Font size
S
M
L
XL
WorksheetsAZ303(Q1-Q100)Updated
Total questions: 100
Worksheet time: 3hrs 20mins
Name
Class
Date
1.
.
a)
an internal Azure Load Balancer instance that has managed instance endpoints in a backend pool
b)
Azure Private Link that has endpoints on two virtual networks
c)
an Azure Application Gateway that has managed instance endpoints in a backend pool
d)
a Site-to-Site VPN between the virtual networks that contain the instances
2.
.
a)
sqlserver4 and sqlserver5 only
b)
sqlserver2 and sqlserver3 only
c)
sqlserver1 and sqlserver3 only
d)
sqlserver2 and sqlserver4 only
3.
.
a)
Create three Azure Cosmos DB accounts, one for the databases that use the Core (SQL) API, one for CosmosDB2, and one for CosmosDB4.
b)
Create two Azure Cosmos DB accounts, one for CosmosDB2 and CosmosDB4 and one for CosmosDB1 and CosmosDB3.
c)
Create one Azure Cosmos DB account for each database.
d)
Create three Azure Cosmos DB accounts, one for the databases that use the MongoDB API, one for CosmosDB1, and one for CosmosDB3.
4.
.
a)
Gremlin (graph)
b)
MongoDB
c)
Cassandra
d)
Core (SQL)
e)
Azure Table
5.
Statement 1: You can add DB1 to failover1.
a)
Yes
b)
No
6.
Statement 2: You can add DB3 to failover1.
a)
Yes
b)
No
7.
Statement 3: Sqlserver1 and sqlserver 2 are in the same Azure region.
a)
Yes
b)
No
8.
Number of virtual network
a)
1
b)
2
c)
3
9.
Number of subnets per virtual network
a)
1
b)
2
c)
3
10.
.
a)
Yes
b)
No
11.
.
a)
Yes
b)
No
12.
.
a)
Azure Application Gateway
b)
Azure Load Balancer
c)
Azure Traffic Manager
d)
Azure Bastion
13.
.
a)
Run the "docker image push" command and specify the "tag" parameter
b)
Run the "az image copy" command and specify the "tag" parameter.
c)
Run the "az aks update" command and specify the "attach-acr" parameter.
d)
Run the "kubectl apply" command and specify the "dry-run" parameter
14.
.
a)
Yes
b)
No
15.
.
a)
Yes
b)
No
16.
.
a)
Yes
b)
No
17.
.
a)
Create a deployment slot
b)
Copy the App Service plan.
c)
Add an instance of the app to the scal set.
d)
Create an Azure Active Directory (Azure AD) enterprise application.
18.
.
a)
an Azure Automation runbook
b)
a kubectl script from a CRON job
c)
an Azure Resource Manager template
d)
an Azure Pipelines release pipeline
19.
.
a)
Run "Add-AzVhd" and specify a file share as the destination.
b)
Convert the disk type to VHD.
c)
Remover the Backup (volume shadow copy) integration service.
d)
Generalize VM1.
e)
Run "Add-AzVhd" and specify a blob service container as the destination.
20.
.
a)
Upgrade the AKS cluster
b)
Create a new node pool.
c)
Modify the autoscaling settings for the agentPool node.
d)
Enable virtual nodes for the AKS cluster.
21.
.
a)
kubectl get nodes
b)
az aks get-credentials --resource-group RG1 --name Clus1
c)
az aks install-cli
d)
kubectl apply -f app1.yaml
22.
.
a)
VM1 only
b)
VM1 and VM2 only
c)
VM2 and VM3 only
23.
App1:
a)
ILB1
b)
ELB1
c)
AGW1
d)
AGW2
24.
App2:
a)
ILB1
b)
ELB1
c)
AGW1
d)
AGW2
25.
.
a)
Yes
b)
No
26.
.
a)
Yes
b)
No
27.
.
a)
Yes
b)
No
28.
.
a)
Yes
b)
No
29.
.
a)
WebApp1
b)
WebApp4
c)
WebApp2
d)
WebApp3
30.
Domain:
a)
Join the VMs to the existing on-permises domain.
b)
Join the VMs to a new domain controller VM in Azure.
c)
Join the VMs to Azure Active Directory Domain Services (ADDS)
31.
Connectivity:
a)
Set up VPN connectivity.
b)
Set up HTTPS connectivity.
c)
Set up Azure Relay Service.
32.
.
a)
CONTOSO\User2
b)
SERVER1\User4
c)
CONTOSO\User1
d)
CONTOSO\User3
33.
.
a)
Yes
b)
No
34.
.
a)
password hash synchronization and single sign-on (SSO)
b)
federated single sign-on (SSO) and Active Directory Federation Services (AD FS)
c)
Pass-through Authentication and single sign-on (SSO)
d)
cloud-only user accounts
35.
Integrate Active Directory and Azure AD by using:
a)
Active Directory Federation Services
b)
Pass-through authentication with Azure AD Seamless SSO
c)
Pass-through authentication with Azure AD Seamless SSO and password hash synchronization
d)
Password hash synchronization with Azure Seamless SSO
36.
