DS 101-150

You have the Azure resources shown in the following table. You need to deploy a new Azure Firewall policy that will contain mandatory rules for all Azure Firewall deployments. The new policy will be configured as a parent policy for the existing policies. What is the minimum number of additional Azure Firewall policies you should create?. 0. 1. 2. 3.

Your company has an app named App1 that uses data from the on-premises Microsoft SQL Server databases shown in the following table. App1 and the data are used on the first day of the month only. The data is not expected to grow more than 3 percent each year. The company is rewriting App1 as an Azure web app and plans to migrate all the data to Azure. You need to migrate the data to Azure SQL Database and ensure that the database is only available on the first day of each month. Which service tier should you use?. vCore-based General Purpose. DTU-based Standard. vCore-based Business Critical. DTU-based Basic.

You are developing a sales application that will contain several Azure cloud services and handle different components of a transaction. Different cloud services will process customer orders, billing, payment, inventory, and shipping. You need to recommend a solution to enable the cloud services to asynchronously communicate transaction information by using XML messages. What should you include in the recommendation?. Azure Service Fabric. Azure Data Lake. Azure Service Bus. Azure Traffic Manager.

Your company has 300 virtual machines hosted in a VMware environment. The virtual machines vary in size and have various utilization levels. You plan to move all the virtual machines to Azure. You need to recommend how many and what size Azure virtual machines will be required to move the current workloads to Azure. The solution must minimize administrative effort. What should you use to make the recommendation?. Azure Pricing calculator. Azure Advisor. Azure Migrate. Azure Cost Management.

You plan to provision a High Performance Computing (HPC) cluster in Azure that will use a third-party scheduler. You need to recommend a solution to provision and manage the HPC cluster node. What should you include in the recommendation?. Azure Automation. Azure CycleCloud. Azure Purview. Azure Lighthouse.

HOTSPOT - You are designing an Azure App Service web app. You plan to deploy the web app to the North Europe Azure region and the West Europe Azure region. You need to recommend a solution for the web app. The solution must meet the following requirements: ✑ Users must always access the web app from the North Europe region, unless the region fails. ✑ The web app must be available to users if an Azure region is unavailable. ✑ Deployment costs must be minimized. What should you include in the recommendation? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area: Request routing method. Request routing configuration.

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You plan to deploy multiple instances of an Azure web app across several Azure regions. You need to design an access solution for the app. The solution must meet the following replication requirements: ✑ Support rate limiting. ✑ Balance requests between all instances. ✑ Ensure that users can access the app in the event of a regional outage. Solution: You use Azure Traffic Manager to provide access to the app. Does this meet the goal?. Yes. No.

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You plan to deploy multiple instances of an Azure web app across several Azure regions. You need to design an access solution for the app. The solution must meet the following replication requirements: ✑ Support rate limiting. ✑ Balance requests between all instances. ✑ Ensure that users can access the app in the event of a regional outage. Solution: You use Azure Load Balancer to provide access to the app. Does this meet the goal?. Yes. No.

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You plan to deploy multiple instances of an Azure web app across several Azure regions. You need to design an access solution for the app. The solution must meet the following replication requirements: ✑ Support rate limiting. ✑ Balance requests between all instances. ✑ Ensure that users can access the app in the event of a regional outage. Solution: You use Azure Application Gateway to provide access to the app. Does this meet the goal?. Yes. No.

HOTSPOT - Your company has two on-premises sites in New York and Los Angeles and Azure virtual networks in the East US Azure region and the West US Azure region. Each on-premises site has ExpressRoute Global Reach circuits to both regions. You need to recommend a solution that meets the following requirements: ✑ Outbound traffic to the internet from workloads hosted on the virtual networks must be routed through the closest available on-premises site. ✑ If an on-premises site fails, traffic from the workloads on the virtual networks to the internet must reroute automatically to the other site. What should you include in the recommendation? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area: Routing from the virtual networks to the on-premises locations must be configured by using. The automatic routing configuration following a failover must be handled by using.

