‘Your company Plans to migrate applications ands ‘tobe deployed. Why would you make his recommendation? (Teese he nestor company manage compute resources © cree rst enege sony ncaresuten cotrenurce areuses (To asgmenton premises resource by proving overowapacty () recone at dou esourcesina single data centerTo consolidate a Explanation By implementing a hybrid cloud, your company can augment on-premises resources by proving Overton ‘eapacty. Abed loud is he combination of two of more cloud models, suchas puble and private, and provides benets rom Beth models. lean gve businesses the Neu t0 use publi loud sources when ‘hey need them, whie also Keeping sensitive data and applications on-premises in a pivate cloud. A hyd ‘loud ean alea help orgenzatione manage peats and valleys In rae more efile. Byung ahyig ‘lous mosel, businesses donot have to overaovision computing resources in ancpaton of nigh an ‘Bey can simply bring in eara resources fromthe public cloud when they need them Implemerting a hb cloud will not allow your company to consolidate al cloud resources ina single xa ‘cee. Thie describes a pubic or private lous, ether of which could support this requirement Implemerting a hybei cous wil not allow your company to ensure that charges re only incurred when ‘loud esources are utlize. This more accurately describes a public cloud, where resource elastic allows storage and compute tobe allocate on demand. This allows you to pay on forthe resources you Nees ‘when you need her Implemertng hb clus wil not allow your compen to eliminate the nee for compsny-mansged compute resources. ll loud madels wll quire your company to manage some aspect of compute References te Nod Question [ 1 | of 155‘You deploy 8 business crcl solution in Azure ‘You need o ensure thet your resources are replicated and hosted teas 200 miles eway whi the same geographic ares, to minimize Impact on your solution's evalaity incase of sate. ‘which contguration option shovla you use? ‘You should use region pais. This option consists of two paired Azure éataceeers inthe same geographic‘vali sets ‘A Explanation You should use region pals. Ths opsion consists of two paired Azure datacemars in the same geographic reat last 200 mules away. Using region ats reduces the lkeooe of interruptions in both regione at ‘once in ese of acer, ‘You should not uee availabilty sets This option ensures that your vital machine remains operation in ase of planned or unplanned maintenance evens and hardware felis, However. ti effective ony within ‘he boundaries of a single caracerer and cannot provide the required redundancy ina rion ‘You should not use avaabilty zones. This option enables physical separation of zones within a single or rmuiple dxacerners inthe same Azure region. provides higher recundancy than avaiblty ses, But sil ‘doesnot meet the requirements of leat a 200-mse separation between repheted slion rexovree ‘Yu should not use resource groups A rezouce group it logical contine that holds rites Azure resources tht share the same Iifecyce. des not provide any resource redundancy capably as requires References Question 2‘Yu need to bring Azure Storage into our virus network with 8 Gest I eres, ‘Which solution should you use? Oe Qe @ reverse ssn neha dine Spee ‘You should crete privoe endpoint with Azure Pvt Link. privte endpoint ea network interface that connects you privately and securely toa sevice powered by Azure Private Link Private endpoints use 2 vate meme Protocol (P) aderess from your VNet, and they communicate withthe service over a secure Connection. Trate fom a private enepovr to the service averses over he Microsoft backbone network, Question [3 |] of 155You plant crete an Azure subscription and take advanage of ks Azure Active Directory (AZUe AD) feaures. You plano use the subscription for no more than one yer. You need choose te east expensive license foreach scenasio. Which icense shoul you use? Te answer, drag te appropriate license to each scenario. license may be ‘used once, more than onee, oF not al Drag and rop the answers ‘You went to publish onvpremises web [ig “apps using Azure AD. You want to se on-premises directory | | Froe ‘Smnebenizaton ‘Yu want on-premises users tobe able to | rau eset thar own passwords Free Premin Question [ 4‘Yu ae researching the governance methodologies in Azure You wantto understand role-based access security (RAC). policies, itive, and ack. ‘Yu need o choose the type of resource or fesure to Use for eferen scenarios. ‘When shoula you use each resource or feature? To answer, crag the appropiate resource or feature to ‘each scerari. A resoutee or feature may be uses once, more than once, oF neta. question [5] of 155> Explanation ‘You should use # poy when you want to ensue that any VMs of specif size are deployed to @ resource group. policy defntion is 8 JSON Ae