Accurate AZ-102 Exam Dumps 2019

We provide AZ-102 Exam Questions and Answers in two formats. Download PDF & Practice Tests. Pass Microsoft AZ-102 Exam quickly & easily. The AZ-102 PDF type is available for reading and printing. You can print more and practice many times. With the help of our AZ-102 Study Guides product and material, you can easily pass the AZ-102 exam.

Microsoft AZ-102 Free Dumps Questions Online, Read and Test Now.

NEW QUESTION 1
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure web app named Appl. App1 runs in an Azure App Service plan named Plan1. Plan1 is associated to the Free pricing tier.
You discover that App1 stops each day after running continuously for 60 minutes. You need to ensure that App1 can run continuously for the entire day.
Solution: You change the pricing tier of Plan1 to Basic. Does this meet the goal?

  • A. Yes
  • B. No

Answer: A

Explanation: The Free Tier provides 60 CPU minutes / day. This explains why App1 is stops. The Basic tier has no such cap.
References:
https://azure.microsoft.com/en-us/pricing/details/app-service/windows/

NEW QUESTION 2
You have five Azure virtual machines that run Windows Server 2016.
You have an Azure load balancer named LB1 that provides load balancing se
You need to ensure that visitors are serviced by the same web server for each request. What should you configure?

  • A. Floating IP (direct server return) to Disable
  • B. Session persistence to Client IP
  • C. a health probe
  • D. Session persistence to None

Answer: B

Explanation: You can set the sticky session in load balancer rules with setting the session persistence as the client IP.
References:
https://cloudopszone.com/configure-azure-load-balancer-for-sticky-sessions/

NEW QUESTION 3
You have an Azure Logic App named App1. App1 provides a response when an HTTP POST request or an HTTP GET request is received.
During peak periods, App1 is expected to receive up to 200,000 requests in a five-minute period. You need to ensure that App1 can handle the expected load.
What should you configure?

  • A. Access keys
  • B. Access control (1AM)
  • C. API connections
  • D. Workflow settings

Answer: D

Explanation: Here are the limits for a single logic app definition:
AZ-102 dumps exhibit
References:
https://docs.microsoft.com/en-us/azure/logic-apps/logic-apps-limits-and-config

NEW QUESTION 4
A web developer creates a web application that you plan to deploy as an Azure web app. Users must enter credentials to access the web application.
You create a new web app named WebAppl1 and deploy the web application to WebApp1. You need to disable anonymous access to WebApp1.
What should you configure?

  • A. Advanced Tools
  • B. Authentication/ Authorization
  • C. Access control (IAM)
  • D. Deployment credentials

Answer: B

Explanation: Anonymous access is an authentication method. It allows users to establish an anonymous connection.
References:
https://docs.microsoft.com/en-us/biztalk/core/guidelines-for-resolving-iis-permissions-problems

NEW QUESTION 5
DRAG DROP
You have an Azure subscription that contains the following resources:
• a virtual network named VNet1
• a replication policy named ReplPolicy1
• a Recovery Services vault named Vault1
• an Azure Storage account named Storage1
You have an Amazon Web Services (AWS) EC2 virtual machine named VM1 that runs Windows Server You need to migrate VM1 to VNet1 by using Azure Site Recovery.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
AZ-102 dumps exhibit

    Answer:

    Explanation: Step 1: Deploy an EC2 virtual machine as a configuration server Prepare source include:
    Use an EC2 instance that's running Windows Server 2012 R2 to create a configuration server and register it with your recovery vault.
    Configure the proxy on the EC2 instance VM you're using as the configuration server so that it can access the service URLs.
    Step 2: Install Azure Site Recovery Unified Setup.
    Download Microsoft Azure Site Recovery Unified Setup. You can download it to your local machine and then copy it to the VM you're using as the configuration server.
    Step 3: Enable replication for VM1.
    Enable replication for each VM that you want to migrate. When replication is enabled, Site Recovery automatically installs the Mobility service.
    References:
    https://docs.microsoft.com/en-us/azure/site-recovery/migrate-tutorial-aws-azure

    NEW QUESTION 6
    Note: This questions is part of a series of questions that present the same scenario. Each questions in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than one correct solution, while others might not have a correct solution. After you answer a questions in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
    You have an Azure subscription that contains 10 virtual networks. The virtual networks are hosted in separate resource groups.
    Another administrator plans to create several network security groups (NSGs) in the subscription. You need to ensure that when an NSG is created, it automatically blocks TCP port 8080 between the virtual networks.
    Solution: You assign a built-in policy definition to the subscription. Does this meet the goal?

