Microsoft AZ-100 Dumps 2019

We provide AZ-100 Exam Questions in two formats. Download PDF & Practice Tests. Pass Microsoft AZ-100 Exam quickly & easily. The AZ-100 PDF type is available for reading and printing. You can print more and practice many times. With the help of our AZ-100 Exam Questions and Answers product and material, you can easily pass the AZ-100 exam.

Free AZ-100 Demo Online For Microsoft Certifitcation:

NEW QUESTION 1
You need to prepare the environment to ensure that the web administrators can deploy the web apps as quickly as possible.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
AZ-100 dumps exhibit

    Answer:

    Explanation: Step 1:
    First you create a storage account using the Azure portal. Step 2:
    Select Automation options at the bottom of the screen. The portal shows the template on the Template tab. Deploy: Deploy the Azure storage account to Azure.
    Step 3:
    Share the template.
    Scenario: Web administrators will deploy Azure web apps for the marketing department. Each web app will be added to a separate resource group. The initial configuration of the web apps will be identical. The web administrators have permission to deploy web apps to resource groups.
    References:
    https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-manager-quickstart-create-templates-u

    NEW QUESTION 2
    You have an Azure subscription named Subscription1.
    You have 5 TB of data that you need to transfer to Subscription. You plan to use an Azure Import/Export job.
    What can you use as the destination of the imported data?

    • A. Azure SQL Database
    • B. Azure Data Factory
    • C. A virtual machine
    • D. Azure Blob storage

    Answer: D

    Explanation: References:
    https://docs.microsoft.com/en-us/azure/storage/common/storage-import-export-service

    NEW QUESTION 3
    You plan to automate the deployment of a virtual machine scale set that uses the Windows Server 2016 Datacenter image.
    You need to ensure that when the scale set virtual machines are provisioned, they have web server components installed.
    Which two actions should you perform? Each correct answer presents part of the solution. NOTE Each correct selection is worth one point.

    • A. Modify the extensionProfile section of the Azure Resource Manager template.
    • B. Create a new virtual machine scale set in the Azure portal.
    • C. Create an Azure policy.
    • D. Create an automation account.
    • E. Upload a configuration script.

    Answer: AB

    Explanation: Virtual Machine Scale Sets can be used with the Azure Desired State Configuration (DSC) extension handler. Virtual machine scale sets provide a way to deploy and manage large numbers of virtual machines, and can elastically scale in and out in response to load. DSC is used to configure the VMs as they come online so they are running the production software.
    References: https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-dsc

    NEW QUESTION 4
    You have an Azure subscription named Subscription1.
    In Subscription1, you create an Azure file share named share1.
    You create a shared access signature (SAS) named SAS1 as shown in the following exhibit.
    AZ-100 dumps exhibit
    To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
    AZ-100 dumps exhibit

      Answer:

      Explanation: Box 1: Will be prompted for credentials
      Azure Storage Explorer is a standalone app that enables you to easily work with Azure Storage data on Windows, macOS, and Linux. It is used for connecting to and managing your Azure storage accounts.
      Box 2: Will have read, write, and list access
      The net use command is used to connect to file shares. References:
      https://docs.microsoft.com/en-us/azure/storage/common/storage-dotnet-shared-access-signature-part-1 https://docs.microsoft.com/en-us/azure/vs-azure-tools-storage-manage-with-storage-explorer?tabs=windows

      NEW QUESTION 5
      You create an Azure Storage account named contosostorage.
      You plan to create a file share named data.
      Users need to map a drive to the data file share from home computers that run Windows 10. Which port should be open between the home computers and the data file share?

      • A. 80
      • B. 443
      • C. 445
      • D. 3389

      Answer: C

      Explanation: Ensure port 445 is open: The SMB protocol requires TCP port 445 to be open; connections will fail if port 445 is blocked.
      References: https://docs.microsoft.com/en-us/azure/storage/files/storage-how-to-use-files-windows

      NEW QUESTION 6
      You have an Azure subscription named Subscription1. Subscription1 contains two Azure virtual machines named VM1 and VM2. VM1 and VM2 run Windows Server 2016.
      VM1 is backed up daily by Azure Backup without using the Azure Backup agent. VM1 is affected by ransomware that encrypts data.
      You need to restore the latest backup of VM1.
      To which location can you restore the backup? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
      AZ-100 dumps exhibit

