Share real and effective Microsoft Azure AZ-101 exam dumps for free. 13 Online AZ-101 Exam Practice test questions and answers, online AZ-101 pdf download and YouTube video learning, easy to learn! Get the full AZ-101 Dumps: https://www.leads4pass.com/az-101.html (Total Questions: 102 Q&A) to make it easy to pass the exam!
[PDF] Free Microsoft Azure AZ-101 pdf dumps download from Google Drive: https://drive.google.com/open?id=1903t9A65RvVRM5-s1QgrcjjK1tmyca96
[PDF] Free Full CompTIA pdf dumps download from Google Drive: https://drive.google.com/open?id=1AwBFPqkvdpJBfxdZ3nGjtkHQZYdBsRVz
Exam AZ-101: Microsoft Azure Integration and Security: https://www.microsoft.com/en-us/learning/exam-az-101.aspx
- Evaluate and perform server migration to Azure (15-20%)
- Implement and manage application services (20-25%)
- Implement advanced virtual networking (30-35%)
- Secure identities (25-30%)
Latest effective Microsoft Azure AZ-101 Exam Practice Tests
QUESTION 1
You discover that VM3 does NOT meet the technical requirements.
You need to verify whether the issue relates to the NSGs.
What should you use?
A. Diagram in VNet1
B. the security recommendations in Azure Advisor
C. Diagnostic settings in Azure Monitor
D. Diagnose and solve problems in Traffic Manager Profiles
E. IP flow verify in Azure Network Watcher
Correct Answer: E
Scenario: Contoso must meet technical requirements including:
Ensure that VM3 can establish outbound connections over TCP port 8080 to the applications servers in the Montreal
office.
IP flow verify checks if a packet is allowed or denied to or from a virtual machine. The information consists of direction,
protocol, local IP, remote IP, local port, and remote port. If the packet is denied by a security group, the name of the
rule
that denied the packet is returned. While any source or destination IP can be chosen, IP flow verify helps administrators
quickly diagnose connectivity issues from or to the internet and from or to the on-premises environment.
References:
https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-ip-flow-verify-overview
QUESTION 2
You need to recommend a solution to automate the configuration for the finance department users. The solution must
meet the technical requirements. What should you include in the recommended?
A. Azure AP B2C
B. Azure AD Identity Protection
C. an Azure logic app and the Microsoft Identity Management (MIM) client
D. dynamic groups and conditional access policies
Correct Answer: D
Scenario: Ensure Azure Multi-Factor Authentication (MFA) for the users in the finance department only.
The recommendation is to use conditional access policies that can then be targeted to groups of users, specific
applications, or other conditions.
References:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-userstates
QUESTION 3
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains
a unique solution that might meet the stated goals. Some question sets might have more than one correct solution,
while
others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not
appear in the review screen.
You have an Azure Active Directory (Azure AD) tenant named Adatum and an Azure Subscription named Subscription1.
Adatum contains a group named Developers. Subscription1 contains a resource group named Dev.
You need to provide the Developers group with the ability to create Azure logic apps in the Dev resource group.
Solution: On Subscription1, you assign the Logic App Operator role to the Developers group.
Does this meet the goal?
A. Yes
B. No
Correct Answer: B
The Logic App Operator role only lets you read, enable and disable logic app. With it you can view the logic app and run
history, and enable/disable. Cannot edit or update the definition.
You would need the Logic App Contributor role.
References:
https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles
https://docs.microsoft.com/en-us/azure/logic-apps/logic-apps-securing-a-logic-app
QUESTION 4
You plan to move services from your on-premises network to Azure.
You identify several virtual machines that you believe can be hosted in Azure. The virtual machines are shown in the
following table.
Which two virtual machines can you access by using Azure migrate? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
A. Sea-CA0l
B. Hou-NW01
C. NYC-FS01
D. Sea-DC01
E. BOS-DB01
Correct Answer: CE
QUESTION 5
You have a Microsoft SQL Server Always On availability group on Azure virtual machines. You need to configure an
Azure internal load balancer as a listener for the availability group. What should you do?
