File 2 303

12/21/2020 Whizlabs Online Certification Training Courses for Professionals (AWS, Java, PMP)
Special O er | Flat 15% OFF on All Courses | Use Coupon - WHIZSITE15
 j My Courses j Microsoft Azure Architect Technologies(AZ-303) j Practice Test 2 j Report
Search Courses D
Practice Test 2 Completed on 21-December-2020
Attempt Marks Obtained Your score

01 0 / 55 0.0%
Time Taken Result

N/A Failed
Domains wise Quiz Performance Report Join us on Slack community
No 1
Domain Implement and monitor an Azure infrastructure
Total Question 24
Correct 0
Incorrect 0
Unattempted 24
Marked for review 0
https://www.whizlabs.com/learn/course/quiz-result/2827785 1/92
No 2
Domain Implement management and security solutions
Total Question 19
Correct 0
Incorrect 0
Unattempted 19
Marked for review 0
No 3
Domain Implement solutions for app
Total Question 9
Correct 0
Incorrect 0
Unattempted 9
Marked for review 0
No 4
Domain Implement and manage data platforms
Total Question 3
Correct 0
Incorrect 0
Unattempted 3
Marked for review 0
Total Total
All Domain All Domain
Total Question 55
Correct 0
Incorrect 0
Unattempted 55
Marked for review 0
Review the Answers
Sorting by All
Question 1 Unattempted
Domain :Implement and monitor an Azure infrastructure
The following virtual machine is being created in Azure

Would the performance of the operating system disk
] A. decrease over t ime
] B. increase over t ime
] C. guaranteed to remain t he same

A
] D. decrease wit h more size
Explanation:
Answer – C
The performance of Premium SSD will always be guaranteed
The Microsoft documentation mentions the following
Since this is clearly mentioned in the documentation, all other options are incorrect
For more information on disk types for virtual machines , please go to the following link
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/disks-types
Ask our Experts
Rate this Question? vu

View Queries open
j
The following virtual machine is being created in Azure.
What would the virtual machine use for data protection?
] A. dm-crypt
] B. secure enclaves
A
] C. secure shell
] D. cert ificates
Explanation:
Answer – B
The instance size being used is part of the Confidential compute series of virtual machines. They use
secure enclaves for security.
The Microsoft documentation mentions the following.
Since this is clearly mentioned in the documentation, all other options are incorrect.
For more information on the DCV2 series virtual machines, please go to the following link-
https://docs.microsoft.com/en-us/azure/virtual-machines/dcv2-series
Ask our Experts

View Queries open
j
Domain :Implement management and security solutions
Your company has an Azure subscription. They have an on-premises file server named whizlab-
server that runs Windows Server 2019. This server is managed by using Windows Admin Center. You
have to ensure that if the server fails, you can recover the server files from Azure.
You decide to create an Azure Recovery Services vault. You then decide to install the Azure Backup
agent and then schedule the backup.
Would this meet the requirement?
] A. Yes
A
] B. No
Explanation:
Answer – A
Yes, you can schedule the Azure backup agent to backup all the files from the server onto the
Recovery Services vault.
For more information on an article on how to achieve this, please go to the following link-
https://docs.microsoft.com/en-us/azure/backup/backup-windows-with-mars-agent
Ask our Experts

View Queries open
j
You decide to register Windows Admin Center in Azure and then configure Azure Backup.
] A. Yes
] B. No
A
Explanation:
Answer – B
To back up the file server's contents, you can use the Azure backup agent or a Backup server or use
Azure File shares.
For more information on an article on how to use the backup agent, please go to the following link-
https://docs.microsoft.com/en-us/azure/backup/backup-windows-with-mars-agent
Ask our Experts

View Queries open
j
You decide to create a Recovery Services vault and then configure a backup by using Windows
Server Backup.
] A. Yes
A
] B. No
Explanation:
Answer – A
Yes, you can achieve this by using Windows Server Backup. All of the backup data will be stored in
the Azure Recovery Services vault.
https://docs.microsoft.com/en-us/azure/backup/backup-azure-microsoft-azure-backup
Ask our Experts

View Queries open
j
You decide to create an Azure storage account and use the Azure File Sync service for the server.
] A. Yes
A
] B. No
Explanation:
Answer – A
Yes, you can sync your files with Azure file shares using the Azure File Sync service.
https://docs.microsoft.com/en-us/azure/storage/files/storage-sync-files-deployment-guide?
tabs=azure-portal
Ask our Experts

View Queries open
j
Domain :Implement solutions for app
You have a Windows Server based on the Windows Server 2019 image. This is set up as a container
host. You have to create a container image. You would use the following instructions to create the
image.
FROM mcr.microsoft.com/windows/servercore:lts2019
RUN dism.exe /online /enable-feature /all /featurename:iis-webserver /NoRestart
Which of the following would you create to store these instructions?
] A. Dockerfile
A
] B. daemon.json
] C. Build.ini
] D. app.json
Explanation:
Answer – A
For Docker-based instructions for creating a custom image, you would go ahead and create a
Dockerfile.
An example of this is also given in the Microsoft documentation.
For more information on how to create your custom docker image, please go to the following link-
https://docs.microsoft.com/en-us/azure/app-service/containers/tutorial-custom-docker-image
Ask our Experts

View Queries open
j
j
Your company has the following virtual machines defined in Azure.