        Answer:

        Explanation: Box 1: VM1 only
        To restore files or folders from the recovery point, go to the virtual machine and choose the desired recovery point.
        Box 2: A new Azure virtual machine only
        On the Restore configuration blade, you have two choices:
        AZ-100 dumps exhibit Create virtual machine
        AZ-100 dumps exhibit Restore disks
        References:
        https://docs.microsoft.com/en-us/azure/backup/backup-azure-restore-files-from-vm https://docs.microsoft.com/en-us/azure/backup/backup-azure-arm-restore-vms

        NEW QUESTION 7
        You have an Azure Active Directory (Azure AD) tenant named adatum.com. Adatum.com contains the groups in the following table.
        AZ-100 dumps exhibit
        You create two user accounts that are configured as shown in the following table.
        AZ-100 dumps exhibit
        To which groups do User1 and User2 belong? To answer. select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
        AZ-100 dumps exhibit

          Answer:

          Explanation: Box 1: Group 1 only First rule applies
          Box 2: Group1 and Group2 only Both membership rules apply.
          References: https://docs.microsoft.com/en-us/sccm/core/clients/manage/collections/create-collections

          NEW QUESTION 8
          Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
          After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
          You have an Azure subscription that contains 10 virtual networks. The virtual networks are hosted in separate resource groups.
          Another administrator plans to create several network security groups (NSGs) in the subscription.
          You need to ensure that when an NSG is created, it automatically blocks TCP port 8080 between the virtual networks.
          Solution: You create a resource lock, and then you assign the lock to the subscription. Does this meet the goal?

          • A. Yes
          • B. No

          Answer: B

          Explanation: How can I freeze or lock my production/critical Azure resources from accidental deletion? There is way to do this with both ASM and ARM resources using Azure resource lock.
          References:
          https://blogs.msdn.microsoft.com/azureedu/2016/04/27/using-azure-resource-manager-policy-and-azure-lock-to

          NEW QUESTION 9
          Click to expand each objective. To connect to the Azure portal, type https://portal.azure.com in the browser address bar.
          AZ-100 dumps exhibit
          AZ-100 dumps exhibit
          AZ-100 dumps exhibit
          AZ-100 dumps exhibit
          AZ-100 dumps exhibit
          AZ-100 dumps exhibit
          When you are finished performing all the tasks, click the ‘Next’ button.
          Note that you cannot return to the lab once you click the ‘Next’ button. Scoring occur in the background while you complete the rest of the exam.
          Overview
          The following section of the exam is a lab. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design. Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.
          Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.
          Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.
          To start the lab
          You may start the lab by clicking the Next button.
          You plan to create several virtual machines in different availability zones, and then to configure the virtual machines for load balanced connections from the Internet.
          You need to create an IP address resource named ip1006 to support the planned load balancing solution. The solution must minimize costs.
          What should you do from the Azure portal?

            Answer:

            Explanation: We should create a public IP address.
            AZ-100 dumps exhibit At the top, left corner of the portal, select + Create a resource.
            AZ-100 dumps exhibit Enter public ip address in the Search the Marketplace box. When Public IP address appears in the search results, select it.
            AZ-100 dumps exhibit Under Public IP address, select Create.
            AZ-100 dumps exhibit Enter, or select values for the following settings, under Create public IP address, then select Create: Name: ip1006
            SKU: Basic SKU IP Version: IPv6
            IP address assignment: Dynamic Subscription: Select appropriate Resource group: Select appropriate
            References: https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-public-ip-address

            NEW QUESTION 10
            You have an Azure subscription that contains 10 virtual machines.
            You need to ensure that you receive an email message when any virtual machines are powered off, restarted, or deallocated.
            What is the minimum number of rules and action groups that you require?

            • A. three rules and three action groups
            • B. one rule and one action group
            • C. three rules and one action group
            • D. one rule and three action groups

            Answer: C

            Explanation: An action group is a collection of notification preferences defined by the user. Azure Monitor and Service
            Health alerts are configured to use a specific action group when the alert is triggered. Various alerts may use the same action group or different action groups depending on the user's requirements.
            References: https://docs.microsoft.com/en-us/azure/monitoring-and-diagnostics/monitoring-action-groups

            NEW QUESTION 11
            You have an Azure subscription that contains two resource groups named RG1 and RG2. RG2 does not contain any resources. RG1 contains the resources in the following table.
            AZ-100 dumps exhibit
            Which resource can you move to RG2?