tht astgned 0. seope such ar aresoure group. The “ISON Me dees the rules tat are tobe usd for certain resources, For exemple, you can create rule 2 ‘amy the creation of el Vis that are ouside the sites tat you spect. You should use aninllatve when you want ro manage a collection of polcydefnons. This allows you ro manage mutipe polices oso whol, rather then invcually, Similar 0 polices, you can assign natives to 12 scope, suchas 8 resource group or subscription. ‘Yu should use 2 lock when you want 1 prevent VMS fom being deleted by anyone ater they are “deployed Ths helper prevee accidental deletion of crea resources. The name of tvs lock eeting Ie ‘CanNoxDelee Inthe Azie portal vs lock eering le simpy refered 0 Dee ‘You should not use Role-Based Access Control [RBAC) in ts Scenario, ROAC assens permission that {ply fo users and groups. In his Seana, you are applying senings 1 resources fegaaess of Users and ous References Question [ 5‘Which wo itasuuctures are vali hybid cloud lfasuucures? Each corect answer presents part ofthe solution. (On premises infrastructure and private cloud ‘on-premises infrastructure and public lous Mutple private douds ‘rate and pubic coud Malle public clouds@ rrereanspubie cous (aot pute coos Anya cloud is baced an an on-premises arctecure and a publ cloud ora private clous ana pub ‘lout, This cloud modes most commeniy used when leveraging benef of running eppiatons fom & publi cloud while proving editions security by storing 6 ina private cloud or en on-premises ‘dascerer Multiple publ clouds and multiple pavate clouds donot represent hyd clouds. n each ease is simply ‘multiple instances ofthat cloud mace. ‘While tis posible to havea federated connguraton tht includes an on-premises itrasiucture and private loud this snot considered hybrid cloud. Ths comguraion might be used for example, when "warioning fom an on-premises toa cloud-basea datacerer References ‘what are public, private and hybrid clouds? Private, public, or hy Mlerosofts cloud MavorsYou depioy te viral machines (Vs to Azure a5 2 tvee-ered architecture. One VM hosts a front-end -web applicaon, one Vi hosts a business application programming icrface (AP), and the ther WM hosts 1 Microsol SQL Server detabese, Only the frontend we application shouldbe publly accessible, end it ‘shoul be accessible over HTTP on ot 40 All vee VMs must be acessibe over Remote Desktop Pretocal ROP) on port 222. Only your secount should beable to Use ROP to cess the VMS You needto derermine how Network Security Groups (NSGE) can be used inthis scenario. Which wa ways can NSG rus be used? Each correct answer presents «complete soon. [Choose the correct answers To ensure that only your account can use ROP to access the VMs To ensure that only te frontend Vis pubely accesible over por 60 ‘Ta ensure tat allthree VMs are accessible ver port 222 Te ensure thatthe frontend VM hess only web applications Question [ 7[(_)Teersue marae is are aces ver por 222 O ‘Toensuce that the frontend VM hosts aly web applications ‘An NSG can ersure haa hve VMs ae accessible over port 222. An NSG acts ke a frewall. I eines ‘ules that allow or deny inbound and eutbeund wa. ‘An NSG can ensure that only the front-end Vis publicly accessible over por 80. An NSG act ke 2 frewalI-detoes rules that alow oF deny inbound and outbound wah. ‘An NSG cannot ensure thatthe frontend VA hosts only web applications. You cannot use an NSG to reset ‘ppications on a Vik This is anIT management sum, ‘An NSG cannot ensure thi nly your secount can use RDP to access the Vs. You esanat use an NEGO ‘esict ure account accesso 8 VM\ You mut ize role-bared access control (RBAC) 0 accomplish hs. References Protect agin security thea on Arure ‘Assign Azure roles using the Azure portal‘Your company has anew policy to restrict administrative acces to resources athe resource group and ‘resource scopes ina detelee, granuar way. Acces wll be granted to various groups and individual vers, ‘Yeu need to implement the new policy ‘What should you use?‘A company is migrating several web apps fom an on-premises pvate cloud deployment to Azure. The ‘company want to use Azure Active Directory (Azure AD} for autherscation and authorization, You need determine If Azure AD wil meet your authenieation requirements. For each of the following statemencs, select Vs i the statements te. Otherwise, select No. “Azure AD authentication and authorization suppor requires integration | ‘with an on premises AD. ‘Web apps must be registered with Azure AD to support authentication and authorization services. ° ‘Azure AD supports authorization through the use of role based access contol RBAC), ° Question [ 9 | of 155‘Azure AD autherticaion and autnorzation support does not equi rtgration with an on-premises AD. Ireegratin Is supported and mght be appicable na hybrid environment supporting beth Azure and On- premises resources. When i used wih on-premises Active Directory Federation Services (AD FS), A2ue ‘AD hand ff auerscation to an AD FS server |Web apps must be registered with Azure AD to support authertication and authorization services. Regisraton strough te Azure Managemert Portal. ‘Azure AD supports authorization trough ure of RBAC. RBAC is necessary to Fe Up access permissions ‘when using Azure AD for atherticaton and authorization. References “tnoraaion wih ature AD Registering your application in Azure AD withthe Azure Management Port! "What authentication and verification methods are available in Azure Active Directory?