Implement MFA by using:
a)
A third-party authentication solution
b)
Azure MFA
c)
The Active Directory Federation Services (AD FS) Azure MFA adapter
37.
.
a)
Yes
b)
No
38.
.
a)
Yes
b)
No
39.
.
a)
Yes
b)
No
40.
.
a)
an Azure AD enterprise application
b)
Azure Key Vault
c)
Azure Logic Apps
d)
an Azure Desired State Configuration (DSC) extension
41.
.
a)
an Azure Key Vault and an access policy
b)
Azure Active Directory (AD) Identity Protection and an Azure policy
c)
a Recovery Services vault and a backup policy
d)
an Azure Storage account and an access policy
42.
The number of email messages that Alert1 will send in an hour is [answer choice].
a)
0
b)
4
c)
6
d)
12
e)
60
43.
The number of SMS messages that Alert1 will send in an hour is [answer choice].
a)
0
b)
4
c)
6
d)
12
e)
60
44.
Statement1: From the Azure portal, an administrator can reset the password of Adam Hobbs.
a)
Yes
b)
No
45.
Statement2: From the Azure portal, an administrator can modify the job title for the user account of Adam Hobbs.
a)
Yes
b)
No
46.
Statement3: From the Azure portal, an administrator can modify the usage location for the user account of Adam Hobbs.
a)
Yes
b)
No
47.
.
a)
The vCores on DB1 will decrease to two.
b)
The maximum data size of Pool1 will increase to 22GB.
c)
The maximum data size of DB1 will decrease to 6 GB.
d)
The vCores on Pool1 will increase to four.
48.
Add a subnet to VNet1:
a)
User1 only
b)
User3 only
c)
User1 and User3 only
d)
User2 and User3 only
e)
User1, User2 and User3
49.
Assign a user the Reader role to VNet1:
a)
User1 only
b)
User3 only
c)
User1 and User3 only
d)
User2 and User3 only
e)
User1, User2 and User4
50.
.
a)
Create a network security group (NSG) that is linked to Subnet1.
b)
Configure the Firewall and virtual networks settings for KeyVault1.
c)
Modify the access policy for KeyVault1.
d)
Configure KeyVault1 to use a hardware security module (HSM).
51.
.
a)
Elastic Database jobs
b)
Azure Key Vault
c)
an Azure Storage account
d)
a Recovery Services vault
52.
.
a)
Add health probes to LB1.
b)
Add the network interfaces of the virtual machines to the backend pool of LB1.
c)
Add an inbound rule to LB1.
d)
Add an outbound rule to LB1.
53.
Internet to web tier:
a)
An Azure Application Gateway that has a web application firewall (WAF)
b)
An internal Azure Standard Load Balancer
c)
A pulic Azure Basic Load Balancer
54.
Web tier to application tier:
a)
An Azure Application Gateway that has a web application firewall (WAF)
b)
An internal Azure Standard Load Balancer
c)
A pulic Azure Basic Load Balancer
55.
.
a)
Runtime stack
b)
Enable Application Insights
c)
Operating System
d)
Plan type
56.
.
a)
Configure Access control (IAM) for the Service Bus.
b)
Add a shared access policy to the queue.
c)
Modify the locks of the queue.
d)
Configure Access control (IAM) for the queue.
57.
.
a)
Create an Azure management group that contains Subscription1.
b)
Configure the existing Azure AD Connect server to sync contoso.com to contosoazure.onmicrosoft.com.
c)
Deploy a second Azure AD Connect server and sync contoso.com to contosoazure.onmicrosoft.com
d)
Create guest accounts for all the contoso.com users in contosoazure.onmicrosoft.com.
58.
On App1:
a)
Add a logic app step
b)
Configure Access control (IAM)
c)
Regenerate the access key
d)
Turn on the managed identity
59.
On Queue1:
a)
Add a read-only lock
b)
Add a shared access policy
c)
Configure Access control (IAM)
d)
Modify the properties
60.
.
a)
From Conditional access in Azure Active Directory (Azure AD), create a named location.
b)
From the MFA service settings, create a trusted IP range.
c)
From Conditional access in Azure Active Directory (Azure AD), create a custom control.
d)
From Azure Active Directory (Azure AD), configure organizational relationships.
61.
User1 gets a notification when User3 resets her password by using SSPR.
a)
Yes
b)
No
62.
User3 gets a notification when User3 resets her password by using SSPR.
a)
Yes
b)
No
63.
User1 gets a notification when User2 resets the password of User4.
a)
Yes
b)
No
64.
.
a)
a phone call, an email message that contains a verification code, and a text message that contains an app password.
b)
an app password, a text message that contains a verification code, and a verification code sent from the Microsoft Authenticator app.
c)
an app password, a text message that contains a verification code, and a notification sent from the Microsoft Authenticator app.
d)
a phone call, a text message that contains a verification code, and a notification or a verification code sent from the Microsoft Authenticator app.
65.
.
a)
a key
b)
a secret
c)
a certificate
66.
.
a)
managed identities
b)
managed applications
c)
Azure policies
d)
an App Service Plan
67.
