Networking

Your on-premises network contains an SMB share named Share1.You have an Azure subscription that contains the
following resources:com.certification.ttv3.d.k@435f75You need to ensure that webapp1 can connect to Share1.What
should you deploy?

An Azure Application Gateway

An Azure Active Directory (Azure AD) Application Proxy

* An Azure Virtual Network Gateway

Your company has three offices. The offices are located in Miami, Los Angeles, and New York. Each office contains
datacenter.You have an Azure subscription that contains resources in the East US and West US Azure regions. Each
region contains a virtual network. The virtual networks are peered.You need to connect the datacenters to the
subscription. The solution must minimize network latency between the datacenters.What should you create?

Three Azure application Gateways and one On-premises data gateway

three virtual hubs and one virtual WAN

* three virtual WANs and one virtual hub

three on-premises data gateways and one azure application gateway

You have an Azure subscription that contains a virtual network named VNet1. VNet1 contains four subnets named
Gateway, Perimeter, L, and Production.The NVA subnet contains two network virtual appliances (NVAs) that will
perform network traffic inspection between the Perimeter subnet and the Production subnet.You need to implement an
Azure load balancer for the NVAs. The solution must meet the following
requirements:com.certification.ttv3.d.k@63b7f3Which three actions should you perform? Each correct answer presents
part of the solution.NOTE: Each correct selection is worth one point.

Deploy a basic load balancer

* deploy a standard load balancer

* add two load balancing rules that have HA ports and floating IP enabled

add two load balancing rules that have HA port enabled and floating IP disabled

add a frontend IP configuration, a backend pool and a health probe

* add a frontend ip configuration, two backend pools and a health probe

You have an Azure subscription that contains a virtual network named VNet1. VNet1 uses an IP VNetspace of
10.0.0.0/16 and contains the subnets in the following table:

Name IP Address Range

Subnet0 10.0.0.0/24

Subnet1 10.0.1.0/24

Subnet2 10.0.2.0/24

GatewaySubnet10.0.254.0/24

Subnet1 contains a virtual appliance named VM1 that operates as a router.You create a routing table named RT1.You
need to route all inbound traffic from the VPN gateway to VNet1 through VM1.How should you configure RT1? To
answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.-Exhibit-

Address Prefix:

* 10.0.0.0/16

10.0.1.0/24

10.0.254.0/24

Next Hop type:

* Virtual Appliance

Virtual Network

Virtual Network Gateway

Assigned to:

* Gateway subnet

subnet0

subnet1 and subnet2

You plan to deploy several Azure virtual machines that will run Windows Server 2019 in a virtual machine scale set by
using an Azure Resource Manager template.You need to ensure that NGINX is available on all the virtual machines after
they are deployed.What should you use?

Azure Active Directory Application Proxy

Azure Application Insights

* Azure Custom Script Extension

the New-AzConfigurationAssignment cmdlet

You have Azure virtual machines that run Windows Server 2019 and are configured as shown in the following table.
Name Private IP Address Public IP Address Virtual Network Name DNS Suffix configured in Windows
Server

VM1 10.1.0.4 52.186.85.63 VNET1 Adatum.com

VM2 10.1.0.5 13.92.168.13 VNET1 Contoso.com

You create a private Azure DNS zone named adatum.com. You configure the adatum.com zone to allow auto registration
from VNET1.Which A records will be added to the adatum.com zone for each virtual machine? To answer, select the
appropriate options in the answer area.NOTE: Each correct selection is worth one point.

A Records for VM1:

None

* Private IP Addresses only

Public IP Addresses only

Private IP Address and Public IP Address

A Records for VM2:

None

* Private IP Addresses only

Public IP Addresses only

Private IP Address and Public IP Address

You have an Azure subscription that contains 10 virtual networks. The virtual networks are hosted in separate resource
groups.Another administrator plans to create several network security groups (NSGs) in the subscription.You need to
ensure that when an NSG is created, it automatically blocks TCP port 8080 between the virtual networks.Solution: You
configure a custom policy definition, and then you assign the policy to the subscription.Does this meet the goal?

* Yes

No

You have an Azure subscription that contains 10 virtual networks. The virtual networks are hosted in separate resource
groups.Another administrator plans to create several network security groups (NSGs) in the subscription.You need to
ensure that when an NSG is created, it automatically blocks TCP port 8080 between the virtual networks.Solution: From
the Resource providers blade, you unregister the Microsoft.ClassicNetwork provider.Does this meet the goal?

Yes

* No
You have two Azure virtual networks named VNet1 and VNet2. VNet1 contains an Azure virtual machine named VM1.
VNet2 contains an Azure virtual machine named VM2.VM1 hosts a frontend application that connects to VM2 to
retrieve data.Users report that the frontend application is slower than usual.You need to view the average round-trip
time (RTT) of the packets from VM1 to VM2.Which Azure Network Watcher feature should you use?

