Quiz
AZ-103_2.0
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (34)
1You have the following load balancing requirements: • Traffic sent to 131.107.1.200 on port 80 must be directed to VM1 or VM2. • Traffic sent to 131.107.1.200 on port 443 must be directed to VM3, VM4 or VM5. • Traffic sent to 131.107.1.100 on TCP port 12345 must be directed to a virtual machine scale set. • Traffic sent to 131.107.1.150 on TCP port 54321 must be directed to an availability set. What is the minimum number of Azure Load Balancers do you need to create?
- A1
- B2
- C3
- D4
2You have deployed an Azure Load Balancer that uses a backend pool that contains four virtual machines.
You notice that traffic from the load balancer is not equally being distributed across the four virtual machines.
Suggest why this is happening?- AThe load balancer is configured to use source IP affinity distribution mode, but the traffic is originating from one IP address only
- BThe load balancer is configured to use hash-based distribution mode, but the traffic is originating from one IP address only
- CThe backend port is misconfigured in a load balancing rule
- DThe load balancer is configured to use hash-based distribution mode
3You want to use Azure Network Watcher to diagnose network issues.
What do you need to configure so network monitor will work?- AEnable the Azure Network Watcher for your Azure region of the resources you want to "watch"
- BEnable OMS
- CSetup and enable secondary NIC for any VMs requiring diagnosing
- DAdd an NSG firewall to allow ICMP traffic to network watch
4A VM called bigVM01 needs to communicate with a third party SaaS application called SaaSApp1 on port 80.
The bigVM01 is unable to talk to SaaSApp1.
Select the feature of Azure Network Watcher that you should use to diagnose what might be preventing communication.- AIP Flow Verify
- BNext Hop
- CSecurity Group
- DNetwork Subscription limit
5Review the following statement:
"You can connect Virtual Networks that are in two different subscriptions."
Is the statement is TRUE or FALSE?- ATrue
- BFalse
6You have a policy-based VPN Gateway called CycleVPN1.
You want to change the VPN to be a route-based VPN.
Select the action that you need to take.- AYou will have to recreate the VPN with a new IP address and Pre-Shared key
- BYou can change the VPN to a route-based VPM from within the portal however it will take up to 60 minutes to complete
- CYou can change the VPN to a route-based VPN from within the portal however it will recreate the shared key
- DYou can change the VPN to a route-based VPN from within the portal however it requires a new IP address
7How many network peerings are possible when using the Azure Resource Manager portal?
- A500
- B50
- C200
- D10000
8What protocol(s) are supported in communication for a Site-to-Site Virtual Network Gateway?
Choose the correct answer.- AIPsec
- BSSTP
- COpenVPN
- DTLS
9Review the following statement:
"An Azure Site-to-Site connection requires a VPN device located on-premises that has a public IP address assigned to it and is not located behind a NAT."
Is the statement True or False?- ATrue
- BFalse
10You need to retrieve VNet peering settings.
What is the correct PowerShell cmdlet that you can use to achieve this goal?- AGet-AzVirtualNetworkPeering
- BGet-AzVirtualNetworkSubnetConfig
- CGet-AzVirtualNetworkUseageList
- DGet-AzVirtualNetworkTap
11You need to ensure that Production SQL servers in Subnet1 cannot talk to DMZ Web Servers in Subnet2.
What is the most cost effective solution to meet this requirement?- AConfigure NSGs to block traffic between Subnet1 and Subnet2
- BConfigure an Application Gateway to block traffic between Subnet1 and Subnet2
- CConfigure a Firewall Appliance to block traffic between Subnet1 and Subnet2
- DConfigure Route Tables on each VM to block traffic between Subnet1 and Subnet2
12Which of the following options would be most suitable for deploying a Standard SKU Public IP address?
- AStandard Internet-facing Load Balancer
- BBasic Internet-facing Load Balancer
- CStandard Back-end Load Balancer
- DBasic Back-end Load Balancer
13CycleShare.com maintains two networks in Azure:
10.20.0.0/16
10.100.26.0/24
Choose one or more valid Azure Private IP addresses that fall within the CycleShare.com networks.- A10.20.0.50
- B10.20.0.2
- C10.100.0.255
- D10.100.0.3
- E10.100.26.242
14You are configuring Public IP Addresses for Virtual Machines which are configured as availability sets.
The Virtual Machines disks need to be redundant over different zones but in the same Azure region.
What solution best meets this requirement?- AA Standard SKU Public IP Address needs to be configured
- BA Basic SKU Public IP Address needs to be configured
- CAn Enterprise SKU Public IP Address needs to be configured
- DA Free SKU Public IP Address needs to be configured
15You need to add a route to an Azure Route Table.
Select the possible Next Hop Types that are available.
Select all that apply.- AVirtual Network Gateway
- BStorage Account
- CLoad Balancer
- DNetwork Security Gateway
- EInternet
- FVirtual Appliance
16Which of the following IT ranges cannot be configured as a valid IP address range in VNets?
- A224.0.0.0/4
- B10.2.0.0/16
- C255.255.255.255/32
- D127.0.0.0/8
- E169.254.0.0/16
- F168.63.129.16/32
17When creating an Azure DNS Zone what two DNS records will be automatically created?
Select two.- ANS
- BA
- CCname
- DAAAA
- ESOA
18What feature in Azure DNS can translate an IP address to a domain record name?
