Questions
ayuda
option
My Daypo

ERASED TEST, YOU MAY BE INTERESTED ONSet 5 - 104

COMMENTS STATISTICS RECORDS
TAKE THE TEST
Title of test:
Set 5 - 104

Description:
Cloud 104

Author:
Anonymous
(Other tests from this author)

Creation Date:
28/03/2024

Category:
Personal

Number of questions: 103
Share the Test:
Facebook
Twitter
Whatsapp
Share the Test:
Facebook
Twitter
Whatsapp
Last comments
No comments about this test.
Content:
Your company has three offices. The offices are located in Miami, Los Angeles, and New York. Each office contains datacenter. You have an Azure subscription that contains resources in the East US and West US Azure regions. Each region contains a virtual network. The virtual networks are peered. You need to connect the datacenters to the subscription. The solution must minimize network latency between the datacenters. What should you create? three Azure Application Gateways and one On-premises data gateway three virtual hubs and one virtual WAN three virtual WANs and one virtual hub three On-premises data gateways and one Azure Application Gateway.
You have an Azure subscription that contains the resources shown in the following table. a frontend IP address a load balancing rule a health probe a backend pool.
You have the Azure virtual networks shown in the following table. VNet2 andVNet3 only VNet2 only VNet3 and VNet4 only VNet2, VNet3, and VNet4.
You have an Azure subscription that contains a virtual network named VNet1. VNet1 contains four subnets named Gateway, Perimeter, NVA, and Production. The NVA subnet contains two network virtual appliances (NVAs) that will perform network traffic inspection between the Perimeter subnet and the Production subnet. You need to implement an Azure load balancer for the NVAs. The solution must meet the following requirements: ✑ The NVAs must run in an active-active configuration that uses automatic failover. ✑ The load balancer must load balance traffic to two services on the Production subnet. The services have different IP addresses. Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point. Deploy a basic load balancer Deploy a standard load balancer Add two load balancing rules that have HA Ports and Floating IP enabled Add two load balancing rules that have HA Ports enabled and Floating IP disabled Add a frontend IP configuration, a backend pool, and a health probe Add a frontend IP configuration, two backend pools, and a health probe.
You have an Azure subscription named Subscription1 that contains two Azure virtual networks named VNet1 and VNet2. VNet1 contains a VPN gateway named VPNGW1 that uses static routing. There is a site-to-site VPN connection between your on-premises network and VNet1. On a computer named Client1 that runs Windows 10, you configure a point-to-site VPN connection to VNet1. You configure virtual network peering between VNet1 and VNet2. You verify that you can connect to VNet2 from the on-premises network. Client1 is unable to connect to VNet2. You need to ensure that you can connect Client1 to VNet2. What should you do? Download and re-install the VPN client configuration package on Client1 Select Allow gateway transit on VNet1 Select Allow gateway transit on VNet2 Enable BGP on VPNGW1.
You have an Azure subscription that contains the resources in the following table. the subnets on VNet1 only the subnets on VNet2 and VNet3 only the subnets on VNet2 only the subnets on VNet3 only the subnets on VNet1, VNet2, and VNet3.
You have an Azure web app named webapp1. You have a virtual network named VNET1 and an Azure virtual machine named VM1 that hosts a MySQL database. VM1 connects to VNET1. You need to ensure that webapp1 can access the data hosted on VM1. What should you do? Deploy an internal load balancer Peer VNET1 to another virtual network Connect webapp1 to VNET1 Deploy an Azure Application Gateway.
You have five Azure virtual machines that run Windows Server 2016. The virtual machines are configured as web servers. You have an Azure load balancer named LB1 that provides load balancing services for the virtual machines. You need to ensure that visitors are serviced by the same web server for each request. What should you configure? Floating IP (direct server return) to Disabled Session persistence to None Floating IP (direct server return) to Enabled Session persistence to Client IP.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure subscription that contains the following resources: ✑ A virtual network that has a subnet named Subnet1 ✑ Two network security groups (NSGs) named NSG-VM1 and NSG-Subnet1 ✑ A virtual machine named VM1 that has the required Windows Server configurations to allow Remote Desktop connections NSG-Subnet1 has the default inbound security rules only. NSG-VM1 has the default inbound security rules and the following custom inbound security rule: ✑ Priority: 100 ✑ Source: Any ✑ Source port range: * ✑ Destination: * ✑ Destination port range: 3389 ✑ Protocol: UDP ✑ Action: Allow VM1 has a public IP address and is connected to Subnet1. NSG-VM1 is associated to the network interface of VM1. NSG-Subnet1 is associated to Subnet1. You need to be able to establish Remote Desktop connections from the internet to VM1. Solution: You add an inbound security rule to NSG-Subnet1 that allows connections from the Any source to the *destination for port range 3389 and uses the TCP protocol. You remove NSG-VM1 from the network interface of VM1. Does this meet the goal? Yes No.
