Practice Test Free
  • QUESTIONS
  • COURSES
    • CCNA
    • Cisco Enterprise Core
    • VMware vSphere: Install, Configure, Manage
  • CERTIFICATES
No Result
View All Result
  • Login
  • Register
Quesions Library
  • Cisco
    • 200-301
    • 200-901
      • Multiple Choice
      • Drag Drop
    • 350-401
      • Multiple Choice
      • Drag Drop
    • 350-701
    • 300-410
      • Multiple Choice
      • Drag Drop
    • 300-415
      • Multiple Choice
      • Drag Drop
    • 300-425
    • Others
  • AWS
    • CLF-C02
    • SAA-C03
    • SAP-C02
    • ANS-C01
    • Others
  • Microsoft
    • AZ-104
    • AZ-204
    • AZ-305
    • AZ-900
    • AI-900
    • SC-900
    • Others
  • CompTIA
    • SY0-601
    • N10-008
    • 220-1101
    • 220-1102
    • Others
  • Google
    • Associate Cloud Engineer
    • Professional Cloud Architect
    • Professional Cloud DevOps Engineer
    • Others
  • ISACA
    • CISM
    • CRIS
    • Others
  • LPI
    • 101-500
    • 102-500
    • 201-450
    • 202-450
  • Fortinet
    • NSE4_FGT-7.2
  • VMware
  • >>
    • Juniper
    • EC-Council
      • 312-50v12
    • ISC
      • CISSP
    • PMI
      • PMP
    • Palo Alto Networks
    • RedHat
    • Oracle
    • GIAC
    • F5
    • ITILF
    • Salesforce
Contribute
Practice Test Free
  • QUESTIONS
  • COURSES
    • CCNA
    • Cisco Enterprise Core
    • VMware vSphere: Install, Configure, Manage
  • CERTIFICATES
No Result
View All Result
Practice Test Free
No Result
View All Result
Home Practice Exam Free

AZ-303 Practice Exam Free

Table of Contents

Toggle
  • AZ-303 Practice Exam Free – 50 Questions to Simulate the Real Exam
  • Free Access Full AZ-303 Practice Exam Free

AZ-303 Practice Exam Free – 50 Questions to Simulate the Real Exam

Are you getting ready for the AZ-303 certification? Take your preparation to the next level with our AZ-303 Practice Exam Free – a carefully designed set of 50 realistic exam-style questions to help you evaluate your knowledge and boost your confidence.

Using a AZ-303 practice exam free is one of the best ways to:

  • Experience the format and difficulty of the real exam
  • Identify your strengths and focus on weak areas
  • Improve your test-taking speed and accuracy

Below, you will find 50 realistic AZ-303 practice exam free questions covering key exam topics. Each question reflects the structure and challenge of the actual exam.

Question 1

You have an Azure subscription that contains the storage accounts shown in the following table.
 Image
All storage accounts contain blobs only.
You need to implement several lifecycle management rules for all storage accounts.
What should you do first?

A. Upgrade contosostorage1 and contosostorage2 to General Purpose V2 accounts.

B. Move 5 TB of blob data from contosostorage3 to contosostorage4.

C. Move 5 TB of blob data from contosostorage1 to contosostorage2.

D. Recreate contosostorage5 as a General Purpose V2 account.

 


Suggested Answer: A

Microsoft recommends that you use a general-purpose v2 storage account for most scenarios. You can easily upgrade a general-purpose v1 or an Azure Blob storage account to a general-purpose v2 account with no downtime and without the need to copy data.
References:
https://docs.microsoft.com/en-us/azure/storage/common/storage-scalability-targets

Question 2

You have the following Azure Active Directory (Azure AD) tenants:
✑ Contoso.onmicrosoft.com: Linked to a Microsoft 365 tenant and syncs to an Active Directory forest named contoso.com by using password hash synchronization
✑ Contosoazure.onmicrosoft.com: Linked to an Azure subscription named Subscription1
You need to ensure that you can assign the users in contoso.com access to the resources in Subscription1.
What should you do?

A. Associate Subscription1 to contoso.onmicrosoft.com. Reassign all the roles in Subscription1.

B. Configure the existing Azure AD Connect server to sync contoso.com to contosoazure.onmicrosoft.com.

C. Configure contoso.onmicrosoft.com to use pass-through authentication.

D. Configure contosoazure.onmicrosoft.com to use pass-through authentication.

 


Suggested Answer: A

Reference:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/plan-connect-topologies#multiple-forests-multiple-sync-servers-to-one-azure-ad-tenant

Question 3

You create a new Azure subscription. You create a resource group named RG1. In RG1, you create the resources shown in the following table.
 Image
You need to configure an encrypted tunnel between your on-premises network and VNET1.
Which two additional resources should you create in Azure? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

A. a site-to-site connection

B. a VPN gateway

C. a VNet-to- VNet connection

D. a local network gateway

E. a point-to-site configuration

 


Suggested Answer: BD

A Site-to-Site VPN gateway connection is used to connect your on-premises network to an Azure virtual network over an IPsec/IKE (IKEv1 or IKEv2) VPN tunnel.
This type of connection requires a VPN device, a local network gateway, located on-premises that has an externally facing public IP address assigned to it.
Finally, create a Site-to-Site VPN connection between your virtual network gateway and your on-premises VPN device.
References:
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-portal

Question 4

You develop an entertainment application where users can buy and trade virtual real estate. The application must scale to support thousands of users.
The current architecture includes five Azure virtual machines (VM) that connect to an Azure SQL Database for account information and Azure Table Storage for backend services. A user interacts with these components in the cloud at any given time.
✑ Routing Service `" Routes a request to the appropriate service and must not persist data across sessions.
✑ Account Service `" Stores and manages all account information and authentication and requires data to persist across sessions
✑ User Service `" Stores and manages all user information and requires data to persist across sessions.
✑ Housing Network Service `" Stores and manages the current real-estate economy and requires data to persist across sessions.
Trade Service `" Stores and manages virtual trade between accounts and requires data to persist across sessions.
 Image
Due to volatile user traffic, a microservices solution is selected for scale agility.
You need to migrate to a distributed microservices solution on Azure Service Fabric.
Solution: Create a Service Fabric Cluster with a stateless Reliable Service for Routing Service. Create stateful Reliable Services for all other components.
Does the solution meet the goal?

A. Yes

B. No

 


Suggested Answer: A

 

Question 5

You have an Azure subscription that contains an Azure Service Fabric cluster and a Service Fabric application named FabricApp.
You develop and package a Service Fabric application named AppPackage. AppPackage is saved in a compressed folder named AppPackage.zip.
You upload AppPackage.zip to an external store.
You need to register AppPackage in the Azure subscription.
What should you do first?

