Notesale: Turn your study into money

Document Preview

Extracts from the notes are below, to see the PDF you'll receive please use the links above

---

AZ-104 RENEWAL EXAM 2024-2025
WITH ACTUAL CORRECT QUESTIONS
AND VERIFIED DETAILED ANSWERS
|FREQUENTLY TESTED QUESTIONS
AND SOLUTIONS |ALREADY GRADED
A+|NEWEST|GUARANTEED PASS
|LATEST UPDATE
You have an Azure subscription that includes a virtual machine named VM1
...
Which Azure resource should you create first?
Select only one answer
...
Which virtual machine or virtual machines can use filelevel restore?
Select only one answer
...
You need to back up two folders in VM1
by using Azure Backup
...
What should you deploy
first?
Select only one answer
...
VM1 contains the following: a File named File1 that is
stored on volume C:\ a File named File2 that is stored on volume D:\ an App named App1 that is in a
running state a user named User1 that is connected to VM1 You plan to resize VM1
...

File1 and File2 only *********
File1 and the state of App1 only
File1, File2 and the state of App1 only
File1, File2, the state of App1 and the connection of User1
File1 only
You have an Azure subscription
...
From which Azure resource can you
configure the fault domains?
Select only one answer
...
To which virtual
network or virtual networks can you connect VM1?
Select only one answer
...
You plan to run a data warehouse in an Azure virtual machine named
VM1
...
Which VM type should
you use for VM1?

2|Page

Select only one answer
...

user
...
department -eq "Marketing" -or user
...

User1 and User2 only ******
User1 and User3 only
User2 and User3 only
User1, User2, and User3 only
User1, User2, User3 and User4
ou have a Microsoft Entra tenant named contoso
...
You
configure a Password protection for contoso
...

C0nt0s0123
CONTOSO123
Conto123so
FgRs01 *****
Your company has multiple departments and one Azure subscription
...
You need to delegate permissions for the users in a
single department only
...

administrative unit ***
security group
resource group
workspace
You have an Azure web app named WebApp1
...
You need to back up WebApp1
...

Modify the Application settings of WebApp1
...

3|Page

Scale out the app service plan
...
Correct
You have an Azure subscription that includes the following web apps: WebApp1, which runs code in a
Windows operating system
...
WebApp3, which
runs in a Docker container on Windows
...
From
which web apps can you use WebJobs?
Select only one answer
...

Contoso2022 has five deployment slots in use
...
You need to ensure that User1 can create additional deployment slots to Contoso2022
...

Assign User1 the Owner role for Contoso2022
...

Scale up the Contoso2022 App Service plan
...
You plan to
deploy following container instances: Instance1, running Windows container image in West US region
Instance2, running Linux container image in West US region Instance3, running Windows container
image in East US region Which container instances can be deployed to VNet1?
Select only one answer
...
You need to ensure that you can run Image1 in VM1
...

Azure Portal
Docker ******* Correct
Hyper-V role

...
7

4|Page

You have an Azure container registry named Registry1
...
You need to store image1 in Registry1
...

azure
...
com/Registry1
Registry1
...
io ***** Correct
Registry1
...
core
...
net
Registry1
...
com
You have an Azure Storage account named storage1
...

blob and file only ***** correct
blob, file, table, and queue
blob only
file only
table and queue only
You have an Azure storage account that contains a blob container named container1
...
Which authorization types can you use?
Select only one answer
...

Storage1 has a container named container1 and the lifecycle management rule with following settings:
Move blob to cool storage: Selected Days after last modification: 3 Move blob to archive storage:
Selected Days after last modification: 5 On December 1, you create a file named File1 in container1
...
When will File1 be moved to
archive storage?
Select only one answer
...

storage1 and storage2 only
storage1 and storage3 only
storage1 only
Storage1, storage2 and storage3 Correct
storage2 and storage3 only
You have an Azure virtual network named VNET1 that has an IP address space of 192
...
0
...
168
...
0/24 and is connected to 15 VMs
Subnet2- has an IP address range of 192
...
2
...
What should you do?
Select only one answer
...
*****Correct
Add a service endpoint to Subnet2
...

Modify the subnet mask of Subnet2
...
Which resource can use ASG1?
Select only one answer
...
You need to ensure that VM1 can access storage1 by using a private IP address
...

a point to site (P2S) connection
A service endpoint ******
a VPN gateway
the Azure Front Door service
You have an Azure subscription that contains a virtual machine named VM1 and a storage account
named storage1
...
What
should you configure?
Select only one answer
...
You need to back up the virtual
machine every 12 hours
...

a backup policy in a backup vault
a standard backup policy in a recovery services vault ****
an enhanced backup policy in a recovery services vault
QUESTION 1
You have an Azure subscription named Subscription1
...

You need to monitor the metrics and the logs of VM1
...
Azure HDInsight
B
...
0
C
...
Azure Analysis Services
B
QUESTION 2
You plan to deploy three Azure virtual machines named VM1, VM2, and VM3
...

You need to ensure that at least two virtual machines are available if a single Azure datacenter
becomes unavailable
...
all three virtual machines in a single Availability Zone
B
...
each virtual machine in a separate Availability Zone
D
...

You save VM1 as a template named Template1 to the Azure Resource Manager library
...

What can you configure during the deployment of VM2?
A
...
administrator username
C
...
resource group
B
QUESTION 4
You have an Azure subscription that contains an Azure virtual machine named VM1
...

At the end of each month, CPU usage for VM1 peaks when App1 runs
...

What task should you include in the runbook?
A
...

B
...

C
...

D
...

E
...

E
QUESTION 5
Note: This question is part of a series of questions
You have an Azure subscription that contains 10 virtual networks
...

Another administrator plans to create several network security groups (NSGs) in the subscription
...

Solution: You configure a custom policy definition, and then you assign the policy to the
subscription
...
Yes
B
...
VNet1 contains an Azure virtual
machine named VM1
...

VM1 hosts a frontend application that connects to VM2 to retrieve data
...

You need to view the average round-trip time (RTT) of the packets from VM1 to VM2
...
IP flow verify
B
...
Connection monitor
D
...
The
subscription contains the virtual machines shown in the following table:
NAME---Operating System---Auto-Shutdown
VM1---WIndows Server 2012 R2---Off
8|Page

VM2---WIndows Server 2016---19:00
VM3---Ubuntu Server 18
...

Which virtual machines can you back up by using Azure Backup?
A
...
VM1, VM2, VM3 and VM4
C
...
VM1 only
B
QUESTION 8
You have the Azure virtual machines shown in the following table:
NAME---Azure Region
VM1---West Europe
VM2---West Europe
VM3---North Europe
VM4---North Europe
You have a Recovery Services vault that protects VM1 and VM2
...

What should you do first?
A
...
Create a storage account
C
...
Create a new backup policy
A
QUESTION 9
Note: This question is part of a series of questions
You have an Azure subscription that contains the following users in an Azure Active Directory
tenant named contoso
...
com:
NAME---Role---Scope
User1---Global Administrator---Azure Active Directory
User2--Global Administrator---Azure Active Directory
User3---User Administrator---Azure Active Directory
User4---Owner---Azure Subscription
User1 creates a new Azure Active Directory tenant named external
...
onmicrosoft
...

You need to create new user accounts in external
...
onmicrosoft
...

Solution: You instruct User2 to create the user accounts
...
Yes
B
...
onmicrosoft
...
contoso
...
com
...
contoso
...
com
...

Does that meet the goal?
A
...
No
B
QUESTION 11
Note: This question is part of a series of questions
You have an Azure subscription that contains the following users in an Azure Active Directory
tenant named contoso
...
com:
NAME---Role---Scope
User1---Global Administrator---Azure Active Directory
User2--Global Administrator---Azure Active Directory
User3---User Administrator---Azure Active Directory
User4---Owner---Azure Subscription
User1 creates a new Azure Active Directory tenant named external
...
onmicrosoft
...

You need to create new user accounts in external
...
onmicrosoft
...

Solution: You instruct User3 to create the user accounts
...
Yes
B
...
com and an Azure Kubernetes Service (AKS) cluster named AKS1
...
com
...
com users
...
From contoso
...

B
...
com, create an OAuth 2
...

C
...

D
...

10 | P a g e

B
QUESTION 13
You have a Microsoft 365 tenant and an Azure Active Directory (Azure AD) tenant named
contoso
...

You plan to grant three users named User1, User2, and User3 access to a temporary Microsoft
SharePoint document library named Library1
...
The solution must ensure that the groups are deleted after 180
days
...

NOTE: Each correct selection is worth one point
...
an Office 365 group that uses the Assigned membership type
B
...
an Office 365 group that uses the Dynamic User membership type
D
...
a Security group that uses the Dynamic Device membership type
AC
QUESTION 14
You have an Azure policy as shown in the following exhibit: (see pdf)
What is the effect of the policy?
A
...

B
...

C
...

D
...

B
QUESTION 15
You have an Azure subscription named AZPT1 that contains the resources shown in the following
table:
NAME---TYPE
storage1---Azure Storage Account
VNET1---Virtual network
VM1---Azure virtual machine
VM1Managed---Managed disk for VM1
RVAULT1---Recovery Services vault for the site recovery of VM1
You create a new Azure subscription named AZPT2
...

Which resources should you identify?
A
...
VM1 and VM1Managed only
C
...
RVAULT1 only
11 | P a g e

C
QUESTION 16
You recently created a new Azure subscription that contains a user named Admin1
...
Admin1 deploys
the template by using Azure PowerShell and receives the following error message: "User failed
validation to purchase resources
...
To accept legal terms, please go to the Azure portal (http://
go
...
com/fwlink/?LinkId=534873) and configure programmatic deployment for the Marketplace
item or create it there for the first time
...

What should you do?
A
...
From the Azure portal, register the Microsoft
...
From Azure PowerShell, run the Set-AzMarketpl
C
QUESTION 17
You have an Azure subscription that contains a policy-based virtual network gateway named GW1 and a
virtual network named VNet1
...

Which two actions should you perform? Each correct answer presents part of the solution
...

A
...
Reset GW1
C
...
Add a connection to GW1
E
...
Add a public IP address space to VNet1
CE
QUESTION 18
You have five Azure virtual machines that run Windows Server 2016
...

You have an Azure load balancer named LB1 that provides load balancing services for the virtual
machines
...

What should you configure?
A
...
Idle Time-out (minutes) to 20
C
...
Session persistence to Client IP and Protocol
D
12 | P a g e

QUESTION 19
Your on-premises network contains an SMB share named Share1
...

What should you deploy?
A
...
an Azure Active Directory (Azure AD) Application Proxy
C
...

You need to ensure that NGINX is available on all the virtual machines after they are deployed
...
Azure Active Directory (Azure AD) Application Proxy
B
...
Azure Custom Script Extension
D
...

Users report that they often experience HTTP 500 errors when they connect to webapp1
...

The solution must provide all the connection error details
...
From webapp1, enable Web server logging
B
...
From Azure Monitor, create a Service Health alert
D
...

You create a new user account named AdminUser1
...

What should you do from the user account properties?
A
...
From the Directory role blade, modify the directory role
C
...
onmicrosoft
...

You purchase 10 Azure AD Premium P2 licenses for the tenant
...

What should you do?
A
...
From the Groups blade of each user, invite the users to a group
C
...
From the Directory role blade of each user, modify the directory role
A
QUESTION 24
You have an Azure subscription named Subscription1 and an on-premises deployment of
Microsoft System Center Service Manager
...

You need to ensure that an alert is set in Service Manager when the amount of available memory
on VM1 is below 10 percent
...
Create an automation runbook
B
...
Deploy the IT Service Management Connector (ITSM)
D
...
You need to copy the contents
of D:\Folder1 to the public container in an Azure Storage account named contosodata
...
https://contosodata
...
core
...
net/public
B
...
blob
...
windows
...
azcopy copy D:\folder1 https://contosodata
...
core
...
net/public -- recursive
D
...
blob
...
windows
...

You need to identify which storage account can be used to export the data
...
storage1
B
...
storage3
D
...

You plan to use AzCopy to copy data to storage1
...

What should you identify?
A
...
blob and file only
C
...
file only
E
...

You plan to create an Azure container instance named container1 that will use a Docker image
named Image1
...

You need to configure a storage service for Container1
...
Azure Files
B
...
Azure Queue storage
D
...

You sign in to VM1 as a user named User1 and perform the following actions:
- Create files on drive C
...

- Modify the screen saver timeout
...

You plan to redeploy VM1
...
the modified screen saver timeout
B
...
the new files on drive D
D
...

You have an on-premises virtual machine named VM1
...

(Click the Exhibit tab
...

What should you modify on VM1?
A
...
the network adapters
C
...
the processor
E
...
Subscription1 contains the resources in the following table:
NAME---Type
Storage1---storage account
RG1---Resource group
container1---Blob container
share1---File share
Another administrator deploys a virtual machine named VM1 and an Azure Storage account
named storage2 by using a single Azure Resource Manager template
...

From which blade can you view the template that was used for the deployment?
A
...
RG1
C
...
container1
B
QUESTION 32
You have an Azure web app named App1
...

You back up App1
...
You need to revert to the previous version of App1 as quickly as possible
...
Redeploy App1
B
...
Clone App1
D
...
The virtual networks are hosted in
separate resource groups
...
You
need to ensure that when an NSG is created, it automatically blocks TCP port 8080 between
the virtual networks
...
ClassicNetwork
provider
...
Yes
B
...
The virtual networks are hosted in
separate resource groups
...
You
need to ensure that when an NSG is created, it automatically blocks TCP port 8080 between
the virtual networks
...

Does this meet the goal?
A
...
No
B
QUESTION 35
You have an app named App1 that runs on two Azure virtual machines named VM1 and VM2
...
The solution must ensure that App1 is
17 | P a g e

available during planned maintenance of the hardware hosting VM1 and VM2
...
one update domain
B
...
one fault domain
D
...
Subscription1 contains a resource group named
RG1
...
You need to view the date and
time when the resources were created in RG1
...

Does this meet the goal?
A
...
No
B
QUESTION 37
Note: This question is part of a series of questions that
You have an Azure subscription named Subscription1
...
RG1 contains resources that were deployed by using templates
...

Solution: From the RG1 blade, you click Automation script
...
Yes
B
...
Subscription1 contains a resource group named
RG1
...
You need to view the date and
time when the resources were created in RG1
...

Does this meet the goal?
A
...
No
A
QUESTION 39
Hotspot Question
18 | P a g e

You have an Azure subscription named Subscription1 that contains a resource group named RG1
...
You need to
ensure that an administrator named Admin1 can manage LB1 and LB2
...

Which role should you assign to Admin1 for each task? To answer, select the appropriate options in the
answer area
...

To add a backend pool to LB1
A
...
Network Contributor on LB1
C
...
Owner on LB1
To add a health probe to LB2:
A
...
Network Contributor on LB2
C
...
Owner on LB2
BB
QUESTION 40
Hotspot Question
You have an Azure Active Directory (Azure AD) tenant named contoso
...

Group2 is a member of Group1
...
Otherwise, select No
...

STATEMENTS
User3 can perform access review of User1
User3 can perform access review of UserA
User3 can perform access review of UserB
A
...
Yes No Yes
C
...
No Yes Yes
A
19 | P a g e

QUESTION 41
Hotspot Question
You have the Azure management groups shown in the following table: (see pdf)
You add Azure subscriptions to the management groups as shown in the following table: (see pdf)
You create the Azure policies shown in the following table: (see pdf)
For each of the following statements, select Yes if the statement is true
...

NOTE: Each correct selection is worth one point
...
Yes to All
B
...
No to all
D
...

You deploy a virtual network named VNET2 to RG6
...

NOTE: Each correct selection is worth one point
...
None
B
...
Department: d1 and Rgroup: RG6 only
D
...
Department: D1, RGroup: RG6, and Label: Value1
VNET2
A
...
RGroup: RG6 only
C
...
Rgroup: RG6 and Label: Value1
20 | P a g e

DC
QUESTION 43
Hotspot Question
You have an Azure subscription named Subscription1
...

You create a shared access signature (SAS) named SAS1 as shown in the following exhibit: (see pdf)
To answer, select the appropriate options in the answer area
...

If on Sept
...
77
...
1, and you use SAS1 to connect to the storage account you [answer choice]
A
...
Will have no access
C
...
will have read-only access
If on Sept
...
77
...
50, and you use SAS1 as the password to connect to share1, you [answer choice]
A
...
Will have no access
C
...
Group1
uses share1 as a cloud endpoint
...
You add D:\Folder1 on Server1 as a server endpoint of
Group1
...
Otherwise, select No
...

Statements
share2can be added as a cloud endpoint for group1
E:\Folder2 on Server1 can be added as a server endpoint for Group1
D:\Data on Server2 can be added as a server endpoint for Group1
A
...
Yes Yes No
C
...
No Yes Yes

21 | P a g e

D
QUESTION 45
Drag and Drop Question
You have an Azure subscription named Subscription1
...
Which UNC path should you include in a script that references files from the data file share? To
answer, drag the appropriate values to the correct targets
...
You may need to drag the split bar between panes or scroll to view content
...
(Select 3 in the correct order)
A
...
contosostorage
C
...
portal
...
com
E
...
core
...
net
F
...
file
...
windows
...
subscription1
BGF
QUESTION 46
Drag and Drop Question
You have an on-premises file server named Server1 that runs Windows Server 2016
...

You deploy an Azure File Sync Storage Sync Service, and you create a sync group
...

Which three actions should you perform in sequence? To answer, move the appropriate actions
from the list of actions to the answer area and arrange them in the correct order
...
Install the Azure File Sync agent on Server 1
B
...
Create a Recovery Services vault
D
...
Add a server endpoint
F
...

You need to create a storage account that meets the following requirements:
- Replicates synchronously
...

How should you configure the storage account? To answer, select the appropriate options in the
answer area
...

Replication
A
...
Locally-redundant storage (LRS)
C
...
Zone-redundant storage (ZRS)
Account type:
A
...
Storage (general purpose v1)
C
...

You need to use AzCopy to copy data to the blob storage and file storage in storage1
...

NOTE: Each correct selection is worth one point
...
Azure Active Directory (Azure AD) only
B
...
Access keys and shared access signatures (SAS) only
D
...
Azure AD, access keys, and SAS
File storage:
A
...
Shared access signatures (SAS) only
C
...
Azure AD and SAS only
E
...

