Microsoft AZ-102 Dumps 2019

We provide AZ-102 Study Guides in two formats. Download PDF & Practice Tests. Pass Microsoft AZ-102 Exam quickly & easily. The AZ-102 PDF type is available for reading and printing. You can print more and practice many times. With the help of our AZ-102 Braindumps product and material, you can easily pass the AZ-102 exam.

Online AZ-102 free questions and answers of New Version:

NEW QUESTION 1
You have an Azure subscription named Subscnption1 that contains an Azure virtual machine named VM1. VM1 is in a resource group named RG1.
VM1 runs services that will be used to deploy resources to RG1.
You need to ensure that a service running on VM1 can manage the resources in RG1 by using the identity of VM1. What should you do fit -

  • A. From the Azure portal modify the Access control (1AM) settings of VM1.
  • B. From the Azure portal, modify the Policies settings of RG1.
  • C. From the Azure portal, modify the value of the Managed Service Identity option for VM1.
  • D. From the Azure portal, modify the Access control (IAM) settings of RG1.

Answer: C

Explanation: A managed identity from Azure Active Directory allows your app to easily access other AADprotected
resources such as Azure Key Vault. The identity is managed by the Azure platform and does not require you to provision or rotate any secrets.
User assigned managed identities can be used on Virtual Machines and Virtual Machine Scale Sets. References:
https://docs.microsoft.com/en-us/azure/app-service/app-service-managed-service-identity

NEW QUESTION 2
HOT SPOT
You have an Azure subscription named Subscription1.
You have a virtualization environment that contains the virtualization servers in the following table.
AZ-102 dumps exhibit
The virtual machines are configured as shown in the following table.
AZ-102 dumps exhibit
All the virtual machines use basic disks. VM1 is protected by using BitLocker Drive Encryption (BitLocker).
You plan to use Azure Site Recovery to migrate the virtual machines to Azure.
Which virtual machines can you migrate? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
AZ-102 dumps exhibit

    Answer:

    Explanation: Box 1: VM3
    Not VM1 as Bitlocker is not supported. BitLocker must be disabled before you enable replication for a VM.
    Not VM2 as maximum Operating system disk size for a generation VM is 2,048 GB. Box 2: VMA and VMB only
    Not VMC as the max data disk size is 4,095 GB References:
    https://docs.microsoft.com/en-us/azure/site-recovery/hyper-v-azure-support-matrix https://docs.microsoft.com/en-us/azure/site-recovery/vmware-physical-azure-supportmatrix# azure-vm-requirements

    NEW QUESTION 3
    You have an Azure subscription that contains a virtual machine named VM1. VM1 hosts a line-ofbusiness application that is available 24 hours a day. VM1 has one network interface and one
    managed disk. VM1 uses the D4s v3 size.
    You plan to make the following changes to VM1: Change the size to D8s v3.
    Add a 500-GB managed disk. Add the Puppet Agent extension.
    Attach an additional network interface. Which change will cause downtime for VM1?

    • A. Add a 500-GB managed disk.
    • B. Attach an additional network interface.
    • C. Add the Puppet Agent extension.
    • D. Change the size to D8s v3.

    Answer: D

    Explanation: While resizing the VM it must be in a stopped state.
    References: https://azure.microsoft.com/en-us/blog/resize-virtual-machines/

    NEW QUESTION 4
    HOT SPOT
    You need to identify the storage requirements for Contoso.
    For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.
    AZ-102 dumps exhibit

      Answer:

      Explanation:
      Box 1: Yes
      Contoso is moving the existing product blueprint files to Azure Blob storage.
      Use unmanaged standard storage for the hard disks of the virtual machines. We use Page Blobs for these.
      Box 2: No
      Box 3: No

      Case Study: 3
      Mix Questions

      NEW QUESTION 5
      You have an Azure DNS zone named adatum.com. You need to delegate a subdomain named research.adatum.com to a different DNS server in Azure. What should you do?

