developing Azure webjobs You need to recommend a webjob type for each scenerio Which webjob type shloud you recommed? webjob type Triggered Continuous Run on all instances that the web app runs on optionall restrict the webjob to a single instance Run on a single instance that Azure select for load balancing Support remote debugging

Run on all instances that the web app runs on optionall restrict the webjob to a single instance (Continouse) Run on a single instance that Azure select for load balancing ( Triggered) Support remote debugging (Continous)

``` You have a azure sub1 you create several Azure virtual machines in Sub ,All of the VM belong to the same Virtual network You have on prem Hyper V server named server 1 ,server1 hosts a VM named VM1 You plan to replicate VM1 to Azure You need to create additional objects in sub to support the planned deployment Which three objects should you create? A endpoint B Azure traffic manger instance C hyper v site D storage acct E azure Recovery services Vault F replication policy ```

C hyper V site E azure Recovery services Vault F replication policy

``` You have an Azure AD tenant You need to create a conditional access policy that requires all users t use multi factor authontication when they access the Azure portal Which thre settings should you configure? *Assignment * user and group selected Cloud Apps selected *Access control* guest control selected ```

``` *Assignment * user and group selected Cloud Apps selected *Access control* guest control selected ```

From Azure Cosmos DB you create the containers Container id Partition Key Unique Key Container1 /catagory none Container2 /bill /importance Container 1 item1 and item4 only Container2 Item1 Item2 Item3 and Item 4

Container 1 item1 and item4 only | Container2 Item1 Item2 Item3 and Item 4

You have a resource group named RG1 that contains the following A virtual network that contains two subnets named subnet1 and subnet2 An Azure storage acct named contosoa1 An Azure firewall deployed to subnet2 You need to ensure that contososa1 is accessible from submnet over the Azure backbone network what should you do? A implement a virtual network service endpoint B remove the azure firewall C Deploy an Azure firewall to subnet D Create a stored access policy for contosoa1

A implement a virtual network service endpoint

You company have two office Main 2000 users Brach 100 users The company plans to move its on prem infra to the cloud You plan to connect the offices to azure.The connections must meet the reqs Req1 All users must be able to connect to azure concurrently Req2 All traffic from the on-prem network to Azure must be encrypted All devices must not require additional software to connect to Azure You recommen azure express route count for main and site to site VPN for the branch A Req1 and Req2 only B Req2 and Req3 only C Req1 and Reg3 only D Req1 req2 and Req3

D Req1 req2 and Req3

Your company has groups shown below Groups Numeber of member Managers 10 Sales 100 Development 15 The company has an Azure sub that contain an Azure AD tenant named contoso.com An admin named Admin attempts to enable Enterprise state roaming for all of the users in the managers group Admin 1 reports that the options for Enterprise state roaming are unavailable from Azure AD You verify that Admin 1 is assigned Global admin role You need to ensure admin can enable enterprise state roaming. A Purchase an azure AD premium PI lic for each user in the mangers group B Purchase an Azure right management (Azure RMS) lic for each user in the managers grop C Assign an Azure AD priviledged identity management (PIM) role to admin1 D Enforse Azure multifactor Authentication (MFA) for Admin 1

A Purchase an azure AD premium PI lic for each user in the mangers group

you have several Azure VMs on a virtual network named Vnet1.Vnet has two subnets that have 10.2.0.0/24 and 10.29.0/24 address space you configure an Azure storage acct as shown Options: The virtual machines on the 10.2.9.0/24 subnet will have network connectivity to the file (always) Azure backup will be able to back up the unmanaged hard disks of the virtual machines in (Never)

Options: The virtual machines on the 10.2.9.0/24 subnet will have network connectivity to the file (always) Azure backup will be able to back up the unmanaged hard disks of the virtual machines in (Never)

you plan to create a virtual machine as shown in the summery.

The performance of the operating system disk : is gauranteed to remain the same VM1 will use for data protection: secure enclaves A secure enclave is a protected region of memory within the SQL Server process, and acts as a trusted execution environment for processing sensitive data inside the SQL Server engine. A secure enclave appears as a opaque box to the rest of the SQL Server and other processes on the hosting machine.

Use the drop down menus to select the answer choices that complete each statement based on the information in the graphic The virtual machines on 10.2.9.0/24 subnet will have network connectivity to the file share in the storage account (always/never) Azure backup will be able to back up the unmanaged hard disks of the virtual machines in (always/never)

The virtual machines on 10.2.9.0/24 subnet will have network connectivity to the file share in the storage account (always) Azure backup will be able to back up the unmanaged hard disks of the virtual machines in (never)