Name
Region
whizlabvm1
West US
whizlabvm2
West US
whizlabvm3
West US
whizlabvm4
West US
whizlabvm5
East US 2
whizlabvm6
East US 2
All virtual machines are configured to use premium disks. whizlabvm1 and whizlabvm2 are part of an
availability set named whizlabset1. Whizlabvm3 and whizlabvm4 are in the same availability zone
and are also part of an availability set named whizlabset2. whizlabvm5 and whizlabvm6 are part of
different availability zones.
Would whizlabvm1 be eligible for a Service Level Agreement of 99.95%?
] A. Yes
A
] B. No
Explanation:
Answer – A
In Microsoft documentation, you can see that if you have two or more virtual machines deployed in
an availability set, you get an SLA of 99.99%.
For more information on the SLA, please go to the following link-
https://azure.microsoft.com/en-us/support/legal/sla/virtual-machines/v1_9/
Ask our Experts

View Queries open
j

Name
Region
whizlabvm1
West US
whizlabvm2
West US
whizlabvm3
West US
whizlabvm4
West US
whizlabvm5
East US 2
whizlabvm6
East US 2
] A. Yes
] B. No
A
Explanation:
Answer – B
To achieve 99.99% availability, you need to have two or more virtual machines deployed across two
or more Availability Zones.
Ask our Experts

View Queries open
j

Name
Region
whizlabvm1
West US
whizlabvm2
West US
whizlabvm3
West US
whizlabvm4
West US
whizlabvm5
East US 2
whizlabvm6
East US 2
] A. Yes
A
] B. No
Explanation:
Answer – A
You can see that if you have two or more virtual machines deployed across two or more Availability
Zones, you get an SLA of 99.99%.
Ask our Experts

View Queries open
j
You have to deploy an Azure virtual machine using an Azure Resource Manager template.
Below are snippets of the template. You have to complete the definition of the template.
Which of the following would go into Area 1?
] A. 'Microsoft .Net work/publicIPAddresses/ ’
] B. 'Microsoft .Net work/ virt ualNet works/ '

A
] C. 'Microsoft .Net work/net workInterfaces/ '
] D. 'Microsoft .Net work/ virt ualNet works/subnet s'
Explanation:
Answer – B
Here we have to mention the dependency on the virtual network.
When you implement an ARM template for the deployment of the virtual machine, this dependency
is evident.
Since this is clear from the implementation, all other options are incorrect.
For more information on ARM templates, please go to the following link-
https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/template-syntax
Ask our Experts

View Queries open
j
You have to deploy an Azure virtual machine using an Azure Resource Manager template.
Below are snippets of the template. You have to complete the definition of the template.
Which of the
following would go into Area 2?
] A. 'Microsoft .Net work/publicIPAddresses/ ’
] B. 'Microsoft .Net work/ virt ualNet works/ '
] C. 'Microsoft .Net work/net workInterfaces/ '

A
] D. 'Microsoft .Net work/ virt ualNet works/subnet s'
Explanation:
Answer – C
Here we have to mention the dependency on the virtual network interface.
When you implement an ARM template for the deployment of the virtual machine, this dependency
is evident.
For more information on ARM templates, please go to the following link-
Ask our Experts

View Queries open
j
You have the following Azure storage accounts as part of your subscription.
Name
Account kind
Size
whizlabstore1
General Purpose v1
15 TB
whizlabstore2
General Purpose v1
1 TB
whizlabstore3
General Purpose v2
15 TB
whizlabstore4
General Purpose v2
1 TB
whizlabstore5
blobstorage
5 TB
All of the storage accounts only contain blobs.
You have to implement several lifecycle management rules for all storage accounts.
Which of the following must you do first for implementing this requirement?
] A. Move 5 TB of blob dat a from whizlabstore3 to whizlabstore2.
] B. Move 5 TB of blob dat a from whizlabstore1 to whizlabstore2.
] C. Change t he t ype of whizlabstore5 to a General Purpose V2 storage account .
] D. Upgrade whizlabstore1 and whizlabstore2 to General Purpose V2 storage

account s. A
Explanation:
Answer – D
Lifecycle Management rules are applicable for General Purpose V2 and Blob storage accounts.
This is also given in the Microsoft documentation.
Since this is clearly given in the Microsoft documentation, all other options are incorrect.
For more information on lifecycle management rules, please go to the following link-
https://docs.microsoft.com/en-us/azure/storage/blobs/storage-lifecycle-management-
concepts?tabs=azure-portal
Ask our Experts

View Queries open
j
You have the following storage accounts defined as part of your subscription.
Name
Kind
Performance
tier
Replication
Location
whizlabstore1
StorageV2
Premium
Locally-
redundant
storage (LRS)
East US
whizlabstore2
Storage
Standard
Geo-
redundant
storage (GRS)
UK West
whizlabstore3
BlobStorage
Standard
Locally-
redundant
storage (LRS)
North Europe
Can you use whizlabstore1 to store Azure file shares?
] A. Yes
] B. No
A
Explanation:
Answer – B
If you have a General Purpose V2 storage account of the Premium performance type, you can only
store page blobs.
For more information on storage accounts, please go to the following link-
https://docs.microsoft.com/en-us/azure/storage/common/storage-account-overview
Ask our Experts

View Queries open
j
Name
Kind
Performance
tier
Replication
Location
whizlabstore1
StorageV2
Premium
Locally-
redundant
storage (LRS)
East US
whizlabstore2
Storage
Standard
Geo-
redundant
storage (GRS)
UK West
whizlabstore3
BlobStorage
Standard
Locally-
redundant
storage (LRS)
North Europe

Would whizlabstore2 have six copies of data?
] A. Yes
A
] B. No
Explanation:
Answer – A
With Geo-redundant storage, you would have three copies in the primary region and three copies of
data in the secondary region.
This is also given in the Microsoft documentation.
For more information on storage account redundancy, please go to the following link-
https://docs.microsoft.com/en-us/azure/storage/common/storage-redundancy
Ask our Experts