            • A. W10_OsDisk
            • B. VNet1
            • C. VNet3
            • D. W10

            Answer: B

            Explanation: When moving a virtual network, you must also move its dependent resources. For example, you must move gateways with the virtual network. VM W10, which is in Vnet1, is not a dependent resource.

            NEW QUESTION 12
            Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
            After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
            You have an Azure subscription named Subscription1. Subscription1 contains a resource group named RG1. RG1 contains resources that were deployed by using templates.
            You need to view the date and time when the resources were created in RG1. Solution: From the RG1 blade, you click Automation script.
            Does this meet the goal?

            • A. Yes
            • B. No

            Answer: B

            NEW QUESTION 13
            Overview
            The following section of the exam is a lab. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.
            Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.
            Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.
            Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.
            To start the lab
            You may start the lab by clicking the Next button.
            Your company plans to store several documents on a public website.
            You need to create a container named bios that will host the documents in the storagelod8095859 storage account. The solution must ensure anonymous access and must ensure that users can browse folders in the container.
            What should you do from the Azure portal?

              Answer:

              Explanation: Azure portal create public container
              To create a container in the Azure portal, follow these steps:
              Step 1. Navigate to your new storage account in the Azure portal.
              Step 2. In the left menu for the storage account, scroll to the lob service section, then select Blobs. Select the + Container button.
              Type a name for your new container: bios
              Set the level of public access to the container: Select anonymous access.
              AZ-100 dumps exhibit
              Step 3. Select OK to create the container. References:
              https://docs.microsoft.com/en-us/azure/storage/blobs/storage-quickstart-blobs-portal

              NEW QUESTION 14
              You plan to deploy five virtual machines to a virtual network subnet.
              Each virtual machine will have a public IP address and a private IP address. Each virtual machine requires the same inbound and outbound security rules.
              What is the minimum number of network interfaces and network security groups that you require? To answer, select the appropriate options in the answer area.
              NOTE: Each correct selection is worth one point.
              AZ-100 dumps exhibit

                Answer:

                Explanation: Box 1: 10
                One public and one private network interface for each of the five VMs. Box 2: 1
                You can associate zero, or one, network security group to each virtual network subnet and network interface in a virtual machine. The same network security group can be associated to as many subnets and network interfaces as you choose.
                References:
                https://docs.microsoft.com/en-us/azure/virtual-network/security-overview

                NEW QUESTION 15
                Click to expand each objective. To connect to the Azure portal, type https://portal.azure.com in the browser address bar.
                AZ-100 dumps exhibit
                AZ-100 dumps exhibit
                AZ-100 dumps exhibit
                When you are finished performing all the tasks, click the ‘Next’ button.
                Note that you cannot return to the lab once you click the ‘Next’ button. Scoring occur in the background while you complete the rest of the exam.
                Overview
                The following section of the exam is a lab. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design. Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.
                Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.
                Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.
                To start the lab
                You may start the lab by clicking the Next button.
                Another administrator attempts to establish connectivity between two virtual networks named VNET1 and VNET2.
                The administrator reports that connections across the virtual networks fail.
                You need to ensure that network connections can be established successfully between VNET1 and VNET2 as quickly as possible.
                What should you do from the Azure portal?

                  Answer:

                  Explanation: You can connect one VNet to another VNet using either a Virtual network peering, or an Azure VPN Gateway.
                  To create a virtual network gateway
                  Step1 : In the portal, on the left side, click +Create a resource and type 'virtual network gateway' in search. Locate Virtual network gateway in the search return and click the entry. On the Virtual network gateway page, click Create at the bottom of the page to open the Create virtual network gateway page.
                  Step 2: On the Create virtual network gateway page, fill in the values for your virtual network gateway.
                  AZ-100 dumps exhibit
                  AZ-100 dumps exhibit
                  Name: Name your gateway. This is not the same as naming a gateway subnet. It's the name of the gateway object you are creating.
                  Gateway type: Select VPN. VPN gateways use the virtual network gateway type VPN.
                  Virtual network: Choose the virtual network to which you want to add this gateway. Click Virtual network to open the 'Choose a virtual network' page. Select the VNet. If you don't see your VNet, make sure the Location field is pointing to the region in which your virtual network is located.
                  Gateway subnet address range: You will only see this setting if you did not previously create a gateway subnet for your virtual network. If you previously created a valid gateway subnet, this setting will not appear.
                  Step 4: Select Create New to create a Gateway subnet.
                  AZ-100 dumps exhibit
                  Step 5: Click Create to begin creating the VPN gateway. The settings are validated and you'll see the "Deploying Virtual network gateway" tile on the dashboard. Creating a gateway can take up to 45 minutes. You may need to refresh your portal page to see the completed status.
                  References:
                  https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-vnet-vnet-resource-manager-portal?