A. Run the New-ServiceFabricApplication cmdlet.

B. Repackage the application in a file named App.sfpkg.

C. Create a new Service Fabric cluster.

D. Copy AppPackage.zip to a blob storage account.

 


Suggested Answer: B

References:
https://docs.microsoft.com/en-us/azure/service-fabric/service-fabric-package-apps#create-an-sfpkg

Question 6

You create a new Azure subscription. You create a resource group named RG1. In RG1, you create the resources shown in the following table.
 Image
You need to configure an encrypted tunnel between your on-premises network and VNET1.
Which two additional resources should you create in Azure? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

A. a VPN gateway

B. a site-to-site connection

C. a point-to-site configuration

D. a VNet-to-VNet connection

E. a local network gateway

 


Suggested Answer: AE

A Site-to-Site VPN gateway connection is used to connect your on-premises network to an Azure virtual network over an IPsec/IKE (IKEv1 or IKEv2) VPN tunnel.
This type of connection requires a VPN device, a local network gateway, located on-premises that has an externally facing public IP address assigned to it.
Finally, create a Site-to-Site VPN connection between your virtual network gateway and your on-premises VPN device.
Reference:
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-portal

Question 7

You have an Azure subscription that contains a resource group named RG1. RG1 contains 100 virtual machines.
Your company has three cost centers named Manufacturing, Sales, and Finance.
You need to associate each virtual machine to a specific cost center.
What should you do?

A. Add an extension to the virtual machines

B. Modify the inventory settings of the virtual machine

C. Assign tags to the virtual machines

D. Configure locks for the virtual machine

 


Suggested Answer: C

You apply tags to your Azure resources to logically organize them into a taxonomy. Each tag consists of a name and a value pair. After you apply tags, you can retrieve all the resources in your subscription with that tag name and value.
Tags enable you to retrieve related resources from different resource groups.
This approach is helpful when you need to organize resources for billing or management.
Reference:
https://docs.microsoft.com/en-us/azure/billing/billing-getting-started
https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-using-tags

Question 8

SIMULATION -
Click to expand each objective. To connect to the Azure portal, type https://portal.azure.com in the browser address bar.
 Image
 Image
 Image
 Image
 Image
 Image
When you are finished performing all the tasks, click the `ËœNext' button.
Note that you cannot return to the lab once you click the `ËœNext' button. Scoring occur in the background while you complete the rest of the exam.
Overview -
The following section of the exam is a lab. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.
Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn't matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.
Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.
Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.
To start the lab -
You may start the lab by clicking the Next button.
Your company plans to host in Azure the source files of several line-of-business applications.
You need to create an Azure file share named corpsoftware in the corpdata7523690n1 storage account. The solution must ensure that corpsoftware can store only up to 250 GB of data.
What should you do from the Azure portal?

 


Suggested Answer: See explanation below.

Step 1: Go to the Storage Account blade on the Azure portal:
Reference Image
Step 2: Click on add File Share button:
Reference Image
Step 3: Provide Name (corpdata7523690n1) and Quota (250 GB).
Reference Image
References: alt=”Reference Image” />
Step 2: Click on add File Share button:
Reference Image
Step 3: Provide Name (corpdata7523690n1) and Quota (250 GB).
<img src=”https://www.examtopics.com/assets/media/exam-media/03862/0031500001.png” alt=”Reference Image” />
References:
https://docs.microsoft.com/en-us/azure/storage/files/storage-how-to-create-file-share

Question 9

Note: This question is part of series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are planning to create a virtual network that has a scale set that contains six virtual machines (VMs).
A monitoring solution on a different network will need access to the VMs inside the scale set.
You need to define public access to the VMs.
Solution: Use Remote Desktop Protocol (RDP) to connect to the VM in the scale set.
Does the solution meet the goal?

A. Yes

B. No

 


Suggested Answer: A

Instead, deploy a standalone VM that has a public IP address to the virtual network.

Question 10

You have an Azure subscription named Subscription1 that contains an Azure virtual network named VNet1. VNet1 connects to your on-premises network by using
Azure ExpressRoute.
You need to connect VNet1 to the on-premises network by using a site-to-site VPN. The solution must minimize cost.
Which three actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

A. Create a gateway subnet.

B. Create a VPN gateway that uses the VpnGw1 SKU.

C. Create a connection.

D. Create a local site VPN gateway.

E. Create a VPN gateway that uses the Basic SKU.

 


Suggested Answer: CDE

Reference:
https://docs.microsoft.com/en-za/archive/blogs/canitpro/step-by-step-configuring-a-site-to-site-vpn-gateway-between-azure-and-on-premise

Question 11

Your on-premises network contains several Hyper-V hosts.
You have a hybrid deployment of Azure Active Directory (Azure AD).
You create an Azure Migrate project.
You need to ensure that you can evaluate virtual machines by using Azure Migrate.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

A. Deploy the Azure Migrate appliance to an on-premises Hyper-V host.

B. Assign the migration account to the Administrators group on each Hyper-V virtual machine.

C. Deploy the Microsoft Monitoring Agent to each Hyper-V host.

D. Assign the migration account to the Administrators group on each Hyper-V host.

E. Deploy the Microsoft Monitoring Agent to each Hyper-V virtual machine.

F. Deploy the Azure Migrate appliance as an Azure virtual machine.

 


Suggested Answer: AE

E: On each machine you want to analyze, install the following agents:
✑ The Microsoft Monitoring agent (MMA).
✑ The Dependency agent.
A: You create the appliance VM.
Azure Migrate: Server Assessment uses a lightweight Azure Migrate appliance. The appliance performs VM discovery and sends VM configuration and performance metadata to Azure Migrate. The appliance can be set up by deploying a VHD file that can be downloaded from the Azure Migrate project.
You set up the appliance on a Hyper-V VM, as follows:
1. Provide an appliance name and generate an Azure Migrate project key in the portal.
2. Download a compressed Hyper-V VHD from the Azure portal.
3. Create the appliance, and check that it can connect to Azure Migrate Server Assessment.
4. Configure the appliance for the first time, and register it with the Azure Migrate project using the Azure Migrate project key.
Note: Details –
1. Extract the zipped VHD file to a folder on the Hyper-V host that will host the appliance VM. Three folders are extracted.
2. Open Hyper-V Manager. In Actions, click Import Virtual Machine.
3. In the Import Virtual Machine Wizard > Before you begin, click Next.
4. In Locate Folder, specify the folder containing the extracted VHD. Then click Next.
5. In Select Virtual Machine, click Next.
6. In Choose Import Type, click Copy the virtual machine (create a new unique ID). Then click Next.
7. In Choose Destination, leave the default setting. Click Next.
8. In Storage Folders, leave the default setting. Click Next.
9. In Choose Network, specify the virtual switch that the VM will use. The switch needs internet connectivity to send data to Azure.
10.In Summary, review the settings. Then click Finish.
11.In Hyper-V Manager > Virtual Machines, start the VM.
Reference:
https://docs.microsoft.com/en-us/azure/migrate/tutorial-discover-hyper-v#set-up-the-appliance
https://docs.microsoft.com/en-us/azure/migrate/migrate-support-matrix-hyper-v#agent-based-dependency-analysis-requirements

Question 12

Your company plans to develop an application that will use a NoSQL database. The database will be used to store transactions and customer information by using
JSON documents.
Which two Azure Cosmos DB APIs can developers use for the application? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.