You have an Azure subscription that contains the following resources: ✑ A virtual network that has a subnet named Subnet1 ✑ Two network security groups (NSGs) named NSG-VM1 and NSG-Subnet1 ✑ A virtual machine named VM1 that has the required Windows Server configurations to allow Remote Desktop connections NSG-Subnet1 has the default inbound security rules only. NSG-VM1 has the default inbound security rules and the following custom inbound security rule: ✑ Priority: 100 ✑ Source: Any ✑ Source port range: * ✑ Destination: * ✑ Destination port range: 3389 Protocol: UDP - ✑ Action: Allow VM1 has a public IP address and is connected to Subnet1. NSG-VM1 is associated to the network interface of VM1. NSG-Subnet1 is associated to Subnet1. You need to be able to establish Remote Desktop connections from the internet to VM1. Solution: You add an inbound security rule to NSG-Subnet1 that allows connections from the internet source to the VirtualNetwork destination for port range 3389 and uses the UDP protocol. Does this meet the goal? Yes No.
You have an Azure subscription that contains the following resources: ✑ A virtual network that has a subnet named Subnet1 ✑ Two network security groups (NSGs) named NSG-VM1 and NSG-Subnet1 ✑ A virtual machine named VM1 that has the required Windows Server configurations to allow Remote Desktop connections NSG-Subnet1 has the default inbound security rules only. NSG-VM1 has the default inbound security rules and the following custom inbound security rule: ✑ Priority: 100 ✑ Source: Any ✑ Source port range: * ✑ Destination: * ✑ Destination port range: 3389 ✑ Protocol: UDP ✑ Action: Allow VM1 has a public IP address and is connected to Subnet1. NSG-VM1 is associated to the network interface of VM1. NSG-Subnet1 is associated to Subnet1. You need to be able to establish Remote Desktop connections from the internet to VM1. Solution: You add an inbound security rule to NSG-Subnet1 and NSG-VM1 that allows connections from the internet source to the VirtualNetwork destination for port range 3389 and uses the TCP protocol. Does this meet the goal? Yes No.
You have an Azure subscription that contains a virtual network named VNET1. VNET1 contains the subnets shown in the following table. 1 3 4 12.
You have an Azure subscription that contains the resources shown in the following table. Remove Microsoft.Compute/virtualMachines from the policy Create an Azure Resource Manager template Add a subnet to VNET1 Remove Microsoft.Network/virtualNetworks from the policy.
Your company has an Azure subscription named Subscription1. The company also has two on-premises servers named Server1 and Server2 that run Windows Server 2016. Server1 is configured as a DNS server that has a primary DNS zone named adatum.com. Adatum.com contains 1,000 DNS records. You manage Server1 and Subscription1 from Server2. Server2 has the following tools installed: ✑ The DNS Manager console ✑ Azure PowerShell ✑ Azure CLI 2.0 You need to move the adatum.com zone to an Azure DNS zone in Subscription1. The solution must minimize administrative effort. What should you use? Azure CLI Azure PowerShell the Azure portal the DNS Manager console.
You have a public load balancer that balances ports 80 and 443 across three virtual machines named VM1, VM2, and VM3. You need to direct all the Remote Desktop Protocol (RDP) connections to VM3 only. What should you configure? an inbound NAT rule a new public load balancer for VM3 a frontend IP configuration a load balancing rule.
You have an Azure subscription that contains the resources in the following table. Disassociate the NSG from a network interface Change the Port_80 inbound security rule Associate the NSG to Subnet1 Change the DenyWebSites outbound security rule.
You have two subscriptions named Subscription1 and Subscription2. Each subscription is associated to a different Azure AD tenant. Subscription1 contains a virtual network named VNet1. VNet1 contains an Azure virtual machine named VM1 and has an IP address space of 10.0.0.0/16. Subscription2 contains a virtual network named VNet2. VNet2 contains an Azure virtual machine named VM2 and has an IP address space of 10.10.0.0/24. You need to connect VNet1 to VNet2. What should you do first? Move VM1 to Subscription2 Move VNet1 to Subscription2 Modify the IP address space of VNet2 Provision virtual network gateways.