      • A. Create an PTR record named research in the adatum.com zone.
      • B. Create an NS record named research in the adatum.com zone.
      • C. Modify the SOA record of adatum.com.
      • D. Create an A record named “.research in the adatum.com zon

      Answer: D

      Explanation: Configure A records for the domains and sub domains.
      References: http://www.stefanjohansson.org/2012/12/how-to-configure-custom-dns-names-formultiple- subdomain-based-azure-web-sites/

      NEW QUESTION 6
      DRAG DROP
      You have an Azure subscription that contains the following resources:
      • a virtual network named VNet1
      • a replication policy named ReplPolicy1
      • a Recovery Services vault named Vault1
      • an Azure Storage account named Storage1
      You have an Amazon Web Services (AWS) EC2 virtual machine named VM1 that runs Windows Server You need to migrate VM1 to VNet1 by using Azure Site Recovery.
      Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
      AZ-102 dumps exhibit

        Answer:

        Explanation: Step 1: Deploy an EC2 virtual machine as a configuration server Prepare source include:
        Use an EC2 instance that's running Windows Server 2012 R2 to create a configuration server and register it with your recovery vault.
        Configure the proxy on the EC2 instance VM you're using as the configuration server so that it can access the service URLs.
        Step 2: Install Azure Site Recovery Unified Setup.
        Download Microsoft Azure Site Recovery Unified Setup. You can download it to your local machine and then copy it to the VM you're using as the configuration server.
        Step 3: Enable replication for VM1.
        Enable replication for each VM that you want to migrate. When replication is enabled, Site Recovery automatically installs the Mobility service.
        References:
        https://docs.microsoft.com/en-us/azure/site-recovery/migrate-tutorial-aws-azure

        NEW QUESTION 7
        You need to deploy an Azure load balancer named Ib 1015 to your Azure subscription. The solution must meet the following requirements:
        -Support the load balancing of IP traffic from the Internet to Azure virtual machines connected to VNET1016 \subnet0.
        -Prov.de 4 Service level Agreement (SWJ of 99.99 percent ability for the Azure virtual machines.
        -Minimize Azure-related costs.
        What should you do from the Azure portal?
        To complete this task, you do NOT need to wait for the deployment to complete. Once the deployment start in Azure, you can move to the next task.

          Answer:

          Explanation: Step 1:
          On the top left-hand side of the screen, click Create a resource > Networking > Load Balancer. Step 2:
          In the Create a load balancer page enter these values for the load balancer: myLoadBalancer - for the name of the load balancer.
          Internal - for the type of the load balancer. Basic - for SKU version.
          Microsoft guarantees that apps running in a customer subscription will be available 99.99% of the time.
          VNET1016\subnet0 - for subnet that you choose from the list of existing subnets.
          Step 3: Accept the default values for the other settings and click Create to create the load balancer.

          NEW QUESTION 8
          DRAG DROP
          You have an Azure subscription that contains a storage account.
          You have an on-premises server named Server1 that runs Window Server 2016. Server1 has 2 TB of data.
          You need to transfer the data to the storage account by using the Azure Import/Export service.
          In which order should you perform the actions? To answer, move all actions from the list of actions to the answer area and arrange them in the correct order.
          NOTE: More than one order of answer choices is correct. You will receive credit for any of the correct orders you select.
          AZ-102 dumps exhibit

            Answer:

            Explanation: AZ-102 dumps exhibit

            NEW QUESTION 9
            Note: This questions is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
            After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
            You have an Azure subscription named Subscription1. Subscription1 contains a resource group named RG1. RG1 contains resources that were deployed by using templates.
            You need to view the date and time when the resources were created in RG1.
            Solution: From the Subscriptions blade, you select the subscription, and then click Programmatic deployment.
            Does this meet the goal?

            • A. Yes
            • B. No

            Answer: B

            NEW QUESTION 10
            HOT SPOT
            You plan to create a new Azure Active Directory (Azure AD) role.
            You need to ensure that the new role can view all the resources in the Azure subscription and issue support requests to Microsoft. The solution must use the principle of least privilege.
            How should you complete the JSON definition? To answer, select the appropriate options in the answer area.
            NOTE: Each correct selection is worth one point.
            AZ-102 dumps exhibit

              Answer:

              Explanation: Box 1: "*/read",
              */read lets you view everything, but not make any changes. Box 2: " Microsoft.Support/*"
              The action Microsoft.Support/* enables creating and management of support tickets. References:
              https://docs.microsoft.com/en-us/azure/role-based-access-control/tutorial-custom-role-powershell https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles

              NEW QUESTION 11
              You need to define a custom domain name for Azure AD to support the planned infrastructure. Which domain name should you use?