``` You have an azure sub named sub1 that contains a virtual network named VNET1 User Role User1 owner User2 security Admin User3Network contributor which user can perform each configuration? Add a subnet to vnet1 Assign a user the reader role to Vnet1 ```

Add a subnet to vnet1 ( user1 only) | Assign a user the reader role to Vnet1 ( User1 and user 2 only)

You plan to deploy live virtual machines to a virtual network subnet, Each VM will have a public IP address and a private IP address Each virtual machine require the same inbound and outbound security rules What is the min number of network interface and network security groups that you require? Minimum number of network interfaces 1,2,5 Minimum number of network security group 1,2.4

Minimum number of network interfaces 5 | Minimum number of network security group 1

You have VMS that run a mission critical application You need to ensure that the VMS never experience down time What should you recommend ? each solution may be used once or not at all Solutions Fault domain Update domain Availability set Scale sets Scenario Maintain application performence across identical VMs Maintain app availabity when an Azure datacenter fails Maintain app performance accross different VMS ----------------------------------------------------------- An update domain is a logical group of underlying hardware that can undergo maintenance or be rebooted at the same time. As you create VMs within an availability set, the Azure platform automatically distributes your VMs across these update domains. ------------------------------------------------------ A fault domain is a set of hardware components that share a single point of failure. To be fault tolerant to a certain level, you need multiple fault domains at that level. For example, to be rack fault tolerant, your servers and your data must be distributed across multiple racks

Scenario Maintain application performence across identical VMs (Availabilty set) Maintain app availabity when an Azure datacenter fails (update domain) Maintain app performance accross different VMS (Fault domain)

You need to implement Role1 Which command should you run before you create Role1 ? Get AzureRmRoleAssignmnet name reader convert to xml