                  NEW QUESTION 16
                  Overview
                  The following section of the exam is a lab. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.
                  Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.
                  Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.
                  Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.
                  To start the lab
                  You may start the lab by clicking the Next button. You plan to host several secured websites on Web01.
                  You need to allow HTTPS over TCP port 443 to Web01 and to prevent HTTP over TCP port 80 to Web01. What should you do from the Azure portal?

                    Answer:

                    Explanation: You can filter network traffic to and from Azure resources in an Azure virtual network with a network security group. A network security group contains security rules that allow or deny inbound network traffic to, or outbound network traffic from, several types of Azure resources.
                    A network security group contains security rules that allow or deny inbound network traffic to, or outbound network traffic from, several types of Azure resources.
                    Step A: Create a network security group
                    A1. Search for and select the resource group for the VM, choose Add, then search for and select Network security group.
                    A2. Select Create.
                    AZ-100 dumps exhibit
                    The Create network security group window opens. A3. Create a network security group
                    Enter a name for your network security group.
                    Select or create a resource group, then select a location. A4. Select Create to create the network security group.
                    Step B: Create an inbound security rule to allows HTTPS over TCP port 443 B1. Select your new network security group.
                    B2. Select Inbound security rules, then select Add. B3. Add inbound rule
                    B4. Select Advanced.
                    From the drop-down menu, select HTTPS.
                    You can also verify by clicking Custom and selecting TCP port, and 443. B5. Select Add to create the rule.
                    Repeat step B2-B5 to deny TCP port 80
                    B6. Select Inbound security rules, then select Add. B7. Add inbound rule
                    B8. Select Advanced.
                    Clicking Custom and selecting TCP port, and 80. B9. Select Deny.
                    Step C: Associate your network security group with a subnet
                    Your final step is to associate your network security group with a subnet or a specific network interface. C1. In the Search resources, services, and docs box at the top of the portal, begin typing Web01. When the
                    Web01 VM appears in the search results, select it.
                    C2. Under SETTINGS, select Networking. Select Configure the application security groups, select the Security Group you created in Step A, and then select Save, as shown in the following picture:
                    AZ-100 dumps exhibit
                    References:
                    https://docs.microsoft.com/en-us/azure/virtual-network/tutorial-filter-network-traffic

                    NEW QUESTION 17
                    You need to prepare the environment to meet the authentication requirements.
                    Which two actions should you perform? Each correct answer presents part of the solution.
                    NOTE Each correct selection is worth one point.

                    • A. Azure Active Directory (AD) Identity Protection and an Azure policy
                    • B. a Recovery Services vault and a backup policy
                    • C. an Azure Key Vault and an access policy
                    • D. an Azure Storage account and an access policy

                    Answer: BD

                    Explanation: D: Seamless SSO works with any method of cloud authentication - Password Hash Synchronization or Pass-through Authentication, and can be enabled via Azure AD Connect.
                    B: You can gradually roll out Seamless SSO to your users. You start by adding the following Azure AD URL to all or selected users' Intranet zone settings by using Group Policy in Active Directory: https://autologon.microsoftazuread-sso.com

