Microsoft AZ-100 Free Practice Questions 2019

Proper study guides for AZ-100 Microsoft Azure Infrastructure and Deployment certified begins with AZ-100 Exam Questions preparation products which designed to deliver the AZ-100 Braindumps by making you pass the AZ-100 test at your first time. Try the free AZ-100 Exam Questions right now.

Free AZ-100 Demo Online For Microsoft Certifitcation:

NEW QUESTION 1
You have two Azure virtual machines named VM1 and VM2. You have two Recovery Services vaults named RSV1 and RSV2.
VM2 is protected by RSV1.
You need to use RSV2 to protect VM2. What should you do first?

  • A. From the RSV1 blade, click Backup items and stop the VM2 backup.
  • B. From the RSV1 blade, click Backup Jobs and export the VM2 backup.
  • C. From the RSV1 blade, click Backu
  • D. From the Backup blade, select the backup for the virtual machine, and then click Backup.
  • E. From the VM2 blade, click Disaster recovery, click Replication settings, and then select RSV2 as the Recovery Services vault.

Answer: D

Explanation: References:
https://docs.microsoft.com/en-us/azure/backup/backup-azure-vms-first-look-arm

NEW QUESTION 2
You have a resource group named RG1. RG1 contains an Azure Storage account named storageaccount1 and a virtual machine named VM1 that runs Windows Server 2016. Storageaccount1 contains the disk files for VM1. You apply a ReadOnly lock to RG1.
What can you do from the Azure portal?

  • A. Generate an automation script for RG1.
  • B. View the keys of storageaccount1.
  • C. Upload a blob to storageaccount1.
  • D. Start VM1.

Answer: B

Explanation: ReadOnly means authorized users can read a resource, but they can't delete or update the resource. Applying this lock is similar to restricting all authorized users to the permissions granted by the Reader role.
References: https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-lock-resources

NEW QUESTION 3
You have an Azure subscription named Subscription1. Subscription1 contains a virtual machine named VM1. You have a computer named Computer1 that runs Windows 10. Computer1 is connected to the Internet.
You add a network interface named Interface1 to VM1 as shown in the exhibit (Click the Exhibit button.)
AZ-100 dumps exhibit
From Computer1, you attempt to connect to VM1 by using Remote Desktop, but the connection fails. You need to establish a Remote Desktop connection to VM1.
What should you do first?

  • A. Start VM1.
  • B. Attach a network interface.
  • C. Delete the DenyAllOutBound outbound port rule.
  • D. Delete the DenyAllInBound inbound port rule.

Answer: A

NEW QUESTION 4
You plan to use the Azure Import/Export service to copy files to a storage account.
Which two files should you create before you prepare the drives for the import job? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

  • A. an XML manifest file
  • B. a driveset CSV file
  • C. a dataset CSV file
  • D. a PowerShell PS1 file
  • E. a JSON configuration file

Answer: BC

Explanation: B: Modify the driveset.csv file in the root folder where the tool resides.
C: Modify the dataset.csv file in the root folder where the tool resides. Depending on whether you want to import a file or folder or both, add entries in the dataset.csv file
References: https://docs.microsoft.com/en-us/azure/storage/common/storage-import-export-data-to-files

NEW QUESTION 5
You have an Azure subscription named Subscription1. Subscription1 contains the resources in the following table.
AZ-100 dumps exhibit
VNet1 is in RG1. VNet2 is in RG2. There is no connectivity between VNet1 and Vnet2.
An administrator named Admin1 creates an Azure virtual machine named VM1 in RG1. VM1 uses a disk named Disk1 and connects to VNet1. Admin1 then installs a custom application in VM1.
You need to move the custom application to Vnet2. The solution must minimize administrative effort. Which two actions should you perform? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
AZ-100 dumps exhibit

    Answer:

    Explanation: You can move a VM and its associated resources to another resource group using the portal. References: https://docs.microsoft.com/en-us/azure/virtual-machines/windows/move-vm

    NEW QUESTION 6
    You purchase a new Azure subscription named Subscription1.
    You create a virtual machine named VM1 in Subscription1. VM1 is not protected by Azure Backup.
    You need to protect VM1 by using Azure Backup. Backups must be created at 01:00 and stored for 30 days. What should you do? To answer, select the appropriate options in the answer area.
    NOTE: Each correct selection is worth one point.
    AZ-100 dumps exhibit

      Answer:

      Explanation: Box 1: A Recovery Services vault
      A Recovery Services vault is an entity that stores all the backups and recovery points you create over time. Box 2: A backup policy
      What happens when I change my backup policy?
      When a new policy is applied, schedule and retention of the new policy is followed. References:
      https://docs.microsoft.com/en-us/azure/backup/backup-configure-vault
      https://docs.microsoft.com/en-us/azure/backup/backup-azure-backup-faq

      NEW QUESTION 7
      You have an on-premises file server named Server1 that runs Windows Server 2016. You have an Azure subscription that contains an Azure file share.
      You deploy an Azure File Sync Storage Sync Service, and you create a sync group. You need to synchronize files from Server1 to Azure.
      Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
      AZ-100 dumps exhibit

        Answer:

        Explanation: Step 1: Install the Azure File Sync agent on Server1
        The Azure File Sync agent is a downloadable package that enables Windows Server to be synced with an Azure file share
        Step 2: Register Server1.
        Register Windows Server with Storage Sync Service
        Registering your Windows Server with a Storage Sync Service establishes a trust relationship between your server (or cluster) and the Storage Sync Service.
        Step 3: Add a server endpoint
        Create a sync group and a cloud endpoint.
        A sync group defines the sync topology for a set of files. Endpoints within a sync group are kept in sync with each other. A sync group must contain one cloud endpoint, which represents an Azure file share and one or more server endpoints. A server endpoint represents a path on registered server.
        References: https://docs.microsoft.com/en-us/azure/storage/files/storage-sync-files-deployment-guide

        NEW QUESTION 8
        Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
        After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
        You have an Azure subscription named Subscription1. Subscription1 contains a resource group named RG1. RG1 contains resources that were deployed by using templates.
        You need to view the date and time when the resources were created in RG1. Solution: From the RG1 blade, you click Automation script.
        Does this meet the goal?

        • A. Yes
        • B. No

        Answer: B

        NEW QUESTION 9
        You have peering configured as shown in the following exhibit.
        AZ-100 dumps exhibit
        Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
        NOTE: Each correct selection is worth one point.
        AZ-100 dumps exhibit

          Answer:

          Explanation: Box 1: vNET6 only
          Box 2: Modify the address space
          The virtual networks you peer must have non-overlapping IP address spaces. References:
          https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-manage-peering#requirements-and-cons

          NEW QUESTION 10
          You have an Azure subscription that contains a storage account named account1.
          You plan to upload the disk files of a virtual machine to account1 from your on-premises network. The on-premises network uses a public IP address space of 131.107.1.0/24.
          You plan to use the disk files to provision an Azure virtual machine named VM1. VM1 will be attached to a virtual network named VNet1. VNet1 uses an IP address space of 192.168.0.0/24.
          You need to configure account1 to meet the following requirements:
          AZ-100 dumps exhibit Ensure that you can upload the disk files to account1.
          AZ-100 dumps exhibit Ensure that you can attach the disks to VM1.
          AZ-100 dumps exhibit Prevent all other access to account1.
          Which two actions should you perform? Each correct selection presents part of the solution.
          NOTE: Each correct selection is worth one point.

          • A. From the Firewalls and virtual networks blade of account1, add the 131.107.1.0/24 IP address range.
          • B. From the Firewalls and virtual networks blade of account1, select Selected networks.
          • C. From the Firewalls and virtual networks blade of acount1, add VNet1.
          • D. From the Firewalls and virtual networks blade of account1, select Allow trusted Microsoft services to access this storage account.
          • E. From the Service endpoints blade of VNet1, add a service endpoint.

          Answer: BE

          Explanation: B: By default, storage accounts accept connections from clients on any network. To limit access to selected networks, you must first change the default action.
          Azure portal
          AZ-100 dumps exhibit Navigate to the storage account you want to secure.
          AZ-100 dumps exhibit Click on the settings menu called Firewalls and virtual networks.
          AZ-100 dumps exhibit To deny access by default, choose to allow access from 'Selected networks'. To allow traffic from all networks, choose to allow access from 'All networks'.
          AZ-100 dumps exhibit Click Save to apply your changes. E: Grant access from a Virtual Network
          Storage accounts can be configured to allow access only from specific Azure Virtual Networks.
          By enabling a Service Endpoint for Azure Storage within the Virtual Network, traffic is ensured an optimal route to the Azure Storage service. The identities of the virtual network and the subnet are also transmitted with each request.
          References: https://docs.microsoft.com/en-us/azure/storage/common/storage-network-security

