250-300

You develop the following Azure Resource Manager (ARM) template to create a resource group and deploy an Azure Storage account to the resource group. Which cmdlet should you run to deploy the template?. New-AzResource. New-AzResourceGroupDeployment. New-AzTenantDeployment. New-AzDeployment.

HOTSPOT - You have an Azure App Service app named WebApp1 that contains two folders named Folder1 and Folder2. You need to configure a daily backup of WebApp1. The solution must ensure that Folder2 is excluded from the backup. What should you create first, and what should you use to exclude Folder2? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area: Frist create. To exclude folder2, use.

You plan to deploy several Azure virtual machines that will run Windows Server 2019 in a virtual machine scale set by using an Azure Resource Manager template. You need to ensure that NGINX is available on all the virtual machines after they are deployed. What should you use?. the Publish-AzVMDscConfiguration cmdlet. Azure Application Insights. Azure Custom Script Extension. a Microsoft Endpoint Manager device configuration profile.

HOTSPOT - You have an Azure subscription. The subscription contains a virtual machine that runs Windows 10. You need to join the virtual machine to an Active Directory domain. How should you complete the Azure Resource Manager (ARM) template? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area: "type" :. "Options" : "3" },.

You have an Azure subscription that contains the resources shown in the following table. You need to configure a proximity placement group for VMSS1. Which proximity placement groups should you use?. Proximity2 only. Proximity1, Proximity2, and Proximity3. Proximity1 only. Proximity1 and Proximity3 only.

1 - HOTSPOT - You are creating an Azure Kubernetes Services (AKS) cluster as shown in the following exhibit. 2- Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point. To ensure that you can create Windows containers in AKS1, you must [answer choice]. To ensure that you can integrate AKS1 with an Azure container registry, you modify the [answer choice] setting.

HOTSPOT - You have an Azure subscription that contains an Azure Kubernetes Service (AKS) cluster named Cluster1. Cluster1 hosts a node pool named Pool1 that has four nodes. You need to perform a coordinated upgrade of Cluster1. The solution must meet the following requirements: • Deploy two new nodes to perform the upgrade. • Minimize costs. How should you complete the command? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. az aks nodepool1. -n pool1 -r RG1 -- cluster-name cluster1.

1 - HOTSPOT - You have an Azure subscription. You create the following file named Deploy.json. 2 - You connect to the subscription and run the following commands. 3- For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. The commands will create four new resources. The commands will create storage accounts in the West US Azure region. The first storage account that is created will have a prefix of 0.

You plan to deploy several Azure virtual machines that will run Windows Server 2019 in a virtual machine scale set by using an Azure Resource Manager template. You need to ensure that NGINX is available on all the virtual machines after they are deployed. What should you use?. Azure Custom Script Extension. Deployment Center in Azure App Service. the Publish-AzVMDscConfiguration cmdlet. the New-AzConfigurationAssignment cmdlet.

HOTSPOT - You have an Azure subscription that contains a resource group named RG1. You plan to use an Azure Resource Manager (ARM) template named template1 to deploy resources. The solution must meet the following requirements: • Deploy new resources to RG1. • Remove all the existing resources from RG1 before deploying the new resources. How should you complete the command? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. params.json. RG1 -Mode.

1- HOTSPOT - You have an Azure App Service web app named app1. You configure autoscaling as shown in following exhibit. 2 -You configure the autoscale rule criteria as shown in the following exhibit. 3- Use the drop-down menus to select the answer choice that answers each question based on the information presented in the graphic. NOTE: Each correct selection is worth one point. After CPU usage has reached 80 percent for 15 minutes, [answer choice] will be running. Once the first scale-out instance is created, the minimum time before an additional instance is created will be [answer choice].

You have an Azure subscription. You plan to deploy the Azure container instances shown in the following table. Which instances can you deploy to a container group?. Instance1 only. Instance2 only. Instance1 and Instance2 only. Instance3 and Instance4 only.

