AZ-100/103

Question 1

You have 100 Azure subscriptions. All the subscriptions are associated to the same Azure Active Directory (Azure AD) tenant named contoso.com. 
You are a global administrator.
You plan to create a report that lists all the resources across all the subscriptions. You need to ensure that you can view all the resources in all the subscriptions.

What should you do?

Accepted Answer

From Windows PowerShell, run the New-AzureADUserAppRoleAssignment cmdlet.

Answer

From the Azure portal, modify the profile settings of your account.

Answer

From Windows PowerShell, run the Add-AzureADAdministrativeUnitMember cmdlet.

Answer

From the Azure portal, modify the properties of the Azure AD tenant.

Question 2

You have an Azure subscription named Subscription1. Subscription1 contains a resource group named RG1. RG1 contains resources that were deployed by using templates.

You need to view the date and time when the resources were created in RG1.

Solution: From the Subscriptions blade, you select the subscription, and then click PROGRAMMATIC DEPLOYMENT.

Does this meet the goal?

Accepted Answer

No

Answer

Yes

Question 3

You have an Azure subscription named Subscription1. Subscription1 contains a resource group named RG1. RG1 contains resources that were deployed by using templates.

You need to view the date and time when the resources were created in RG1. Solution: From the RG1 blade, you click DEPLOYMENTS.
Does this meet the goal?

Accepted Answer

Yes

Answer

No

Question 4

You have an Azure subscription named Subscription1. Subscription1 contains a resource group named RG1. RG1 contains resources that were deployed by using templates.

You need to view the date and time when the resources were created in RG1.

Solution: From the Subscriptions blade, you select the subscription, and then click RESOURCE PROVIDERS. 
Does this meet the goal?

Accepted Answer

No

Answer

Yes

Question 5

You have an Azure subscription named Subscription1. Subscription1 contains a resource group named RG1. RG1 contains resources that were deployed by using templates.

You need to view the date and time when the resources were created in RG1. Solution: From the RG1 blade, you click AUTOMATION SCRIPT.
 
Does this meet the goal?

Accepted Answer

No

Answer

Yes

Question 6

You have an Azure virtual machine named VM1. VM1 was deployed by using a custom Azure Resource Manager template named ARM1.json. You receive a notification that VM1 will be affected by maintenance.
You need to move VM1 to a different host immediately.

Solution: From the Update management blade, you click ENABLE. 
Does this meet the goal?

Accepted Answer

No

Answer

Yes

Question 7

You have a resource group named RG1. RG1 contains an Azure Storage account named storageaccount1 and a virtual machine named VM1 that runs Windows Server 2016. Storageaccount1 contains the disk files for VM1. You apply a ReadOnly lock to RG1.

What can you do from the Azure portal?

What can you do from the Azure portal?

Accepted Answer

View the keys of storageaccount1

Answer

Generate an automation script for RG1

Answer

Upload a blob to storageaccount1

Answer

Start VM1

Question 8

You have an Azure tenant that contains two subscriptions named Subscription1 and Subscription2.

In Subscription1, you deploy a virtual machine named Server1 that runs Windows Server 2016. Server1 uses managed disks. You need to move Server1 to Subscription2. The solution must minimize administration effort.
What should you do first?

Accepted Answer

From Azure PowerShell, run the Move-AzureRmResource cmdlet.

Answer

In Subscription2, create a copy of the virtual disk.

Answer

Create a snapshot of the virtual disk.

Answer

Create a new virtual machine in Subscription2.

Question 9

You have an Azure subscription that contains a resource group named RG1. RG1 contains 100 virtual machines. Your company has three cost centers named Manufacturing, Sales, and Finance.
You need to associate each virtual machine to a specific cost center. 
What should you do?

Accepted Answer

Assign tags to the virtual machines.

Answer

Add an extension to the virtual machines.

Answer

Modify the inventory settings of the virtual machine.

Answer

Configure locks for the virtual machine.

Question 10

You have an Azure Active Directory (Azure AD) tenant named contosocloud.onmicrosoft.com. Your company has a public DNS zone for contoso.com.
You add contoso.com as a custom domain name to Azure AD. You need to ensure that Azure can verify the domain name.
Which type of DNS record should you create?

Accepted Answer

TXT

Answer

NSEC

Answer

SRV

Answer

PTR

Question 11

You have an Azure DNS zone named adatum.com. You need to delegate a subdomain named research.adatum.com to a different DNS server in Azure. What should you do?

Accepted Answer

Create an NS record named research in the adatum.com zone.

Answer

Create a PTR record named research in the adatum.com zone.

Answer

Modify the SOA record of adatum.com.

Answer

Create an A record named “.research in the adatum.com zone.