Get AzureRmRoleAssignmnet name reader convert to xml

``` Name region VM5 east US 2 VM6 East US2 VM7 West US VM8 WestUS2 All the VMs are configured to use premimium disks and are accessible from the internet ``` VM1 and VM2 are in an availability set named AVSET1. VM3 and VM4 are in the same Availabilty zone and are in an availability set named AVSET2. VM5 and VM6 are in different availability zones. statements : VM1 is eligible for a service level Agreement (SLA) of 99.95 (yes/No) VM3 is eligible for a service level Agreement of 99.99% (Yes/No) VM5 is eligible for a service level Agreemant of 99.99%(Yes/No)

VM1 is eligible for a service level Agreement (SLA) of 99.95 (No) VM3 is eligible for a service level Agreement of 99.99% (Yes) VM5 is eligible for a service level Agreemant of 99.99%(No)

You need to configure the Azure express route cirtcuits How should you configure Azure expressroute rounting? Configurations Use BGP communities to configure BGPs Local Preference Use BGP to append the private AS numbers to the advertised prefixes Use BGP to append the public AS numbers to the advertised prefixes Routing from A datum to azure? Routing from microsoft online service to A,Datum?

Routing from A datum to azure? Use BGP to append the private AS numbers to the advertised prefixes Routing from microsoft online service to A,Datum Use BGP communities to configure BGP Local Preference

Your company has an office in Seattle Your Azure Sub that contains a virtual network VNET1 .You create a siste-to site VPN between the seattle office and vnet1 VNET1 contains the subnets shown below NAme Ip Address space Subnet1 10.1.1.0/24 Gateway subnet 10.1.200.0/24 you need to redirect all internet bound traffic from subnet1 to the Seattle office what should you create? A A route for subnet1 that usese the virtula network gateway as the next hop. B A route for Gateway subnet that usese the virtual network gateway as the next hop. C A route for Gateway subnet that useses the local network gateway as the next hop. D A Route for subnet1 that usese the local network as the next hop.

B A route for gateway subnet that usese the virtual network gateway as the next hop.

You have an Azure web app named App1 that has the following configs The app runs on three instances The minimum number of instances is one The Max number of instances is five You create the following autoscale rules for App1 decrease the instances count by one when the CPU % is less then 30 Decrease the instance count by one when the memory % is less than 50 Increase the instance count by one when the memmory % is greater than 75 You expect App1 to be utilize as shown Day Hour CPU Memory M-F 8-23:59 85% 40% M-F 00.0-7:59 25% 60% S-S 00.0-23:59 30% 55% You need to identify the max number of instances that will be used by App1 during the expected periods of utilization What should you identify? M-F 8-23:59 (1,2,3,4,5) M-F 00.0-7:59 (1,2,3,4,5) S-S 00.0-23:59 (1,2,3,4,5)

M-F 8-23:59 (5) M-F 00.0-7:59 (5) S-S 00.0-23:59 (5)

You have an Azure web App named App1 that contains the following autoscale conditions scale out : When ASP RG% b4a5 average cpu % >=50 increase count by 1 OR ASP RG% b4a5 average cpu % >=60 increase count by 2 scale in : When ASP RG% b4a5 average cpu % >=30 decrease count by 1 If the webApp1 CPU utilization is 10 % at 6:00,at 6:25 webApp1 will have: (1,2,3,4,) If the webApp1 CPU utilization is 70 % at 6:00,at 6:25 webApp1 will have: (4,5,6,7)

If the webApp1 CPU utilization is 10 % at 6:00,at 6:25 webApp1 will have: (3) If the webApp1 CPU utilization is 70 % at 6:00,at 6:25 webApp1 will have: (6) At 6 the default 4 instances are running.The CPU utilization average 10% for 25 min.The scale in rules states that 1 instance should be removed when CPU utilization average 30% or less over a 0 min peroid . At 6 the default 4 instances are running.The CPU utilization average 70% for 25 min .The scale out rules states that 3 instances should be added when CPU utilization average 70% or more over a 20 min period.

``` Refer question 64 part 5 Yu have an Azure cosmos DB Db that contains a container named Container1. The partition key for container1 is set to /day Container1 contains the items in the follow Item1=Id=1,day=mon value 10 item2 id=2,day= mon, value =15 item3 id=2,day= tue, value =10 item4 id=2,day= wed, value =15 ``` You need to programatically query Azure cosmos DB and retrieve Item1 ,2 only You set the enable cross partition query property to false Does this neet the goal? A yes B no

B no Return item1 only as enable cross partition quesry property to false,if enable crosspartition quesry is set to true it will return item1,3

ref q65 part 5(121page) ``` above question select day from c where c.value =10 or c,value =15 you set the enable cross partition query property to true Does this neet the goal? A yes B no ```

Does this neet the goal? B no returns item1,2,3,4

ref q65 part 5(121page) above question select id from c where c.day =10 or c.day =Mon you set the enable cross partition query property to true Does this neet the goal? A yes B no

Does this neet the goal? A yes returns item1,2

From Azure cosmo Db you create the containers Container Id Partition key Unique Key Container1 /catagory None Container2 /Id /Importance You plan to add to the cosmo DB Item1,2,3,4 You need to identify which items can be added successfully to container1 container2 What should you identify for each container? ``` Container1 : Item2 only Item1 and Item2 only Item3 and Item4 only Item2,Item3 and Item4 only Item 1,item2,item3 and Item4 ``` ``` Container2: Item4 only Item2 and Item4 only Item3 and Item4 only Item1,Item3 and Item4 only Item 1,item2,item3 and Item4 ```

