AZ-100.exam.

43q

Number: AZ-100
Passing Score: 800
Time Limit: 120 min

https://www.gratisexam.com/

AZ-100

Microsoft Azure Infrastructure and Deployment (beta)

https://www.gratisexam.com/
Question Set 1

QUESTION 1
You have an Azure subscription that contains the resources in the following table.

Store1 contains a file share named Data. Data contains 5,000 files.

You need to synchronize the files in Data to an on-premises server named Server1.

Which three actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

A. Download an automation script.

B. Create a container instance.
C. Create a sync group.
D. Register Server1.
E. Install the Azure File Sync agent on Server1.

Correct Answer: CDE

Section: [none]
Explanation

Explanation/Reference:
Explanation:
Step 1 (E): Install the Azure File Sync agent on Server1
The Azure File Sync agent is a downloadable package that enables Windows Server to be synced with an Azure file share

Step 2 (D): Register Server1.

Register Windows Server with Storage Sync Service
Registering your Windows Server with a Storage Sync Service establishes a trust relationship between your server (or cluster) and the Storage Sync Service.

Step 3 (C): Create a sync group and a cloud endpoint.

A sync group defines the sync topology for a set of files. Endpoints within a sync group are kept in sync with each other. A sync group must contain one cloud
endpoint, which represents an Azure file share and one or more server endpoints. A server endpoint represents a path on registered server.

https://www.gratisexam.com/
References: https://docs.microsoft.com/en-us/azure/storage/files/storage-sync-files-deployment-guide

QUESTION 2
You plan to use the Azure Import/Export service to copy files to a storage account.

Which two files should you create before you prepare the drives for the import job? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

https://www.gratisexam.com/

A. an XML manifest file

B. a driveset CSV file
C. a dataset CSV file
D. a PowerShell PS1 file
E. a JSON configuration file

Correct Answer: BC
Section: [none]
Explanation

Explanation/Reference:
Explanation:
B: Modify the driveset.csv file in the root folder where the tool resides.

C: Modify the dataset.csv file in the root folder where the tool resides. Depending on whether you want to import a file or folder or both, add entries in the
dataset.csv file

References: https://docs.microsoft.com/en-us/azure/storage/common/storage-import-export-data-to-files

QUESTION 3
You have a Recovery Service vault that you use to test backups. The test backups contain two protected virtual machines.

You need to delete the Recovery Services vault.

https://www.gratisexam.com/
What should you do first?

A. From the Recovery Service vault, stop the backup of each backup item.
B. From the Recovery Service vault, delete the backup data.
C. Modify the disaster recovery properties of each virtual machine.
D. Modify the locks of each virtual machine.

Correct Answer: A
Section: [none]
Explanation

Explanation/Reference:
Explanation:
You can't delete a Recovery Services vault if it is registered to a server and holds backup data. If you try to delete a vault, but can't, the vault is still configured to
receive backup data.

Remove vault dependencies and delete vault

In the vault dashboard menu, scroll down to the Protected Items section, and click Backup Items. In this menu, you can stop and delete Azure File Servers, SQL
Servers in Azure VM, and Azure virtual machines.

References: https://docs.microsoft.com/en-us/azure/backup/backup-azure-delete-vault

https://www.gratisexam.com/
Testlet 2

This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may
be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in
the time provided.

To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and
other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this
case study.

At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section
of the exam. After you begin a new section, you cannot return to this section.

To start the case study

To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the
questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an All
Information tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question,
click the Question button to return to the question.

Overview
Contoso, Ltd. is a manufacturing company that has offices worldwide. Contoso works with partner organizations to bring products to market.

Contoso products are manufactured by using blueprint files that the company authors and maintains.

Existing Environment
Currently, Contoso uses multiple types of servers for business operations, including the following:

File servers
Domain controllers
Microsoft SQL Server servers

Your network contains an Active Directory forest named contoso.com. All servers and client computers are joined to Active Directory.

You have a public-facing application named App1. App1 is comprised of the following three tiers:

A SQL database
A web front end
A processing middle tier

Each tier is comprised of five virtual machines. Users access the web front end by using HTTPS only.

Requirements

https://www.gratisexam.com/
Planned Changes
Contoso plans to implement the following changes to the infrastructure:

Move all the tiers of App1 to Azure.

Move the existing product blueprint files to Azure Blob storage.
Create a hybrid directory to support an upcoming Microsoft Office 365 migration project.

Technical Requirements
Contoso must meet the following technical requirements:

Move all the virtual machines for App1 to Azure.

Minimize the number of open ports between the App1 tiers.
Ensure that all the virtual machines for App1 are protected by backups.
Copy the blueprint files to Azure over the Internet.
Ensure that the blueprint files are stored in the archive storage tier.
Ensure that partner access to the blueprint files is secured and temporary.
Prevent user passwords or hashes of passwords from being stored in Azure.
Use unmanaged standard storage for the hard disks of the virtual machines.
Ensure that when users join devices to Azure Active Directory (Azure AD), the users use a mobile phone to verify their identity.
Minimize administrative effort whenever possible.

User Requirements
Contoso identifies the following requirements for users:

Ensure that only users who are part of a group named Pilot can join devices to Azure AD.
Designate a new user named Admin1 as the service administrator of the Azure subscription.
Admin1 must receive email alerts regarding service outages.
Ensure that a new user named User3 can create network objects for the Azure subscription.

QUESTION 1
You need to move the blueprint files to Azure.

What should you do?

A. Generate a shared access signature (SAS). Map a drive, and then copy the files by using File Explorer.
B. Use the Azure Import/Export service.
C. Generate an access key. Map a drive, and then copy the files by using File Explorer.
D. Use Azure Storage Explorer to copy the files.

Correct Answer: D

https://www.gratisexam.com/
Section: [none]
Explanation

Explanation/Reference:
Explanation:
Azure Storage Explorer is a free tool from Microsoft that allows you to work with Azure Storage data on Windows, macOS, and Linux. You can use it to upload and
download data from Azure blob storage.

