Azure

You purchase a new Azure subscription named Subscription1.You create a virtual machine named VM1 in Subscription1. VM1 is not protected by Azure Backup.You need to protect VM1 by using Azure Backup. Backups must be created at 01:00 and stored for 30 days.What should you do? Locations in which to store the backups: blob container a file share a recovery services vault a storage account Object to use to configure the protection for VM1: a backup policy a batch join a batch schedule a recovery plan

A recovery services vault A backup policy

You have an Azure Active Directory (Azure AD) tenant that contains 5,000 user accounts.You create a new user account named AdminUser1. You need to assign the User administrator administrative role to AdminUser1. What should you do from the user account properties? A. From the Directory role blade, modify the directory role. B. From the Licenses blade, assign a new license. C. From the Groups blade, invite the user account to a new group.

A. Assign a role to a user - 1. sign in to the Azure portal with an account that's a global admin or priviledged role admin for the directory. 2. Select Azure AD, select users, and then select a specific user from the list. 3. For the selected user, select directory role, select add role, and then pick the appropriate admin roles from the directory roles list.

You download an Azure Resource Manager template based on an existing virtual machine. The template will be used to deploy 100 virtual machines.You need to modify the template to reference an administrative password. You must prevent the password from being stored in plain text.What should you create to store the password? A. an Azure Key Vault and an access policy B. a Recovery Services vault and a backup policy C. Azure Active Directory (AD) Identity Protection and an Azure policy D. an Azure Storage account and an access policy

A. An auzre key vault and an access policy

You have an Azure subscription that contains 100 virtual machines.You regularly create and delete virtual machines.You need to identify unattached disks that can be deleted.What should you do? A. From Microsoft Azure Storage Explorer, view the Account Management properties. B. From the Azure portal, configure the Advisor recommendations. C. From Azure Cost Management, view Advisor Recommendations. D. From Azure Cost Management, view Cost Analysis.

A. From the Microsoft Azure Storage Explorer, view the account management properties.

You have two Azure virtual machines named VM1 and VM2. You have two Recovery Services vaults named RSV1 and RSV2.VM2 is protected by RSV1.You need to use RSV2 to protect VM2.What should you do first? A. From the VM2 blade, click Disaster recovery, click replication settings, and then select RSV2 as the Recovery Services Vault. B. From the RSV2 blade, click Backup. From the Backup blade, select the backup for the VM, and then click Backup. C. From the RSV1 blade, click Backup Jobs and export the VM2 job. D. From the RSV1 blade, click Backup items and stop the VM2 backup.

A. From the VM2 blade, click Disaster recovery, click replication settings, and then select RSV2 as the recovery services vault.

You plan to use the Azure Import/Export service to copy files to a storage account.Which two files should you create before you prepare the drives for the import job? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point. A. a driveset CSV file B. a JSON configuration C. a PowerShell PS1 file D. an XML manifest file E. a dataset CSV file

A. Modify the driveset.CSV file in the root folder where the tool resides. E. Modify the dataset.csv file in the root folder where the tool resides. https://docs.microsoft.com/en-us/azure/storage/common/storage-import-export-data-to-files

You have an Azure subscription named Subscription1. You deploy a Linux virtual machine named VM1 to Subscription1. You need to monitor the metrics and the logs of VM1. What should you use? A. the AzurePerformanceDiagnostics extension B. Azure HDInsight C. Linux Diagnostic Extension (LAD) 3.0 D. Azure Analysis Services

A. The Azure performance diagnostics extension

You have an Azure subscription named Subscription1. Subscription1 contains a resource group named RG1. RG1 contains resources that were deployed by using templates.You need to view the date and time when the resources were created in RG1.Solution: From the RG1 blade, you click Deployments.Does this meet the goal? A. Yes B. No

A. Yes

You have an Azure subscription that contains an Azure file share.You have an on-premises server named Server1 that runs Windows Server 2016.You plan to set up Azure File Sync between Server1 and the Azure file share.You need to prepare the subscription for the planned Azure File Sync. Which two actions and in what order should you perform in the Azure subscription? A. Create a Storage Sync Service B. Create a sync group C. Install the Azure File Sync agent D. Run Server Registration

A. create a storage sync service D. create a synch group

You plan to back up an Azure virtual machine named VM1.You discover that the Backup Pre-Check status displays a status of Warning.What is a possible cause of the Warning status? A. VM1 is stopped. B. VM1 does not have the latest version of WaAppAgent.exe installed. C. VM1 has an unmanaged disk. D. A Recovery Services vault is unavailable.