You are configuring the Diagnostics settings for the AzureBackupReports log
...

Storage accounts:
A
...
storage2 only
C
...
storage1, storage2, storage3
Log Analytics workspaces:
A
...
Analytics2 only
C
...
Analytics1, Analytics2, Analytics3
CC
QUESTION 50
Hotspot Question
You have an Azure subscription named Subscription1
...

You install and configure a web server and a DNS server on VM1
...

NOTE: Each correct selection is worth one point
...

A
...
can connect to only the web server on VM1
C
...
cannot connect to the web server and the DNS server on VM1
If you delete Rule2 Internet users
...
can connect to only the DNS server on VM1
B
...
can connect to the web server and the DNS server on VM1
D
...
The scale set contains
four instances that have the following configurations:
- Operating system: Windows Server 2016
- Size: Standard_D1_v2
24 | P a g e

You run the get-azvmss cmdlet as shown in the following exhibit: (see pdf)
Use the drop-down menus to select the answer choice that completes each statement based on
the information presented in the graphic
...

When an administrator changes the virtual machine size, the size will be changed on up to [answer
choice] virtual machines simultaneously
...
0
B
...
2
D
...

A
...
1
C
...
4
AD
QUESTION 52
Hotspot Question
You have an Azure subscription that contains the resources in the following table: (see pdf)
In Azure, you create a private DNS zone named adatum
...
You set the registration virtual network to
VNet2
...
com zone is configured as shown in the following exhibit: (see pdf)
For each of the following statements, select Yes if the statement is true
...

NOTE: Each correct selection is worth one point
...
com zone
...
adadum
...
adatum
...
No No Yes
B
...
Yes to all
D
...
VNet1 uses an IP address
space of 10
...
0
...
You create a routing table
25 | P a g e

named RT1
...

How should you configure RT1? To answer, select the appropriate options in the answer area
...

Address prefix:
A
...
0
...
0/16
B
...
0
...
0/24
C
...
0
...
0/24
Next hop type:
A
...
Virtual network
C
...
GatewaySubnet
B
...
Subnet1 and Subnet2
AAA
QUESTION 54
Hotspot Question
You have an Azure subscription that contains the virtual machines shown in the following table: (see
pdf)
VM1 and VM2 use public IP addresses
...

Subnet1 and Subnet2 are in a virtual network named VNET1
...
NSG1
uses only the default rules
...
NSG2 is associated to the network interface of VM2
...
Otherwise, select No
...

Statements

26 | P a g e

From the Internet, you can connect to VM1 using Remote Desktop
From the internet
B
QUESTION 55
Hotspot Question
You have a virtual network named VNET1 that contains the subnets shown in the following table: (see
pdf)
You have two Azure virtual machines that have the network configurations shown in the following
table: (see pdf)
For NSG1, you create the inbound security rule shown in the following table: (see pdf)
For NSG2, you create the inbound security rule shown in the following table: (see pdf)
For each of the following statements, select Yes if the statement is true
...

NOTE: Each correct selection is worth one point
...
Yes No Yes
B
...
Yes to all
D
...

Subscription1 contains the virtual machines in the following table:
(see pdf)
Subscription1 contains a virtual network named VNet1 that has the subnets in the following table: (see
pdf)
VM3 has multiple network adapters, including a network adapter named NIC3
...
Routing is enabled on VM3
...

For each of the following statements, select Yes if the statement is true
...

NOTE: Each correct selection is worth one point
...
Yes No Yes
B
...
Yes to all
D
...

NOTE: Each correct selection is worth one point
...
30 days
B
...
36 months
D
...
30 days
B
...
36 months
D
...
You need to ensure that you receive
an email message when any virtual machines are powered off, restarted, or deallocated
...
three rules and three action groups
B
...
three rules and one action group
D
...
RG2 does not
contain any resources
...

NAME---TYPE---Description---Lock
VNET1---Virtual Network---Virtual network---ReadOnly
VNET3---Virtual Network---Classic Virtual network---None
W10---Virtual Machine---VM runs Windows 10, stopped---Delete
28 | P a g e

W10_OsDisk---Disk---Managed SSD disk on W10---None
Which resource can you move to RG2?
A
...
VNet1
C
...
W10
B
QUESTION 60
You have 100 Azure subscriptions
...
com
...

You plan to create a report that lists all the resources across all the subscriptions
...

What should you do?
A
...

B
...

C
...

D
...

D
QUESTION 61
Note: This question is part of a series of questions
You have an Azure subscription named Subscription1
...
RG1 contains resources that were deployed by using templates
...

Solution: From the Subscriptions blade, you select the subscription, and then click Programmatic
deployment
...
Yes
B
...
Subscription1 contains a resource group named
RG1
...
You need to view the date and
time when the resources were created in RG1
...

Does this meet the goal?
A
...
No

29 | P a g e

A
QUESTION 63
Note: This question is part of a series of questions
You have an Azure subscription named Subscription1
...
RG1 contains resources that were deployed by using templates
...

Solution: From the Subscriptions blade, you select the subscription, and then click Resource providers
...
Yes
B
...

NAME---Azure Region
VM1---West Europe
VM2---West Europe
VM3---North Europe
VM4---North Europe
You have a Recovery Services vault that protects VM1 and VM2
...

What should you do first?
A
...

B
...

C
...

D
...

B
QUESTION 65
You have an Azure subscription that contains the resources in the following table
...
Data contains 5,000 files
...

Which three actions should you perform? Each correct answer presents part of the solution
...

A
...

B
...

C
...

30 | P a g e

D
...

E
...

CDE
Question 66
You plan to use the Azure Import/Export service to copy files to a storage account
...

NOTE: Each correct selection is worth one point
...
an XML manifest file
B
...
a dataset CSV file
D
...
a JSON configuration file
BC
QUESTION 67
You have a Recovery Service vault that you use to test backups
...

You need to delete the Recovery Services vault
...
From the Recovery Service vault, stop the backup of each backup item
...
From the Recovery Service vault, delete the backup data
...
Modify the disaster recovery properties of each virtual machine
...
Modify the locks of each virtual machine
...

You regularly create and delete virtual machines
...

What should you do?
A
...

B
...

C
...

D
...

C
QUESTION 69
You have an Azure subscription named Subscription1
...

You need to monitor the metrics and the logs of VM1
...
Linux Diagnostic Extension (LAD) 3
...
Azure Analysis Services
C
...
Azure HDInsight
A
QUESTION 70
You have an Azure subscription named Subscription1
...

You have a computer named Computer1 that runs Windows 10
...

You add a network interface named Interface1 to VM1 as shown in the exhibit (see pdf)
From Computer1, you attempt to connect to VM1 by using Remote Desktop, but the connection fails
...

What should you do first?
A
...

B
...

C
...

D
...

A
QUESTION 71
You plan to automate the deployment of a virtual machine scale set that uses the Windows Server 2016
Datacenter image
...

Which two actions should you perform? Each correct answer presents part of the solution
...

A
...

B
...

C
...

D
...

E
...

AE
QUESTION 72
You have an Azure subscription that contains a virtual machine named VM1
...
VM1 has one network interface and one
managed disk
...
You plan to make the following changes to VM1:
Change the size to D8s v3
...

Add the Puppet Agent extension
...

Which change will cause downtime for VM1?
A
...

32 | P a g e

B
...

C
...

D
...

D
QUESTION 73
Note: This question is part of a series
You have an Azure virtual machine named VM1
...
json
...
You need to move VM1 to a
different host immediately
...

Does this meet the goal?
A
...
No
A

We have an expert-written solution to this problem!

QUESTION 74
Note: This question is part of a series
You have an Azure virtual machine named VM1
...
json
...
You need to move VM1 to a
different host immediately
...

A
...
No
B
QUESTION 75
You have an Azure subscription that contains the resources in the following table
...
NIC1 attaches VM1 to Subnet1
...

What should you do?
A
...

B
...

C
...

C
QUESTION 76
You have two subscriptions named Subscription1 and Subscription2
...

Subscription1 contains a virtual network named VNet1
...
0
...
0/16
...

VNet2 contains an Azure virtual machine named VM2 and has an IP address space of 10
...
0
...
You
need to connect VNet1 to VNet2
...
Move VNet1 to Subscription2
...
Modify the IP address space of VNet2
...
Provision virtual network gateways
...
Move VM1 to Subscription2
...
The company also has two onpremises
servers named Server1 and Server2 that run Windows Server 2016
...
com
...
com contains 1,000 DNS records
...
Server2 has the following tools installed:
- The DNS Manager console
- Azure PowerShell
- Azure CLI 2
...
com zone to Subscription1
...
What should you use?
A
...
Azure CLI
C
...
the DNS Manager console
B
QUESTION 78
You have an Azure subscription that contains the resources in the following table
...
You configure the network security group (NSG) shown in the exhibit
...
What should you
do?
A
...

B
...

C
...

D
...

A
QUESTION 79
You have an Azure subscription that contains the resources in the following table
...
the subnets on VNet2 only
B
...
the subnets on VNet2 and VNet3 only
D
...
the subnets on VNet3 only
E
QUESTION 80
You create an Azure Storage account named contosostorage
...