You plan to deploy several Azure virtual machines that will run Windows Server 2019 in a virtual machine scale set by using an Azure Resource Manager template. You need to ensure that NGINX is available on all the virtual machines after they are deployed. What should you use?. Azure Custom Script Extension. Deployment Center in Azure App Service. the New-AzConfigurationAssignment cmdlet. Azure AD Application Proxy.

1- HOTSPOT - You have an Azure subscription named Sub1. You plan to deploy a multi-tiered application that will contain the tiers shown in the following table. 2 - You need to recommend a networking solution to meet the following requirements: ✑ Ensure that communication between the web servers and the business logic tier spreads equally across the virtual machines. ✑ Protect the web servers from SQL injection attacks. Which Azure resource should you recommend for each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area: Ensure that communication between the web servers and the business logic tier spreads equally across the virtual machines:. Protect the web servers from SQL injection attacks.

Your company has three offices. The offices are located in Miami, Los Angeles, and New York. Each office contains datacenter. You have an Azure subscription that contains resources in the East US and West US Azure regions. Each region contains a virtual network. The virtual networks are peered. You need to connect the datacenters to the subscription. The solution must minimize network latency between the datacenters. What should you create?. three Azure Application Gateways and one On-premises data gateway. three virtual hubs and one virtual WAN. three virtual WANs and one virtual hub. three On-premises data gateways and one Azure Application Gateway.

HOTSPOT - You plan to deploy five virtual machines to a virtual network subnet. Each virtual machine will have a public IP address and a private IP address. Each virtual machine requires the same inbound and outbound security rules. What is the minimum number of network interfaces and network security groups that you require? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area: Minimum number of network interfaces. Minimum number of network security groups.

1 - You have an Azure subscription that contains the resources shown in the following table. 2- LB1 is configured as shown in the following table. You plan to create new inbound NAT rules that meet the following requirements: ✑ Provide Remote Desktop access to VM1 from the internet by using port 3389. ✑ Provide Remote Desktop access to VM2 from the internet by using port 3389. What should you create on LB1 before you can create the new inbound NAT rules?. a frontend IP address. a load balancing rule. a health probe. a backend pool.

1- HOTSPOT - You have Azure virtual machines that run Windows Server 2019 and are configured as shown in the following table. 2- You create a private Azure DNS zone named adatum.com. You configure the adatum.com zone to allow auto registration from VNET1. Which A records will be added to the adatum.com zone for each virtual machine? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area: A records for VM1. A records for VM2.

HOTSPOT - You have an Azure virtual network named VNet1 that connects to your on-premises network by using a site-to-site VPN. VNet1 contains one subnet named Sunet1. Subnet1 is associated to a network security group (NSG) named NSG1. Subnet1 contains a basic internal load balancer named ILB1. ILB1 has three Azure virtual machines in the backend pool. You need to collect data about the IP addresses that connects to ILB1. You must be able to run interactive queries from the Azure portal against the collected data. What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area: Resource to create. Resource on witch to enable diagnostics.

You have the Azure virtual networks shown in the following table. To which virtual networks can you establish a peering connection from VNet1?. VNet2 andVNet3 only. VNet2 only. VNet3 and VNet4 only. VNet2, VNet3, and VNet4.

You have an Azure subscription that contains a virtual network named VNet1. VNet1 contains four subnets named Gateway, Perimeter, NVA, and Production. The NVA subnet contains two network virtual appliances (NVAs) that will perform network traffic inspection between the Perimeter subnet and the Production subnet. You need to implement an Azure load balancer for the NVAs. The solution must meet the following requirements: ✑ The NVAs must run in an active-active configuration that uses automatic failover. ✑ The load balancer must load balance traffic to two services on the Production subnet. The services have different IP addresses. Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point. Deploy a basic load balancer. Deploy a standard load balancer. Add two load balancing rules that have HA Ports and Floating IP enabled. Add two load balancing rules that have HA Ports enabled and Floating IP disabled. Add a frontend IP configuration, a backend pool, and a health probe. Add a frontend IP configuration, two backend pools, and a health probe.