View Queries open
j
Name
Kind
Performance
tier
Replication
Location
whizlabstore1
StorageV2
Premium
Locally-
redundant
storage (LRS)
East US
whizlabstore2
Storage
Standard
Geo-
redundant
storage (GRS)
UK West
whizlabstore3
BlobStorage
Standard
Locally-
redundant
storage (LRS)
North Europe

Can you convert whizlabstore2 to a GRS account?
] A. Yes
A
] B. No
Explanation:
Answer – A
If you have such a storage account, you can change the replication by going to the storage
account's Configuration section.
For more information on changing the storage account replication, please go to the following link-
https://docs.microsoft.com/en-us/azure/storage/common/redundancy-migration?tabs=portal
Ask our Experts

View Queries open
j
Your company needs to deploy resources for several departments. These resources will reside in
Azure. Each department has a separate requirement when it comes to security.
Department
Requirement
DepartmentA
Store asymmetric keys to allow for real-
time I/O encryption and decryption of
Azure SQL database data and log files.
DepartmentB
Allow applications to retrieve x.509
certificates, stored in an Azure AD-
protected resource by using an access
token
DepartmentC
Allow to protect Azure SQL database
connection strings and only allow
access to the connection strings at
application runtime
Which of the following would you use to fulfill the requirement for DepartmentA?
] A. Azure AD Privileged Ident it y Management
] B. Azure AD Managed Service Ident it y
] C. Azure Key Vault

A
] D. Azure Securit y Center
Explanation:
Answer – C
You can use the Azure Key Vault service for the storage of encryption keys.
For more information on the Azure Key Vault service, please go to the following link-
https://docs.microsoft.com/en-us/azure/key-vault/general/overview
Ask our Experts

View Queries open
j
Department
Requirement
DepartmentA
DepartmentB
certificates, stored in an Azure AD-
token
DepartmentC
application runtime
Which of the following would you use to fulfill the requirement for DepartmentB?

A
Explanation:
Answer – B
To access an Azure AD resource using an access token, you would use Azure AD Managed Service
Identity.
An example of this is given in the Microsoft documentation.
For more information on Azure Managed Service Identities, please go to the following link-
https://docs.microsoft.com/en-us/azure/active-directory/managed-identities-azure-
resources/overview
Ask our Experts

View Queries open
j
Department
Requirement
DepartmentA
DepartmentB
certificates , stored in an Azure AD-
token
DepartmentC
application runtime
Which of the following would you use to fulfill the requirement for DepartmentC?

A
Explanation:
Answer – C
You can use the Azure Key Vault service for the storage of secrets.
For more information on the Azure Key Vault service, please go to the following link-
https://docs.microsoft.com/en-us/azure/key-vault/general/overview
Ask our Experts

View Queries open
j
You have an Azure Kubernetes cluster named whizlabcluster. This cluster is part of the resource
group whizlabs-rg. You have to deploy an application to the cluster by using a manifest file. The
deployment needs to be done from an Azure AD-joined device. You have installed Azure CLI on the
device. Which of the following should you execute next?
] A. kubect l get nodes
] B. az aks inst all-cli

A
] C. kubect l apply -f apply.yaml
] D. az aks get -credent ials --resource-group whizlabs-rg --name whizlabcluster
Explanation:
Answer – B
In order to work with the Kubernetes cluster, you need to have the kubectl tool installed which can
be done via the command az aks install-cli.
For more information on working with Azure Kubernetes, please go to the following link-
https://docs.microsoft.com/en-us/azure/aks/kubernetes-walkthrough
Ask our Experts

View Queries open
j
Domain :Implement and manage data platforms
You have an Azure Cosmos DB database that contains a container named whizlabcontainer. The
partition key is set of /day. The container contains the following items.
Name
Content
whizlabItem1
{ "id":"1", "day": "Mon", "value": "10" }
whizlabItem2
{ "id":"2", "day": "Mon", "value": "15" }
whizlabItem3
{ "id":"3", "day": "Tue", "value": "10" }
whizlabItem4
{ "id":"4", "day": "Wed", "value": "15" }

You have to programmatically query the Azure Cosmos DB container and retrieve whizlabItem1 and
whizlabItem2 only.
You decide to run the following query.
SELECT day WHERE value=”10”
You set the EnableCrossPartitionQuery property to False.
] A. Yes
] B. No
A
Explanation:
Answer – B
This query is based on the partition key, but Cross Partition Queries is not set as per the question.
Also, the query itself would yield the wrong results.
For more information on querying containers in Azure Cosmos DB, please go to the following link-
https://docs.microsoft.com/en-us/azure/cosmos-db/how-to-query-container
Ask our Experts

View Queries open
j
Name
Content
whizlabItem1
{ "id":"1", "day": "Mon", "value": "10" }
whizlabItem2
{ "id":"2", "day": "Mon", "value": "15" }
whizlabItem3
{ "id":"3", "day": "Tue", "value": "10" }
whizlabItem4
{ "id":"4", "day": "Wed", "value": "15" }

whizlabItem2 only.
SELECT day FROM c WHERE c.value=”10” OR c.value=”15”
You set the EnableCrossPartitionQuery property to True.

] A. Yes
] B. No
A
Explanation:
Answer – B
This query would retrieve all of the items.
Ask our Experts

View Queries open
j
Name
Content
whizlabItem1
{ "id":"1", "day": "Mon", "value": "10" }
whizlabItem2
{ "id":"2", "day": "Mon", "value": "15" }
whizlabItem3
{ "id":"3", "day": "Tue", "value": "10" }
whizlabItem4
{ "id":"4", "day": "Wed", "value": "15" }

whizlabItem2 only.
SELECT id FROM c WHERE c.day=”Mon”
You set the EnableCrossPartitionQuery property to True.
] A. Yes
A
] B. No
Explanation:
Answer – A
Yes, this would retrieve the desired results.
Ask our Experts

View Queries open
j
You have an Azure Web App that has the following autoscaling conditions.
At 6:00, the web application is running four instances.

