Free preview mode

Enjoy the free questions and consider upgrading to gain full access!

AZ-303Free trialFree trial

By microsoft
Aug, 2025

Verified

25Q per page

Question 26

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You manage an Active Directory domain named contoso.local.
You install Azure AD Connect and connect to an Azure Active Directory (Azure AD) tenant named contoso.com without syncing any accounts.
You need to ensure that only users who have a UPN suffix of contoso.com in the contoso.local domain sync to Azure AD.
Solution: You use the Synchronization Service Manager to modify the Metaverse Designer tab.
Does this meet the goal?

  • A: Yes
  • B: No

Question 27

HOTSPOT -
You have an Azure subscription that contains a resource group named RG1.
You have a group named Group1 that is assigned the Contributor role for RG1.
You need to enhance security for the virtual machines in RG1 to meet the following requirements:
✑ Prevent Group1 from assigning external IP addresses to the virtual machines.
✑ Ensure that Group1 can establish a Remote Desktop connection to the virtual machines through a shared external IP address.
What should you use to meet each requirement? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Image 1

Question 28

You create a container image named Image1 on a developer workstation.
You plan to create an Azure Web App for Containers named WebAppContainer that will use Image1.
You need to upload Image1 to Azure. The solution must ensure that WebAppContainer can use Image1.
To which storage type should you upload Image1?

  • A: an Azure Storage account that contains a blob container
  • B: Azure Container Instances
  • C: Azure Container Registry
  • D: an Azure Storage account that contains a file share

Question 29

You have an Azure Service Bus and two clients named Client1 and Client2.
You create a Service Bus queue named Queue1 as shown in the exhibit. (Click the Exhibit tab.)

Image 1

Client1 send messages to Queue1 as shown in the following table.

Image 2

Client2 reads the messages from Queue1 at 12:01:05.
How will the messages be presented to Client2?

  • A: Client2 will read three messages in the following order: M1, M2, and then M3.
  • B: Client2 will read three messages in the following order: M3, M1, and then M2.
  • C: Client2 will read four messages in the following order: M3, M1, M2 and then M3.
  • D: Client2 will read four messages in the following order: M3, M2, M1 and then M3.

Question 30

You have an Azure Cosmos DB account named Account1. Account1 includes a database named DB1 that contains a container named Container1. The partition key for Container1 is set to /city.
You plan to change the partition key for Container1.
What should you do first?

  • A: Delete Container1.
  • B: Create a new container in DB1.
  • C: Implement the Azure Cosmos DB.NET.SDK.
  • D: Regenerate the keys for Account1.

Question 31

HOTSPOT -
You have an Azure subscription that contains the Azure SQL servers shown in the following table.

Image 1

The subscription contains the elastic pools shown in the following table.

Image 2

The subscription contains the Azure SQL databases shown in the following table.

Image 3

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

Image 4

Question 32

HOTSPOT -
You have an Azure subscription that contains the storage accounts shown in the following table.

Image 1

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

Image 2

Question 33

You have an Azure subscription named Subscription1 that is used by several departments at your company. Subscription1 contains the resources in the following table.

Image 1

Another administrator deploys a virtual machine named VM1 and an Azure Storage account named storage2 by using a single Azure Resource Manager template.
You need to view the template used for the deployment.
From the Azure Portal, for which blade can you view the template that was used for the deployment?

  • A: container1
  • B: VM1
  • C: RG1
  • D: storage2

Question 34

HOTSPOT -
Your network contains an Active Directory domain named adatum.com and an Azure Active Directory (Azure AD) tenant named adatum.onmicrosoft.com.
Adatum.com contains the user accounts in the following table.

Image 1

Adatum.onmicrosoft.com contains the user accounts in the following table.

Image 2

You need to implement Azure AD Connect. The solution must follow the principle of least privilege.
Which user accounts should you use in Adatum.com and Adatum.onmicrosoft.com to implement Azure AD Connect? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Image 3

Question 35

You have an Azure subscription that contains a resource group named RG1. RG1 contains multiple resources.
You need to trigger an alert when the resources in RG1 consume $1,000 USD.
What should you do?

  • A: From Cost Management + Billing, add a cloud connector.
  • B: From the subscription, create an event subscription.
  • C: From Cost Management + Billing, create a budget.
  • D: From RG1, create an event subscription.

Question 36

HOTSPOT -
You create a virtual machine scale set named Scale1. Scale1 is configured as shown in the following exhibit.

Image 1

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Hot Area:

Image 2

Question 37

You plan to automate the deployment of a virtual machine scale set that uses the Windows Server 2016 Datacenter image.
You need to ensure that when the scale set virtual machines are provisioned, they have web server components installed.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

  • A: Upload a configuration script.
  • B: Create an Azure policy.
  • C: Modify the extensionProfile section of the Azure Resource Manager template.
  • D: Create a new virtual machine scale set in the Azure portal.
  • E: Create an automation account.

Question 38

HOTSPOT -
You have several Azure virtual machines on a virtual network named VNet1. Vnet1 has two subnets that have 10.2.0.0/24 and 10.2.9.0/24 address spaces.
You configure an Azure Storage account as shown in the following exhibit.

Image 1

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Hot Area:

Image 2

Question 39

HOTSPOT -
You create and save an Azure Resource Manager template named Template1 that includes the following four sections.
Section1.