          NEW QUESTION 11
          You have an Azure subscription.
          You need to implement a custom policy that meet the following requirements:
          *Ensures that each new resource group in the subscription has a tag named organization set to a value of Contoso.
          *Ensures that resource group can be created from the Azure portal.
          *Ensures that compliance reports in the Azure portal are accurate.
          How should you complete the policy? To answer, select the appropriate options in the answers area.
          AZ-100 dumps exhibit

            Answer:

            Explanation: References: https://docs.microsoft.com/en-us/azure/governance/policy/concepts/definition-structure

            NEW QUESTION 12
            You have an Azure tenant that contains two subscriptions named Subscription1 and Subscription2.
            In Subscription1, you deploy a virtual machine named Server1 that runs Windows Server 2016. Server1 uses managed disks.
            You need to move Server1 to Subscription2. The solution must minimize administration effort. What should you do first?

            • A. In Subscription2, create a copy of the virtual disk.
            • B. From Azure PowerShell, run the Move-AzureRmResource cmdlet.
            • C. Create a snapshot of the virtual disk.
            • D. Create a new virtual machine in Subscription2.

            Answer: B

            Explanation: To move existing resources to another resource group or subscription, use the Move-AzureRmResource cmdlet.
            References:
            https://docs.microsoft.com/en-in/azure/azure-resource-manager/resource-group-move-resources#moveresources

            NEW QUESTION 13
            Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
            After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
            You have an Azure subscription that contains 10 virtual networks. The virtual networks are hosted in separate resource groups.
            Another administrator plans to create several network security groups (NSGs) in the subscription.
            You need to ensure that when an NSG is created, it automatically blocks TCP port 8080 between the virtual networks.
            Solution: You assign a built-in policy definition to the subscription. Does this meet the goal?

            • A. Yes
            • B. No

            Answer: B

            NEW QUESTION 14
            Overview
            The following section of the exam is a lab. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.
            Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.
            Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.
            Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.
            To start the lab
            You may start the lab by clicking the Next button. You plan to host several secured websites on Web01.
            You need to allow HTTPS over TCP port 443 to Web01 and to prevent HTTP over TCP port 80 to Web01. What should you do from the Azure portal?

              Answer:

              Explanation: You can filter network traffic to and from Azure resources in an Azure virtual network with a network security group. A network security group contains security rules that allow or deny inbound network traffic to, or outbound network traffic from, several types of Azure resources.
              A network security group contains security rules that allow or deny inbound network traffic to, or outbound network traffic from, several types of Azure resources.
              Step A: Create a network security group
              A1. Search for and select the resource group for the VM, choose Add, then search for and select Network security group.
              A2. Select Create.
              AZ-100 dumps exhibit
              The Create network security group window opens. A3. Create a network security group
              Enter a name for your network security group.
              Select or create a resource group, then select a location. A4. Select Create to create the network security group.
              Step B: Create an inbound security rule to allows HTTPS over TCP port 443 B1. Select your new network security group.
              B2. Select Inbound security rules, then select Add. B3. Add inbound rule
              B4. Select Advanced.
              From the drop-down menu, select HTTPS.
              You can also verify by clicking Custom and selecting TCP port, and 443. B5. Select Add to create the rule.
              Repeat step B2-B5 to deny TCP port 80
              B6. Select Inbound security rules, then select Add. B7. Add inbound rule
              B8. Select Advanced.
              Clicking Custom and selecting TCP port, and 80. B9. Select Deny.
              Step C: Associate your network security group with a subnet
              Your final step is to associate your network security group with a subnet or a specific network interface. C1. In the Search resources, services, and docs box at the top of the portal, begin typing Web01. When the
              Web01 VM appears in the search results, select it.
              C2. Under SETTINGS, select Networking. Select Configure the application security groups, select the Security Group you created in Step A, and then select Save, as shown in the following picture:
              AZ-100 dumps exhibit
              References:
              https://docs.microsoft.com/en-us/azure/virtual-network/tutorial-filter-network-traffic

              NEW QUESTION 15
              Overview
              The following section of the exam is a lab. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.
              Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.
              Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.
              Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.
              To start the lab
              You may start the lab by clicking the Next button.
              Your company plans to host in Azure the source files of several line-of-business applications.
              You need to create an Azure file share named corpsoftware in the storagelod8095859 storage account. The solution must ensure the corpsoftware can store only up to 250 GB of data.
              What should you do from the Azure portal?

