Azure 104 Topic 3
HOTSPOT - You have an Azure subscription named Subscription1. In Subscription1, you create an Azure file share named share1. You create a shared access signature (SAS) named SAS1 as shown in the following exhibit: Allowed Services: File Allowed Resource Types: Service, Container, Object. Allowed Permission: Read, Write, List. Start & Expiry time: Start: 2018-09-01 2pm. End: 2018-09-04 2pm Allowed IP address 193.77.134.10 - 193.77.134.50 Allowed protocols: HTTPS only Signing Key: Key1 To answer, select the appropriate options in the answer area: Hot Area: Answer Area: 1. If on Sept 2nd, 2018, you run Microsoft Azure Storage Explorer on a computer that has an IP address of 193.77.134.1 and you use SAS1 to connect to the storage account, you [will be prompted for credentials // will have no access // will have read, write, and list access // will have read-only access] 2. If on Sept 10th, 2018, you run the net use command on a computer that has an IP address of 193.77.134.50 and you use SAS1 as the password to connect to share 1, you: [will be prompted for credentials // will have no access // will have read, write, and list access // will have read-only access]
1. You will have no access. The IP is out of range. 2. You will have no access. The net use command uses SMB; which does not support SAS.
You have an Azure subscription named Subscription1. You have 5 TB of data that you need to transfer to Subscription1. You plan to use an Azure Import/Export job. What can you use as the destination of the imported data? A. Azure File Storage B. an Azure Cosmos DB database C. Azure Data Factory D. Azure SQL Database
A. Azure File Storage
You have an Azure subscription that contains a storage account named account1. You plan to upload the disk files of a virtual machine to account1 from your on-premises network. The on-premises network uses a public IP address space of 131.107.1.0/24. You plan to use the disk files to provision an Azure virtual machine named VM1. VM1 will be attached to a virtual network named VNet1. VNet1 uses an IP address space of 192.168.0.0/24. You need to configure account1 to meet the following requirements: ✑ Ensure that you can upload the disk files to account1. ✑ Ensure that you can attach the disks to VM1. ✑ Prevent all other access to account1. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point. A. From the Networking blade of account1, select Selected networks. B. From the Networking blade of account1, select Allow trusted Microsoft services to access this storage account. C. From the Networking blade of account1, add the 131.107.1.0/24 IP address range. D. From the Networking blade of account1, add VNet1. E. From the Service endpoints blade of VNet1, add a service endpoint
A. From the Networking blade of account1, select Selected networks. C. From the Networking blade of account1, add the 131.107.1.0/24 IP address range.
You have an Azure subscription. In the Azure portal, you plan to create a storage account named storage1 that will have the following settings: ✑ Performance: Standard ✑ Replication: Zone-redundant storage (ZRS) ✑ Access tier (default): Cool ✑ Hierarchical namespace: Disabled You need to ensure that you can set Account kind for storage1 to BlockBlobStorage. Which setting should you modify first? A. Performance B. Replication C. Access tier (default) D. Hierarchical namespace
A. Performance
HOTSPOT - You have an Azure Storage account named storage1 that stores images. You need to create a new storage account and replicate the images in storage1 to the new account by using object replication. How should you configure the new account? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area: Answer Area: Account Type: [Storage V2::: StorageV2, or FileStorage only::: Storagev2 or Blob Storage only::: StorageV2, or BlobStorage or FileStorage]] Object type to create in the new account. [Container::: File Share::: Table::: Queue]]
Account Type: Storage V2, or Blob Storage Object type to create in the new account: Container
You have an Azure subscription that contains an Azure Storage account. You plan to create an Azure container instance named container1 that will use a Docker image named Image1. Image1 contains a Microsoft SQL Server instance that requires persistent storage. You need to configure a storage service for Container1. What should you use? A. Azure Files B. Azure Blob storage C. Azure Queue storage D. Azure Table storage
Answer is A. It should be A "Azure Files". Azure files are used as persistent disks for docker images. It doesn't matter the type of the image or its functionality.
You have an Azure subscription that contains the storage accounts shown in the following table. | Name | Type | Performance | storage1 | StorageV2 | Standard | storage2 | BlobStorage | Standard | storage3 | BlockBlobStorage | Premium | storage4 | FileStorage | Premium You plan to manage the data stored in the accounts by using lifecycle management rules. To which storage accounts can you apply lifecycle management rules? A. storage1 only B. storage1 and storage2 only C. storage3 and storage4 only D. storage1, storage2, and storage3 only E. storage1, storage2, storage3, and storage4
Answer is D: Storage1, storage2, and storage3 only The lifecycle management feature is available in all Azure regions for general purpose v2 (GPv2) accounts, blob storage accounts, premium block blobs storage accounts, and Azure Data Lake Storage Gen2 accounts. Premium file does not support that.
