2019/April Braindump2go AZ-100 Exam Dumps with PDF and VCE New Updated Today! Following are some new AZ-100 Exam Questions:
1.|2019 Latest AZ-100 Exam Dumps (PDF & VCE) Instant Download:
https://www.braindump2go.com/az-100.html
2.|2019 Latest AZ-100 Exam Questions & Answers Instant Download:
https://drive.google.com/drive/folders/1ScnhyMl84SXVjKyPISzFBYw3qkiIyJzE?usp=sharing
Question: 30
Your company has an Azure subscription named Subscription1.
The company also has two on-premises servers named Server1 and Server2 that run Windows Server 2016. Server1 is configured as a DNS server that has a primary DNS zone named adatum.com. Adatum.com contains 1,000 DNS records.
You manage Server1 and Subscription1 from Server2. Server2 has the following tools installed: The DNS Manager console
Azure PowerShell Azure CLI 2.0
You need to move the adatum.com zone to Subscription1. The solution must minimize administrative effort.
What should you use?
A. Azure PowerShell
B. Azure CLI
C. the Azure portal
D. the DNS Manager console
Answer: B
Explanation:
Azure DNS supports importing and exporting zone files by using the Azure command-line interface (CLI). Zone file import is not currently supported via Azure PowerShell or the Azure portal.
References:https://docs.microsoft.com/en-us/azure/dns/dns-import-export
Question: 31
You have an Azure subscription that contains the resources in the following table.
VM1 and VM2 are deployed from the same template and host line-of-business applications accessed by using Remote Desktop. You configure the network security group (NSG) shown in the exhibit.
(Click the Exhibit button.)
You need to prevent users of VM1 and VM2 from accessing websites on the Internet. What should you do?
A. Associate the NSG to Subnet1.
B. Disassociate the NSG from a network interface.
C. Change the DenyWebSites outbound security rule.
D. Change the Port_80 inbound security rule.
Answer: A
Explanation:
You can associate or dissociate a network security group from a network interface or subnet.
The NSG has the appropriate rule to block users from accessing the Internet. We just need to associate it with Subnet1.
References:https://docs.microsoft.com/en-us/azure/virtual-network/manage-network-security-
group
Question: 32
HOTSPOT
You have peering configured as shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Box 1: vNET6 only
Box 2: Modify the address space
The virtual networks you peer must have non-overlapping IP address spaces.
References:https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-manage- peering#requirements-and-constraints
Question: 33
HOTSPOT
You have an Azure subscription named Subscription1. Subscription1 contains the virtual networks in the following table.
Subscription1 contains the virtual machines in the following table:
The firewalls on all the virtual machines are configured to allow all ICMP traffic. You add the peerings in the following table.
For each of the following statements, select Yest if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.
Answer:
Explanation: Box 1: Yes
Vnet1 and Vnet3 are peers. Box 2: Yes
Vnet2 and Vnet3 are peers. Box 3: No
Peering connections are non-transitive.
References:https://docs.microsoft.com/en-us/azure/architecture/reference-architectures/hybrid- networking/hub-spoke
Question: 34
You have an Azure subscription that contains the resources in the following table.
To which subnets can you apply NSG1?
A. the subnets on VNet2 only
B. the subnets on VNet1 only
C. the subnets on VNet2 and VNet3 only
D. the subnets on VNet1, VNet2, and VNet3
E. the subnets on VNet3 only
Answer: E
Explanation:
All Azure resources are created in an Azure region and subscription. A resource can only be created in a virtual network that exists in the same region and subscription as the resource.
References:https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-vnet-plan- design-arm
Question: 35
You create an Azure Storage account named contosostorage.
You plan to create a file share named dat a.
Users need to map a drive to the data file share from home computers that run Windows 10. Which port should be open between the home computers and the data file share?
A. 80 B. 443 C. 445
D. 3389
Answer: C
Explanation:
Ensure port 445 is open: The SMB protocol requires TCP port 445 to be open; connections will fail if port 445 is blocked.
References:https://docs.microsoft.com/en-us/azure/storage/files/storage-how-to-use-files-windows
Question: 36
You have an Azure Active Directory (Azure AD) tenant named contosocloud.onmicrosoft.com. Your company has a public DNS zone for contoso.com.
You add contoso.com as a custom domain name to Azure AD. You need to ensure that Azure can verify the domain name. Which type of DNS record should you create?
A. RRSIG
B. PTR
C. DNSKEY
D. TXT
Answer: D
Explanation:
Create the TXT record. App Services uses this record only at configuration time to verify that you own the custom domain. You can delete this TXT record after your custom domain is validated and configured in App Service.
References:https://docs.microsoft.com/en-us/azure/dns/dns-web-sites-custom-domain
Question: 37
DRAG DROP
You have an Azure Active Directory (Azure AD) tenant that has the initial domain name. You have a domain name of contoso.com registered at a third-party registrar.
You need to ensure that you can create Azure AD users that have names containing a suffix of
@contoso.com.
Which three actions should you perform in sequence? To answer, move the appropriate cmdlets from the list of cmdlets to the answer area and arrange them in the correct order.
Answer:
Explanation:
The process is simple:
Add the custom domain name to your directory
Add a DNS entry for the domain name at the domain name registrar Verify the custom domain name in Azure AD
References:https://docs.microsoft.com/en-us/azure/dns/dns-web-sites-custom-domain
Question: 38
HOTSPOT
You have an Azure subscription named Subscription1. Subscription1 contains the resources in the following table.
VNet1 is in RG1. VNet2 is in RG2. There is no connectivity between VNet1 and Vnet2.
An administrator named Admin1 creates an Azure virtual machine named VM1 in RG1. VM1 uses a disk named Disk1 and connects to VNet1. Admin1 then installs a custom application in VM1.
You need to move the custom application to Vnet2. The solution must minimize administrative effort. Which two actions should you perform? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
You can move a VM and its associated resources to another resource group using the portal. References:https://docs.microsoft.com/en-us/azure/virtual-machines/windows/move-vm
Question: 39
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure subscription that contains 10 virtual networks. The virtual networks are hosted in separate resource groups.
Another administrator plans to create several network security groups (NSGs) in the subscription.
You need to ensure that when an NSG is created, it automatically blocks TCP port 8080 between the virtual networks.
Solution: From the Resource providers blade, you unregister the Microsoft.ClassicNetwork provider. Does this meet the goal?
A. Yes
B. No
Answer: B
Question: 40
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure subscription that contains 10 virtual networks. The virtual networks are hosted in separate resource groups.
Another administrator plans to create several network security groups (NSGs) in the subscription.
You need to ensure that when an NSG is created, it automatically blocks TCP port 8080 between the virtual networks.
Solution: You configure a custom policy definition, and then you assign the policy to the subscription. Does this meet the goal?
A. Yes
B. No
Answer: A
Explanation:
Resource policy definition used by Azure Policy enables you to establish conventions for resources in your organization by describing when the policy is enforced and what effect to take. By defining conventions, you can control costs and more easily manage your resources.
References:https://docs.microsoft.com/en-us/azure/azure-policy/policy-definition
!!!RECOMMEND!!!
1.|2019 Latest AZ-100 Exam Dumps (PDF & VCE) Instant Download:
https://www.braindump2go.com/az-100.html
2.|2019 Latest AZ-100 Study Guide Video Instant Download: