2019 Free Microsoft EnsurePass AZ-100 Dumps VCE and PDF Download Part 4

EnsurePass Exam Dumps

AZ-100 Dumps VCE and PDF

http://www.ensurepass.com/AZ-100.html

 

QUESTION 31

Click to expand each objective. To connect to the Azure portal, type https://portal.azure.com in the browser address bar.

 







 

When you are finished performing all the tasks, click the `Next’ button.

 

Note that you cannot return to the lab once you click the `Next’ button. Scoring occur in the background while you complete the rest of the exam.

 

Overview

The following section of the exam is a lab. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design. Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.

 

Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.

 

Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.

 

To start the lab

You may start the lab by clicking the Next button.

 

You need to deploy two Azure virtual machines named VM1003a and VM1003b based on the Ubuntu Server 17.10 image. The deployment must meet the following requirements:

 

Provide a Service Level Agreement (SLA) of 99.95 percent availability.

Use managed disks.

 

What should you do from the Azure portal?

 

Correct Answer: See solution below.

Explanation:
1. Open the Azure portal.

2. On the left menu, select All resources. You can sort the resources by Type to easily find your images.

3. Select the image you want to use from the list. The image Overview page opens.

4. Select Create VM from the menu.

5. Enter the virtual machine information.

Select VM1003a as the name for the first Virtual machine.The user name and password entered here will be used to log in to the virtual machine. When complete, select OK. You can create the new VM in an existing resource group, or choose Create new to create a new resource group to store the VM.

6. Select a size for the VM. To see more sizes, select View all or change the Supported disk type filter.

7. Under Settings, make changes as necessary and select OK.

8. On the summary page, you should see your image name listed as a Private image. Select Ok to start the virtual machine deployment.

Repeat the procedure for the second VM and name it VM1003b.

 

References:

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/create-vm-generalized-managed

 

 

QUESTION 32

You have a Recovery Service vault that you use to test backups. The test backups contain two protected virtual machines.

 

You need to delete the Recovery Services vault.

 

What should you do first?

 

A.

From the Recovery Service vault, stop the backup of each backup item.

B.

From the Recovery Service vault, delete the backup data.

C.

Modify the disaster recovery properties of each virtual machine.

D.

Modify the locks of each virtual machine.

 

Correct Answer: A

Explanation:
You can’t delete a Recovery Services vault if it is registered to a server and holds backup data. If you try to delete a vault, but can’t, the vault is still configured to receive backup data.

 

Remove vault dependencies and delete vault

 

In the vault dashboard menu, scroll down to the Protected Items section, and click Backup Items. In this menu, you can stop and delete Azure File Servers, SQL Servers in Azure VM, and Azure virtual machines.

 


 

References:

https://docs.microsoft.com/en-us/azure/backup/backup-azure-delete-vault

 

 

QUESTION 33

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

 

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

 

You have an Azure subscription that contains 10 virtual networks. The virtual networks are hosted in separate resource groups.

 

Another administrator plans to create several network security groups (NSGs) in the subscription.

 

You need to ensure that when an NSG is created, it automatically blocks TCP port 8080 between the virtual networks.

 

Solution: You create a resource lock, and then you assign the lock to the subscription.

 

Does this meet the goal?

 

A.

Yes

B.

No

 

Correct Answer: B

Explanation:
How can I freeze or lock my production/critical Azure resources from accidental deletion? There is way to do this with both ASM and ARM resources using Azure resource lock.

 

References:

https://blogs.msdn.microsoft.com/azureedu/2016/04/27/using-azure-resource-manager-policy-and-azure-lock-to-control-your-azure-resources/

QUESTION 34

Click to expand each objective. To connect to the Azure portal, type https://portal.azure.com in the browser address bar.

 







 

When you are finished performing all the tasks, click the `Next’ button.

 

Note that you cannot return to the lab once you click the `Next’ button. Scoring occur in the background while you complete the rest of the exam.

 

Overview

The following section of the exam is a lab. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design. Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.

 

Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.

 

Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.

 

To start the lab

You may start the lab by clicking the Next button.

 

You plan to deploy several Azure virtual machines and to connect them to a virtual network named VNET1007.

 

You need to ensure that future virtual machines in VNET1007 can register their name in an internal DNS zone named corp7523690.com. The zone must NOT be hosted on a virtual machine.

 

What should you do from Azure Cloud Shell?