Container1 : Item 1,item2,item3 and Item4 Container2: Item2 and Item4 only

ref q65 part 5(121page) ``` above question select id from c where c.day =10 or c.day =Mon ++++++++ or C,day= "tue" ++++++++++++++ you set the enable cross partition query property to False ``` Does this meet the goal? A yes B no

Does this meet the goal? ``` B no (see false in the cross partition property) ``` The difference of answer is no due to inclusion of "Tues" and above its yes as only monday was asked in the above question so consider that tuesday is the difference

You have an Azure SQL Db named DB1 You plan to create the followingtables in DB1 by using the codes Table 1 , Table 2, Table 3, Table4 You need to identify which table must be created last

Answer : Table 2

``` You have an Azure sub that contain resource groups Name Region RG1 west Us RG2 WestUs RG3 East US You have Azure SQL servers Name Region In RG sql1 westUS RG1 SQL2 east US RG2 SQL3 West US Rg3 SQL4 WestUS RG1 You need to create Azure SQL Db named DB1 on SQL1 in the elastic pool named Pool1 You need to create an Azure SQL DB named DB2 in Pool1 ``` Where should you deploy DB2 A SQL1 B SQL2 C SQL3 D SQL4

A SQL1 Explanation :The DB in an elastic pool are on a single Azure SQL DB server and share a set number of resources at a set price

Refer q71 ``` you have an Azure web App named App1 that contains the folowing autoscale conditions The default auto created scale condition has a scale mode that has scale to a specific instance count set of 2 Scale condition 1 has the folowing configs Scale mode :scale to a specific instance count Instance count :3 Schedule: specify start /end dates Start date :August 1 2019 6:00 End date :september 1 209,18:00 scale condition 2 has the following configs Scale mode :scale to a specific Instance count instance count:4 Schedule:repeat specific days Repeat every :Monday start time:6:00 End time : 18:00 Scale condition 3 has following configs Scale mode :scale to a specific Instance count:5 Schedule :repeat specific days Repeat every Monday ``` Start time: 15:00 End time:20:00 You need to identify the number of running App1 intances What should you identify Number of App1 instances that run on monday August 5 ,2019 at 17:00 (2,3,4,5) Number of App1 instances that run on Monday ,August 3 2020 at 16:00 (2,3,4,5)

Number of App1 instances that run on monday August 5 ,2019 at 17:00 (5) Number of App1 instances that run on Monday ,August 3 2020 at 16:00 (5)

You need to create a function app named corp10217507n1 that support sticky sessions.The solution must minimize the Azure related costs of the App service plan A From the Azure portal menu,select Create a resource B In the new page select Compute> function App C Enter ,or select the following information in the basics tab accept the default for the remaining settings,and then select Next :Hosting Resource group:select the current resource group or create a new one Function App name :corp10217507n1 Publish:code Runtime stack: .net Core D In the hosting Tab ,enter or select the following accept the default for the remaining settings and then seleect creta Operationg system:Linux Plan type:App service plan SKU and Size:F1 (shared Infrastructure)

ABCD

Your company has an Azure container registrery named Registery1.You have an Azure VM named Server1 that runs Windows server 2019.From Server 1 you create a container image named image1.You need to add images1 to Registery1.Which command should you run on server1? Docker ( Push )-----Registery1.azurecr.io (/image1) AZcopy ----Registry1.onmicrosft.com Robocopy -----Https://regitry1.onmicrosoft.com Esential----\\registry1.blob.core.windows.net

Docker ( Push )-----Registery1.azurecr.io (/image1) An azure container registry stores and manges private docker container images,similar to the way Docker HUB stores publc Docker images.You can use the docker command line interface (dockerCLI)for login ,push,pull and other operations on your container registry

An Azure sub contains the Azure sql servers Name Region In RG SQL1 West US RG1 SQL2 West Us RG1 The sub contains elastic pools Name On Azure SQL server Pool1 SQL1 Pool2 SQL1 Pool3 SQl2 The sub contains he Azure sql DBs Name On azure SQL server Pool DB1 SQl1 Pool1 DB2 Sql1 Pool2 DB3 SQL1 None Statements: DB1 can be removed from Pool1 and added to pool2 (Yes/No) DB2 can be removed from Pool2 and added to Pool3(Yes/No) DB3 can be added to Pool1(Yes/No)