A. Gremlin (graph)

B. MongoDB

C. Cassandra

D. Core (SQL)

E. Azure Table

 


Suggested Answer: AD

D: The SQL API supports cross-document transactions expressed as JavaScript-stored procedures and triggers. Transactions are scoped to a single partition within each container and executed with ACID semantics as “all or nothing,” isolated from other concurrently executing code and user requests. If exceptions are thrown through the server-side execution of JavaScript application code, the entire transaction is rolled back.
A: Azure Cosmos DB is Microsoft’s globally distributed, multi-model database service. Where multi-model means Azure Cosmos DB supports multiple APIs and multiple data models, different APIs use different data formats for storage and wire protocol. For example, SQL uses JSON, MongoDB uses BSON, Table uses
EDM, Cassandra uses CQL, Gremlin uses JSON format. As a result, we recommend using the same API for all access to the data in a given account.
Each API operates independently, except the Gremlin and SQL API, which are interoperable.
Reference:
https://docs.microsoft.com/en-us/azure/cosmos-db/faq

Question 13

You are designing an Azure solution.
The solution must meet the following requirements:
Distribute traffic to different pools of dedicated virtual machines (VMs) based on rules
Provide SSL offloading capabilities
You need to recommend a solution to distribute network traffic.
Which technology should you recommend?

A. server-level firewall rules

B. Azure Application Gateway

C. Azure Traffic Manager

D. Azure Load Balancer

 


Suggested Answer: B

If you require “SSL offloading”, application layer treatment, or wish to delegate certificate management to Azure, you should use Azure’s layer 7 load balancer
Application Gateway instead of the Load Balanacer.
Incorrect Answers:
D: Because Load Balancer is agnostic to the TCP payload and TLS offload (“SSL”) is not provided.
References:
https://docs.microsoft.com/en-us/azure/application-gateway/overview

Question 14

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure Cosmos DB database that contains a container named Container1. The partition key for Container1 is set to /day. Container1 contains the items shown in the following table.
 Image
You need to programmatically query Azure Cosmos DB and retrieve Item1 and Item2 only.
Solution: You run the following query.
SELECT day -
WHERE value = "10"
You set the EnableCrossPartitionQuery property to False.
Does this meet the goal?

A. Yes

B. No

 


Suggested Answer: B

Returns Item1 only as EnableCrossPartitionQuery property to False. If EnableCrossPartitionQuery property is set to true, it will return Item1 and Item3.
Reference:
https://docs.microsoft.com/en-us/azure/cosmos-db/sql-query-where

Question 15

You create an Azure virtual machine named VM1 in a resource group named RG1.
You discover that VM1 performs slower than expected.
You need to capture a network trace on VM1.
What should you do?

A. From the VM1 blade, configure Connection troubleshoot.

B. From Diagnostic settings for VM1, configure the performance counters to include network counters.

C. From the VM1 blade, install performance diagnostics and run advanced performance analysis.

D. From Diagnostic settings for VM1, configure the log level of the diagnostic agent.

 


Suggested Answer: C

The performance diagnostics tool helps you troubleshoot performance issues that can affect a Windows or Linux virtual machine (VM). Supported troubleshooting scenarios include quick checks on known issues and best practices, and complex problems that involve slow VM performance or high usage of CPU, disk space, or memory.
Advanced performance analysis, included in the performance diagnostics tool, includes all checks in the performance analysis, and collects one or more of the traces, as listed in the following sections. Use this scenario to troubleshoot complex issues that require additional traces. Running this scenario for longer periods will increase the overall size of diagnostics output, depending on the size of the VM and the trace options that are selected.
Reference:
https://docs.microsoft.com/en-us/azure/virtual-machines/troubleshooting/performance-diagnostics

Question 16

You have a resource group named RG1 that contains the following:
✑ A virtual network that contains two subnets named Subnet1 and AzureFirewallSubnet
✑ An Azure Storage account named contososa1
✑ An Azure firewall deployed to AzureFirewallSubnet
You need to ensure that contososa1 is accessible from Subnet1 over the Azure backbone network.
What should you do?

A. Modify the Firewalls and virtual networks settings for contososa1.

B. Create a stored access policy for contososa1.

C. Implement a virtual network service endpoint.

D. Remove the Azure firewall.

 


Suggested Answer: C

Storage firewall rules apply to the public endpoint of a storage account. You don’t need any firewall access rules to allow traffic for private endpoints of a storage account. The process of approving the creation of a private endpoint grants implicit access to traffic from the subnet that hosts the private endpoint.
Note: Storage accounts have a public endpoint that is accessible through the internet. ou can also create Private Endpoints for your storage account, which assigns a private IP address from your VNet to the storage account, and secures all traffic between your VNet and the storage account over a private link. The
Azure storage firewall provides access control access for the public endpoint of your storage account. You can also use the firewall to block all access through the public endpoint when using private endpoints. Your storage firewall configuration also enables select trusted Azure platform services to access the storage account securely.
Reference:
https://docs.microsoft.com/en-us/azure/storage/common/storage-network-security

Question 17

HOTSPOT -
You have Azure subscription that contains a virtual network named VNet1. VNet1 uses an IP address space of 10.0.0.0/16 and contains the subnets in the following table.
 Image
Subnet1 contains a virtual appliance named VM1 that operates as a router.
You create a routing table named RT1.
You need to route all inbound traffic to VNet1 through VM1.
How should you configure RT1? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
 Image

 


Suggested Answer:
Correct Answer Image

 

Question 18

You have an Azure subscription named Subscription1 that contains an Azure virtual machine named VM1. VM1 is in a resource group named RG1.
VM1 runs services that will be used to deploy resources to RG1.
You need to ensure that a service running on VM1 can manage the resources in RG1 by using the identity of VM1.
What should you do first?

A. From the Azure portal, modify the Access control (IAM) settings of RG1.

B. From the Azure portal, modify the Policies settings of RG1.

C. From the Azure portal, modify the Access control (IAM) settings of VM1.

D. From the Azure portal, modify the value of the Managed Service Identity option for VM1.

 


Suggested Answer: D

Through a create process, Azure creates an identity in the Azure AD tenant that’s trusted by the subscription in use. After the identity is created, the identity can be assigned to one or more Azure service instances.
Reference:
https://docs.microsoft.com/en-us/azure/app-service/overview-managed-identity
https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview

Question 19

You have a resource group named RG1 that contains the following:
A virtual network that contains two subnets named Subnet1 and Subnet2
An Azure Storage account named contososa1
An Azure firewall deployed to Subnet2
You need to ensure that contososa1 is accessible from Subnet1 over the Azure backbone network.
What should you do?