              • A. ad.humongousinsurance.com
              • B. humongousinsurance.onmicrosoft.com
              • C. humongousinsurance.local
              • D. humongousinsurance.com

              Answer: D

              Explanation: Every Azure AD directory comes with an initial domain name in the form of domainname.onmicrosoft.com. The initial domain name cannot be changed or deleted, but you can add your corporate domain name to Azure AD as well. For example, your organization probably has other domain names used to do business and users who sign in using your corporate domain name. Adding custom domain names to Azure AD allows you to assign user names in the directory that are familiar to your users, such as ‘alice@contoso.com.’ instead of 'alice@domain name.onmicrosoft.com'.
              Scenario:
              Network Infrastructure: Each office has a local data center that contains all the servers for that office. Each office has a dedicated connection to the Internet.
              Humongous Insurance has a single-domain Active Directory forest named humongousinsurance.com Planned Azure AD Infrastructure: The on-premises Active Directory domain will be synchronized to Azure AD.
              References: https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/add-customdomain

              NEW QUESTION 12
              You have an Azure subscription that contains a policy-based virtual network gateway named GW1 and a virtual network named VNet1. You need to ensure that you can configure a point-to-site connection from VNet1 to an on-premises computer. Which two actions should you perform? Each correct answer presents part of the solution.
              NOTE: Each correct selection is worth one point.

              • A. Reset GW1.
              • B. Add a service endpoint to VNet1.
              • C. Add a connection to GW1.
              • D. Add a public IP address space to VNet1.
              • E. Delete GWL
              • F. Create a route-based virtual network gatewa

              Answer: EF

              Explanation: E: Policy-based VPN devices use the combinations of prefixes from both networks to define how traffic is encrypted/decrypted through IPsec tunnels. It is typically built on firewall devices that perform packet filtering. IPsec tunnel encryption and decryption are added to the packet filtering and processing engine.
              F: A VPN gateway is used when creating a VPN connection to your on-premises network.
              Route-based VPN devices use any-to-any (wildcard) traffic selectors, and let routing/forwarding tables direct traffic to different IPsec tunnels. It is typically built on router platforms where each IPsec tunnel is modeled as a network interface or VTI (virtual tunnel interface).
              Incorrect Answers:
              D: Point-to-Site connections do not require a VPN device or a public-facing IP address. References:
              https://docs.microsoft.com/en-us/azure/vpn-gateway/create-routebased-vpn-gateway-portal https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-connect-multiple-policybasedrm- ps

              Case Study: 10
              Lab 2 Overview
              This is a lab or performance-based testing (PBT) section.
              The following section of the exam is a lab. In this section, you will perform a set of tasks m a live environment. While most liable to you as it would be m a live environment, some functionality (e g, copy and paste, ability to having sites) will not be possible by design.
              Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn't matter how you accomplish the lab9s0 and all other sections of the exam in the time provided.
              Please note that once you submit your work by clicking the Next button within a lab. you will NOT be able to return to the tab.
              AZ-102 dumps exhibit
              AZ-102 dumps exhibit
              AZ-102 dumps exhibit
              To connect to Azure portal, type https://portal.azure.com in te browser address bar.

              NEW QUESTION 13
              You have an Azure subscription that contains a storage account named account1.
              You plan to upload the disk files of a virtual machine to account1 from your on-premises network. The on-premises network uses a public IP address space of 131.107.1.0/24.
              You plan to use the disk files to provision an Azure virtual machine named VM1. VM1 will be attached to a virtual network named VNet1. VNet1 uses an IP address space of 192.168.0.0/24. You need to configure account1 to meet the following requirements:
              Ensure that you can upload the disk files to account1. Ensure that you can attach the disks to VM1. Prevent all other access to account1.
              Which two actions should you perform? Each correct selection presents part of the solution. NOTE: Each correct selection is worth one point.

              • A. From the Firewalls and virtual networks blade of account1, add the 131.107.1.0/24 IP address range.
              • B. From the Firewalls and virtual networks blade of account1, select Selected networks.
              • C. From the Firewalls and virtual networks blade of acount1, add VNet1.
              • D. From the Firewalls and virtual networks blade of account1, select Allow trusted Microsoft services toaccess this storage account.
              • E. From the Service endpoints blade of VNet1, add a service endpoin