You have an Azure subscription named Subscription1 that contains two Azure virtual networks named VNet1 and VNet2. VNet1 contains a VPN gateway named VPNGW1 that uses static routing. There is a site-to-site VPN connection between your on-premises network and VNet1. On a computer named Client1 that runs Windows 10, you configure a point-to-site VPN connection to VNet1. You configure virtual network peering between VNet1 and VNet2. You verify that you can connect to VNet2 from the on-premises network. Client1 is unable to connect to VNet2. You need to ensure that you can connect Client1 to VNet2. What should you do?. Download and re-install the VPN client configuration package on Client1. Select Allow gateway transit on VNet1. Select Allow gateway transit on VNet2. Enable BGP on VPNGW1.

1 - HOTSPOT - You have an Azure subscription. The subscription contains virtual machines that run Windows Server 2016 and are configured as shown in the following table. 2- You create a public Azure DNS zone named adatum.com and a private Azure DNS zone named contoso.com. You create a virtual network link for contoso.com as shown in the following exhibit. 3- For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area: When VM1 starts, a record for VM1 is added to the contoso.com DNS zone. When VM2 starts, a record for VM2 is added to the contoso.com DNS zone. When VM3 starts, a record for VM3 is added to the contoso.com DNS zone.

You have an Azure subscription that contains the resources in the following table. To which subnets can you apply NSG1?. the subnets on VNet1 only. the subnets on VNet2 and VNet3 only. the subnets on VNet2 only. the subnets on VNet3 only. the subnets on VNet1, VNet2, and VNet3.

1- DRAG DROP - You have an Azure subscription that contains two virtual networks named VNet1 and VNet2. Virtual machines connect to the virtual networks. The virtual networks have the address spaces and the subnets configured as shown in the following table. 2- You need to add the address space of 10.33.0.0/16 to VNet1. The solution must ensure that the hosts on VNet1 and VNet2 can communicate. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. Select and Place: DE ARRIBA HACIA ABAJO. Recreate_peering_between_VNet1_and_VNet2 Remove_peering_between_Vnet1_and_VNet2 Add_the_10.33.0.0/16_address_space_to_VNet1.

1 - HOTSPOT - You have an Azure subscription that contains the resource groups shown in the following table. 2 -RG1 contains the resources shown in the following table. 3- VM1 is running and connects to NIC1 and Disk1. NIC1 connects to VNET1. RG2 contains a public IP address named IP2 that is in the East US location. IP2 is not assigned to a virtual machine. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area: You can move storaga1 to RG2. You can move NIC1 to RG2. If you move IP2 to RG1, the location of IP2 will change.

You have an Azure web app named webapp1. You have a virtual network named VNET1 and an Azure virtual machine named VM1 that hosts a MySQL database. VM1 connects to VNET1. You need to ensure that webapp1 can access the data hosted on VM1. What should you do?. Deploy an internal load balancer. Peer VNET1 to another virtual network. Connect webapp1 to VNET1. Deploy an Azure Application Gateway.

You create an Azure VM named VM1 that runs Windows Server 2019. VM1 is configured as shown in the exhibit. (Click the Exhibit tab.) You need to enable Desired State Configuration for VM1. What should you do first?. Connect to VM1. Start VM1. Capture a snapshot of VM1. Configure a DNS name for VM1.

You have five Azure virtual machines that run Windows Server 2016. The virtual machines are configured as web servers. You have an Azure load balancer named LB1 that provides load balancing services for the virtual machines. You need to ensure that visitors are serviced by the same web server for each request. What should you configure?. Floating IP (direct server return) to Disabled. Session persistence to None. Floating IP (direct server return) to Enabled. Session persistence to Client IP.

