You have an Azure App Service API that allows users to upload documents to the cloud with a mobile device. A mobile app connects to the service by using REST API calls. When a new document is uploaded to the service, the service extracts the document metadata. Usage statistics for the app show significant increases in app usage. The extraction process is CPU-intensive. You plan to modify the API to use a queue. You need to ensure that the solution scales, handles request spikes, and reduces costs between request spikes. What should you do?

Correct Answer: Configure Azure Container Service to retrieve items from a queue and run across a pool of virtual machine (VM) nodes using the extraction logic.

You have the Azure virtual machines shown in the following table. You have a Recovery Services vault that protects VM1 and VM2. You need to protect VM3 and VM4 by using Recovery Services. What should you do first?

Correct Answer: Create a storage account

What should you create to configure AG2?

Correct Answer: an additional public IP address

You need to configure AG1. What should you create?

Correct Answer: a basic listener

You need to meet the technical requirement for VM4. What should you create and configure?

Correct Answer: an Azure Logic App

You need to configure a host name for WebApp2. What should you do first?

Correct Answer: In the public DNS zone of contoso.onmicrosoft.com, add an NS record

You need to prepare the environment to meet the authentication requirements. Which two actions should you perform? Each correct answer presents part of the solution NOTE: Each correct selection is worth one point.

Correct Answer: Install the Active Directory Federation Services (AD FS) role on a domain controller in the Miami office

You need to recommend a solution to automate the configuration for the finance department users. The solution must meet the technical requirements. What should you include in the recommendation?

Correct Answer: Azure AD Identity Protection

You create an Azure virtual machine named VM1 in a resource group named RG1. You discover that VM1 performs slower than expected. You need to capture a network trace on VM1. What should you do?

Correct Answer: From Diagnostic settings for VM1, configure the log level of the diagnostic agent.

You have an Azure Active Directory (Azure AD) domain that contains 5,000 user accounts. You create a new user account named AdminUser1. You need to assign the User administrator administrative role to AdminUser1. What should you do from the user account properties?

Correct Answer: From the Licenses blade, assign a new license

A company plans to use third-party application software to perform complex data analysis processes. The software will use up to 500 identical virtual machines (VMs) based on an Azure Marketplace VM image. You need to design the infrastructure for the third-party application server. The solution must meet the following requirements: ✑ The number of VMs that are running at any given point in time must change when the user workload changes. ✑ When a new version of the application is available in Azure Marketplace it must be deployed without causing application downtime. ✑ Use VM scale sets. ✑ Minimize the need for ongoing maintenance. Which two technologies should you recommend? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

Correct Answer: single placement group

You have two subscriptions named Subscription1 and Subscription2. Each subscription is associated to a different Azure AD tenant. Subscription1 contains a virtual network named VNet1. VNet1 contains an Azure virtual machine named VM1 and has an IP address space of 10.0.0.0/16. Subscription2 contains a virtual network named VNet2. Vnet2 contains an Azure virtual machine named VM2 and has an IP address space of 10.10.0.0/24. You need to connect VNet1 to VNet2. What should you do first?

Correct Answer: Move VM1 to Subscription2.

You create a social media application that users can use to upload images and other content. Users report that adult content is being posted in an area of the site that is accessible to and intended for young children. You need to automatically detect and flag potentially offensive content. The solution must not require any custom coding other than code to scan and evaluate images. What should you implement?

Correct Answer: Computer Vision API

You need to resolve the licensing issue before you attempt to assign the license again. What should you do?

Correct Answer: From the Profile blade, modify the usage location

You discover that VM3 does NOT meet the technical requirements. You need to verify whether the issue relates to the NSGs. What should you use?

Correct Answer: Diagnose and solve problems in Traffic Manager profiles

Your company has an Azure subscription. You enable multi-factor authentication (MFA) for all users. The company's help desk reports an increase in calls from users who receive MFA requests while they work from the company's main office. You need to prevent the users from receiving MFA requests when they sign in from the main office. What should you do?

Correct Answer: From Azure Active Directory (Azure AD), configure organizational relationships.

You have an Azure Active Directory (Azure AD) tenant. You have an existing Azure AD conditional access policy named Policy1. Policy1 enforces the use of Azure AD-joined devices when members of the Global Administrators group authenticate to Azure AD from untrusted locations. You need to ensure that members of the Global Administrators group will also be forced to use multi-factor authentication when authenticating from untrusted locations. What should you do?

Correct Answer: From the Azure portal, modify session control of Policy1.

You have two Azure Active Directory (Azure AD) tenants named contoso.com and fabrikam.com. You have a Microsoft account that you use to sign in to both tenants. You need to configure the default sign-in tenant for the Azure portal. What should you do?

Correct Answer: From the Azure portal, configure the portal settings

You need to define a custom domain name for Azure AD to support the planned infrastructure. Which domain name should you use?

Correct Answer: humongousinsurance.com

You need to resolve the delivery API error. What should you do?

Correct Answer: Implement simple retry by using the EnableRetryOnFailure feature of Entity Framework.

You have an Azure subscription named Subscription1 that contains an Azure virtual machine named VM1. VM1 is in a resource group named RG1. VM1 runs services that will be used to deploy resources to RG1. You need to ensure that a service running on VM1 can manage the resources in RG1 by using the identity of VM1. What should you do first?

