AZ 104 – Simulador Completo v3

Your company has several departments. Each department has a number of virtual machines (VMs). The company has an Azure subscription that contains a resource group named RG1. All VMs are located in RG1. You want to associate each VM with its respective department. What should you do?

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.

Your company has an Azure Active Directory (Azure AD) subscription. You want to implement an Azure AD conditional access policy. The policy must be configured to require members of the Global Administrators group to use Multi-Factor Authentication and an Azure AD-joined device when they connect to Azure AD from untrusted locations.

Solution: You access the multi-factor authentication page to alter the user settings.

Does the solution meet the goal?

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.

Your company has an Azure Active Directory (Azure AD) subscription. You want to implement an Azure AD conditional access policy. The policy must be configured to require members of the Global Administrators group to use Multi-Factor Authentication and an Azure AD-joined device when they connect to Azure AD from untrusted locations.

Solution: You access the Azure portal to alter the session control of the Azure AD conditional access policy.

Does the solution meet the goal?

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.

Your company has an Azure Active Directory (Azure AD) subscription. You want to implement an Azure AD conditional access policy. The policy must be configured to require members of the Global Administrators group to use Multi-Factor Authentication and an Azure AD-joined device when they connect to Azure AD from untrusted locations.

Solution: You access the Azure portal to alter the grant control of the Azure AD conditional access policy.

Does the solution meet the goal?

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.

Your company has an Azure Active Directory (Azure AD) tenant named weyland.com that is configured for hybrid coexistence with the on-premises Active Directory domain. You have a server named DirSync1 that is configured as a DirSync server. You create a new user account in the on-premises Active Directory. You now need to replicate the user information to Azure AD immediately.

Solution: You run the Start-ADSyncSyncCycle -PolicyType Initial PowerShell cmdlet.

Does the solution meet the goal?

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.

Your company has an Azure Active Directory (Azure AD) tenant named weyland.com that is configured for hybrid coexistence with the on-premises Active Directory domain. You have a server named DirSync1 that is configured as a DirSync server. You create a new user account in the on-premises Active Directory. You now need to replicate the user information to Azure AD immediately.

Solution: You run the Start-ADSyncSyncCycle -PolicyType Delta PowerShell cmdlet.

Does the solution meet the goal?

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.

Your company has an Azure Active Directory (Azure AD) tenant named weyland.com that is configured for hybrid coexistence with the on-premises Active Directory domain. You have a server named DirSync1 that is configured as a DirSync server. You create a new user account in the on-premises Active Directory. You now need to replicate the user information to Azure AD immediately.

Solution: You use Active Directory Sites and Services to force replication of the Global Catalog on a domain controller.

Does the solution meet the goal?

Your company has a Microsoft Azure subscription. The company has datacenters in Los Angeles and New York. You are configuring the two datacenters as geo-clustered sites for site resiliency. You need to recommend an Azure storage redundancy option. You have the following data storage requirements:
– Data must be stored on multiple nodes.
– Data must be stored on nodes in separate geographic locations.
– Data can be read from the secondary location as well as from the primary location.

Which of the following Azure storage redundancy options should you recommend?

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.

Your company has an Azure subscription that includes a storage account, a resource group, a blob container and a file share. A colleague named Jon Ross makes use of a single Azure Resource Manager (ARM) template to deploy a virtual machine and an additional Azure Storage account. You want to review the ARM template that was used by Jon Ross.

Solution: You access the Virtual Machine blade.

Does the solution meet the goal?

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.

Your company has an Azure subscription that includes a storage account, a resource group, a blob container and a file share. A colleague named Jon Ross makes use of a single Azure Resource Manager (ARM) template to deploy a virtual machine and an additional Azure Storage account. You want to review the ARM template that was used by Jon Ross.

Solution: You access the Resource Group blade.

Does the solution meet the goal?

Your company has three virtual machines (VMs) that are included in an availability set. You try to resize one of the VMs, which returns an allocation failure message. It is imperative that the VM is resized. Which of the following actions should you take?

You have an Azure virtual machine (VM) that has a single data disk. You have been tasked with attaching this data disk to another Azure VM. You need to make sure that your strategy allows for the virtual machines to be offline for the least amount of time possible. Which of the following is the action you should take FIRST?

Your company has an Azure subscription. You need to deploy a number of Azure virtual machines (VMs) using Azure Resource Manager (ARM) templates. You have been informed that the VMs will be included in a single availability set. You are required to make sure that the ARM template you configure allows for as many VMs as possible to remain accessible in the event of fabric failure or maintenance. Which of the following is the value that you should configure for the platformFaultDomainCount property?

Your company has an Azure subscription. You need to deploy a number of Azure virtual machines (VMs) using Azure Resource Manager (ARM) templates. You have been informed that the VMs will be included in a single availability set. You are required to make sure that the ARM template you configure allows for as many VMs as possible to remain accessible in the event of fabric failure or maintenance. Which of the following is the value that you should configure for the platformUpdateDomainCount property?