IP Flow Verify

Connection Troubleshoot

* Connection Monitor

NSG Flow logs

You have an Azure subscription named Subscription1.Subscription1 contains the virtual machines in the following table:

Name IP Address

VM1 10.0.1.4

VM2 10.0.2.4

VM3 10.0.3.4

Subscription1 contains a virtual network named VNet1 that has the subnets in the following table:

Name Address Space Connected Virtual Machine

Subnet1 10.0.1.0/24 VM1

Subnet2 10.0.2.0/24 VM2

Subnet3 10.0.3.0/24 VM2

VM3 has multiple network adapters, including a network adapter named NIC3. IP forwarding is enabled on NIC3. Routing
is enabled on VM3.You create a route table named RT1 that contains the routes in the following table:

Address Prefix Next Hop Type Next Hop address

10.0.1.0/24 Virtual Appliance 10.0.3.4

10.0.2.0/24 Virtual Appliance 10.0.3.4

You apply RT1 to Subnet1 and Subnet2.For each of the following statements, select Yes if the statement is true.
Otherwise, select No.NOTE: Each correct selection is worth one point.-Exhibit-

VM3 can establish a network connection to VM1

* Yes

No

If VM3 is turned off, VM2 can establish a network connection to VM1:

 Yes

* No

VM1 can establish a network connection to VM2:

* yes

No

You have a virtual network named VNET1 that contains the subnets shown in the following table:

Name Subnet Network Security Group

Subnet1 10.10.1.0/24 NSG1

Subnet2 10.10.2.0/24 None

You have two Azure virtual machines that have the network configurations shown in the following table:

Name Subet IP Address NSG

VM1 Subnet1 10.10.1.5 NSG2

VM2 Subnet2 10.10.2.5 None

VM3 Subnet3 10.10.2.6 None

For NSG1, you create the inbound security rule shown in the following table:

Priority Source Destination Destination Port Action

101 10.10.2.0/24 10.10.1.0/24 TCP/1433 Allow

For NSG2, you create the inbound security rule shown in the following table:

Priority Source Destination Destination Port Action

125 10.10.2.5 10.10.1.5 TCP/1433 Block

For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Each correct
selection is worth one point.

VM2 can connect to the TCP port 1433 services on VM1

* Yes

No

VM1 can connect to the TCP port 1433 services on VM2

* Yes

No
VM2 can connect to the TCP port 1433 services on VM3

* Yes

No

You have an Azure subscription that contains 10 virtual networks. The virtual networks are hosted in separate resource
groups.Another administrator plans to create several network security groups (NSGs) in the subscription.You need to
ensure that when an NSG is created, it automatically blocks TCP port 8080 between the virtual networks.Solution: You
assign a built-in policy definition to the subscription.Does this meet the goal?

Yes

* No

You have an Azure subscription that contains a policy-based virtual network gateway named GW1 and a virtual network
named VNet1.You need to ensure that you can configure a point-to-site connection from an on-premises computer to
VNet1.Which two actions should you perform? Each correct answer presents part of the solution.NOTE: Each correct
selection is worth one point.

Add a service endpoint to VNET1

Reset GW1

* Create a route-based virtual network gateway

add a connection to GW1

* delete gw1

add a public IP address space to VNET1

You have an Azure subscription that contains the virtual machines shown in the following table:

Name Operating System Connects to

VM1 Windows Server 2019 Subnet1

VM2 Windows Server 2019 Subnet2

VM1 and VM2 use public IP addresses. From Windows Server 2019 on VM1 and VM2, you allow inbound Remote
Desktop connections.Subnet1 and Subnet2 are in a virtual network named VNET1.The subscription contains two
network security groups (NSGs) named NSG1 and NSG2. NSG1 uses only the default rules.NSG2 uses the default rules
and the following custom incoming rule:

Priority: 100

Name: Rule1
Port: 3389

Protocol: TCP

Source: Any

Destination: Any

Action: Allow

NSG1 is associated to Subnet1. NSG2 is associated to the network interface of VM2.For each of the following
statements, select Yes if the statement is true. Otherwise, select No.NOTE: Each correct selection is worth one point.

From the internet, you can connect to VM1 by using remote desktop

Yes

* No

From the internet, you can connect to VM2 by using remote desktop

* Yes

No

From VM1, you can connect to VM2 by using remote desktop

* Yes

No

You plan to deploy five virtual machines to a virtual network subnet.Each virtual machine will have a public IP address
and a private IP address.Each virtual machine requires the same inbound and outbound security rules.What is the
minimum number of network interfaces and network security groups that you require? To answer, select the
appropriate options in the answer area.NOTE: Each correct selection is worth one point.-Exhibit-

Minimum number of network interfaces:

* 5

10

15

20

Minimum number of network security groups:

* 1

5
 10

You have an Azure subscription named Sub1.You plan to deploy a multi-tiered application that will contain the tiers
shown in the following table.

Tier Accessible from the internet Number of virtual machines

Front-end web server Yes 10

Web logic No 100

MS Sql server DB No 5

You need to recommend a networking solution to meet the following requirements:

1. Ensure that communication between the web servers and the business logic tier spreads equally across the virtual
machines:

2. Protect the web servers from SQL injection attacks

Which Azure resource should you recommend for each requirement? To answer, select the appropriate options in the
answer area.NOTE: Each correct selection is worth one point.