HOTSPOT - You are designing an application that will use Azure Linux virtual machines to analyze video files. The files will be uploaded from corporate offices that connect to Azure by using ExpressRoute. You plan to provision an Azure Storage account to host the files. You need to ensure that the storage account meets the following requirements: ✑ Supports video files of up to 7 TB ✑ Provides the highest availability possible ✑ Ensures that storage is optimized for the large video files ✑ Ensures that files from the on-premises network are uploaded by using ExpressRoute How should you configure the storage account? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area: Storage account type. Data Redundancy. Networking.

HOTSPOT - A company plans to implement an HTTP-based API to support a web app. The web app allows customers to check the status of their orders. The API must meet the following requirements: ✑ Implement Azure Functions. ✑ Provide public read-only operations. ✑ Prevent write operations. You need to recommend which HTTP methods and authorization level to configure. What should you recommend? To answer, configure the appropriate options in the dialog box in the answer area. NOTE: Each correct selection is worth one point. Hot Area: HTTP methods. Authorization level.

You have an Azure subscription. You need to recommend a solution to provide developers with the ability to provision Azure virtual machines. The solution must meet the following requirements: ✑ Only allow the creation of the virtual machines in specific regions. ✑ Only allow the creation of specific sizes of virtual machines. What should you include in the recommendation?. Azure Resource Manager (ARM) templates. Azure Policy. Conditional Access policies. role-based access control (RBAC).

DRAG DROP - You have an on-premises network that uses an IP address space of 172.16.0.0/16. You plan to deploy 30 virtual machines to a new Azure subscription. You identify the following technical requirements: ✑ All Azure virtual machines must be placed on the same subnet named Subnet1. ✑ All the Azure virtual machines must be able to communicate with all on-premises servers. ✑ The servers must be able to communicate between the on-premises network and Azure by using a site-to-site VPN. You need to recommend a subnet design that meets the technical requirements. What should you include in the recommendation? To answer, drag the appropriate network addresses to the correct subnets. Each network address may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point. Select and Place: 172.16.0.0/16. 172.16.1.0/27. 192.168.0.0/24. 192.168.1.0/27.

You have data files in Azure Blob Storage. You plan to transform the files and move them to Azure Data Lake Storage. You need to transform the data by using mapping data flow. Which service should you use?. Azure Databricks. Azure Storage Sync. Azure Data Factory. Azure Data Box Gateway.

You have an Azure subscription. You need to deploy an Azure Kubernetes Service (AKS) solution that will use Windows Server 2019 nodes. The solution must meet the following requirements: ✑ Minimize the time it takes to provision compute resources during scale-out operations. ✑ Support autoscaling of Windows Server containers. Which scaling option should you recommend?. Kubernetes version 1.20.2 or newer. Virtual nodes with Virtual Kubelet ACI. cluster autoscaler. horizontal pod autoscaler.

HOTSPOT - Your on-premises network contains a file server named Server1 that stores 500 GB of data. You need to use Azure Data Factory to copy the data from Server1 to Azure Storage. You add a new data factory. What should you do next? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area: From Srever1. From the data factory.

You have an Azure subscription. You need to recommend an Azure Kubernetes Service (AKS) solution that will use Linux nodes. The solution must meet the following requirements: ✑ Minimize the time it takes to provision compute resources during scale-out operations. ✑ Support autoscaling of Linux containers. ✑ Minimize administrative effort. Which scaling option should you recommend?. horizontal pod autoscaler. cluster autoscaler. virtual nodes. Virtual Kubelet.

You are designing an order processing system in Azure that will contain the Azure resources shown in the following table. The order processing system will have the following transaction flow: ✑ A customer will place an order by using App1. ✑ When the order is received, App1 will generate a message to check for product availability at vendor 1 and vendor 2. ✑ An integration component will process the message, and then trigger either Function1 or Function2 depending on the type of order. ✑ Once a vendor confirms the product availability, a status message for App1 will be generated by Function1 or Function2. ✑ All the steps of the transaction will be logged to storage1. Which type of resource should you recommend for the integration component?. an Azure Service Bus queue. an Azure Data Factory pipeline. an Azure Event Grid domain. an Azure Event Hubs capture.