You have an Azure subscription named Subscription1. You create an Azure Storage account named contosostorage, and then you create a file share named data. Which UNC path should you include in a script that references files from the data file share? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point. Select and Place: Values: [Blob] [blob.core.windows.net] [contosostorage] [data] [file] [file.core.windows.net] [portal.azure.com] [subscription1] Answer Area: \\[***].[***]\[***]
Answer: contosostorage.file.core.windows.net\data Template: \\[storageaccountname].file.core.windows.net/[FileShareName]
HOTSPOT - You have an Azure Storage account named storage1. You have an Azure App Service app named App1 and an app named App2 that runs in an Azure container instance. Each app uses a managed identity. You need to ensure that App1 and App2 can read blobs from storage1. The solution must meet the following requirements: ✑ Minimize the number of secrets used. Ensure that App2 can only read from storage1 for the next 30 days. What should you configure in storage1 for each app? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Answer Area: App1: Access keys, advanced security, access control (IAM), Shared access signatures (SAS) App2: Access keys, advanced security, access control (IAM), Shared access signatures (SAS)
App1: IAM App2: SAS
You have Azure Storage accounts as shown in the following exhibit. Home > Storage Accounts: Storage accounts: | Name------------ | Type | KIND |Resource.. | Location | Sub | Access Tier | Replicat.. | storageaccount1 | storage account | storage | ContosoRG1 | East US | Sub 1 | .. | read-access | storageaccount2 | storage account | storageV2 | ContosoRG1 | Central US | Sub 1 | Hot | Geo-redundant | storageaccount3 | storage account | BloblStorage | ContosoRG1 | East US | Sub 1 | Hot | Locally-redundant Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point. Hot Area: Answer Area: 1. You can use [answer choice] for Azure Table Storage. [storageaccount1 only, storageaccount2only, storageaccount3only, storageaccount1 & storageaccount2 only, storageaccount2 & storageaccount3 only] 2. You can use [answer choice] for Azure Blob Storage. [storageaccount3 only, storageaccount2 & storageaccount3 only, storageaccount1 & storageaccount3 only, all the storage accounts]
Azure Table Storage: storage 1 & 2. Azure Blob Storage: all storage accounts.
You have an Azure Storage account named storage1 that contains a blob container named container1. You need to prevent new content added to container1 from being modified for one year. What should you configure? A. the access tier B. an access policy C. the Access control (IAM) settings D. the access level
B. an access policy
You have an Azure subscription that contains the storage accounts shown in the following table. | Name | Kind | Performance | Replication | Access Tier | Storage1 | Storage (GP v1) | Premium | Geo-RS | None | Storage2 | StorageV2 (GP v2) | Standard | Locally-RS | Cool | Storage3 | StorageV2 (GP v2) | Premium | ReadA-GRS | Hot | Storage4 | BlobStorage | Standard | L-redund S | Hot You need to identify which storage account can be converted to zone-redundant storage (ZRS) replication by requesting a live migration from Azure support. What should you identify? A. storage1 B. storage2 C. storage3 D. storage4
B. storage2. The key to the answer in this question is "Live migration" - You can do Live migration to ZRS(zone redundant storage) from LRS(locally redundant storage or GRS (Geo-RS) only. - Also this only applies on General Purpose v2 storage. (RA is Read Access)
HOTSPOT - You have an Azure subscription that contains an Azure Storage account named storageaccount1. You export storageaccount1 as an Azure Resource Manager template. The template contains the following sections. [Type: Microsoft.Storage/storageAccount: location: EastUS name: Standard_LRS. Tier: Standard Kind: StorageV2 bypass: AzureServices: VirtualnetworkRules & IPrules: [] defaultAction: Allow Supports HTTPSTrafficonly: True keytype: Account Enabled: True accessTier: Hot For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point Hot Area: Answer Area: 1. A server that has a public IP address of 131.107.103.10 can access storageaccount1: Y/N 2. Individual blobs in storageaccount1 can be set to use the archive tier: Y/N 3. Global administrations in Azure Active Directory (Azure AD) can access a file share hosted in storageaccount1 by using their Azure AD credentials: Y/N
Box 1- Yes. VirtualNetworkRules & IpRules are blank, with the default action Allow. Box 2- Yes. Individual blobs can be set to the archive tier - ref.https://docs.microsoft.com/en-us/azure/storage/blobs/access-tiers-overview Bob 3. No. To access blob data in the Azure portal with Azure AD credentials, a user must have the following role assignments: A data access role, such as Storage Blob Data Contributor The Azure Resource Manager Reader role
HOTSPOT - You have an Azure subscription named Subscription1 that contains the resources shown in the following table. | Name | Type | Location | Resource Group | | RG1 | Resource Group | West US | NA | RG2 | Resource Group | West US | NA | Vault1 | Recovery Services Vault | Central US | RG1 | Vault2 | Recovery Services Vault | West US | RG2 | VM1 | Virtual Machine | Central US | RG2 | storage1 | Storage Account | West US | RG1 | SQL 1 | Azure SQL database | East US | RG2 In storage1, you create a blob container named blob1 and a file share named share1. Which resources can be backed up to Vault1 and Vault2? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area: 1. Can use Vault1 for backups: VM1 only::: VM1 & Share1 only::: VM1 and SQL1 only::: VM1, storage1, and SQL1 only:::: VM1, blob1, share1, and SQL1 2. Can use Vault2 for backups: storage1 only::: share1 only:::: VM1 and share1 only ::::: blob1 and share1 only::::: storage1 and SQL1 only
Box 1: VM1 only VM1 is in the same region as Vault1. File1 is not in the same region as Vautl1. SQL is not in the same region as Vault1. Blobs cannot be backup up to service vaults. Note: To create a Vault to protect VMs, the Vault must be in the same Region as the VMs. Box 2: Share1 only Storage1 is in the same region as Vault2. Share1 is in Storage1. Note: Only VM and Fileshare is allowed to Backup.
