Microsoft AZ-303 Test Engine Practice Test Questions, Exam Dumps
100% Free AZ-303 Daily Practice Exam With 220 Questions
Skills Required for Microsoft AZ-303 Exam
Microsoft Certified Solutions Associate (MCSA) AZ-303 exam validates an individual's skills and knowledge of developing, maintaining and administering a Microsoft Azure infrastructure. Cosmos DB provides elastic, globally distributed database. Managed local development environments can be created in Azure. Read and write credentials for the services in the enterprise cloud-based distributed computing environment. Networkcreate and configure the virtual networks of the Azure VMs. Azure is integrated with Visual Studio Online. Cassandra and Azure DocumentDB and Azure SQL and and and and and and and MongoDB. Sites, subnets and IP address can be configured to Azure VMs. Apache Spark, Hadoop and services like Azure HDInsight. Logging, monitoring, and troubleshooting in the Azure cloud-based environment.
Delete, move and add VMs in the Azure cloud-based environment. Create, configure and manage services in Azure using web UI. Microsoft AZ-303 exam dumps can be used to clear your concepts related to the exam. Review your experience using the Azure portal in the past. Shared resources like storage, management, and networking can be configured Azure VMs. List out the features of the Azure portal. Evaluate the Azure IaaS services for CIOs to select the best option. Rules are created for the Azure VMs. Share control and manage permissions for Azure VMs. Secure, manage and configure Azure storage. Create, configure and manage the virtual networks in the Azure cloud-based environment. Microsoft AZ-303 exam dumps can be used to clear your concepts related to the exam. Manager and create the networking services like virtual routers and load balancers. Container an application for the Azure infrastructure. Receive and troubleshoot VPN connections to Azure VMs. Failover and load balancing of VMs in the Azure environment.
Preparation Options to Use
The learners can choose between a self-study approach and instructor-led training to prepare for the Microsoft AZ-303 exam. Whichever option you decide to opt for, Microsoft offers resources that will help in your preparation. Thus, you should check the following paths:
- Self-Paced Study
It is aimed at those candidates who are self-disciplined and can independently study for the exam. For this category of individuals, Microsoft offers a series of learning paths that they can use to prepare for the test. These paths have tutorial modules that are designed to equip the students with the necessary skills and knowledge for gaining mastery of the content of the certification exam.
Microsoft offers nine different learning paths for the Microsoft AZ-303 exam. These cover different topic areas, such as Architect Network Infrastructure in Azure, Architect Storage Infrastructure in Azure, Architect Compute Infrastructure in Azure, Architect Infrastructure Operations in Azure, and Architect a Data Platform in Azure, among others.
- Instructor-Led Training
This training option is for the applicants who are looking to learn from the best in the industry. All the official Microsoft instructor-led courses are offered by the certified training partners. The courses are available as in-classroom training and virtual class training.
As for the Microsoft AZ-303 exam, there are two courses that you can choose to learn its topics. They are known as Microsoft Azure Architect Technologies and Microsoft Azure Technologies for AWS Architects. Each course focuses on different aspects of the test and provides a detailed analysis of each of its domains. You will learn how to translate the business prerequisites into reliable, scalable, and secure solutions. The training will cover the topics related to automation, virtualization, security, identity, storage, application infrastructure, and data platform.
Besides these two options, you can use additional materials and resources. For example, the individuals can use the official practice test to prepare for Microsoft AZ-303. Taking it exposes the candidates to the patterns and formats of the real exam questions. This is a great way to develop confidence and test-taking skills.
NEW QUESTION 120
You are designing a solution to secure a company's Azure resources. The environment hosts 10 teams. Each team manages a project and has a project manager, a virtual machine (VM) operator, developers, and contractors.
Project managers must be able to manage everything except access and authentication for users. VM operators must be able to manage VMs, but not the virtual network or storage account to which they are connected. Developers and contractors must be able to manage storage accounts.
You need to recommend roles for each member.
What should you recommend? To answer, drag the appropriate roles to the correct employee types. Each role may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION 121
You discover that VM3 does NOT meet the technical requirements.
You need to verify whether the issue relates to the NSGs.
What should you use?
