MAPITA

You download an Azure resource Manager template based on an existing Virtual machine. The template will be used to deploy 100 virtual machines. You need to modify the template to reference an administrative password. You must prevent the password from being stored in plain text. What should you create to store the password ?. A. Azure Storage account and access policy. B. Azure Key vault and access policy. C. Azure AD identity protection and Azure policy. D. Recovery services vault and backup policy.

You plan to deploy 3 Virtual Machines named VM1, VM2 and VM3. The virtual machines will host a web app named App1. You need to ensure that at least 2 virtual machines are available if a single Azure data center becomes unavailable. What should you deploy ?. A. Each virtual machine in a separate availability zone. B. All three virtual machines in a single availability zone. C. All Virtual machines in a single availability Set. D. Each virtual machine in a separate availability Set.

Your company has virtual machines hosted in Microsoft Azure. The VMs are located in a single Azure virtual network named VNet1. The company has users that work remotely. The remote workers require access to the VMs on VNet1. You need to provide access for the remote workers. What should you do?. A. Configure a Site-to-Site (S2S) VPN. B. Configure a Point-to-Site (P2S) VPN. C. Configure a Multi Site VPN. D. Configure a VNet-to-VNet VPN.

You have an Azure virtual machine VM1 that runs Windows Server 2022. You save VM1 as a template named Template1 to the Azure Resource Manager library. You plan to deploy a virtual machine named VM2 from Template1. Which of the following you need to configure during the deployment of VM2? (Choose two). A. Resource Group. B. Operating System. C. Virtual Machine Size. D. Administrator Username.

A Company needs to connect their on-premise data centers to Azure. They have huge workloads that need to regularly transfer between on premise data centers and Azure. The company wants to avoid sending data over the public internet for security reasons. Which of the following options should the company opt to establish this connection?. A. Create a Point-to-Site (P2S) Connection. B. Create a Site-to-Site (S2S) Connection. C. Create an ExpressRoute Connection. D. Create a VNet-to-VNet Connection.

Your company wants to move an entire solution to Azure. Due to security constraints company wants to restrict creation of all resources in a particular region. Which Azure service can be used to achieve this requirement?. A. Azure Policy. B. Azure Monitor. C. Azure Availability Zone. D. Azure Web Apps.

A Company needs to identify idle and underutilized Azure Virtual machines which can be changed to a less costly service tier. What should the company use?. A. File Storage. B. Azure Advisor. C. Azure Monitor. D. Customer Insights.

You have an Azure subscription named subscription1. You have 5TB of data that you need to transfer to subscription1. You plan to use Azure Import/Export job. What can you use as the destination of the imported data?. A. Azure File Storage. B. Azure Data Factory. C. Azure Cosmos DB. D. Azure SQL Database.

Your company has a Microsoft SQL Server Always On availability group configured on their Azure virtual machines (VMs). You need to configure an Azure internal load balancer as a listener for the availability group. Solution: You create an HTTP health probe on port 1433. Does the solution meet the goal?. A. Yes. B. No.

A company has a requirement to deploy Windows VM in its subscription. Which CLI command should the administrator run in order to create the Virtual Machine?. A. New-AzVM. B. Create-AzVM. C. New-AzureRmVM. D. az vm create.

Your company has an Azure Active Directory (Azure AD) subscription. You need to deploy five virtual machines (VMs) to your company's virtual network subnet. The VMs will each have both a public and private IP address. Inbound and outbound security rules for all of these virtual machines must be identical. Which of the following is the least amount of network interfaces needed for this configuration?. A. 5. B. 10. C. 20. D. 40.

Your company has a general-purpose v1 Azure Storage account named storage1 that uses locally-redundant storage (LRS). You are tasked with implementing a solution that ensures the data in the storage account is protected if a zone fails. The solution must minimize costs and administrative effort. What should you do first?. A. Configure Object replication rules. B. Create a new storage account. C. Modify the replication settings of the storage account. D. Upgrade the account to general purpose V2.

You have an Azure Active Directory tenant named contosocloud.onmicrosoft.com. Your company has a public DNS zone for contoso.com. You add contoso.com as a custom domain name to Azure AD. You need to ensure that Azure can verify the domain name. Which type of DNS record should you create?. A. MX. B. NSEC. C. RRSIG. D. PTR.

You have an Azure subscription that contains an Azure Active Directory tenant named contoso.com and an Azure Kubernetes Service (AKS) cluster named AKS1. An administrator reports that she is unable to grant access to AKS1 to the users in contoso.com. You need to ensure that access to AKS1 can be granted to the contoso.com users. What should you do first?. A. From contoso.com, create an OAuth 2.0 authorization endpoint. B. From contoso.com, modify the Organization relationships settings. C. Recreate AKS1. D. From AKS1, create a namespace.

Your organization’s system administrator has deployed two standalone Azure Virtual Machines for a new web service. You now want to add these virtual machines to fault domains in an availability set. When you attempt to do this in the portal, you receive an error message preventing you from completing the task. What is the reason for this?. A. The availability set has to be paused or stopped before Standalone VMs can be added. B. VMs Operating system is not compatible with fault domains. C. You didn’t check the required “Standalone” parameter in Azure Portal. D. You can’t add running Standalone VMs to availability sets.