You have a general-purpose v1 Azure Storage account named storage1 that uses locally-redundant storage (LRS). You need to ensure that the data in the storage account is protected if a zone fails. The solution must minimize costs and administrative effort. What should you do first? A. Create a new storage account. B. Configure object replication rules. C. Upgrade the account to general-purpose v2. D. Modify the Replication setting of storage1.
C: Upgrade the account to general-purpose V2. V1 supports GRS/RA-GRS but question was about least cost. Least cost is ZRS which is only supported for v2 and premium file/block storage.
You have an Azure Storage account named storage1 that contains a blob container. The blob container has a default access tier of Hot. Storage1 contains a container named conainer1. You create lifecycle management rules in storage1 as shown in the following table. | Name | Rule Scope | Block type | Blob Subtype | Rule Block | Prefix match| | Rule1 | Limit blobs by using filters | Block blobs | Base blobls | If base blobs not modified for 2 days, move to archive storage, if not modified 9 days, delete | container1/Dep1 | | Rule2 | Apply to all blobs in storage1. | Block blobs | base blobs | If base blobs not modified for 3 days, move to cool. If not modified for 9 days, move to archive storage | Not applicable. You perform the actions shown in the following table. | Date | Action | October 1 | Upload 3 files named Dep1file1, File2.docx, and File3.docx to container 1. | October 2 | Edit Dep1File1 docx and File3.docx | October 5 | Edit File2.docx. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. On October 10, you can read Dep1File1.docx. Y/N On October 10, you can read File2.docx. Y/N On October 10, you can read File3.docx. Y/N
Can read Dep1File1; N Can read File2: Y Can read File3: Y
You have an Azure Storage account named storage1. You plan to use AzCopy to copy data to storage1. You need to identify the storage services in storage1 to which you can copy the data. Which storage services should you identify? A. blob, file, table, and queue B. blob and file only C. file and table only D. file only E. blob, table, and queue only
Correct Answer B - blob and file only Azure Import job supports: Azure Blob Storage, and Azure Files storage Azure Export job supports: Azure Blob Storage
HOTSPOT - You have an Azure subscription that contains the storage accounts shown in the following exhibit. Storage Accts: Default Directory: | Name------ | Type--------- | Kind | RG | Location | Contoso101 | Storage Acct | StorageV2 | RG1 | East US | Contoso102 | Storage Acct | Storage | RG1 | East US | Contoso103 | Storage Acct | BlobStorage | RG1 | East US | Contoso104 | Storage Acct | FileStorage | RG1 | East US Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point. Hot Area: Answer Area: 1. You can create a premium fileshare in: [Contoso101 only:: Contoso104 only:: Contoso101 or Contoso104 only::: Contoso101, 102, or 104 only::: Contoso101, 102, 103, 104 only] 2. You can use the Archive access tier in: [Contoso101 only:: Contoso101 or Contoso103 only:: Contoso101, 102, and 103 only:: Contoso101, 102, and 104 only:: Contoso101, 102, 103, 104]
Correct Answer: Box 1: contoso104 only Premium file shares are hosted in a special purpose storage account kind, called a FileStorage account. Box 2: contoso101 and contos103 only Object storage data tiering between hot, cool, and archive is supported in Blob Storage and General Purpose v2 (GPv2) accounts. General Purpose v1 (GPv1) accounts don't support tiering. The archive tier supports only LRS, GRS, and RA-GRS.
