




























































































Study with the several resources on Docsity
Earn points by helping other students or get them with a premium plan
Prepare for your exams
Study with the several resources on Docsity
Earn points to download
Earn points by helping other students or get them with a premium plan
Various azure virtual machine and network configuration topics, including questions related to azure virtual machines, azure active directory, azure storage, azure networking, and azure monitoring. Answers to multiple-choice and drag-and-drop questions, covering a wide range of azure services and features. The questions test the user's understanding of azure concepts, such as virtual machine management, network security, storage configuration, and monitoring tools. By studying this document, students can gain valuable insights into azure infrastructure and services, which can be useful for preparing for azure certification exams or understanding real-world azure deployment scenarios.
Typology: Exams
1 / 197
This page cannot be seen from the preview
Don't miss anything!





























































































You have an Azure subscription named Subscription1.
You deploy a Linux virtual machine named VM1 to Subscription1.
You need to monitor the metrics and the logs of VM1.
What should you use?
A. Azure HDInsight
B. Linux Diagnostic Extension (LAD) 3.
C. the AzurePerformanceDiagnostics extension
D. Azure Analysis Services ✔✔B
You plan to deploy three Azure virtual machines named VM1, VM2, and VM3. The virtual
machines will host a web app named App1.
You need to ensure that at least two virtual machines are available if a single Azure datacenter
becomes unavailable.
What should you deploy?
A. all three virtual machines in a single Availability Zone
B. all virtual machines in a single Availability Set
C. each virtual machine in a separate Availability Zone
D. each virtual machine in a separate Availability Set ✔✔B
You have an Azure virtual machine named VM1 that runs Windows Server 2019.
You save VM1 as a template named Template1 to the Azure Resource Manager library.
You plan to deploy a virtual machine named VM2 from Template1.
What can you configure during the deployment of VM2?
A. operating system
B. administrator username
C. virtual machine size
D. resource group ✔✔B
Another administrator plans to create several network security groups (NSGs) in the subscription.
You need to ensure that when an NSG is created, it automatically blocks TCP port 8080 between the virtual networks.
Solution: You configure a custom policy definition, and then you assign the policy to the
subscription.
Does this meet the goal?
A. Yes
B. No ✔✔A
You have two Azure virtual networks named VNet1 and VNet2. VNet1 contains an Azure virtual
machine named VM1. VNet2 contains an Azure virtual machine named VM2.
VM1 hosts a frontend application that connects to VM2 to retrieve data.
Users report that the frontend application is slower than usual.
You need to view the average round-trip time (RTT) of the packets from VM1 to VM2.
Which Azure Network Watcher feature should you use?
A. IP flow verify
B. Connection troubleshoot
C. Connection monitor
D. NSG flow logs ✔✔C
You have an Azure subscription that has a Recovery Services vault named Vault1. The
subscription contains the virtual machines shown in the following table:
NAME---Operating System---Auto-Shutdown
VM1---WIndows Server 2012 R2---Off
VM2---WIndows Server 2016---19:
VM3---Ubuntu Server 18.04LTS---Off
VM4---WIndows 10---19:
You plan to schedule backups to occur every night at 23:00.
Which virtual machines can you back up by using Azure Backup?
A. VM1 and VM3 only
B. VM1, VM2, VM3 and VM
C. VM1 and VM2 only
D. VM1 only ✔✔B
You have an Azure subscription that contains the following users in an Azure Active Directory
tenant named contoso.onmicrosoft.com:
NAME---Role---Scope
User1---Global Administrator---Azure Active Directory
User2--Global Administrator---Azure Active Directory
User3---User Administrator---Azure Active Directory
User4---Owner---Azure Subscription
User1 creates a new Azure Active Directory tenant named external.contoso.onmicrosoft.com.
You need to create new user accounts in external.contoso.onmicrosoft.com.
Solution: You instruct User2 to create the user accounts.
Does that meet the goal?
A. Yes
B. No ✔✔A
Note: This question is part of a series of questions
You have an Azure subscription that contains the following users in an Azure Active Directory
tenant named contoso.onmicrosoft.com:
NAME---Role---Scope
User1---Global Administrator---Azure Active Directory
User2--Global Administrator---Azure Active Directory
User3---User Administrator---Azure Active Directory
User4---Owner---Azure Subscription
User1 creates a new Azure Active Directory tenant named external.contoso.onmicrosoft.com.
You need to create new user accounts in external.contoso.onmicrosoft.com.
Solution: You instruct User4 to create the user accounts.
Does that meet the goal?
A. Yes
B. No ✔✔B
Note: This question is part of a series of questions
You have an Azure subscription that contains the following users in an Azure Active Directory
tenant named contoso.onmicrosoft.com:
NAME---Role---Scope
User1---Global Administrator---Azure Active Directory
C. Recreate AKS1.
D. From AKS1, create a namespace. ✔✔B
You have a Microsoft 365 tenant and an Azure Active Directory (Azure AD) tenant named
contoso.com.
You plan to grant three users named User1, User2, and User3 access to a temporary Microsoft
SharePoint document library named Library1.
You need to create groups for the users. The solution must ensure that the groups are deleted after 180 days.
Which two groups should you create? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
A. an Office 365 group that uses the Assigned membership type
B. a Security group that uses the Assigned membership type
C. an Office 365 group that uses the Dynamic User membership type
D. a Security group that uses the Dynamic User membership type
E. a Security group that uses the Dynamic Device membership type ✔✔AC
You have an Azure policy as shown in the following exhibit: (see pdf)
What is the effect of the policy?
A. You are prevented from creating Azure SQL servers anywhere in Subscription 1.
B. You can create Azure SQL servers in ContosoRG1 only.
C. You are prevented from creating Azure SQL Servers in ContosoRG1 only.
D. You can create Azure SQL servers in any resource group within Subscription 1. ✔✔B
You have an Azure subscription named AZPT1 that contains the resources shown in the following
table:
NAME---TYPE
storage1---Azure Storage Account
VNET1---Virtual network
VM1---Azure virtual machine
VM1Managed---Managed disk for VM
RVAULT1---Recovery Services vault for the site recovery of VM
B. From the Azure portal, register the Microsoft.Marketplace resource provider
C. From Azure PowerShell, run the Set-AzMarketpl ✔✔C
You have an Azure subscription that contains a policy-based virtual network gateway named GW1 and a virtual network named VNet1.
You need to ensure that you can configure a point-to-site connection from an on-premises computer to VNet1.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
A. Add a service endpoint to VNet
B. Reset GW
C. Create a route-based virtual network gateway
D. Add a connection to GW
E. Delete GW
F. Add a public IP address space to VNet1 ✔✔CE
You have five Azure virtual machines that run Windows Server 2016. The virtual machines are configured as web servers.
You have an Azure load balancer named LB1 that provides load balancing services for the virtual machines.
You need to ensure that visitors are serviced by the same web server for each request.
What should you configure?
A. Floating IP (direct server return) to Enabled
B. Idle Time-out (minutes) to 20
C. Protocol to UDP
D. Session persistence to Client IP and Protocol ✔✔D
Your on-premises network contains an SMB share named Share1.
You have an Azure subscription that contains the following resources:
You need to ensure that webapp1 can connect to Share1.
What should you deploy?
A. an Azure Application Gateway
The solution must provide all the connection error details.
What should you do first?
A. From webapp1, enable Web server logging
B. From Azure Monitor, create a workbook
C. From Azure Monitor, create a Service Health alert
D. From webapp1, turn on Application Logging ✔✔A
You have an Azure Active Directory (Azure AD) tenant that contains 5,000 user accounts.
You create a new user account named AdminUser1.
You need to assign the User administrator administrative role to AdminUser1.
What should you do from the user account properties?
A. From the Licenses blade, assign a new license
B. From the Directory role blade, modify the directory role
C. From the Groups blade, invite the user account to a new group ✔✔B
You have an Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com that
contains 100 user accounts.
You purchase 10 Azure AD Premium P2 licenses for the tenant.
You need to ensure that 10 users can use all the Azure AD Premium features.
What should you do?
A. From the Licenses blade of Azure AD, assign a license
B. From the Groups blade of each user, invite the users to a group
C. From the Azure AD domain, add an enterprise application
D. From the Directory role blade of each user, modify the directory role ✔✔A
You have an Azure subscription named Subscription1 and an on-premises deployment of
Microsoft System Center Service Manager.
Subscription1 contains a virtual machine named VM1.
You need to ensure that an alert is set in Service Manager when the amount of available memory
on VM1 is below 10 percent.
What should you do first?
A. Create an automation runbook
B. Deploy a function app
storage3---StorageV2 (general purpose v2)---Queue
storage4---BlobStorage---Blob
You plan to use the Azure Import/Export service to export data from Subscription1.
You need to identify which storage account can be used to export the data.
What should you identify?
A. storage
B. storage
C. storage
D. storage4 ✔✔D
You have an Azure Storage account named storage1.
You plan to use AzCopy to copy data to storage1.
You need to identify the storage services in storage1 to which you can copy the data.
What should you identify?
A. blob, file, table, and queue
B. blob and file only
C. file and table only
D. file only
E. blob, table, and queue only ✔✔B
You have an Azure subscription that contains an Azure Storage account.
You plan to create an Azure container instance named container1 that will use a Docker image
named Image1. Image1 contains a Microsoft SQL Server instance that requires persistent
storage.
You need to configure a storage service for Container1.
What should you use?
A. Azure Files
B. Azure Blob storage
C. Azure Queue storage
D. Azure Table storage ✔✔D
You have an Azure virtual machine named VM1 that runs Windows Server 2019.