Scenario:
Planned Changes include: move the existing product blueprint files to Azure Blob storage.
Technical Requirements include: Copy the blueprint files to Azure over the Internet.

References: https://docs.microsoft.com/en-us/azure/machine-learning/team-data-science-process/move-data-to-azure-blob-using-azure-storage-explorer

QUESTION 2
You need to implement a backup solution for App1 after the application is moved.

What should you create first?

A. a recovery plan
B. an Azure Backup Server
C. a backup policy
D. a Recovery Services vault

https://www.gratisexam.com/

Correct Answer: D
Section: [none]
Explanation

Explanation/Reference:
Explanation:
A Recovery Services vault is a logical container that stores the backup data for each protected resource, such as Azure VMs. When the backup job for a protected
resource runs, it creates a recovery point inside the Recovery Services vault.

https://www.gratisexam.com/
Scenario:
There are three application tiers, each with five virtual machines.
Move all the virtual machines for App1 to Azure.
Ensure that all the virtual machines for App1 are protected by backups.

References: https://docs.microsoft.com/en-us/azure/backup/quick-backup-vm-portal

https://www.gratisexam.com/
Question Set 1

QUESTION 1
You plan to automate the deployment of a virtual machine scale set that uses the Windows Server 2016 Datacenter image.

You need to ensure that when the scale set virtual machines are provisioned, they have web server components installed.

Which two actions should you perform? Each correct answer presents part of the solution.

NOTE Each correct selection is worth one point.

A. Modify the extensionProfile section of the Azure Resource Manager template.

B. Create a new virtual machine scale set in the Azure portal.
C. Create an Azure policy.
D. Create an automation account.
E. Upload a configuration script.

Correct Answer: AB
Section: [none]
Explanation

Explanation/Reference:
Explanation:
Virtual Machine Scale Sets can be used with the Azure Desired State Configuration (DSC) extension handler. Virtual machine scale sets provide a way to deploy
and manage large numbers of virtual machines, and can elastically scale in and out in response to load. DSC is used to configure the VMs as they come online so
they are running the production software.

References: https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-dsc

QUESTION 2
You have an Azure subscription that contains a virtual machine named VM1. VM1 hosts a line-of-business application that is available 24 hours a day. VM1 has one
network interface and one managed disk. VM1 uses the D4s v3 size.

You plan to make the following changes to VM1:

Change the size to D8s v3.

Add a 500-GB managed disk.
Add the Puppet Agent extension.
Attach an additional network interface.

Which change will cause downtime for VM1?

https://www.gratisexam.com/
 https://www.gratisexam.com/

A. Add a 500-GB managed disk.

B. Attach an additional network interface.
C. Add the Puppet Agent extension.
D. Change the size to D8s v3.

Correct Answer: D
Section: [none]
Explanation

Explanation/Reference:
Explanation:
While resizing the VM it must be in a stopped state.

References: https://azure.microsoft.com/en-us/blog/resize-virtual-machines/

QUESTION 3
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might
meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure virtual machine named VM1. VM1 was deployed by using a custom Azure Resource Manager template named ARM1.json.

You receive a notification that VM1 will be affected by maintenance.

You need to move VM1 to a different host immediately.

Solution: From the Redeploy blade, you click Redeploy.

Does this meet the goal?

A. Yes

https://www.gratisexam.com/
B. No

Correct Answer: A
Section: [none]
Explanation

Explanation/Reference:
Explanation:
When you redeploy a VM, it moves the VM to a new node within the Azure infrastructure and then powers it back on, retaining all your configuration options and
associated resources.

References: https://docs.microsoft.com/en-us/azure/virtual-machines/windows/redeploy-to-new-node

QUESTION 4
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might
meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure virtual machine named VM1. VM1 was deployed by using a custom Azure Resource Manager template named ARM1.json.

You receive a notification that VM1 will be affected by maintenance.

You need to move VM1 to a different host immediately.

Solution: From the Overview blade, you move the virtual machine to a different resource group.

Does this meet the goal?

A. Yes
B. No

Correct Answer: B
Section: [none]
Explanation

Explanation/Reference:
Explanation:
You should redeploy the VM.

References: https://docs.microsoft.com/en-us/azure/virtual-machines/windows/redeploy-to-new-node

https://www.gratisexam.com/
QUESTION 5
You have an Azure subscription that contains 100 virtual machines.

You regularly create and delete virtual machines.

You need to identify unused disks that can be deleted.

What should you do?

A. From Microsoft Azure Storage Explorer, view the Account Management properties.
B. From the Azure portal, configure the Advisor recommendations.
C. From Cloudyn, open the Optimizer tab and create a report.
D. From Cloudyn, create a Cost Management report.

Correct Answer: A
Section: [none]
Explanation

Explanation/Reference:

QUESTION 6
DRAG DROP

You have an Azure subscription that contains an Azure virtual machine named VM1. VM1 runs Windows Server 2016 and is part of an availability set.

VM1 has virtual machine-level backup enabled.

VM1 is deleted.

You need to restore VM1 from the backup. VM1 must be part of the availability set.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the
correct order.

Select and Place:

https://www.gratisexam.com/
Correct Answer:

https://www.gratisexam.com/
Section: [none]
Explanation

Explanation/Reference:
Explanation:

Restoring a VM or all disks from VM backup involves two major steps:

Step 1: Select a restore point for restore.

1. Sign in to the Azure portal.
2. On the Azure menu, select Browse. In the list of services, type Recovery Services. The list of services adjusts to what you type. When you see Recovery
Services vaults, select it.

Step 2: Select the restore type, create a new VM or restore disks, and specify the required parameters.
A restored VM doesn't have an availability value set. We recommend using the restore disks option to add an availability set when you create a VM from PowerShell
or templates by using restored disks.

Step 3:

https://www.gratisexam.com/
After the restore disks operation is finished, use the template that was generated as part of the restore operation to create a new VM with a configuration different
from the backup configuration. You also can use it to customize names of resources that were created during the process of creating a new VM from a restore
point.