You are planning to deploy an Ubuntu Server virtual machine to your company’s Azure subscription. You are required to implement a custom deployment that includes adding a particular trusted root certification authority (CA). Which of the following should you use to create the virtual machine?

Your company has deployed a web application using Azure Virtual Machine Scale Sets (VMSS). During scale-in events, you need to ensure that VMs with the highest instance ID are removed first to preserve the oldest, most stable instances. Which scale-in policy should you configure?

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.

Your company has 50 Azure virtual machines. You need to ensure that a configuration script runs automatically on all existing VMs and on any new VMs that are added in the future.

Solution: You use the Custom Script Extension on each existing VM and configure the extension in the base VM image used for new deployments.

Does the solution meet the goal?

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.

Your company has 50 Azure virtual machines. You need to ensure that a configuration script runs automatically on all existing VMs and on any new VMs that are added in the future.

Solution: You create an Azure Policy with the DeployIfNotExists effect that deploys the Custom Script Extension to VMs that do not have it.

Does the solution meet the goal?

You have downloaded an Azure Resource Manager (ARM) template to deploy numerous virtual machines. The ARM template is based on a current VM, but must be adapted to reference an administrative password. You need to make sure that the password cannot be stored in plain text. You are preparing to create the necessary components to achieve your goal. What should you create?

Your company has an Azure subscription. You have a storage account named sa1 in a resource group named RG1. You need to provide a third-party vendor with access to only the files stored in a container named documents for the next 30 days. The vendor should only have read permissions. You need to minimize the permissions granted. What should you create?

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.

Your company has two Azure storage accounts named SA1 and SA2. You need to copy all blobs from the container named source in SA1 to a container named destination in SA2 as efficiently as possible.

Solution: You use AzCopy with a SAS token for both storage accounts and run: azcopy copy ‘https://SA1.blob.core.windows.net/source?[SAS]’ ‘https://SA2.blob.core.windows.net/destination?[SAS]’ –recursive

Does the solution meet the goal?

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.

Your company has two Azure storage accounts named SA1 and SA2. You need to copy all blobs from the container named source in SA1 to a container named destination in SA2 as efficiently as possible.

Solution: You use Azure Storage Explorer to drag and drop the container from SA1 to SA2.

Does the solution meet the goal?

Your company stores large amounts of diagnostic log files in an Azure Blob Storage container named logs in a storage account named sa1. The files are accessed frequently during the first 7 days after creation. After 30 days, the files are rarely accessed. After 365 days, the files can be deleted. You need to configure automated storage management to minimize costs. What should you configure?

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.

Your company has a virtual network named VNet1 that contains a subnet named Subnet1. Subnet1 has a Network Security Group named NSG1 attached. NSG1 has a rule with priority 200 that allows inbound traffic on port 443. You discover that inbound traffic on port 443 is being blocked.

Solution: You add an inbound deny rule with priority 100 for port 443 to NSG1.

Does the solution meet the goal?

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.

Your company has a virtual network named VNet1 that contains a subnet named Subnet1. Subnet1 has a Network Security Group named NSG1 attached. NSG1 has a rule with priority 200 that allows inbound traffic on port 443. You discover that inbound traffic on port 443 is being blocked.

Solution: You use the IP flow verify feature in Azure Network Watcher to determine which NSG rule is blocking the traffic.

Does the solution meet the goal?

Your company has three virtual networks named VNet1, VNet2, and VNet3. VNet1 is peered with VNet2, and VNet2 is peered with VNet3. A virtual machine in VNet1 is unable to communicate with a virtual machine in VNet3. You need to enable connectivity between VMs in VNet1 and VNet3. What should you do?

Your company has an on-premises datacenter and an Azure subscription. The network team requires that all traffic between the on-premises network and Azure must not traverse the public Internet and must have a guaranteed minimum bandwidth of 1 Gbps with a financially-backed SLA. Which connectivity solution should you implement?

Your company has a virtual network named VNet1 in the East US region. You deploy several Azure VMs to VNet1. You need the VMs to resolve each other’s hostnames automatically without configuring a custom DNS server. Which Azure feature should you use?

Your company hosts a web application on two Azure VMs in the East US region. You need to distribute incoming HTTPS traffic across the two VMs and ensure that users from the same session are always directed to the same VM. Which Azure load balancing solution should you use?

Your company’s security team requires that all Azure Activity Log data be retained for 2 years for compliance auditing. By default, Activity Logs are only retained for 90 days. What should you configure to meet this requirement?

Your company has an Azure virtual machine named VM1. You need to receive an email notification whenever the average CPU utilization of VM1 exceeds 90% for more than 5 minutes. Which of the following should you configure?

Your company has 20 Azure virtual machines that run critical business applications. You need to configure Azure Backup for the VMs with the following requirements:
– Backups must be taken once daily.
– Daily backups must be retained for 30 days.
– Weekly backups must be retained for 12 weeks.
What should you create?

Your company’s security team needs to audit all network traffic flowing through a subnet named Subnet1 in VNet1, including source and destination IPs, ports, and whether traffic was allowed or denied. The data must be stored for later analysis. Which feature should you enable?