A. Enable Floating IP.
B. Set Session persistence to Client IP and protocol.
C. Set Session persistence to Client IP.
D. Create an HTTP health probe on port 1433.
Correct Answer: A
QUESTION 6
You need to create a function app named corp7509086nl that supports sticky sessions. The solution must minimize the
Azure-related costs of the App Service plan. What should you do from the Azure portal?
A. Check the answer in explanation.
Correct Answer: A
See explanation below.
Step 1:
Select the New button found on the upper left-hand corner of the Azure portal, then select Compute > Function App.
Step 2:
Use the function app settings as listed below.
App name: corp7509086n1
Hosting plan: Azure App Service plan
(need this for the sticky sessions)
Pricing tier of the the App Service plan: Shared compute: Free
Step 3:
Select Create to provision and deploy the function app.
References:
https://docs.microsoft.com/en-us/azure/azure-functions/functions-create-function-app-portal
QUESTION 7
You have five Azure virtual machines that run Windows Server 2016.
You have an Azure load balancer named LB1 that provides load balancing se
You need to ensure that visitors are serviced by the same web server for each request.
What should you configure?
A. Floating IP (direct server return) to Disable
B. Session persistence to Client IP
C. a health probe
D. Session persistence to None
Correct Answer: B
You can set the sticky session in load balancer rules with setting the session persistence as the client IP.
References:
https://cloudopszone.com/configure-azure-load-balancer-for-sticky-sessions/
QUESTION 8
You plan to connect a virtual network named VNET1017 to your on-premises network by using both an Azure
ExpressRoute and a site-to-site VPN connection. You need to prepare the Azure environment for the planned
deployment. The solution must maximize the IP address space available to Azure virtual machines. What should you do
from the Azure portal before you create the ExpressRoute are the VPN gateway?
A. Check the answer in explanation.
Correct Answer: A
See explanation below.
We need to create a Gateway subnet
Step 1:
Go to More Services > Virtual Networks
Step 2:
Then click on the VNET1017, and click on subnets. Then click on gateway subnet.
Step 3:
In the next window define the subnet for the gateway and click OK It is recommended to use /28 or /27 for gateway
subnet.
As we want to maximize the IP address space we should use /27.
References:
https://blogs.technet.microsoft.com/canitpro/2017/06/28/step-by-step-configuring-a-site-to-site-vpn-gateway-between-
azure-and-on-premise/ Topic 8, Mix Questions Set E (Security Identities)
QUESTION 9
You need to deploy an Azure load balancer named Ib 1015 to your Azure subscription. The solution must meet the
following requirements:
-Support the load balancing of IP traffic from the Internet to Azure virtual machines connected to VNET1016 \subnet0.
-Prov.de 4 Service level Agreement (SWJ of 99.99 percent ability for the Azure virtual machines.
-Minimize Azure-related costs.
What should you do from the Azure portal?
To complete this task, you do NOT need to wait for the deployment to complete. Once the deployment start in Azure,
you can move to the next task.
A. Check the answer in explanation.
Correct Answer: A
See explanation below.
Step 1:
On the top left-hand side of the screen, click Create a resource > Networking > Load Balancer.
Step 2:
In the Create a load balancer page enter these values for the load balancer:
myLoadBalancer – for the name of the load balancer.
Internal – for the type of the load balancer.
Basic – for SKU version.
Microsoft guarantees that apps running in a customer subscription will be available 99.99% of the time.
VNET1016\subnet0 – for subnet that you choose from the list of existing subnets.
Step 3: Accept the default values for the other settings and click Create to create the load balancer.
QUESTION 10
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains
a unique solution that might meet the stated goals. Some question sets might have more than one correct solution,
while
others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not
appear in the review screen.
You manage a virtual network named VNet1 that is hosted in the West US Azure region.
VNet1 hosts two virtual machines named VM1 and VM2 that run Windows Server.
You need to inspect all the network traffic from VM1 to VM2 for a period of three hours.
Solution: From Azure Monitor, you create a metric on Network In and Network Out.