Ensure that communication between the web servers and the business logic tier spreads equally across the virtual
machines:

an application gateway that uses the standard tier

an application gateway that uses the WAF tier

* an internal load balancer

a network security group (NSG)

a public load balancer

Protect the web servers from SQL injection attacks:

an application gateway that uses the standard tier

* an application gateway that uses the WAF tier

an internal load balancer

a network security group (NSG)

a public load balancer

You have an Azure virtual network named VNet1 that connects to your on-premises network by using a site-to-site VPN.
VNet1 contains one subnet named Sunet1.Subnet1 is associated to a network security group (NSG) named . Subnet1
contains a basic internal load balancer named ILB1. ILB1 has three Azure virtual machines in the backend pool.You need
to collect data about the IP addresses that connects to ILB1. You must be able to run interactive queries from the Azure
portal against the collected data.What should you do? To answer, select the appropriate options in the answer
area.NOTE: Each correct selection is worth one point.

Resource to create:

Azure Event Grid

* Azure Log Analytics workspace

Azure Storage account

Resource on which to enable diagnostics:

* ILB1

NSG1

Azure virtual machines

You have the Azure virtual networks shown in the following table.

Name Address Space Subnet Resource group Azure region

Vnet1 10.11.0.0/16 10.11.0.0/17 West US

Vnet2 10.11.0.0/17 10.11.0.0/25 West US

Vnet3 10.10.0.0/22 10.10.1.0/24 East US

Vnet4 192.168.16.0/22 192.168.16.0/24 North Europe

To which virtual networks can you establish a from VNet1?

Vnet2 and Vnet3 only

Vnet2 only

Vnet3 and Vnet4 only

* Vnet2, Vnet3 and Vnet4

You have five Azure virtual machines that run Windows Server 2016. The virtual machines are configured as web
servers.You have an Azure load balancer named LB1 that provides load balancing services for the virtual machines.You
need to ensure that pee by the same web server for each request.What should you configure?

Floating IP (direct server return) to Enabled

Idle time-out (minutes) to 20

Protocol to UDP
* Session persistence to Client IP and Protocol

You have an Azure subscription that contains the resources in the following table:

Name Type

VMRG Resource Group

Vnet1 Virtual Network

Vnet2 Virtual Network

VM5 Virtual Machine connected to Vnet1

VM6 Virtual Machine connected to Vnet2

In Azure, you create a private DNS zone named adatum.com. You set the registration virtual network to VNet2. The
adatum.com zone is configured as shown in the following exhibit:

For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Each correct
selection is worth one point.

The A record for VM5 will be registered automatically in the adatum.com zone:

Yes

* No

VM5 can resolve VM9.adatum.com

Yes

* No

VM6 can resolve VM9.adatum.com

* Yes

No

Manage Azure Identities and Governance:

21. You recently created a new Azure subscription that contains a user named Admin1.Admin1 attempts to deploy an
Azure Marketplace resource by using an Azure Resource Manager template. Admin1 deploys the template by using
Azure PowerShell and receives the following error message: “User failed validation to purchase resources. Error
message: “Legal terms have not been accepted for this item on this subscription. To accept legal terms, please go to the
Azure portal (http://go.microsoft.com/fwlink/?LinkId=534873) and configure programmatic deployment for the
Marketplace item or create it there for the first time.”You need to ensure that Admin1 can deploy the Marketplace
resource successfully.What should you do?

From Azure Powershell, run the Set-AzApiManagmentSubscription cmdlet

From the Azure portal, register the Microsoft.Marketplace resoure provider

* From Azure Powershell, run the Set-AzApiMarketplaceTerms cmdlet

From the Azure Portal, assign the Billing administrator role to Admin1

22. You sign up for Azure Active Directory (Azure AD) Premium.You need to add a user named [email protected] as
an administrator on all the computers that will be joined to the Azure AD domain.What should you configure in Azure
AD?

* Device settings from Devices blade

Providers from MFA Server Blade

User settings from the users blade

General settings from the groups blade

23. You have an Azure Active Directory (Azure AD) tenant that contains 5,000 user accounts.You create a new user
account named AdminUser1.You need to assign the User administrator administrative role to AdminUser1.What should
you do from the user account properties?

From the licenses blade, assign a new license

* From the directory role blade, modify the directory role

From the groups blade, invite the user account to a new group

24. You have an Azure subscription named Subscription1 that contains a virtual network named VNet1. VNet1 is in a
resource group named RG1. Subscription1 has a user named User1. User1 has the following roles:

Reader

Security Admin

Security Reader

You need to ensure that User1 can assign the Reader role for VNet1 to other users.What should you do?

Remove User1 from the security reader role for subscription1. assign user1 the contributor role for RG1

* assign user1 the owner role from vnet1

remove user1 from the security reader and reader roles for subscription1
assign user1 the network contributor role for RG1

25. You have an Azure subscription named AZPT1 that contains the resources shown in the following table:

Name Type

Storage1 Azure Storage account

Vnet1 Virtual network

vm1 azure virtual machine

vm1managed managed disk for vm1

rvault1 recovery services vault for the site recovery of vm1

You create a new Azure subscription named AZPT2.You need to identify which resources can be moved to AZPT2.Which
resources should you identify?