Statements: DB1 can be removed from Pool1 and added to pool2 (Yes) DB2 can be removed from Pool2 and added to Pool3 (Yes) DB3 can be added to Pool1 (Yes)

You have an Azure Sub that contains the Azure VMs ``` Name OS Location VM1 Win 2012 R2 East US VM2 Win 2016 East US VM3 Win 2019 West US VM4 Win Ubuntu Server 18,4 East US ``` You create an Azure key vault Vault1 in the East US location You need to identify which VMs can enables Azure Disk Encryption by using Vault 1 ``` Which VM should you identify A VM2 and VM3 only B VM1,VM2 And VM4 only C VM1 VM2 and VM3 only D VM3 only Correct ```

B VM1,VM2 And VM4 only Your key vault and VMs must reside in the same Azure region and subscription

A company is migrating an existing on-prem third party website to Azure .The website is stateless.The company does not have access to the source code for the website.They have the original installer.The number of visitors at the website varies throughout the year,The on prem infra was resized to accommadate peaks but the exra capacity was not used. You need to implement a VM scale instance What should you do? A Use a webhook to log autoscale failures B Use and autoscale setting to scale instancea vertically C Use only Default diagnostics metrics to trigger autoscalling D Use Azure Monitor to create autoscale setting using custom metrics

D Use Azure Monitor to create autoscale setting using custom metrics

You have an Azure Sub that contains the resources Name Description Blob1 Blob Container in an Azure storage acct Share1 File shaer in an Azure Storage acct Queue1 Queue in an Azure Storage acct Table1 Table in an Azure Storage acct Vault1 Recovery Services Vault Database1 Azure SQl Database Datalake1 Azure Sata lake storage Gen 2 acct Workspace1 Azure log Analytics workspace Which plan to preate an Azure event hub. You need to retaian the message sent to the event Hub for 30 Days Which location should you use for storage? A datalake1 B Table1 C Queue1 D Workspace1

A datalake1 Azure event hubs enables you to automatically capture the streaming data in event hubs in an Azure Blob storage or Azure data lake storage Gen1 or Gen2 account of your choice

You have a server named server1 that runs windows Server 2019 .Server 1 is a container host. You are creating a dockerfile to build a container image You need to add a file named file1.txt from server1 to a folder named C:\folder1 in the container image. You should add the following line in the to the dockerfile COPY File1.Txt C:/Folder1/ You build the container image Does this meet the goal? A yes B No

A yes

You have an Azure sub named sub1 that contains an Azure virtual network named VNET1 VNET1 connects to your on-prem network by using a site-to-site VPN ,The solution must minimize cost. Which three actions should you perform? A Create a VPN gateway that uses the VPNGW1 SKU B Create a connection C Create a local site VPN gateway D Create a gateway subnet E Create a VPN gateway that uses the basic SKU

ACD the correct order D Create a gateway subnet A Create a VPN gateway that uses the VPNGW1 SKU C Create a local site VPN gateway

You have an Azure web App named App1 that is configured to run between two and five instances.There are currently three instances of App1 running App1 has following autoscale rules: Increase the instance count by one when the CPU % is greater or equal to 80 Decrease the instance count by one when the CPU % is less than or equal to 60. You are evaluationg the following CPU % of utilization for App1 ``` 60% 55% 50% 45% You need to identify which utilization will cause App1 to scale in ``` A 45% only 45%and 50% only C 50% and 55% only D 45%,50% and 55% only

D 45%,50% and 55% only

You have resource group named RG5.The access controls for RG5 are configured as shown in the following exhibit Network contributor ->User1 ---network contributor this resource Owner ->Prvi User -> Owner ----- subs Security admin--> User2 ---> security admin this resource ``` Which users can deploy virtual networks to RG5? A User1,User2 and Prvi B Only User1 and User2 C Only User1 D Only prvi and User1 ```

D Only prvi and User1