A. Deploy an Azure firewall to Subnet1.

B. Remove the Azure firewall.

C. Implement a virtual network service endpoint.

D. Create a stored access policy for contososa1.

 


Suggested Answer: C

Virtual Network (VNet) service endpoint provides secure and direct connectivity to Azure services over an optimized route over the Azure backbone network.
Virtual Network (VNet) service endpoints extend your virtual network private address space and the identity of your VNet to the Azure services, over a direct connection. Endpoints allow you to secure your critical Azure service resources to only your virtual networks. Traffic from your VNet to the Azure service always remains on the Microsoft Azure backbone network.
Reference:
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-service-endpoints-overview

Question 20

You have an Azure subscription that contains the virtual networks shown in the following table.
 Image
You need to recommend a connectivity solution that will enable the virtual machines on VNET1 and VNET2 to communicate through the Microsoft backbone infrastructure.
What should you include in the recommendation?

A. Azure ExpressRoute

B. peering

C. a site-to-site VPN

D. a point-to-site VPN

 


Suggested Answer: B

Virtual network peering enables you to seamlessly connect Azure virtual networks. Once peered, the virtual networks appear as one, for connectivity purposes.
The traffic between virtual machines in the peered virtual networks is routed through the Microsoft backbone infrastructure, much like traffic is routed between virtual machines in the same virtual network, through private IP addresses only. Azure supports:
✑ VNet peering – connecting VNets within the same Azure region
✑ Global VNet peering – connecting VNets across Azure regions
References:
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-peering-overview

Question 21

You set the multi-factor authentication status for a user named
admin1@contoso.com
to Enabled.
Admin1 accesses the Azure portal by using a web browser.
Which additional security verifications can Admin1 use when accessing the Azure portal?

A. an app password, a text message that contains a verification code, and a verification code sent from the Microsoft Authenticator app

B. a phone call, a text message that contains a verification code, and a notification or a verification code sent from the Microsoft Authenticator app

C. a phone call, an email message that contains a verification code, and a text message that contains an app password

D. an app password, a text message that contains a verification code, and a notification sent from the Microsoft Authenticator app

 


Suggested Answer: B

The Microsoft Authenticator app can help prevent unauthorized access to accounts and stop fraudulent transactions by pushing a notification to your smartphone or tablet. Users view the notification, and if it’s legitimate, select Verify. Otherwise, they can select Deny.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-authentication-methods

Question 22

HOTSPOT -
You have an Azure subscription that contains multiple resource groups.
You create an availability set as shown in the following exhibit.
 Image
You deploy 10 virtual machines to AS1.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Hot Area:
 Image

 


Suggested Answer:
Correct Answer Image

Box 1: 6 –
Two out of three update domains would be available, each with at least 3 VMs.
An update domain is a group of VMs and underlying physical hardware that can be rebooted at the same time.
As you create VMs within an availability set, the Azure platform automatically distributes your VMs across these update domains. This approach ensures that at least one instance of your application always remains running as the Azure platform undergoes periodic maintenance.
Box 2: the West Europe region and the RG1 resource group
Reference:
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/regions

Question 23

You develop an entertainment application where users can buy and trade virtual real estate. The application must scale to support thousands of users.
The current architecture includes five Azure virtual machines (VM) that connect to an Azure SQL Database for account information and Azure Table Storage for backend services. A user interacts with these components in the cloud at any given time.
✑ Routing Service `" Routes a request to the appropriate service and must not persist data across sessions.
✑ Account Service `" Stores and manages all account information and authentication and requires data to persist across sessions
✑ User Service `" Stores and manages all user information and requires data to persist across sessions.
✑ Housing Network Service `" Stores and manages the current real-estate economy and requires data to persist across sessions.
✑ Trade Service `" Stores and manages virtual trade between accounts and requires data to persist across sessions.
Due to volatile user traffic, a microservices solution is selected for scale agility.
You need to migrate to a distributed microservices solution on Azure Service Fabric.
Solution: Create a Service Fabric Cluster with a stateful Reliable Service for Routing Service. Deploy a Guest Executable to Service Fabric for each component.
Does the solution meet the goal?

A. Yes

B. No

 


Suggested Answer: B

 

Question 24

You have an Azure subscription.
You create a custom role in Azure by using the following Azure Resource Manager template.
 Image
You assign the role to a user named User1.
Which action can User1 perform?

A. Create virtual machines.

B. Create resource groups.

C. Delete virtual machines.

D. Create support requests.

 


Suggested Answer: D

The “Microsoft.Support/*” operation will allow the user to create support tickets.
Reference:
https://docs.microsoft.com/en-us/azure/role-based-access-control/tutorial-custom-role-powershell

Question 25

SIMULATION -
Click to expand each objective. To connect to the Azure portal, type https://portal.azure.com in the browser address bar.
 Image
 Image
 Image
 Image
 Image
 Image
When you are finished performing all the tasks, click the `ËœNext' button.
Note that you cannot return to the lab once you click the `ËœNext' button. Scoring occur in the background while you complete the rest of the exam.
Overview -
The following section of the exam is a lab. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.
Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn't matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.
Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.
Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.
To start the lab -
You may start the lab by clicking the Next button.
You plan to back up all the Azure virtual machines in your Azure subscription at 02:00 Coordinated Universal Time (UTC) daily.
You need to prepare the Azure environment to ensure that any new virtual machines can be configured quickly for backup. The solution must ensure that all the daily backups performed at 02:00 UTC are stored for only 90 days.
What should you do from your Recovery Services vault on the Azure portal?

 


Suggested Answer: See explanation below.

