Quiz
AZ-103_1.0
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (40)
1You are the administrator of CycleShare.com.
You are configuring diagnostic logging in Azure for a VM called "CycleDiag1".
When you are configuring a Sink what Azure service can you output to?- AApplication Insights
- BAzure Security Center
- CAzure Storage Account
- DAzure Operations Manager
2Examine the following PowerShell script and choose the option that completes the statement to configure Diagnostic logs to stream to event hub.
Set-AzDiagnosticSetting -ResourceId logsbapp01 -ServiceBusRuleId serbuazh740- A-Enabled $true
- B-Enable
- C/Start
- D-Begin
3What action can you not configure with an Alert rule?
Select all that apply.- ASCOM Alert
- BSMS
- CLogic App
- DWebhook
- EEmail
4What is the default retention period for Azure Activity logs?
- A90 days
- B30 days
- C120 days
- D60 days
5You have a Resource Group called "VIPService7".
"VIPService7" contains some very important Servers and a production Azure SQL Database.
You need to protect all resources in this Resource Group from deletion, whilst allowing staff to be able to modify the VMs if required and manage the database.
What solution would allow you to best do this?- AApply a DELETE LOCK to the Resource Group
- BApply a READ-ONLY LOCK to the Resource Group
- CRemove all permissions from the Resource Group so only you have access
- DApply a NO-DELETE LOCK to the Resource Group
6Your DevOps Manager is unsure of a statement that he heard at a recent conference.
"Applying a read-only Lock on a Resource Group with three Virtual Machines in it will prevent users from stopping or starting those VMs"
Is this statement True or False?- ATrue
- BFalse
7Which of the following Azure Resources cannot be moved to another Resource Group?
Choose all that apply.- AExpressRoute
- BTraffic Manager
- CData Lake Store
- DLogic Apps
- EAzure NetApp Files
8When applying a tag to an Azure resource what two things do you need to supply?
- AName and Value
- BName and Region
- CParameter and Field
- DParameter and Value
9Examine the following Azure tag names and select the one that would not be allowed as a valid tag name?
- Adev&test
- BDevelopment2
- CMGMT-Approved
- DProject!
10Review the following statement and then decide whether it is True or False.
"An Azure Resource Group is used for separating resources. Resources in the same resource group will be able to communicate freely as if in the same physical network."- ATrue
- BFalse
11You have a Resource Group in your subscription named RG1.
You configure a tag on the subscription with the name Tag1 with a value of Value1.
You configure a tag on RG1 with the name Tag2 with a value of Value2.
You create a virtual machine named VM1 in RG1 and add the tag named Tag3 with a value of Value3.
You need to identify which tag or tags will be configured on VM1.- ATag3:Value3 only
- BTag1:Value1 and Tag2:Value2 and Tag3:Value3
- CTag1:Value1 and Tag2:Value2 only
- DTag2:Value2 and Tag3:Value3 only
12You place a ReadOnly resource lock on a Resource Group that contains a virtual machine named VM3.
What is the effect of applying the resource lock?- AYou cannot start VM3
- BYou can delete VM3
- CYou can move VM3 to another Resource Group
- DYou can restart VM3
13You need to ensure that a tag named CostCenter1 is applied to all resources in Resource Groups in your Azure subscription.
These tags will help you to report billing information to each department in your organization.
What is the most effective way of implementing this?- ACorrect an Azure policy in your subscription and assign it to the subscription
- BCreate an Azure policy in your subscription and assign it to each Resource Group
- CCreate a tag on one of the Resource Group named CostCenter1 and assign a value.
Add the existing tag to other Resource Groups with different values - DCreate a tag on one of the Resource Group named CostCenter1 and assign a value.
Add the existing tag to other resources in each of the Resource Groups with different values
14You have a Resource Group in your subscription named RG1.
RG1 contains a Recovery Services vault that contains protected items.
You attempt to delete RG1 and the task fails.
You need to recommend a solution that allows RG1 to be deleted.- ADelete the protected items from the Recovery Services vault.