You have 100 Microsoft SQL Server Integration Services (SSIS) packages that are configured to use 10 on-premises SQL Server databases as their destinations. You plan to migrate the 10 on-premises databases to Azure SQL Database. You need to recommend a solution to create Azure-SQL Server Integration Services (SSIS) packages. The solution must ensure that the packages can target the SQL Database instances as their destinations. What should you include in the recommendation?. Data Migration Assistant (DMA). Azure Data Factory. Azure Data Catalog. SQL Server Migration Assistant (SSMA).

You have an Azure virtual machine named VM1 that runs Windows Server 2019 and contains 500 GB of data files. You are designing a solution that will use Azure Data Factory to transform the data files, and then load the files to Azure Data Lake Storage. What should you deploy on VM1 to support the design?. the On-premises data gateway. the Azure Pipelines agent. the self-hosted integration runtime. the Azure File Sync agent.

You have an Azure Active Directory (Azure AD) tenant that syncs with an on-premises Active Directory domain. Your company has a line-of-business (LOB) application that was developed internally. You need to implement SAML single sign-on (SSO) and enforce multi-factor authentication (MFA) when users attempt to access the application from an unknown location. Which two features should you include in the solution? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point. Azure AD Privileged Identity Management (PIM). Azure Application Gateway. Azure AD enterprise applications. Azure AD Identity Protection. Conditional Access policies.

You plan to automata the deployment of resources to Azure subscriptions. What is a difference between using Azure Blueprints and Azure Resource Manager (ARM) templates?. ARM templates remain connected to the deployed resources. Only blueprints can contain policy definitions. Only ARM templates can contain policy definitions. Blueprints remain connected to the deployed resources.

1 - HOTSPOT - You have the resources shown in the following table. 2 - You create a new resource group in Azure named RG2. You need to move the virtual machines to RG2. What should you use to move each virtual machine? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area: VM1. VM2.

You plan to deploy an Azure App Service web app that will have multiple instances across multiple Azure regions. You need to recommend a load balancing service for the planned deployment The solution must meet the following requirements: ✑ Maintain access to the app in the event of a regional outage. ✑ Support Azure Web Application Firewall (WAF). ✑ Support cookie-based affinity. ✑ Support URL routing. What should you include in the recommendation?. Azure Front Door. Azure Traffic Manager. Azure Application Gateway. Azure Load Balancer.

1 - HOTSPOT - You have the Azure resources shown in the following table. 2 - You need to design a solution that provides on-premises network connectivity to SQLDB1 through PE1. How should you configure name resolution? To answer select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area: Azure configuration. On-premises DNS configuration.

You are designing a microservices architecture that will support a web application. The solution must meet the following requirements: ✑ Deploy the solution on-premises and to Azure. Support low-latency and hyper-scale operations. ✑ Allow independent upgrades to each microservice. ✑ Set policies for performing automatic repairs to the microservices. You need to recommend a technology. What should you recommend?. Azure Container Instance. Azure Logic App. Azure Service Fabric. Azure virtual machine scale set.

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You plan to deploy multiple instances of an Azure web app across several Azure regions. You need to design an access solution for the app. The solution must meet the following replication requirements: ✑ Support rate limiting. ✑ Balance requests between all instances. ✑ Ensure that users can access the app in the event of a regional outage. Solution: You use Azure Front Door to provide access to the app. Does this meet the goal?. Yes. No.

You need to recommend a solution to generate a monthly report of all the new Azure Resource Manager (ARM) resource deployments in your Azure subscription. What should you include in the recommendation?. Azure Activity Log. Azure Arc. Azure Analysis Services. Azure Monitor action groups.

You have an Azure subscription. You need to recommend a solution to provide developers with the ability to provision Azure virtual machines. The solution must meet the following requirements: ✑ Only allow the creation of the virtual machines in specific regions. ✑ Only allow the creation of specific sizes of virtual machines. What should you include in the recommendation?. Attribute-based access control (ABAC). Azure Policy. Conditional Access policies. role-based access control (RBAC).

You are developing a sales application that will contain several Azure cloud services and handle different components of a transaction. Different cloud services will process customer orders, billing, payment, inventory, and shipping. You need to recommend a solution to enable the cloud services to asynchronously communicate transaction information by using XML messages. What should you include in the recommendation?. Azure Notification Hubs. Azure Data Lake. Azure Service Bus. Azure Blob Storage.