.
a)
Associate Subscription1 to contoso.onmicrosoft.com. Reassign all the roles in Subscription 1.
b)
Configure the existing Azure AD Connect server to sync contoso.com to contosoazure.onmicrosoft.com.
c)
Configure contoso.onmicrosoft.com to use pass-through authentication.
d)
Configure contosoazure.onmicrosoft.com to use pass-through authentication.
68.
Statement 1: VM1-Disk1 is encrypted automatically by using Azure Disk Encryption.
a)
Yes
b)
No
69.
Statement2: VM2-Disk1 is encrypted automatically by using Azure Disk Encryption.
a)
Yes
b)
No
70.
Statement3: VM3-Disk1 is encrypted automatically by using Azure Dis Encrption.
a)
Yes
b)
No
71.
.
a)
Large file shares
b)
Hierarchical namespace
c)
NFS v3
d)
Blob soft delete
72.
.
a)
a VPN gateway
b)
a site-to-site connection
c)
a point-to-site configuration
d)
a Vnet-to-Vnet connection
e)
a local network gateway
73.
Statement1: When accessing the Azure portal from Device1, User1 will sign in automatically by using SSO.
a)
Yes
b)
No
74.
Statement2: When accessing the Azure portal from Device2, User1 will sign in automatically by using SSO.
a)
Yes
b)
No
75.
Statement3: When accessing the Azure portal from Device3, User1 will sign in automatically by using SSO.
a)
Yes
b)
No
76.
.
a)
an Azure policy
b)
trusted Ips
c)
a site-to-site VPN between the on-permises network and Azure
77.
.
a)
Create a local network gateway.
b)
Modify the address space used by Subnet1.
c)
Create a subnet named GatewaySubnet on VNET1.
d)
Modify the address space used by VNET1.
78.
.
a)
Increase the bandwidth of the existing ExpressRoute connection.
b)
Increase the bandwidth for the on-premises internet connection.
c)
Set up a VPN connection.
d)
Set up a second ExpressRoute connection.
79.
VM2:
a)
Central US
b)
East US
c)
West US
80.
VM2_Interface
a)
Central US
b)
East US
c)
West US
81.
.
a)
Copy the ADO.NET connection string of Db1 and paste the string to the query editor.
b)
Approve private endpoint connections for SQL server1.
c)
Modify the Advanced Data Security settings of Db1.
d)
Configure the Firewalls and virtual networks settings for SQL server1.
82.
.
a)
Create virtual machines.
b)
Create resource groups.
c)
Delete virtual machines.
d)
Create support requests.
83.
.
a)
4
b)
6
c)
2
d)
1
84.
.
a)
Azure Traffic Manager
b)
an internal Azure Load Balancer
c)
a public Azure Load Balancer
d)
Azure Private Link
85.
.
a)
From Azure AD, configure the User settings.
b)
From Azure AD, create a conditional access policy
c)
From the Azure subscription, assign an Azure policy.
d)
From the Azure subscription, configure Access control (IAM).
86.
.
a)
Configure just in time (JIT) VM access on VM2.
b)
Configure Access control (IAM) on VM2.
c)
Assign a managed identity to VM2.
d)
Modify the Reader role at the subscription level.
87.
Statement1: You can remove User from the Contributor role for RG1.
a)
Yes
b)
No
88.
Statement2: User can delete VM2.
a)
Yes
b)
No
89.
Statement3: You can add User3 as a Contributor for RG1.
a)
Yes
b)
No
90.
.
a)
Assign an Azure AD Privileged Identity Management (PIM) role to Admin1.
b)
Purchase an Azure Rights Management (Azure RMS) license for each user in the Managers group.
c)
Enforce Azure Multi-Factor Authentication (MFA) for Admin1.
d)
Purchase an Azure AD Premium P1 license for each user in the Managers group.
91.
.
a)
Authenticator app
b)
Email addresses
c)
App passwords
d)
Short Message Service (SMS) messages
e)
Security questions
92.
.
a)
AssignableScopes
b)
Description
c)
DataActions
d)
IsCustom
93.
.
a)
From KV1, create a certificate issuer resource.
b)
Obtain the CA account credentials.
c)
Obtain the root CA certificate.
d)
From KV1, create a certificate signing request (CSR).
e)
From KV1, create a private key,
94.
.
a)
Azure Private Link
b)
service endpoints
c)
network Security groups (NSGs) with service tags
d)
network security groups (NSGs) with application security groups
95.
80
a)
an Azure Backup Server
b)
a Recovery Services vault
c)
a backup policy
d)
a recovery plan
96.
79
a)
Use the Azure Import/Export service.
b)
Generate a shared access signature (SAS). <br />Map a drive, and then copy the files by using File Explorer.
c)
Use Azure Storage Explorer to copy the files.
d)
Generate an access key. Map a drive, and
97.
78 Contoso requires a storage account that supports Blob storage.
a)
Yes
b)
No
98.
78 Contoso requires a storage account that supports Azure Table storage.
a)
Yes
b)
No
99.
78 Contoso requires a storage account that supports Azure File Storage.
a)
Yes
b)
No
100.
77
a)
Yes
b)
No
Reset
