You have an Azure subscription that contains 10 virtual machines on a virtual network. You need to create a graph visualization to display the traffic flow between the virtual machines. What should you do from Azure Monitor?

Correct Answer: From Workbooks, create a workbook.

You have an Azure subscription named Subscription1. Subscription1 contains a virtual machine named VM1. You have a computer Computer1 that runs Windows 10. Computer1 is connected to the Internet. You add a network interface named Interface1 to VM1 as shown in the exhibit. (Click the Exhibit tab.) From Computer1, you attempt to connect to VM1 by using Remote Desktop, but the connection fails. You need to establish a Remote Desktop connection to VM1. What should you do first?

Correct Answer: Attach a network interface

You need to recommend an identity solution that meets the technical requirements. What should you recommend?

Correct Answer: Pass-thorough Authentication and single sign-on (SSO)

What should you create to configure AG2?

Correct Answer: basic routing rules

You need to implement a backup solution for App1 after the application is moved. What should you create first?

Correct Answer: a backup policy

You are designing an Azure solution. The solution must meet the following requirements: Distribute traffic to different pools of dedicated virtual machines (VMs) based on rules Provide SSL offloading capabilities You need to recommend a solution to distribute network traffic. Which technology should you recommend?

Correct Answer: Azure Application Gateway

You need to move the blueprint files to Azure. What should you do?

Correct Answer: Use Azure Storage Explorer to copy the files.

Your company has the groups shown in the following table. The company has an Azure subscription that is associated with an Azure Active Directory (Azure AD) tenant named contoso.com. An administrator named Admin1 attempts to enable Enterprise State Roaming for all the users in the Managers group. Admin1 reports that the options for Enterprise State Roaming are unavailable from Azure AD. You verify that Admin1 is assigned the Global administrator role. You need to ensure that Admin1 can enable Enterprise State Roaming. What should you do?

Correct Answer: Purchase an Azure AD Premium P1 license for each user in the Managers group.

You have two subscriptions named Subscription1 and Subscription2. Each subscription is associated to a different Azure AD tenant. Subscription1 contains a virtual network named VNet1. VNet1 contains an Azure virtual machine named VM1 and has an IP address space of 10.0.0.0/16. Subscription2 contains a virtual network named VNet2. Vnet2 contains an Azure virtual machine named VM2 and has an IP address space of 10.10.0.0/24. You need to connect VNet1 to VNet2. What should you do first?

Correct Answer: Provision virtual network gateways.

You need to implement a backup solution for App1 after the application is moved. What should you create first?

Correct Answer: a Recovery Services vault

You need to resolve the licensing issue before you attempt to assign the license again. What should you do?

Correct Answer: From the Profile blade, modify the usage location

You need to move the blueprint files to Azure. What should you do?

Correct Answer: Use Azure Storage Explorer to copy the files.

You have the Azure SQL Database servers shown in the following table. You plan to specify sqlserver1 as the primary server in a failover group. Which servers can be used as a secondary server?

Correct Answer: sqlserver4 and sqlserver5 only

You have an Azure Active Directory (Azure AD) tenant. You have an existing Azure AD conditional access policy named Policy1. Policy1 enforces the use of Azure AD-joined devices when members of the Global Administrators group authenticate to Azure AD from untrusted locations. You need to ensure that members of the Global Administrators group will also be forced to use multi-factor authentication when authenticating from untrusted locations. What should you do?

Correct Answer: From the Azure portal, modify session control of Policy1.

You need to define a custom domain name for Azure AD to support the planned infrastructure. Which domain name should you use?

Correct Answer: humongousinsurance.local

You have the Azure virtual networks shown in the following table. All the virtual networks are peered. You have the virtual machines shown in the following table. You deploy an Azure Bastion named Bastion1 to VNET1. To which virtual machines can you connect by using Bastion1?

Correct Answer: VM1, VM2, and VM3

You have two Azure SQL Database managed instances in different Azure regions. You plan to configure the managed instances in an instance failover group. What should you configure before you can add the managed instances to the instance failover group?

Correct Answer: a Site-to-Site VPN between the virtual networks that contain the instances

You have an Azure subscription that includes the resources shown in the following table. You attempt to add a role assignment to RG1 as shown in the following exhibit. What should you do to ensure that you can assign VM2 the Reader role for the resource group?

Correct Answer: Assign a managed identity to VM2.

You have an Azure Kubernetes Service (AKS) cluster named Clus1 in a resource group named RG1. An administrator plans to manage Clus1 from an Azure AD-joined device. You need to ensure that the administrator can deploy the YAML application manifest file for a container application. You install the Azure CLI on the device. Which command should you run next?

Correct Answer: az aks install-cli

You have an Azure subscription named Subscription1 that contains an Azure virtual machine named VM1. VM1 is in a resource group named RG1. VM1 runs services that will be used to deploy resources to RG1. You need to ensure that a service running on VM1 can manage the resources in RG1 by using the identity of VM1. What should you do first?