VM1, storage1, vnet1, and vm1managed only

vm1 and vm1managed only

* vm1, storage1, vnet1, vm1managed and rvault1

rvault1 only

26. You have an Azure subscription that contains the resources shown in the following table:

Name type resource group tag

RG6 resource group not applicable None

VNet1 Virtual network RG6 Department: D1

You assign a policy to RG6 as shown in the following table:

Section Setting Value

Scope Scope Subscription1/RG6

Exclusions None

Basics Policy Definition Apply tag and its default value

Assignment name Apply tag and its default value

Parameters Tag name Label

Tag value Value1

To RG6, you apply the tag: RGroup: RG6.You deploy a virtual network named VNET2 to RG6.Which tags apply to VNET1
and VNET2? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one
point.

VNET1:

None

Department: D1 only

Department: D1, and RGroup:RG6 only

* Department: D1, and Label: Value1 only

Department: D1, RGroup:RG6 and Label: Value1

VNET2:

None

RGroup:RG6 only

* Label: Value1 only

RGroup:RG6 and Label: Value1

27. You have an Azure Active Directory (Azure AD) tenant named contosocloud.onmicrosoft.com.Your company has a
public DNS zone for contoso.com.You add contoso.com as a custom domain name to Azure AD.You need to ensure that
Azure can verify the domain name.Which type of DNS record should you create?

* MX

NSEC

SRV

NSEC3

28. You have an Azure subscription that contains an Azure Active Directory (Azure AD) tenant named contoso.com and
an Azure Kubernetes Service (AKS) cluster named AKS1.An administrator reports that she is unable to grant access to
AKS1 to the users in contoso.com.You need to ensure that access to AKS1 can be granted to the contoso.com
users.What should you do first?

From contoso.com, modify the organisation relationships settings

* from contoso.com, create an OAuth 2.0 authorisation endpoint

Recreate AKS1

From AKS1, create a namespace

29. You have an Azure subscription named Subscription1 that contains a resource group named RG1.In RG1, you create
an internal load balancer named LB1 and a public load balancer named LB2.You need to ensure that an administrator
named Admin1 can manage LB1 and LB2. The solution must follow the principle of least privilege.Which role should you
assign to Admin1 for each task? To answer, select the appropriate options in the answer area.NOTE: Each correct
selection is worth one point.

To add a backend pool to LB1:

Contributor on LB1

* Network contributor on LB1

Network Contributor on RG1

Owner on LB1

To add a health probe to LB2

Contributor on LB2

* Network contributor on LB2

Network Contributor on RG1

Owner on LB2

30. You have an Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com that contains 100 user
accounts.You purchase 10 Azure AD Premium P2 licenses for the tenant.You need to ensure that 10 users can use all the
Azure AD Premium features.What should you do?

* From the licenses blade of azure AD, assign a license

From the groups blade of each user, invite the users to a group

from the azure AD domain, add an enterprise application

from the directory role blade of each user, modify the directory role

31. You have an Azure subscription that contains a resource group named RG26.RG26 is set to the West Europe location
and is used to create temporary resources for a project. RG26 contains the resources shown in the following table.

Name Type Location

VM1 Virtual Machine North Europe

RGV1 Recovery Services Vault North Europe

SQLD01 Azure SQL Database North Europe

AZSQL01 Azure SQL Database Server North Europe

SA001 Storage Account West Europe

SQLDB01 is backed up to RGV1.When the project is complete, you attempt to delete RG26 from the Azure portal. The
deletion fails.You need to delete RG26.What should you do first?

Delete VM1

Stop VM1

* Stop the backup of SQLDB01

Delete SA001

32. You have Azure Active Directory tenant named Contoso.com that includes following users:

Name Role

User1 Cloud Device Admin

User2 User Admin

Contoso.com includes following Windows 10 devices:

Name Join Type

Device1 Azure AD Registered

Device2 Azure AD Joined

You create following security groups in Contoso.com:

Name Membership Type Owner

Group1 Assigned User2

Group2 Dynamic Device User2

For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Each correct
selection is worth one point.

User1 can add device2 to group1:

* Yes

No

User2 can add device1 to group1:

Yes

* No
User2 can add device2 to group2:

Yes

* No

33. You have an Azure policy as shown in the following exhibit:

Scope: Subscription 1

Exclusions: Subscription 1 / ContosoRG1

Basics:

Policy Defition: Not Allowed Resource Types

Assignment name: Not Allowed Resource Types

Parameters: Not Allowed Resource Types: Microsoft.SQL/servers

What is the effect of the policy?

You are prevented from creating Azure SQL Servers anywhere in Subscriptio 1

* You can create Azure SQL servers in ContosoRG1 only

You are prevented from creating Azure SQL servers in ContosoRG1 only

You can create Azure SQL servers in any resource group within subscription 1

34. You have an Azure subscription that contains the following users in an Azure Active Directory tenant named
contoso.onmicrosoft.com:

Name Role Scope

User1 GLobal Admin Azure Active Directory

User2 Global Admin Azure Active Directory

User3 User Admin Azure Active Directory

User4 Owner Azure Subscription

User1 creates a new Azure Active Directory tenant named external.contoso.onmicrosoft.com.You need to create new
user accounts in external.contoso.onmicrosoft.com.

Solution: You instruct User4 to create the user accounts.

Does that meet the goal?