You have a computer named Computer1 that has a point-to-site VPN connection to an Azure virtual network named VNet1. The point-to-site connection uses a self-signed certificate. From Azure, you download and install the VPN client configuration package on a computer named Computer2. You need to ensure that you can establish a point-to-site VPN connection to VNet1 from Computer2. Solution: You modify the Azure Active Directory (Azure AD) authentication policies. Does this meet the goal? Yes No.
You have a computer named Computer1 that has a point-to-site VPN connection to an Azure virtual network named VNet1. The point-to-site connection uses a self-signed certificate. From Azure, you download and install the VPN client configuration package on a computer named Computer2. You need to ensure that you can establish a point-to-site VPN connection to VNet1 from Computer2. Solution: You join Computer2 to Azure Active Directory (Azure AD). Does this meet the goal? Yes No.
You have an Azure subscription that contains 10 virtual networks. The virtual networks are hosted in separate resource groups. Another administrator plans to create several network security groups (NSGs) in the subscription. You need to ensure that when an NSG is created, it automatically blocks TCP port 8080 between the virtual networks. Solution: You create a resource lock, and then you assign the lock to the subscription. Does this meet the goal? Yes No.
You have an Azure subscription named Subscription1. Subscription1 contains a virtual machine named VM1. You have a computer named Computer1 that runs Windows 10. Computer1 is connected to the Internet. You add a network interface named vm1173 to VM1 as shown in the exhibit. (Click the Exhibit tab.) Change the priority of the RDP rule Attach a network interface Delete the DenyAllInBound rule Start VM1.
You have the Azure virtual machines shown in the following table. Configure a conditional forwarder on VM1 Add service endpoints on VNET1 Add service endpoints on VNET2 and VNET3 Configure peering between VNET1, VNET2, and VNET3.
You have the Azure virtual network named VNet1 that contains a subnet named Subnet1. Subnet1 contains three Azure virtual machines. Each virtual machine has a public IP address. The virtual machines host several applications that are accessible over port 443 to users on the Internet. Your on-premises network has a site-to-site VPN connection to VNet1. You discover that the virtual machines can be accessed by using the Remote Desktop Protocol (RDP) from the Internet and from the on-premises network. You need to prevent RDP access to the virtual machines from the Internet, unless the RDP connection is established from the on-premises network. The solution must ensure that all the applications can still be accessed by the Internet users. What should you do? Modify the address space of the local network gateway Create a deny rule in a network security group (NSG) that is linked to Subnet1 Remove the public IP addresses from the virtual machines Modify the address space of Subnet1.
You have an Azure subscription that contains the resources in the following table Associate NIC1 to ASG1 Modify the properties of ASG1 Modify the properties of NSG1.
You have an Azure subscription named Subscription1 that contains an Azure virtual network named VNet1. VNet1 connects to your on-premises network by using Azure ExpressRoute. You plan to prepare the environment for automatic failover in case of ExpressRoute failure. You need to connect VNet1 to the on-premises network by using a site-to-site VPN. The solution must minimize cost. Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point. Create a connection Create a local site VPN gateway Create a VPN gateway that uses the VpnGw1 SKU Create a gateway subnet Create a VPN gateway that uses the Basic SKU.
You have an Azure subscription that contains the resources shown in the following table. East US and North Europe only East US only East US, West Europe, and North Europe East US and West Europe only.
You have Azure virtual machines that run Windows Server 2019 and are configured as shown in the following table Update the DNS suffix on VM1 to be adatum.com Configure the name servers for adatum.com at the domain registrar Create an SRV record in the contoso.com zone Modify the Access control (IAM) settings for link1.
You have an Azure subscription that contains the virtual machines shown in the following table. Yes No.
You have an Azure subscription that contains the virtual machines shown in the following table. Yes No.
You have an Azure subscription that contains the virtual machines shown in the following table. Yes No.
You have a computer named Computer1 that has a point-to-site VPN connection to an Azure virtual network named VNet1. The point-to-site connection uses a self-signed certificate. From Azure, you download and install the VPN client configuration package on a computer named Computer2. You need to ensure that you can establish a point-to-site VPN connection to VNet1 from Computer2. Solution: You export the client certificate from Computer1 and install the certificate on Computer2. Does this meet the goal? Yes No.
