Question 1 Topic 3, Case Study 3Case Study Question View Case
HOTSPOT
You need to recommend a solution for App1. The solution must meet the technical requirements.
What should you include in the recommendation? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Answer:
Explanation:
Box 1: 3
One virtual network for every tier
Box 2: 1
Only one subnet for each tier, to minimize the number of open ports.
Scenario: You have a public-facing application named App1. App1 is comprised of the following three tiers:
A SQL database
A web front end
A processing middle tier
Each tier is comprised of five virtual machines. Users access the web front end by using HTTPS only.
Technical requirements:
Move all the virtual machines for App1 to Azure.
Minimize the number of open ports between the App1 tiers.
Legacy AZ-300: Implement Workloads and Security
Comments
Question 2 Topic 4, Case Study 4Case Study Question View Case
You need to configure AG1.
What should you create?
- A. a multi-site listener
- B. a basic routing rule
- C. a URL path-based routing rule
- D. a basic listener
Answer:
C
Explanation:
References: https://docs.microsoft.com/en-us/azure/application-gateway/application-gateway-create-url-route-portal
Comments
Question 3 Topic 4, Case Study 4Case Study Question View Case
DRAG DROP
You need to configure the Azure ExpressRoute circuits.
How should you configure Azure ExpressRoute routing? To answer, drag the appropriate configurations to the correct
locations. Each configuration may be used once, more than once, or not at all. You may need to drag the split bar between
panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Select and Place:
Answer:
Explanation:
Azure compute services, namely virtual machines (IaaS) and cloud services (PaaS), that are deployed within a virtual
network can be connected through the private peering domain. The private peering domain is considered to be a trusted
extension of your core network into Microsoft Azure.
Services such as Azure Storage, SQL databases, and Websites are offered on public IP addresses. You can privately
connect to services hosted on public IP addresses, including VIPs of your cloud services, through the public peering routing
domain. You can connect the public peering domain to your DMZ and connect to all Azure services on their public IP
addresses from your WAN without having to connect through the internet.
References: https://docs.microsoft.com/en-us/azure/expressroute/expressroute-circuit-peerings
Comments
Question 4 Topic 4, Case Study 4Case Study Question View Case
DRAG DROP
You need to prepare the New York office infrastructure for the migration of the on-premises virtual machines to Azure.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the
answer area and arrange them in the correct order.
Select and Place:
Answer:
Explanation:
References: https://docs.microsoft.com/en-us/azure/site-recovery/vmware-azure-tutorial
Comments
Question 5 Topic 4, Case Study 4Case Study Question View Case
HOTSPOT
You need to provision the resources in Azure to support the virtual machine that will be migrated from the New York office.
What should you include in the solution? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Answer:
Comments
Question 6 Topic 4, Case Study 4Case Study Question View Case
DRAG DROP
You need to identify the appropriate sizes for the Azure virtual machines.
Which five actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the
answer area and arrange them in the correct order.
Select and Place:
Answer:
Explanation:
References: https://docs.microsoft.com/en-us/azure/migrate/tutorial-assessment-vmware Legacy AZ-300: Implement
Workloads and Security
Comments
Question 7 Topic 5, Case Study 5Case Study Question View Case
You need to configure a host name for WebApp2.
What should you do first?
- A. In Azure AD, add contoso.com as a custom domain name
- B. In the public DNS zone of contoso.onmicrosoft.com, add an NS record
- C. In Azure AD, add webapp2.azurewebsites.net as a custom domain name
- D. In the public DNS zone of contoso.com, add a CNAME record
Answer:
C
Explanation:
Scenario: Ensure that webapp2.azurewebsites.net can be accessed by using the name app2.contoso.com
When you create a Cloud Service, Azure assigns it to a subdomain of cloudapp.net. For example, if your Cloud Service is
named "contoso", your users will be able to access your application on a URL like http://contoso.cloudapp.net. Azure also
assigns a virtual IP address.
However, you can also expose your application on your own domain name, such as contoso.com.
References: https://docs.microsoft.com/en-us/azure/cloud-services/cloud-services-custom-domain-name-portal
Comments
Question 8 Topic 5, Case Study 5Case Study Question View Case
Which pricing tier should you recommend for WebApp1?
- A. D1
- B. P1v2
- C. S1
- D. B1
Answer:
C
Explanation:
Standard supports up to 10 instances, and would be enough as the Standard plan includes auto scale that can automatically
adjust the number of virtual machine instances running to match your traffic needs.
Scenario: Ensure that WebApp1 can adjust the number of instances automatically based on the load and can scale up to
five instances
Incorrect Answers:
D: Basic supports only up to 3 instances.
References:
https://azure.microsoft.com/en-us/pricing/details/app-service/windows/
Legacy AZ-300: Implement Authentication and Secure Data
Comments
Question 9 Topic 6, Case Study 6Case Study Question View Case
You need to prepare the environment to meet the authentication requirements.
Which two actions should you perform? Each correct answer presents part of the solution
NOTE: Each correct selection is worth one point.
- A. Allow inbound TCP port 8080 to the domain controllers in the Miami office
- B. Install Azure AD Connect on a server in the Miami office and enable Pass-through Authentication
- C. Install the Active Directory Federation Services (AD FS) role on a domain controller in the Miami office
- D. Join the client computers in the Miami office to Azure AD
- E. Add http://autologon.microsoftazuread-sso.com to the intranet zone of each client computer in the Miami office.
Answer:
B E
Explanation:
B: Seamless SSO works with any method of cloud authentication - Password Hash Synchronization or Pass-through
Authentication, and can be enabled via Azure AD Connect.
E: You can gradually roll out Seamless SSO to your users. You start by adding the following Azure AD URL to all or selected
users' Intranet zone settings by using Group Policy in Active
Directory: https://autologon.microsoftazuread-sso.com
Incorrect Answers:
A: Azure AD connect does not port 8080. It uses port 443.
C: Seamless SSO is not applicable to Active Directory Federation Services (ADFS).
D: Seamless SSO needs the user's device to be domain-joined, but doesn't need for the device to be Azure AD Joined.
Scenario: Users in the Miami office must use Azure Active Directory Seamless Single Sign-on (Azure AD Seamless SSO)
when accessing resources in Azure. Planned Azure AD Infrastructure include: The on-premises Active Directory domain will
be synchronized to Azure AD.
References: https://docs.microsoft.com/en-us/azure/active-directory/connect/active-directory-aadconnect-sso-quick-start
Comments
Question 10 Topic 6, Case Study 6Case Study Question View Case
Which blade should you instruct the finance department auditors to use?
- A. Partner information
- B. Cost analysis
- C. Resource providers
- D. Invoices
Answer:
D
Explanation:
You can opt in and configure additional recipients to receive your Azure invoice in an email. This feature may not be
available for certain subscriptions such as support offers, Enterprise Agreements, or Azure in Open.
1. Select your subscription from the Subscriptions page. Opt-in for each subscription you own. Click Invoices then Email my
invoice.
2. Click Opt in and accept the terms.
Scenario: During the testing phase, auditors in the finance department must be able to review all Azure costs from the past
week.
References:
https://docs.microsoft.com/en-us/azure/billing/billing-download-azure-invoice-daily-usage-date
Legacy AZ-300: Implement Authentication and Secure Data
Comments
Page 1 out of 44
Viewing questions 1-10 out of 449
page 2