Yes
* No

35. You have an Azure subscription that contains the following users in an Azure Active Directory tenant named
contoso.onmicrosoft.com:

Name Role Scope

User1 GLobal Admin Azure Active Directory

User2 Global Admin Azure Active Directory

User3 User Admin Azure Active Directory

User4 Owner Azure Subscription

User1 creates a new Azure Active Directory tenant named external.contoso.onmicrosoft.com.You need to create new
user accounts in external.contoso.onmicrosoft.com.

Solution: You instruct User2 to create the user accounts.

Does that meet the goal?

* Yes

No

36. You have an Azure Active Directory (Azure AD) tenant named contoso.com that contains the users shown in the
following table:

Name Type Member of

User1 Member Group1

User2 Guest Group1

User3 Member None

UserA Member Group2

UserB Guest Group2

User3 is the owner of Group1.

Group2 is a member of Group1.

You configure an access review named Review1 as shown in the following exhibit:

Review Name: Review1

Start Date: 2018-11-22

Frequency: One time

End Date: 2018-12-22

Scope: Guest Users only

Group: Group1

Reviewers: Group Owners

For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Each correct
selection is worth one point.

User3 can perform an access review of user1

* Yes

No

User3 can perform an access review of userA

* Yes

No

User3 can perform an access review of userB

* Yes

No

37. You have the Azure management groups shown in the following table:

Name In Management Group

Tenant Root Group Not Applicable

ManagementGroup11 Tenant Root Group

ManagementGroup12 Tenant Root Group

ManagementGroup21 ManagementGroup11

You add Azure subscriptions to the management groups as shown in the following table:

Name Management Group

Subscription1 ManagementGroup21

Subscription2 ManagementGroup12

You create the Azure policies shown in the following table:

Name Parameter Scope

Not allowed resource types virtual networks tenant root group

allowed resource types virtual networks managementgroup12

For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Each correct
selection is worth one point.

You can create a virtual network in Subscription1

yes

* No

You can create a virtual machine in Subscription2

* yes

No

You can add Subscription1 to managementgroup11

* yes

No

38. You have an Azure subscription that contains the following users in an Azure Active Directory tenant named
contoso.onmicrosoft.com:

Name Role Scope

User1 GLobal Admin Azure Active Directory

User2 Global Admin Azure Active Directory

User3 User Admin Azure Active Directory

User4 Owner Azure Subscription

User1 creates a new Azure Active Directory tenant named external.contoso.onmicrosoft.com.You need to create new
user accounts in external.contoso.onmicrosoft.com.Solution: You instruct User3 to create the user accounts.Does that
meet the goal?

Yes

* No

39. You have an Azure subscription named Subscription1 and an on-premises deployment of Microsoft System Center
Service Manager.Subscription1 contains a virtual machine named VM1.You need to ensure that an alert is set in Service
Manager when the amount of available memory on VM1 is below 10 percent.What should you do first?

Create an automation runbook

Deploy a function app

* Deploy the IT Service management connector (ITSM)

Create a notification

40. You have a Microsoft 365 tenant and an Azure Active Directory (Azure AD) tenant named contoso.com.You plan to
grant three users named User1, User2, and User3 access to a temporary Microsoft SharePoint document library named
Library1.You need to create groups for the users. The solution must ensure that the groups are deleted automatically
after 180 days.Which two groups should you create? Each correct answer presents a complete solution.NOTE: Each
correct selection is worth one point.

* An Office 365 group that uses the assigned membership type

An Security 365 group that uses the assigned membership type

* An Office 365 group that uses the dynamic user membership type

An Security 365 group that uses the dynamic user membership type

An Office 365 group that uses the dynamic Device membership type

Implement and manage storage:

41. You have Azure subscription that includes following Azure file shares:

Name In Storage Account Location

Share1 Storage1 West US

Share2 Storage2 West US

You have the following on-premises servers:

Name Folders

Server1 D:\Folder1, E:\Folder2

Server2 D:\Data

You create a Storage Sync Service named Sync1 and an Azure File Sync group named Group1.

Group1 uses share1 as a cloud endpoint.You register Server1 and Server2 in Sync1.

You add D:\Folder1 on Server1 as a server endpoint of Group1.For each of the following statements, select Yes if the
statement is true. Otherwise, select No.NOTE: Each correct selection is worth one point.

Share2 can be added as a cloud endpoint for group1

Yes
* No

E:\Folder2 on Server1 can be added as a server endpoint for group1

* Yes

No

D:\Data on server2 can be added as a server endpoiunt for group1

* Yes

No

42. You have an Azure subscription named Subscription1.In Subscription1, you create an Azure file share named share1.

You create a shared access signature (SAS) named SAS1 as shown in the following exhibit:

To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.-Exhibit-

If on Sep 02 2018 you run MS Azure storage exploere on a computer that has an IP 193.77.134.1 and you use SAS1 to
connect to the storage account, you

will be prompted for credentials

* will have no access

will have read, write and list access

will have read-only access

If on Sep 10 2018 you run net use on a computer that has an IP 193.77.134.50 and you use SAS1 as the password to
connect to share1, you

will be prompted for credentials

will have no access

* will have read, write and list access

will have read-only access

43. You have an Azure Storage account named storage1.

You plan to use AzCopy to copy data to storage1.

You need to identify the storage services in storage1 to which you can copy the data.