You have an Azure virtual machine named VM1. The network interface for VM1 is configured as shown in the exhibit. (Click the Exhibit tab.) Modify the protocol of Rule4 Delete Rule1 For Rule5, change the Action to Allow and change the priority to 401 Create a new inbound rule that allows TCP protocol 443 and configure the rule to have a priority of 501.
You have an Azure subscription that contains 10 virtual networks. The virtual networks are hosted in separate resource groups. Another administrator plans to create several network security groups (NSGs) in the subscription. You need to ensure that when an NSG is created, it automatically blocks TCP port 8080 between the virtual networks. Solution: From the Resource providers blade, you unregister the Microsoft.ClassicNetwork provider. Does this meet the goal? Yes No.
You have an app named App1 that is installed on two Azure virtual machines named VM1 and VM2. Connections to App1 are managed by using an Azure Load Balancer. The effective network security configurations for VM2 are shown in the following exhibit. Yes No.
You have an app named App1 that is installed on two Azure virtual machines named VM1 and VM2. Connections to App1 are managed by using an Azure Load Balancer. The effective network security configurations for VM2 are shown in the following exhibit Yes No.
You have an app named App1 that is installed on two Azure virtual machines named VM1 and VM2. Connections to App1 are managed by using an Azure Load Balancer. The effective network security configurations for VM2 are shown in the following exhibit. Yes No.
You have an Azure subscription that contains 10 virtual networks. The virtual networks are hosted in separate resource groups. Another administrator plans to create several network security groups (NSGs) in the subscription. You need to ensure that when an NSG is created, it automatically blocks TCP port 8080 between the virtual networks. Solution: You assign a built-in policy definition to the subscription. Does this meet the goal? Yes No.
You have an Azure subscription. You plan to deploy an Azure Kubernetes Service (AKS) cluster to support an app named App1. On-premises clients connect to App1 by using the IP address of the pod. For the AKS cluster, you need to choose a network type that will support App1. What should you choose? kubenet Azure Container Networking Interface (CNI) Hybrid Connection endpoints Azure Private Link.
You have an Azure subscription that contains the virtual machines shown in the following table. You deploy a load balancer that has the following configurations: ✑ Name: LB1 ✑ Type: Internal ✑ SKU: Standard ✑ Virtual network: VNET1 You need to ensure that you can add VM1 and VM2 to the backend pool of LB1. Solution: You disassociate the public IP address from the network interface of VM2. Does this meet the goal? Yes No.
You have an Azure subscription that contains 10 virtual networks. The virtual networks are hosted in separate resource groups. Another administrator plans to create several network security groups (NSGs) in the subscription. You need to ensure that when an NSG is created, it automatically blocks TCP port 8080 between the virtual networks. Solution: You configure a custom policy definition, and then you assign the policy to the subscription. Does this meet the goal? Yes No.
You have two Azure virtual networks named VNet1 and VNet2. VNet1 contains an Azure virtual machine named VM1. VNet2 contains an Azure virtual machine named VM2. VM1 hosts a frontend application that connects to VM2 to retrieve data. Users report that the frontend application is slower than usual. You need to view the average round-trip time (RTT) of the packets from VM1 to VM2. Which Azure Network Watcher feature should you use? IP flow verify Connection troubleshoot Connection monitor NSG flow logs.
You have an Azure subscription that contains two virtual machines as shown in the following table vm1.core.windows.net vm1.azure.com vm1.westeurope.cloudapp.azure.com vm1.internal.cloudapp.net.
You have an app named App1 that is installed on two Azure virtual machines named VM1 and VM2. Connections to App1 are managed by using an Azure Load Balancer. The effective network security configurations for VM2 are shown in the following exhibit. You discover that connections to App1 from 131.107.100.50 over TCP port 443 fail. You verify that the Load Balancer rules are configured correctly. You need to ensure that connections to App1 can be established successfully from 131.107.100.50 over TCP port 443. Solution: You create an inbound security rule that allows any traffic from the AzureLoadBalancer source and has a cost of 150. Does this meet the goal? Yes No.
You have an Azure subscription that contains a policy-based virtual network gateway named GW1 and a virtual network named VNet1. You need to ensure that you can configure a point-to-site connection from an on-premises computer to VNet1. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point. Add a service endpoint to VNet1 Reset GW1 Create a route-based virtual network gateway Add a connection to GW1 Delete GW1 Add a public IP address space to VNet1.
You manage a virtual network named VNet1 that is hosted in the West US Azure region. VNet1 hosts two virtual machines named VM1 and VM2 that run Windows Server. You need to inspect all the network traffic from VM1 to VM2 for a period of three hours. Solution: From Azure Network Watcher, you create a packet capture. Does this meet the goal? Yes No.