- A. the security recommendations in Azure Advisor
- B. Diagnostic settings in Azure Monitor
- C. Diagram in VNet1
- D. IP flow verify in Azure Network Watcher
- E. Diagnose and solve problems in Traffic Manager profiles
Answer: D
Explanation:
Section: [none]
Explanation:
Scenario: Contoso must meet technical requirements including:
Ensure that VM3 can establish outbound connections over TCP port 8080 to the applications servers in the Montreal office.
IP flow verify checks if a packet is allowed or denied to or from a virtual machine. The information consists of direction, protocol, local IP, remote IP, local port, and remote port. If the packet is denied by a security group, the name of the rule that denied the packet is returned. While any source or destination IP can be chosen, IP flow verify helps administrators quickly diagnose connectivity issues from or to the internet and from or to the on-premises environment.
References:
https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-ip-flow-verify-overview
NEW QUESTION 122
Your network contains an on-premises Active Directory domain named contoso.com that contains a member server named Server1.
You have the accounts shown in the following table.
You are installing Azure AD Connect on Server1.
You need to specify the account for Azure AD Connect synchronization. The solution must use the principle of least privilege.
Which account should you specify?
- A. CONTOSO\User1
- B. CONTOSO\User2
- C. CONTOSO\User3
- D. SERVER1\User4
Answer: B
Explanation:
Explanation
The default Domain User permissions are sufficient
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/reference-connect-accounts-permissions
NEW QUESTION 123
You have an Azure subscription that contains the resource groups shown in the following table.
You create an Azure Resource Manager template named Template1 as shown in the following exhibit.
From the Azure portal, you deploy Template1 four times by using the settings shown in the following table.
What is the result of the deployment? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION 124
You need to ensure that the virtual machine disks are encrypted. The solution must meet the security requirements.
Which three actions should you perform in Sub1 in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
1 - Register the Microsoft ....
2 - Create a key in KV1.....
3 - Deploy the virtual machines...
Reference:
https://docs.microsoft.com/en-us/azure/virtual-machines/disks-enable-host-based-encryption-portal
NEW QUESTION 125
You deploy an Azure virtual machine scale set named VSSI that contains 30 virtual machine instances across three zones in the same Azure region. The instances host an application named App1 that must be accessible by using HTTP and HTTPS traffic. Currently, VSS1 is inaccessible from the internet.
You need to use Azure Load Balancer to provide access to App1 across all the instances from the internet by using a single IP address.
What should you configure? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION 126
You create an Azure Kubernetes Service (AKS) duster and an Azure Container Registry.
You need to perform continuous deployments of a containerized application to the AKS cluster as soon as the image updates in the registry.
What should you use to perform the deployments?
- A. an Azure Resource Manager template
- B. an Azure Automation runbook
- C. a kubectl script from a CRON job
- D. an Azure Pipelines release pipeline
Answer: D
Explanation:
You can implement a Continuous Deployment pipeline.
Example:
What the pipeline accomplishes :
Stage 1: The code gets pushed in the Github. The Jenkins job gets triggered automatically. The Dockerfile is checked out from Github.
Stage 2: Docker builds an image from the Dockerfile and then the image is tagged with the build number. Additionally, the latest tag is also attached to the image for the containers to use.
Stage 3: We have default deployment and service YAML files stored on the Jenkins server. Jenkins makes a copy of the default YAML files, make the necessary changes according to the build and put them in a separate folder.
Stage 4: kubectl was initially configured at the time of setting up AKS on the Jenkins server. The YAML files are fed to the kubectl util which in turn creates pods and services.
Reference:
https://medium.com/velotio-perspectives/continuous-deployment-with-azure-kubernetes-service-azure-container-registry-jenkins-ca337940151b
NEW QUESTION 127
HOTSPOT
You have an Azure web app named App1 that contains the following autoscale conditions:
Every autoscale condition rule is configured to have a duration of 20 minutes and a cool down time of 10 minutes.
At 06:00, WebApp1 is running four instances.
You need to identify how many instances are running on WebApp1 based on the percentage of the CPU utilization.
How many instances should you identify? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Answer:
Explanation:
Section: [none]
Explanation:
Box 1: 3
At 6:00 the default 4 instances are running. The CPU utilization averages 10% for 25 minutes. The scale in rules states that 1 instance should be removed when CPU utilization averages 30% or less over a 20 minute period.