DRAG DROP - You have an on-premises file server named Server1 that runs Windows Server 2016. You have an Azure subscription that contains an Azure file share. You deploy an Azure File Sync Storage Sync Service, and you create a sync group. You need to synchronize files from Server1 to Azure. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. Select and Place: Install the Azure File sync agent on Server1 Create an Azure on-premises data gateway Create a Recovery Services vault Register Server1 Add a server endpoint Install the DFS Replication Server role on Server1
Correct Answer: Step 1: Install the Azure File Sync agent on Server1 The Azure File Sync agent is a downloadable package that enables Windows Server to be synced with an Azure file share Step 2: Register Server1 Register Windows Server with Storage Sync Service Registering your Windows Server with a Storage Sync Service establishes a trust relationship between your server (or cluster) and the Storage Sync Service. Step 3: Add a server endpoint Create a sync group and a cloud endpoint. A sync group defines the sync topology for a set of files. Endpoints within a sync group are kept in sync with each other. A sync group must contain one cloud endpoint, which represents an Azure file share and one or more server endpoints. A server endpoint represents a path on registered server.
You have an Azure subscription named Subscription1. You have 5 TB of data that you need to transfer to Subscription1. You plan to use an Azure Import/Export job. What can you use as the destination of the imported data? A. an Azure Cosmos DB database B. Azure Blob storage C. Azure Data Lake Store D. the Azure File Sync Storage Sync Service
Correct Answer: Azure Import/Export service is used to securely import large amounts of data to Azure Blob storage and Azure Files by shipping disk drives to an Azure datacenter. This service can also be used to transfer data from Azure Blob storage to disk drives and ship to your on-premises sites. Data from one or more disk drives can be imported either to Azure Blob storage or Azure Files. The maximum size of an Azure Files Resource of a file share is 5 TB. Note: There are several versions of this question in the exam. The question has two correct answers: 1. Azure File Storage or 2. Azure Blob Storage The question can have other incorrect answer options, including the following: ✑ Azure Data Lake Store ✑ Azure SQL Database ✑ Azure Data Factory
HOTSPOT - You have an Azure subscription that contains the file shares shown in the following table. | Name | Location | share1 | West US | share2 | West US | share3 | East US You have the on-premises file shares shown in the following table. | Name | Server | Path | data1 | Server1 | D:\Folder1 | data2 | Server2 | E:\Folder2 | data3 | Server3 | E:\Folder2 You create an Azure file sync group named Sync1 and perform the following actions: ✑ Add share1 as the cloud endpoint for Sync1. ✑ Add data1 as a server endpoint for Sync1. ✑ Register Server1 and Server2 to Sync1. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area: Answer area: 1. You can add share3 as an additional cloud endpoint for sync1 (Y/N) 2. You can add data2 as an additional server endpoint for sync1 (Y/N) 3. You can add data3 as an additional server endpoint for sync1 (Y/N)
Correct Answer: Box 1: No A sync group must contain one cloud endpoint, which represents an Azure file share and one or more server endpoints. Box 2: Yes Data2 is located on Server2 which is registered to Sync1. Box 3: No Data3 is located on Server3 which is not registered to Sync1.
HOTSPOT - You plan to create an Azure Storage account in the Azure region of East US 2. You need to create a storage account that meets the following requirements: ✑ Replicates synchronously. ✑ Remains available if a single data center in the region fails. How should you configure the storage account? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area: Answer Area: 1. Replication: Geo-redundant storage(GRS), Locally-redundant storage (LRS), Read-Access Geo-redundant storage (RA GRS), Zone-redundant storage) ZRS. 2. Account type: Blob-storage, Storage (general purpose v1) StorageV2(general purpose v2)
Correct Answer: Box 1: Zone-redundant storage (ZRS) Zone-redundant storage (ZRS) replicates your data synchronously across three storage clusters in a single Region. GRS protects against Zone failure, while ZRS protects against data center failure. LRS would not remain available if a data center in the region fails. GRS and RA GRS use asynchronous replication. Box 2: StorageV2 (general purpose V2) ZRS only support GPv2.
DRAG DROP - You have an Azure subscription that contains an Azure file share. You have an on-premises server named Server1 that runs Windows Server 2016. You plan to set up Azure File Sync between Server1 and the Azure file share. You need to prepare the subscription for the planned Azure File Sync. Which two actions should you perform in the Azure subscription? To answer, drag the appropriate actions to the correct targets. Each action may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point. Select and Place: Actions: [Create a Storage Sync Service:: Install the Azure File Sync agent::: Create a sync group::: Run Server Registration] Answer area: First Action: ? Second Action: ?