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure subscription that contains the following resources: ✑ A virtual network that has a subnet named Subnet1 ✑ Two network security groups (NSGs) named NSG-VM1 and NSG-Subnet1 ✑ A virtual machine named VM1 that has the required Windows Server configurations to allow Remote Desktop connections NSG-Subnet1 has the default inbound security rules only. NSG-VM1 has the default inbound security rules and the following custom inbound security rule: ✑ Priority: 100 ✑ Source: Any ✑ Source port range: * ✑ Destination: * ✑ Destination port range: 3389 ✑ Protocol: UDP ✑ Action: Allow VM1 has a public IP address and is connected to Subnet1. NSG-VM1 is associated to the network interface of VM1. NSG-Subnet1 is associated to Subnet1. You need to be able to establish Remote Desktop connections from the internet to VM1. Solution: You add an inbound security rule to NSG-Subnet1 that allows connections from the Any source to the *destination for port range 3389 and uses the TCP protocol. You remove NSG-VM1 from the network interface of VM1. Does this meet the goal?. Yes. No.

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure subscription that contains the following resources: ✑ A virtual network that has a subnet named Subnet1 ✑ Two network security groups (NSGs) named NSG-VM1 and NSG-Subnet1 ✑ A virtual machine named VM1 that has the required Windows Server configurations to allow Remote Desktop connections NSG-Subnet1 has the default inbound security rules only. NSG-VM1 has the default inbound security rules and the following custom inbound security rule: ✑ Priority: 100 ✑ Source: Any ✑ Source port range: * ✑ Destination: * ✑ Destination port range: 3389 Protocol: UDP - ✑ Action: Allow VM1 has a public IP address and is connected to Subnet1. NSG-VM1 is associated to the network interface of VM1. NSG-Subnet1 is associated to Subnet1. You need to be able to establish Remote Desktop connections from the internet to VM1. Solution: You add an inbound security rule to NSG-Subnet1 that allows connections from the internet source to the VirtualNetwork destination for port range 3389 and uses the UDP protocol. Does this meet the goal?. Yes. No.

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure subscription that contains the following resources: ✑ A virtual network that has a subnet named Subnet1 ✑ Two network security groups (NSGs) named NSG-VM1 and NSG-Subnet1 ✑ A virtual machine named VM1 that has the required Windows Server configurations to allow Remote Desktop connections NSG-Subnet1 has the default inbound security rules only. NSG-VM1 has the default inbound security rules and the following custom inbound security rule: ✑ Priority: 100 ✑ Source: Any ✑ Source port range: * ✑ Destination: * ✑ Destination port range: 3389 ✑ Protocol: UDP ✑ Action: Allow VM1 has a public IP address and is connected to Subnet1. NSG-VM1 is associated to the network interface of VM1. NSG-Subnet1 is associated to Subnet1. You need to be able to establish Remote Desktop connections from the internet to VM1. Solution: You add an inbound security rule to NSG-Subnet1 and NSG-VM1 that allows connections from the internet source to the VirtualNetwork destination for port range 3389 and uses the TCP protocol. Does this meet the goal?. Yes. No.

add a subnet1 - HOTSPOT - You have a virtual network named VNet1 that has the configuration shown in the following exhibit. 2 - Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point. Hot Area: aBefore a virtual machine on VNet1 can receive an IP address from 192.168.1 0/24, you must first. Before a virtual machine on VNet1 can receive an IP address from 10.2.1 0/24, you must first.

You have an Azure subscription that contains a virtual network named VNET1. VNET1 contains the subnets shown in the following table. Each virtual machine uses a static IP address. You need to create network security groups (NSGs) to meet following requirements: ✑ Allow web requests from the internet to VM3, VM4, VM5, and VM6. ✑ Allow all connections between VM1 and VM2. ✑ Allow Remote Desktop connections to VM1. ✑ Prevent all other network traffic to VNET1. What is the minimum number of NSGs you should create?. 1. 3. 4. 12.