When you create the special network configuration for VMs, you must use PowerShell to create VMs from the restored disks.

To fully re-create the VMs after restoring to disk, follow these steps:

Restore the disks from a Recovery Services vault by using PowerShell

References: https://docs.microsoft.com/en-us/azure/backup/backup-azure-arm-restore-vms#use-templates-to-customize-restore-vm

QUESTION 7
You have an Azure subscription named Subscription1.

You deploy a Linux virtual machine named VM1 to Subscription1.

You need to monitor the metrics and the logs of VM1.

What should you use?

A. Linux Diagnostic Extension (LAD) 3.0

B. Azure Analysis Services
C. the AzurePerformanceDiagnostics extension
D. Azure HDInsight

Correct Answer: C
Section: [none]
Explanation

Explanation/Reference:
Explanation:
You can use extensions to configure diagnostics on your VMs to collect additional metric data.
The basic host metrics are available, but to see more granular and VM-specific metrics, you need to install the Azure diagnostics extension on the VM. The Azure
diagnostics extension allows additional monitoring and diagnostics data to be retrieved from the VM.

References: https://docs.microsoft.com/en-us/azure/virtual-machines/linux/tutorial-monitoring

https://www.gratisexam.com/
Question Set 1

QUESTION 1
Your company has an Azure subscription named Subscription1.

The company also has two on-premises servers named Server1 and Server2 that run Windows Server 2016. Server1 is configured as a DNS server that has a
primary DNS zone named adatum.com. Adatum.com contains 1,000 DNS records.

You manage Server1 and Subscription1 from Server2. Server2 has the following tools installed:

The DNS Manager console

Azure PowerShell
Azure CLI 2.0

You need to move the adatum.com zone to Subscription1. The solution must minimize administrative effort.

What should you use?

A. Azure PowerShell
B. Azure CLI
C. the Azure portal
D. the DNS Manager console

Correct Answer: B
Section: [none]
Explanation

Explanation/Reference:
Explanation:
Azure DNS supports importing and exporting zone files by using the Azure command-line interface (CLI). Zone file import is not currently supported via Azure
PowerShell or the Azure portal.

References: https://docs.microsoft.com/en-us/azure/dns/dns-import-export

QUESTION 2
You have an Azure subscription that contains the resources in the following table.

https://www.gratisexam.com/
VM1 and VM2 are deployed from the same template and host line-of-business applications accessed by using Remote Desktop. You configure the network security
group (NSG) shown in the exhibit. (Click the Exhibit button.)

https://www.gratisexam.com/
You need to prevent users of VM1 and VM2 from accessing websites on the Internet over TCP port 80.

https://www.gratisexam.com/
What should you do?

A. Associate the NSG to Subnet1.

B. Disassociate the NSG from a network interface.
C. Change the DenyWebSites outbound security rule.
D. Change the Port_80 inbound security rule.

Correct Answer: A
Section: [none]
Explanation

Explanation/Reference:
Explanation:
You can associate or dissociate a network security group from a network interface or subnet.
The NSG has the appropriate rule to block users from accessing the Internet. We just need to associate it with Subnet1.

References: https://docs.microsoft.com/en-us/azure/virtual-network/manage-network-security-group

QUESTION 3
You have an Azure subscription that contains the resources in the following table.

To which subnets can you apply NSG1?

A. the subnets on VNet2 only

B. the subnets on VNet1 only
C. the subnets on VNet2 and VNet3 only
D. the subnets on VNet1, VNet2, and VNet3
E. the subnets on VNet3 only

Correct Answer: E
Section: [none]

https://www.gratisexam.com/
Explanation

Explanation/Reference:
Explanation:
All Azure resources are created in an Azure region and subscription. A resource can only be created in a virtual network that exists in the same region and
subscription as the resource.

References: https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-vnet-plan-design-arm

QUESTION 4
You create an Azure Storage account named contosostorage.

You plan to create a file share named data.

Users need to map a drive to the data file share from home computers that run Windows 10.

Which port should be open between the home computers and the data file share?

A. 80
B. 443
C. 445
D. 3389

Correct Answer: C
Section: [none]
Explanation

Explanation/Reference:
Explanation:
Ensure port 445 is open: The SMB protocol requires TCP port 445 to be open; connections will fail if port 445 is blocked.

References: https://docs.microsoft.com/en-us/azure/storage/files/storage-how-to-use-files-windows

QUESTION 5
DRAG DROP

You have an Azure subscription. The subscription includes a virtual network named VNet1. Currently, VNet1 does not contain any subnets.

You plan to create subnets on VNet1 and to use application security groups to restrict the traffic between the subnets. You need to create the application security
groups and to assign them to the subnets.

https://www.gratisexam.com/
Which four cmdlets should you run in sequence? To answer, move the appropriate cmdlets from the list of cmdlets to the answer area and arrange them in the
correct order.

Select and Place:

Correct Answer:

https://www.gratisexam.com/
Section: [none]
Explanation

Explanation/Reference:
Explanation:

Step 1: New-AzureRmNetworkSecurityRuleConfig

Step 2: New-AzureRmNetworkSecurityGroup

Step 3: New-AzureRmVirtualNetworkSubnetConfig

Step 4: New-AzureRmVirtualNetwork

Example: Create a virtual network with a subnet referencing a network security group
New-AzureRmResourceGroup -Name TestResourceGroup -Location centralus

$rdpRule = New-AzureRmNetworkSecurityRuleConfig -Name rdp-rule -Description "Allow RDP" -Access Allow -Protocol Tcp -Direction Inbound -Priority 100 -
SourceAddressPrefix Internet -SourcePortRange * -DestinationAddressPrefix * -DestinationPortRange 3389

$networkSecurityGroup = New-AzureRmNetworkSecurityGroup -ResourceGroupName TestResourceGroup -Location centralus -Name "NSG-FrontEnd" -

SecurityRules $rdpRule

$frontendSubnet = New-AzureRmVirtualNetworkSubnetConfig -Name frontendSubnet -AddressPrefix "10.0.1.0/24" -NetworkSecurityGroup

$networkSecurityGroup

$backendSubnet = New-AzureRmVirtualNetworkSubnetConfig -Name backendSubnet -AddressPrefix "10.0.2.0/24" -NetworkSecurityGroup

$networkSecurityGroup

New-AzureRmVirtualNetwork -Name MyVirtualNetwork -ResourceGroupName TestResourceGroup -Location centralus -AddressPrefix "10.0.0.0/16" -Subnet
$frontendSubnet,$backendSubnet

References: https://docs.microsoft.com/en-us/powershell/module/azurerm.network/new-azurermvirtualnetwork?view=azurermps-6.7.0

https://www.gratisexam.com/

https://www.gratisexam.com/
QUESTION 6
You have an Azure subscription that contains the resources in the following table.

Subnet1 is associated to VNet1. NIC1 attaches VM1 to Subnet1.

You need to apply ASG1 to VM1.

What should you do?

A. Modify the properties of NSG1.

B. Modify the properties of ASG1.
C. Associate NIC1 to ASG1.

Correct Answer: B
Section: [none]
Explanation

Explanation/Reference:
Explanation:
When you deploy VMs, make them members of the appropriate ASGs.
You associate the ASG with a subnet.

References: https://azure.microsoft.com/en-us/blog/applicationsecuritygroups/

QUESTION 7
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might
meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure subscription that contains 10 virtual networks. The virtual networks are hosted in separate resource groups.

https://www.gratisexam.com/
Another administrator plans to create several network security groups (NSGs) in the subscription.

You need to ensure that when an NSG is created, it automatically blocks TCP port 8080 between the virtual networks.

Solution: From the Resource providers blade, you unregister the Microsoft.ClassicNetwork provider.

Does this meet the goal?

A. Yes
B. No

Correct Answer: B
Section: [none]
Explanation

Explanation/Reference:
Explanation:
Use a policy definition.

QUESTION 8
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might
meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure subscription that contains 10 virtual networks. The virtual networks are hosted in separate resource groups.

Another administrator plans to create several network security groups (NSGs) in the subscription.

You need to ensure that when an NSG is created, it automatically blocks TCP port 8080 between the virtual networks.

Solution: You configure a custom policy definition, and then you assign the policy to the subscription.

Does this meet the goal?

A. Yes
B. No

Correct Answer: A
Section: [none]
Explanation

https://www.gratisexam.com/
Explanation/Reference:
Explanation:
Resource policy definition used by Azure Policy enables you to establish conventions for resources in your organization by describing when the policy is enforced
and what effect to take. By defining conventions, you can control costs and more easily manage your resources.

References: https://docs.microsoft.com/en-us/azure/azure-policy/policy-definition

QUESTION 9
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might
meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure subscription that contains 10 virtual networks. The virtual networks are hosted in separate resource groups.

Another administrator plans to create several network security groups (NSGs) in the subscription.

You need to ensure that when an NSG is created, it automatically blocks TCP port 8080 between the virtual networks.

Solution: You create a resource lock, and then you assign the lock to the subscription.

Does this meet the goal?

A. Yes
B. No

Correct Answer: B
Section: [none]
Explanation

Explanation/Reference:
Explanation:
How can I freeze or lock my production/critical Azure resources from accidental deletion? There is way to do this with both ASM and ARM resources using Azure
resource lock.

References: https://blogs.msdn.microsoft.com/azureedu/2016/04/27/using-azure-resource-manager-policy-and-azure-lock-to-control-your-azure-resources/

QUESTION 10
HOTSPOT

https://www.gratisexam.com/
You have an Azure subscription named Subscription1.

Subscription1 contains the virtual machines in the following table.

Subscription1 contains a virtual network named VNet1 that has the subnets in the following table.

VM3 has a network adapter named NIC3. IP forwarding is enabled on NIC3. Routing is enabled on VM3.

You create a route table named RT1. RT1 is associated to Subnet1 and Subnet2 and contains the routes in the following table.

You apply RT1 to Subnet1.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Hot Area:

https://www.gratisexam.com/
Correct Answer:

Section: [none]
Explanation

Explanation/Reference:
Explanation:

Box 1: Yes
Traffic from VM1 and VM2 can reach VM3 thanks to the routing table, and as IP forwarding is enabled on VM3, traffic from VM3 can reach VM1.

https://www.gratisexam.com/
Box 2: No
VM3, which has IP forwarding, must be turned on, in order for traffic from VM2 to reach VM1.

Box 3: Yes
The traffic from VM1 will reach VM3, which thanks to IP forwarding, will send the traffic to VM2.

References: https://www.quora.com/What-is-IP-forwarding

QUESTION 11
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might
meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your company registers a domain name of contoso.com.

You create an Azure DNS zone named contoso.com, and then you add an A record to the zone for a host named www that has an IP address of 131.107.1.10.

You discover that Internet hosts are unable to resolve www.contoso.com to the 131.107.1.10 IP address.

You need to resolve the name resolution issue.

Solution: You modify the name servers at the domain registrar.

Does this meet the goal?

A. Yes
B. No

Correct Answer: B
Section: [none]
Explanation

Explanation/Reference:
Explanation:
Modify the Name Server (NS) record.

References: https://docs.microsoft.com/en-us/azure/dns/dns-delegate-domain-azure-dns

QUESTION 12
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might

https://www.gratisexam.com/
meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your company registers a domain name of contoso.com.

You create an Azure DNS zone named contoso.com, and then you add an A record to the zone for a host named www that has an IP address of 131.107.1.10.

You discover that Internet hosts are unable to resolve www.contoso.com to the 131.107.1.10 IP address.

You need to resolve the name resolution issue.

Solution: You add an NS record to the contoso.com zone.

Does this meet the goal?

A. Yes
B. No

Correct Answer: A
Section: [none]
Explanation

Explanation/Reference:
Explanation:
Before you can delegate your DNS zone to Azure DNS, you need to know the name servers for your zone. The NS record set contains the names of the Azure DNS
name servers assigned to the zone.