Task A: Create a Recovery Services vault (if a vault already exists skip this task, go to Task B below)
A1. From Azure Portal, On the Hub menu, click All services and in the list of resources, type Recovery Services and click Recovery Services vaults.
If there are recovery services vaults in the subscription, the vaults are listed.
A2. On the Recovery Services vaults menu, click Add.
A3. The Recovery Services vault blade opens, prompting you to provide a Name, Subscription, Resource group, and Location
Task B.
B1. On the Recovery Services vault blade (for the vault you just created), in the Getting Started section, click Backup, then on the Getting Started with Backup blade, select Backup goal.
The Backup Goal blade opens. If the Recovery Services vault has been previously configured, then the Backup Goal blades opens when you click Backup on the
Recovery Services vault blade.
B2. From the Where is your workload running? drop-down menu, select Azure.
B3. From the What do you want to backup? menu, select Virtual Machine, and click OK.
Reference Image
B4. Finish the Wizard.
Task C. create a backup schedule
C1. Open the Microsoft Azure Backup agent. You can find it by searching your machine for Microsoft Azure Backup.
Reference Image
C2. In the Backup agent’s Actions pane, click Schedule Backup to launch the Schedule Backup Wizard.
Reference Image
C3. On the Getting started page of the Schedule Backup Wizard, click Next.
C4. On the Select Items to Backup page, click Add Items.
The Select Items dialog opens.
C5. Select Blob Storage you want to protect, and then click OK.
C6.In the Select Items to Backup page, click Next.
On the Specify Backup Schedule page, specify
Schedule a backup every: day –
At the following times: 2.00 AM –
Reference Image
C7. On the Select Retention Policy page, set it to 90 days, and click Next.
Reference Image
C8. Finish the Wizard.
References: alt=”Reference Image” />
B4. Finish the Wizard.
Task C. create a backup schedule
C1. Open the Microsoft Azure Backup agent. You can find it by searching your machine for Microsoft Azure Backup.
Reference Image
C2. In the Backup agent’s Actions pane, click Schedule Backup to launch the Schedule Backup Wizard.
Reference Image
C3. On the Getting started page of the Schedule Backup Wizard, click Next.
C4. On the Select Items to Backup page, click Add Items.
The Select Items dialog opens.
C5. Select Blob Storage you want to protect, and then click OK.
C6.In the Select Items to Backup page, click Next.
On the Specify Backup Schedule page, specify
Schedule a backup every: day –
At the following times: 2.00 AM –
Reference Image
C7. On the Select Retention Policy page, set it to 90 days, and click Next.
<img src=”https://www.examtopics.com/assets/media/exam-media/03862/0032500002.jpg” alt=”Reference Image” />
C8. Finish the Wizard.
References:
https://docs.microsoft.com/en-us/azure/backup/backup-configure-vault

Question 26

HOTSPOT -
You have an Azure subscription named Subscription1.
Subscription1 contains the virtual machines in the following table.
 Image
Subscription1 contains a virtual network named VNet1 that has the subnets in the following table.
 Image
VM3 has a network adapter named NIC3. IP forwarding is enabled on NIC3. Routing is enabled on VM3.
You create a route table named RT1 that contains the routes in the following table.
 Image
You apply RT1 to Subnet1 and Subnet2.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:
 Image

 


Suggested Answer:
Correct Answer Image

IP forwarding enables the virtual machine a network interface is attached to:
✑ Receive network traffic not destined for one of the IP addresses assigned to any of the IP configurations assigned to the network interface.
✑ Send network traffic with a different source IP address than the one assigned to one of a network interface’s IP configurations.
The setting must be enabled for every network interface that is attached to the virtual machine that receives traffic that the virtual machine needs to forward. A virtual machine can forward traffic whether it has multiple network interfaces or a single network interface attached to it.
Box 1: Yes –
The routing table allows connections from VM3 to VM1 and VM2. And as IP forwarding is enabled on VM3, VM3 can connect to VM1.
Box 2: No –
VM3, which has IP forwarding, must be turned on, in order for VM2 to connect to VM1.
Box 3: Yes –
The routing table allows connections from VM1 and VM2 to VM3. IP forwarding on VM3 allows VM1 to connect to VM2 via VM3.
Reference:
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-udr-overview
https://www.quora.com/What-is-IP-forwarding

Question 27

HOTSPOT -
You have a virtual network named VNet1 that has the configuration shown in the following exhibit.
 Image
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Hot Area:
 Image

 


Suggested Answer:
Correct Answer Image

Box 1: add an address space –
Your IaaS virtual machines (VMs) and PaaS role instances in a virtual network automatically receive a private IP address from a range that you specify, based on the address space of the subnet they are connected to. We need to add the 192.168.1.0/24 address space.
Box 2: add a network interface –
The 10.2.1.0/24 network exists. We need to add a network interface.
References:
https://docs.microsoft.com/en-us/office365/enterprise/designing-networking-for-microsoft-azure-iaas
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-static-private-ip-arm-pportal

Question 28

You create an Azure Kubernetes Service (AKS) cluster and an Azure Container Registry.
You need to perform continuous deployments of a containerized application to the AKS cluster as soon as the image updates in the registry.
What should you use to perform the deployments?

A. an Azure Automation runbook

B. a kubectl script from a CRON job

C. an Azure Resource Manager template

D. an Azure Pipelines release pipeline

 


Suggested Answer: D

You can implement a Continuous Deployment pipeline.
Example:
Reference Image
What the pipeline accomplishes :
Stage 1: The code gets pushed in the Github. The Jenkins job gets triggered automatically. The Dockerfile is checked out from Github.
Stage 2: Docker builds an image from the Dockerfile and then the image is tagged with the build number. Additionally, the latest tag is also attached to the image for the containers to use.
Stage 3: We have default deployment and service YAML files stored on the Jenkins server. Jenkins makes a copy of the default YAML files, make the necessary changes according to the build and put them in a separate folder.
Stage 4: kubectl was initially configured at the time of setting up AKS on the Jenkins server. The YAML files are fed to the kubectl util which in turn creates pods and services.
Reference: alt=”Reference Image” />
What the pipeline accomplishes :
Stage 1: The code gets pushed in the Github. The Jenkins job gets triggered automatically. The Dockerfile is checked out from Github.
Stage 2: Docker builds an image from the Dockerfile and then the image is tagged with the build number. Additionally, the latest tag is also attached to the image for the containers to use.
Stage 3: We have default deployment and service YAML files stored on the Jenkins server. Jenkins makes a copy of the default YAML files, make the necessary changes according to the build and put them in a separate folder.
Stage 4: kubectl was initially configured at the time of setting up AKS on the Jenkins server. The YAML files are fed to the kubectl util which in turn creates pods and services.
Reference:
https://medium.com/velotio-perspectives/continuous-deployment-with-azure-kubernetes-service-azure-container-registry-jenkins-ca337940151b

Question 29

Your network contains an on-premises Active Directory domain named contoso.com that contains a member server named Server1.
You have the accounts shown in the following table.
 Image
You are installing Azure AD Connect on Server1.
You need to specify the account for Azure AD Connect synchronization. The solution must use the principle of least privilege.
Which account should you specify?