                Answer:

                Explanation: Step 1. Go to the Storage Account blade on the Azure portal:
                AZ-100 dumps exhibit
                Step 2. Click on add File Share button:
                AZ-100 dumps exhibit
                Step 3. Provide Name (storagelod8095859) and Quota (250 GB).
                AZ-100 dumps exhibit
                References:
                https://docs.microsoft.com/en-us/azure/storage/files/storage-how-to-create-file-share

                NEW QUESTION 16
                You have two Azure Active Directory (Azure AD) tenants named contoso.com and fabrikam.com. You have a Microsoft account that you use to sign in to both tenants.
                You need to configure the default sign-in tenant for the Azure portal. What should you do?

                • A. From the Azure portal, configure the portal settings.
                • B. From the Azure portal, change the directory.
                • C. From Azure Cloud Shell, run Set-AzureRmContext.
                • D. From Azure Cloud Shell, run Set-AzureRmSubscription.

                Answer: B

                Explanation: Change the subscription directory in the Azure portal.
                The classic portal feature Edit Directory, that allows you to associate an existing subscription to your Azure Active Directory (AAD), is now available in Azure portal. It used to be available only to Service Admins with Microsoft accounts, but now it's available to users with AAD accounts as well.
                To get started:
                AZ-100 dumps exhibit Go to Subscriptions.
                AZ-100 dumps exhibit Select a subscription.
                AZ-100 dumps exhibit Select Change directory.

                NEW QUESTION 17
                You have two subscriptions named Subscription1 and Subscription2. Each subscription is associated to a different Azure AD tenant.
                Subscription1 contains a virtual network named VNet1.VNet1 contains an Azure virtual machine named VM1 and has an IP address space of 10.0.0.0/16.
                Subscription2 contains a virtual network named VNet2. VNet2 contains an Azure virtual machine named VM2 and has an IP address space of 10.10.0.0/24.
                You need to connect VNet1 to VNet2. What should you do first?

                • A. Move VNet1 to Subscription2.
                • B. Modify the IP address space of VNet2.
                • C. Provision virtual network gateways.
                • D. Move VM1 to Subscription2.

                Answer: C

                Explanation: The virtual networks can be in the same or different regions, and from the same or different subscriptions. When connecting VNets from different subscriptions, the subscriptions do not need to be associated with the same Active Directory tenant.
                Configuring a VNet-to-VNet connection is a good way to easily connect VNets. Connecting a virtual network to another virtual network using the VNet-to-VNet connection type (VNet2VNet) is similar to creating a
                Site-to-Site IPsec connection to an on-premises location. Both connectivity types use a VPN gateway to provide a secure tunnel using IPsec/IKE, and both function the same way when communicating.
                The local network gateway for each VNet treats the other VNet as a local site. This lets you specify additional address space for the local network gateway in order to route traffic.
                References:
                https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-vnet-vnet-resource-manager-portal

                NEW QUESTION 18
                Click to expand each objective. To connect to the Azure portal, type https://portal.azure.com in the browser address bar.
                AZ-100 dumps exhibit
                AZ-100 dumps exhibit
                AZ-100 dumps exhibit
                When you are finished performing all the tasks, click the ‘Next’ button.
                Note that you cannot return to the lab once you click the ‘Next’ button. Scoring occur in the background while you complete the rest of the exam.
                Overview
                The following section of the exam is a lab. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design. Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.
                Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.
                Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.
                To start the lab
                You may start the lab by clicking the Next button.
                Your on-premises network uses an IP address range of 131.107.2.0 to 131.107.2.255.
                You need to ensure that only devices from the on-premises network can connect to the rg1lod7523691n1 storage account.
                What should you do from the Azure portal?

                  Answer:

                  Explanation: Step 1: Navigate to the rg1lod7523691n1 storage account.
                  Step 2: Click on the settings menu called Firewalls and virtual networks.
                  Step 3: Ensure that you have elected to allow access from 'Selected networks'.
                  Step 4: To grant access to an internet IP range, enter the address range of 131.107.2.0 to 131.107.2.255 (in CIDR format) under Firewall, Address Ranges.
                  References: https://docs.microsoft.com/en-us/azure/storage/common/storage-network-security

                  P.S. Dumpscollection now are offering 100% pass ensure AZ-100 dumps! All AZ-100 exam questions have been updated with correct answers: http://www.dumpscollection.net/dumps/AZ-100/ (106 New Questions)