Correct Answer: First action: Create a Storage Sync Service The deployment of Azure File Sync starts with placing a Storage Sync Service resource into a resource group of your selected subscription. Second action: Install the Azure File Sync agent The Azure File Sync agent is a downloadable package that enables Windows Server to be synced with an Azure file share. 1. Prepare Windows Server to use with Azure File Sync 2. Deploy the Storage Sync Service 3. Install the Azure File Sync agent 4. Register Windows Server with Storage Sync Service 5. Create a sync group and a cloud endpoint 6. Create a server endpoint 7. Configure firewall and virtual network settings
HOTSPOT - You have an Azure subscription named Subscription1 that contains the resources shown in the following table: | Name---- | Type --------| Location --| RG | RG1------ | RG ----------| East US ----| NA | RG2------ | RG ----------| West US--- | NA | Vault1---- | Rec Ser Vault | West Euro | RG1 | storage1-- | storage acct | East US ---| RG2 | storage2- | storage acct | West US --| RG1 | storage3- | storage acct | West Euro | RG2 | Analytics1 | Log An. WS- | East US ---| RG1 | Analytics2 | Log An. WS | West US--- | RG2 | Analytics3 | Log An. WS | West Euro -| RG1 You plan to configure Azure Backup reports for Vault1. You are configuring the Diagnostics settings for the AzureBackupReports log. Which storage accounts and which Log Analytics workspaces can you use for the Azure Backup reports of Vault1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area: Answer Area: 1. Storage Area: [Storage1 only::: Storage2 only:: Storage3 only:: Storage1,2, & 3] 2. Log Analytics workspaces: [Analytics1 only:: Analytics2 only:: Analytics3 only:: Analytics1, 2, and 3]
Correct Answer: Storage accounts: Storage 3 only Storage Account must be in the same Region as the Recovery Services Vault. Log Analytics workspaces: Analytics1, Analytics2, and Analytics3 Set up one or more Log Analytics workspaces to store your Backup reporting data. The location and subscription where this Log Analytics workspace can be created is independent of the location and subscription where your Vaults exist.
You have several Azure virtual machines on a virtual network named VNet1. You configure an Azure Storage account as shown in the following exhibit. Contoso > Firewalls & virtual networks: Allow access from selected networks. |V Network | Subnet | Address | Endpoint ST | Resource | Sub | VNet1 | 1 | 10.2.0.0/16 | Demo RG | Prod sub | | Prod | 10.2.0.0/24 | Demo RG | Prod Sub No address range No exceptions Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point. Answer Area: The virtual machines on the 10.2.9.0/24 subnet will have network connectivity to the file shares in the storage account [always, during a backup, never] Azure Backup will be able to back up the unmanaged hard disks of the virtual machines in the storage account [ always, during a backup, never]
Correct Answer: VNet1's address space is 10.2.0.0/16. The VNet1 has only 1 Subnet associated: 10.2.0.0/24. The address space of a VNet is irrelevant if there isn't a corresponding Subnet from, which VMs can be assigned IP addresses. Box1: Never VMs from 10.2.9.0/24 (10.2.9.0 - 10.2.9.255) are out of Subnet. Subnet IP range 10.2.0.0 - 10.2.0. 255. Box2: Never Since the checkbox to allow trusted Microsoft services is not checked. After you configure firewall and virtual network settings for your storage account, select Allow trusted Microsoft services to access this storage account as an exception to enable Azure Backup service to access the network restricted storage account.
HOTSPOT - You have an Azure Storage account named storage1 that uses Azure Blob storage and Azure File storage. You need to use AzCopy to copy data to the blob storage and file storage in storage1. Which authentication method should you use for each type of storage? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area: Answer Area: 1. Blob Storage: [Azure Active Directory(AD) only:: Shared Access Signatures (SAS) only:::: Access keys & SAS only:::: Azure AD and SAS only::::Azure AD, access keys, and SAS only] 2. File Storage: [Azure Active Directory(AD) only:: Shared Access Signatures (SAS) only:::: Access keys & SAS only:::: Azure AD and SAS only::::Azure AD, access keys, and SAS only]
Correct Answer: You can provide authorization credentials by using Azure Active Directory (AD), or by using a Shared Access Signature (SAS) token. Box 1: Both Azure Active Directory (AD) and Shared Access Signature (SAS) token are supported for Blob storage. Box 2: Only Shared Access Signature (SAS) token is supported for File storage
You have an Azure subscription that contains the resources shown in the following table. | Name | Type | Resource Group | VNET1 | Virtual Network | RG1 | VNET2 | Virtual Network | RG2 | VM1 | Virtual Network | RG2 The status of VM1 is Running. You assign an Azure policy as shown in the exhibit. (Click the Exhibit tab.) Assign Policy: SCOPE Scope: Azure Pass /RG2 Exclusions: none Policy definition & Assignment Name: Not allowed resource types Assigned by: First User Parameters: 3 selected You assign the policy by using the following parameters: Microsoft.ClassicNetwork/virtualNetworks Microsoft.Network/virtualNetworks Microsoft.Compute/virtualMachines For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area: An administrator can move to VNET1 to RG2: Y/N The state of VM1 can be changed to deallocated: Y/N An administrator can modify the address space of VNET2: Y/N
Correct Answer: Box 1: No. Cannot move. Box 2: No Existing resources are not modified by newly created policies. VM will stay as is. Box 3: No New changes to existing resources will have to be compliant with the policies applying the RG, so no new changes will be allowed to existing VNETs.