Users need to map a drive to the data file share from home computers that run Windows 10
...
80
B
...
445
D
...
onmicrosoft
...

Your company has a public DNS zone for contoso
...

You add contoso
...
You need to ensure that Azure
can verify the domain name
...
RRSIG
B
...
DNSKEY
D
...
The virtual networks are hosted in
separate resource groups
...
You need to ensure that when an NSG is created, it automatically blocks TCP port
8080 between
the virtual networks
...
ClassicNetwork
provider
...
Yes
B
...
The virtual networks are hosted in
separate resource groups
...
You need to ensure that when an NSG is created, it automatically blocks TCP port
8080 between
the virtual networks
...

Does this meet the goal?
A
...
No
A
QUESTION 84
Note: This question is part of a series
You have an Azure subscription that contains 10 virtual networks
...
Another administrator plans to create several network security groups (NSGs)
in the subscription
...

Solution: You create a resource lock, and then you assign the lock to the subscription
...
Yes
B
...

You create a new user account named AdminUser1
...

What should you do from the user account properties?
A
...

B
...

C
...

A
QUESTION 86
You have an Active Directory forest named contoso
...

You install and configure Azure AD Connect to use password hash synchronization as the single sign-on
(SSO) method
...

You review the synchronization results and discover that the Synchronization Service Manager does not
display any sync jobs
...

What should you do?
A
...

B
...

C
...

D
...

D
QUESTION 87
You have an Azure Active Directory (Azure AD) tenant named contoso
...
com that contains
100 user accounts
...
You need to ensure that 10 users can use
all the Azure AD Premium features
...
From the Groups blade of each user, invite the users to a group
...
From the Licenses blade of Azure AD, assign a license
...
From the Directory role blade of each user, modify the directory role
...
From the Azure AD domain, add an enterprise application
...
The template
will be used to deploy 100 virtual machines
...
You must prevent the password from being stored in plain text
...
Azure Active Directory (AD) Identity Protection and an Azure policy
37 | P a g e

B
...
an Azure Key Vault and an access policy
D
...
com
...
com and then you add an A record to the zone for ahost
named www that has an IP address of 131
...
1
...

You discover that Internet hosts are unable to resolve www
...
com to the 131
...
1
...

You need to resolve the name resolution issue
...

Does this meet the goal?
A
...
No
A
QUESTION 90
Note: This question is part of a series
Your company registers a domain name of contoso
...

You create an Azure DNS named contoso
...
107
...
10
...
contoso
...
107
...
10 IP
address
...

Solution: You add an NS record to the contoso
...

A
...
No
B
QUESTION 91
Note: This question is part of a series
Your company registers a domain name of contoso
...

You create an Azure DNS named contoso
...
107
...
10
...
contoso
...
107
...
10 IP
address
...

Solution: You modify the SOA record in the contoso
...

A
...
No

38 | P a g e

QUESTION 92
Note: This question is part of a series
You have an Azure subscription named Subscription1
...
RG1 contains resources that were deployed by using templates
...

Solution: From the RG1 blade, you click Automation script
...
Yes
B
...
VM1 was deployed by using a custom Azure Resource
Manager template named ARM1
...
You receive a notification that VM1 will be affected by
maintenance
...

Solution: From the Overview blade, you move the virtual machine to a different resource group
...
Yes
B
...
VM1 was deployed by using a custom Azure Resource
Manager template named ARM1
...
You receive a notification that VM1 will be affected by
maintenance
...

Solution: From the Update management blade, you click enable
...
Yes
B
...
onmicrosoft
...
Your
company has a public DNS zone for contoso
...
You add contoso
...
You need to ensure that Azure can verify the domain name
...
PTR
39 | P a g e

B
...
NSEC3
D
...

You need to configure backup and retention policies for the VM
...

What should you do?
A
...

B
...

C
...

D
...

B
QUESTION 97
The development team asks you to provision an Azure storage account for their use
...

- Access keys must facilitate automatic rotation
...

What should you do?
A
...

B
...

C
...

D
...

D
QUESTION 98
You have several Windows Server and Ubuntu Linux virtual machines (VMs) distributed across
two virtual networks (VNets):
- prod-vnet-west (West US region)
- prod-vnet-east (East US region)
You need to allow VMs in either VNet to connect and to share resources by using only the Azure
backbone network
...

What should you do?
A
...

B
...

C
...

D
...


40 | P a g e

B
QUESTION 99
Your company's local environment consists of a single Active Directory Domain Services (AD DS) domain
...

The tenant's current domain name is companycom
...
com
...
com, the organization's owned public domain name
...
Add a company
...

B
...

C
...
onmicrosoft
...

D
...

D
QUESTION 100
Drag and Drop Question
You have an Azure subscription that contains a storage account
...

Server1 has 2 TB of data
...

In which order should you perform the actions? To answer, move all actions from the list of actions to
the answer area and arrange them in the correct order
...
You will receive credit for any of the correct
orders you select
...
Attach an external disk to Server1, and then run waimportexport
...
From Azure portal, create an import job
...
Detach the external disks from Server1 and ship the disks to an Azure data center
D
...

ABCD
QUESTION 101
Hotspot Question
You have an Azure subscription named Subscription1
...

You create a shared access signature (SAS) named SAS1 as shown in the following exhibit
...

NOTE: Each correct selection is worth one point
...
2, 2018, you ran Microsoft Azure Storage Explorer on a computer that has an IP address of
193
...
134
...
will be prompted for credentials
41 | P a g e

B
...
Will have read, write, and list access
D
...
77
...
50, and you use SAS1 as the password to connect to share1, you [answer choice]
A
...
will have no access
C
...

You have an Azure subscription that contains an Azure file share
...

You need to synchronize files from Server1 to Azure
...

A
...
Install the Azure File Sync agent on Server1
C
...
Register server1
E
...
Add a server endpoint
BDF
QUESTION 103
Hotspot Question
You plan to create an Azure Storage account in the Azure region of East US 2
...

How should you configure the storage account? To answer, select the appropriate options in the
answer area
...

Replication:
A
...
Locally-redundant storage (LRS)
C
...
Zone-redundant storage (ZRS)

42 | P a g e

Account kind:
A
...
Storage (general purpose v1)
C
...

You create an Azure Storage account named contosostorage, and then you create a file sharenamed
data
...
Each value may be used once, more than
once, or not at all
...

NOTE: Each correct selection is worth one point
...
[VALUE] \ [VALUE]
Values
A
...
blob
...
windows
...
contosostorage
D
...
file
F
...
core
...
net
G
...
azure
...
subscription1
CFD
QUESTION 105
Hotspot Question
You have an Azure Storage accounts as shown in the following exhibit
...

NOTE: Each correct selection is worth one point
...
storageaccount1 only
B
...
storageaccount3 only
D
...
storageaccount2 and storageaccount3 only
You can use [answer choice] for Azure Blob storage
43 | P a g e

A
...
storageaccount2 and storageaccount3
C
...
all storage accounts
DD
QUESTION 106
Drag and Drop Question
You have an Azure subscription that contains an Azure virtual machine named VM1
...

VM1 has virtual machine-level backup enabled
...

You need to restore VM1 from the backup
...

Which three actions should you perform in sequence? To answer, move the appropriate actions from
the list of actions to the answer area and arrange them in the correct order
...
From the Restore configuration blade, set Restore type to Create Virtual Machine
B
...
From the Restore configuration blate, set Restore type to Restore disks
D
...
From the VM1 blade, add a disk
F
...

You plan to deploy an Ubuntu Server virtual machine named VM1 to Subscription1
...

A specific trusted root certification authority (CA) must be added during the deployment
...

NOTE: Each correct selection is worth one point
...
Answer
...
Autounattend
...
Cloud-init
...
Unattend
...
The az vm create command
B
...
The New-AzureRmVM cmdlet
CA
44 | P a g e

QUESTION 108
Hotspot Question
You have an Azure subscription named Subscription1
...

VM1 and VM2 run Windows Server 2016
...

VM1 is affected by ransomware that encrypts data
...

To which location can you restore the backup? To answer, select the appropriate options in the answer
area
...

You can perform a file recovery of VM1 to:
A
...
VM2 only
C
...
A new Azure virtual machine only
E
...
VM1 only
B
...
VM1 and VM2 only
D
...
Any Windows computer that has internet connectivity
AD
QUESTION 109
Hotspot Question
You purchase a new Azure subscription named Subscription1
...

VM1 is not protected by Azure Backup
...
Backups must be created at 01:00 and stored for 30
days
...

NOTE: Each correct selection is worth one point
...
a blob container
B
...
a Recovery services Vault
D
...
a backup policy
B
...
a batch schedule
D
...

You attempt to reconfigure VM1 to use a larger size
...

You need to ensure that the resize operation succeeds
...

A
...
Stop VM1, VM2, and VM3
C
...
Resize VM1
E
...
Start VM1
BDA
QUESTION 111
Drag and Drop Question
You have an Azure subscription
...

Currently, VNet1 does not contain any subnets
...

You need to create the application security groups and to assign them to the subnets
...

A
...
New-AzureRmNetworkSecurityGroup
C
...
New-AzureRmNetworkSecurityRuleConfig
E
...

46 | P a g e

Subscription1 contains the virtual machines in the following table
...