Which Azure tool is a cloud based command line service for copying and migrating data between Azure Storage accounts?. A. Import/Export Service. B. AzCopy. C. Azure Data Box. D. Azure Storage Explorer.

You Suspect hackers and bots have been attacking your applications network. What Azure network monitoring or analysis tool would best fit your needs?. A. Security Group View. B. Network Performance monitor. C. Connection monitor. D. Traffic Analysis.

Your company has a Microsoft Azure Subscription. The company has data centers in Los Angeles and New York and you are configuring the two data centers as geo-clustered sites for site resiliency. You need to recommend an Azure storage redundancy option which fulfills the following data storage requirements • Data must be stored on multiple nodes • Data must be stored on nodes in separate geographic locations • Data can be read from the secondary location as well as from the Primary location Which of the following options should you recommend?. A. Read access geo redundant Storage. B. Zone redundant Storage. C. Locally redundant Storage. D. Geo redundant Storage.

Your company has three virtual machines that are included in an availability set. You try to resize one of the VMs which returns an allocation failure message. Which of the following actions should you take to resize the VM?. A. You should stop the VM. B. You should stop the other two VMs. C. You should stop all three VMs. D. You should remove the necessary VM from the availability set.

You create an Azure storage account named contosostorage. You plan to create a file share named data. Users need to map a drive from their home computers that run windows 11 to the data file share. Which outbound port should you open between the home computer and data file share?. A. 80. B. 443. C. 445. D. 3389.

When using Azure resource manager (ARM) templates, what feature enables you to control resource properties during deployment in your organization?. A. Active Directory. B. Azure Policy. C. API Management. D. Resource tags.

Your company has an Azure subscription. You need to deploy a number of Azure virtual machines (VMs) using Azure Resource Manager (ARM) templates. You have been informed that the VMs will be included in a single availability set. You are required to make sure that the ARM template you configure allows for as many VMs as possible to remain accessible in the event of fabric failure or maintenance. Which of the following is the value that you should configure for the platformUpdateDomainCount property?. A. 10. B. 20. C. 30. D. 40.

Which Azure Storage service is designed for large-scale, offline data migration intended to help businesses migrate their data onto the Azure Cloud?. A. StorSimple. B. AzCopy. C. Azure Storage Explorer. D. Azure Data Box.

You plan to deploy several Azure Virtual machines that will run Windows server 2022 in a virtual machine scale set by using ARM template. You need to ensure that NGINX is available on all the virtual machines after they are deployed. What should you use?. A. A Microsoft Intune device configuration profile. B. Deployment Center in Azure App Service. C. A Desired State Configuration (DSC) extension. D. The New-AzConfigurationAssignment cmdlet.

You have an on-premises file server named Server1 that runs Windows Server 2016. You have an Azure subscription that contains an Azure file share. You deploy an Azure File Sync Storage Sync Service, and you create a sync group. You need to synchronize files from Server1 to Azure. Which four actions should you perform in sequence? To answer move the appropriate actions from the list of actions to the answer area and arrange in correct order.

Your company has a Microsoft SQL Server Always On availability group configured on their Azure virtual machines (VMs). You need to configure an Azure internal load balancer as a listener for the availability group. Solution: You enable Floating IP. Does the solution meet the goal?. A. Yes. B. No.

You plan to track resource usage and prevent the deletion of resources. To which resources can you apply locks and tags? To answer, select appropriate options in the answer area.

You have a computer named Computer1 that has a point-to-site VPN connection to an Azure virtual network named VNet1. The point-to-site connection uses a self- signed certificate. From Azure, you download and install the VPN client configuration package on a computer named Computer2. You need to ensure that you can establish a point-to-site VPN connection to VNet1 from Computer2. Solution: You modify the Azure Active Directory (Azure AD) authentication policies. Does the solution meet the goal?. A. Yes. B. No.

You have an Azure subscription named Subscription1 that contains a virtual network named VNet1. VNet1 is in a resource group named RG1. Subscription1 has a user named User1. User1 has the following roles: • Reader • Security Admin • Security Reader You need to ensure that User1 can assign the Reader role for VNet1 to other users. What should you do?. A. Assign User1 the Network Contributor role for VNet1. B. Assign User1 the Owner role for VNet1. C. Remove User1 from the Security Reader role for Subscription1. Assign User1 the Contributor role for RG1. D. Assign User1 the Contributor role for VNet1.

You have an Azure Active Directory (Azure AD) tenant named contoso.com. You have a CSV file that contains the names and email addresses of 500 external users. You need to create a guest user account in contoso.com for each of the 500 external users. Solution: From Azure AD in the Azure portal, you use the Bulk create user operation. Does this meet the goal?. A. Yes. B. No.

You plan to automate the deployment of a virtual machine scale set that uses the Windows Server 2016 Datacenter image. You need to ensure that when the scale set virtual machines are provisioned, they have web server components installed. Which two actions should you perform?. A. Create an automation account. B. Upload a configuration script. C. Create an Azure policy. D. Modify the ExtensionProfile section of the Azure Resource Manager template. E. Create a new virtual machine scale set in the Azure portal.