Box 2: 6
At 6:00 the default 4 instances are running. The CPU utilization averages 70% for 25 minutes. The scale out rules states that 3 instances should be added when CPU utilization averages 70% or more over a 20 minute period. However, the maximum number of instances is set at 6.
References:
https://docs.microsoft.com/en-us/azure/architecture/best-practices/auto-scaling
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/autoscale-understanding-settings
NEW QUESTION 128
You have an Azure subscription that contains the storage accounts shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION 129
You are designing a virtual network to support a web application. The web application uses Blob storage to store large images. The web application will be deployed to an Azure App Service Web App.
You have the following requirements:
Secure all communications by using Secured Socket layer (SSL)
SSL encryption and decryption must be processed efficiently to support high traffic load on the web application Protect the web application from web vulnerabilities and attacks without modification to backend code Optimize web application responsiveness and reliability by routing HTTP request and responses to the endpoint with the lowest network latency for the client.
You need to configure the Azure components to meet the requirements.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
References:
https://docs.microsoft.com/en-us/azure/application-gateway/application-gateway-end-to-end-ssl-powershell
https://docs.microsoft.com/en-us/azure/traffic-manager/traffic-manager-overview
https://docs.microsoft.com/en-us/azure/security-center/security-center-intro
NEW QUESTION 130
You have an on-premises data center and an Azure subscription. The data center contains two VPN devices. The subscription contains an Azure virtual network named VNet1. VNet1 contains a gateway subnet.
You need to create a site-to-site VPN. The solution must ensure that is a single instance of an Azure VPN gateway fails, or a single on-premises VPN device fails, the failure will not cause an interruption that is longer than two minutes.
What is the minimum number of public IP addresses, virtual network gateways, and local network gateways required in Azure? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Box 1: 2
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-activeactive-rm-powershell Box 2: 2 Every Azure VPN gateway consists of two instances in an active-standby configuration. For any planned maintenance or unplanned disruption that happens to the active instance, the standby instance would take over (failover) automatically, and resume the S2S VPN or VNet-to-VNet connections.
Box 3: 2
Dual-redundancy: active-active VPN gateways for both Azure and on-premises networks References:
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-highlyavailable
NEW QUESTION 131
You have an Azure subscription that contains the respond groups shown in the following table.
You have the Azure SQL servers shown in the following table.
You create an Azure SQL database named DB1 on Sql1 in an elastic pool named Pool1.
You need to create an Azure SOL database named DB2 In Pool 1.
Where should you deploy DB2?
- A. Sql 3
- B. Sql 4
- C. Sql 2
- D. Sql1
Answer: D
Explanation:
Explanation
The databases in an elastic pool are on a single Azure SQL Database server and share a set number of resources at a set price.
Reference:
https://docs.microsoft.com/en-us/azure/sql-database/sql-database-elastic-pool
NEW QUESTION 132
You have an Azure Cosmos DB account named Account1. Account1 includes a database named DB1 that contains a container named Container1. The partition key for Container1 is set to /city.
You plan to change the partition key for Container1.
What should you do first?
- A. Create a new Azure Cosmos DB account.
- B. Regenerate the keys for Account1.
- C. Delete Container1.
- D. Implement the Azure Cosmos DB.NET.SDK.
Answer: A
Explanation:
Explanation
The Change Feed Processor and Bulk Executor Library, in Azure Cosmos DB can be leveraged to achieve a live migration of your data from one container to another. This allows you to re-distribute your data to match the desired new partition key scheme, and make the relevant application changes afterwards, thus achieving the effect of "updating your partition key".
Reference:
https://devblogs.microsoft.com/cosmosdb/how-to-change-your-partition-key/
NEW QUESTION 133
You have an Azure subscription that contains three virtual networks named VNet1, VNet2, and VNet3. VNet2 contains a virtual appliance named VM2 that operates as a router.
You are configuring the virtual networks in a hub and spoke topology that uses VNet2 as the hub network.
You plan to configure peering between VNet1 and VNet2 and between VNet2 and VNet3.
You need to provide connectivity between VNet1 and VNet3 through VNet2.
Which two configurations should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
- A. On the peering connections, allow forwarded traffic
- B. Create a route filter
- C. Create route tables and assign the table to subnets
- D. On the peering connections, use remote gateways
- E. On the peering connections, allow gateway transit
Answer: D,E
Explanation:
Allow gateway transit: Check this box if you have a virtual network gateway attached to this virtual network and want to allow traffic from the peered virtual network to flow through the gateway.