 

To complete this task, start Azure Cloud Shell and select PowerShell(Linux). Click Show Advanced Settings, and then enter corp7523690n1 in the Storage account text box and File1 in the File share text box. Click Create storage, and then complete the task.

 

Correct Answer: See solution below.

Explanation:
Step 1: New-AzureRMResourceGroup -name MyResourceGroup

Before you create the DNS zone, create a resource group to contain the DNS zone.

 

Step 2: New-AzureRmDnsZone -Name corp7523690.com -ResourceGroupName MyResourceGroup

A DNS zone is created by using the New-AzureRmDnsZone cmdlet. This creates a DNS zone called corp7523690.com in the resource group called MyResourceGroup.

 

References:

https://docs.microsoft.com/en-us/azure/dns/dns-getstarted-powershell

 

 

QUESTION 35

You create an Azure Storage account named contosostorage.

 

You plan to create a file share named data.

 

Users need to map a drive to the data file share from home computers that run Windows 10.

 

Which port should be open between the home computers and the data file share?

 

A.

80

B.

443

C.

445

D.

3389

 

Correct Answer: C

Explanation:
Ensure port 445 is open: The SMB protocol requires TCP port 445 to be open; connections will fail if port 445 is blocked.

 

References:

https://docs.microsoft.com/en-us/azure/storage/files/storage-how-to-use-files-windows

 

 

 

 

 

 

 

 

QUESTION 36

You have an Azure subscription named Subscription1.

 

You deploy a Linux virtual machine named VM1 to Subscription1.

 

You need to monitor the metrics and the logs of VM1.

 

What should you use?

 

A.

LAD 3.0

B.

Azure Analysis Services

C.

the AzurePerformanceDiagnostics extension

D.

Azure HDInsight

 

Correct Answer: C

Explanation:
You can use extensions to configure diagnostics on your VMs to collect additional metric data.

The basic host metrics are available, but to see more granular and VM-specific metrics, you need to install the Azure diagnostics extension on the VM. The Azure diagnostics extension allows additional monitoring and diagnostics data to be retrieved from the VM.

 

References:

https://docs.microsoft.com/en-us/azure/virtual-machines/linux/tutorial-monitoring

 

 

QUESTION 37

You have an Azure subscription that contains the resources in the following table.

 


 

Subnet1 is associated to VNet1. NIC1 attaches VM1 to Subnet1.

 

You need to apply ASG1 to VM1.

 

What should you do?

 

A.

Modify the properties of NSG1.

B.

Modify the properties of ASG1.

C.

Associate NIC1 to ASG1.

 

Correct Answer: B

Explanation:
When you deploy VMs, make them members of the appropriate ASGs.

You associate the ASG with a subnet.

 

References:

https://azure.microsoft.com/en-us/blog/applicationsecuritygroups/

 

QUESTION 38

DRAG DROP

You have an on-premises file server named Server1 that runs Windows Server 2016.

 

You have an Azure subscription that contains an Azure file share.

 

You deploy an Azure File Sync Storage Sync Service, and you create a sync group.

 

You need to synchronize files from Server1 to Azure.

 

Which three actions should you perform in sequence?

 

To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

 


 

Correct Answer:


 

 

QUESTION 39

You have an Azure Active Directory (Azure AD) domain that contains 5,000 user accounts. You create a new user account named AdminUser1.

 

You need to assign the User administrator administrative role to AdminUser1.

 

What should you do from the user account properties?

 

A.

From the Directory role blade, modify the directory role.

B.

From the Groups blade, invite the user account to a new group.

C.

From the Licenses blade, assign a new license.

 

Correct Answer: A

Explanation:
Assign a role to a user

Sign in to the Azure portal with an account that’s a global admin or privileged role admin for the directory.

Select Azure Active Directory, select Users, and then select a specific user from the list.

For the selected user, select Directory role, select Add role, and then pick the appropriate admin roles from the Directory roles list, such as Conditional access administrator.

Press Select to save.

 

References:

https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-users-assign-role-azure-portal

 

 

QUESTION 40

HOTSPOT

You have an Azure subscription.

 

You need to implement a custom policy that meet the following requirements:

 

Ensures that each new resource group in the subscription has a tag named organization set to a value of Contoso.

Ensures that resource group can be created from the Azure portal.

Ensures that compliance reports in the Azure portal are accurate.

 

How should you complete the policy?

 

To answer, select the appropriate options in the answers area.

 


 

Correct Answer:


 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 


 

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.