    • A. Yes
    • B. No

    Answer: B

    NEW QUESTION 7
    HOT SPOT
    You have an Azure subscription.
    You need to implement a custom policy that meet the following requirements:
    *Ensures that each new resource group in the subscription has a tag named organization set to a value of Contoso.
    *Ensures that resource group can be created from the Azure portal.
    *Ensures that compliance reports in the Azure portal are accurate.
    How should you complete the policy? To answer, select the appropriate options in the answers area.
    AZ-102 dumps exhibit

      Answer:

      Explanation: References: https://docs.microsoft.com/en-us/azure/governance/policy/concepts/definitionstructure

      NEW QUESTION 8
      You have two Azure Active Directory (Azure AD) tenants named contoso.com and fabrikam.com. You have a Microsoft account that you use to sign in to both tenants.
      You need to configure the default sign-in tenant for the Azure portal. What should you do?

      • A. From the Azure portal, configure the portal settings.
      • B. From the Azure portal, change the directory.
      • C. From Azure Cloud Shell, run Set-AzureRmContext.
      • D. From Azure Cloud Shell, run Set-AzureRmSubscriptio

      Answer: B

      Explanation: Change the subscription directory in the Azure portal.
      The classic portal feature Edit Directory, that allows you to associate an existing subscription to your Azure Active Directory (AAD), is now available in Azure portal. It used to be available only to Service Admins with Microsoft accounts, but now it's available to users with AAD accounts as well.
      To get started:
      Go to Subscriptions. Select a subscription. Select Change directory. Incorrect Answers:
      C: The Set-AzureRmContext cmdlet sets authentication information for cmdlets that you run in the current session. The context includes tenant, subscription, and environment information. References: https://azure.microsoft.com/en-us/updates/edit-directory-now-in-new-portal/

      NEW QUESTION 9
      SIMULATION
      Click to expand each objective. To connect to the Azure portal, type https://portal.azure.com in the browser address bar.
      AZ-102 dumps exhibit
      AZ-102 dumps exhibit
      AZ-102 dumps exhibit
      AZ-102 dumps exhibit
      AZ-102 dumps exhibit
      AZ-102 dumps exhibit
      When you are finished performing all the tasks, click the ‘Next’ button.
      Note that you cannot return to the lab once you click the ‘Next’ button. Scoring occur in the background while you complete the rest of the exam.
      Overview
      The following section of the exam is a lab. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design. Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.
      Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.
      Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.
      To start the lab
      You may start the lab by clicking the Next button.
      You need to deploy two Azure virtual machines named VM1003a and VM1003b based on the Ubuntu Server 17.10 image. The deployment must meet the following requirements:
      Provide a Service Level Agreement (SLA) of 99.95 percent availability. Use managed disks.
      What should you do from the Azure portal?

        Answer:

        Explanation: 1. Open the Azure portal.
        2. On the left menu, select All resources. You can sort the resources by Type to easily find your images.
        3. Select the image you want to use from the list. The image Overview page opens.
        4. Select Create VM from the menu.
        5. Enter the virtual machine information.
        Select VM1003a as the name for the first Virtual machine.
        The user name and password entered here will be used to log in to the virtual machine. When complete, select OK. You can create the new VM in an existing resource group, or choose Create new to create a new resource group to store the VM.
        6. Select a size for the VM. To see more sizes, select View all or change the Supported disk type filter.
        7. Under Settings, make changes as necessary and select OK.
        8. On the summary page, you should see your image name listed as a Private image. Select Ok to start the virtual machine deployment.
        Repeat the procedure for the second VM and name it VM1003b.
        References: https://docs.microsoft.com/en-us/azure/virtual-machines/windows/create-vmgeneralized- managed

        NEW QUESTION 10
        You recently deployed a web app named homepagelod7509087.
        You need to back up the code used for the web app and to store the code in the homepagelod7509Q87 storage account. The solution must ensure that a new backup is created daily. What should you do from the Azure portal?

