Real AZ-301 Ebook 2021

NEW QUESTION 1

You need to recommend a backup solution for the data store of the payment processing. What should you include in the recommendation?
A Microsoft System Center Data Protection Manager (DPM)

• A. long-term retention
• B. a Recovery Services vault
• C. Azure Backup Server

Answer: B

Explanation:

References:
https://docs.microsoft.com/en-us/azure/sql-database/sql-database-long-term-backup-retention-configure

NEW QUESTION 2

You need to recommend a notification solution for the IT Support distribution group. What should you include in the recommendation?

• A. Azure Network Watcher
• B. an action group
• C. a SendGrid account with advanced reporting
• D. Azure AD Connect Health

Answer: D

Explanation:
References:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-health-operations

NEW QUESTION 3

You are designing an Azure solution for a company that wants to move a .NET Core web application an on-premises data center to Azure. The web application relies on a Microsoft SQL Server 2021 database on Windows Server 2021. The database server will not move to Azure.
A separate networking team is responsible for configuring network permissions.
The company uses Azure ExpressRoute and has an ExpressRoute gateway connected to an Azure virtual network named VNET1.
You need to recommend a solution for deploying the web application.
Solution: Deploy the web application to a web app hosted in an Isolated App Service plan on VNET1. Does this meet the goal?

• A. Yes
• B. No

Answer: B

NEW QUESTION 4

You are designing an access policy for the sales department at your company.
Occasionally, the developers at the company must stop, start, and restart Azure virtual machines. The development team changes often.
You need to recommend a solution to provide the developers with the required access to the virtual machines. The solution must meet the following requirements:
Provide permissions only when needed.
Use the principle of least privilege.
Minimize costs.
What should you include in the recommendation? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 5

Note: This question is part of series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure subscription named Project1. Only a group named Project1admins is assigned roles in the Project1 subscription. The Project1 subscription contains all the resources for an application named Application1.
Your company is developing a new application named Application2. The members of the Application2 development team belong to an Azure Active Directory (Azure AD) group named App2Dev.
You identify the following requirements for Application2:
The members of App2Dev must be prevented from changing the role assignments in Azure.
The members of App2Dev must be able to create new Azure resources required by Application2.
All the required role assignments for Application2 will be performed by the members of
Project1admins.
You need to recommend a solution for the role assignments of Application2.
Solution: In Project1, create a resource group named Application2RG. Assign Project1admins the Owner role for Application2RG. Assign App2Dev the Contributor role for Application2RG.
Does this meet the goal?

• A. Yes
• B. No

Answer: B

NEW QUESTION 6

Your company has 20 web APIs that were developed in-house.
The company is developing 10 web apps that will use the web APIs. The web apps and the APIs are registered in the company’s Azure Active Directory (Azure AD) tenant. The web APIs are published by using Azure API Management.
You need to recommend a solution to block unauthorized requests originating from the web apps from reaching the web APIs. The solution must meet the following requirements:
Use Azure AD-generated claims.
Minimize configuration and management effort.
What should you include in the recommendation? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 7

Your network contains an on-premises Active Directory forest.
You discover that when users change jobs within your company, the membership of the user group are not updated. As a result the users can resources that are no longer relevant to their job.
You plan to integrate Active Directory and Azure Active Directory (Azure AD) by using Azure AD Connect
You need to recommend a solution to ensure that group owners are emailed monthly m** the group membership they manage.
What should you include in the recommendation?

• A. Azure AD Identify Protection
• B. Tenant Restrictions
• C. Azure AD access reviews
• D. conditional access policies

Answer: C

Explanation:
References:
https://docs.microsoft.com/en-us/azure/active-directory/governance/access-reviews-overview

NEW QUESTION 8

You are designing an Azure we app. You plan to deploy the web app to the Europe Azure region and the West Europe region.
You need to recommend a solution for the web app. The solution must the following requirements: Users must always access the web app form the North region, unless the region fails.
The web app must be available to users if an Azure region is unavailable. Deployment costs must be minimized.
What should you include in the recommendation? To answer, select the appropriate options in the area. NOTE: Each correct selection is worth one point.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 9

You need to design an architecture to capture the creation of users and the assignment of roles. The captured data must be stored in Azure Cosmos DB.
Which Azure services should you include in the design? To answer, drag the appropriate services to the correct targets. Each service may be used once. more than once, or not at all. You need to drag the split bar between panes or scroll to view content.
NOTE .Each correct selection worth one point.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 10

Your company has users who work remotely from laptops.
You plan to move some of the applications accessed by the remote users to Azure virtual machines. The users will access the applications in Azure by using a point-to-site VPN connection. You will use certificates generated from an on-premises-based certification authority (CA).
You need to recommend which certificates are required for the deployment.
What should you include in the recommendation? To answer, drag the appropriate certificates to the correct targets. Each certificate may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 11

You need to recommend a solution for the user at Contoso to authenticate to the cloud-based sconces and the Azure AD-integrated application. What should you include in the recommendation? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 12

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result these questions will not appear in the review screen.
You need to deploy resources to host a stateless web app in an Azure subscription. The solution must meet the following requirements:
• Provide access to the full .NET framework.
• Provide redundancy it an Azure legion fails.
• Grant administrators access to the operating system to install custom application dependencies. Solution: You deploy a web app in an Isolated App Service plan. Does this meet the goal?