- AReverse DNS
- BPrivate DNS
- CDNS Zone
- DAn Alias record
19Review the following statement:
"Azure DNS supports zone transfers"
Is the statement True or False?- ATrue
- BFalse
20The DevOps Manager wants to use DNS for name resolution across your Azure estate.
This includes several VNets across two Azure regions.
You need to ensure that addresses are only resolvable for your resources and not across the internet.
What solution will satisfy your requirements?- APrivate DNS
- BPublic DNS
- CDNS with Traffic Manager
- DReverse DNS
21What Azure feature uses Azure DNS to direct client requests to the most appropriate service based on a traffic routing method and the health of the endpoints?
- AAzure Traffic Manager
- BAzure Scalability Sets
- CAzure Storage Blob Resiliency
- DAzure Files
22Examine the following PowerShell cmdlet and choose the answer that best describes its intended usage.
New-AzDnsRecordSet- ACreates one or more DNS records(s)
- BCreates a new DNS Zone
- CLists all DNS records in a zone
- DCreates multiple DNS records
23You receive reports from other administrators that they are finding it difficult to understand and modify new Network Security Group Rules between two Virtual Networks.
How can you simplify this situation for the Administrators in your organization?- AImplement Augmented Security Rules
- BIntroduce a new Virtual Firewall Appliance from the Azure Marketplace
- CImplement Bounded Security Rules
- DIntroduce Simple Security Rules
24Examine the following statement regarding Network Security Groups rules.
"Rules are processed in priority order, with higher numbers processed before lower numbers. Once traffic matches a rule, processing stops. As a result, any rules that exist with lower priorities (lower numbers) that have the same attributes as rules with higher priorities are not processed."
Is the statement is True or False?- ATrue
- BFalse
25Choose the answer that provides the best description for a Application Security Group.
- AApplication Security Group allow you to deploy resources to application groups and control the access to those resources
- BApplication Security Groups are Microsoft created labels that represent a group of IP addresses
- CApplication Security Groups simplify NSG rule definition and allow you to create complex rules rather than having to create multiple simple rules
- DApplication Security Groups apply Network level Antivirus and Anti-malware to Azure-based applications
26Which is the correct Azure CLI cmdlet to create a Network Security Group (NSG)?
- Aaz network nsg create
- Baz nsg create
- Caz security nsg create
- Daz sec nsg update
27You need to configure a Network Security Group rule to allow RDP access to a Windows Virtual Machine in Azure.
What default port will you need to specify?- ATCP 3389
- BUDP 3389
- CTCP 3398
- DUDP 3398
28You work for CycleShare.com as the Cloud Administrator.
A member of staff asks you to investigate a potential issue with communication with a VM named WebApp1.
WebApp1 has a NIC named WebApp1Nic.
You need to troubleshoot the VM.
What cmdlet will list the effective security rules in place?- AGet-AzEffectiveNetworkSecurityGroup
-NetworkInterfaceName WebApp1Nic
-ResourceGroupName myRGweb2 - BDiag-AzNetworkSecurityGroupRules
-NetworkInterfaceName WebApp1Nic
-ResourceGroupName myRGweb2 - CGet-AzEffectiveNetworkSecurityGroup
-NetworkInterfaceName WebApp1
-ResourceGroupName myRGweb2 - DGet-AzEffectiveNetworkInterfaceRules
-NetworkInterfaceName WebApp1Nic
-ResourceGroupName myRGweb2
- AGet-AzEffectiveNetworkSecurityGroup
29You are configuring an Azure Load Balancer.
You need to identify what can be added in a backend pool instance.
What should you identify?- AAvailability Sets, Virtual Machine Scale Sets, and single Virtual Machines
- BAvailability Sets and single Virtual Machines
- CSingle Virtual Machines and IPv4 addresses
- DVirtual Machine Scale Sets, single Virtual Machines and IPv4 address
30You plan to deploy 3 Virtual Machines (VMs) that will run a web application named Webapp1.
Webapp1 must be made highly available in case one or more of the virtual machines fails.
What should you create to ensure that users can always access Webapp1?- AAn Azure Load Balancer that contains one backend pool and one load balancing rule
- BAn Azure Load Balancer that contains three backend pools and one load balancing rule
- CAn Azure Load Balancer that contains one backend pool and three load balancing rules
- DAn Azure Load Balancer that contains three backend pools and three load balancing rules
31What is the limitation on a public-facing Azure Load Balancers backend pool Virtual Machines?
- AThey must belong to the same single Virtual Network
- BThey must be of the same size
- CThey must all be allocated
- DThey must belong to an Availability Set
32You are considering deploying an Azure Load Balancer.
Which of the following features is not supported by an Azure Load Balancer?- ASSL Offload (sometimes known as TLS termination)
- BHTTP Health Probes
- CIPv6 Load Balancing Rules
- DInbound NAT Rules
33You want to use Azure Network Watcher to troubleshoot routing issues inside your Azure environment.
What feature of Network Watcher should you use?- ANext Hop
- BIP Flow Verify
- CSecurity Group View
- DNetwork Subscription limit
34What Azure Network Watcher PowerShell cmdlet will allow you to see if there are any latency issues in an Azure region?
- AGet-AzNetworkWatchReachabilityReport
- BGet-AzNetworkWatcherReachabilityProviderList
- CGet-AzEffectiveNetworkSecurityGroup
- DTest-AzNetworkWatcherIPFlow
Information
- Description
- Quiz on AZ-103_2.0, created by Marc Hall on 18/05/2020.
- Author
- Marc Hall
- Language
- English
- Views
- 1
- Tags
- Rating
- No ratings yet Rate this quiz