All of the scaling conditions are configured to have a duration of 20 minutes and a cooldown time
period of 10 minutes.
If the web application's CPU utilization is 10% at 06:00, what is the number of instances running at
06:25?
] A. 4 inst ances
] B. 3 inst ances
A
] C. 2 inst ances
] D. 1 inst ance
Explanation:
Answer – B
Now at 6:00, the first scaling condition will only occur at 6:20. This is because each scaling condition
has a duration of 20 minutes. Since the CPU utilization is 10%, a scale in condition will occur,
reducing the number of instances to 3. Since there is a cool-down period of 10 minutes, no more
scaling actions will occur at 6:25.
Since this is the ideal solution from the reasoning, all other options are incorrect.
For more information on the scaling aspect for Azure Web Apps, please go to the following link-
https://docs.microsoft.com/en-us/azure/app-service/manage-scale-up
Ask our Experts

View Queries open
j
You have an Azure Web App that has the following autoscaling conditions.
At 6:00, the web application is running four instances.

All of the scaling conditions are configured to have a duration of 20 minutes and a cooldown time
period of 10 minutes.
If the web application's CPU utilization is 70% at 06:00, what is the number of instances running at
06:25?
] A. 4 inst ances
] B. 5 inst ances
] C. 6 inst ances
A
] D. 7 inst ances
Explanation:
Answer – C
Now at 6:00, the first scaling condition will only occur at 6:20. This is because each scaling condition
has a duration of 20 minutes. Since the CPU utilization of the web application is 70%, a scale out
condition to expand the number of instances by 3 will occur. But since the maximum number of
instances for the web application is 6, this would be the number of instances running at 6:25.
Since this is the ideal solution from the reasoning, all other options are incorrect.
For more information on the scaling aspect for Azure Web Apps, please go to the following link-
https://docs.microsoft.com/en-us/azure/app-service/manage-scale-up
Ask our Experts

View Queries open
j
You have a set of virtual machines that are hosting mission-critical applications. You have to ensure
the experience of virtual machines as little downtime as possible.
Which of the following can you use to maintain application performance across an identical set of
Virtual Machines?
] A. Scale set s
A
] B. Availabilit y set s
] C. Availabilit y zones
] D. Azure Funct ions
Explanation:
Answer – A
If you have an identical set of virtual machines, you can use Virtual Machine scale sets and scaling
conditions to maintain application performance.
Option B is incorrect since this is used to protect your application infrastructure against faults and
updates to the underlying infrastructure.
Option C is incorrect since this is used to protect your application infrastructure against data center
level failures.
Option D is incorrect since this is a serverless compute service.
For more information on Azure virtual machine scale sets, please go to the following link-
https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/overview
Ask our Experts

View Queries open
j
You have a set of virtual machines that are hosting mission-critical applications. You have to ensure
the experience of virtual machines as little downtime as possible.
Which of the following can you use to maintain application availability when an Azure datacenter
fails?
] A. Scale set s
] B. Availabilit y set s
] C. Availabilit y zones
A
] D. Azure Funct ions
Explanation:
Answer – C
You can use Availability zones to help protect against datacenter level failures.
For more information on Azure availability zones, please go to the following link-
https://docs.microsoft.com/en-us/azure/availability-zones/az-overview
Ask our Experts

View Queries open
j
View Case Study

Would the template use the Windows Server 2012 R2 Datacenter image in the deployment of the
virtual machine?
] A. Yes
A
] B. No
Explanation:
Answer – A
Since the SKU is explicitly specified in Snippet 4, this would be the underlying image used in the
deployment.
For more information on Azure ARM templates, please go to the following link-
Ask our Experts

View Queries open
j
View Case Study

Would the template use a custom image of Windows Server in the deployment of the virtual
machine?
] A. Yes
] B. No
A
Explanation:
Answer – B
Since there is no mention of using a custom image in the template, a custom image will not be used
to deploy the virtual machine.
Ask our Experts

View Queries open
j
View Case Study

During the template deployment, would the administrator be prompted to select a version of
Windows Server?
] A. Yes
A
] B. No
Explanation:
Answer – A
Since there is a parameter section for selecting the Windows OS version, it would be shown during
the template's deployment.
Ask our Experts

View Queries open
j
Your company needs to host a function using the Function App Service. It needs to be ensured that
the Function App can support Session Affinity. It also needs to be ensured that costs are minimized.
You decide to create the Function App as part of a consumption plan.
Would this solution fulfill the requirement?
] A. Yes
] B. No
A
Explanation:
Answer – B
When a Function App is created as part of the consumption plan, there are no instances provided as
part of the plan, which would allow the support of session affinity.
For more information on Azure Functions, please visit the below URL-
https://docs.microsoft.com/en-us/azure/azure-functions/functions-overview
Ask our Experts

View Queries open
j
You decide to create the Function App as part of a Basic App Service plan.
Would this solution fulfill the requirement?
] A. Yes
A
] B. No
Explanation:
Answer – A
Yes, the Function App should be made part of an App Service Plan. If you want to minimize costs,
then ensure that the Function App is created as part of the Basic App Service Plan.
Once you create the Function App as part of the Basic App Service Plan, go onto Application
Settings.
You can then enable session affinity.
Ask our Experts

View Queries open
j
You decide to create the Function App as part of an Isolated App Service plan.
] A. Yes
] B. No
A
Explanation:
Answer – B
This option will not minimize costs. You should ideally use the Basic App service plan for the
Function App if you want to minimize costs.
https://azure.microsoft.com/en-in/pricing/details/app-service/plans/
Ask our Experts