References: https://docs.microsoft.com/en-us/azure/dns/dns-delegate-domain-azure-dns

QUESTION 13
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might
meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your company registers a domain name of contoso.com.

You create an Azure DNS zone named contoso.com, and then you add an A record to the zone for a host named www that has an IP address of 131.107.1.10.

You discover that Internet hosts are unable to resolve www.contoso.com to the 131.107.1.10 IP address.

https://www.gratisexam.com/
You need to resolve the name resolution issue.

Solution: You modify the SOA record in the contoso.com zone

Does this meet the goal?

A. Yes
B. No

Correct Answer: B
Section: [none]
Explanation

Explanation/Reference:
Explanation:
Modify the NS record, not the SOA record.

Note: The SOA record stores information about the name of the server that supplied the data for the zone; the administrator of the zone; the current version of the
data file; the number of seconds a secondary name server should wait before checking for updates; the number of seconds a secondary name server should wait
before retrying a failed zone transfer; the maximum number of seconds that a secondary name server can use data before it must either be refreshed or expire; and
a default number of seconds for the time-to-live file on resource records.

References: https://searchnetworking.techtarget.com/definition/start-of-authority-record

https://www.gratisexam.com/
Question Set 1

QUESTION 1
You have an Azure Active Directory (Azure AD) tenant named contosocloud.onmicrosoft.com.

Your company has a public DNS zone for contoso.com.

You add contoso.com as a custom domain name to Azure AD.

You need to ensure that Azure can verify the domain name.

Which type of DNS record should you create?

A. RRSIG
B. PTR
C. DNSKEY
D. TXT

Correct Answer: D
Section: [none]
Explanation

Explanation/Reference:
Explanation:
Create the TXT record. App Services uses this record only at configuration time to verify that you own the custom domain. You can delete this TXT record after your
custom domain is validated and configured in App Service.

References: https://docs.microsoft.com/en-us/azure/dns/dns-web-sites-custom-domain

QUESTION 2
DRAG DROP

You have an Azure Active Directory (Azure AD) tenant that has the initial domain name.

You have a domain name of contoso.com registered at a third-party registrar.

You need to ensure that you can create Azure AD users that have names containing a suffix of @contoso.com.

Which three actions should you perform in sequence? To answer, move the appropriate cmdlets from the list of cmdlets to the answer area and arrange them in the
correct order.

https://www.gratisexam.com/
Select and Place:

Correct Answer:

https://www.gratisexam.com/
Section: [none]
Explanation

Explanation/Reference:
Explanation:
The process is simple:

1. Add the custom domain name to your directory

2. Add a DNS entry for the domain name at the domain name registrar
3. Verify the custom domain name in Azure AD

References: https://docs.microsoft.com/en-us/azure/dns/dns-web-sites-custom-domain

QUESTION 3
You have an Azure Active Directory (Azure AD) domain that contains 5,000 user accounts. You create a new user account named AdminUser1.

You need to assign the User administrator administrative role to AdminUser1.

What should you do from the user account properties?

https://www.gratisexam.com/
A. From the Directory role blade, modify the directory role.
B. From the Groups blade, invite the user account to a new group.
C. From the Licenses blade, assign a new license.

Correct Answer: A
Section: [none]
Explanation

Explanation/Reference:
Explanation:
Assign a role to a user
1. Sign in to the Azure portal with an account that's a global admin or privileged role admin for the directory.
2. Select Azure Active Directory, select Users, and then select a specific user from the list.
3. For the selected user, select Directory role, select Add role, and then pick the appropriate admin roles from the Directory roles list, such as Conditional access
administrator.
4. Press Select to save.

References: https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-users-assign-role-azure-portal

QUESTION 4
You have an Active Directory forest named contoso.com.

You install and configure Azure AD Connect to use password hash synchronization as the single sign-on (SSO) method. Staging mode is enabled.

You review the synchronization results and discover that the Synchronization Service Manager does not display any sync jobs.

You need to ensure that the synchronization completes successfully.

What should you do?

https://www.gratisexam.com/

A. From Synchronization Service Manager, run a full import.

B. Run Azure AD Connect and set the SSO method to Pass-through Authentication.
C. From Azure PowerShell, run Start-AdSyncSyncCycle -PolicyType Initial.

https://www.gratisexam.com/
D. Run Azure AD Connect and disable staging mode.

Correct Answer: D
Section: [none]
Explanation

Explanation/Reference:
Explanation:
Staging mode must be disabled. If the Azure AD Connect server is in staging mode, password hash synchronization is temporarily disabled.

References: https://docs.microsoft.com/en-us/azure/active-directory/connect/active-directory-aadconnectsync-troubleshoot-password-hash-synchronization#no-
passwords-are-synchronized-troubleshoot-by-using-the-troubleshooting-task

QUESTION 5
You have an Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com that contains 100 user accounts.

You purchase 10 Azure AD Premium P2 licenses for the tenant.

You need to ensure that 10 users can use all the Azure AD Premium features.

What should you do?

A. From the Groups blade of each user, invite the users to a group.
B. From the Licenses blade of Azure AD, assign a license.
C. From the Directory role blade of each user, modify the directory role.
D. From the Azure AD domain, add an enterprise application.

Correct Answer: B
Section: [none]
Explanation

Explanation/Reference:
Explanation:
To assign a license, under Azure Active Directory > Licenses > All Products, select one or more products, and then select Assign on the command bar.

References: https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/license-users-groups

https://www.gratisexam.com/
Testlet 2

This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may
be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in
the time provided.

To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and
other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this
case study.

At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section
of the exam. After you begin a new section, you cannot return to this section.

To start the case study

To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the
questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an All
Information tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question,
click the Question button to return to the question.

Overview
Humongous Insurance is an insurance company that has three offices in Miami, Tokyo and Bangkok. Each office has 5.000 users.

Existing Environment

Active Directory Environment

Humongous Insurance has a single-domain Active Directory forest named humongousinsurance.com. The functional level of the forest is Windows Server 2012.

You recently provisioned an Azure Active Directory (Azure AD) tenant.