Image 1

Section2.

Image 2

Section3.

Image 3

Section4.

Image 4

You deploy Template1.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

Image 5

Question 40

DRAG DROP -
You have virtual machines (VMs) that run a mission-critical application.
You need to ensure that the VMs never experience down time.
What should you recommend? To answer, drag the appropriate solutions to the correct scenarios. Each solution may be used once, more than once, or not at all.
You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point
Select and Place:

Image 1

Question 41

You have an Azure subscription.
You have an on-premises virtual machine named VM1. The settings for VM1 are shown in the exhibit. (Click the Exhibit tab.)

Image 1

You need to ensure that you can use the disks attached to VM1 as a template for Azure virtual machines.
What should you modify on VM1?

  • A: the memory
  • B: Integration Services
  • C: the hard drive
  • D: the network adapters
  • E: the processor

Question 42

Your company has an office in Seattle.
You have an Azure subscription that contains a virtual network named VNET1.
You create a site-to-site VPN between the Seattle office and VNET1.
VNET1 contains the subnets shown in the following table.

Image 1

You need to route all Internet-bound traffic from Subnet1 to the Seattle office.
What should you create?

  • A: a route for GatewaySubnet that uses the virtual network gateway as the next hop
  • B: a route for Subnet1 that uses the local network gateway as the next hop
  • C: a route for Subnet1 that uses the virtual network gateway as the next hop
  • D: a route for GatewaySubnet that uses the local network gateway as the next hop

Question 43

HOTSPOT -
You have Azure Storage accounts as shown in the following exhibit.

Image 1

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Hot Area:

Image 2

Question 44

You create an Azure virtual machine named VM1 in a resource group named RG1.
You discover that VM1 performs slower than expected.
You need to capture a network trace on VM1.
What should you do?

  • A: From the VM1 blade, configure Connection troubleshoot.
  • B: From Diagnostic settings for VM1, configure the performance counters to include network counters.
  • C: From the VM1 blade, install performance diagnostics and run advanced performance analysis.
  • D: From Diagnostic settings for VM1, configure the log level of the diagnostic agent.

Question 45

You have an Azure subscription that contains 100 virtual machines.
You have a set of Pester tests in PowerShell that validate the virtual machine environment.
You need to run the tests whenever there is an operating system update on the virtual machines. The solution must minimize implementation time and recurring costs.
Which three resources should you use to implement the tests? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

  • A: Azure Automation runbook
  • B: an alert rule
  • C: an Azure Monitor query
  • D: a virtual machine that has network access to the 100 virtual machines
  • E: an alert action group

Question 46

You have an Azure subscription named Subscription1 that contains an Azure virtual network named VNet1. VNet1 connects to your on-premises network by using
Azure ExpressRoute.
You need to connect VNet1 to the on-premises network by using a site-to-site VPN. The solution must minimize cost.
Which three actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

  • A: Create a gateway subnet.
  • B: Create a VPN gateway that uses the VpnGw1 SKU.
  • C: Create a connection.
  • D: Create a local site VPN gateway.
  • E: Create a VPN gateway that uses the Basic SKU.

Question 47

Your network contains an on-premises Active Directory domain named contoso.com. The domain contains the users shown in the following table.

Image 1

You plan to install Azure AD Connect and enable SSO.
You need to specify which user to use to enable SSO. The solution must use the principle of least privilege.
Which user should you specify?

  • A: User3
  • B: User2
  • C: User1
  • D: User4

Question 48

HOTSPOT -
You have an Azure subscription that contains the resource groups shown in the following table.

Image 1

RG1 contains the virtual machines shown in the following table.

Image 2

RG2 contains the virtual machines shown in the following table.

Image 3

All the virtual machines are configured to use premium disks and are accessible from the Internet.
VM1 and VM2 are in an availability set named AVSET1. VM3 and VM4 are in the same availability zone. VM5 and VM6 are in different availability zones.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

Image 4

Question 49

A company plans to use third-party application software to perform complex data analysis processes. The software will use up to 500 identical virtual machines
(VMs) based on an Azure Marketplace VM image.
You need to design the infrastructure for the third-party application server. The solution must meet the following requirements:
✑ The number of VMs that are running at any given point in time must change when the user workload changes.
✑ When a new version of the application is available in Azure Marketplace it must be deployed without causing application downtime.
✑ Use VM scale sets.
✑ Minimize the need for ongoing maintenance.
Which two technologies should you recommend? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

  • A: single placement group
  • B: single storage account
  • C: managed disks
  • D: autoscale

Question 50

You have a resource group named RG1 that contains the following:
✑ A virtual network that contains two subnets named Subnet1 and AzureFirewallSubnet
✑ An Azure Storage account named contososa1
✑ An Azure firewall deployed to AzureFirewallSubnet
You need to ensure that contososa1 is accessible from Subnet1 over the Azure backbone network.
What should you do?

  • A: Modify the Firewalls and virtual networks settings for contososa1.
  • B: Create a stored access policy for contososa1.
  • C: Implement a virtual network service endpoint.
  • D: Remove the Azure firewall.
Page 2 of 14 • Questions 26-50 of 334

Free preview mode

Enjoy the free questions and consider upgrading to gain full access!