You have an Azure subscription that contains the resources shown in the following table. The Not allowed resource types Azure policy that has policy enforcement enabled is assigned to RG1 and uses the following parameters: Microsoft.Network/virtualNetworks Microsoft.Compute/virtualMachines In RG1, you need to create a new virtual machine named VM2, and then connect VM2 to VNET1. What should you do first?. Remove Microsoft.Compute/virtualMachines from the policy. Create an Azure Resource Manager template. Add a subnet to VNET1. Remove Microsoft.Network/virtualNetworks from the policy.

Your company has an Azure subscription named Subscription1. The company also has two on-premises servers named Server1 and Server2 that run Windows Server 2016. Server1 is configured as a DNS server that has a primary DNS zone named adatum.com. Adatum.com contains 1,000 DNS records. You manage Server1 and Subscription1 from Server2. Server2 has the following tools installed: ✑ The DNS Manager console ✑ Azure PowerShell ✑ Azure CLI 2.0 You need to move the adatum.com zone to an Azure DNS zone in Subscription1. The solution must minimize administrative effort. What should you use?. Azure CLI. Azure PowerShell. the Azure portal. the DNS Manager console.

You have a public load balancer that balances ports 80 and 443 across three virtual machines named VM1, VM2, and VM3. You need to direct all the Remote Desktop Protocol (RDP) connections to VM3 only. What should you configure?. an inbound NAT rule. a new public load balancer for VM3. a frontend IP configuration. a load balancing rule.

1- HOTSPOT - You have an Azure subscription named Subscription1 that contains the virtual networks in the following table. 2- Subscription1 contains the virtual machines in the following table. 3 - In Subscription1, you create a load balancer that has the following configurations: ✑ Name: LB1 ✑ SKU: Basic ✑ Type: Internal ✑ Subnet: Subnet12 ✑ Virtual network: VNET1 For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area: LB1 can balance the traffic between VM1 and VM2. LB1 can balance the traffic between VM3 and VM4. LB1 can balance the traffic between VM5 and VM6.

1 - HOTSPOT - You have an Azure virtual machine that runs Windows Server 2019 and has the following configurations: ✑ Name: VM1 ✑ Location: West US ✑ Connected to: VNET1 ✑ Private IP address: 10.1.0.4 ✑ Public IP addresses: 52.186.85.63 ✑ DNS suffix in Windows Server: Adatum.com You create the Azure DNS zones shown in the following table. 2 - You need to identify which DNS zones you can link to VNET1 and the DNS zones to which VM1 can automatically register. Which zones should you identify? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area: DNS zones that you can link to VNET1. DNS zones to witch VM1 can automatically register.

DRAG DROP - You have an on-premises network that you plan to connect to Azure by using a site-so-site VPN. In Azure, you have an Azure virtual network named VNet1 that uses an address space of 10.0.0.0/16 VNet1 contains a subnet named Subnet1 that uses an address space of 10.0.0.0/24. You need to create a site-to-site VPN to Azure. Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. NOTE: More than one order of answer choice is correct. You will receive credit for any of the correct orders you select. Select and Place: Create_a_VPN_connection Create_a_gateway_subnet Create_a_VPN_gateway Create_a_local_gateway.

1 - You have an Azure subscription that contains the resources in the following table. 2 -VM1 and VM2 are deployed from the same template and host line-of-business applications. You configure the network security group (NSG) shown in the exhibit. (Click the Exhibit tab.) You need to prevent users of VM1 and VM2 from accessing websites on the Internet over TCP port 80. What should you do?. Disassociate the NSG from a network interface. Change the Port_80 inbound security rule. Associate the NSG to Subnet1. Change the DenyWebSites outbound security rule.