          Answer:

          Explanation: Step 1:
          Locate and select the web app homepagelod7509087, select Backups. The Backups page is displayed.
          AZ-102 dumps exhibit
          Step 2:
          In the Backup page, Click Configure. Step 3:
          In the Backup Configuration page, click Storage: Not configured to configure a storage account.
          AZ-102 dumps exhibit
          Step 4:
          Choose your backup destination by selecting a Storage Account and Container. Select the homepagelod7509087 storage account.
          Step 5:
          In the Backup Configuration page that is still left open, select Scheduled backup On, and configure daily backups.
          AZ-102 dumps exhibit
          Step 6:
          In the Backup Configuration page, click Save. Step 7:
          In the Backups page, click Backup.
          References:
          https://docs.microsoft.com/en-us/azure/app-service/web-sites-backup

          NEW QUESTION 11
          Note: This questions is part of a series of questions that present the same scenario. Each questions in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than one correct solution, while others might not have a correct solution. After you answer a questions in this section, you will NOT be able to return to it. As a result, these Questions will not appear in the review screen.
          You have an Azure subscription that contains 10 virtual networks. The virtual networks are hosted in separate resource groups.
          Another administrator plans to create several network security groups (NSGs) in the subscription. You need to ensure that when an NSG is created, it automatically blocks TCP port 8080 between the virtual networks.
          Solution: From the Resource providers blade, you unregister the Microsoft.ClassicNetwork provider. Does this meet the goal?

          • A. Yes
          • B. No

          Answer: B

          NEW QUESTION 12
          You have an Azure subscription that contains a storage account named account1.
          You plan to upload the disk files of a virtual machine to account1 from your on-premises network. The on-premises network uses a public IP address space of 131.107.1.0/24.
          You plan to use the disk files to provision an Azure virtual machine named VM1. VM1 will be attached to a virtual network named VNet1. VNet1 uses an IP address space of 192.168.0.0/24. You need to configure account1 to meet the following requirements:
          Ensure that you can upload the disk files to account1. Ensure that you can attach the disks to VM1. Prevent all other access to account1.
          Which two actions should you perform? Each correct selection presents part of the solution. NOTE: Each correct selection is worth one point.

          • A. From the Firewalls and virtual networks blade of account1, add the 131.107.1.0/24 IP address range.
          • B. From the Firewalls and virtual networks blade of account1, select Selected networks.
          • C. From the Firewalls and virtual networks blade of acount1, add VNet1.
          • D. From the Firewalls and virtual networks blade of account1, select Allow trusted Microsoft services toaccess this storage account.
          • E. From the Service endpoints blade of VNet1, add a service endpoin

          Answer: BE

          Explanation: B: By default, storage accounts accept connections from clients on any network. To limit access to selected networks, you must first change the default action.
          Azure portal
          Navigate to the storage account you want to secure.
          Click on the settings menu called Firewalls and virtual networks.
          To deny access by default, choose to allow access from 'Selected networks'. To allow traffic from all networks, choose to allow access from 'All networks'.
          Click Save to apply your changes.
          E: Grant access from a Virtual Network
          Storage accounts can be configured to allow access only from specific Azure Virtual Networks. By enabling a Service Endpoint for Azure Storage within the Virtual Network, traffic is ensured an optimal route to the Azure Storage service. The identities of the virtual network and the subnet are also transmitted with each request.
          References: https://docs.microsoft.com/en-us/azure/storage/common/storage-network-security

          NEW QUESTION 13
          Your company registers a domain name of contoso.com.
          You create an Azure DNS named contoso.com and then you add an A record to the zone for a host named www that has an IP address of 131.107.1.10.
          You discover that Internet hosts are unable to resolve www.contoso.com to the 131.107.1.10 IP address.
          You need to resolve the name resolution issue.
          Solution: You modify the SOA record in the contoso.com zone Does this meet the goal?

          • A. Yes
          • B. No

          Answer: B

          Explanation: Modify the NS record, not the SOA record.
          Note: The SOA record stores information about the name of the server that supplied the data for the zone; the administrator of the zone; the current version of the data file; the number of seconds a secondary name server should wait before checking for updates; the number of seconds a secondary name server should wait before retrying a failed zone transfer; the maximum number of seconds that a secondary name server can use data before it must either be refreshed or expire; and a default number of seconds for the time-to-live file on resource records.
          References: https://searchnetworking.techtarget.com/definition/start-of-authority-record

          NEW QUESTION 14
          You have the Azure virtual machines shown in the following table.
          AZ-102 dumps exhibit
          You have a Recovery Services vault that protects VM1 and VM2. You need to protect VM3 and VM4 by using Recovery Services. What should you do first?