A. CONTOSOUser2

B. SERVER1User4

C. CONTOSOUser1

D. CONTOSOUser3

 


Suggested Answer: A

The default Domain User permissions are sufficient
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/reference-connect-accounts-permissions

Question 30

HOTSPOT -
You plan to create a virtual machine as shown in the following exhibit.
 Image
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Hot Area:
 Image

 


Suggested Answer:
Correct Answer Image

Box 1: is guaranteed to remain the same
OS disk type: Premium SSD –
Premium SSD Managed Disks are high performance Solid State Drive (SSD) based Storage designed to support I/O intensive workloads with significantly high throughput and low latency. With Premium SSD Managed Disks, you can provision a persistent disk and configure its size and performance characteristics.
Box 2: secure enclaves –
Virtual machine size: Standard_DC2s
DC-series virtual machines are a new family of VMs to protect the confidentiality and integrity of your data and code while it’s processed in Azure through the use of secure enclaves.
Incorrect:
Not dm-crypt: Azure Disk Encryption helps protect and safeguard your data to meet your organizational security and compliance commitments. It uses the
BitLocker feature of Windows and the DM-Crypt feature of Linux to provide volume encryption for the OS and data disks of Azure virtual machines (VMs).
References:
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/disks-types
https://azure.microsoft.com/en-us/pricing/details/virtual-machines/series/

Question 31

You have an Azure Container Registry and an Azure container instance.
You pull an image from the registry, and then update the local copy of the image.
You need to ensure that the updated image can be deployed to the container instance. The solution must ensure that you can deploy the updated image or the previous version of the image.
What should you do?

A. Run the docker image push command and specify the tag parameter.

B. Run the az image copy command and specify the tag parameter.

C. Run the az aks update command and specify the attach-acr parameter.

D. Run the kubectl apply command and specify the dry-run parameter.

 


Suggested Answer: A

The command ‘docker image push’ pushes an image or a repository to a registry.
Incorrect Answers:
B: az image copy –
Copies a managed image (or vm) to other regions.
–tags
C: az aks update –
Updates a managed Kubernetes cluster.
D: Kubectl apply –
apply manages applications through files defining Kubernetes resources. It creates and updates resources in a cluster through running kubectl apply. This is the recommended way of managing Kubernetes applications on production.
Reference:
https://docs.docker.com/engine/reference/commandline/image_push/
https://docs.microsoft.com/en-us/cli/azure/ext/image-copy-extension/image
https://docs.microsoft.com/en-us/cli/azure/aks
https://kubernetes.io/docs/reference/kubectl/cheatsheet/#kubectl-apply

Question 32

HOTSPOT -
You have several Azure virtual machines on a virtual network named VNet1. VNet1 has two subnets that have 10.2.0.0/24 and 10.2.9.0/24 address spaces.
You configure an Azure Storage account as shown in the following exhibit.
 Image
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Hot Area:
 Image

 


Suggested Answer:
Correct Answer Image

Box 1: always –
Endpoint status is enabled.
Box 2: Never –
After you configure firewall and virtual network settings for your storage account, select Allow trusted Microsoft services to access this storage account as an exception to enable Azure Backup service to access the network restricted storage account.
Reference Image
Reference: alt=”Reference Image” />
Reference:
https://docs.microsoft.com/en-us/azure/storage/files/storage-how-to-use-files-windows
https://azure.microsoft.com/en-us/blog/azure-backup-now-supports-storage-accounts-secured-with-azure-storage-firewalls-and-virtual-networks/

Question 33

You have a web app named WebApp1 that uses an Azure App Service plan named Plan1. Plan1 uses the D1 pricing tier and has an instance count of 1.
You need to ensure that all connections to WebApp1 use HTTPS.
What should you do first?

A. Scale up Plan1.

B. Modify the connection strings for WebApp1.

C. Scale out Plan1.

D. Disable anonymous access to WebApp1.

 


Suggested Answer: A

The D1 (Shared) pricing tier does not support HTTPS.

Question 34

You have an Azure subscription that contains a resource group named RG1. RG1 contains multiple resources.
You need to trigger an alert when the resources in RG1 consume $1,000 USD.
What should you do?

A. From Cost Management + Billing, add a cloud connector.

B. From the subscription, create an event subscription.

C. From Cost Management + Billing, create a budget.

D. From RG1, create an event subscription.

 


Suggested Answer: C

Create budgets to manage costs and create alerts that automatically notify you are your stakeholders of spending anomalies and overspending.
To set it up, go to the Azure Portal, select ‘Cost Management + Billing’ -> ‘Cost Management’ -> ‘Go to Cost Management’.
Reference Image
Note: Cost alerts are automatically generated based when Azure resources are consumed. Alerts show all active cost management and billing alerts together in one place. When your consumption reaches a given threshold, alerts are generated by Cost Management. There are three types of cost alerts: budget alerts, credit alerts, and department spending quota alerts.
Reference: alt=”Reference Image” />
Note: Cost alerts are automatically generated based when Azure resources are consumed. Alerts show all active cost management and billing alerts together in one place. When your consumption reaches a given threshold, alerts are generated by Cost Management. There are three types of cost alerts: budget alerts, credit alerts, and department spending quota alerts.
Reference:
https://docs.microsoft.com/en-us/azure/cost-management-billing/manage/getting-started

Question 35

You have an Azure subscription named Subscription1 that is used by several departments at your company. Subscription1 contains the resources in the following table.
 Image
Another administrator deploys a virtual machine named VM1 and an Azure Storage account named Storage2 by using a single Azure Resource Manager template.
You need to view the template used for the deployment.
From the Azure Portal, for which blade can you view the template that was used for the deployment?

A. Container1

B. VM1

C. Storage2

D. RG1

 


Suggested Answer: D

You can verify the deployment by exploring the resource group from the Azure portal
Reference:
https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/deployment-manager-tutorial
https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/template-tutorial-create-first-template?tabs=azure-powershell

Question 36

You plan to automate the deployment of a virtual machine scale set that uses the Windows Server 2016 Datacenter image.
You need to ensure that when the scale set virtual machines are provisioned, they have web server components installed.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

A. Upload a configuration script.

B. Create an automation account.

C. Create a new virtual machine scale set in the Azure portal.

D. Create an Azure policy.

E. Modify the extensionProfile section of the Azure Resource Manager template.

 


Suggested Answer: CE

References:
https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/tutorial-install-apps-template

Question 37

SIMULATION -
Click to expand each objective. To connect to the Azure portal, type https://portal.azure.com in the browser address bar.
 Image
 Image
 Image
 Image
 Image
 Image
When you are finished performing all the tasks, click the `ËœNext' button.
Note that you cannot return to the lab once you click the `ËœNext' button. Scoring occur in the background while you complete the rest of the exam.
Overview -
The following section of the exam is a lab. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.
Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn't matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.
Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.
Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.
To start the lab -
You may start the lab by clicking the Next button.
You plan to connect several virtual machines to the VNET01-USEA2 virtual network.
In the corpdatalod7523690 resource group, you need to create a virtual machine that uses the Standard_B2ms size named Web01 that runs Windows Server
2016. Web01 must be added to an availability set.
What should you do from the Azure portal?

 


Suggested Answer: See explanation below.