You have an Azure virtual machine named VM1 that runs Windows Server 2019. You need to create an alert in Azure when more than two error events are logged to the System event log on VM1 within an hour. Solution: You create an event subscription on VM1. You create an alert in Azure Monitor and specify VM1 as the source. Does this meet the goal?. A. Yes. B. No.

You have an Azure subscription named Subscription1 that contains an Azure Log Analytics workspace named Workspace1. You need to view the error events from a table named Event. Which query should you run in Workspace1?. A. search in (Event) * | where EventType eq “error”. B. select * from Event where EventType == "error“. C. Event | search "error“. D. Get-Event Event | where {$_.EventType == "error"}.

Your company has two on-premises servers named SRV01 and SRV02. Developers have created an application that runs on SRV01. The application calls a service on SRV02 by IP address. You plan to migrate the application on Azure virtual machines. You have configured two VMs on a single subnet in an Azure virtual network. You need to configure the two VMs with static internal IP addresses. What should you do?. A. Modify the IP properties in Windows Network and Sharing Center. B. Run the Set-AzureStaticVNetIP PowerShell cmdlet. C. Modify the VM properties in the Azure Management Portal. D. Run the New-AzureRMVMConfig PowerShell cmdlet. E. Run the Set-AzureSubnet PowerShell cmdlet.

You have an Azure subscription named Subscription1. You create an Azure Storage account named contosostorage, and then you create a file share named data. Which UNC path should you include in a script that references files from the data file share? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once or not at all?.

Your company has an Azure Active Directory (Azure AD) tenant that is configured for hybrid coexistence with the on-premises Active Directory domain. The on-premise virtual environment consists of virtual machines running on Windows Server 2012 R2 Hyper-V host servers. You have created some PowerShell scripts to automate the configuration of newly created VMs. You plan to create several new VMs and need a solution that ensures the scripts are run on the new VMs. Which of the following is the best solution?. A. Place the scripts in a new virtual hard disk (VHD). B. Configure a Group Policy Object (GPO) to run the scripts as startup scripts. C. Configure a SetupComplete.cmd batch file in the %windir%\setup\scripts directory. D. Configure a Group Policy Object (GPO) to run the scripts as logon scripts.

You have an Azure Directory tenant named DevOpsHub and an Azure Subscription named Subscription1. DevOpsHub contains a group named Developers. Subscription1 contains a resource group named Dev. You need to provide the Developers group with the ability to create Azure logic apps in the Dev resource group. Solution: On Subscription1, you assign the Logic App Operator role to the Developers group. Does this meet the goal?. A. Yes. B. No.

Your company has an Azure Active Directory (Azure AD) tenant that is configured for hybrid coexistence with the on-premises Active Directory domain. You plan to deploy several new virtual machines in Azure. The VMs will have the same operating system and custom software requirements. You configure a reference VM in the on-premise virtual environment. You then generalize the VM to create an image. You need to upload the image to Azure to ensure that it is available for selection when you create the new Azure VMs. Which PowerShell cmdlets should you use?. A. Add-AzImageDataDisk. B. Add-AzImage. C. Add-AzVhd. D. Add-AzVM.

You have an Azure policy as shown in the following exhibit: What is the effect of the policy?. A. You can create Azure SQL servers in contosoRG1 only. B. You are prevented from creating azure SQL Servers in ContosoRG1 only. C. You can create Azure SQL servers in any resource group within Subscription. D. You are prevented from creating Azure SQL servers anywhere in Subscription 1.

You have an Azure AD tenant named devopshub.com that contains the groups shown in the table on the left. devopshub.com contains the users shown in the table on the right. You assign the Azure Active Directory Premium Plan 2 license to Group1 and User4. Which users are assigned the Azure Active Directory Premium Plan 2 license?. A. User1, User2, and User4 only. B. User4 only. C. User1 and User4 only. D. User1, User2, User3, and User4.

Your company has an azure subscription that includes a storage account, a resource group, a blob container and a file share. A colleague named Jim Taylor makes use of a solitary Azure Resource Manager (ARM) template to deploy a virtual machine and an additional Azure Storage account. You want to review the ARM template that was used by Jim Taylor. Solution: You access the Resource Group blade. Does the solution meet the goal?. A. Yes. B. No.

You have an Azure subscription named Subscription1 and an on-premises deployment of Microsoft System Center Service Manager. Subscription1 contains a virtual machine named VM1. You need to ensure that an alert is set in Service Manager when the amount of available memory on VM1 is below 10 percent. What should you do first?. A. Deploy a function app. B. Create an automation runbook. C. Create a notification. D. Deploy the IT Service Management Connector (ITSM).

You have three offices and an Azure subscription that contains an Azure Active Directory (Azure AD) tenant. You need to grant user management permissions to a local administrator in each office. What should you use?. A. Access packages in Azure AD entitlement management. B. Azure roles. C. Administrative units. D. Azure AD roles.