B. VM1 does not have the latest version of WaAppAgent.exe installed

You have an Azure subscription that contains resources in the following: RG1 = Resource Group Store1 = Azure storage account Sync 1 = Azure File Sync Store1 contains a file share named Data. Data contains 5,000 files. You need to synchronize the files in the file share named Data to an on-premises server named Server1. Which 3 actions should you perform? A. Download an automation script B. Register Server1. C. Create a sync group D. Create a container instance E. Install the Azure File Sync agent on Server1

B. Register Server1 C. Create a sync group E. Install the Azure File Sync agent on Server1

You have an Azure subscription.Users access the resources in the subscription from either home or from customer sites. From home, users must establish a point-to-site VPN to access the Azure resources. The users on the customer sites access the Azure resources by using site-to-site VPNs. You have a line-of-business app named App1 that runs on several Azure virtual machine. The virtual machines run Windows Server 2016.You need to ensure that the connections to App1 are spread across all the virtual machines.What are two possible Azure services that you can use? Each correct answer presents a complete solution. A. An Azure Content Delivery Network (CDN) B. An Azure Application Gateway C. Traffic Manager D. An internal load balancer E. a public load balancer

B. An Azure Application Gateway D. An internal load balancer

You have an Azure subscription named Subscription1.You have 5 TB of data that you need to transfer to Subscription1. You plan to use an Azure Import/Export job.What can you use as the destination of the imported data? A. an Azure Cosmos DB database B. Azure File Storage C. the Azure File Sync Storage Sync Service D. Azure Data Factory

B. Azure Import/Export is used to securely import large amounts of data to Azure Blob storage and Azure files by shipping disk drives to an Azure datacenter. Max size of an Azure File Resource of a file share is 5 TB.

You have an Azure virtual machine named VM1. Azure collects events from VM1. You are creating an alert rule in Azure Monitor to notify an administrator when an error is logged in the System event log of VM1. You need to specify which resource type to monitor. What should you specify? A. metric alert B. Azure Log Analytics workspace C. virtual machine D. virtual machine extension

B. Azure log Analytics workspace

You have an Azure subscription named Subscription1. Subscription1 contains a resource group named RG1. RG1 contains resources that were deployed by using templates.You need to view the date and time when the resources were created in RG1. Solution: From the RG1 blade, you click Automation script. Does this meet the goal? A. Yes B. No

B. No

You have an Azure subscription named Subscription1. Subscription1 contains a resource group named RG1. RG1 contains resources that were deployed by using templates.You need to view the date and time when the resources were created in RG1. Solution: From the Subscriptions blade, you select the subscription, and then click Resource providers.Does this meet the goal? A. Yes B. No

B. No

You have an Azure subscription named Subscription1. Subscription1 contains a resource group named RG1. RG1 contains resources that were deployed by using templates.You need to view the date and time when the resources were created in RG1. Solution: From the Subscriptions blade, you select the subscription, and then click Programmatic deployment. Does this meet the goal? A. Yes B. No

B. No, you would need to go to Deployments under the settings of resource group.

You have an Azure Active Directory (Azure AD) tenant named Adatum and an Azure Subscription named Subscription1. Adatum contains a group named Developers. Subscription1 contains a resource group named Dev. You need to provide the Developers group with the ability to create Azure logic apps in the Dev resource group.Solution: On Subscription1, you assign the DevTest Labs User role to the Developers group. Does this meet the goal? A. Yes B. No

B. No. DevTest labs user role only lets you connect, start, restart and shutdown VMs in your Azure DevTest Labs.

You have an azure sub named sub1 that is used by several departments at your company. Sub1 contains resources Storage1 = storage account RG1 = Resource group Container1 = Blob container Share1 = File share Another admin deploys a VM named VM1 and an Azure storage account named Storage2 by using a single Azure Resource Manager template. You need to view the template used for the deployment. From which blade can you view the template that was used for the deployment? A. Container1 B. RG1 C. VM1 D. Storage2

B. RG1

You have a resource group named RG1. RG1 contains an Azure Storage account named SA1 and a virtual machine named VM1 that runs windows 2016. SA1 contains the disk files for VM1. You apply a readonly lock to RG1. What can you do from the Azure portal? A. Generate an automation script for RG1 B. View the keys of SA1 C. Start VM1 D. Upload a blob to SA1

B. View the keys of SA1

You have an Azure subscription named subscription1. Subscription1 contains the resource groups in the following table. Name |Azure |Region |Policy RG1 | West Europe | Policy 1 RG2 | North Europe | Policy 2 RG3 | France Central | Policy 3 RG1 has a web app named web app1. Webapp1 is loacted in west Europe. You move WebApp1 to RG2. What is the effect? A. The App service plan for Webapp1 moves to N. Europe. Policy 2 aplies to webapp1. B. The app service plan for webapp1 remains in W. Europe. Policy 2 applies to webapp1. C. The app service plan for webapp1 moves to N. Europe. Policy 1 applies to webapp1 D. The app serice plan for webapp1 remains in W. Europe. Policy 1 applies to webapp1

B. You can move an app to another app service plan as long as the source and target plan are in the same resource group and geo region. The region in which your app runs is the region of the app service plan.