Question 12

You have an Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com that contains 100 user accounts. You purchase 10 Azure AD Premium P2 licenses for the tenant.
You need to ensure that 10 users can use all the Azure AD Premium features. 
What should you do?

Accepted Answer

B.	From the Licenses blade of Azure AD, assign a license.

Answer

A.	From the Groups blade of each user, invite the users to a group.

Answer

C.	From the Directory role blade of each user, modify the directory role.

Answer

D.	From the Azure AD domain, add an enterprise application.

Question 13

You plan to use the Azure Import/Export service to copy files to a storage account.

Which two files should you create before you prepare the drives for the import job? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

Accepted Answer

a driveset CSV file

Accepted Answer

a dataset CSV file

Answer

an XML manifest file

Answer

a PowerShell PS1 file

Answer

a JSON configuration file

Question 14

You have an Azure subscription that contains a storage account named account1.

You plan to upload the disk files of a virtual machine to account1 from your on-premises network. The on-premises network uses a public IP address space of 131.107.1.0/24.

You plan to use the disk files to provision an Azure virtual machine named VM1. VM1 will be attached to a virtual network named VNet1. VNet1 uses an IP address space of 192.168.0.0/24.

You need to configure account1 to meet the following requirements:

Ensure that you can upload the disk files to account1. Ensure that you can attach the disks to VM1.
Prevent all other access to account1.

Which two actions should you perform? Each correct selection presents part of the solution.

NOTE: Each correct selection is worth one point.

Accepted Answer

From the Firewalls and virtual networks blade of account1, select Selected networks.

Accepted Answer

From the Service endpoints blade of VNet1, add a service endpoint.

Answer

From the Firewalls and virtual networks blade of account1, add the 131.107.1.0/24 IP address range.

Answer

From the Firewalls and virtual networks blade of acount1, add VNet1.

Answer

From the Firewalls and virtual networks blade of account1, select Allow trusted Microsoft services to access this storage account.

Question 15

You create an Azure Storage account named contosostorage. You plan to create a file share named data.
Users need to map a drive to the data file share from home computers that run Windows 10. Which port should be open between the home computers and the data file share?

Accepted Answer

445

Answer

80

Answer

443

Answer

3389

Question 16

You have an Azure virtual machine named VM1. VM1 was deployed by using a custom Azure Resource Manager template named ARM1.json. You receive a notification that VM1 will be affected by maintenance.
You need to move VM1 to a different host immediately.

Solution: From the Overview blade, you move the virtual machine to a different resource group.

Does this meet the goal?

Accepted Answer

No

Answer

Yes

Question 17

You have an Azure subscription that contains 100 virtual machines. You regularly create and delete virtual machines.

You need to identify unused disks that can be deleted.

What should you do?

Accepted Answer

From Cloudyn, open the Optimizer tab and create a report.

Answer

From Microsoft Azure Storage Explorer, view the Account Management properties.

Answer

From the Azure portal, configure the Advisor recommendations.

Answer

From Cloudyn, create a Cost Management report.

Question 18

You have an Azure subscription named Subscription1.

You deploy a Linux virtual machine named VM1 to Subscription1. You need to monitor the metrics and the logs of VM1.
What should you use?

Accepted Answer

the AzurePerformanceDiagnostics extension

Answer

Linux Diagnostic Extension (LAD) 3.0

Answer

Azure Analysis Services

Answer

Azure HDInsight

Question 19

You have an Azure subscription that contains 100 virtual machines. You regularly create and delete virtual machines.
You need to identify unattached disks that can be deleted. 
What should you do?

Accepted Answer

From Microsoft Azure Storage Explorer, view the Account Management properties.

Answer

From the Azure portal, configure the Advisor recommendations.

Answer

From Azure Cost Management, open the Optimizer tab and create a report.

Answer

From Azure Cost Management, create a Cost Management report.

Question 20

You have an Azure virtual machine named VM1. VM1 was deployed by using a custom Azure Resource Manager template named ARM1.json. You receive a notification that VM1 will be affected by maintenance.
You need to move VM1 to a different host immediately.

Solution: From the Overview blade, you move the virtual machine to a different subscription.

Does this meet the goal?

Accepted Answer

No

Answer

Yes

Question 21

You plan to back up an Azure virtual machine named VM1.

You discover that the Backup Pre-Check status displays a status of Warning.

What is a possible cause of the Warning status?

Accepted Answer

VM1 does not have the latest version of WaAppAgent.exe installed.

Answer

VM1 has an unmanaged disk.

Answer

VM1 is stopped.

Answer

A Recovery Services vault is unavailable.

Question 22

You have two Azure virtual machines named VM1 and VM2. You have two Recovery Services vaults named RSV1 and RSV2.

