Authentic Best resources for AZ-303 Test Engine Practice Exam
[2021] AZ-303 PDF Questions - Perfect Prospect To Go With 2Pass4sure Practice Exam
NEW QUESTION 12
You have an Azure Cosmos DB account named Account1. Account1 includes a database named DB1 that contains a container named Container1. The partition key for Container1 is set to /city.
You plan to change the partition key for Container1.
What should you do first?
- A. Delete Container1.
- B. Implement the Azure Cosmos DB .NET SDK.
- C. Create a new Azure Cosmos DB account.
- D. Regenerate the keys for Account1.
Answer: C
Explanation:
Section: [none]
Explanation:
The Change Feed Processor and Bulk Executor Library, in Azure Cosmos DB can be leveraged to achieve a live migration of your data from one container to another. This allows you to re-distribute your data to match the desired new partition key scheme, and make the relevant application changes afterwards, thus achieving the effect of "updating your partition key".
Incorrect Answers:
A: It is not possible to "update" your partition key in an existing container.
Reference:
https://devblogs.microsoft.com/cosmosdb/how-to-change-your-partition-key/
NEW QUESTION 13
You have an Azure subscription that contains the resource groups shown in the following table.
You create an Azure Resource Manager template named Template1 as shown in the following exhibit.
From the Azure portal, you deploy Template1 four times by using the settings shown in the following table.
What is the result of the deployment? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
NEW QUESTION 14
You are designing a virtual network to support a web application. The web application uses Blob storage to store large images. The web application will be deployed to an Azure App Service Web App.
You have the following requirements:
Secure all communications by using Secured Socket layer (SSL)
SSL encryption and decryption must be processed efficiently to support high traffic load on the web application Protect the web application from web vulnerabilities and attacks without modification to backend code Optimize web application responsiveness and reliability by routing HTTP request and responses to the endpoint with the lowest network latency for the client.
You need to configure the Azure components to meet the requirements.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
References:
https://docs.microsoft.com/en-us/azure/application-gateway/application-gateway-end-to-end-ssl-powershell
https://docs.microsoft.com/en-us/azure/traffic-manager/traffic-manager-overview
https://docs.microsoft.com/en-us/azure/security-center/security-center-intro
NEW QUESTION 15
You set the multi-factor authentication status for a user named [email protected] to Enabled.
Adman 1 accesses the Azure portal by using a web browser.
Which additional security verifications can Admin 1 use when accessing the Azure portal?
- A. a phone call, an email message that contains a verification code, and a te*t message that contains an app password
- B. a phone call, a text, message that contains a verification code, and a notification on a verification code sent from the Microsoft Authenticator app
- C. an app password, a text message that contains a verification code, and a notification sent from the Microsoft Authenticator app
- D. on app password, a text message that contacts a verification code, and a verification code sent from the Microsoft Authenticator app.
Answer: B
Explanation:
The Microsoft Authenticator app can help prevent unauthorized access to accounts and stop fraudulent transactions by pushing a notification to your smartphone or tablet. Users view the notification, and if it's legitimate, select Verify. Otherwise, they can select Deny.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-authentication-methods
NEW QUESTION 16
You have a server named Server1 that runs Windows Server 2019. Server! is a container host.
You plan to create a container image.
You create the following instructions in a text editor.
You need 10 be able to automate the container image creation by using the instructions. To which file should you save the instructions?
- A. dockerconfig.json
- B. daemon.json
- C. Dockerfile
- D. dockerconfig.sjon
Answer: C
NEW QUESTION 17
You need to recommend a solution for App1. The solution must meet the technical requirements. What should you include in the recommendation? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION 18
You create an Azure Kubernetes Service (AKS) cluster configured as shown in the exhibit. (Click the Exhibit tab.)
You deploy a containerized application named App1 to the agentPool node pool.
You need to create a containerized application named App2 that runs on four nodes of size DS3 v2.
What should you do first?
- A. Upgrade the AKS cluster.
- B. Enable virtual nodes for the AKS cluster.
- C. modify the autoscaling settings for the agentPool node.
- D. Create a new node pool.
Answer: D
Explanation:
Explanation
Changing the agent size is not allowed. In the future Microsft plans to support multiple node pools wherein you can create different pools with different VM sizes.
Reference:
https://github.com/Azure/AKS/issues/132
NEW QUESTION 19
DRAG DROP
You have an Azure subscription that contains two virtual networks named VNet1 and VNet2. Virtual machines connect to the virtual networks.
The virtual networks have the address spaces and the subnets configured as shown in the following table.
You need to add the address space of 10.33.0.0/16 to VNet1. The solution must ensure that the hosts on VNet1 and VNet2 can communicate.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Select and Place:
Answer:
Explanation:
Section: [none]
Explanation:
Step 1: Remove peering between Vnet1 and VNet2.
You can't add address ranges to, or delete address ranges from a virtual network's address space once a virtual network is peered with another virtual network. To add or remove address ranges, delete the peering, add or remove the address ranges, then re-create the peering.
Step 2: Add the 10.44.0.0/16 address space to VNet1.
Step 3: Recreate peering between VNet1 and VNet2
References:
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-manage-peering
NEW QUESTION 20
You have an Azure Resource Manager template named Template1 in the library as shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/template-syntax
NEW QUESTION 21
You plan to create an Azure Storage account named storage! that will store blobs and be accessed by Azure Databricks.
You need to ensure that you can set permissions for individual blobs by using Azure Active Directory (Azure AD) authentication.
Which Advanced setting should you enable for storage1?
- A. Large file shares
- B. Hierarchical namespace
- C. NFSv3
- D. Blob soft delete
Answer: B
NEW QUESTION 22
You have a hierarchy of management groups and Azure subscriptions as shown in the following table.