Step 1: Choose Create a resource in the upper left-hand corner of the Azure portal.
Step 2: In the Basics tab, under Project details, make sure the correct subscription is selected and then choose corpdatalod7523690 resource group
<img src=”https://www.examtopics.com/assets/media/exam-media/03862/0033300001.jpg” alt=”Reference Image” />
Step 3: Under Instance details type/select:
Virtual machine name: Web01 –
Image: Windows Server 2016
Size: Standard_B2ms size
Leave the other defaults.
<img src=”https://www.examtopics.com/assets/media/exam-media/03862/0033400001.png” alt=”Reference Image” />
Step 4: Finish the Wizard

Question 38

Note: This question is part of series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure subscription.
You have an on-premises file server named Server1 that runs Windows Server 2019.
You manage Server1 by using Windows Admin Center.
You need to ensure that if Server1 fails, you can recover the data from Azure.
Solution: From the Azure portal, you create a Recovery Services vault. On VM1, you install the Azure Backup agent and you schedule a backup.
Does this meet the goal?

A. Yes

B. No

 


Suggested Answer: B

Instead use Azure Storage Sync service and configure Azure File.
Use Azure File Sync to centralize your organization’s file shares in Azure Files, while keeping the flexibility, performance, and compatibility of an on-premises file server. Azure File Sync transforms Windows Server into a quick cache of your Azure file share.
References:
https://docs.microsoft.com/en-us/azure/storage/files/storage-files-introduction

Question 39

You need to move the blueprint files to Azure.
What should you do?

A. Use the Azure Import/Export service.

B. Use Azure Storage Explorer to copy the files.

C. Generate a shared access signature (SAS). Map a drive, and then copy the files by using File Explorer.

D. Generate an access key. Map a drive, and then copy the files by using File Explorer.

 


Suggested Answer: D

Scenario: Copy the blueprint files to Azure over the Internet.
To mount an Azure file share, you will need the primary (or secondary) storage key. SAS keys are not currently supported for mounting.
Incorrect Answers:
A: Azure Import/Export service is used to securely import large amounts of data to Azure Blob storage and Azure Files by shipping disk drives to an Azure datacenter.
References:
https://docs.microsoft.com/en-us/azure/storage/files/storage-how-to-use-files-windows

Question 40

HOTSPOT -
You have an Azure Resource Manager template for a virtual machine named Template1. Template1 has the following parameters section.
 Image
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:
 Image

 


Suggested Answer:
Correct Answer Image

Box 1: Yes –
The Resource group is not specified.
Box 2: No –
The default value for the operating system is Windows 2016 Datacenter.
Box 3: Yes –
Location is no default value.
References:
https://docs.microsoft.com/bs-latn-ba/azure/virtual-machines/windows/ps-template

Question 41

You have an Azure subscription that contains 10 virtual machines on a virtual network.
You need to create a graph visualization to display the traffic flow between the virtual machines.
What should you do from Azure Monitor?

A. From Activity log, use quick insights.

B. From Metrics, create a chart.

C. From Logs, create a new query.

D. From Workbooks, create a workbook.

 


Suggested Answer: C

Navigate to Azure Monitor and select Logs to begin querying the data
Reference:
https://azure.microsoft.com/en-us/blog/analysis-of-network-connection-data-with-azure-monitor-for-virtual-machines/

Question 42

Note: This question is part of series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure subscription named Subscription1. Subscription1 contains a resource group named RG1. RG1 contains resources that were deployed by using templates.
You need to view the date and time when the resources were created in RG1.
Solution: From the Subscription blade, you select the subscription, and then click Resource providers.
Does this meet the goal?

A. Yes

B. No

 


Suggested Answer: B

From the RG1 blade, click Deployments
Reference:
https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/template-tutorial-create-first-template?tabs=azure-powershell

Question 43

HOTSPOT -
You have Azure Storage accounts as shown in the following exhibit.
 Image
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Hot Area:
 Image

 


Suggested Answer:
Correct Answer Image

Box 1: storageaccount1 and storageaccount2 only
Box 2: All the storage accounts –
Note: The three different storage account options are: General-purpose v2 (GPv2) accounts, General-purpose v1 (GPv1) accounts, and Blob storage accounts.
✑ General-purpose v2 (GPv2) accounts are storage accounts that support all of the latest features for blobs, files, queues, and tables.
✑ Blob storage accounts support all the same block blob features as GPv2, but are limited to supporting only block blobs.
✑ General-purpose v1 (GPv1) accounts provide access to all Azure Storage services, but may not have the latest features or the lowest per gigabyte pricing.
Reference:
https://docs.microsoft.com/en-us/azure/storage/common/storage-account-options

Question 44

SIMULATION -
Click to expand each objective. To connect to the Azure portal, type https://portal.azure.com in the browser address bar.
 Image
 Image
 Image
 Image
 Image
 Image
When you are finished performing all the tasks, click the `ËœNext' button.
Note that you cannot return to the lab once you click the `ËœNext' button. Scoring occur in the background while you complete the rest of the exam.
Overview -
The following section of the exam is a lab. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.
Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn't matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.
Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.
Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.
To start the lab -
You may start the lab by clicking the Next button.
You recently created a virtual machine named Web01.
You need to attach a new 80-GB standard data disk named Web01-Disk1 to Web01.
What should you do from the Azure portal?

 


Suggested Answer: See explanation below.

Add a data disk –
Step 1: In the Azure portal, from the menu on the left, select Virtual machines.
Step 2: Select the Web01 virtual machine from the list.
Step 3: On the Virtual machine page, , in Essentials, select Disks.
Reference Image
Step 4: On the Disks page, select the Web01-Disk1 from the list of existing disks.
Step 5: In the Disks pane, click + Add data disk.
Step 6: Click the drop-down menu for Name to view a list of existing managed disks accessible to your Azure subscription. Select the managed disk Web01-Disk1 to attach:
Reference Image
References: alt=”Reference Image” />
Step 4: On the Disks page, select the Web01-Disk1 from the list of existing disks.
Step 5: In the Disks pane, click + Add data disk.
Step 6: Click the drop-down menu for Name to view a list of existing managed disks accessible to your Azure subscription. Select the managed disk Web01-Disk1 to attach:
<img src=”https://www.examtopics.com/assets/media/exam-media/03862/0034300001.png” alt=”Reference Image” />
References:
https://docs.microsoft.com/en-us/azure/virtual-machines/linux/attach-disk-portal

Question 45

You have several Azure web apps that use access keys to access databases.
You plan to migrate the access keys to Azure Key Vault. Each app must authenticate by using Azure Active Directory (Azure AD) to gain access to the access keys.
What should you create in Azure to ensure that the apps can access the access keys?