Remove the vault, then remove RG1 - BModify the role assignments on RG1
- CDelete the Recovery Services vault, then delete RG1
- DDelete the virtual machines that are protected by the Recovery Services vault then delete RG1
- ADelete the protected items from the Recovery Services vault.
15You need to recommend a solution that restricts the regions that administrators of your Azure subscription can use to deploy resources to.
What solution should you recommend?- ACreate an Azure policy and assign it to your Azure subscription
- BOn your Azure subscription, configure Usage + Quotas
- COn your Azure subscription, unregister Resource providers
- DOn your Azure subscription, add a budget
16You manage two Azure subscriptions CycleShare1 and CycleShare2.
You deploy 12 resources for a project into a Resource Group named RG1 on CycleShare1.
The resources contain no data, but you realize that you have deployed them to the wrong subscription.
Which action should you perform to ensure that the resources are associated to the CycleShare2 subscription?- AMove the Resource Group RG1 between subscriptions
- BDelete the resources in CycleShare1 and recreate them in the CycleShare2 subscriptions
- CDownload a template from Resource Group RG1 and use it to deploy the resources again to the Cycle Share2 subscription
- DDownload a template for each of the 12 resources and deploy them in the CycleShare subscription
17You have a user in your Azure AD tenant named User1.
User1 will be responsible for configuring the authentication methods in your Azure AD tenant.
You need to recommend which role to assign to User1.
Your solution should adhere to the principle of least privilege.- AGlobal Administrator
- BUser Administrator
- CAuthentication Administrator
- DSecurity Administrator
18You are viewing the Access Control (IAM) blade of a Resource Group in the Azure portal.
You attempt to remove one of the role entries, but you are not successful.
What is the most likely reason that you cannot remove the entry?- AThe role assignment is configured at the subscription level and would need to be removed at that level
- BThe role is a Reader Role and cannot be removed
- CThere is a Delete Lock on the Resource Group
- DThere are Tags configured on the Resource Group
19You have a Resource Group named RG1 that contains 12 virtual machines.
You need a user named User1 to be able to start and stop virtual machines in RG1.
User1 must not be allowed to login to the virtual machines.
Your solution should minimize administrative effort where possible.
What should you configure?- AOn RG1, add a role assignment of Virtual Machine Contributor to User1
- BOn RG1, add a role assignment of Virtual Machine User Login to User1
- COn each virtual machine in RG1, add a role assignment of Virtual Machine User Login to User1
- DOn each virtual machine in RG1, add a role assignment of Virtual Machine Contributor to User1
20You have a resource group named RG1 that contains 12 virtual machines.
You need a user named User1 to be able to start and stop all of the virtual machines in RG1, except a VM named VM9.
Your solution should minimize administrative effort where possible.
NOTE: The requirement is to be assessed after ALL the actions have taken place.
What should you configure?- AMove VM9 to another Resource Group.
On RG1, add a role assignment of Virtual User Login to User1. - BOn RG1, add a role assignment of Virtual User Login to User1.
On VM9 reset the password. - CMove all VMs to a new resource group except VM9.
Add a role assignment of Virtual User Login to User1 on each VM in the new Resource Group. - DMove VM9 to a new resource group.
Add a role assignment of Virtual User Login to User1 on each VM in RG2. - EOn RG1, add a role assignment of Virtual User Login to User1.
Move VM9 to another Resource Group.
- AMove VM9 to another Resource Group.
21You notice that on a Resource Group named RG3, there are deny assignments configured in the Access Control (IAM) blade.
Your organization wants to protect newly deployed resources from being tampered with, even by an account with the Owner role.
How should deny assignments be defined?- ADeny assignment are implemented through the use of Azure Blueprints
- BDeny assignments are implemented through the use of the Azure portal
- CDeny assignments are implemented through the use of Azure CLI
- DDeny assignments are implemented through the use of Azure PowerShell
22You have created a resource group named RG4 that contains networking resources such as virtual networks.
You need to create an Azure AD group named RGAdmins4 to be able to administer the resources in RG4, with the exception of the management of role assignments.