• A. Yes
• B. No

Answer: A

NEW QUESTION 13

You have an Azure subscription for used for testing and development purposes only. The subscription contains Azure virtual machines that unmanaged, standard hard disk drives (HDD).
You need to recommend a recovery strategy for the virtual machines if an Azure region fails for a sustained period. The recovery time objective WTO) can be up to seven days. The solution must minimize costs.
What should you include in the recommendation?

• A. Store the disks in a Standard_LRS storage accoun
• B. Configure Azure site Recover
• C. IF a failure occurs, initiate a manual failure over.
• D. Store the disks in a Standard_GRS storage accoun
• E. Configure Azure Recover
• F. If a failure occurs, initiate a manual failover.
• G. Store the disks in a Standrs_LRS storage accoun
• H. If a disaster occurs, manually create the virtual machines by used Azure Rsources Mnaager templates.
• I. Store the disks in a Standard_GRS storage accoun
• J. If a disaster occurs, manually create the virtual machines by Azure Resource Manager templates.

Answer: B

NEW QUESTION 14

You have an on premises Active Directory forest and an Azure Active Directory Azure AD) tenant. All Azure AD users are assigned a Premium P1 license.
You deploy Azure AD Conned
Which two features ate available m this environment that can reduce operational overhead tot your company’s help desk? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point

• A. sell- service password reset
• B. access review
• C. password writeback
• D. Azure AD Privileged Identity Management policies
• E. Microsoft Cloud App Security Conditional At access App Control

Answer: AD

NEW QUESTION 15

What should you include in the identity management strategy to support the planned changes?

• A. Move all the domain controllers from corp.fabrikam.com to virtual networks in Azure.
• B. Deploy domain controllers for corp.fabrikam.com to virtual networks in Azure.
• C. Deploy a new Azure AD tenant for the authentication of new R&D projects.
• D. Deploy domain controllers for the rd.fabrikam.com forest to virtual networks in Azure.

Answer: B

Explanation:
Directory synchronization between Azure Active Directory (Azure AD) and corp.fabrikam.com must not be affected by a link failure between Azure and the on-premises network. (This requires domain controllers in Azure)
Users on the on-premises network must be able to authenticate to corp.fabrikam.com if an Internet link fails. (This requires domain controllers on-premises)

NEW QUESTION 16

Your company develops a web service that is deployed to at, Azure virtual machine named VM1 the web service allows an API to access real- time data from VM1 The current virtual machine deployment is shown in the Deployment exhibit. (Click the Deployment tab).

The chief technology officer (CTO) sends you the following email message: "Our developers have deployed the web service to a virtual machine named WL Testing has shown that the API i accessible from VM1 and VM? Our partners must be able to connect to the API over the Internet Partners will me this data in applications that they develop:
You deploy an Azure API Management service. The relevant API Management configuration is shown m the API ambit. Click the API tab).

For each of the following statements, select. Yes if the statement is true. Otherwise. select No. NOTE: Each correct selection is worth one point.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 17

You configure the Diagnostics settings for an Azure SQL database as shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on The information presented in the graphic.
NOTE: Each coned selection is worth one point.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 18

You have an Azure environment that contains the Azure subscription and the virtual networks shown in the following table.

You need to recommend a virtual network peering solution to ensure that the resources connected to any other virtual network. The solution must minimize administrative effort.
Which virtual network peering topology should you recommend? To answer, select the appropriate topology in the answer area.
NOTE: Each correct selection is worth one point,

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 19

You have an Azure Active Directory (Azure AD) tenant. All user accounts are syncrhonized from an onpermises Directory and are configured for federated authentication. Active Directopry Federation Services (AD FS) servers are published for external connnection by using a farm Application proxy servers.
You need to recommend a solution to monitor the servers that integrate with Azure AD. The solution must meet the following requirements:
Identify any AD FS issue and their potential resolutions.
Identify any directory synchronization configuration issues and their potential resolutions.
Notify administrations when there are any issue affecting directory synchronization or AD FS operations. Which monitoring solution should you recommend for each server type? To answer, drag the appropriate
monitoring solution to the correct types. Each monitoring solution may be used once, than once, or not at all.
You may need to drag the split bar between panes scroll to view content.
NOTE: Each correct selection is worth one point.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 20

Note: This question is part of series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure subscription that contains a resource group named RG1.
You create an Azure Active Directory (Azure AD) group named ResearchUsers that contains the user accounts of all researchers.
You need to recommend a solution that meets the following requirements:
The researchers must be allowed to create Azure virtual machines.
The researchers must only be able to create Azure virtual machines by using specific Azure Resource
Manager templates.
Solution: Create a lab in Azure DevTest Lab. Configure the DevTest Labs settings. Assign the DevTest Labs User role to the ResearchUsers group.
Does this meet the goal?

• A. Yes
• B. No

Answer: B

NEW QUESTION 21

You deploy several Azure SQL Database instances.
You plan to configure the Diagnostics settings on the databases as shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
In the exhibit, the SQLInsights data is configured to be stored in Azure Log Analytics for 90 days. However, the question is asking for the “maximum” amount of time that the data can be stored which is 730 days.

NEW QUESTION 22
......