Network Infrastructure
Each office has a local data center that contains all the servers for that office. Each office has a dedicated connection to the Internet.

Each office has several link load balancers that provide access to the servers.

Active Directory Issue

Several users in humongousinsurance.com have UPNs that contain special characters.

You suspect that some of the characters are unsupported in Azure AD.

Licensing Issue
You attempt to assign a license in Azure to several users and receive the following error message: "Licenses not assigned. License agreement failed for one user."

https://www.gratisexam.com/
You verify that the Azure subscription has the available licenses.

Requirements

Planned Changes
Humongous Insurance plans to open a new office in Paris. The Paris office will contain 1,000 users who will be hired during the next 12 months. All the resources
used by the Paris office users will be hosted in Azure.

Planned Azure AD Infrastructure

The on-premises Active Directory domain will be synchronized to Azure AD.

All client computers in the Paris office will be joined to an Azure AD domain.

Planned Azure Networking Infrastructure

You plan to create the following networking resources in a resource group named All_Resources:

Default Azure system routes that will be the only routes used to route traffic
A virtual network named Paris-VNet that will contain two subnets named Subnet1 and Subnet2
A virtual network named ClientResources-VNet that will contain one subnet named ClientSubnet
A virtual network named AllOffices-VNet that will contain two subnets named Subnet3 and Subnet4

You plan to enable peering between Paris-VNet and AllOffices-VNet. You will enable the Use remote gateways setting for the Paris-VNet peerings.

You plan to create a private DNS zone named humongousinsurance.local and set the registration network to the ClientResources-VNet virtual network.

Planned Azure Computer Infrastructure

Each subnet will contain several virtual machines that will run either Windows Server 2012 R2, Windows Server 2016, or Red Hat Linux.

Department Requirements
Humongous Insurance identifies the following requirements for the company's departments:

Web administrators will deploy Azure web apps for the marketing department. Each web app will be added to a separate resource group. The initial
configuration of the web apps will be identical. The web administrators have permission to deploy web apps to resource groups.
During the testing phase, auditors in the finance department must be able to review all Azure costs from the past week.

Authentication Requirements
Users in the Miami office must use Azure Active Directory Seamless Single Sign-on (Azure AD Seamless SSO) when accessing resources in Azure.

QUESTION 1
You need to prepare the environment to meet the authentication requirements.

Which two actions should you perform? Each correct answer presents part of the solution.

https://www.gratisexam.com/
NOTE Each correct selection is worth one point.

A. Join the client computers in the Miami office to Azure AD.

B. Add http://autologon.microsoftazuread-sso.com to the intranet zone of each client computer in the Miami office.
C. Allow inbound TCP port 8080 to the domain controllers in the Miami office.
D. Install Azure AD Connect on a server in the Miami office and enable Pass-through Authentication
E. Install the Active Directory Federation Services (AD FS) role on a domain controller in the Miami office.

Correct Answer: BD
Section: [none]
Explanation

Explanation/Reference:
Explanation:
D: Seamless SSO works with any method of cloud authentication - Password Hash Synchronization or Pass-through Authentication, and can be enabled via Azure
AD Connect.

B: You can gradually roll out Seamless SSO to your users. You start by adding the following Azure AD URL to all or selected users' Intranet zone settings by using
Group Policy in Active Directory: https://autologon.microsoftazuread-sso.com

Incorrect Answers:
A: Seamless SSO needs the user's device to be domain-joined, but doesn't need for the device to be Azure AD Joined.

C: Azure AD connect does not port 8080. It uses port 443.

E: Seamless SSO is not applicable to Active Directory Federation Services (ADFS).

Scenario: Users in the Miami office must use Azure Active Directory Seamless Single Sign-on (Azure AD Seamless SSO) when accessing resources in Azure.
Planned Azure AD Infrastructure include: The on-premises Active Directory domain will be synchronized to Azure AD.

References: https://docs.microsoft.com/en-us/azure/active-directory/connect/active-directory-aadconnect-sso-quick-start

QUESTION 2
You need to define a custom domain name for Azure AD to support the planned infrastructure.

Which domain name should you use?

A. humongousinsurance.onmicrosoft.com
B. humongousinsurance.com

https://www.gratisexam.com/
C. ad.humongousinsurance.com
D. humongousinsurance.local

Correct Answer: B
Section: [none]
Explanation

Explanation/Reference:
Explanation:
Every Azure AD directory comes with an initial domain name in the form of domainname.onmicrosoft.com. The initial domain name cannot be changed or deleted,
but you can add your corporate domain name to Azure AD as well. For example, your organization probably has other domain names used to do business and
users who sign in using your corporate domain name. Adding custom domain names to Azure AD allows you to assign user names in the directory that are familiar
to your users, such as ‘[email protected].’ instead of 'alice@domain name.onmicrosoft.com'.

Scenario:
Network Infrastructure: Each office has a local data center that contains all the servers for that office. Each office has a dedicated connection to the Internet.

Humongous Insurance has a single-domain Active Directory forest named humongousinsurance.com

Planned Azure AD Infrastructure: The on-premises Active Directory domain will be synchronized to Azure AD.

References: https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/add-custom-domain

QUESTION 3
You need to resolve the Active Directory issue.

What should you do?

https://www.gratisexam.com/

A. From Active Directory Users and Computers, select the user accounts, and then modify the User Principal Name value.
B. Run idfix.exe, and then use the Edit action.
C. From Active Directory Domains and Trusts, modify the list of UPN suffixes.
D. From Azure AD Connect, modify the outbound synchronization rule.

Correct Answer: B

https://www.gratisexam.com/
Section: [none]
Explanation

Explanation/Reference:
IdFix is used to perform discovery and remediation of identity objects and their attributes in an on-premises Active Directory environment in preparation for migration
to Azure Active Directory. IdFix is intended for the Active Directory administrators responsible for directory synchronization with Azure Active Directory.

Scenario: Active Directory Issue

Several users in humongousinsurance.com have UPNs that contain special characters.
You suspect that some of the characters are unsupported in Azure AD.

References: https://www.microsoft.com/en-us/download/details.aspx?id=36832

https://www.gratisexam.com/
Question Set 3

QUESTION 1
You have an Azure subscription.

You plan to use Azure Resource Manager templates to deploy 50 Azure virtual machines that will be part of the same availability set.

You need to ensure that as many virtual machines as possible are available if the fabric fails or during servicing.

How should you configure the template? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

https://www.gratisexam.com/
Select two alternatives below.

A. platformFaultDomainCount: 0
B. platformFaultDomainCount: 1
C. platformFaultDomainCount: 2
D. platformFaultDomainCount: 3
E. platformFaultDomainCount: 4
F. platformUpdateDomainCount: 10
G. platformUpdateDomainCount: 20

https://www.gratisexam.com/
H. platformUpdateDomainCount: 25
I. platformUpdateDomainCount: 30
J. platformUpdateDomainCount: 40
K. platformUpdateDomainCount: 50

Correct Answer: CG
Section: [none]
Explanation

Explanation/Reference:
Explanation:
Use two fault domains.
2 or 3 is max, depending on which region you are in.

Use 20 for platformUpdateDomainCount

Increasing the update domain (platformUpdateDomainCount) helps with capacity and availability planning when the platform reboots nodes. A higher number for the
pool (20 is max) means that fewer of their nodes in any given availability set would be rebooted at once.

References:
https://www.itprotoday.com/microsoft-azure/check-if-azure-region-supports-2-or-3-fault-domains-managed-disks
https://github.com/Azure/acs-engine/issues/1030

QUESTION 2
You have an Azure subscription named Subscription1. Subscription1 contains the resource groups in the following table.

RG1 has a web app named WebApp1. WebApp1 is located in West Europe.

You move WebApp1 to RG2. What is the effect of the move?

A. The App Service plan to WebApp1 moves to North Europe. Policy2 applies to WebApp1.
B. The App Service plan to WebApp1 moves to North Europe. Policy1 applies to WebApp1.

https://www.gratisexam.com/
C. The App Service plan to WebApp1 remains to West Europe. Policy2 applies to WebApp1.
D. The App Service plan to WebApp1 remains to West Europe. Policy1 applies to WebApp1.

Correct Answer: C
Section: [none]
Explanation

Explanation/Reference:
Explanation:
You can move an app to another App Service plan, as long as the source plan and the target plan are in the same resource group and geographical region.
The region in which your app runs is the region of the App Service plan it's in. However, you cannot change an App Service plan's region.

References: https://docs.microsoft.com/en-us/azure/app-service/app-service-plan-manage

QUESTION 3
DRAG DROP

You have an Azure subscription that is used by four departments in your company. The subscription contains 10 resource groups. Each department uses resources
in several resource groups.

You need to send a report to the finance department. The report must detail the costs for each department. Which three actions should you perform in sequence?
To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Select and Place:

https://www.gratisexam.com/
Correct Answer:

https://www.gratisexam.com/
Section: [none]
Explanation

Explanation/Reference:
Explanation:

Box 1: Assign a tag to each resource.

You apply tags to your Azure resources giving metadata to logically organize them into a taxonomy. After you apply tags, you can retrieve all the resources in your
subscription with that tag name and value. Each resource or resource group can have a maximum of 15 tag name/value pairs. Tags applied to the resource group
are not inherited by the resources in that resource group.

Box 2: From the Cost analysis blade, filter the view by tag
After you get your services running, regularly check how much they're costing you. You can see the current spend and burn rate in Azure portal.

1. Visit the Subscriptions blade in Azure portal and select a subscription.

2. You should see the cost breakdown and burn rate in the popup blade.
3. Click Cost analysis in the list to the left to see the cost breakdown by resource. Wait 24 hours after you add a service for the data to populate.
4. You can filter by different properties like tags, resource group, and timespan. Click Apply to confirm the filters and Download if you want to export the view to a

https://www.gratisexam.com/
 Comma-Separated Values (.csv) file.

Box 3: Download the usage report

References:
https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-using-tags
https://docs.microsoft.com/en-us/azure/billing/billing-getting-started

QUESTION 4
You have a resource group named RG1. RG1 contains an Azure Storage account named storageaccount1 and a virtual machine named VM1 that runs Windows
Server 2016. Storageaccount1 contains the disk files for VM1. You apply a ReadOnly lock to RG1.

What can you do from the Azure portal?

A. Generate an automation script for RG1.

B. View the keys of storageaccount1.
C. Upload a blob to storageaccount1.
D. Start VM1.

Correct Answer: B
Section: [none]
Explanation

Explanation/Reference:
Explanation:
ReadOnly means authorized users can read a resource, but they can't delete or update the resource. Applying this lock is similar to restricting all authorized users
to the permissions granted by the Reader role.

References: https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-lock-resources

QUESTION 5
You have two Azure Active Directory (Azure AD) tenants named contoso.com and fabrikam.com.

You have a Microsoft account that you use to sign in to both tenants.

You need to configure the default sign-in tenant for the Azure portal.

What should you do?

https://www.gratisexam.com/
 https://www.gratisexam.com/

A. From the Azure portal, configure the portal settings.

B. From the Azure portal, change the directory.
C. From Azure Cloud Shell, run Set-AzureRmContext.
D. From Azure Cloud Shell, run Set-AzureRmSubscription.

Correct Answer: B
Section: [none]
Explanation

Explanation/Reference:
Explanation:
Change the subscription directory in the Azure portal.
The classic portal feature Edit Directory, that allows you to associate an existing subscription to your Azure Active Directory (AAD), is now available in Azure portal.
It used to be available only to Service Admins with Microsoft accounts, but now it's available to users with AAD accounts as well.

To get started:

1. Go to Subscriptions.
2. Select a subscription.
3. Select Change directory.

Incorrect Answers:
C: The Set-AzureRmContext cmdlet sets authentication information for cmdlets that you run in the current session. The context includes tenant, subscription, and
environment information.