View Queries open
j
A company needs to deploy 5 Virtual Machines. Below are the requirements for the Virtual Machines.
Each Virtual Machine needs to have a Private IP address.
Each Virtual Machine needs to have a Public IP address.
The same inbound and outbound security group rules.
What is the minimum number of Network interfaces required for this requirement?
] A. 5
A
] B. 10
] C. 15
] D. 20
Explanation:
Answer – A
When you look at a Network interface for a Virtual Machine, you can see that the network interface
gets a Private IP address. It can also get allocated a Public IP address.
Hence, we just need to have one network interface per virtual machine.
Since this is evident from the implementation, all other options are invalid.
For more information on working with network interfaces, please visit the below URL-
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-network-interface
Ask our Experts

View Queries open
j

A company needs to deploy 5 Virtual Machines. Below are the requirements for the Virtual Machines.
Each Virtual Machine needs to have a Private IP address.
Each Virtual Machine needs to have a Public IP address.
The same inbound and outbound security group rules.
What is the minimum number of Network Security Groups required for this requirement?
] A. 1
A
] B. 2
] C. 5
] D. 10
Explanation:
Answer – A
You can associate a Network Security Group with multiple network interfaces, as shown below.
Hence since both the Inbound and Outbound network security rules are the same, we can just have
one Network Security Group overall for all of the network interfaces.
For more information on working with network security groups, please visit the below URL-
https://docs.microsoft.com/en-us/azure/virtual-network/manage-network-security-group
Ask our Experts

View Queries open
j
A company has an Azure Subscription. They have the following Networks defined.
Virtual Network
Name
Virtual Network
Address Space
Subnet
Subnet
address range
whizlabs-net1
10.1.0.0/16
SubnetA
10.1.1.0/24
whizlabs-net2
10.10.0.0/16
SubnetB
10.10.1.0/24
whizlabs-net3
172.16.0.0/16
SubnetC
172.16.1.0/16
The following Virtual Machines are defined.
Name
IP address
Subnet
whizlabsvmA
10.1.1.4
SubnetA
whizlabsvmB
10.10.1.4
SubnetB
whizlabsvmC
172.16.1.4
SubnetC
The following Peering Connections are defined.
Virtual Network
Peering Network
whizlabs-net1
whizlabs-net3
whizlabs-net2
whizlabs-net3
whizlabs-net3
whizlabs-net1
On all virtual machines, ICMP traffic is allowed.
From the above configuration, could a ping request be made between whizlabsvmA and
whizlabsvmC?
] A. Yes
A
] B. No
Explanation:
Answer - A
Below is the infrastructure diagram representing the infrastructure in the question.
An important point to remember is that for a peering connection to be active between 2 virtual
networks, a peering connection needs to be created from both directions.
Since there is a peering connection between whizlabs-net1 and whizlabs-net3, the connection is
possible between the virtual machines.
For more information on Virtual Networking peering, please visit the below URL-
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-peering-overview
Ask our Experts

View Queries open
j
Virtual Network
Name
Virtual Network
Address Space
Subnet
Subnet
address range
whizlabs-net1
10.1.0.0/16
SubnetA
10.1.1.0/24
whizlabs-net2
10.10.0.0/16
SubnetB
10.10.1.0/24
whizlabs-net3
172.16.0.0/16
SubnetC
172.16.1.0/16
Name
IP address
Subnet
whizlabsvmA
10.1.1.4
SubnetA
whizlabsvmB
10.10.1.4
SubnetB
whizlabsvmC
172.16.1.4
SubnetC
Virtual Network
Peering Network
whizlabs-net1
whizlabs-net3
whizlabs-net2
whizlabs-net3
whizlabs-net3
whizlabs-net1
From the above configuration, could a ping request be made between whizlabsvmB and
whizlabsvmC?
] A. Yes
] B. No
A
Explanation:
Answer - B
Since there is a peering connection between whizlabs-net1 and whizlabs-net3, the connection is
possible between the virtual machines.
Ask our Experts

View Queries open
j
Virtual Network
Name
Virtual Network
Address Space
Subnet
Subnet
address range
whizlabs-net1
10.1.0.0/16
SubnetA
10.1.1.0/24
whizlabs-net2
10.10.0.0/16
SubnetB
10.10.1.0/24
whizlabs-net3
172.16.0.0/16
SubnetC
172.16.1.0/16
Name
IP address
Subnet
whizlabsvmA
10.1.1.4
SubnetA
whizlabsvmB
10.10.1.4
SubnetB
whizlabsvmC
172.16.1.4
SubnetC
Virtual Network
Peering Network
whizlabs-net1
whizlabs-net3
whizlabs-net2
whizlabs-net3
whizlabs-net3
whizlabs-net1
From the above configuration, could a ping request be made between whizlabsvmB and
whizlabsvmA?
] A. Yes
] B. No
A
Explanation:
Answer – B
Since there is a peering connection missing from whizlabs-net3 to whizlabs-net2, the connection is
not possible between the Virtual Networks.
Ask our Experts

View Queries open
j
Your company has set up an Azure AD tenant with the domain name of whizlabs.onmicrosoft.com.
The company has purchased the domain whizlabs.com from a domain registrar. They want to ensure
now that they can define users in Azure AD with the suffix of @whizlabs.com.
Which of the following steps would you need to implement for this? Choose three answers from the
options given below.
A. Add an Azure AD tenant .
B. Create an Azure DNS zone.
C. Verify t he domain in Azure AD.