You have a server server 1 that runs win server 2019 ,server 1 is a container host.You are creating a dockerfile to build a container image You need to add a file named File1.txt from Server1 to a folder named C:\folder1 in the container image Solution you add he following line to the dockerfile Copy-item file1.txt C: \folder1\file1.txt You then build the container image Does this meet the goal? A Yes B No

B No

You have a server named Server1 that runs Windows Server 2019 .Serrver1 is a container host.You are creating a dockerfile to build a container image You need to add a file named File1.txt from Server1 to a Folder named C:\Folder1 in the container image. Solution : you add the following line to the dockerfile. Copy file1.txt/folder1/ You then build the container image Does this meet the goal? A yes B No

A yes

RefQ84 (158) You need to create a virtual network named VNET1008 that contains three subnets named Subnet0 ,Subnet1,and Subnet2 .The solution must meet the following requirements Connections from any of the subnets to the internet must be blocked Connections from the internet to any of the subnets must be blocked The number of the network security groups (NSGs) and NSG rules must be minimized. What should you do from the Azure portal? A On the top left hand side of the screen click create a resource > networking > Virtual Network B,Enter or select the following information ,accept the defaults for the remaining setting and then selecet create Name:VNET1008 Address space 10.0.0.0/16 Resource group : select the current resource group or create a new one Subnet name :subnet0 subnet address range: 10.0.0.0/24 C Select the newly created Virtual network D Under setting select Subnets and click +subnet E Enter or select the following information ,Accept the default for the remaining settings and then select Ok Name :subnet 1 Address range: 10.0.1.0/24 F repeat step above for subnet2 G On the search bar H In the search box at the top of the Azure portal ,begin typing Network security groups,When Network security group appears in the search result selct it I click +add J enter my NSG as the network security name and select the current resource group or create a new one Click Create K Select the newly network secuirty group MyNSG L Under setting select Outbound security rules and click +add M Enter or select the following information ,accept the default for the remaining settings and then select Add -Source Virtual Network -Destination service Tag _destination service Tag internet -Destination port range - protocal :Any Actuion : Deny Priority:1000 -mname: Denyall to the the tubes N Go back and select the virtual network VNET1008 O Under setting ,select Subnets,click on subnet0 and select My NSG as the network security group click save P Repeat the step above for subnet1 and subnet2

Answer: | abcdefghijklmnop

You have an Azure resource manager template for a virtual machine named Template1 select yes if the statement is true Statement When you deploy Template1 you are prompted for a resourece grp (Yes/No) When you deploy Template1 you are prompted for the windows Operating system version (Yes/No) When you deploy Template1 you are promted for a location(Yes/No)

When you deploy Template1 you are prompted for a resourece grp (Yes) When you deploy Template1 you are prompted for the windows Operating system version (No) When you deploy Template1 you are promted for a location(Yes)

You have an Azure AD tenant named contoso.com.The tenant contains the users shown in the following table. Name Memberof User1 Group1 User1 Group2 The tenant contains computer that run win 10. the computers are configured as shown in the following table Name memeberof Computer1 GroupA Computer2 GroupA Computer3 GroupB You enable enterprise state roaming in contoso.com for group1 and GroupA The each of the following statements select yes/no) If user1 modified the desktop backgroud of comp1 ,user1 will see the changed backgroup whne signing into the computer 3 (Yes/No) If user 2 modified the desktop background of comp1,user2 will see the changed backgroud when signing into comp2 (Yes/No) If user1 modified the desktop background of comp3 ,user1 will see the changed background when signing into comp2 (yes/No)