The peered virtual network must have the Use remote gateways checkbox checked when setting up the peering from the other virtual network to this virtual network.
Note: VNet2 is the hub network.
References:
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-manage-peering#requirements-and- constraints
NEW QUESTION 134
You have Azure virtual machines that have Update Management enabled. The virtual machines are configured as shown in the following table.
You need to ensure that all critical and security updates are applied to each virtual machine every month. What is the minimum number of update deployments you should create?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: B
NEW QUESTION 135
You have an Azure Resource Manager template for a virtual machine named Template1. Template1 has the following parameters section.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Box 1: Yes
The Resource group is not specified.
Box 2: No
The default value for the operating system is Windows 2016 Datacenter.
Box 3: Yes
Location is no default value.
References:
https://docs.microsoft.com/bs-latn-ba/azure/virtual-machines/windows/ps-template
NEW QUESTION 136
SIMULATION
Click to expand each objective. To connect to the Azure portal, type https://portal.azure.com in the browser address bar.
When you are finished performing all the tasks, click the 'Next' button.
Note that you cannot return to the lab once you click the 'Next' button. Scoring occur in the background while you complete the rest of the exam.
Overview
The following section of the exam is a lab. In this section, you will perform a set of tasks in a live environment.
While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.
Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn't matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.
Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.
Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.
To start the lab
You may start the lab by clicking the Next button.
You need to deploy an application gateway named appgw1015 to meet the following requirements:
* Load balance internal IP traffic to the Azure virtual machines connected to subnet0.
* Provide a Service Level Agreement (SLA) of 99,99 percent availability for the Azure virtual machines.
What should you do from the Azure portal?
Answer:
Explanation:
See explanation below.
Section: [none]
Explanation:
Step 1:
Click New found on the upper left-hand corner of the Azure portal.
Step 2:
Select Networking and then select Application Gateway in the Featured list.
Step 3:
Enter these values for the application gateway:
appgw1015 - for the name of the application gateway.
SKU Size: Standard_V2
The new SKU [Standard_V2] offers autoscaling and other critical performance enhancements.
Step 4:
Accept the default values for the other settings and then click OK.
Step 5:
Click Choose a virtual network, and select subnet0.
References:
https://docs.microsoft.com/en-us/azure/application-gateway/application-gateway-create-gateway-portal
NEW QUESTION 137
You have two Azure Active Directory (Azure AD) tenants named contoso.com and fabrikam.com.
You have a Microsoft account that you use to sign in to both tenants.
You need to configure the default sign-in tenant for the Azure portal.
What should you do?
- A. From the Azure portal, change the directory
- B. From Azure Cloud Shell, run Set-AzureRmSubscription
- C. From the Azure portal, configure the portal settings
- D. From Azure Cloud Shell, run Set-AzureRmContext
Answer: A
Explanation:
Section: [none]
Explanation:
Change the subscription directory in the Azure portal.
The classic portal feature Edit Directory, that allows you to associate an existing subscription to your Azure Active Directory (AAD), is now available in Azure portal. It used to be available only to Service Admins with Microsoft accounts, but now it's available to users with AAD accounts as well.
To get started:
1. Go to Subscriptions.
2. Select a subscription.
3. Select Change directory.
Incorrect Answers:
C: The Set-AzureRmContext cmdlet sets authentication information for cmdlets that you run in the current session. The context includes tenant, subscription, and environment information.
References:
https://azure.microsoft.com/en-us/updates/edit-directory-now-in-new-portal/
NEW QUESTION 138
You have an Azure virtual machine named VM1 that runs Windows Server 2016.
You install a line-to-business application on VM1.
You need to create an Azure virtual machine by using VM1 as a custom image.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
1 - Run sysprep.exe on VM1.
2 - From Azure CLI, deallocate VM1 and mark VM1 as generalized
3 - Create a virtual machine scale set
Reference:
https://thesolving.com/server-room/when-and-how-to-use-sysprep/
https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/tutorial-use-custom-image-powershell
NEW QUESTION 139
You have an Azure subscription that contains the resource groups shown in the following table.