References: https://azure.microsoft.com/en-us/updates/edit-directory-now-in-new-portal/

QUESTION 6
You sign up for Azure Active Directory (Azure AD) Premium.

You need to add a user named [email protected] as an administrator on all the computers that will be joined to the Azure AD domain.

What should you configure in Azure AD?

https://www.gratisexam.com/
A. Device settings from the Devices blade.
B. General settings from the Groups blade.
C. User settings from the Users blade.
D. Providers from the MFA Server blade.

Correct Answer: C
Section: [none]
Explanation

Explanation/Reference:
Explanation:
When you connect a Windows device with Azure AD using an Azure AD join, Azure AD adds the following security principles to the local administrators group on the
device:

The Azure AD global administrator role

The Azure AD device administrator role
The user performing the Azure AD join

In the Azure portal, you can manage the device administrator role on the Devices page. To open the Devices page:

1. Sign in to your Azure portal as a global administrator or device administrator.

2. On the left navbar, click Azure Active Directory.
3. In the Manage section, click Devices.
4. On the Devices page, click Device settings.
5. To modify the device administrator role, configure Additional local administrators on Azure AD joined devices.

References: https://docs.microsoft.com/en-us/azure/active-directory/devices/assign-local-admin

QUESTION 7
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might
meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your company registers a domain name of contoso.com.

You create an Azure DNS zone named contoso.com, and then you add an A record to the zone for a host named www that has an IP address of 131.107.1.10.

You discover that Internet hosts are unable to resolve www.contoso.com to the 131.107.1.10 IP address.

https://www.gratisexam.com/
You need to resolve the name resolution issue.

Solution: You create a PTR record for www in the contoso.com zone.

Does this meet the goal?

A. Yes
B. No

Correct Answer: B
Section: [none]
Explanation

Explanation/Reference:
Explanation:
Modify the Name Server (NS) record.

References: https://docs.microsoft.com/en-us/azure/dns/dns-delegate-domain-azure-dns

QUESTION 8
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might
meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure subscription that contains 10 virtual networks. The virtual networks are hosted in separate resource groups.

Another administrator plans to create several network security groups (NSGs) in the subscription.

You need to ensure that when an NSG is created, it automatically blocks TCP port 8080 between the virtual networks.

Solution: You assign a built-in policy definition to the subscription.

Does this meet the goal?

A. Yes
B. No

Correct Answer: B
Section: [none]
Explanation

https://www.gratisexam.com/
Explanation/Reference:
Explanation:
Use a custom policy definition.

QUESTION 9
HOTSPOT

You have an Azure subscription named Subscrption1 that is associated to an Azure Active Directory (Azure AD) tenant named AAD1.

Subscription1 contains the objects in the following table:

You plan to create a single backup policy for Vault1. To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

https://www.gratisexam.com/
Correct Answer:

https://www.gratisexam.com/
Section: [none]
Explanation

Explanation/Reference:
Explanation:

Box 1: RG1 only

Box 2: 99 years
With the latest update to Azure Backup, customers can retain their data for up to 99 years in Azure.
Note: A backup policy defines a matrix of when the data snapshots are taken, and how long those snapshots are retained.

https://www.gratisexam.com/
The backup policy interface looks like this:

https://www.gratisexam.com/
https://www.gratisexam.com/
References: https://docs.microsoft.com/en-us/azure/backup/backup-azure-vms-first-look-arm#defining-a-backup-policy
https://blogs.microsoft.com/firehose/2015/02/16/february-update-to-azure-backup-includes-data-retention-up-to-99-years-offline-backup-and-more/

QUESTION 10
SIMULATION

Click to expand each objective. To connect to the Azure portal, type https://portal.azure.com in the browser address bar.

https://www.gratisexam.com/
https://www.gratisexam.com/
https://www.gratisexam.com/
https://www.gratisexam.com/
https://www.gratisexam.com/
https://www.gratisexam.com/
https://www.gratisexam.com/
https://www.gratisexam.com/
When you are finished performing all the tasks, click the ‘Next’ button.

https://www.gratisexam.com/
Note that you cannot return to the lab once you click the ‘Next’ button. Scoring occur in the background while you complete the rest of the exam.

Overview
The following section of the exam is a lab. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it
would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design. Scoring is based on
the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn
credit for that task.

Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each
lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.

Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.

To start the lab

You may start the lab by clicking the Next button.

You plan to move backup files and documents from an on-premises Windows file server to Azure Storage. The backup files will be stored as blobs.

You need to create a storage account named corpdata7523690n2. The solution must meet the following requirements:

Ensure that the documents are accessible via drive mappings from Azure virtual machines that run Windows Server 2016.
Provide the highest possible redundancy for the documents.
Minimize storage access costs.

What should you do from the Azure portal?

Correct Answer: See solution below.

Section: [none]
Explanation

Explanation/Reference:
Explanation:
Step 1: In the Azure portal, click All services. In the list of resources, type Storage Accounts. As you begin typing, the list filters based on your input. Select Storage
Accounts.
Step 2: On the Storage Accounts window that appears, choose Add.
Step 3: Select the subscription in which to create the storage account.
Step 4: Under the Resource group field, select Create New. Create a new Resource

https://www.gratisexam.com/
https://www.gratisexam.com/
Step 5: Enter a name for your storage account: corpdata7523690n2

Step 6: For Account kind select: General-purpose v2 accounts (recommended for most scenarios)
General-purpose v2 accounts is recommended for most scenarios. . General-purpose v2 accounts deliver the lowest per-gigabyte capacity prices for Azure
Storage, as well as industry-competitive transaction prices.

Step 7: For replication select: Read-access geo-redundant storage (RA-GRS)

Read-access geo-redundant storage (RA-GRS) maximizes availability for your storage account. RA-GRS provides read-only access to the data in the secondary
location, in addition to geo-replication across two regions.

References:
https://docs.microsoft.com/en-us/azure/storage/common/storage-quickstart-create-account
https://docs.microsoft.com/en-us/azure/storage/common/storage-account-overview

https://www.gratisexam.com/

https://www.gratisexam.com/