(see pdf)
VM3 has a network adapter named NIC3
...
Routing is enabled on VM3
...
RT1 is associated to Subnet1 and Subnet2 and contains the routes
in the following table
...

For each of the following statements, select Yes if the statement is true
...

NOTE: Each correct selection is worth one point
...
No Yes No
B
...
No to all
D
...
Each virtual machine will have a
public IP address and a private IP address
...

What is the minimum number of network interfaces and network security groups that you require?
To answer, select the appropriate options in the answer area
...

Minimum number of network interfaces:
A
...
10
C
...
20
Minimum number of network security groups:
A
...
2
C
...
10
AA
47 | P a g e

QUESTION 114
Hotspot Question
You have an Azure subscription named Subscription1
...

(see pdf)
In Azure, you create a private DNS zone named adatum
...

You set the registration virtual network to VNet2
...
com zone is configured as shown in
the following exhibit
...
Otherwise, select No
...

Statements
The A record for VM5 will be registered automatically in the adatum
...
zone
VM5 can resolve VM9
...
com
VM6 can resolve VM9
...
com
A
...
Yes Yes No
C
...
Yes No Yes
A
QUESTION 115
Hotspot Question
You have an Azure subscription named Subscription1
...

You install and configure a web server and a DNS server on VM1
...

(see pdf)
Use the drop-down menus to select the answer choice that completes each statement based on the
information presented in the graphic
...

Internet users [answer choice]
A
...
can connect to only the web server on VM1
C
...
cannot connect to the web server and the DNS server on VM1
If you delete Rule2, Internet users [answer choice]
A
...
can connect to only the web server on VM1

48 | P a g e

C
...
cannot connect
BC
QUESTION 116
Hotspot Question
You have peering configured as shown in the following exhibit
...

NOTE: Each correct selection is worth one point
...
vNET6 only
B
...
vNET6, vNET1, and vNET2 only
D
...
add a service endpoint
B
...
delete peering1
D
...
Subscription1 contains the virtual networks in the
following table
...
You add the peerings in
the following table
...
Otherwise, select No
...

Statements
VM1 can ping VM3
VM2 can ping VM3
VM2 can ping VM1
A
...
Yes to all
C
...
No Yes No
C
QUESTION 118
Drag and Drop Question
You have an Azure Active Directory (Azure AD) tenant that has the initial domain name
...
com registered at a third-party registrar
...
com
...

A
...
Add an Azure AD tenant
C
...
Create an Azure DNS zone
E
...
Add a record to the public contoso
...

Subscription1 contains the resources in the following table
...
VNet2 is in RG2
...

An administrator named Admin1 creates an Azure virtual machine named VM1 in RG1
...
Admin1 then installs a custom application in VM1
...

The solution must minimize administrative effort
...

First Action
A
...
Detach a network interface
C
...
Move a network interface to RG2

50 | P a g e

Second Action
A
...
Create a network interface in RG2
C
...
com
...
com contains the
groups in the following table
...

(see pdf)
To which groups do User1 and User2 belong? To answer
...

User1
A
...
Group2 only
C
...
Group 1 and Group2 only
E
...
Group2 and Group3 only
G
...
Group1 only
B
...
Group3 only
D
...
Group1 and Group3 only
F
...
Group1, Group2, and Group3
DD
QUESTION 121
You have five Azure virtual machines that run Windows Server 2016
...

You have an Azure load balancer named LB1 that provides load balancing services for the virtual
machines
...

What should you configure?
A
...
Floating IP (direct server return) to Disabled
51 | P a g e

C
...
Session persistence to Client IP and protocol
D
QUESTION 122
You are the global administrator for an Azure Active Directory (Azure AD) tenant named adatum
...

You need to enable two-step verification for Azure users
...
Configure a playbook in Azure AD conditional access policy
...
Create an Azure AD conditional access policy
...
Create and configure the Identify Hub
...
Install and configure Azure AD Connect
...

Block/unblock users
A blocked user will not receive Multi-Factor Authentication requests
...
A user will remain blocked for 90 days from the time they are blocked
...

(see pdf)
What caused AlexW to be blocked?
A
...

B
...

C
...

D
...

C
QUESTION 124
You have the Azure virtual networks shown in the following table
...
11
...
0/16---10
...
0
...
11
...
0/17---10
...
0
...
10
...
0/22---10
...
1
...
168
...
0/22---192
...
16
...
VNet2 and VNet3 only
B
...
VNet3 and VNet4 only
D
...
VNet1 contains an Azure virtual machine
52 | P a g e

named VM1
...
VM1 hosts a frontend application that connects
to VM2 to retrieve data
...

You need to view the average round-trip time (RTT) of the packets from VM1 to VM2
...
NSG flow logs
B
...
IP flow verify
D
...

You need to compare the total requests to the failed requests during the past six hours
...
Metrics in Application Gateway
B
...
NSG flow logs in Azure Network Watcher
D
...
VM1 has a single data disk named Disk1
...
The solution must minimize downtime for both virtual machines
...

A
...
Stop VM1
C
...
Detach Disk1 from VM1
E
...
Stop VM2
BDCE
QUESTION 128
Drag and Drop Question
You have an Azure subscription that is used by four departments in your company
...
Each department uses resources in several resource groups
...

The report must detail the costs for each department
...

53 | P a g e

A
...
Open the Resource costs blade of each resource group
C
...
Assign a tag to each resource
E
...
(see
pdf)
Use the drop-down menus to select the answer choice that completes each statement based on the
information presented in the graphic
...

Before a virtual machine on VNet1 can receive an IP addres from 192
...
1
...
add a network interface
B
...
add an address space
D
...
delete an address space
Before a virtual machine on VNet1 can receive an IP addres from 10
...
1
...
add a network interface
B
...
add an address space
D
...
delete an address space
CB
QUESTION 130
Hotspot Question
You have an Azure subscription named Subscrption1 that is associated to an Azure Active Directory
(Azure AD) tenant named AAD1
...
To answer, select the appropriate options in the
answer area
...

You can create an Azure backup policy for:
A
...
Account1 only
C
...
Share1 only
E
...
AAD1, Share1, and Account1 only
G
...
7 days
B
...
90 days
D
...
365 days
F
...

One week ago, two files were deleted from the virtual machine
...

Which four actions should you perform in sequence? To answer, move the appropriate actions from the
list of actions to the answer area and arrange them in the correct order
...
Mount a VHD
B
...
Download and run a script
D
...
Copy the files using AZCopy
F
...
From the Azure portal, click File Recovery from the vault
GDCE
QUESTION 132
Hotspot Question
You have an Azure Migrate project that has the following assessment properties:
Target location: East US
Storage redundancy: Locally redundant
...
0
Performance history: 1 month
Percentile utilization: 95th
Pricing tier: Standard
Offer: Pay as you go
You discover the following two virtual machines:
A virtual machine named VM1 that runs Windows Server 2016 and has 10 CPU cores at 20 percent
utilization
55 | P a g e

A virtual machine named VM2 that runs Windows Server 2012 and has four CPU cores at 50 percent
utilization
How many CPU cores will Azure Migrate recommend for each virtual machine? To answer, select the
appropriate options in the answer area
...

VM1:
A
...
2
C
...
4
VM2:
A
...
2
C
...
4
DD
QUESTION 133
Hotspot Question
You have an Azure subscription named Subscroption1
...
The Alert1 action group is configured as shown
in the following exhibit
...

Use the drop-down menus to select the answer choice that completes each statement based on the
information presented in the graphic
...

The number of email messages that Alert1 will send in an hour is [answer choice]
A
...
4
C
...
12
E
...
0
B
...
6
D
...
60
ED
56 | P a g e

QUESTION 134
Hotspot Question
You have an Azure subscription named Subscription1
...

(see pdf)
The virtual machines are configured as shown in the following table
...
VM1 is protected by using BitLocker Drive Encryption
(BitLocker)
...
Which virtual machines
can you migrate? To answer, select the appropriate options in the answer area
...

Virtual machines that can be migrated from Server1:
A
...
VM2
C
...
VM1 and VM2 only
E
...
VM1, VM2, and VM3
Virtual machines that can be migrated from Server2:
A
...
VMB only
C
...
VMA and VMB only
E
...
VMA and VMB and VMC
CD
QUESTION 135
Drag and Drop Question
Your network is configured as shown in the following exhibit
...

(see pdf)
Prod1 contains a vCenter server
...

You need to discover the virtual machines
...
Each port may be used once, more than once, or not at all
...

NOTE: Each correct selection is worth one point
...
Inbound 80
B
...
Outbound 3389
D
...

You create an Azure Logic App named App1
...

Which three actions should you perform in sequence? To answer, move the appropriate actions from
the list of actions to the answer area and arrange them in the correct order
...
From the Azure portal, create an on-prem data gateway
B
...
Create an Azure virtual machine that runs Windows Server 2016
D
...
From the Logic Apps Designer in the Azure portal, add a connector
BAE
QUESTION 137
Hotspot Question
You have an Azure Active Directory (Azure AD) tenant
...

Which three settings should you configure? To answer, select the appropriate settings in the answer
area
...
Users and Groups
B
...
Conditions
D
...
Session
ACD
QUESTION 138
Hotspot Question
You plan to use Azure Network Watcher to perform the following tasks:
Task1: Identify a security rule that prevents a network packet from reaching an Azure virtual machine
...