You create an Azure Resource Manager template named Template1 as shown in the following exhibit.
From the Azure portal, you deploy Template1 four times by using the settings shown in the following table.
What is the result of the deployment? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION 140
You have virtual machines (VMs) that run a mission-critical application.
You need to ensure that the VMs never experience down time.
What should you recommend? To answer, drag the appropriate solutions to the correct scenarios. Each solution may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Box 1: Scale set
A virtual machine scale set allows you to deploy and manage a set of identical, auto scaling virtual machines.
Box 2: Availability Set
An Availability Set is a logical grouping capability for isolating VM resources from each other when they're deployed. Azure makes sure that the VMs you place within an Availability Set run across multiple physical servers, compute racks, storage units, and network switches. If a hardware or software failure happens, only a subset of your VMs are impacted and your overall solution stays operational. Availability Sets are essential for building reliable cloud solutions.
Box 3: Fault domain
A fault domain is a logical group of underlying hardware that share a common power source and network switch, similar to a rack within an on-premises datacenter. As you create VMs within an availability set, the Azure platform automatically distributes your VMs across these fault domains. This approach limits the impact of potential physical hardware failures, network outages, or power interruptions.
References:
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/tutorial-create-vmss
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/tutorial-availability-sets
NEW QUESTION 141
HOTSPOT
You have an Azure subscription named Subscription1.
Subscription1 contains the virtual machines in the following table:
Subscription1 contains a virtual network named VNet1 that has the subnets in the following table.
VM3 has multiple network adapters, including a network adapter named NIC3. IP forwarding is enabled on NIC3. Routing is enabled on VM3.
You create a route table named RT1 that contains the routers in the following table.
You apply RT1 to Subnet1 and Subnet2.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:
Answer:
Explanation:
Section: [none]
Explanation:
IP forwarding enables the virtual machine a network interface is attached to:
* Receive network traffic not destined for one of the IP addresses assigned to any of the IP configurations assigned to the network interface.
* Send network traffic with a different source IP address than the one assigned to one of a network interface's IP configurations.
The setting must be enabled for every network interface that is attached to the virtual machine that receives traffic that the virtual machine needs to forward. A virtual machine can forward traffic whether it has multiple network interfaces or a single network interface attached to it.
Box 1: Yes
The routing table allows connections from VM3 to VM1 and VM2. And as IP forwarding is enabled on VM3, VM3 can connect to VM1.
Box 2: No
VM3, which has IP forwarding, must be turned on, in order for VM2 to connect to VM1.
Box 3: Yes
The routing table allows connections from VM1 and VM2 to VM3. IP forwarding on VM3 allows VM1 to connect to VM2 via VM3.
References:
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-udr-overview
https://www.quora.com/What-is-IP-forwarding
NEW QUESTION 142
You have an Azure Cosmos DB account named Account1. Account1 includes a database named DB1 that contains a container named Container1. The partition key for Container1 is set to /city.
You plan to change the partition key for Container1.
What should you do first?
- A. Regenerate the keys for Account1.
- B. Delete Container1.
- C. Create a new container in DB1.
- D. Implement the Azure Cosmos DB .NET SDK.
Answer: C
Explanation:
Section: [none]
Explanation:
The good news is that there are two features, the Change Feed Processor and Bulk Executor Library, in Azure Cosmos DB that can be leveraged to achieve a live migration of your data from one container to another. This allows you to re-distribute your data to match the desired new partition key scheme, and make the relevant application changes afterwards, thus achieving the effect of "updating your partition key".
Incorrect Answers:
A: It is not possible to "update" your partition key in an existing container.
Reference:
https://devblogs.microsoft.com/cosmosdb/how-to-change-your-partition-key/
NEW QUESTION 143
Your company has an Azure Container Registry named Registry1.
You have an Azure virtual machine named Server1 that runs Windows Server 2019.
From Server1, you create a container image named image1.
You need to add image1 to Registry1.
Which command should you run on Server1? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/container-registry/container-registry-get-started-docker-cli
https://docs.docker.com/engine/reference/commandline/push/
NEW QUESTION 144
......
Use Valid New AZ-303 Test Notes & AZ-303 Valid Exam Guide: https://www.pass4sures.top/Azure-Solutions-Architect-Expert/AZ-303-testking-braindumps.html