You create the Azure resources shown in the following table.
You assign roles to users as shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#contributor
NEW QUESTION 23
You have two Azure SQL Database managed instances in different Azure regions.
You plan to configure the managed instances in an instance failover group.
What should you configure before you can add the managed instances to the instance failover group?
- A. an Azure Application Gateway that has managed instance endpoints in a backend pool
- B. Azure Private Link that has endpoints on two virtual networks
- C. an internal Azure Load Balancer instance that has managed instance endpoints in a backend pool
- D. a Site-to-Site VPN between the virtual networks that contain the instances
Answer: D
Explanation:
Explanation
For two managed instances to participate in a failover group, there must be either ftoute or a gateway configured between the virtual networks of the two managed instances to allow network communication.
You create the two VPN gateways and connect them.
* Create the gateway for the virtual network of your primary managed instance using the Azure portal.
* Create the gateway for the virtual network of your secondary managed instance using the Azure portal.
* Create a bidirectional connection between the two gateways of the two virtual networks.
Reference:
https://docs.microsoft.com/en-us/azure/azure-sql/managed-instance/failover-group-add-instance-tutorial?tabs=az
NEW QUESTION 24
You have the virtual machines shown in the following table.
You deploy an Azure bastion named Bastion1 to VNET1.
To which virtual machines can you connect by using Bastion1?
- A. VM1 and VM2 only
- B. VM1, VM2, and VM3
- C. VM1 only
- D. VM2 and VM3 only
Answer: D
NEW QUESTION 25
You network contains an Active Directory domain that is synced to Azure Active Directory (Azure AD) as shown in the following exhibit.
You have a user account configured as shown in the following exhibit.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Box 1: No
Password writeback is disabled.
Note: Having a cloud-based password reset utility is great but most companies still have an on-premises directory where their users exist. How does Microsoft support keeping traditional on-premises Active Directory (AD) in sync with password changes in the cloud? Password writeback is a feature enabled with Azure AD Connect that allows password changes in the cloud to be written back to an existing on-premises directory in real time.
Box 2: No
Box 3: Yes
Yes, there is an Edit link for Location Info.
References:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-writeback
NEW QUESTION 26
You create a virtual machine scale set named Scale1. Scale1 is configured as shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
Answer:
Explanation:
Explanation:
4 virtual machines
4 virtual machines
https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-autoscale-portal
NEW QUESTION 27
You have an Azure subscription that contains the virtual networks shown in the following table.
You need to recommend a connectivity solution that will enable the virtual machines on VNET1 and VNET2 to communicate through the Microsoft backbone infrastructure.
What should you include in the recommendation?
- A. a site-to-site VPN
- B. a point-to-site VPN
- C. peering
- D. Azure ExpressRoute
Answer: C
Explanation:
Virtual network peering enables you to seamlessly connect Azure virtual networks. Once peered, the virtual networks appear as one, for connectivity purposes. The traffic between virtual machines in the peered virtual networks is routed through the Microsoft backbone infrastructure, much like traffic is routed between virtual machines in the same virtual network, through private IP addresses only. Azure supports:
VNet peering - connecting VNets within the same Azure region
Global VNet peering - connecting VNets across Azure regions
Reference:
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-peering-overview
NEW QUESTION 28
You have an Azure subscription named Subscription1.
In Subscription1, you create an alert rule named Alert1. The Alert1 action group is configured as shown in the following exhibit.
Alert1 alert criteria is triggered every minute.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Box 1: 60
One alert per minute will trigger one email per minute.
Box 2: 12
No more than 1 SMS every 5 minutes can be send, which equals 12 per hour.
Note: Rate limiting is a suspension of notifications that occurs when too many are sent to a particular phone number, email address or device. Rate limiting ensures that alerts are manageable and actionable.
The rate limit thresholds are:
* SMS: No more than 1 SMS every 5 minutes.
* Voice: No more than 1 Voice call every 5 minutes.
* Email: No more than 100 emails in an hour.
* Other actions are not rate limited.
References:
https://github.com/MicrosoftDocs/azure-docs/blob/master/articles/monitoring-and-diagnostics/monitoring-overv
NEW QUESTION 29
You are designing an Azure solution.
The solution must meet the following requirements:
* Distribute traffic to different pools of dedicated virtual machines (VMs) based on rules.
* Provide SSL offloading capabilities.
You need to recommend a solution to distribute network traffic.
Which technology should you recommend?
- A. Azure Load Balancer
- B. Azure Application Gateway
- C. Azure Traffic Manager
- D. server-level firewall rules
Answer: B
Explanation:
If you require "SSL offloading", application layer treatment, or wish to delegate certificate management to Azure, you should use Azure's layer 7 load balancer Application Gateway instead of the Load Balanacer.
Incorrect Answers:
D: Because Load Balancer is agnostic to the TCP payload and TLS offload ("SSL") is not provided.
Reference:
https://docs.microsoft.com/en-us/azure/application-gateway/overview
NEW QUESTION 30
DRAG DROP
You are designing a solution to secure a company's Azure resources. The environment hosts 10 teams.
Each team manages a project and has a project manager, a virtual machine (VM) operator, developers, and contractors.
Project managers must be able to manage everything except access and authentication for users. VM operators must be able to manage VMs, but not the virtual network or storage account to which they are connected. Developers and contractors must be able to manage storage accounts.
You need to recommend roles for each member.
What should you recommend? To answer, drag the appropriate roles to the correct employee types. Each role may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Select and Place:
Answer:
Explanation:
Explanation/Reference:
NEW QUESTION 31
......
Best updated resource for AZ-303 Online Practice Exam: https://www.2pass4sure.com/Azure-Solutions-Architect-Expert/AZ-303-actual-exam-braindumps.html