az 104 mod 4

Your company has an existing Azure tenant named alpineskihouse.onmicrosoft.com. The company wants to start using alpineskihouse.com for their Azure resources. You add a custom domain to Azure. Now, you need to add a DNS record to prepare for verifying the custom domain. Which two of the following record types could you create?

• Add an PTR record to the DNS zone.

• Add a TXT record to the DNS zone.

• Add an MX record to the DNS zone.

• Add an SRV record to the DNS zone.

• Add a CNAME record to the DNS zone.

You are planning to configure networking in Microsoft Azure. Your company has a new Microsoft Azure presence with the following network characteristics:

Your on-premises data center has the following network characteristics:

The company intends to use 192.168.1.0/24 on-premises and 192.168.0.0/24 in Azure. You need to update your company's environment to enable the needed functionality. What should you do? Each answer represents part of the solution. Choose two.

• Delete 192.168.0.0/23 from Azure.

• Delete 192.168.1.0/24 in the on-premises environment.

• Create a matching public subnet in Azure and in the on-premises environment.

• Create a subnet for 192.168.0.0/23 in the on-premises environment.

• Create a subnet for 192.168.0.0/24 in Azure.

You need to configure the environment to prepare for the first VM. Additionally, you need to minimize costs, whenever possible, while still meeting the requirements. What should you do? Select one.

• Create a standard public IP address. During the creation of the first VM, associate the public IP address with the VM's NIC.

• Create a standard public IP address. After the first VM is created, remove the private IP address and assign the public IP address to the NIC.

• Create a basic public IP address. During the creation of the first VM, associate the public IP address with the VM.

• Create a basic public IP address. After the first VM is created, remove the private IP address and assign the public IP address to the NIC.

You deploy a new domain named contoso.com to domain controllers in Azure. You have the following domain-joined VMs in Azure:

You need to add DNS records so that the hostnames resolve to their respective IP addresses. Additionally, you need to add a DNS record so that intranet.contoso.com resolves to VM99. What should you do? (Each answer presents part of the solution. Choose two.)

• Add AAAA records for each VM.

• Add A records for each VM.

• Add a TXT record for intranet.contoso.com with the text of VM99.contoso.com.

• Add an SRV record for intranet.contoso.com with the target pointing at VM99.contoso.com.

• Add a CNAME record for intranet.contoso.com with a value of VM99.contoso.com

Your company is preparing to move some services and VMs to Microsoft Azure. The company has opted to use Azure DNS to provide name resolution. A project begins to configure the name resolution. The project identifies the following requirements:

Module 04 Lab and Review 125You need to prepare and configure the environment with a new domain name and a test hostname of WWW. Which of the following steps should you perform? (Each answer presents part of the solution. Choose three.)

• Register a domain name with a domain registrar.

• Register a domain name with Microsoft Azure.

• Delegate the new domain name to Azure DNS.

• Add an Address (A) record for Azure name servers in the zone.

• Add a record for WWW.

You have a VM with two NICs named NIC1 and NIC2. NIC1 is connected to the 10.10.8.0/24 subnet. NIC2 is connected to the 10.20.8.0/24 subnet. You plan to update the VM configuration to provide the follow-ing functionality:

You need to update the VM configuration to support the new functionality. What should you do? Select one.

• Remove the private IP address from NIC2 and then assign a public IP address to it. Then, create an inbound security rule.

• Add a third NIC and associate a public IP address to it. Then, create an inbound security rule.

• Associate a public IP address to NIC2 and create an inbound security rule.

• Create an inbound security rule for TCP port 443.

ou're currently using network security groups (NSGs) to control how your network traffic flows in and out of your virtual network subnets and network interfaces. You want to customize how your NSGs work. For all incoming traffic, you need to apply your security rules to both the virtual machine and subnet level.

Which of the following options will let you accomplish this? (Choose two)

• Configure the AllowVNetInBound security rule for all new NSGs.

• Create rules for both NICs and subnets with an allow action.

• Delete the default rules.

• Add rules with a higher priority than the default rules.

You need to ensure that Azure DNS can resolve names for your registered domain. What should you implement? Select one.

• zone delegation

• a CNAME record

• an MX record

• a secondary zone

• a primary zone with a NS record

You are configuring the Azure Firewall. You need to allow Windows Update network traffic through the firewall. Which of the following should you use?

• Application rules

• Destination inbound rules

• NAT rules

• Network rules