Correct Answer: From the Azure portal, modify the Policies settings of RG1.

You have an Azure Active Directory (Azure AD) tenant linked to an Azure subscription. The tenant contains a group named Admins. You need to prevent users, except for the members of Admins, from using the Azure portal and Azure PowerShell to access the subscription. What should you do?

Correct Answer: From the Azure subscription, assign an Azure policy.

You create an Azure Kubernetes Service (AKS) cluster that uses B2s node size. The cluster configured as shown in the exhibit. (Click the Exhibit tab.) You deploy a containerized application named App1 to the agentPool node pool in AKScluster1. You need to create a containerized application named App2 that runs on four nodes of size DS3 v2. What should you do first?

Correct Answer: Upgrade the AKS cluster.

You have an Azure subscription that contains the storage accounts shown in the following table. You enable Storage Advanced Threat Protection (ATP) for all the storage accounts. You need to identify which storage accounts will generate Storage ATP alerts. Which two storage accounts should you identify? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

Correct Answer: storagecontoso2

You have Azure virtual machines deployed to three Azure regions. Each region contains a single virtual network that has four virtual machines on the same subnet. Each virtual machine runs an application named App1. App1 is accessible by using HTTPS. Currently, the virtual machines are inaccessible from the internet. You need to use Azure Front Door to load balance requests for App1 across all the virtual machines. Which additional Azure service should you provision?

Correct Answer: an internal Azure Load Balancer

You have a virtual network named VNet1 as shown in the exhibit. (Click the Exhibit tab.) No devices are connected to VNet1. You plan to peer VNet1 to another virtual network named VNet2. VNet2 has an address space of 10.2.0.0/16. You need to create the peering. What should you do first?

Correct Answer: Configure a service endpoint on VNet2.

You create an Azure Kubernetes Service (AKS) cluster and an Azure Container Registry. You need to perform continuous deployments of a containerized application to the AKS cluster as soon as the image updates in the registry. What should you use to perform the deployments?

Correct Answer: an Azure Pipelines release pipeline

You configure Azure AD Connect for Azure Active Directory Seamless Single Sign-On (Azure AD Seamless SSO) for an on-premises network. Users report that when they attempt to access myapps.microsoft.com, they are prompted multiple times to sign in and are forced to use an account name that ends with onmicrosoft.com. You discover that there is a UPN mismatch between Azure AD and the on-premises Active Directory. You need to ensure that the users can use single-sign on (SSO) to access Azure resources. What should you do first?

Correct Answer: From the server that runs Azure AD Connect, modify the filtering options.

You have an Azure subscription. You create a custom role in Azure by using the following Azure Resource Manager template. You assign the role to a user named User1. Which action can User1 perform?

Correct Answer: Create resource groups.

You have an Azure web app that runs in a Premium App Service plan. Developers plan to update the app weekly. You need to ensure that the app can be switched from the current version to the new version. The solution must meet the following requirements: ✑ Provide the developers with the ability to test the app in Azure prior to switching versions. Testing must use the same app instance. ✑ Ensure that the app version can be rolled back. ✑ Minimize downtime. What should you do?

Correct Answer: Add an instance of the app to the scale set.

You have an Active Directory forest named contoso.com. You install and configure Azure AD Connect to use password hash synchronization as the single sign-on(SSO) method. Staging mode is enabled. You review the synchronization results and discover that the Synchronization Service Manager does not display any sync jobs. You need to ensure that the synchronization completes successfully. What should you do?

Correct Answer: From Synchronization Service Manager, run a full import.

You have an Azure SQL database named Db1 that runs on an Azure SQL server named SQLserver1. You need to ensure that you can use the query editor on the Azure portal to query Db1. What should you do?

Correct Answer: Configure the Firewalls and virtual networks settings for SQLserver1.

You have an Azure subscription that contains 100 virtual machines. You regularly create and delete virtual machines. You need to identify unattached disks that can be deleted. What should you do?

Correct Answer: From the Azure portal, configure the Advisor recommendations.

Welcome to awslagi.com – Sharing AWS, Google Cloud, Microsoft Azure IT Exams. It's free for all!

Microsoft Azure Architect Technologies

Design Azure architect technologies for enterprise platforms.

4.8★★★★★(276 ratings)

20,942 studentsIntermediate

Learn the technology side of Azure architecture, including compute, network, storage, and security choices. The exam validates the practical technical knowledge required to implement robust cloud designs. This certification is a strong path for architects who need deep platform knowledge. It helps you create solutions that are both technically sound and operationally practical.

What you'll learn

Choose Azure technologies- Design infrastructure components- Support security controls- Plan storage and networking- Build resilient platforms

AZ-303

Lectures2

Quizzes0

Duration30 week

Students20,942

$20.00

📢 Unlock Full Access to Success!

"The content displayed here is a promotional preview and contains only 50% of the actual exam database. To access the complete set of updated questions, please upgrade to the Full Version."

👉 Click the button and follow the instructions to secure your full access immediately!