58 | P a g e

Which feature should you use for each task? To answer, select the appropriate options in the answer
area
...

Task1:
A
...
Next hop
C
...
Security Group view
E
...
Connection troubleshoot
B
...
Next hop
D
...
Traffic Analytics
AA
QUESTION 139
You have an Azure tenant that contains two subscriptions named Subscription1 and Subscription2
...

Server1 uses managed disks
...
The solution must minimize administration effort
...
In Subscription2, create a copy of the virtual disk
...
From Azure PowerShell, run the Move-AzureRmResource cmdlet
...
Create a snapshot of the virtual disk
...
Create a new virtual machine in Subscription2
...
RG1 contains 100 virtual
machines
...

You need to associate each virtual machine to a specific cost center
...
Add an extension to the virtual machines
...
Modify the inventory settings of the virtual machine
...
Assign tags to the virtual machines
...
Configure locks for the virtual machine
...

(see pdf)
Which of the following statements are true?
A
...

B
...

C
...

D
...

A
QUESTION 143
You have an Azure subscription named Subscription1
...

You plan to use an Azure Import/Export job
...
Azure SQL Database
B
...
A virtual machine
D
...

You regularly create and delete virtual machines
...

What should you do?
A
...

B
...

C
...

D
...

C
QUESTION 148
Note: This question is part of a series
You have an Azure virtual machine named VM1
...
json
...

You need to move VM1 to a different host immediately
...

Does this meet the goal?
A
...
No
B
60 | P a g e

We have an expert-written solution to this problem!

QUESTION 149
You plan to back up an Azure virtual machine named VM1
...

What is a possible cause of the Warning status?
A
...
exe installed
...
VM1 has an unmanaged disk
...
VM1 is stopped
...
A Recovery Services vault is unavailable
...

You have two Recovery Services vaults named RSV1 and RSV2
...

You need to use RSV2 to protect VM2
...
From the RSV1 blade, click Backup items and stop the VM2 backup
...
From the RSV1 blade, click Backup Jobs and export the VM2 backup
...
From the RSV1 blade, click Backup
...

D
...

A
QUESTION 151
You have an Azure virtual machine named VM1 that you use for testing
...

You delete VM1
...

What should you do first?
A
...

B
...

C
...

D
...

C
QUESTION 152
You have an Azure subscription
...
The settings for VM1 are shown in the exhibit
...

What should you modify on VM1?
A
...
the network adapters
C
...
the hard drive
E
...

You need to create a storage account that meets the following requirements:
- Replicates synchronously
- Remains available if a single data center in the region fails
How should you configure the storage account? To answer, select the appropriate options in the answer
area
...

Replication:
A
...
Locally redundant storage (LRS)
C
...
Zone-redundant storage (ZRS)
Account Kind
A
...
Storage (general purpose V1)
C
...

The virtual machines will run the latest version of Windows Server 2016 Datacenter by using an Azure
Marketplace image
...

How should you complete the storageProfile section? To answer, select the appropriate options in the
answer area
...

"storageProfile": {
"imageReference": {
62 | P a g e

"publisher": "MicrosoftWindowsServer",
"offer": [ANSWER CHOICE]
A
...
"WindowsClient",
C
...
"WindowsServer",
E
...
"WindowsServerSemiAnnual",
"sku": [ANSWER CHOICE]
"version": "latest"
},

...
"2016-Datacenter",
B
...
"Windows-Hub"'
D
...
"WindowsServerEssentials",
F
...
Scale1 is configured as shown in the
following exhibit
...

If Scale1 is utilized at 85 % for six minutes, Scale 1 will be running
...
2 vms
B
...
6 vms
D
...
20 vms
If Scale1 is first utilized at 25% for six minutes, and then utilized at 50 % for six minutes, Scale1 will be
running
...
2 vms
B
...
6 vms
D
...
20 vms
CA
63 | P a g e

QUESTION 160
Hotspot Question
You have an Azure subscription
...

* Ensures that resource group can be created from the Azure portal
...

How should you complete the policy? To answer, select the appropriate options in the answers area
...
"Microsoft
...
/deplopyments"
B
...
Resources
...
"Microsoft
...
/subscriptions/resourceGroups"
[ANSWER CHOICE2]
A
...
"Deny",
C
...
App1 runs in an Azure App Service plan named Plan1
...

You discover that App1 stops each day after running continuously for 60 minutes
...

Solution: You change the pricing tier of Plan1 to Basic
...
Yes
B
...
App1 runs in an Azure App Service plan named Plan1
...

You discover that App1 stops each day after running continuously for 60 minutes
...

Solution: You add a triggered WebJob to App1
...
Yes
B
...
App1 runs in an Azure App Service plan named Plan1
...

You discover that App1 stops each day after running continuously for 60 minutes
...

Solution: You change the pricing tier of Plan1 to Shared
...
Yes
B
...
Adatum contains a group named Developers
...

You need to provide the Developers group with the ability to create Azure logic apps in the Dev resource
group
...

Does this meet the goal?
A
...
No
A
QUESTION 165
Note: This question is part of a series
You have an Azure Active Directory (Azure AD) tenant named Adatum and an Azure Subscription named
Subscription1
...
Subscription1 contains a resource group
named Dev
...

Solution: On Subscription1, you assign the Logic App Operator role to the Developers group
...
Yes
B
...
Adatum contains a group named Developers
...

You need to provide the Developers group with the ability to create Azure logic apps in the Devresource
group
...

Does this meet the goal?
A
...
No
B
QUESTION 167
Note: This question is part of a series
You manage a virtual network named VNet1 that is hosted in the West US Azure region
...

You need to inspect all the network traffic from VM1 to VM2 for a period of three hours
...

Does this meet the goal?
A
...
No
B
QUESTION 168
Note: This question is part of a series
You manage a virtual network named VNet1 that is hosted in the West US Azure region
...

You need to inspect all the network traffic from VM1 to VM2 for a period of three hours
...

Does this meet the goal?
A
...
No
A
QUESTION 169
Note: This question is part of a series
You manage a virtual network named VNet1 that is hosted in the West US Azure region
...

You need to inspect all the network traffic from VM1 to VM2 for a period of three hours
...

Does this meet the goal?
A
...
No
B
QUESTION 170
A web developer creates a web application that you plan to deploy as an Azure web app
...

You create a new web app named WebApp1 and deploy the web application to WebApp1
...

What should you configure?
A
...
Authentication/Authorization
C
...
Deployment credentials
B
QUESTION 171
You are building a custom Azure function app to connect to Azure Event Grid
...
Billing must be based
on the executions of the app
...
the Windows operating system and the Consumption plan hosting plan
B
...
the Docker container and an App Service plan that uses the B1 pricing tier
D
...

AdatunASP1 hosts an Azure web app named adatumwebapp1
...
Devs must be able
to perform the following tasks:
- Add deployment slots
...

- Modify the role assignment for adatumwebapp1
...
Owner
B
...
Web Plan Contributor
D
...

You configure one production slot and four staging slots for App1
...

What should you add to App1?
A
...
a performance test
67 | P a g e

C
...
templates to the Automation script blade
A
QUESTION 174
You have an Azure Service Bus
...

What should you do?
A
...

B
...

C
...

D
...

E
...

E
QUESTION 175
You have a Microsoft SQL Server Always On availability group on Azure virtual machines
...

What should you do?
A
...

B
...

C
...

D
...

A
QUESTION 176
Hotspot Question
Your network contains an Active Directory domain named adatum
...
onmicrosoft
...

Adatum
...

(see pdf)
Adatum
...
com contains the user accounts in the following table
...
The solution must follow the principle of least privilege
...

NOTE: Each correct selection is worth one point
...
com:
A
...
User2
C
...
User4
E
...
onmicrosoft
...
UserA
B
...
UserC
D
...
Subscription1 contains the resources in the following table:
NAME---TYPE
Storage1---Storage account
RG1---Resource group
Container1---Blob storage
Share1---File share
Another administrator deploys a virtual machine named VM1 and an Azure Storage account named
Storage2 by using a single Azure Resource Manager template
...
From which blade can you view the template that was used for the deployment?
A
...
VM1
C
...
Container1
A
QUESTION 178
You have an Azure subscription named Subscription1
...

NAME---Azure Region---Policy
RG1---West Europe---Policy1
RG2---North Europe---Policy2
RG3---France Central---POlicy3
RG1 has a web app named WebApp1
...
You move WebApp1 to RG2
...
The App Service plan to WebApp1 moves to North Europe
...

B
...
Policy1 applies to WebApp1
...
The App Service plan to WebApp1 remains to West Europe
...

D
...
Policy1 applies to WebApp1
...
RG1 contains an Azure Storage account named storageaccount1
and a virtual machine named VM1 that runs Windows Server 2016
...
You apply a ReadOnly lock to RG1
...
Generate an automation script for RG1
...
View the keys of storageaccount1
...
Upload a blob to storageaccount1
...
Start VM1
...
Users report that when they attempt to access
myapps
...
com, they are prompted multiple times to sign in and are forced to use an account
name that ends with onmicrosoft
...

You discover that there is a UPN mismatch between Azure AD and the on-premises Active Directory
...

What should you do first?
A
...

B
...

C
...

D
...

B
QUESTION 181
You have two Azure Active Directory (Azure AD) tenants named contoso
...
com
...