A
D. Add a record in t he domain regist rar.
A
E. Add a custom domain name.
A
Explanation:
Answer – C, D and E
The steps for this are given in the Microsoft documentation.
First, add the custom domain.
Next, add the DNS information to the domain registrar.
Finally, you can verify the custom domain name.
For more information on adding custom domains in Azure AD, please visit the below URL-
https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/add-custom-domain
Ask our Experts

View Queries open
j
Your company needs to deploy 100 virtual machines using Azure Resource Manager templates. From
a security perspective, they want to ensure that the passwords for the Virtual Machines are not
stored in plain text in the template files.
Which of the following can be used along with ARM templates to securely store the passwords?
] A. An Azure Recovery Services vault
] B. An Azure Key vault

A
] C. An Azure AD policy
] D. An Azure CosmosDB account
Explanation:
Answer – B
This is given as a clear example in the Microsoft documentation.
For more information on how to implement Azure Key Vault with Azure Resource Manager templates,
one can go to the below link-
https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-manager-keyvault-
parameter
Ask our Experts

View Queries open
j
Your company has an Azure subscription. Several departments deploy resources across several
resource groups for the subscription. The billing department needs to get a report on the costs for
each department.
Which of the following steps can help achieve this? Choose three answers from the options given
below.
A. Assign a t ag to each of t he resource groups.
B. Assign a t ag to each of t he resources.

A
C. Use t he Resource cost s blade for each resource group.
D. From Cost Analysis, create a filter based on t he t ag.

A
E. Download t he usage report .
https://www.whizlabs.com/learn/course/quiz-result/2827785
A 68/92
Explanation:
Answer - B, D and E
Tags can be used as an effective means for billing purposes. The Microsoft documentation mentions
the following.
In the Cost Analysis section, you can actually create a filter based on the tag as shown below.
Option A is incorrect since the department creates resources across various resource groups.
Option C is incorrect since you need to use the Cost Analysis section.
For more information on resource group tags, please go to the below URL-
https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-using-tags
Ask our Experts

View Queries open
j
A company is planning to deploy a web application to Azure. The Web application will consist of the
following components.
Azure BLOB storage for storage of images
Azure App Service to host the Web application
The following are the additional requirements for the application.
All communications to the web application must be made via SSL.
The web application must support high tra c loads, even if encryption is enabled.
The web application must be protected from web attacks.
The design should also cater to routing user requests to the endpoint with the lowest latency.
You have to decide on which service to use based on the key requirements.
Which of the following would you use to ensure that SSL can be used to encrypt and decrypt
traffic?
] A. Azure Applicat ion gateway

A
] B. Azure Traffic Manager
] C. Azure Securit y Center
] D. Azure Monitor
Explanation:
Answer – A
You can use the SSL termination feature of the Application gateway service for this requirement. The
Microsoft documentation mentions the following.
Option B is incorrect since this feature is not available in Azure Traffic Manager.
Option C is incorrect since this is a security-based tool available from Azure.
Option D is incorrect since this is a monitoring-based tool available from Azure.
For more information on SSL termination for the Application Gateway, please go to the below URL-
https://docs.microsoft.com/en-us/azure/application-gateway/ssl-overview
Ask our Experts

View Queries open
j
A company is planning to deploy a web application to Azure. The Web application will consist of the
following components.
Azure BLOB storage for storage of images
Azure App Service to host the Web application

The following are the additional requirements for the application.
All communications to the web application must be made via SSL.
The web application must support high tra c loads even if encryption is enabled.
The web application must be protected from web attacks.
The design should also cater to routing user requests to the endpoint with the lowest latency.
You have to decide on which service to use based on the key requirements.
Which of the following would you use to protect the web application from external attacks?
] A. Azure Load Balancer
] B. Azure Traffic Manager
] C. Web Applicat ion Firewall

A
] D. Azure Monitor
Explanation:
Answer – C
You can use the Web Application firewall feature in the Application gateway. The Microsoft
documentation mentions the following.
The other options are incorrect since they do not have the ability to protect your web applications
against attacks.
For more information on the web application firewall, please go to the below URL-
https://docs.microsoft.com/en-us/azure/application-gateway/waf-overview
Ask our Experts

View Queries open
j
Your company has resources deployed to Azure as part of their subscription. As part of the
alignment of permissions with Security, the following permissions need to be assigned to various
groups of members.
whizlabsgroupA - The users of this group must be able to manage all resources. But they should not
have the ability to manage access and authentication for users.
whizlabsgroupB - The users of this group must be able to manage Virtual Machines but not the virtual
networks or storage accounts associated with the Virtual Machines.
whizlabsgroupC - The users of this group must be able to manage storage accounts.
You need to assign the appropriate roles for the different groups.
Which of the following role would you assign to the whizlabsgroupA group of users?
] A. Owner
] B. Cont ributor
A
] C. Reader
] D. Virt ual Machine Cont ributor
] E. Storage Account Cont ributor
Explanation:
Answer – B
The Contributor role is the ideal role. This role allows the user to manage all resources but not the
access to the resources. This is also given in the Microsoft documentation.
Option A is incorrect because even though this would allow the user to manage resources, it would
also allow the management of access. And we must always use the principle of least privilege when
assigning permissions to users.
Options C, D and E don’t provide the required permissions.
For more information on the inbuilt RBAC roles, please go ahead and visit the below URL-
https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles
Ask our Experts

View Queries open
j
groups of members.
whizlabsgroupB - The users of this group must manage Virtual Machines but not the virtual networks
or storage accounts associated with the Virtual Machines.
Which of the following role would you assign to the whizlabsgroupB group of users?
] A. Owner
] B. Cont ributor
] C. Reader

A
Explanation:
Answer – D
The Virtual Machine Contributor role is specifically meant for this type of access. This is also given in
the Microsoft documentation.
Since this is clearly given, all other options are incorrect.
Ask our Experts