A. managed identities

B. managed applications

C. Azure policies

D. an App Service plan

 


Suggested Answer: A

Azure Key Vault provides a way to securely store credentials and other secrets, but your code needs to authenticate to Key Vault to retrieve them. Managed identities for Azure resources overview helps to solve this problem by giving Azure services an automatically managed identity in Azure AD. You can use this identity to authenticate to any service that supports Azure AD authentication, including Key Vault, without having to display credentials in your code.
Reference:
https://docs.microsoft.com/en-us/azure/key-vault/general/tutorial-net-create-vault-azure-web-app

Question 46

DRAG DROP -
You have an on-premises file server named Server1 that runs Windows Server 2016.
You have an Azure subscription that contains an Azure file share.
You deploy an Azure File Sync Storage Sync Service, and you create a sync group.
You need to synchronize files from Server1 to Azure.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Select and Place:
 Image

 


Suggested Answer:
Correct Answer Image

Step 1: Install the Azure File Sync agent on Server1
The Azure File Sync agent is a downloadable package that enables Windows Server to be synced with an Azure file share
Step 2: Register Server1.
Register Windows Server with Storage Sync Service
Registering your Windows Server with a Storage Sync Service establishes a trust relationship between your server (or cluster) and the Storage Sync Service.
Step 3: Add a server endpoint –
Create a sync group and a cloud endpoint.
A sync group defines the sync topology for a set of files. Endpoints within a sync group are kept in sync with each other. A sync group must contain one cloud endpoint, which represents an Azure file share and one or more server endpoints. A server endpoint represents a path on registered server.
References:
https://docs.microsoft.com/en-us/azure/storage/files/storage-sync-files-deployment-guide

Question 47

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You manage an Active Directory domain named contoso.local.
You install Azure AD Connect and connect to an Azure Active Directory (Azure AD) tenant named contoso.com without syncing any accounts.
You need to ensure that only users who have a UPN suffix of contoso.com in the contoso.local domain sync to Azure AD.
Solution: You use the Synchronization Service Manager to modify the Active Directory Domain Services (AD DS) Connector.
Does this meet the goal?

A. Yes

B. No

 


Suggested Answer: B

Instead use Synchronization Rules Editor to create a synchronization rule.
Note: Filtering what objects are synced to Azure AD is a common request and there are many instances where filtering by OU just doesn’t cut it. One option is to filter users by their UPN suffix so that only users with the public FQDN as their UPN suffix are synced to Azure AD (e.g.,
john.doe@acme.com
would be synced while
jane.doe@internal.acme.com
would not).
Filtering can be configured using either the GUI (Synchronization Rules Editor) or PowerShell.
Reference:
https://www.sidekicktech.com/blog/field-notes/2019/upn-suffix-filtering-ad-connect/

Question 48

You have an Azure subscription that contains the storage accounts shown in the following table.
 Image
You enable Storage Advanced Threat Protection (ATP) for all the storage accounts.
You need to identify which storage accounts will generate Storage ATP alerts.
Which two storage accounts should you identify? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

A. storagecontoso1

B. storagecontoso2

C. storagecontoso3

D. storagecontoso4

E. storagecontoso5

 


Suggested Answer: AB

Storage Threat Detection is available for the Blob Service.
Reference Image
Reference: alt=”Reference Image” />
Reference:
https://azure.microsoft.com/en-us/blog/advanced-threat-protection-for-azure-storage-now-in-public-preview/

Question 49

You develop an entertainment application where users can buy and trade virtual real estate. The application must scale to support thousands of users.
The current architecture includes five Azure virtual machines (VM) that connect to an Azure SQL Database for account information and Azure Table Storage for backend services. A user interacts with these components in the cloud at any given time.
✑ Routing Service `" Routes a request to the appropriate service and must not persist data across sessions.
✑ Account Service `" Stores and manages all account information and authentication and requires data to persist across sessions
✑ User Service `" Stores and manages all user information and requires data to persist across sessions.
✑ Housing Network Service `" Stores and manages the current real-estate economy and requires data to persist across sessions.
✑ Trade Service `" Stores and manages virtual trade between accounts and requires data to persist across sessions.
Due to volatile user traffic, a microservices solution is selected for scale agility.
You need to migrate to a distributed microservices solution on Azure Service Fabric.
Solution: Deploy a Windows container to Azure Service Fabric for each component.
Does the solution meet the goal?

A. Yes

B. No

 


Suggested Answer: B

 

Question 50

You have an Azure virtual network that contains a subnet named Subnet1. Subnet1 contains 50 virtual machines. Twenty-five of the virtual machines are web servers and the other 25 are application servers.
You need to filter traffic between the web servers and the application servers by using application security groups.
Which additional resource should you provision?

A. Azure Firewall

B. a user-defined route

C. Azure Private Link

D. a network security group (NSG)

 


Suggested Answer: D

Application security groups enable you to configure network security as a natural extension of an application’s structure, allowing you to group virtual machines and define network security policies based on those groups.
You can filter network traffic inbound to and outbound from a virtual network subnet with a network security group.
Reference:
https://docs.microsoft.com/en-us/azure/virtual-network/tutorial-filter-network-traffic

Free Access Full AZ-303 Practice Exam Free

Looking for additional practice? Click here to access a full set of AZ-303 practice exam free questions and continue building your skills across all exam domains.

Our question sets are updated regularly to ensure they stay aligned with the latest exam objectives—so be sure to visit often!

Good luck with your AZ-303 certification journey!

Share18Tweet11
Previous Post

AZ-301 Practice Exam Free

Next Post

AZ-304 Practice Exam Free

Next Post

AZ-304 Practice Exam Free

AZ-305 Practice Exam Free

AZ-400 Practice Exam Free

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Recommended

Network+ Practice Test

Comptia Security+ Practice Test

A+ Certification Practice Test

Aws Cloud Practitioner Exam Questions

Aws Cloud Practitioner Practice Exam

Comptia A+ Practice Test

  • About
  • DMCA
  • Privacy & Policy
  • Contact

PracticeTestFree.com materials do not contain actual questions and answers from Cisco's Certification Exams. PracticeTestFree.com doesn't offer Real Microsoft Exam Questions. PracticeTestFree.com doesn't offer Real Amazon Exam Questions.

  • Login
  • Sign Up
No Result
View All Result
  • Quesions
    • Cisco
    • AWS
    • Microsoft
    • CompTIA
    • Google
    • ISACA
    • ECCouncil
    • F5
    • GIAC
    • ISC
    • Juniper
    • LPI
    • Oracle
    • Palo Alto Networks
    • PMI
    • RedHat
    • Salesforce
    • VMware
  • Courses
    • CCNA
    • ENCOR
    • VMware vSphere
  • Certificates

Welcome Back!

Login to your account below

Forgotten Password? Sign Up

Create New Account!

Fill the forms below to register

All fields are required. Log In

Retrieve your password

Please enter your username or email address to reset your password.

Log In

Insert/edit link

Enter the destination URL

Or link to existing content

    No search term specified. Showing recent items. Search or use up and down arrow keys to select an item.