Get Full Version of the Exam
http://www.EnsurePass.com/AZ-300.html

Question No.71

A company hosts virtual machines (VMs) in an on-premises datacenter and in Azure. The on- premises and Azure-based VMs communicate using ExpressRoute.

The company wants to be able to continue regular operations if the ExpressRoute connection fails. Failover connections must use the Internet and must not require Multiprotocol Label Switching (MPLS) support.

You need to recommend a solution that provides continued operations. What should you recommend?

  1. Set up a second ExpressRoute connection.

  2. Increase the bandwidth of the existing ExpressRoute connection.

  3. Increase the bandwidth for the on-premises internet connection.

  4. Set up a VPN connection.

Correct Answer: D

Explanation:

https://docs.microsoft.com/en-us/azure/architecture/reference-architectures/hybrid- networking/expressroutevpn-failover

Question No.72

Note: This question is part of series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your network contains an Active Directory forest named fabrikam.com. The forest contains two child domains named corp.fabrikam.com and research.fabrikam.com.

You have an Azure subscription that contains an Azure Active Directory (Azure AD) tenant named contoso.com.

You install Azure AD Connect and sync all the on-premises user accounts to the Azure AD tenant. You implement seamless single sign-on (SSO).

You plan to change the source of authority for all the user accounts in research.fabrikam.com to Azure AD.

You need to prevent research.fabrikam.com from resyncing to Azure AD. Solution: You use the Synchronization Service Manager.

Does this meet the goal?

  1. Yes

  2. No

Correct Answer: B

Explanation:

Instead you should customize the default synchronization rule.

Note:

The Synchronization Service Manager UI is used to configure more advanced aspects of the sync engine and to see the operational aspects of the service.

References:

https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-create-custom- sync-rule

Question No.73

You configure Azure AD Connect for Azure Active Directory Seamless Single Sign-On (Azure AD Seamless SSO) for an on-premises network.

Users report that when they attempt to access myapps.microsoft.com, they are prompted multiple times to sign in and are forced to use an account name that ends with onmicrosoft.com.

You discover that there is a UPN mismatch between Azure AD and the on-premises Active Directory. You need to ensure that the users can use single-sign on (SSO) to access Azure resources. What should you do first?

  1. From the on-premises network, deploy Active Directory Federation Services (AD FS).

  2. From the server that runs Azure AD Connect, modify the filtering options.

  3. From the on-premises network, request a new certificate that contains the Active Directory domain name.

  4. From Azure AD, add and verify a custom domain name.

Correct Answer: D

Question No.74

You have an Azure solution that uses Multi-Factor Authentication for added security when users are outside of the office. The usage model has been set to Per Authentication.

Your company acquires another company and adds the new staff to Azure Active Directory (Azure AD). New staff members must use Multi-Factor Authentication.

You need to change the usage model to Per Enabled User. What should you recommend?

  1. Create a new Multi-Factor Authentication provider and reconfigure the usage model.

  2. Create a new Multi-Factor Authentication provider with a backup from the current Multi-Factor Authentication provider data.

  3. Use the Azure portal to change the current usage model.

  4. Use Azure CLI to change the current usage model.

Correct Answer: B

Explanation:

Since it is not possible to change the usage model of an existing provider as it is right now, you have to create a new one and reactivate your existing server with activation credentials from the new provider.

References:

Switch usage model in Azure Multi-Factor Authentication Server

Question No.75

You plan to migrate an on-premises Hyper-V environment to Azure by using Azure Site Recovery. The Hyper-V environment is managed by using Microsoft System Center Virtual Machine Manager (VMM).

The Hyper-V environment contains the virtual machines in the following table:

image

Which virtual machine can be migrated by using Azure Site Recovery?

  1. FS1

  2. CA1

  3. DC1

  4. SQL1

Correct Answer: D

Explanation:

https://docs.microsoft.com/en-us/azure/site-recovery/hyper-v-azure-support-matrix#azure-vm- requirements

Question No.76

HOTSPOT

You have an Azure subscription named Subscription1. Subscription1 contains the resources in the following table:

image

VNet1 is in RG1. VNet2 is in RG2. There is no connectivity between VNet1 and VNet2. An administrator named Admin1 creates an Azure virtual machine VM1 in RG1. VM1 uses a disk named Disk1 and connects to VNet1. Admin1 then installs a custom application in VM1.

You need to move the custom application to VNet2. The solution must minimize administrative effort.

Which two actions should you perform? To answer, select the appropriate options in the answer

area.

NOTE: Each correct selection is worth one point.

image

Correct Answer:

image

Question No.77

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution.

Determine whether the solution meets the stated goals. You have the following resource groups:

image

Developers must connect to DevServer only through DevWorkstation. To maintain security, DevServer must not accept connections from the internet.

You need to create a private connection between the DevWokstation and DevServer.

Solution: Configure a public IP address on DevServer_WestCentral. Configure the Network Security Group to allow all incoming ports.

Does the solution meet the goal?

  1. Yes

  2. No

Correct Answer: A

Question No.78

Click to expand each objective. To connect to the Azure portal, type https://portal.azure.com in the browser address bar.

image

image

image

image

image

image

When you are finished performing all the tasks, click the `Next#39; button.

Note that you cannot return to the lab once you click the `Next#39; button. Scoring occur in the background while you complete the rest of the exam.

Overview

The following section of the exam is a lab. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.

Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn#39;t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.

Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.

Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.

To start the lab

You may start the lab by clicking the Next button.

Your company plans to host in Azure the source files of several line-of-business applications.

You need to create an Azure file share named corpsoftware in the storagelod8322489 storage account. The solution must ensure that corpsoftware can store only up to 250 GB of data.

What should you do from the Azure portal?

Correct Answer: See explanation below.

Explanation:

Step 1. Go to the Storage Account blade on the Azure portal:

image

Step 2. Click on add File Share button:

image

Step 3. Provide Name (storagelod8095859) and Quota (250 GB).

image

References:

https://docs.microsoft.com/en-us/azure/storage/files/storage-how-to-create-file-share

Question No.79

HOTSPOT

You have an Azure subscription named Subscription1 that contains a virtual network named VNet1. You add the users in the following table.

image

Which user can perform each configuration? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

image

Correct Answer:

image

Question No.80

HOTSPOT

Contoso. Ltd. hosts the following ASP.NET workloads in Azure:

image

Users of the Sales software report mismatches between shown inventory at the time of sale and actual availability. Transactions across the two systems result in inconsistent reads and writes. You encapsulate Sales order creation and Inventory status updates in elastic transactions.

You need to recommend changes to code and the databases to support transactions.

Which actions should you recommend? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

image

Correct Answer:

image

Get Full Version of the Exam
AZ-300 Dumps
AZ-300 VCE and PDF

Comments are closed.