You have an Azure subscription that contains a virtual machine named VM1. VM1 hosts a line-of-business application that is available 24 hours a day. VM1 has one network interface and one managed disk. VM1 uses the D4s v3 size.You plan to make the following changes to VM1:✑ Change the size to D8s v3.✑ Add a 500-GB managed disk.✑ Add the Puppet Agent extension.✑ Attach an additional network interface.Which change will cause downtime for VM1? A. Add the puppet agent extension B. Change the size to D8 V3. C. add a 500-GB managed disk. D. Attach an additional network interface.

B. change the size. While resizing the VM it must be in a stopped state

You have an Azure subscription that contains a storage account named account1.You plan to upload the disk files of a virtual machine to account1 from your on-premises network. The on-premises network uses a public IP address space of131.107.1.0/24.You plan to use the disk files to provision an Azure virtual machine named VM1. VM1 will be attached to a virtual network named VNet1. VNet1 uses an IP address space of 192.168.0.0/24.You need to configure account1 to meet the following requirements:✑ Ensure that you can upload the disk files to account1.✑ Ensure that you can attach the disks to VM1.✑ Prevent all other access to account1.Which two actions should you perform? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point. A. From the Firewalls and virtual networks blade of account1, add VNet1. B. From the Firewalls and virtual networks blade of account1, select Allow trusted Microsoft services to access this storage account. C. From the Firewalls and virtual networks blade of account1, add the 131.107.1.0/24 IP address range. D. From the Firewalls and virtual networks balde of account1, select Selected networks. E. From the Service endpoints blade of VNet1, add a service endpoint.

C, D

You create an Azure Storage account named contosostorage.You plan to create a file share named data.Users need to map a drive to the data file share from home computers that run Windows 10.Which outbound port should you open between the home computers and the data file share? A. 80 B. 443 C. 445 D. 3389

C. 445 which is the SMB protocol.

You have an Azure subscription that contains a resource group named RG1. RG1 contains 100 virtual machines. Your company has 3 cost centers named Manufacturing, Sales, and Finance. You need to associate each VM to a specific cost center. What should you do. A. Configure locks for the VMs B. Add an extension of the VMs C. Assign tags to the VMs Modify the inventory settings of the VMs.

C. Assign Tags to the VMs.

You have a Recovery Service vault that you use to test backups. The test backups contain two protected virtual machines.You need to delete the Recovery Services vault.What should you do first? A. From the Recovery Service vault, delete the backup data. B. Modify the disaster recovery properties of each virtual machine. C. From the Recovery Service vault, stop the backup of each backup item. D. Modify the locks of each virtual machine.

C. From the recovery services vault, stop the backup of each backup item.

You have an Azure virtual machine named VM1 that you use for testing. VM1 is protected by Azure Backup.You delete VM1.You need to remove the backup data stored for VM1.What should you do first? A. Delete the Recovery Services vault. B. Delete the storage account. C. Stop the backup D. Modify the backup policy.

C. stop the backup

You have an Azure subscription 1 that contains an Azure Log Analytics workspace named Workspace1. You need to view the error events from a table named Event. Which query should you run in Workspace 1? A. Get-Event Event | where {$_.EventType ""eq "error"} B. Get-Event Event | where {$_.EventType =="error"} C. Search in (Event) * | where EventType ""eq "error" D. Search in (Event) "error" E. Select *from Event where EventType == "error" F. Event | where EventType is "error"

D. (To search a term in a specific table, add in (table-name) just after the search operator.

You have an Azure subscription. You have 100 VMs. You need to quickly identify underutilized VMs that can have their service tier changed to a less expensive offering. Which blade should you use? A. Metrics B. Monitor C. Customer Insights D. Advisor