Which role assignment should you assign to RGAdmins4?- AContributor
- BOwner
- CReader
- DNetwork Contributor
23You have a user named Admin1 that is a member of several administrative groups in your Azure AD.
You examine the Access Control (IAM) blade on a Resource Group.
You need to enumerate which role assignments Admin1 has on the Resource Group.
How should you proceed?- AView the Check Access tab
- BView the Classic Administrators tab
- CView the Roles tab
- DView the Role Assignments tab
24The DevOps Manager has asked you to create a Azure Storage Account named CycleSA1 in the North Europe region.
Your Line of Business App named CycleApp1 is used by all users within your organization.
CycleApp1 will process thumbnail images for each user, which are 24KB in size. These images will be stored in an Azure Storage Account.
You need also to create message logs to store the metadata for each thumbnail image. Which type of Azure Storage Account will you use to store message logs?- AQueue Storage
- BTable Storage
- CBlob Storage
- DAzure Files
25You are asked to configure an Azure Storage Account that will have a publicly accessible domain name of CycleShare.com.
You need to apply the custom domain name to the Storage Account?- ABlob Storage
- BDisk Storage
- CQueue Storage
- DTable Storage
26You have configured a Blob storage account called azsaap01.
Azsaap01 was created as a Standard performance Storage Account using Cool storage on Locally-Redundant Storage (LRS).
Your requirements for azsaap01 have changed since this storage was originally implemented.
Your DevOps manager has advised you that you now need the Storage Account to be amended.
Select which option or options that you can change.- AAccess tier from Cool to Hot
- BPerformance from Standard to Premium
- CBlob storage to Table storage
- DReplication from LRS to GRS
- EChange the Resource Group
27You currently manage a Blob Storage Account named CycleBlobSA
CycleBlobSA is currently accessible by all networks.
Your DevOps Manager has asked you to secure CycleBlobSA.
You need to lock CycleBlobSA down to the following IP range:
84.10.200.1 - 84.10.200.254.
How will you configure CycleBlobSA to meet company requirements?- AIn the Firewall and Virtual Networks settings of the Storage Account, select "Selected Networks" and then under Firewall, type the IP address range using CIDR format
- BSetup a Firewall appliance from the Azure Marketplace.
On the Firewall appliance add an allow rule for the IP address range "84.10.200.0/24" - CIn the Firewall and Virtual Networks settings of the Storage Account, select "Selected Networks" and then under Firewall, type the IP address "84.10.200.1" and in the next line type "84.10.200.254"
- DIn the Firewall and Virtual Networks settings of the Storage Account, select "Selected Networks" and then under Firewall, type the IP address range as "84.10.200.1/24"
28What RBAC role do you need to assign to give Administrator access to an Azure subscription?
- AOwner of the Azure subscription scope
- BAdministrator of the subscription
- CSecurity Owner of the Azure subscription scope
- DSecurity Reader of the Azure subscription scope
29You are an administrator of CycleShare.com.
You manage the Azure subscription.
You want to be able to automatically assign a tag whenever resources are created in the Azure subscription.
What method would work best to enable this?- AConfigure an Azure Policy to apply a tag to all created resources in the Azure subscription scope.
- BSetup auto-tagging to apply a tag to all created resources in the Azure subscription scope
- CEdit the "default resource tag" in the Azure subscription settings
- DApply the tag at the resource group and it auto-populate across resources within that group
30Examine the following PowerShell script.
Set-AzResourceGroup -Name CycleShareRG -Tag @{ Dept="IT"; Environment="Test" }
What will be the resulting outcome of the script when it is run?- AApply the Dept tag as IT and the Environment tag as Test to the CycleShareRG Resource Group
The script will overwrite any previous tags - BApply the Dept tag as IT and the Environment tag as Test to the CycleShareRG Resource Group
- CDeletes the Dept tag as IT and the Environment tag as Test to the CycleShareRG Resource Group
- DDisplays the Dept tag as IT and the Environment tag as Test to the CycleShareRG Resource Group
- AApply the Dept tag as IT and the Environment tag as Test to the CycleShareRG Resource Group
31What is the maximum number of Co-administrators that you can you have per Azure subscription in Azure Resource Manager?