You manage a virtual network named VNet1 that is hosted in the West US Azure region. VNet1 hosts two virtual machines named VM1 and VM2 that run Windows Server. You need to inspect all the network traffic from VM1 to VM2 for a period of three hours. Solution: From Azure Network Watcher, you create a connection monitor. Does this meet the goal? Yes No.
You manage a virtual network named VNet1 that is hosted in the West US Azure region. VNet1 hosts two virtual machines named VM1 and VM2 that run Windows Server. You need to inspect all the network traffic from VM1 to VM2 for a period of three hours. Solution: From Performance Monitor, you create a Data Collector Set (DCS). Does this meet the goal? Yes No.
You manage a virtual network named VNet1 that is hosted in the West US Azure region. VNet1 hosts two virtual machines named VM1 and VM2 that run Windows Server. You need to inspect all the network traffic from VM1 to VM2 for a period of three hours. Solution: From Azure Monitor, you create a metric on Network In and Network Out. Does this meet the goal? Yes No.
You have an app named App1 that is installed on two Azure virtual machines named VM1 and VM2. Connections to App1 are managed by using an Azure Load Balancer. The effective network security configurations for VM2 are shown in the following exhibit. Yes No.
You have a virtual network named VNet1 as shown in the exhibit. (Click the Exhibit tab.) Modify the address space of VNet1 Add a gateway subnet to VNet1 Create a subnet on VNet1 and VNet2 Configure a service endpoint on VNet2.
You have the Azure virtual machines shown in the following table. comp2.contoso.com and comp4.contoso.com only comp1.contoso.com, comp2.contoso.com, comp3.contoso.com, and comp4.contoso.com comp2.contoso.com only comp1.contoso.com and comp2.contoso.com only comp1.contoso.com, comp2.contoso.com, and comp4.contoso.com only.
You have a computer named Computer1 that has a point-to-site VPN connection to an Azure virtual network named VNet1. The point-to-site connection uses a self-signed certificate. From Azure, you download and install the VPN client configuration package on a computer named Computer2. You need to ensure that you can establish a point-to-site VPN connection to VNet1 from Computer2. Solution: On Computer2, you set the Startup type for the IPSec Policy Agent service to Automatic. Does this meet the goal? Yes No.
You have five Azure virtual machines that run Windows Server 2016. The virtual machines are configured as web servers. You have an Azure load balancer named LB1 that provides load balancing services for the virtual machines. You need to ensure that visitors are serviced by the same web server for each request. What should you configure? Session persistence to Client IP and protocol Protocol to UDP Session persistence to None Floating IP (direct server return) to Enabled.
You have an Azure subscription that uses the public IP addresses shown in the following table. IP1, IP2, and IP3 IP2 only IP3 only IP1 and IP3 only.
You have an Azure subscription. You are deploying an Azure Kubernetes Service (AKS) cluster that will contain multiple pods. The pods will use kubernet networking. You need to restrict network traffic between the pods. What should you configure on the AKS cluster? the Azure network policy the Calico network policy pod security policies an application security group.
You have five Azure virtual machines that run Windows Server 2016. The virtual machines are configured as web servers. You have an Azure load balancer named LB1 that provides load balancing services for the virtual machines. You need to ensure that visitors are serviced by the same web server for each request. What should you configure? Floating IP (direct server return) to Enabled Floating IP (direct server return) to Disabled a health probe Session persistence to Client IP and Protocol.
You have an Azure subscription that contains two virtual machines named VM1 and VM2. You create an Azure load balancer. You plan to create a load balancing rule that will load balance HTTPS traffic between VM1 and VM2. Which two additional load balancer resources should you create before you can create the load balancing rule? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point. a frontend IP address an inbound NAT rule a virtual network a backend pool a health probe.
You have an on-premises network that contains a database server named dbserver1. You have an Azure subscription. You plan to deploy three Azure virtual machines. Each virtual machine will be deployed to a separate availability zone. You need to configure an Azure VPN gateway for a site-to-site VPN. The solution must ensure that the virtual machines can connect to dbserver1. Which type of public IP address SKU and assignment should you use for the gateway? a basic SKU and a static IP address assignment a standard SKU and a static IP address assignment a basic SKU and a dynamic IP address assignment.