HOTSPOT -You have Azure subscription that includes following Azure file shares: | Name | In Storage Account | Location | share1 | Storage1 | West US | share2 | Storage1 | West US You have the following on-premises servers: | Name | Folders | Server1 | D:\Folder1, E:\Folder2 |Server2 | D:\Data You create a Storage Sync Service named Sync1 and an Azure File Sync group named Group1. Group1 uses share1 as a cloud endpoint. You register Server1 and Server2 in Sync1. You add D:\Folder1 on Server1 as a server endpoint of Group1. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Answer Area: Share2 can be added as a cloud endpoint for Group1: Y/N E:\Folder2 on Server1 can be added as a server endpoint for Group1: Y/N D:\Data on Server2 can be added as a server endpoint for Group1: Y/N
Correct Answer: Box 1: No A sync group contains one cloud endpoint, or Azure file share, and at least one server endpoint. Box 2: No Azure File Sync does not support more than one server endpoint from the same server in the same Sync Group. Box 3: Yes Multiple server endpoints can exist on the same volume if their namespaces are not overlapping (for example, F:\sync1 and F:\sync2) and each endpoint is syncing to a unique sync group.
HOTSPOT - You need to create an Azure Storage account that meets the following requirements :✑ Minimizes costs ✑ Supports hot, cool, and archive blob tiers ✑ Provides fault tolerance if a disaster affects the Azure region where the account resides. How should you complete the command? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area: Answer Area: az storage account create -g RG1 -n storageaccount1 --kind [FileStorage:::Storage:::StorageV2] -sku [Standard_GRS::::Standard_LRS::: Standard_RAGRS::: Premium_LRS]
Correct Answer: Box 1: StorageV2 Box 2: Standard_GRS
You have an Azure File sync group that has the endpoints shown in the following table. | Name | Type | Endpoint1 | Cloud endpoint | Endpoint2 | Server endpoint | Endpoint3 | Server endpoint Cloud tiering is enabled for Endpoint3. You add a file named File1 to Endpoint1 and a file named File2 to Endpoint2. On which endpoints will File1 and File2 be available within 24 hours of adding the files? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area: Answer Area: 1. File1: [Endpoint1 only, Endpoint3 only, Endpoint 2 & 3 only, Endpoint 1,2 & 3] 2. File2: [Endpoint2 only, Endpoint 3 only, Endpoint 2 & 3 only, Endpoint 1,2 & 3]
Correct Answer: File1: Endpoint1 only. It is a cloud endpoint, and it is scanned by the detection job every 24 hours. File2: Endpoint1, Endpoint2 and Endpoint3. With the on-premises servers the file is scanned and synced automatically after it's being added. Note: They changed the question in Exam from "within 24 hours" to "after 24 hours". So, the answer is: File1: Endpoint1, Endpoint2 and Endpoint3 File2: Endpoint1, Endpoint2 and Endpoint3
Drag Drop: You have an Azure subscription that contains a storage account. You have an on-premises server named Server1 that runs Windows Server 2016. Server1 has 2 TB of data. You need to transfer the data to the storage account by using the Azure Import/Export service. In which order should you perform the actions? To answer, move all actions from the list of actions to the answer area and arrange them in the correct order. NOTE: More than one order of answer choices is correct. You will receive credit for any of the correct orders you select. Select & Place: Actions: * From the Azure portal, update the import job. * From the azure portal, create an import job. * Attach an external disk to Server1 and then run waimportexport.exe * Detach the external disks from Server1 and ship the disks to an Azure data center.
Correct Answer: Step 1: Prepare the drives (Attach an external disk to Server1 and then run waimportexport.exe) Step 2: Create an import job (From the Azure portal, create an import job) Step 3: Ship the drives to the Azure datacenter (Detach the external disks from Server1 and ship the disks to an Azure data center) Step 4: Update the job with tracking information (From the Azure portal, update the import job)
You have an Azure subscription that contains an Azure Storage account. You plan to copy an on-premises virtual machine image to a container named vmimages. You need to create the container for the planned image. Which command should you run? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Answer Area: az copy [make, sync, copy] 'https://mystorageaccount.[blob, dfs, queue, table, images, file].core.windows.net/vimages'
Correct Answer: azcopy make 'https://mystorageaccount.blob.core.windows.net/vmimages' Similar to OS Images, a VM Image is a collection of metadata and pointers to a set of VHDs (one VHD per disk) stored as page blobs in Azure Storage.