          • A. Configure the extensions for VM3 and VM4.
          • B. Create a new Recovery Services vault.
          • C. Create a storage account.
          • D. Create a new backup polic

          Answer: B

          Explanation: A Recovery Services vault is a storage entity in Azure that houses dat
          A. The data is typically copies of
          data, or configuration information for virtual machines (VMs), workloads, servers, or workstations. You can use Recovery Services vaults to hold backup data for various Azure services
          References: https://docs.microsoft.com/en-us/azure/site-recovery/azure-to-azure-tutorial-enablereplication

          NEW QUESTION 15
          HOT SPOT
          You have an Azure subscription named Subscription1. Subscription1 contains the resources in the following table.
          AZ-102 dumps exhibit
          In Azure, you create a private DNS zone named adatum.com. You set the registration virtual network to VNet2. The adatum.com zone is configured as shown in the following exhibit.
          AZ-102 dumps exhibit
          For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.
          AZ-102 dumps exhibit

            Answer:

            Explanation: Box 1: No
            Azure DNS provides automatic registration of virtual machines from a single virtual network that's linked to a private zone as a registration virtual network. VM5 does not belong to the registration virtual network though.
            Box 2: No
            Forward DNS resolution is supported across virtual networks that are linked to the private zone as resolution virtual networks. VM5 does belong to a resolution virtual network.
            Box 3: Yes
            VM6 belongs to registration virtual network, and an A (Host) record exists for VM9 in the DNS zone. By default, registration virtual networks also act as resolution virtual networks, in the sense that DNS resolution against the zone works from any of the virtual machines within the registration virtual network.
            References: https://docs.microsoft.com/en-us/azure/dns/private-dns-overview

            NEW QUESTION 16
            SIMULATION
            Click to expand each objective. To connect to the Azure portal, type https://portal.azure.com in the browser address bar.
            AZ-102 dumps exhibit
            AZ-102 dumps exhibit
            AZ-102 dumps exhibit
            When you are finished performing all the tasks, click the ‘Next’ button.
            Note that you cannot return to the lab once you click the ‘Next’ button. Scoring occur in the background while you complete the rest of the exam.
            Overview
            The following section of the exam is a lab. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design. Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.
            Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.
            Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.
            To start the lab
            You may start the lab by clicking the Next button.
            Your on-premises network uses an IP address range of 131.107.2.0 to 131.107.2.255. You need to ensure that only devices from the on-premises network can connect to the rg1lod7523691n1 storage account.
            What should you do from the Azure portal?

              Answer:

              Explanation: Step 1: Navigate to the rg1lod7523691n1 storage account.
              Step 2: Click on the settings menu called Firewalls and virtual networks. Step 3: Ensure that you have elected to allow access from 'Selected networks'.
              Step 4: To grant access to an internet IP range, enter the address range of 131.107.2.0 to 131.107.2.255 (in CIDR format) under Firewall, Address Ranges.
              References: https://docs.microsoft.com/en-us/azure/storage/common/storage-network-security

              NEW QUESTION 17
              HOT SPOT
              You have an Azure Active Directory (Azure AD) tenant.
              You need to create a conditional access policy that requires all users to use multi-factor authentication when they access the Azure portal.
              Which three settings should you configure? To answer, select the appropriate settings in the answer area.
              AZ-102 dumps exhibit

                Answer:

                Explanation: Box 1: Assignments, Users and Groups
                When you configure the sign-in risk policy, you need to set:
                The users and groups the policy applies to: Select Individuals and Groups
                AZ-102 dumps exhibit
                Box 2:
                When you configure the sign-in risk policy, you need to set the type of access you want to be enforced.
                AZ-102 dumps exhibit
                Box 3:
                When you configure the sign-in risk policy, you need to set:
                The type of access you want to be enforced when your sign-in risk level has been met:
                AZ-102 dumps exhibit
                References:
                https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/howto-user-risk-policy

                P.S. prep-labs.com now are offering 100% pass ensure AZ-102 dumps! All AZ-102 exam questions have been updated with correct answers: https://www.prep-labs.com/dumps/AZ-102/ (195 New Questions)