You have two subscriptions named Subscription1 and Subscription2. Each subscription is associated to a different Azure AD tenant. Subscription1 contains a virtual network named VNet1. VNet1 contains an Azure virtual machine named VM1 and has an IP address space of 10.0.0.0/16. Subscription2 contains a virtual network named VNet2. VNet2 contains an Azure virtual machine named VM2 and has an IP address space of 10.10.0.0/24. You need to connect VNet1 to VNet2. What should you do first?. Move VM1 to Subscription2. Move VNet1 to Subscription2. Modify the IP address space of VNet2. Provision virtual network gateways.

1- You plan to create an Azure virtual machine named VM1 that will be configured as shown in the following exhibit. 2 - The planned disk configurations for VM1 are shown in the following exhibit. You need to ensure that VM1 can be created in an Availability Zone. Which two settings should you modify? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point. Use managed disks. OS disk type. Availability options. Size. Image.

1 - HOTSPOT - You have an Azure subscription that contains the resources shown in the following table. 2 -VMSS1 is set to VM (virtual machines) orchestration mode. You need to deploy a new Azure virtual machine named VM1, and then add VM1 to VMSS1. Which resource group and location should you use to deploy VM1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area: Resource group. Location.

1 - HOTSPOT - You have an Azure subscription that contains three virtual networks named VNET1, VNET2, and VNET3. Peering for VNET1 is configured as shown in the following exhibit. 2- Peering for VNET2 is configured as shown in the following exhibit. 3- Peering for VNET3 is configured as shown in the following exhibit. How can packets be routed between the virtual networks? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area: Packets from VNET1 can be routed to. Packets from VNET2 can be routed to.

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a computer named Computer1 that has a point-to-site VPN connection to an Azure virtual network named VNet1. The point-to-site connection uses a self-signed certificate. From Azure, you download and install the VPN client configuration package on a computer named Computer2. You need to ensure that you can establish a point-to-site VPN connection to VNet1 from Computer2. Solution: You modify the Azure Active Directory (Azure AD) authentication policies. Does this meet the goal?. Yes. No.

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a computer named Computer1 that has a point-to-site VPN connection to an Azure virtual network named VNet1. The point-to-site connection uses a self-signed certificate. From Azure, you download and install the VPN client configuration package on a computer named Computer2. You need to ensure that you can establish a point-to-site VPN connection to VNet1 from Computer2. Solution: You join Computer2 to Azure Active Directory (Azure AD). Does this meet the goal?. Yes. No.

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure subscription that contains 10 virtual networks. The virtual networks are hosted in separate resource groups. Another administrator plans to create several network security groups (NSGs) in the subscription. You need to ensure that when an NSG is created, it automatically blocks TCP port 8080 between the virtual networks. Solution: You create a resource lock, and then you assign the lock to the subscription. Does this meet the goal?. Yes. No.

You have an Azure subscription named Subscription1. Subscription1 contains a virtual machine named VM1. You have a computer named Computer1 that runs Windows 10. Computer1 is connected to the Internet. You add a network interface named vm1173 to VM1 as shown in the exhibit. (Click the Exhibit tab.) From Computer1, you attempt to connect to VM1 by using Remote Desktop, but the connection fails. You need to establish a Remote Desktop connection to VM1. What should you do first?. Change the priority of the RDP rule. Attach a network interface. Delete the DenyAllInBound rule. Start VM1.

1 - You have the Azure virtual machines shown in the following table. 2- A DNS service is installed on VM1. You configure the DNS servers settings for each virtual network as shown in the following exhibit. You need to ensure that all the virtual machines can resolve DNS names by using the DNS service on VM1. What should you do?. Configure a conditional forwarder on VM1. Add service endpoints on VNET1. Add service endpoints on VNET2 and VNET3. Configure peering between VNET1, VNET2, and VNET3.

You have an Azure subscription that has the public IP addresses shown in the following table. You plan to deploy an Instance of Azure Firewall Premium named FW1. Which IP addresses can you use?. IP2 only. IP1 and IP2 only. IP1, IP2, and IP5 only. IP1, IP2, IP4, and IP5 only.