If user1 modified the desktop backgroud of comp1 ,user1 will see the changed backgroup whne signing into the computer 3 (Yes) If user 2 modified the desktop background of comp1,user2 will see the changed backgroud when signing into comp2 (No) If user1 modified the desktop background of comp3 ,user1 will see the changed background when signing into comp2 (yes)

Testlet 16 Case study: Contoso LTd is a manufacturing company that has offices worldwide.Contoso products are manufactured by using blueprint files that the company author and maintains Existing environmnet: Contoso uses multiple types of servers for business operations,including the following File Servers Domain controllers Microsoft SQL Server servers Your network contains an AD forest named contoso.com.All servers and client computers are joined to AD You have a public facing application named App1 ,App1 is comprised of the following three tiers: A SQL database A web front end A processing middle tier each tier comprised of 5VMs ,user access the web front end by using HTTPS only Requirements Planned changes Contoso plans to implement the folowing changes to the infrastructure Move all the tiers of App1 to Azure Move the existing product blueprint files to Azure blob storage Create a hybrid directory to support an upcoming MS 365 migration project Tech Reqs Move all the virtual machines for App1 to Azure Minimize the number of open ports between the App1 tiers Ensure that all the virtual machines for App1 are protected by backups Copy the blueprint files to Azure over the internet Ensure that the blueprint files is secured and temporary Prevent user password or hashes of password from beng stored in Azure Use unmanaged standard storage for the hard disk of the virtual machines User Reqs Contoso idenrifies the following Ensure that users who are part of a group named pilot can join devices to Azure AD Designate a new user named Admin1 as the service admin for the Azure sub Admin 1 must recieved email alerts regarding service outages Ensure that a new user named User3 can create network objects for the Azure sub ``` Q1 you need to implement a backup solution for App1 after the App is moved. What should you cretae firts? A An azure backup server B A rocovery services vault C A backup policy D A recovery plan ``` Q2 You need to identify the storage reqs for contoso? select yes/no for the statement Contoso requires a storage acct that support Blob storage (Yes/No) Contoso requires a storage acct that support Azure table storage (Yes/No) Contoso requires a storage acct that support Azure file storage (Yes/No) Q3 you need to move blueprint files to Azure ,what should you do? A Use the Azure import/export service B User Azure storage explorer to copy the files C Generate a shared access signature (SAS) map a drive and then copy the files bythe using file explorer D Generate an access key ,map a drive and then copy the files by using file explore Q4 You need to recommend a solution for App1 ,the solution must meet technical reqs select the options Number of virtual networks(1,2,3) Number of subnets per virtual network(1,2,3) Q5 You have Azure sub that contains the web App ``` Nmae Runtime stack WebApp1 JavaSE WebApp2 Ruby2.6 WebApp3 Python 3,7 WebApp4 AS.net V4.7 For which Web App can you configure a Webjob? ``` A Webapp4 B WebApp3 C WebApp1 D WebApp2 Q6 you create a container image named Image1 on a developer workstation.To which storage type should you upload image1? A Azure container registery B An Azure storage acct that cotains a blob container C An Azure storage acct that contains a file share D Azure container instances Q7 you need to recommend an identity solution that meets the tech reqs What should you reccomned ? A cloud only User account B Password hash synchronization and single sign on (SSO) C Pass through Authoentication and Single sign on D Federated single sign on (SSO)and Actove directory federation services ( ADFS)

Q1 B A rocovery services vault Q2 Contoso requires a storage acct that support Blob storage (Yes) Contoso requires a storage acct that support Azure table storage (No) Contoso requires a storage acct that support Azure file storage (Yes) Q3 B User Azure storage explorer to copy the files ``` Q4 select the options Number of virtual networks(1) Number of subnets per virtual network(3) Q5 A Webapp4 ``` Q6 A Azure container registery Q7 C Pass through Authoentication and Single sign on