You have an on-premises datacenter and an Azure subscription. You plan to connect the datacenter to Azure by using ExpressRoute. You need to deploy an ExpressRoute gateway. The solution must meet the following requirements: ✑ Support up to 10 Gbps of traffic. ✑ Support availability zones. ✑ Support FastPath. ✑ Minimize costs. Which SKU should you deploy? ERGw1AZ ERGw2 ErGw3 ErGw3AZ.
Your on-premises network contains an SMB share named Share1. You have an Azure subscription that contains the following resources: ✑ A web app named webapp1 ✑ A virtual network named VNET1 You need to ensure that webapp1 can connect to Share1. What should you deploy? an Azure Application Gateway an Azure Active Directory (Azure AD) Application Proxy an Azure Virtual Network Gateway.
You plan to deploy several Azure virtual machines that will run Windows Server 2019 in a virtual machine scale set by using an Azure Resource Manager template. You need to ensure that NGINX is available on all the virtual machines after they are deployed. What should you use? the Publish-AzVMDscConfiguration cmdlet Azure Application Insights Azure Custom Script Extension the New-AzConfigurationAssignement cmdlet.
Your on-premises network contains a VPN gateway. You have an Azure subscription that contains the resources shown in the following table. a network security group (NSG) service endpoints Azure Peering Service Azure Firewall.
You plan to deploy route-based Site-to-Site VPN connections between several on-premises locations and an Azure virtual network. Which tunneling protocol should you use? IKEv1 PPTP IKEv2 L2TP.
You have an Azure subscription that contains the resources shown in the following table. TestSubnet1 DemoSubnet1 RecoverySubnetA RecoverySubnetB.
You have five Azure virtual machines that run Windows Server 2016. The virtual machines are configured as web servers. You have an Azure load balancer named LB1 that provides load balancing services for the virtual machines. You need to ensure that visitors are serviced by the same web server for each request. What should you configure? Protocol to UDP Session persistence to None Floating IP (direct server return) to Disabled Session persistence to Client IP.
You plan to deploy several Azure virtual machines that will run Windows Server 2019 in a virtual machine scale set by using an Azure Resource Manager template. You need to ensure that NGINX is available on all the virtual machines after they are deployed. What should you use? the Publish-AzVMDscConfiguration cmdlet a Microsoft Endpoint Manager device configuration profile Deployment Center in Azure App Service a Desired State Configuration (DSC) extension.
You have five Azure virtual machines that run Windows Server 2016. The virtual machines are configured as web servers. You have an Azure load balancer named LB1 that provides load balancing services for the virtual machines. You need to ensure that visitors are serviced by the same web server for each request. What should you configure? Floating IP (direct server return) to Disabled Session persistence to Client IP Protocol to UDP Idle Time-out (minutes) to 20.
You have an Azure subscription that contains 20 virtual machines, a network security group (NSG) named NSG1, and two virtual networks named VNET1 and VNET2 that are peered. You plan to deploy an Azure Bastion Basic SKU host named Bastion1 to VNET1. You need to configure NSG1 to allow inbound access to the virtual machines via Bastion1. Which port should you configure for the inbound security rule? 22 443 389 8080.
You have five Azure virtual machines that run Windows Server 2016. The virtual machines are configured as web servers. You have an Azure load balancer named LB1 that provides load balancing services for the virtual machines. You need to ensure that visitors are serviced by the same web server for each request. What should you configure? Session persistence to None a health probe Session persistence to Client IP Idle Time-out (minutes) to 20.
You have an Azure subscription that contains the virtual networks shown in the following table. VNET1, VNET2, VNET3, and VNET4 VNET1 and VNET2 only VNET1 only VNET1, VNET2, and VNET4 only VNET1 and VNET4 only.
You have an on-premises network. You have an Azure subscription that contains three virtual networks named VNET1. VNET2. and VNET3. The virtual networks are peered and connected to the on-premises network. The subscription contains the virtual machines shown in the following table. 1 2 3 4.
You have an Azure subscription that contains a storage account. The account stores website data. You need to ensure that inbound user traffic uses the Microsoft point-of-presence (POP) closest to the user's location. What should you configure? private endpoints Azure Firewall rules Routing preference load balancing.
You have two Azure virtual machines named VM1 and VM2 that run Windows Server. The virtual machines are in a subnet named Subnet1. Subnet1 is in a virtual network named VNet1. You need to prevent VM1 from accessing VM2 on port 3389. What should you do? Create a network security group (NSG) that has an outbound security rule to deny destination port 3389 and apply the NSG to the network interface of VM1 Configure Azure Bastion in VNet1. Create a network security group (NSG) that has an outbound security rule to deny source port 3389 and apply the NSG to Subnet1. Create a network security group (NSG) that has an inbound security rule to deny source port 3389 and apply the NSG to Subnet1.
You have an Azure subscription that contains the resources shown in the following table. Configure the Hybrid Connection Manager. Upgrade ASP1 to the Premium SKU. Create a route table. Create an Azure Network Watcher.
You have an Azure subscription that contains the resources shown in the following table. VM1 only contoso.com only App1 and contoso.com only VM1 and contoso.com only VM1, App1, and contoso.com.
You have five Azure virtual machines that run Windows Server 2016. The virtual machines are configured as web servers. You have an Azure load balancer named LB1 that provides load balancing services for the virtual machines. You need to ensure that visitors are serviced by the same web server for each request. What should you configure? Session persistence to None a health probe Session persistence to Client IP and protocol Idle Time-out (minutes) to 20.
You have five Azure virtual machines that run Windows Server 2016. The virtual machines are configured as web servers. You have an Azure load balancer named LB1 that provides load balancing services for the virtual machines. You need to ensure that visitors are serviced by the same web server for each request. What should you configure? a health probe Floating IP (direct server return) to Enabled Session persistence to Client IP and protocol Protocol to UDP.
You have an Azure subscription that contains 10 virtual machines and the resources shown in the following table. Resize the subnet of Bastion1 Configure host scaling. Create a network security group (NSG) Upgrade Bastion1 to the Standard SKU.
You have five Azure virtual machines that run Windows Server 2016. The virtual machines are configured as web servers. You have an Azure load balancer named LB1 that provides load balancing services for the virtual machines. You need to ensure that visitors are serviced by the same web server for each request. What should you configure? Session persistence to Client IP and protocol Protocol to UDP Session persistence to None Floating IP (direct server return) to Disabled.
You have five Azure virtual machines that run Windows Server 2016. The virtual machines are configured as web servers. You have an Azure load balancer named LB1 that provides load balancing services for the virtual machines. You need to ensure that visitors are serviced by the same web server for each request. What should you configure? Floating IP (direct server return) to Enabled Session persistence to Client IP Protocol to UDP Idle Time-out (minutes) to 20.
You have an Azure subscription that has the public IP addresses shown in the following table. IP1 only IP1 and IP2 only IP3, IP4, and IP5 only IP1, IP2, IP4, and IP5 only IP1, IP2, IP3, IP4, and IP5.
You have five Azure virtual machines that run Windows Server 2016. The virtual machines are configured as web servers. You have an Azure load balancer named LB1 that provides load balancing services for the virtual machines. You need to ensure that visitors are serviced by the same web server for each request. What should you configure? Floating IP (direct server return) to Disabled Floating IP (direct server return) to Enabled a health probe Session persistence to Client IP.
You have five Azure virtual machines that run Windows Server 2016. The virtual machines are configured as web servers. You have an Azure load balancer named LB1 that provides load balancing services for the virtual machines. You need to ensure that visitors are serviced by the same web server for each request. What should you configure? Floating IP (direct server return) to Enabled Idle Time-out (minutes) to 20 a health probe Session persistence to Client IP.
You have two Azure subscriptions named Sub1 and Sub2. Sub1 contains a virtual machine named VM1 and a storage account named storage1. VM1 is associated to the resources shown in the following table. VM1, Disk1, and NetInt1 only VM1, Disk1, and VNet1 only VM1, Disk1, and storage1 only VM1, Disk1, NetInt1, and VNet1.
You have five Azure virtual machines that run Windows Server 2016. The virtual machines are configured as web servers. You have an Azure load balancer named LB1 that provides load balancing services for the virtual machines. You need to ensure that visitors are serviced by the same web server for each request. What should you configure? Session persistence to Client IP and protocol Idle Time-out (minutes) to 20 Session persistence to None Floating IP (direct server return) to Enabled.
You have five Azure virtual machines that run Windows Server 2016. The virtual machines are configured as web servers. You have an Azure load balancer named LB1 that provides load balancing services for the virtual machines. You need to ensure that visitors are serviced by the same web server for each request. What should you configure? Floating IP (direct server return) to Disabled Idle Time-out (minutes) to 20 a health probe Session persistence to Client IP.