You have 100 devices that write performance data to Azure Blob Storage. You plan to store and analyze the performance data in an Azure SQL database. You need to recommend a solution to continually copy the performance data to the Azure SQL database. What should you include in the recommendation?. Azure Data Factory. Data Migration Assistant (DMA). Azure Data Box. Azure Database Migration Service.

You need to recommend a storage solution for the records of a mission critical application. The solution must provide a Service Level Agreement (SLA) for the latency of write operations and the throughput. What should you include in the recommendation?. Azure Data Lake Storage Gen2. Azure Blob Storage. Azure SQL. Azure Cosmos DB.

You are planning a storage solution. The solution must meet the following requirements: ✑ Support at least 500 requests per second. ✑ Support a large image, video, and audio streams. Which type of Azure Storage account should you provision?. standard general-purpose v2. premium block blobs. premium page blobs. premium file shares.

You need to recommend a data storage solution that meets the following requirements: ✑ Ensures that applications can access the data by using a REST connection ✑ Hosts 20 independent tables of varying sizes and usage patterns ✑ Automatically replicates the data to a second Azure region ✑ Minimizes costs What should you recommend?. an Azure SQL Database elastic pool that uses active geo-replication. tables in an Azure Storage account that use geo-redundant storage (GRS). tables in an Azure Storage account that use read-access geo-redundant storage (RA-GRS). an Azure SQL database that uses active geo-replication.

HOTSPOT - You are designing a software as a service (SaaS) application that will enable Azure Active Directory (Azure AD) users to create and publish online surveys. The SaaS application will have a front-end web app and a back-end web API. The web app will rely on the web API to handle updates to customer surveys. You need to design an authorization flow for the SaaS application. The solution must meet the following requirements: ✑ To access the back-end web API, the web app must authenticate by using OAuth 2 bearer tokens. ✑ The web app must authenticate by using the identities of individual users. What should you include in the solution? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area: The access tokens will be generated by. Aothorization decisions will be performed by.

HOTSPOT - You plan to create an Azure environment that will contain a root management group and 10 child management groups. Each child management group will contain five Azure subscriptions. You plan to have between 10 and 30 resource groups in each subscription. You need to design an Azure governance solution. The solution must meet the following requirements: ✑ Use Azure Blueprints to control governance across all the subscriptions and resource groups. ✑ Ensure that Blueprints-based configurations are consistent across all the subscriptions and resource groups. ✑ Minimize the number of blueprint definitions and assignments. What should you include in the solution? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area: Level at which to define the blueprints. Level at which to create the blueprints assigmentes.

DRAG DROP - You are designing a virtual machine that will run Microsoft SQL Server and contain two data disks. The first data disk will store log files, and the second data disk will store data. Both disks are P40 managed disks. You need to recommend a host caching method for each disk. The method must provide the best overall performance for the virtual machine while preserving the integrity of the SQL data and logs. Which host caching method should you recommend for each disk? To answer, drag the appropriate methods to the correct disks. Each method may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point. Select and Place: None. ReadOnly. ReadWrite.

You are designing a solution that calculates 3D geometry from height-map data. You need to recommend a solution that meets the following requirements: ✑ Performs calculations in Azure. ✑ Ensures that each node can communicate data to every other node. ✑ Maximizes the number of nodes to calculate multiple scenes as fast as possible. Minimizes the amount of effort to implement the solution. Which two actions should you include in the recommendation? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point. Enable parallel file systems on Azure. Create a render farm that uses virtual machines. Create a render farm that uses virtual machine scale sets. Create a render farm that uses Azure Batch. Enable parallel task execution on compute nodes.

You have an on-premises application that consumes data from multiple databases. The application code references database tables by using a combination of the server, database, and table name. You need to migrate the application data to Azure. To which two services can you migrate the application data to achieve the goal? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point. SQL Server Stretch Database. SQL Server on an Azure virtual machine. Azure SQL Database. Azure SQL Managed Instance.

HOTSPOT - You plan to migrate on-premises Microsoft SQL Server databases to Azure. You need to recommend a deployment and resiliency solution that meets the following requirements: ✑ Supports user-initiated backups ✑ Supports multiple automatically replicated instances across Azure regions ✑ Minimizes administrative effort to implement and maintain business continuity What should you recommend? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area: Deplyment solution. Resilency solution.