VM2 is protected by RSV1.

You need to use RSV2 to protect VM2. What should you do first?

Accepted Answer

From the VM2 blade, click Disaster recovery, click Replication settings, and then select RSV2 as the Recovery Services vault.

Answer

From the RSV1 blade, click Backup items and stop the VM2 backup.

Answer

From the RSV1 blade, click Backup Jobs and export the VM2 job.

Answer

From the RSV2 blade, click Backup. From the Backup blade, select the backup for the virtual machine, and then click Backup.

Question 23

You have an Azure virtual machine named VM1 that you use for testing. VM1 is protected by Azure Backup. You delete VM1.
You need to remove the backup data stored for VM1. 
What should you do first?

Accepted Answer

Modify the backup policy.

Answer

Delete the Recovery Services vault.

Answer

Stop the backup.

Answer

Delete the storage account.

Question 24

You have an Azure subscription that contains 10 virtual networks. The virtual networks are hosted in separate resource groups.
 
Another administrator plans to create several network security groups (NSGs) in the subscription.

You need to ensure that when an NSG is created, it automatically blocks TCP port 8080 between the virtual networks. Solution: From the Resource providers blade, you unregister the Microsoft.ClassicNetwork provider.

Does this meet the goal?

Accepted Answer

No

Answer

Yes

Question 25

You have an Azure subscription that contains 10 virtual networks. The virtual networks are hosted in separate resource groups. 
Another administrator plans to create several network security groups (NSGs) in the subscription.
You need to ensure that when an NSG is created, it automatically blocks TCP port 8080 between the virtual networks. 
Solution: You configure a custom policy definition, and then you assign the policy to the subscription.
Does this meet the goal?

Accepted Answer

Yes

Answer

No

Question 26

You have an Azure subscription that contains 10 virtual networks. The virtual networks are hosted in separate resource groups. Another administrator plans to create several network security groups (NSGs) in the subscription.
You need to ensure that when an NSG is created, it automatically blocks TCP port 8080 between the virtual networks. 
Solution: You create a resource lock, and then you assign the lock to the subscription.
Does this meet the goal?

Accepted Answer

No

Answer

Yes

Question 27

Your company registers a domain name of contoso.com.

You create an Azure DNS zone named contoso.com, and then you add an A record to the zone for a host named www that has an IP address of 131.107.1.10. You discover that Internet hosts are unable to resolve www.contoso.com to the 131.107.1.10 IP address.
You need to resolve the name resolution issue.

Solution: You modify the name servers at the domain registrar. 
Does this meet the goal?

Accepted Answer

No

Answer

Yes

Question 28

Your company registers a domain name of contoso.com.

You create an Azure DNS zone named contoso.com, and then you add an A record to the zone for a host named www that has an IP address of 131.107.1.10.
 
You discover that Internet hosts are unable to resolve www.contoso.com to the 131.107.1.10 IP address. You need to resolve the name resolution issue.
Solution: You add an NS record to the contoso.com zone. 
Does this meet the goal?

Accepted Answer

Yes

Answer

No

Question 29

Your company registers a domain name of contoso.com.

You create an Azure DNS zone named contoso.com, and then you add an A record to the zone for a host named www that has an IP address of 131.107.1.10. You discover that Internet hosts are unable to resolve www.contoso.com to the 131.107.1.10 IP address.
You need to resolve the name resolution issue.

Solution: You modify the SOA record in the contoso.com zone Does this meet the goal?

Accepted Answer

No

Answer

Yes

Question 30

Your company registers a domain name of contoso.com.

You create an Azure DNS zone named contoso.com, and then you add an A record to the zone for a host named www that has an IP address of 131.107.1.10. You discover that Internet hosts are unable to resolve www.contoso.com to the 131.107.1.10 IP address.
You need to resolve the name resolution issue.

Solution: You create a PTR record for www in the contoso.com zone. 
Does this meet the goal?

Accepted Answer

No

Answer

Yes

Question 31

You have an Azure subscription that contains 10 virtual networks. The virtual networks are hosted in separate resource groups. 
Another administrator plans to create several network security groups (NSGs) in the subscription.
You need to ensure that when an NSG is created, it automatically blocks TCP port 8080 between the virtual networks.
 Solution: You assign a built-in policy definition to the subscription.
Does this meet the goal?

Accepted Answer

No

Answer

Yes

Question 32

You have two subscriptions named Subscription1 and Subscription2. Each subscription is associated to a different Azure AD tenant.

Subscription1 contains a virtual network named VNet1.VNet1 contains an Azure virtual machine named VM1 and has an IP address space of 10.0.0.0/16. Subscription2 contains a virtual network named VNet2. VNet2 contains an Azure virtual machine named VM2 and has an IP address space of 10.10.0.0/24. You need to connect VNet1 to VNet2.
What should you do first?