You have two Azure virtual machines named VM1 and VM2. You have two Recovery Services vaults named RSV1 and RSV2. VM2 is backed up to RSV1. You need to back up VM2 to RSV2. What should you do first? A. From the RSV1 blade, click Backup items and stop the VM2 backup B. From the RSV2 blade, click Backup. From the Backup blade, select the backup for the virtual machine, and then click Backup C. From the VM2 blade, click Disaster recovery, click Replication settings, and then select RSV2 as the Recovery Services vault D. From the RSV1 blade, click Backup Jobs and export the VM2 job
Correct Answer: A VMs can only be backed up in a single Recovery Services Vault. You have to stop the VM2 backup from the RSV1 first. Otherwise you won't able find the VM2 in RSV2.
You plan to use the Azure Import/Export service to copy files to a storage account. Which two files should you create before you prepare the drives for the import job? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point. A. an XML manifest file B. a dataset CSV file C. a JSON configuration file D. a PowerShell PS1 file E. a driveset CSV file
Correct Answer: B and E Modify the dataset.csv file in the root folder where the tool resides. Depending on whether you want to import a file or folder or both, add entries in the dataset.csv file Modify the driveset.csv file in the root folder where the tool is.
You have an Azure subscription that contains the resources in the following table. | Name | Type | RG1 | Resource Group | store1 | Azure Storage Account | Sync1 | Azure File Sync Store1 contains a file share named data. Data contains 5,000 files. You need to synchronize the files in the file share named data to an on-premises server named Server1. Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point. A. Create a container instance B. Register Server1 C. Install the Azure File Sync agent on Server1 D. Download an automation script E. Create a sync group
Correct Answer: B, C and E Step 1: Install the Azure File Sync agent on Server1. The Azure File Sync agent is a downloadable package that enables Windows Server to be synced with an Azure file share. Step 2: Register Server1. Register Windows Server with Storage Sync Service. Registering your Windows Server with a Storage Sync Service establishes a trust relationship between your server and the Storage Sync Service. Step 3: Create a sync group and a cloud endpoint. A sync group defines the sync topology for a set of files. Endpoints within a sync group are kept in sync with each other. A sync group must contain one cloud, which represents an Azure file share and one or more server endpoints. A server endpoint represents a path on registered server.
You have Azure subscription that includes data in following locations: | Name -----| Type | container1 | Blob container | share1 -----| Azure files share | DB1 --------| SQL database | Table1 ------| Azure Table You plan to export data by using Azure import/export job named Export1. You need to identify the data that can be exported by using Export1. Which data should you identify? A. DB1 B. container1 C. share1 D. Table1
Correct Answer: B. Container1. Azure Import/Export service supports the following of storage accounts: ✑ Standard General Purpose v2 storage accounts (recommended for most scenarios) ✑ Blob Storage accounts ✑ General Purpose v1 storage accounts (both Classic or Azure Resource Manager deployments) Azure Import/Export service supports the following storage types: ✑ Import supports Azure Blob storage and Azure File storage ✑ Export supports Azure Blob storage. Azure Files not supported. Only container1 can be exported.
You have an Azure subscription named Subscription1. You have 5 TB of data that you need to transfer to Subscription1. You plan to use an Azure Import/Export job. What can you use as the destination of the imported data? A. a virtual machine B. an Azure Cosmos DB database C. Azure File Storage D. the Azure File Sync Storage Sync Service
Correct Answer: C Azure Import/Export service is used to securely import large amounts of data to Azure Blob storage and Azure Files by shipping disk drives to an Azure datacenter. This service can also be used to transfer data from Azure Blob storage to disk drives and ship to your on-premises sites. Data from one or more disk drives can be imported either to Azure Blob storage or Azure Files. The maximum size of an Azure Files Resource of a file share is 5 TB. Note: There are several versions of this question in the exam. The question has two correct answers: 1. Azure File Storage or 2. Azure Blob Storage The question can have other incorrect answer options, including the following: ✑ Azure Data Lake Store ✑ Azure SQL Database ✑ Azure Data Factory
You have an on-premises server that contains a folder named D:\Folder1. You need to copy the contents of D:\Folder1 to the public container in an Azure Storage account named contosodata. Which command should you run? A. https://contosodata.blob.core.windows.net/public B. azcopy sync D:\folder1 https://contosodata.blob.core.windows.net/public --snapshot C. azcopy copy D:\folder1 https://contosodata.blob.core.windows.net/public --recursive D. az storage blob copy start-batch D:\Folder1 https://contosodata.blob.core.windows.net/public
Correct Answer: C C: The azcopy copy command copies a directory (and all the files in that directory) to a blob container. The result is a directory in the container by the same name. A: URL of the Storage Account. B: The azcopy sync command replicates the source location to the destination location. However, the file is skipped if the last modified time in the destination is more recent. D: The az storage blob copy start-batch command copies multiple blobs to a blob container.