                    Topic 2, Contoso Ltd
                    Overview
                    Contoso, Ltd. is a manufacturing company that has offices worldwide. Contoso works with partner organizations to bring products to market.
                    Contoso products are manufactured by using blueprint files that the company authors and maintains.
                    Existing Environment
                    Currently, Contoso uses multiple types of servers for business operations, including the following:
                    File servers
                    Domain controllers
                    Microsoft SQL Server servers
                    Your network contains an Active Directory forest named contoso.com. All servers and client computers are joined to Active Directory.
                    You have a public-facing application named App1. App1 is comprised of the following three tiers:
                    A SQL database
                    A web front end
                    A processing middle tier
                    Each tier is comprised of five virtual machines. Users access the web front end by using HTTPS only.
                    Requirements Planned Changes
                    Contoso plans to implement the following changes to the infrastructure: Move all the tiers of App1 to Azure.
                    Move the existing product blueprint files to Azure Blob storage.
                    Create a hybrid directory to support an upcoming Microsoft Office 365 migration project.
                    Technical Requirements
                    Contoso must meet the following technical requirements:
                    Move all the virtual machines for App1 to Azure.
                    Minimize the number of open ports between the App1 tiers.
                    Ensure that all the virtual machines for App1 are protected by backups.
                    Copy the blueprint files to Azure over the Internet.
                    Ensure that the blueprint files are stored in the archive storage tier.
                    Ensure that partner access to the blueprint files is secured and temporary.
                    Prevent user passwords or hashes of passwords from being stored in Azure.
                    Use unmanaged standard storage for the hard disks of the virtual machines.
                    Ensure that when users join devices to Azure Active Directory (Azure AD), the users use a mobile phone to verify their identity.
                    Minimize administrative effort whenever possible.
                    User Requirements
                    Contoso identifies the following requirements for users:
                    Ensure that only users who are part of a group named Pilot can join devices to Azure AD. Designate a new user named Admin1 as the service administrator of the Azure subscription. Ensure that a new user named User3 can create network objects for the Azure subscription.

                    NEW QUESTION 18
                    Overview
                    The following section of the exam is a lab. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.
                    Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.
                    Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.
                    Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.
                    To start the lab
                    You may start the lab by clicking the Next button.
                    You plan to connect several virtual machines to the VNET01-USEA2 virtual network.
                    In the Web-RGlod8095859 resource group, you need to create a virtual machine that uses the Standard_B2ms size named Web01 that runs Windows Server 2016. Web01 must be added to an availability set.
                    What should you do from the Azure portal?

                      Answer:

                      Explanation: Step 1. Choose Create a resource in the upper left-hand corner of the Azure portal.
                      Step 2. In the Basics tab, under Project details, make sure the correct subscription is selected and then choose Web-RGlod8095859 resource group
                      AZ-100 dumps exhibit
                      Step 3. Under Instance details type/select: Virtual machine name: Web01
                      Image: Windows Server 2016 Size: Standard_B2ms size Leave the other defaults.
                      AZ-100 dumps exhibit
                      Step 4. Finish the Wizard

                      NEW QUESTION 19
                      You have an Active Directory forest named contoso.com.
                      You install and configure Azure AD Connect to use password hash synchronization as the single sign-on (SSO) method. Staging mode is enabled.
                      You review the synchronization results and discover that the Synchronization Service Manager does not display any sync jobs.
                      You need to ensure that the synchronization completes successfully. What should you do?

                      • A. From Synchronization Service Manager, run a full import.
                      • B. Run Azure AD Connect and set the SSO method to Pass-through Authentication.
                      • C. From Azure PowerShell, run Start-AdSyncSyncCycle -PolicyType Initial.
                      • D. Run Azure AD Connect and disable staging mode.

                      Answer: D

                      Explanation: Staging mode must be disabled. If the Azure AD Connect server is in staging mode, password hash synchronization is temporarily disabled.
                      References:
                      https://docs.microsoft.com/en-us/azure/active-directory/connect/active-directory-aadconnectsync-troubleshoot-p

                      NEW QUESTION 20
                      You have an Azure Active Directory (Azure AD) tenant named contosocloud.onmicrosoft.com. Your company has a public DNS zone for contoso.com.
                      You add contoso.com as a custom domain name to Azure AD. You need to ensure that Azure can verify the domain name. Which type of DNS record should you create?

                      • A. PTR
                      • B. MX
                      • C. NSEC3
                      • D. RRSIG

                      Answer: B

                      100% Valid and Newest Version AZ-100 Questions & Answers shared by Certleader, Get Full Dumps HERE: https://www.certleader.com/AZ-100-dumps.html (New 106 Q&As)