You need to design a highly available Azure SQL database that meets the following requirements: ✑ Failover between replicas of the database must occur without any data loss. ✑ The database must remain available in the event of a zone outage. ✑ Costs must be minimized. Which deployment option should you use?. Azure SQL Managed Instance Business Critical. Azure SQL Managed Instance General Purpose. Azure SQL Database Business Critical. Azure SQL Database Serverless.

You have an Azure web app that uses an Azure key vault named KeyVault1 in the West US Azure region. You are designing a disaster recovery plan for KeyVault1. You plan to back up the keys in KeyVault1. You need to identify to where you can restore the backup. What should you identify?. any region worldwide. the same region only. KeyVault1 only. the same geography only.

You have an on-premises line-of-business (LOB) application that uses a Microsoft SQL Server instance as the backend. You plan to migrate the on-premises SQL Server instance to Azure virtual machines. You need to recommend a highly available SQL Server deployment that meets the following requirements: ✑ Minimizes costs Minimizes failover time if a single server fails What should you include in the recommendation?. an Always On availability group that has premium storage disks and a virtual network name (VNN). an Always On Failover Cluster Instance that has a virtual network name (VNN) and a standard file share. an Always On availability group that has premium storage disks and a distributed network name (DNN). an Always On Failover Cluster Instance that has a virtual network name (VNN) and a premium file share.

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your company plans to deploy various Azure App Service instances that will use Azure SQL databases. The App Service instances will be deployed at the same time as the Azure SQL databases. The company has a regulatory requirement to deploy the App Service instances only to specific Azure regions. The resources for the App Service instances must reside in the same region. You need to recommend a solution to meet the regulatory requirement. Solution: You recommend creating resource groups based on locations and implementing resource locks on the resource groups. Does this meet the goal?. Yes. No.

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your company plans to deploy various Azure App Service instances that will use Azure SQL databases. The App Service instances will be deployed at the same time as the Azure SQL databases. The company has a regulatory requirement to deploy the App Service instances only to specific Azure regions. The resources for the App Service instances must reside in the same region. You need to recommend a solution to meet the regulatory requirement. Solution: You recommend using the Regulatory compliance dashboard in Microsoft Defender for Cloud. Does this meet the goal?. Yes. No.

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. Your company plans to deploy various Azure App Service instances that will use Azure SQL databases. The App Service instances will be deployed at the same time as the Azure SQL databases. The company has a regulatory requirement to deploy the App Service instances only to specific Azure regions. The resources for the App Service instances must reside in the same region. You need to recommend a solution to meet the regulatory requirement. Solution: You recommend using an Azure Policy initiative to enforce the location. Does this meet the goal?. Yes. No.

You plan to move a web app named App1 from an on-premises datacenter to Azure. App1 depends on a custom COM component that is installed on the host server. You need to recommend a solution to host App1 in Azure. The solution must meet the following requirements: ✑ App1 must be available to users if an Azure datacenter becomes unavailable. ✑ Costs must be minimized. What should you include in the recommendation?. In two Azure regions, deploy a load balancer and a web app. In two Azure regions, deploy a load balancer and a virtual machine scale set. Deploy a load balancer and a virtual machine scale set across two availability zones. In two Azure regions, deploy an Azure Traffic Manager profile and a web app.

You plan to deploy an application named App1 that will run in containers on Azure Kubernetes Service (AKS) clusters. The AKS clusters will be distributed across four Azure regions. You need to recommend a storage solution to ensure that updated container images are replicated automatically to all the Azure regions hosting the AKS clusters. Which storage solution should you recommend?. geo-redundant storage (GRS) accounts. Premium SKU Azure Container Registry. Azure Content Delivery Network (CDN). Azure Cache for Redis.

You have an Azure Active Directory (Azure AD) tenant. You plan to deploy Azure Cosmos DB databases that will use the SQL API. You need to recommend a solution to provide specific Azure AD user accounts with read access to the Cosmos DB databases. What should you include in the recommendation?. shared access signatures (SAS) and Conditional Access policies. certificates and Azure Key Vault. master keys and Azure Information Protection policies. a resource token and an Access control (IAM) role assignment.