D. Advisor

Your company has an Azure subscription named Subscription1.The company also has two on-premises servers named Server1 and Server2 that run Windows Server 2016. Server1 is configured as a DNS server that has a primary DNS zone named adatum.com. Adatum.com contains 1,000 DNS records.You manage Server1 and Subscription1 from Server2. Server2 has the following tools installed :✑ The DNS Manager console ✑ Azure PowerShell ✑ Azure CLI 2.0 You need to move the adatum.com zone to Subscription1. The solution must minimize administrative effort.What should you use? A. The Azure portal B. The DNS manager console C. Azure PowerShell D. Azure CLI

D. Azure CLI Azure DNS supports importing and exporting zone files by using the Azure command-line interface (CLI). Zone file import is not currently supported via AzurePowerShell or the Azure portal.References:https://docs.microsoft.com/en-us/azure/dns/dns-import-export

You have an Azure subscription named Subscription1.You have 5 TB of data that you need to transfer to Subscription1.You plan to use an Azure Import/Export job.What can you use as the destination of the imported data? A. Azure Data Lake Store B. a virtual machine C. the Azure File Sync Storage Sync Service D. Azure Blob storage

D. Azure blob storage

You have an Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com that contains 100 user accounts.You purchase 10 Azure AD Premium P2 licenses for the tenant. You need to ensure that 10 users can use all the Azure AD Premium features.What should you do? A. From the Directory role blade of each user, modify the directory role. B. From the Azure AD domain, add an enterprise application. C. From the Groups blade of each user, invite the users to a group. D. From the Licenses blade of Azure AD, assign a license.

D. From the licenses blade of Azure AD, assign a license. https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/license-users-groups

You have an Azure subscription named Subscription1.You plan to deploy an Ubuntu Server virtual machine named VM1 to Subscription1.You need to perform a custom deployment of the virtual machine. A specific trusted root certification authority (CA) must be added during the deployment.What should you do? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.

Files to create: Cloud-init.txt Tool to use to deploy the VM: The az vm create command https://docs.microsoft.com/en-us/azure/virtual-machines/linux/tutorial-automate-vm-deployment

You have an Azure Linux virtual machine that is protected by Azure Backup.One week ago, two files were deleted from the virtual machine.You need to restore the deleted files to an on-premises computer as quickly as possible.Which four actions should you perform in sequence? From the Azure portal, click file recovery from the vault Copy the files by using AZcopy select a restore point copy the files by using file explorer from the azure portal, click restore VM from the vault Mount a VHD download and run a script

From the Azure portal, click file recovery form the vault Select a restore point download a run a script copy the files by using AZcopy AZcopy for linux, file explorer for windows

If you have a VM1 in VNET1 and want to connect it to VNET2, does creating a network interface and then adding it to VM1 meet this goal?

No, when you create a VM, you must create a VNet or use an existing VNet. You can change the subnet a VM is connected to after it's created, but you cannot change the VNet.

You have an Azure virtual machine named VM1. VM1 was deployed by using a custom Azure Resource Manager template named ARM1.json. You receive a notification that VM1 will be affected by maintenance.You need to move VM1 to a different host immediately. Solution: From the Overview blade, you move the virtual machine to a different subscription.Does this meet the goal?

No, you need to redeploy the VM

Question 1 scenario. Solution: On Subscription 1, you assign the logic app operator role to the developers group. Does this meet the goal.

No. You need the contributor role. Operator only allows for read, enable/disable.

You plan to use Azure Resource Manager templates to deploy 50 Azure virtual machines that will be part of the same availability set.You need to ensure that as many virtual machines as possible are available if the fabric fails or during servicing.How should you configure the template? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.

PlatformFaulldomain count MAX VALUE (2-3) PlatformUpdate domain count 20

You plan to migrate a large amount of corporate data to Azure Storage and to back up files stored on old hardware to Azure Storage.You need to create a storage account named corpdata9172795n1 in the corpdatalod9172795 resource group. The solution must meet the following requirements:✑ Corpdata9172795n1 must be able to host the virtual disk files for Azure virtual machines.✑ The cost of accessing the files must be minimized.✑ Replication costs must be minimized.What should you do from the Azure portal?

Step 5: Enter a name for your storage account: corpdata9172795n1Step 6: For Account kind select: General-purpose v2 accounts (recommended for most scenarios)General-purpose v2 accounts is recommended for most scenarios. . General-purpose v2 accounts deliver the lowest per-gigabyte capacity prices for AzureStorage, as well as industry-competitive transaction prices.Step 7: For replication select: Read-access geo-redundant storage (RA-GRS)Read-access geo-redundant storage (RA-GRS) maximizes availability for your storage account. RA-GRS provides read-only access to the data in the secondary location, in addition to geo-replication across two regions.References:https://docs.microsoft.com/en-us/azure/storage/common/storage-quickstart-create-account https://docs.microsoft.com/en-us/azure/storage/common/storage-account-overview

You plan to move backup files and documents from an on-premises Windows file server to Azure Storage. The backup files will be stored as blobs.You need to create a storage account named corpdata9172795n2. The solution must meet the following requirements:✑ Ensure that the documents are accessible via drive mappings from Azure virtual machines that run Windows Server 2016.✑ Provide the highest possible redundancy for the documents.✑ Minimize storage access costs.What should you do from the Azure portal?