View Queries open
j
groups of members.
whizlabsgroupB - The users of this group must be able to manage Virtual Machines but not the virtual
networks or storage accounts associated with the Virtual Machines.
Which of the following role would you assign to the whizlabsgroupC group of users?
] A. Owner
] B. Cont ributor
] C. Reader

A
Explanation:
Answer – E
The Storage Account Contributor role is specifically meant for this type of access. This is also given
in the Microsoft documentation.
Ask our Experts

View Queries open
j
A company is implementing self-service password reset and Multi-Factor authentication in Azure AD.
You have to select the right authentication mechanisms that can be used for both self-service
passwords reset and Multi-Factor authentication.
Which of the following can you use for this purpose? Choose two answers from the options given
below.
A. Mobile App Code
B. Azure AD Passwords
A
C. App passwords
D. Email address
E. Mobile Phone
A
Explanation:
Answer – B and E
Below are the authentication methods available for both self-service password reset and MFA.
https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-authentication-
methods
Microsoft highly recommends Administrators enable users to select more than the minimum required
number of authentication methods in case they do not have access to one.
Password
MFA and SSPR
Security questions
SSPR Only
Email address
SSPR Only
Microsoft Authenticator app

MFA and SSPR
OATH Hardware token

Public preview for MFA and SSPR
SMS
MFA and SSPR
Voice call
MFA and SSPR
App passwords
MFA only in certain cases

So common for SSPR and MFA are as follows.
Microsoft highly recommends Administrators enable users to select more than the minimum
required number of authentication methods in case they do not have access to one.
Password
MFA and SSPR
Confirm our Option B
Microsoft Authenticator app

MFA and SSPR
confirm our Option A
OATH Hardware token

Public preview for MFA and SSPR
SMS
MFA and SSPR
Voice call
MFA and SSPR
Confirm our Option E
Here Password is: AD password which can not be disabled.
A. Mobile App Code >> Microsoft Authenticator app

B. Azure AD Passwords >> Password
E. Mobile Phone >> Voice call
Reference URL- https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-
authentication-methods
Ask our Experts

View Queries open
j
A company has a set of 10 Virtual Machines created in their Azure subscription.

There is a requirement to ensure that an IT administrator gets an email whenever the following
operations are performed on the Virtual Machine.
Restart of the machine
Whenever the machine is deallocated
Whenever the machine is powered o
You need to decide on the minimum number of rules and actions groups required in Azure Monitor
for this requirement. Choose two answers from the options given below.
A. Three rules
A
B. One rule
C. One act ion group

A
D. Three act ion groups
Explanation:
Answer - A and C
When you create a rule in Azure Monitor, you need to choose 3 separate rules, one for each
requirement. You will need to create 3 alert rules- one rule for every Activity Log signal.
You can then just create one action group as shown below. That action group could be used to
generate the email.
For more information on alerts in Azure Monitor, please go ahead and visit the below URL-
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/alerts-overview
Ask our Experts

View Queries open
j
View Case Study

Which of the following storage account types would you use to fulfill the requirement for having file
shares accessible from Virtual machines in Azure?
] A. BLOB storage
] B. CosmosDB
] C. General Purpose v2
A
] D. ZAzure Site Recovery vault
Explanation:
Answer – C
Yes, you can set up a General purpose v2 storage that has support for file shares.
Option A is incorrect since this storage account type has no support for file shares.
Option B is incorrect since this is used for data storage with different types of API’s.
Option D is incorrect since this is used to store backups and is used for recovery purposes.
For more information on Storage accounts, please go ahead and visit the below URL-
https://docs.microsoft.com/en-us/azure/storage/common/storage-account-overview
Ask our Experts

View Queries open
j
View Case Study

You need to complete the below PowerShell cmdLet, which will be used to create the custom role
“whizlabsrole”.
Which of the following would go into Slot1?
] A. Get -AzureADDirectoryRole
] B. Get -AzureADRole
] C. Get -AzureRmRoleAssignment
] D. New-AzureRmRoleDefinit ion
A
Explanation:
Answer – D
An example of this is given in the Microsoft documentation. This is used to create a custom role.
New-AzRoleDefinition -InputFile "C:\CustomRoles\ReaderSupportRole.json"
For more information on creating a custom role, please go ahead and visit the below URL-
https://docs.microsoft.com/en-us/azure/role-based-access-control/tutorial-custom-role-
powershell
Ask our Experts

View Queries open
j
View Case Study

You need to complete the below command, which will be used to create the custom role
“whizlabsrole”.
Which of the following would go into Slot2?
] A. Convert From-Json
] B. Convert From-St ring
] C. ConvertTo-Json
A
] D. ConvertTo-Xml
Explanation:
Answer – C
An example of this is given in the Microsoft documentation. This is used for creating a custom role.
For more information on creating a custom role, please go ahead and visit the below URL-
https://docs.microsoft.com/en-us/azure/role-based-access-control/tutorial-custom-role-
powershell
Ask our Experts

View Queries open
j
View Case Study

The IT Security department has the requirement to ensure that they get notified if there are any
changes made to the configuration of the underlying Virtual Machines. A workflow needs to be
designed for this requirement. Which of the following would you use for this purpose?
] A. Azure Not ificat ion Hub
] B. Azure Event Hub
] C. Azure Logic App

A
] D. Azure services Bus
Explanation:
Answer – C
If you are looking at creating workflows, then you have to use Azure Logic Apps.
The Microsoft documentation additionally mentions the following.
Azure Logic Apps is a cloud service that helps you automate and orchestrate tasks, business
processes, and workflows when you need to integrate apps, data, systems, and services across
enterprises or organizations. Logic Apps simplify how you design and build scalable solutions for
app integration, data integration, system integration, enterprise application integration (EAI), and
business-to-business (B2B) communication, whether in the cloud, on-premises, or both.
Option A is incorrect since this is used for notifications.
Option B is incorrect since this is used for listening to events emitted by Azure resources.
Option D is incorrect since this is used to work with Azure queues and topics.
For more information on Azure Logic Apps, please go ahead and visit the below URL-
https://docs.microsoft.com/en-us/azure/logic-apps/logic-apps-overview
Ask our Experts

View Queries open
j
View Case Study

You need to fulfill the below requirement.
“ One of the web applications which will be hosted in Azure Web Apps needs to be mapped to a
custom domain of whizlabs-quiz.com in Azure.”
Which of the following would you need to carry out to fulfill this requirement?
] A. Add a CNAME record in t he DNS zone of whizlabs-quiz.com.