You have five Azure virtual machines that run Windows Server 2016. The virtual machines are configured as web servers. You have an Azure load balancer named LB1 that provides load balancing services for the virtual machines. You need to ensure that visitors are serviced by the same web server for each request. What should you configure? Session persistence to Client IP Idle Time-out (minutes) to 20 Session persistence to None Protocol to UDP.
You plan to deploy several Azure virtual machines that will run Windows Server 2019 in a virtual machine scale set by using an Azure Resource Manager template. You need to ensure that NGINX is available on all the virtual machines after they are deployed. What should you use? the Publish-AzVMDscConfiguration cmdlet a Microsoft Endpoint Manager device configuration profile Azure Application Insights a Desired State Configuration (DSC) extension.
You plan to deploy several Azure virtual machines that will run Windows Server 2019 in a virtual machine scale set by using an Azure Resource Manager template. You need to ensure that NGINX is available on all the virtual machines after they are deployed. What should you use? Azure Custom Script Extension Deployment Center in Azure App Service the New-AzConfigurationAssignment cmdlet a Microsoft Endpoint Manager device configuration profile.
You have an Azure subscription that contains a Recovery Services vault named Vault1. You need to enable multi-user authorization (MAU) for Vault1. Which resource should you create first? an administrative unit a managed identity a resource guard a custom Azure role.
You have an app named App1 that is installed on two Azure virtual machines named VM1 and VM2. Connections to App1 are managed by using an Azure Load Balancer. The effective network security configurations for VM2 are shown in the following exhibit. Yes No.
Your on-premises network contains a VPN gateway. You have an Azure subscription that contains the resources shown in the following table. Azure Application Gateway service endpoints Azure AD Application Proxy Azure Virtual WAN.
You create an Azure VM named VM1 that runs Windows Server 2019. VM1 is configured as shown in the exhibit. (Click the Exhibit tab.) Connect to VM1. Start VM1. Capture a snapshot of VM1. Configure a DNS name for VM1.
You have an Azure subscription that contains the virtual networks shown in the following table. 1 3 9 10.
You plan to deploy several Azure virtual machines that will run Windows Server 2019 in a virtual machine scale set by using an Azure Resource Manager template. You need to ensure that NGINX is available on all the virtual machines after they are deployed. What should you use? the New-AzConfigurationAssignment cmdlet Azure Application Insights the Publish-AzVMDscConfiguration cmdlet a Desired State Configuration (DSC) extension.
You have an Azure subscription that contains a resource group named RG1 and a virtual network named VNet1. You plan to create an Azure container instance named container1. You need to be able to configure DNS name label scope reuse for container1. What should you configure for container1? the private networking type the public networking type a new subnet on VNet1 a confidential SKU.
You plan to deploy several Azure virtual machines that will run Windows Server 2019 in a virtual machine scale set by using an Azure Resource Manager template. You need to ensure that NGINX is available on all the virtual machines after they are deployed. What should you use? a Desired State Configuration (DSC) extension a Microsoft Intune device configuration profile the Publish-AzVMDscConfiguration cmdlet the New-AzConfigurationAssignment cmdlet.
You have an Azure subscription that contains the virtual networks shown in the following table. VM1 only VM1 and VM2 only VM1 and VM3 only VM1, VM2, and VM3.
You plan to deploy several Azure virtual machines that will run Windows Server 2019 in a virtual machine scale set by using an Azure Resource Manager template. You need to ensure that NGINX is available on all the virtual machines after they are deployed. What should you use? a Microsoft Intune device configuration profile a Desired State Configuration (DSC) extension Azure Application Insights Deployment Center in Azure App Service.
You have an Azure subscription. You plan to migrate 50 virtual machines from VMware vSphere to the subscription. You create a Recovery Services vault. What should you do next? Configure an extended network Create a recovery plan Deploy an Open Virtualization Application (OVA) template to vSphere Configure a virtual network.
You have an Azure subscription that contains the virtual networks shown in the following table. a private endpoint peering Express Route a route table.
You have the Azure virtual networks shown in the following table. VNet2, VNet3, and VNet4 VNet2 only VNet3 and VNet4 only VNet2 and VNet3 only.
have an Azure subscription. You are creating a new Azure container instance that will have the following settings: • Container name: cont1 • SKU: Standard • OS type: Windows • Networking type: Public • Memory (GiB): 2.5 • Number of CPU cores: 2 You discover that the Private setting for Networking type is unavailable. You need to ensure that cont1 can be configured to use private networking. Which setting should you change? Memory (GiB) Networking type Number of CPU cores OS type SKU.
Report abuse Consent Terms of use