Correct Answer: From the Azure portal, modify the Access control (IAM) settings of VM1.

You have an on-premises network that contains a Hyper-V host named Host1. Host1 runs Windows Server 2016 and hosts 10 virtual machines that run Windows Server 2016. You plan to replicate the virtual machines to Azure by using Azure Site Recovery. You create a Recovery Services vault named ASR1 and a Hyper-V site named Site1. You need to add Host1 to ASR1. What should you do?

Correct Answer: ✑ Download the installation file for the Azure Site Recovery Provider.

You sign up for Azure Active Directory (Azure AD) Premium. You need to add a user named admin1@contoso.com ad an administrator on all the computers that will be joined to the Azure AD domain. What should you configure in Azure AD?

Correct Answer: Providers from the MFA Server blade

You are responsible for mobile app development for a company. The company develops apps on Windows Mobile, IOS, and Android. You plan to integrate push notifications into every app. You need to be able to send users alerts from a backend server. Which two options can you use to achieve this goal? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

Correct Answer: Azure Notification Hubs

You need to implement the purchase requirement. What should you do?

Correct Answer: Use the Bot Framework REST API conversation operations to send the user's voice and the Speech Service API to recognize intents.

You have an Azure subscription named Subscription1. Subscription1 contains the resource groups in the following table. RG1 has a web app named WebApp1. WebApp1 is located in West Europe. You move WebApp1 to RG2. What is the effect of the move?

Correct Answer: The App Service plan for WebApp1 moves to North Europe. Policy1 applies to WebApp1.

You need to meet the security requirements. What should you use?

Correct Answer: Bot Framework Portal

You have a resource group named RG1 that contains the following: ✑ A virtual network that contains two subnets named Subnet1 and Subnet2 ✑ An Azure Storage account named contososa1 ✑ An Azure firewall deployed to Subnet2 You need to ensure that contososa1 is accessible from Subnet1 over the Azure backbone network. What should you do?

Correct Answer: Implement a virtual network service endpoint.

You create the following Azure role definition. { "Name": "Role1", "Id": "80808080-8080-8080-8080-808080808080", IsCustom : false, "Description": "", "Actions" : [ "Microsoft.Storage/*/read", "Microsoft.Network/*/read", "Microsoft.Compute/*/read", "Microsoft.Compute/virtualMachines/start/action", "Microsoft.Compute/virtualMachines/restart/action", "Microsoft.Authorization/*/read"], "NotActions": [], "DataActions": [], "NotDataActions": [], "AssignableScopes": [] } You need to create Role1 by using the role definition. Which two values should you modify before you create Role1? Each correct answer presents part of solution. NOTE: Each correct selection is worth one point.

Correct Answer: AssignableScopes

You have an Azure virtual machine named VM1 that you use for testing. VM1 is protected by Azure Backup. You delete VM1. You need to remove the backup data stored for VM1. What should you do first?

Correct Answer: Delete the storage account

You configure Azure AD Connect for Azure Active Directory Seamless Single Sign-On (Azure AD Seamless SSO) for an on-premises network. Users report that when they attempt to access myapps.microsoft.com, they are prompted multiple times to sign in and are forced to use an account name that ends with onmicrosoft.com. You discover that there is a UPN mismatch between Azure AD and the on-premises Active Directory. You need to ensure that the users can use single-sign on (SSO) to access Azure resources. What should you do first?

Correct Answer: From on-premises network, request a new certificate that contains the Active Directory domain name.

You have an Azure subscription named Subscription1 that contains two Azure networks named VNet1 and VNet2. VNet1 contains a VPN gateway named VPNGW1 that uses static routing. There is a site-to-site VPN connection between your on-premises network and VNet1. On a computer named Client1 that runs Windows 10, you configure a point-to-site VPN connection to VNet1. You configure virtual network peering between VNet1 and VNet2. You verify that you can connect to VNet2 from the on-premises network. Client1 is unable to connect to VNet2. You need to ensure that you can connect Client1 to VNet2. What should you do?

Correct Answer: Select Allow gateway transit on VNet2.

You have an Azure App Service named WebApp1. You plan to add a WebJob named WebJob1 to WebApp1. You need to ensure that WebJob1 is triggered every 15 minutes. What should you do?

Correct Answer: Change the Web.config file to include the 1-31 1-12 1-7 0*/15* CRON expression

Welcome to awslagi.com – Sharing AWS, Google Cloud, Microsoft Azure IT Exams. It's free for all!

Microsoft Azure Architect Technologies

Build Azure architecture skills for technologies and services.

4.8★★★★★(369 ratings)

20,945 studentsIntermediate

Learn to design Azure solutions across compute, storage, networking, and security. The exam focuses on the technical building blocks needed to create reliable cloud architectures. This certification is useful for experienced cloud professionals moving into architecture-focused roles. It helps you design systems that are efficient, scalable, and secure.

What you'll learn

Design Azure technologies- Plan compute and storage- Configure networking- Support identity and security- Build scalable cloud systems

AZ-300

Lectures2

Quizzes0

Duration30 week

Students20,945

$20.00

📢 Unlock Full Access to Success!

"The content displayed here is a promotional preview and contains only 50% of the actual exam database. To access the complete set of updated questions, please upgrade to the Full Version."

👉 Click the button and follow the instructions to secure your full access immediately!