- AUnlimited
- B100
- C200
- D60
32What is the maximum limit of Resource Groups you can you have per subscription in Azure Resource Manager?
- A980
- B100
- C620
- D24
33What is the maximum number of Virtual machines you can have in a Scale Set?
- A1000
- B100
- C2000
- D10000
- EUnlimited
34The DevOps manager of Cycleshare.com asks you to ensure that a critical WebApp called CycleApp1 is monitored.
DevOps engineers must receive an email whenever CycleApp1 stops for any reason.
What should you configure to fulfil this requirement?
Choose the best option.- ACreate an Alert for the WebApp by configuring a resource, condition, action group and alert details
- BCreate Diagnostic Logs for the WebApp by configuring a resource, condition, action group
- CCreate Resource Health for the WebApp by configuring a resource, condition, action group
- DCreate an Alert for the WebApp by configuring a resource, condition, alert group and alert details
35You have a VM called "Webapp01" and you want to view resource usage for the VM for the previous week.
What should you configure to provide you with this information?
Select all that apply.- AAzure Monitoring Metrics
- BAzure Crash Dump Logger
- CAzure Monitoring Alerts
- DAzure VM Boot Diagnostics
- EAzure Monitoring Insights
36You have been using a Storage Account called cyclestoreapwe1 for application data.
However, you believe an ex-employee may have saved the Shared Key 1 details which allows access to cyclestoreapwe1.
The Security Manager requires that the application data needs to be safeguarded at all times.
How should you secure the application data whilst keeping the application online?- AUse key 2 for the application that uses the Storage account and regenerate key 1
- BRegenerate key 1
- CRegenerate all keys
- DTransfer the data to the new Storage Account
37You have created a storage account called cyclestorlid in the EastUS region.
You have configured cyclestorlid to use ZRS redundancy.
Which statement best describes the outcome if the EastUS region suffers an outage.
Choose the statement that best fits the outcome.- AThe Storage Account will be unavailable if the region suffers an outage
- BThe Storage Account will be available if the region suffers an outage
- CThe Storage Account will be available if the region suffers an outage but you will be required to failover to a secondary region
- DThe Storage Account will be available if the region suffers an outage but you will be required to failover to a secondary zone
38The DevOps Manager has asked you to perform a one-time import of 30TB of data to Azure.
The data is currently on an aging storage SAN in a remote location that suffers from poor Internet access.
Recommend the options which could be used in this scenario in order to transfer the data securely and with the minimum administrative effort?- AAzCopy
- BAdlCopy Command
- CAzure Data Box
- DAzure Import/Export Service
- ERobocopy
39You work for CycleShare.com and need to export 125TB from an Azure Blob storage account.
You decide to use the Azure Import/Export Service to complete this.
You need to work out how many Azure Data drives are required that you will then send to the Microsoft Azure datacenter.
You use the Microsoft Azure Import/Export tool to assess this, with the following command:
WAImportExport.exe PreviewExport
Which command parameter should you specify to give you the disk drive sizes?- A/DriveSize
- B/ExportBlobListFile
- C/sk
- D/sn
40You need to use the Azure Import/Export service to export data from Azure Blob storage.
The Blob storage account that you intend to export is in constant use.
Your DevOps Manager asks how the Azure Export service will operate whilst the Blob storage account is in use.
How will you respond to your DevOps Manager?- AAzure Export service takes a snapshot of the Blob and copies the snapshot
- BThe Blob storage needs to be put in a read-only mode to facilitate the export copy
- CThe Blob storage is required to utilize Geo-redundancy to enable the export copy
- DAzure Export service performs the export while synching changes "Delta" data one the core data storage is completed
Information
- Description
- Quiz on AZ-103_1.0, created by Marc Hall on 17/05/2020.
- Author
- Marc Hall
- Language
- English
- Views
- 1
- Tags
- Rating
- No ratings yet Rate this quiz