Does this meet the goal?
A. Yes
B. No
Correct Answer: B
You should use Azure Network Watcher.
References:
https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-monitoring-overview Topic 2, Mix Questions
Set B (Implement advanced networking)
QUESTION 11
You have an on-premises network that contains a Hyper-V host named Host1. Host1 runs Windows Server 2016 and
hosts 10 virtual machines that run Windows Server 2016.
You plan to replicate the virtual machines to Azure by using Azure Site Recovery.
You create a Recovery Services vault named ASR1 and a Hyper-V site named Site1.
You need to add Host1 to ASR1.
What should you do?
A. Download the installation file for the Azure Site Recovery Provider. Download the vault registration key. Install the
Azure Site Recovery Provider on Host1 and register the server.
B. Download the installation file for the Azure Site Recovery Provider. Download the storage account key. Install the
Azure Site Recovery Provider on Host1 and register the server.
C. Download the installation file for the Azure Site Recovery Provider. Download the vault registration key. Install the
Azure Site Recovery Provider on each virtual machine and register the virtual machines.
D. Download the installation file for the Azure Site Recovery Provider. Download the storage account key. Install the
Azure Site Recovery Provider on each virtual machine and register the virtual machines.
Correct Answer: A
Download the Vault registration key. You need this when you install the Provider. The key is valid for five days after you
generate it. Install the Provider on each VMM server. You don\\’t need to explicitly install anything on Hyper-V hosts.
QUESTION 12
You are the global administrator for an Azure Active Directory (Azure AD) tenant named adatum.com. From the Azure
Active Directory blade, you assign the Conditional Access Administrator role to a user You need to ensure that Admin1
has just-in-time access as a conditional access administrator.
What should you do next?
A. Enable Azure AD Multi-Factor Authentication (MFA).
B. Set Admin1 as Eligible for the Privileged Role Administrator role.
C. Admin1 as Eligible for the Conditional Access Administrator role.
D. Enable Azure AD Identity Protection.
Correct Answer: A
Require MFA for admins is a baseline policy that requires MFA for the following directory roles:
Global administrator
SharePoint administrator
Exchange administrator
Conditional access administrator
Security administrator
References:
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/baseline-protection
QUESTION 13
You plan to deploy an application getaway named appgw1015 to load balance IP traffic to the Azure virtual machines
connected to subnet0.
You need to configure a virtual network named VNET1015 to support the planned application gateway.
What should you do from the Azure portal?
A. Check the answer in explanantion.
Correct Answer: A
See explanation below.
Step 1:
Click Networking, Virtual Network, and select VNET1015.
Step 2:
Click Subnets, and Click +Add on the VNET1015 – Subnets pane that appears.
Step 3:
On the Subnets page, click +Gateway subnet at the top to open the Add subnet page.
Step 4:
Locate subnet0 and add it.
References:
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-portal
We offer more ways to make it easier for everyone to learn, and YouTube is the best tool in the video.Follow channels: https://www.youtube.com/@lead4pass116 get more useful exam content.
Latest Microsoft Azure AZ-101 YouTube videos:
Share 13 of the latest Microsoft Azure AZ-101 exam questions and answers for free to help you improve your skills and experience! Easily select the complete AZ-101 Dumps: https://www.leads4pass.com/az-101.html (Total Questions: 102 Q&A) through the exam! Guaranteed to be true and effective! Easily pass the exam!
Microsoft Certified: Azure Administrator Associate Azure Administrators implement, monitor, and maintain Microsoft Azure solutions, including major services related to compute, storage, network, and security.
[PDF] Free Microsoft Azure AZ-101 pdf dumps download from Google Drive: https://drive.google.com/open?id=1903t9A65RvVRM5-s1QgrcjjK1tmyca96
[PDF] Free Full Microsoft pdf dumps download from Google Drive: https://drive.google.com/open?id=1AwBFPqkvdpJBfxdZ3nGjtkHQZYdBsRVz
leads4pass Promo Code 12% Off
related: https://www.dumpscertification.com/useful-microsoft-mta-98-368-dumps/