You need to configure the default sign-in tenant for the Azure portal
...
From the Azure portal, configure the portal settings
...
From the Azure portal, change the directory
...
From Azure Cloud Shell, run Set-AzureRmContext
...
From Azure Cloud Shell, run Set-AzureRmSubscription
...

You need to add a user named admin1@contoso
...

What should you configure in Azure AD?
A
...

B
...

C
...

D
...


70 | P a g e

A
QUESTION 183
Note: This question is part of a series
Your company registers a domain name of contoso
...

You create an Azure DNS zone named contoso
...
107
...
10
...
contoso
...
107
...
10 IP address
...

Solution: You create a PTR record for www in the contoso
...

Does this meet the goal?
A
...
No
B
QUESTION 184
Note: This question is part of a series
You have an Azure subscription that contains 10 virtual networks
...

Another administrator plans to create several network security groups (NSGs) in the subscription
...

Solution: You assign a built-in policy definition to the subscription
...
Yes
B
...
com
...
adatum
...

What should you do?
A
...
com zone
...
Create an NS record named research in the adatum
...

C
...
com
...
Create an A record named "
...
com zone
...
VNet hosts two
virtual machines named VM1 and VM2 run Windows Server
...

Solution: From Azure Network Watcher, you create a connection monitor
...
YES
B
...

(see pdf)
No devices are connected to VNet1
...
VNet2 has an
address space of 10
...
0
...

You need to create the peering
...
Modify the address space of VNet1
...
Configure a service endpoint on VNet2
C
...

D
...

A
QUESTION 188
You have an Azure subscription that contains three virtual networks named VNet1, VNet2, VNet3
...
You are configuring the virtual
networks in a hub and spoke topology that uses VNet2 as the hub network
...

You need to provide connectivity between VNet1 and VNet3 through VNet2
...

NOTE: Each correct selection is worth one point
...
On the peering connections, allow forwarded traffic
...
On the peering connections, allow gateway transit
...
Create route tables and assign the table to subnets
...
Create a route filter
...
On the peering connections, use remote gateways
...
App1 runs in an Azure App Service plan named Plan1
...

You discover that App1 stops each day after running continuously for 60 minutes
...

Solution: You add a continuous WebJob to App1
...
Yes
B
...
Adatum contains a group named Developers
...

You need to provide the Developers group with the ability to create Azure logic apps in the Dev resource
group
...

Does this meet the goal?
A
...
No
A
QUESTION 191
You have an Azure Logic App named App1
...

During peak periods, App1 is expected to receive up to 200,000 requests in a five-minute period
...

What should you configure?
A
...
API connections
C
...
Access keys
C
QUESTION 192
You have a Basic App Service plan named ASP1 that hosts an Azure App Service named App1
...

What should you do first?
A
...

B
...

C
...

D
...

D
QUESTION 193
You have an Azure App Service plan named AdatumASP1 that hosts several Azure web apps
...

You need to provide additional memory and CPU resources to each instance of the web app
...
Scale out AdatumASP1
...
Add continuous WebJobs that use the multi-instance scale
...
Scale up AdatumASP1
...
Add a virtual machine scale set
...
App1 is located in the East
US Azure region
...

Users in Asia and Europe report that the video buffer often and do not play back smoothly
...

What should you recommend?
A
...

B
...

C
...

D
...

C
QUESTION 195
Note: This question is part of a series
You manage a virtual network named VNet1 that is hosted in the West US Azure region
...

You need to inspect all the network traffic from VM1 to VM2 for a period of three hours
...

Does this meet the goal?
A
...
No
B
QUESTION 196
You have an Azure subscription
...
From home,
users must establish a point-to-site VPN to access the Azure resources
...

You have a line-of-business app named App1 that runs on several Azure virtual machine
...

You need to ensure that the connections to App1 are spread across all the virtual machines
...

NOTE: Each correct selection is worth one point
...
a public load balancer
B
...
an Azure Content Delivery Network (CDN)
D
...
an Azure Application Gateway
74 | P a g e

DE
QUESTION 197
You have an Azure subscription named Subscription1 that contains an Azure virtual network named
VNet1
...

You need to connect VNet1 to the on-premises network by using a site-to-site VPN
...

Which three actions should you perform? Each correct answer presents part of the solution
...

A
...

B
...

C
...

D
...

E
...

ABE
QUESTION 198
You have an Azure subscription named Subscription1 that contains two Azure virtual networks named
VNet1 and VNet2
...
There is a
site-to-site VPN connection between your on-premises network and VNet1
...

You configure virtual network peering between VNet1 and VNet2
...
Client1 is unable to connect to VNet2
...

What should you do?
A
...

B
...

C
...

D
...

D
QUESTION 199
You are troubleshooting a performance issue for an Azure Application Gateway
...

What should you use?
A
...

B
...
Diagnostics logs in Application Gateway
D
...
VNet1 contains an Azure virtual machine
75 | P a g e

named VM1
...

VM1 hosts a frontend application that connects to VM2 to retrieve data
...

You need to view the average round-trip time (RTT) of the packets from VM1 to VM2
...
IP flow verify
B
...
Connection troubleshoot
D
...
You need to ensure that all the traffic requesting
https://adatum
...
com/external resources is directed to an external server pool
...
URL path-based routing
B
...
basic routing
D
...

NAME---Address Space---Subnet---Resource Group Azure Region
VNET1---10
...
0
...
11
...
0/17---West US
VNET2---10
...
0
...
11
...
0/25---West US
VNET3---10
...
0
...
10
...
0/24---East US
VNET4---192
...
16
...
168
...
0/24---North Europe
To which virtual networks can you establish a peering connection from VNet1?
A
...
VNet2 and VNet3 only
C
...
VNet2, VNet3, and VNet4
A
QUESTION 203
You have an Azure Active Directory (Azure AD) tenant that has Azure AD Privileged Identity
Management configured
...

You need the users to verify whether they still require the Security Administrator role
...
From Azure AD Identity Protection, configure a user risk policy
...
From Azure AD Privileged Identity Management, create an access review
...
From Azure AD Identity Protection, configure the Weekly Digest
...
From Azure AD Privileged Identity Management, create a conditional access policy
...
com
...

What should you do?
A
...

B
...

C
...

D
...

A
QUESTION 233
You have an Azure subscription named Subscription1 that contains a virtual network named VNet1
...

Subscription1 has a user named User1
...

What should you do?
A
...
Assign User1 the Contributor role
for RG1
...
Assign User1 the Owner role for VNet1
...
Remove User1 from the Security Reader and Reader roles for Subscription1
...
Assign User1 the Network Contributor role for RG1
...

Name---Kind---Performance---Replication---Access tier
storage1---v1---premium---GRS---NONE
storage2---v2---standard---LRS---Cool
storage3---v2---premium---RA-GRS---Hot
storage4---blob---standard---LRS---Hot
You need to identify which storage account can be converted to zone-redundant storage (ZRS)
replication by requesting a live migration from Azure support
...
storage1
B
...
storage3
D
...
You plan to upload the
disk files of a virtual machine to account1 from your on-premises network
...
107
...
0/24
...
VM1 will be attached to a virtual network named
VNet1
...
168
...
0/24
...

- Ensure that you can attach the disks to VM1
...

Which two actions should you perform? Each correct answer presents part of the solution
...

A
...

B
...

You need to create an alert in Azure when more than two error events are logged to the System event
log on VM1 within an hour
...
You add the
Microsoft Monitoring Agent VM extension to VM1
...

Does this meet the goal?
A
...
No
A
QUESTION 237
Note: This question is part of a series
You have an Azure virtual machine named VM1 that runs Windows Server 2016
...

Solution: You create an Azure Log Analytics workspace and configure the data settings
...
You create an alert in Azure Monitor and specify
the Log Analytics workspace as the source
...
Yes
B
...

You need to create an alert in Azure when more than two error events are logged to the System event
log on VM1 within an hour
...

You install the Microsoft Monitoring Agent on VM1
...

Does this meet the goal?
A
...
No
B
QUESTION 239
Note: This question is part of a
You have an Azure subscription that contains the resources shown in the following table
...

You need to connect VM1 to VNET2
...

Does this meet the goal?
A
...
No
B
QUESTION 240
Note: This question is part of a
You have an Azure subscription that contains the resources shown in the following table
...

You need to connect VM1 to VNET2
...
You recreate VM1, and then you create a new network interface for VM1 and
connect it to VNET2
...
Yes
B
...

NAME---Type---Region
RG1---resource group---West US
RG2---resource group---East Asia
storage1---storage account---West US
storage2---storage account---East Asia
VM1---virtual machine---West US
VNET1---virtual network---West US
VNET2---virtual network---East Asia
VM1 connects to VNET1
...

Solution: You turn off VM1, and then you add a new network interface to VM1
...
Yes
B
...

IP address---Assigned to
131
...
2
...
168
...
2---Kubernetes DNS service
172
...
7
...
0
...
11---Kubernetes cluster node
You need to provide internet users with access to the applications that run in Cluster1
...
131
...
2
...
10
...
10
...
172
...
7
...
192
...
10
...

You need to identify what to deploy before you deploy Template1
...