              Answer: BE

              Explanation: B: By default, storage accounts accept connections from clients on any network. To limit access to selected networks, you must first change the default action.
              Azure portal
              Navigate to the storage account you want to secure.
              Click on the settings menu called Firewalls and virtual networks.
              To deny access by default, choose to allow access from 'Selected networks'. To allow traffic from all networks, choose to allow access from 'All networks'.
              Click Save to apply your changes.
              E: Grant access from a Virtual Network
              Storage accounts can be configured to allow access only from specific Azure Virtual Networks. By enabling a Service Endpoint for Azure Storage within the Virtual Network, traffic is ensured an optimal route to the Azure Storage service. The identities of the virtual network and the subnet are also transmitted with each request.
              References: https://docs.microsoft.com/en-us/azure/storage/common/storage-network-security

              NEW QUESTION 14
              Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals.
              Some question sets might have more than one correct solution, while others might not have a correct solution.
              After you answer a question in this section, you will NOT be able to return to these questions will not appear m the review screen.
              You manage a virtual network named VNetl1 that is hosted in the West US Azure region. VNetl1 hosts two virtual machines named VM1 and VM2 that run Windows Server. You need to inspect all the network traffic from VM1 to VM2 for a period of three hours. Solution: From Azure Network Watcher, you create a packet capture.
              Does this meet the goal?

              • A. Yes
              • B. No

              Answer: A

              Explanation: Azure Network Watcher provides tools to monitor, diagnose, view metrics, and enable or disable logs for resources in an Azure virtual network.
              Capture packets to and from a VM
              Advanced filtering options and fine-tuned controls, such as the ability to set time and size limitations, provide versatility. The capture can be stored in Azure Storage, on the VM's disk, or both. You can then analyze the capture file using several standard network capture analysis tools.
              Network Watcher variable packet capture allows you to create packet capture sessions to track traffic to and from a virtual machine. Packet capture helps to diagnose network anomalies both reactively and proactivity.
              References:
              https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-monitoring-overview

              NEW QUESTION 15
              HOT SPOT
              You have peering configured as shown in the following exhibit.
              AZ-102 dumps exhibit
              Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
              NOTE: Each correct selection is worth one point.
              AZ-102 dumps exhibit

                Answer:

                Explanation: Box 1: vNET6 only
                Box 2: Modify the address space
                The virtual networks you peer must have non-overlapping IP address spaces.
                References: https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-managepeering#requirements-and-constraints

                NEW QUESTION 16
                Note: This question is part of a series questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
                After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
                You manage a virtual network named Vnet1 that is hosted in the West US Azure region. VNet hosts two virtual machines named VM1 and VM2 run Windows Server.
                You need to inspect all the network traffic from VM1 to VM2 for a period of three hours. Solution: From Azure Network Watcher, you create a connection monitor.
                Does this meet the goal?

                • A. YES
                • B. NO

                Answer: A

                Explanation: Azure Network Watcher provides tools to monitor, diagnose, view metrics, and enable or disable logs for resources in an Azure virtual network.
                Capture packets to and from a VM
                Advanced filtering options and fine-tuned controls, such as the ability to set time and size limitations, provide versatility. The capture can be stored in Azure Storage, on the VM's disk, or both. You can then analyze the capture file using several standard network capture analysis tools.
                Network Watcher variable packet capture allows you to create packet capture sessions to track traffic to and from a virtual machine. Packet capture helps to diagnose network anomalies both reactively and proactivity.
                References:
                https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-monitoring-overview

                NEW QUESTION 17
                HOT SPOT
                You have an Azure subscription named Subscription1. Subscription1 contains the resources in the following table.
                AZ-102 dumps exhibit
                VNet1 is in RG1. VNet2 is in RG2. There is no connectivity between VNet1 and Vnet2.
                An administrator named Admin1 creates an Azure virtual machine named VM1 in RG1. VM1 uses a disk named Disk1 and connects to VNet1. Admin1 then installs a custom application in VM1.
                You need to move the custom application to Vnet2. The solution must minimize administrative effort.
                Which two actions should you perform? To answer, select the appropriate options in the answer area.
                NOTE: Each correct selection is worth one point.
                AZ-102 dumps exhibit

                  Answer:

                  Explanation: You can move a VM and its associated resources to another resource group using the portal. References: https://docs.microsoft.com/en-us/azure/virtual-machines/windows/move-vm

                  Recommend!! Get the Full AZ-102 dumps in VCE and PDF From Certleader, Welcome to Download: https://www.certleader.com/AZ-102-dumps.html (New 195 Q&As Version)