You have an app named App1 that runs on two Azure virtual machines named VM1 and VM2. You plan to implement an Azure Availability Set for App1. The solution must ensure that App1 is available during planned maintenance of the hardware hosting VM1 and VM2. What should you include in the Availability Set? A. one update domain B. two fault domains C. one fault domain D. two update domains
Correct Answer: D When you create an Availability Set, the hardware in a location is divided into multiple update domains and fault domains. An update domain is a group of VMs and underlying physical hardware that can be rebooted at the same time. VMs in the same fault domain share common storage as well as a common power source and network switch. During scheduled maintenance, only one update domain is updated at any given time. Update domains aren't necessarily updated sequentially. So, we need two update domains.
You create an Azure Storage account named contosostorage. You plan to create a file share named data. Users need to map a drive to the data file share from home computers that run Windows 10. Which outbound port should you open between the home computers and the data file share? A. 80 B. 443 C. 445 D. 3389
Correct answer is port 445, as this is port for SMB protocol to share files Incorrect: Port 80: HTTP, this is for web Port 443: HTTPS, for web too Port 3389: Remote desktop protocol (RDP)
You have a Recovery Service vault that you use to test backups. The test backups contain two protected virtual machines. You need to delete the Recovery Services vault. What should you do first? A. From the Recovery Service vault, delete the backup data. B. Modify the disaster recovery properties of each virtual machine. C. Modify the locks of each virtual machine. D. From the Recovery Service vault, stop the backup of each backup item.
D. From the Recovery Service vault, stop the backup of each backup item.
You have an Azure subscription named Subscription1 that contains the storage accounts shown in the following table: | Name ---| Acct kind------| Azure service that contains data | storage1 | Storage ------ | File | storage2 | StorV2(GPv2)-| File, Table | storage3 | StorV2(GPv2)-| Queue | storage4 | BlobStorage--| Blob You plan to use the Azure Import/Export service to export data from Subscription1.You need to identify which storage account can be used to export the data. What should you identify? A. storage1 B. storage2 C. storage3 D. storage4
D. Storage4 Azure Import/Export service supports the following of storage accounts: ✑ Standard General Purpose v2 storage accounts (recommended for most scenarios) ✑ Blob Storage accounts ✑ General Purpose v1 storage accounts (both Classic or Azure Resource Manager deployments),. Azure Import/Export service supports the following storage types: ✑ Import supports Azure Blob storage and Azure File storage ✑ Export supports Azure Blob storage. Azure Files not supported. Only storage4 can be exported.
HOTSPOT -You have an Azure subscription. You create the Azure Storage account shown in the following exhibit.. Create Storage Account: review & create: Basics: Sub: Subscription 1. Resource Group: RG1. Location: EU, North Europe Storage Acct Name: Storage16852. Deployment Model: Resource Manager Account kind: StorageV2 (general purpose V2) Replication: Locally-redundant storage (LRS) Performance: Standard Access Tier (default) Hot Networking: Connectivity method: Private endpoint. Private endpoint (New) StorageEndpoint1 (blob) (privatelink.blob.core.windows.net) Advanced: Secure transfer required: Enabled: Large file shares, blob soft delete, blob change feed, Hierarchical namespace, NFS v3::: Disabled Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point. Hot Area: Answer Area: 1. The minimum number of copies of the storage account will be [answer choice][1, 2, 3, 4] 2. To reduce the cost of infrequently accessed data in the storage account, you must modify the [answer choice] setting. [Access tier default, Performance, Account kind, Replication]
LRS(replication) has 3 copies of data Access tier has the "cool" option to store infrequently accessed data.
You have a sync group named Sync1 that has a cloud endpoint. The cloud endpoint includes a file named File1.txt. Your on-premises network contains servers that run Windows Server 2016. The servers are configured as shown in the following table. | Name | Share | Share Contents | Server 1 | Share1 | File1.txt, File2.txt | Server2 | Share2 | File2.txt, File3.txt You add Share1 as an endpoint for Sync1. One hour later, you add Share2 as an endpoint for Sync1. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area: Answer Area: On the cloud endpoint, File1.txt is overwritten by File1.txt from Share1 Y/N On Server1, File1.txt is overwritten by File1.txt from the cloud endpoint. Y/N File1.txt from Share1 replicates to Share2. Y/N
cloud endpoint by Share1 No. server1 by cloud endpoint No. share1 replicating. Yes