What should you identify?
A
...
one App Service plan
C
...
one Azure Traffic Manager
E
...
VM1 hosts a line-ofbusiness application that is available 24 hours a day
...
VM1 uses the D4s v3 size
...

- Add a 500-GB managed disk
...

- Enable Desired State Configuration Management
...
Enable Desired State Configuration Management
B
...
Change the size to D8s v3
D
...
The developers at your
company upload an update of App1 to a Git repository named Git1
...

Name-----Function
webapp1-prod----Production
webapp1-test----Staging
You need to ensure that the App1 update is tested before the update is made available to users
...

A
...
Deploy the App1 update to webapp1-prod, and then test the update
C
...
Deploy the App1 update to webapp1-test, and then test the update
E
...
0
...
4 (dynamic)
Network security group (NSG): NSG1
Public IP address: None
Availability set: AVSet
Subnet: 10
...
0
...

Which three actions should you perform? Each correct answer presents part of the solution
...

A
...

B
...

C
...

D
...

E
...
Insights resource provider
ACD
QUESTION 247
You need to deploy an Azure virtual machine scale set that contains five instances as quickly as possible
...
Deploy five virtual machines
...

B
...
Modify the Size setting for each virtual machine
...
Deploy one virtual machine scale set that is set to VM (virtual machines) orchestration mode
...
Deploy one virtual machine scale set that is set to ScaleSetVM orchestration mode
...

82 | P a g e

Name----Runtime stack
WebApp1----
...
0
WebApp2----ASP
...
7
WebApp3----PHP 7
...
6
What is the minimum number of App Service plans you should create for the web apps?
A
...
2
C
...
4
A
QUESTION 249
Your company has three offices
...
Each
office contains datacenter
...
Each
region contains a virtual network
...

You need to connect the datacenters to the subscription
...

What should you create?
A
...
three virtual hubs and one virtual WAN
C
...
three On-premises data gateways and one Azure Application Gateway
C
QUESTION 251
You have an Azure subscription that contains a virtual network named VNet1
...

The NVA subnet contains two network virtual appliances (NVAs) that will perform network traffic
inspection between the Perimeter subnet and the Production subnet
...
The solution must meet the following
requirements:
- The NVAs must run in an active-active configuration that uses
automatic failover
...
The services have different IP addresses
...

NOTE: Each correct selection is worth one point
...
Deploy a basic load balancer
B
...
Add two load balancing rules that have HA Ports and Floating IP enabled
D
...
VNet1 contains a VPN gateway named VPNGW1 that uses static routing
...

On a computer named Client1 that runs Windows 10, you configure a point-to-site VPN connection to
VNet1
...
You verify that you can connect to
VNet2 from the on-premises network
...

You need to ensure that you can connect Client1 to VNet2
...
Download and re-install the VPN client configuration package on Client1
...
Select Allow gateway transit on VNet1
...
Select Allow gateway transit on VNet2
...
Enable BGP on VPNGW1
A
QUESTION 253
You have an Azure subscription that contains the resources in the following table
...
the subnets on VNet1 only
B
...
the subnets on VNet2 only
D
...
the subnets on VNet1, VNet2, and VNet3
D
QUESTION 254
Hotspot Question
You have Azure Active Directory tenant named Contoso
...
com includes following Windows 10 devices:
(see pdf)
You create following security groups in Contoso
...
Otherwise, select No
...

Statements
84 | P a g e

User1 can add Device2 to Group1
User2 can add Device1 to Group1
User2 can add Device2 to Group2
A
...
Yes to all
C
...
No to all
C
QUESTION 255
Hotspot Question
You have an Azure subscription that contains an Azure Storage account
...

You need to create the container for the planned image
...

NOTE: Each correct selection is worth one point
...
make
B
...
copy
'https://mystorageaccount
...
core
...
net/vmimages
A
...
dfs
C
...
table
E
...
file
AA
QUESTION 256
Hotspot Question
You have an Azure File sync group that has the endpoints shown in the following table
...

You add a file named File1 to Endpoint1 and a file named File2 to Endpoint2
...

NOTE: Each correct selection is worth one point
...
Endpoint1 only
B
...
Endpoint2 and Endpoint3 only
D
...
Endpoint2 only
B
...
Endpoint2 and Endpoint3 only
D
...
You configure an Azure
Storage account as shown in the following exhibit
...

NOTE: Each correct selection is worth one point
...
2
...
0/24 subnet will have network connectivity to the file shares in the
storage account [answer choice]
A
...
during a backup
C
...
always
B
...
never
AC
QUESTION 258
Hotspot Question
You have a sync group named Sync1 that has a cloud endpoint
...
txt
...
The servers are configured
as shown in the following table
...
txt, File2
...
txt, File3
...
One hour later, you add Share2 as an endpoint for Sync1
...
Otherwise, select No
...

Statements
On the cloud endpoint, File1
...
txt from Share1
On Server1, File1
...

File1
...
Yes Yes No
B
...
Yes to All
D
...

(see pdf)
You deploy virtual machine to Subscription1 as shown in the following table
...

(see pdf)
For each of the following statements, select Yes if the statement is true
...

NOTE: Each correct selection is worth one point
...
Yes No Yes
B
...
No to all
D
...

(see pdf)
87 | P a g e

You add 14 virtual machines to WEBPROD-AS-USE2
...

NOTE: Each correct selection is worth one point
...
2
B
...
10
D
...
2
B
...
10
D
...

(see pdf)
Use the drop-down menus to select the answer choice that completes each statement based on the
information presented in the template
...
can connect to the container from any device
B
...
can only connect to the container from devices that run Windows
If Internet Information Services in the container fail [answer choice]
A
...
the container will only restart manually
C
...

(see pdf)
88 | P a g e

You create the budget shown in the following exhibit
...
com only
...

When the maximum amount in Budget1 is reached [answer choice]
A
...
VM1 and VM2 continue to run
C
...
no email notifications will be sent each month
B
...
two email notifications will be sent each month
D
...

You plan to deploy a multi-tiered application that will contain the tiers shown in the following table
...

- Protect the web servers from SQL injection attacks
...

NOTE: Each correct selection is worth one point
Ensure that communication between the web servers and the business logic tier spreads equally across
the virtual machines:
A
...
an application gateway that uses the WAF tier
C
...
a network security group (NSG)
E
...

Each virtual machine will have a public IP address and a private IP address
...

What is the minimum number of network interfaces and network security groups that you require?
To answer, select the appropriate options in the answer area
...

Minimum number of network interfaces:
A
...
10
C
...
20
Minimum number of network security groups:
A
...
2
C
...
10
AA
QUESTION 265
Hotspot Question
You have Azure virtual machines that run Windows Server 2019 and are configured as shown in the
following table
...
1
...
4---52
...
85
...
com
VM2---10
...
0
...
92
...
13---VNET1---contoso
...
com
...
com zone to allow
auto registration from VNET1
...
com zone for each virtual machine? To answer, select the
appropriate options in the answer area
...

A records for VM1:
A
...
Private IP address only
C
...
Private and Public IP address
A records for VM2:
A
...
Private IP address only
C
...
Private and Public IP address
BB

90 | P a g e

QUESTION 266
Hotspot Question
You have an Azure virtual network named VNet1 that connects to your on-premises network by using a
site-to-site VPN
...

Subnet1 is associated to a network security group (NSG) named NSG1
...
ILB1 has three Azure virtual machines in the backend
pool
...
You must be able to run
interactive queries from the Azure portal against the collected data
...

NOTE: Each correct selection is worth one point
...
An Azure Event Grid
B
...
An Azure Storage account
Resource on which to enable diagnostics:
A
...
NSG1
C
...
The subscription contains virtual machines that run Windows
Server 2016 and are configured as shown in the following table
...
com and a private Azure DNS zone named
contoso
...

You create a virtual network link for contoso
...

(see pdf)
For each of the following statements, select Yes if the statement is true
...

NOTE: Each correct selection is worth one point
...
com DNS zone
When VM2 starts, a record for VM2 is added to the contoso
...
com DNS zone
A
...
No No Yes
C
...
No to all
91 | P a g e

A
QUESTION 268
Drag and Drop Question
You have an Azure subscription that contains two virtual networks named VNet1 and VNet2
...

The virtual networks have the address spaces and the subnets configured as shown in the following
table
...
33
...
0/16 to VNet1
...

Which three actions should you perform in sequence? To answer, move the appropriate actions from
the list of actions to the answer area and arrange them in the correct order
...
Remove Vnet1
B
...
33
...
0/16 address space to Vnet1
C
...
On the peering connection in Vnet2, allow gateway transit
E
...
On the peering connection in Vnet1, allow gateway transit
G
...

(see pdf)
RG1 contains the resources shown in the following table
...
NIC1 connects to VNET1
...
IP2 is not assigned to a virtual
machine
...
Otherwise, select No
...

Statements
You can move storage1 to RG2
You can move NIC1 to RG2
If you move IP2 to RG1, the location of IP2 will change
A
...
Yes No Yes
C
...
No to all

92 | P a g e

C
QUESTION 270
Hotspot Question
You have an Azure subscription that contains an Azure Storage account named storage1 and the users
shown in the following table
...

(see pdf)
You need to identify the minimum number of alert rules and action groups required for the planned
monitoring
...

NOTE: Each correct selection is worth one point
...
1
B
...
3
D
...
1
B
...
3
D

---