What should you identify?

Blob, file, table and queue

* blob and file only

file and table only

file only

blob, table, and queue only

44. Contoso, Ltd. is a manufacturing company that has offices worldwide. Contoso works with partner organizations to
bring products to market.

Contoso products are manufactured by using blueprint files that the company authors and maintains.

Existing Environment

Currently, Contoso uses multiple types of servers for business operations, including the following:

File servers

Domain controllers

MS SQL Server servers

Your network contains an Active Directory forest named contoso.com. All servers and client computers are joined to
Active Directory.

You have a public-facing application named App1. App1 is comprised of the following three tiers:

SQL database

web front end

processing middle tier

Each tier is comprised of five virtual machines. Users access the web front end by using HTTPS
only.RequirementsPlanned Changes

Contoso plans to implement the following changes to the infrastructure:

Move all the tiers of App1 to Azure

Move the existing product blueprint files to azure blob storage

Create a hybrid directory to support an upcoming MS Offuce 365 migration project

Technical Requirements

Contoso must meet the following technical requirements:

Move al virtual machines for app1 to azure

...
...

Minimize admin effort whenever possible

User Requirements

Contoso identifies the following requirements for users:

Ensure that only users who are part of a group named Pilot can join devices to azure ad

...

...

Ensure that a new user named user3 can create network objects for the azure subscription

You need to implement a backup solution for App1 after the application is moved.What should you create first?

Recovery plan

Azure backup server

a backup policy

* recovery services vault

45. You have an app named App1 that runs on two Azure virtual machines named VM1 and VM2.You plan to implement
an Azure Availability Set for App1.

The solution must ensure that App1 is available during planned maintenance of the hardware hosting VM1 and VM2.

What should you include in the Availability Set?

One update domain

two fault domains

one fault domain

* two update domains

46. You have an Azure subscription named Subscription1.

You create an Azure Storage account named contosostorage, and then you create a file share named data.

Which UNC path should you include in a script that references files from the data file share?

To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once or not at
all.

You may need to drag the split bar between panes or scroll to view content.
* \\contosostorage.file.core.windows.net\data

47. You have an on-premises server that contains a folder named D:\Folder1.You need to copy the contents of
D:\Folder1 to the public container in an Azure Storage account named contosodata.Which command should you run?

48. You have an Azure Storage account named storage1 that uses Azure Blob storage and Azure File storage.You need to
use AzCopy to copy data to the blob storage and file storage in storage1.Which authentication method should you use
for each type of storage? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is
worth one point.-Exhibit-

49. You have an Azure subscription that contains a storage account named account1.You plan to upload the disk files of
a virtual machine to account1 from your on-premises network. The on-premises network uses a public IP address space
of 131.107.1.0/24.You plan to use the disk files to provision an Azure virtual machine named VM1. VM1 will be attached
to a virtual network named VNet1. VNet1 uses an IP address space of 192.168.0.0/24.You need to configure account1 to
meet the following requirements:com.certification.ttv3.d.k@12ba60eWhich two actions should you perform? Each
correct answer presents part of the solution.NOTE: Each correct selection is worth one point.
50. You have an Azure File sync group that has the endpoints shown in the following table.

Cloud tiering is enabled for Endpoint3.You add a file named File1 to Endpoint1 and a file named File2 to Endpoint2.

On which endpoints will File1 and File2 be available within 24 hours of adding the files?

51. You have an Azure subscription that contains an Azure Storage account.You plan to copy an on-premises virtual
machine image to a container named vmimages.You need to create the container for the planned image.

Which command should you run?

52. You have an Azure subscription that contains the storage accounts shown in the following table.

You need to identify which storage account can be converted to zone-redundant storage (ZRS) replication by requesting
a live migration from Azure support.What should you identify?
53. You plan to create an Azure Storage account in the Azure region of East US 2.You need to create a storage account
that meets the following requirements:

How should you configure the storage account? To answer, select the appropriate options in the answer area.NOTE:
Each correct selection is worth one point.

54. You have an Azure subscription that contains an Azure Storage account.You plan to create an Azure container
instance named container1 that will use a Docker image named Image1. Image1 contains a Microsoft SQL Server
instance that requires persistent storage.You need to configure a storage service for Container1.What should you use?

55. You have an on-premises file server named Server1 that runs v.You have an Azure subscription that contains an
Azure file share.You deploy an Azure File Sync Storage Sync Service, and you create a sync group.You need to
synchronize files from Server1 to Azure.Which three actions should you perform in sequence? To answer, move the
appropriate actions from the list of actions to the answer area and arrange them in the correct order.
56. Contoso, Ltd. is a manufacturing company that has offices worldwide. Contoso works with partner organizations to
bring products to market.Contoso products are manufactured by using blueprint files that the company authors and
maintains. Existing Environment Currently, Contoso uses multiple types of servers for business operations, including the
following:

Your network contains an Active Directory forest named contoso.com. All servers and client computers are joined to
Active Directory.You have a public-facing application named App1. App1 is comprised of the following three tiers:

Each tier is comprised of five virtual machines. Users access the web front end by using HTTPS
only.RequirementsPlanned ChangesContoso plans to implement the following changes to the infrastructure:

Technical RequirementsContoso must meet the following technical requirements:

User RequirementsContoso identifies the following requirements for users:

You need to move the blueprint files to Azure.What should you do?