‘You need to use a toal that will help you make these types of recommendations. Selec the correct aren Question [10 ) of 155Explanation You should use Azure Adisor 0 callec the recommendations needed, You shoul run Advis tom te ren to Inunen Azure Adicr. The other menu selections wil na provi the requested information, ‘Aue Accor a personal cloud concur het provides the information you need to follow best practices tnd optimize Azure deployments. i can provide recommendations for prosive, actionable, end personalized bes practices References Get stares with Azure Advisor Question [10 ) of 155‘You deploy 8 pew Linux vital machine (Vt) an then mally aust its conkguration in Azure porate meet the requitements of your Development enviranment ‘You ned to capture changes mace tothe Development Ms configuration ater the origin deployment, $0 ‘tat you can reuse it 2s a template inthe deployment of Test and Precucton Vis. ‘Which two ections con you perform achieve your gos? Eech correct answer presents 8 complete solution. ‘Esporte Azure Resource Manager (ARM) template from a resource group. Replace the Development VM wth a VM scale set. ‘Exportthe Azure Resource Manager (ARM) tempat fom deployment history. [xportthe Azure Resource Manager (ARM template from a resource.seen a. es ae Export the Azure Resource Manager (ARM template bore deployment. ‘Explanation ‘You should ether export the ARM template from @ resource or from a resource group. ARM templates con be used to represent the desired sate of your Azure resources. They can be repetea end cosisterty ‘epioyes troughou the development lifecycle, so you could recreate the Test ad Production instances ‘You can open the Development VMs setings crecty in Azure portal or select tin Ks resoure group isk ‘andthen cick the Expor template meny em Both options slow you to capture changes tothe Development vi hat were mede ater te original deployment ‘You should not export the ARM template before deployment ox export the ARM template from the “deployment nso. These two oplons nly capture the sate ofthe resource a the ime of deployment. ‘They donot include any manus ehanges med ater the origins deployment. ‘Yu also should not replace the Development VM with a VA seal set A seal set can provide Ph _valabity to your application, sutomatcaly increasing or decreasing the numberof VMS In response to ‘demand eas per a defined schedule Howeve, cannot capture the desifed sate of your Development VM. ‘nd reuse fr deployment of te Test and Production instances Reternces Question [13‘You manage an Azure subscription fer your company A @mectng, someone ssks you about the Azure pricing seule. whats the Azur pricing esleulstor used for? Estimating the monthly costs associated with using specific Azure resources cers ich sere cosine ur ae ibscpen te mst money @ ee ee ee © ee ee ee ‘The Azure pricing calculators used for esumaing the monthly costs associated with using specine Azure resources. Wh ach resource that YOU add tothe ping cal atr, you cn choose ts regen which aso affets the price. For ether resources, such as an Azure SQL Database, you can choose the number of Question [12 ] of 155‘Explanation ‘The Ature pricing clcleor Ie used for exiting the monthly cost exzocited with using specie Azure resources, With each resource tht YOU add tothe pricing ealulatr, you ean ehoote ts region, whieh ao ects the price, For other resources, suchas an Azure SQL Databete, you con choose the number of Instances and te type of ench instance, which as affects the cst The Azure pricing ealultr Is no used fer determining the annual costs associated with moving 2 physical Infesrctue tote cous. You would use the Azure Teal Cost of Ownership (TCO) elevator f you wanted te perform this ak The Azure pricing eateultor does not allow you to determine which Azure resources are costing your “subscription the most money. Azure Cost Manageme helps with os ask "Te Azure pieng calculator Goes nt provide a ea-tie, up-to-the: minute view ef what your Azure resourees cos. Azue Cost Mangement hips provide this cata, However, doesnot provide up-tothe ‘inute cost analyse. Estimated charges are updoted =i tes per day References Question [12