Get Full Version of the Exam
You have an Azure subscription that contains a storage account.
You have an on-premises server named Server1 that runs Window Server 2016. Server1 has 2 TB of data.
You need to transfer the data to the storage account by using the Azure Import/Export service.
In which order should you perform the actions? To answer, move all actions from the list of actions to the answer area and arrange them in the correct order.
NOTE: More than one order of answer choices is correct. You will receive credit for any of the correct orders you select.
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure subscription that contains 10 virtual networks. The virtual networks are hosted in separate resource groups.
Another administrator plans to create several network security groups (NSGs) in the subscription.
You need to ensure that when an NSG is created, it automatically blocks TCP port 8080 between the virtual networks.
Solution: From the Resource providers blade, you unregister the Microsoft.ClassicNetwork provider.
Does this meet the goal?
Correct Answer: B
You have an Azure subscription that contains a virtual machine named VM1. VM1 hosts a line-of- business application that is available 24 hours a day. VM1 has one network interface and one managed disk. VM1 uses the D4s v3 size.
You plan to make the following changes to VM1:
Change the size to D8s v3. Add a 500-GB managed disk.
Add the Puppet Agent extension. Attach an additional network interface.
Which change will cause downtime for VM1?
Add a 500-GB managed disk.
Attach an additional network interface.
Add the Puppet Agent extension.
Change the size to D8s v3.
Correct Answer: D
While resizing the VM it must be in a stopped state.
Click to expand each objective. To connect to the Azure portal, type https://portal.azure.com in the browser address bar.
When you are finished performing all the tasks, click the `Next#39; button.
Note that you cannot return to the lab once you click the `Next#39; button. Scoring occur in the background while you complete the rest of the exam.
The following section of the exam is a lab. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.
Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it
doesn#39;t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.
Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.
Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.
To start the lab
You may start the lab by clicking the Next button.
You plan to store media files in the rg1lod7523691n1 storage account.
You need to configure the storage account to store the media files. The solution must ensure that only users who have access keys can download the media files and that the files are accessible only over HTTPS.
What should you do from Azure portal?
Correct Answer: See solution below.
We should create an Azure file share.
Step 1: In the Azure portal, select All services. In the list of resources, type Storage Accounts. As you begin typing, the list filters based on your input. Select Storage Accounts.
On the Storage Accounts window that appears.
Step 2: Locate the rg1lod7523691n1 storage account.
Step 3: On the storage account page, in the Services section, select Files.
Step 4: On the menu at the top of the File service page, click File share. The New file share page drops down.
Step 5: In Name type myshare. Click OK to create the Azure file share.
You purchase a new Azure subscription named Subscription1.
You create a virtual machine named VM1 in Subscription1. VM1 is not protected by Azure Backup.
You need to protect VM1 by using Azure Backup. Backups must be created at 01:00 and stored for 30 days.
What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
You have 100 Azure subscriptions. All the subscriptions are associated to the same Azure Active Directory (Azure AD) tenant named contoso.com.
You are a global administrator.
You plan to create a report that lists all the resources across all the subscriptions. You need to ensure that you can view all the resources in all the subscriptions.
What should you do?
From the Azure portal, modify the profile settings of your account.
From Windows PowerShell, run the Add-AzureADAdministrativeUnitMember cmdlet.
From Windows PowerShell, run the New-AzureADUserAppRoleAssignment cmdlet.
From the Azure portal, modify the properties of the Azure AD tenant.
Correct Answer: C
The New-AzureADUserAppRoleAssignment cmdlet assigns a user to an application role in Azure Active Directory (AD). Use it for the application report.
You have an on-premises file server named Server1 that runs Windows Server 2016. You have an Azure subscription that contains an Azure file share.
You deploy an Azure File Sync Storage Sync Service, and you create a sync group. You need to synchronize files from Server1 to Azure.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
You have an Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com.
You need to ensure that the vendor can authenticate to the tenant by using email@example.com. What should you do?
From Windows PowerShell, run the New-AzureADUser cmdlet and specify the – UserPrincipalName firstname.lastname@example.org parameter.
From the Azure portal, add a custom domain name, create a new Azure AD user, and then specify email@example.com as the username.
From Azure Cloud Shell, run the New-AzureADUser cmdlet and specify the -UserPrincipalName firstname.lastname@example.org parameter.
From the Azure portal, add a new guest user, and then specify email@example.com as the email address.
Correct Answer: A
UserPrincipalName – contains the UserPrincipalName (UPN) of this user. The UPN is what the user will use when they sign in into Azure AD. The common structure is @, so for Abby Brown in Contoso.com, the UPN would be AbbyB@contoso.com
To create the user, call the New-AzureADUser cmdlet with the parameter values:
You have an Azure tenant that contains two subscriptions named Subscription1 and Subscription2.
In Subscription1, you deploy a virtual machine named Server1 that runs Windows Server 2016. Server1 uses managed disks.
You need to move Server1 to Subscription2. The solution must minimize administration effort. What should you do first?
In Subscription2, create a copy of the virtual disk.
From Azure PowerShell, run the Move-AzureRmResource cmdlet.
Create a snapshot of the virtual disk.
Create a new virtual machine in Subscription2.
Correct Answer: B
To move existing resources to another resource group or subscription, use the Move- AzureRmResource cmdlet.
You have an Azure DNS zone named adatum.com. You need to delegate a subdomain named research.adatum.com to a different DNS server in Azure. What should you do?
Create an PTR record named research in the adatum.com zone.
Create an NS record named research in the adatum.com zone.
Modify the SOA record of adatum.com.
Create an A record named quot;.research in the adatum.com zone.
Correct Answer: B
You need to create a name server (NS) record for the zone.