Accepted Answer

Provision virtual network gateways.

Answer

Move VNet1 to Subscription2.

Answer

Modify the IP address space of VNet2.

Answer

Move VM1 to Subscription2.

Question 33

You have an Azure Active Directory (Azure AD) domain that contains 5,000 user accounts. You create a new user account named AdminUser1. 
You need to assign the User administrator administrative role to AdminUser1.
What should you do from the user account properties?

Accepted Answer

From the Directory role blade, modify the directory role.

Answer

From the Groups blade, invite the user account to a new group.

Answer

From the Licenses blade, assign a new license.

Question 34

You have an Active Directory forest named contoso.com.

You install and configure Azure AD Connect to use password hash synchronization as the single sign-on (SSO) method. Staging mode is enabled. You review the synchronization results and discover that the Synchronization Service Manager does not display any sync jobs.
You need to ensure that the synchronization completes successfully. What should you do?

Accepted Answer

Run Azure AD Connect and disable staging mode.

Answer

From Synchronization Service Manager, run a full import.

Answer

Run Azure AD Connect and set the SSO method to Pass-through Authentication.

Answer

From Azure PowerShell, run Start-AdSyncSyncCycle -PolicyType Initial.

Question 35

You configure Azure AD Connect for Azure Active Directory Seamless Single Sign-On (Azure AD Seamless SSO) for an on-premises network. Users report that when they attempt to access myapps.microsoft.com, they are prompted multiple times to sign in and are forced to use an account name that ends with onmicrosoft.com.

You discover that there is a UPN mismatch between Azure AD and the on-premises Active Directory. You need to ensure that the users can use single-sign on (SSO) to access Azure resources.

What should you do first?

Accepted Answer

From Azure AD, add and verify a custom domain name.

Answer

From the on-premises network, deploy Active Directory Federation Services (AD FS).

Answer

From the on-premises network, request a new certificate that contains the Active Directory domain name.

Answer

From the server that runs Azure AD Connect, modify the filtering options.

Question 36

You have two Azure Active Directory (Azure AD) tenants named contoso.com and fabrikam.com. You have a Microsoft account that you use to sign in to both tenants.
You need to configure the default sign-in tenant for the Azure portal. What should you do?

Accepted Answer

From the Azure portal, change the directory.

Answer

From the Azure portal, configure the portal settings.

Answer

From Azure Cloud Shell, run Set-AzureRmContext.

Answer

From Azure Cloud Shell, run Set-AzureRmSubscription.

Question 37

You sign up for Azure Active Directory (Azure AD) Premium.

You need to add a user named admin1@contoso.com as an administrator on all the computers that will be joined to the Azure AD domain. 
What should you configure in Azure AD?

Accepted Answer

Providers from the MFA Server blade.

Answer

Device settings from the Devices blade

Answer

General settings from the Groups blade.

Answer

User settings from the Users blade.

Question 38

You download an Azure Resource Manager template based on an existing virtual machine. The template will be used to deploy 100 virtual machines. 
You need to modify the template to reference an administrative password. You must prevent the password from being stored in plain text.
What should you create to store the password?

Accepted Answer

an Azure Key Vault and an access policy

Answer

Azure Active Directory (AD) Identity Protection and an Azure policy

Answer

a Recovery Services vault and a backup policy

Answer

an Azure Storage account and an access policy

Question 39

You have an Azure Active Directory (Azure AD) tenant named contosocloud.onmicrosoft.com. Your company has a public DNS zone for contoso.com.
You add contoso.com as a custom domain name to Azure AD. You need to ensure that Azure can verify the domain name.
Which type of DNS record should you create?

Accepted Answer

TXT

Answer

RRSIG

Answer

PTR

Answer

DNSKEY

Question 40

You have an Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com.

You hire a temporary vendor. The vendor uses a Microsoft account that has a sign-in of user1@outlook.com. You need to ensure that the vendor can authenticate to the tenant by using user1@outlook.com.
What should you do?

Accepted Answer

From Windows PowerShell, run the New-AzureADUser cmdlet and specify the –UserPrincipalName user1@outlook.com parameter.

Answer

From the Azure portal, add a custom domain name, create a new Azure AD user, and then specify user1@outlook.com as the username.

Answer

From Azure Cloud Shell, run the New-AzureADUser cmdlet and specify the –UserPrincipalName user1@outlook.com parameter.

Answer

From the Azure portal, add a new guest user, and then specify user1@outlook.com as the email address.

AZ-100/103

Create a free account to finish this quiz

Questions in this quiz (40)

Information

Feedback

What do you think of the new look?