57. Contoso, Ltd. is a manufacturing company that has offices worldwide. Contoso works with partner organizations to
bring products to market.Contoso products are manufactured by using blueprint files that the company authors and
maintains.Existing EnvironmentCurrently, Contoso uses multiple types of servers for business operations, including the
following:

Your network contains an Active Directory forest named contoso.com. All servers and client computers are joined to
Active Directory.You have a public-facing application named App1. App1 is comprised of the following three tiers:

Each tier is comprised of five virtual machines. Users access the web front end by using HTTPS
only.RequirementsPlanned ChangesContoso plans to implement the following changes to the infrastructure:

Technical Requirements

Contoso must meet the following technical requirements:

User RequirementsContoso identifies the following requirements for users:

You need to identify the storage requirements for Contoso.For each of the following statements, select Yes if the
statement is true. Otherwise, select No.NOTE: Each correct selection is worth one point.

58. You have a sync group named Sync1 that has a cloud endpoint. The cloud endpoint includes a file named
File1.txt.Your on-premises network contains servers that run Windows Server 2016. The servers are configured as shown
in the following table.

You add Share1 as an endpoint for Sync1. One hour later, you add Share2 as an endpoint for Sync1.For each of the
following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Each correct selection is worth one
point.
59. You have an Azure subscription named Subscription1 that contains the resources shown in the following table:-

You plan to configure Azure Backup reports for Vault1.You are configuring the Diagnostics settings for the
AzureBackupReports log.Which storage accounts and which Log Analytics workspaces can you use for the Azure Backup
reports of Vault1? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth
one point.
60. You have several Azure virtual machines on a virtual network named VNet1.You configure an Azure Storage account
as shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information
presented in the graphic.NOTE: Each correct selection is worth one point.

61. You have an Azure subscription named Subscription1 that contains the storage accounts shown in the following
table:
You plan to use the Azure Import/Export service to export data from Subscription1.You need to identify which storage
account can be used to export the data.What should you identify?

Deploy and manage Azure compute resources

1. You have an Azure subscription named Subscription1. Subscription1 contains a resource group named RG1. RG1
contains resources that were deployed by using templates.You need to view the date and time when the resources
were created in RG1.Solution: From the RG1 blade, you click Deployments.Does this meet the goal?

2. You have an Azure subscription named Subscription1. Subscription1 contains a virtual machine named VM1.You
install and configure a web server and a DNS server on VM1.VM1 has the effective network security rules shown in
the following exhibit:
 Use the drop-down menus to select the answer choice that completes each statement based on the information
presented in the graphic.NOTE: Each correct selection is worth one point.

3. You have an Azure subscription named Subscription1 that has the following providers registered:
 Subscription1 contains an Azure virtual machine named VM1 that has the following configurations:

You need to record all the successful and failed connection attempts to VM1.Which three actions should you
perform? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.

4. You have a deployment template named Template1 that is used to deploy 10 Azure web apps.You need to identify
what to deploy before you deploy Template1. The solution must minimize Azure costs.What should you identify?
5. You have an Azure subscription named Subscription1 that is used by several departments at your company.
Subscription1 contains the resources in the following table:

Another administrator deploys a virtual machine named VM1 and an Azure Storage account named storage2 by
using a single Azure Resource Manager template.You need to view the template used for the deployment.From
which blade can you view the template that was used for the deployment?

6. You have an Azure subscription named Subscription1. Subscription1 contains two Azure virtual machines VM1 and
VM2. VM1 and VM2 run Windows Server 2016.VM1 is backed up daily by Azure Backup without using the Azure
Backup agent.VM1 is affected by ransomware that encrypts data.You need to restore the latest backup of VM1.To
which location can you restore the backup? To answer, select the appropriate options in the answer area.NOTE:
Each correct selection is worth one point.
7. You plan to deploy three Azure virtual machines named VM1, VM2, and VM3. The virtual machines will host a web
app named App1.You need to ensure that at least two virtual machines are available if a single Azure datacenter
becomes unavailable.What should you deploy?

8. You have a pay-as-you-go Azure subscription that contains the virtual machines shown in the following table.

You create the budget shown in the following exhibit.

 The AG1 action group contains a user named [email protected] only.Use the drop-down menus to select the
answer choice that completes each statement based on the information presented in the graphic.

9. You have an Azure virtual machine named VM1 that runs Windows Server 2016.You need to create an alert in Azure
when more than two error events are logged to the System event log on VM1 within an hour.Solution: You create an
 Azure Log Analytics workspace and configure the data settings. You install the Microsoft Monitoring Agent on VM1.
You create an alert in Azure Monitor and specify the Log Analytics workspace as the source.Does this meet the goal?

10. You plan to create the Azure web apps shown in the following table.

What is the minimum number of App Service plans you should create for the web apps?

11. You have an Azure subscription that contains the resources shown in the following table.

VM1 connects to VNET1.You need to connect VM1 to VNET2.Solution: You delete VM1. You recreate VM1, and then
you create a new network interface for VM1 and connect it to VNET2.Does this meet the goal?
12. You have an Azure subscription named Subscription1. Subscription1 contains a resource group named RG1. RG1
contains resources that were deployed by using templates.You need to view the date and time when the resources
were created in RG1.Solution: From the Subscriptions blade, you select the subscription, and then click
Programmatic deployment.Does this meet the goal?