A
] B. On t he Virt ual machine, register a new DNS server.
] C. In Azure Site Recovery, add a new custom domain.
] D. Register a new custom domain for t he Virt ual Net work.
Explanation:
Answer – A
You can map your existing custom domain names in Azure AD to use for your existing Web Apps. A
tutorial on how to do this is also given in the Microsoft documentation.
For more information on a tutorial on how to map a custom domain name to an Azure Web App,
please go ahead and visit the below URL-
https://docs.microsoft.com/en-us/azure/app-service/app-service-web-tutorial-custom-domain
Ask our Experts

View Queries open
j
View Case Study

You need to migrate the servers from the on-premise server whizlabs-ser2 to Azure. Which of the
following would you need to set up in Azure for this?
] A. The Az Copy tool
] B. A Recovery Services vault

A
] C. An Azure Import / Export account
] D. A CosmosDB account
Explanation:
Answer – B
One of the key steps to performing the migration is to set up an Azure Recovery Services vault. This
is also mentioned in the Microsoft documentation tutorial, which explains how to migrate servers
from Hyper-V hosts to Azure.
For more information on the tutorial, please go ahead and visit the below URL-
https://docs.microsoft.com/en-us/azure/site-recovery/tutorial-prepare-azure
Ask our Experts

View Queries open
j
View Case Study

You need to migrate the servers from the on-premise server whizlabs-ser2 to Azure. Which of the
following would you need to set up on the server whizlabs-ser2 for this?
] A. A Hyper-V replica
] B. A collector Virt ual Machine
] C. A Hyper-V agent
] D. The Azure Site Recovery Provider

A
Explanation:
Answer – D
One of the key steps to performing the migration from the on-premise or Hyper-V side is to install
the Azure Site Recovery Provider. This is also mentioned in the Microsoft documentation tutorial,
which explains how to migrate servers from Hyper-V hosts to Azure.
For more information on the tutorial, please go ahead and visit the below URL-
https://docs.microsoft.com/en-us/azure/site-recovery/hyper-v-azure-tutorial
Ask our Experts

View Queries open
j
Finish Review
Certi cation Company

Cloud Certi cation Become Our Instructor
Java Certi cation Support
PM Certi cation Discussions
Big Data Certi cation Blog
Business
Support Join us on Slack!

Contact Us Join our open Slack community and
Help Topics get your queries answered instantly!
Our experts are online to answer your
questions!
Follow us
hom
© Copyright 2020. Whizlabs Software Pvt. Ltd. All Right Reserved.

File 2 303

Uploaded by

Document Information

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

File 2 303

Uploaded by

Copyright:

Available Formats

12/21/2020 Whizlabs Online Certification Training Courses for Professionals (AWS, Java, PMP)

Special O er | Flat 15% OFF on All Courses | Use Coupon - WHIZSITE15

 j My Courses j Microsoft Azure Architect Technologies(AZ-303) j Practice Test 2 j Report

Attempt Marks Obtained Your score

Time Taken Result

Domains wise Quiz Performance Report Join us on Slack community

Review the Answers

Domain :Implement and monitor an Azure infrastructure

The following virtual machine is being created in Azure

Would the performance of the operating system disk

] A. decrease over t ime

] B. increase over t ime

] C. guaranteed to remain t he same

The performance of Premium SSD will always be guaranteed

The Microsoft documentation mentions the following

Ask our Experts

Rate this Question? vu

Domain :Implement and monitor an Azure infrastructure

The following virtual machine is being created in Azure.

What would the virtual machine use for data protection?

The Microsoft documentation mentions the following.

Ask our Experts

Rate this Question? vu

Domain :Implement management and security solutions

Ask our Experts

Rate this Question? vu

Domain :Implement management and security solutions

Ask our Experts

Rate this Question? vu

Domain :Implement management and security solutions

Ask our Experts

Rate this Question? vu

Domain :Implement management and security solutions

Ask our Experts

Rate this Question? vu

Domain :Implement solutions for app

An example of this is also given in the Microsoft documentation.

Ask our Experts

Rate this Question? vu

Domain :Implement and monitor an Azure infrastructure

Your company has the following virtual machines defined in Azure.

For more information on the SLA, please go to the following link-

Ask our Experts

Rate this Question? vu

Domain :Implement and monitor an Azure infrastructure

Your company has the following virtual machines defined in Azure.

The Microsoft documentation mentions the following.

For more information on the SLA, please go to the following link-

Ask our Experts

Rate this Question? vu

Domain :Implement and monitor an Azure infrastructure

Your company has the following virtual machines defined in Azure.

For more information on the SLA, please go to the following link-

Ask our Experts

Rate this Question? vu

Domain :Implement and monitor an Azure infrastructure

Which of the following would go into Area 1?

] A. 'Microsoft .Net work/publicIPAddresses/ ’

] B. 'Microsoft .Net work/ virt ualNet works/ '

] D. 'Microsoft .Net work/ virt ualNet works/subnet s'

Here we have to mention the dependency on the virtual network.

For more information on ARM templates, please go to the following link-

Ask our Experts

Rate this Question? vu