Step 5: Enter a name for your storage account: corpdata9172795n2Step 6: For Account kind select: General-purpose v2 accounts (recommended for most scenarios)General-purpose v2 accounts is recommended for most scenarios. General-purpose v2 accounts deliver the lowest per-gigabyte capacity prices for AzureStorage, as well as industry-competitive transaction prices.Step 7: For replication select: Read-access geo-redundant storage (RA-GRS)Read-access geo-redundant storage (RA-GRS) maximizes availability for your storage account. RA-GRS provides read-only access to the data in the secondary location, in addition to geo-replication across two regions.References:https://docs.microsoft.com/en-us/azure/storage/common/storage-quickstart-create-account https://docs.microsoft.com/en-us/azure/storage/common/storage-account-overview

You have an availability set named AS1 that contains three virtual machines named VM1, VM2, and VM3. You attempt to reconfigure VM1 to use a larger size. The operation fails and you receive an allocation failure message.You need to ensure that the resize operation succeeds.Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.Select and Place: Start VM2 and VM3 Stop VM2 and VM3 Start VM1 Stop VM1, VM2, and VM3 Resize VM1 Start VM1, VM2, and VM3

Stop VM1, VM2, and VM3 Resize VM1 Start VM1, VM2, and VM3

You need to create an Azure Storage account that meets the following requirements:✑ Minimize costs✑ Supports hot, cool, and archive blob tiers✑ Provides fault tolerance if a disaster affects the Azure region where the account residesHow should you complete the command?

Storage V2 and Standard GRS

You have an Azure subscription named Subscription1. Subscription1 contains two Azure virtual machines named VM1 and VM2. VM1 and VM2 run WindowsServer 2016.VM1 is backed up daily by Azure Backup without using the Azure Backup agent.VM1 is affected by ransomware that encrypts data.You need to restore the latest backup of VM1.To which location can you restore the backup? To answer, select the appropriate options in the answer area. You can perform a file recovery of VM1 to VM1 only VM2 only A new Azure VM only Any windows computer that has internet connectivity You can restore VM1 to: VM1 only VM2 only VM1 and VM2 only A new Azure virtual machine only Any windows computer that has internet connectivity

VM2 only A new Azure VM only

You have an Azure virtual machine named VM1. VM1 was deployed by using a custom Azure Resource Manager template named ARM1.json.You receive a notification that VM1 will be affected by maintenance.You need to move VM1 to a different host immediately.Solution: From the Redeploy blade, you click Redeploy.Does this meet the goal?

Yes

Question 1 scenario. Solution: On Dev, you assign the Logic app contributor role to the developers group. Does this meet the goal?

Yes.

You have an Azure AD tenant named (A) and an Azure subscription named (1). (A) contains a group named developers. Subscription (1) contains a resource group named Dev. You need to provide the Developers group with the ability to create Azure logic apps in the Dev resource group. Solution: On Dev, you assign the Contributor role the the Developers group. Does this meet the goal?

Yes. The contributor role can manage all resources (and add resources) in a resource group.

You plan to create an Azure Storage account in the Azure region of East US 2.You need to create a storage account that meets the following requirements:✑ Replicates synchronously.✑ Remains available if a single data center in the region fails.How should you configure the storage account?

Zone-redundant storage (ZRS) Storage V2 general purpose

You have an Azure subscription named Subscription1.You create an Azure Storage account named contosostorage, and then you create a file share named data.Which UNC path should you include in a script that references files from the data file share?

contosostorage.file.core.windows.net\data 1. the name of the storage account, 2.file.core.windows.net 3. the name of the file share

You have Azure VMs in the following: VM1 and VM2 in West Europe VM3 and VM4 in North Europe You have a Recovery Services vault that protects VM1 and VM2. You need to protect VM3 and VM4 by using Recovery Services.What should you do first? A. Create a new backup policy. B. Configure the extensions for VM3 and VM4 C. Create a storage account D. Create a new Recovery Services vault.

d. Create a new recovery services vault. VMs must be in same region as recovery vault.