13. You have an Azure subscription.You have an on-premises virtual machine named VM1. The settings for VM1 are
shown in the exhibit. (Click the Exhibit tab.)

You need to ensure that you can use the disks attached to VM1 as a template for Azure virtual machines.What should
you modify on VM1?
14. You have an Azure virtual machine named VM1 that runs Windows Server 2016.You need to create an alert in Azure
when more than two error events are logged to the System event log on VM1 within an hour.Solution: You create an
Azure Log Analytics workspace and configure the data settings. You add the Microsoft Monitoring Agent VM
extension to VM1. You create an alert in Azure Monitor and specify the Log Analytics workspace as the source.Does
this meet the goal?

15. You have an Azure subscription that contains a virtual machine scale set. The scale set contains four instances that
have the following configurations:

You run the get-azvmss cmdlet as shown in the following exhibit:

Use the drop-down menus to select the answer choice that completes each statement based on the information
presented in the graphic.NOTE: Each correct selection is worth one point.
16. You have an Azure virtual machine named VM1 that runs Windows Server 2019.You sign in to VM1 as a user named
User1 and perform the following actions:

You plan to redeploy VM1.Which changes will be lost after you redeploy VM1?

17. You have an Azure subscription named Subscription1.You deploy a Linux virtual machine named VM1 to
Subscription1.You need to monitor the metrics and the logs of VM1.What should you use?
18. You deploy an Azure Kubernetes Service (AKS) cluster named Cluster1 that uses the IP addresses shown in the
following table.

You need to provide internet users with access to the applications that run in Cluster1.Which IP address should you
include in the DNS record for Cluster1?

19. You have an Azure subscription that contains the resources shown in the following table.

VM1 connects to VNET1.You need to connect VM1 to VNET2.Solution: You move VM1 to RG2, and then you add a
new network interface to VM1.Does this meet the goal?

20. You have an Azure subscription that contains an Azure Availability Set named WEBPROD-AS-USE2 as shown in the
following exhibit.
 You add 14 virtual machines to WEBPROD-AS-USE2.Use the drop-down menus to select the answer choice that
completes each statement based on the information presented in the graphic.NOTE: Each correct selection is worth
one point.

21. You plan to deploy an Azure container instance by using the following Azure Resource Manager template.
Use the drop-down menus to select the answer choice that completes each statement based on the information
presented in the template.
22. You have an Azure subscription that contains the resources shown in the following table.

VM1 connects to VNET1.You need to connect VM1 to VNET2.Solution: You turn off VM1, and then you add a new
network interface to VM1.Does this meet the goal?

23. You have an app named App1 that runs on an Azure web app named webapp1.The developers at your company
upload an update of App1 to a Git repository named Git1.Webapp1 has the deployment slots shown in the following
table.

You need to ensure that the App1 update is tested before the update is made available to users.Which two actions
should you perform? Each correct answer presents part of the solution.
24. You have an Azure subscription named Subscription1. Subscription1 contains a resource group named RG1. RG1
contains resources that were deployed by using templates.You need to view the date and time when the resources
were created in RG1.Solution: From the RG1 blade, you click Automation script.Does this meet the goal?

25. You have an Azure virtual machine named VM1 that runs Windows Server 2019.You save VM1 as a template named
Template1 to the Azure Resource Manager library.You plan to deploy a virtual machine named VM2 from
Template1.What can you configure during the deployment of VM2?

26. You have an Azure web app named App1. App1 has the deployment slots shown in the following table:

In webapp1-test, you test several changes to App1.You back up App1.You swap webapp1-test for webapp1-prod and
discover that App1 is experiencing performance issues.You need to revert to the previous version of App1 as quickly
as possible.What should you do?
27. You have an Azure virtual machine named VM1 that runs Windows Server 2016.You need to create an alert in Azure
when more than two error events are logged to the System event log on VM1 within an hour.Solution: You create an
Azure storage account and configure shared access signatures (SASs). You install the Microsoft Monitoring Agent on
VM1. You create an alert in Azure Monitor and specify the storage account as the source.Does this meet the goal?

28. You have an Azure subscription named Subscription1 that contains the quotas shown in the following table.

You deploy virtual machine to Subscription1 as shown in the following table.

You plan to deploy the virtual machines shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Each correct
selection is worth one point.
29. You have an Azure subscription that contains a virtual machine named VM1. VM1 hosts a line-of-business
application that is available 24 hours a day. VM1 has one network interface and one managed disk. VM1 uses the
D4s v3 size.You plan to make the following changes to VM1:

Which change will cause downtime for VM1?

30. You need to deploy an Azure virtual machine scale set that contains five instances as quickly as possible.What should
you do?

31. You have an Azure subscription that contains an Azure virtual machine named VM1. VM1 runs a financial reporting
app named App1 that does not support multiple active instances.At the end of each month, CPU usage for VM1
peaks when App1 runs.You need to create a scheduled runbook to increase the processor performance of VM1 at
the end of each month.What task should you include in the runbook?
p