General

Your company has two on-premises servers named SRV01 and SRV02. Developers have created an application that runs on SRV01. The application calls a service on SRV02 by IP address. You plan to migrate the application on Azure virtual machines (VMs). You have configured two VMs on a single subnet in an Azure virtual network. You need to configure the two VMs with static internal IP addresses. What should you do?

• A. Run the New-AzureRMVMConfig PowerShell cmdlet.
• B. Run the Set-AzureSubnet PowerShell cmdlet.
• C. Modify the VM properties in the Azure Management Portal.
• D. Modify the IP properties in Windows Network and Sharing Center.
• E. Run the Set-AzureStaticVNetIP PowerShell cmdlet.

Your company has an Azure Active Directory (Azure AD) subscription. You need to deploy five virtual machines (VMs) to your companyג€™s virtual network subnet. The VMs will each have both a public and private IP address. Inbound and outbound security rules for all of these virtual machines must be identical. Which of the following is the least amount of network interfaces needed for this configuration?

• A. 5
• B. 10
• C. 20
• D. 40

Your company has an Azure Active Directory (Azure AD) subscription. You need to deploy five virtual machines (VMs) to your companyג€™s virtual network subnet. The VMs will each have both a public and private IP address. Inbound and outbound security rules for all of these virtual machines must be identical. Which of the following is the least amount of security groups needed for this configuration?

• A. 4
• B. 3
• C. 2
• D. 1

Your companyג€™s Azure subscription includes Azure virtual machines (VMs) that run Windows Server 2016. One of the VMs is backed up every day using Azure Backup Instant Restore. When the VM becomes infected with data encrypting ransomware, you decide to recover the VMג€™s files. Which of the following is TRUE in this scenario?

• A. You can only recover the files to the infected VM.
• B. You can recover the files to any VM within the companyג€™s subscription.
• C. You can only recover the files to a new VM.
• D. You will not be able to recover the files.

Your companyג€™s Azure subscription includes Azure virtual machines (VMs) that run Windows Server 2016. One of the VMs is backed up every day using Azure Backup Instant Restore. When the VM becomes infected with data encrypting ransomware, you are required to restore the VM. Which of the following actions should you take?

• A. You should restore the VM after deleting the infected VM.
• B. You should restore the VM to any VM within the companyג€™s subscription.
• C. You should restore the VM to a new Azure VM.
• D. You should restore the VM to an on-premise Windows device.

You administer a solution in Azure that is currently having performance issues. You need to find the cause of the performance issues pertaining to metrics on the Azure infrastructure. Which of the following is the tool you should use?

• A. Azure Traffic Analytics
• B. Azure Monitor
• C. Azure Activity Log
• D. Azure Advisor

Your company has an Azure subscription that includes a Recovery Services vault. You want to use Azure Backup to schedule a backup of your company's virtual machines (VMs) to the Recovery Services vault. Which of the following VMs can you back up? Choose all that apply.

• A. VMs that run Windows 10.
• B. VMs that run Windows Server 2012 or higher.
• C. VMs that have NOT been shut down.
• D. VMs that run Debian 8.2+.
• E. VMs that have been shut down.

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure Active Directory (Azure AD) tenant named contoso.com. You have a CSV file that contains the names and email addresses of 500 external users. You need to create a guest user account in contoso.com for each of the 500 external users. Solution: You create a PowerShell script that runs the New-AzureADUser cmdlet for each user. Does this meet the goal?

• A. Yes
• B. No

You have an Azure subscription that contains an Azure Active Directory (Azure AD) tenant named contoso.com and an Azure Kubernetes Service (AKS) cluster named AKS1. An administrator reports that she is unable to grant access to AKS1 to the users in contoso.com. You need to ensure that access to AKS1 can be granted to the contoso.com users. What should you do first?

• A. From contoso.com, modify the Organization relationships settings.
• B. From contoso.com, create an OAuth 2.0 authorization endpoint.
• C. Recreate AKS1.
• D. From AKS1, create a namespace.

You have a Microsoft 365 tenant and an Azure Active Directory (Azure AD) tenant named contoso.com. You plan to grant three users named User1, User2, and User3 access to a temporary Microsoft SharePoint document library named Library1. You need to create groups for the users. The solution must ensure that the groups are deleted automatically after 180 days. Which two groups should you create? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

• A. a Microsoft 365 group that uses the Assigned membership type
• B. a Security group that uses the Assigned membership type
• C. a Microsoft 365 group that uses the Dynamic User membership type
• D. a Security group that uses the Dynamic User membership type
• E. a Security group that uses the Dynamic Device membership type

You have an app named App1 that runs on two Azure virtual machines named VM1 and VM2. You plan to implement an Azure Availability Set for App1. The solution must ensure that App1 is available during planned maintenance of the hardware hosting VM1 and VM2. What should you include in the Availability Set? Options are :

• A. one update domain
• B. two fault domains
• C. one fault domain
• D. two update domains

You have an Azure subscription named Subscription1. You have 5 TB of data that you need to transfer to Subscription1 You plan to use an Azure Import/Export job. What can you use as the destination of the imported data? Options are :

• A. an Azure Cosmos DB database
• B. Azure Blob storage
• C. Azure Data Lake Store
• D. the Azure File Sync Storage Sync Service

You have two Azure virtual machines named VM1 and VM2. You have two Recovery Services vaults named RSV1 and RSV2. VM2 is backed up to RSV1. You need to back up VM2 to RSV2. What should you do first? Options are :

• A. From the RSV1 blade, click Backup items and stop the VM2 backup
• B. From the RSV2 blade, click Backup. From the Backup blade, select the backup for the virtual machine, and then click Backup
• C. From the VM2 blade, click Disaster recovery, click Replication settings, and then select RSV2 as the Recovery Services vault
• D. From the RSV1 blade, click Backup Jobs and export the VM2 job

You have a general-purpose v1 Azure Storage account named storage1 that uses locally-redundant storage (LRS). You need to ensure that the data in the storage account is protected if a zone fails. The solution must minimize costs and administrative effort. What should you do first? Options are :

• A. Create a new storage account.
• B. Configure object replication rules.
• C. Upgrade the account to general-purpose v2.
• D. Modify the Replication setting of storage1.

You create an Azure Storage account named Contoso storage. You plan to create a file share named data. Users need to map a drive to the data file share from home computers that run Windows 10. Which outbound port should you open between the home computers and the data file share? Options are :

• A. 80
• B. 443
• C. 445
• D. 3389