最新的Microsoft Azure Architect Technologies - AZ-303免費考試真題
You have a virtual network named VNet1 as shown in the exhibit.
No devices are connected to VNet1.
You plan to peer VNet1 to another virtual network named Vnet2 in the same region. VNet2 has an address space of 10.2.0.0/16.
You need to create the peering.
What should you do first?
No devices are connected to VNet1.
You plan to peer VNet1 to another virtual network named Vnet2 in the same region. VNet2 has an address space of 10.2.0.0/16.
You need to create the peering.
What should you do first?
正確答案: C
說明：（僅 Fast2test 成員可見）
You have three Azure SQL Database servers shown in the following table.
You plan to specify sqlserver1 as the primary server in a failover group.
Which servers can be used as a secondary server?
You plan to specify sqlserver1 as the primary server in a failover group.
Which servers can be used as a secondary server?
正確答案: D
說明：（僅 Fast2test 成員可見）
You have an app named App1 that uses data from two on-premises Microsoft SQL Server databases named DB1 and DB2.
You plan to move DB1 and DB2 to Azure.
You need to implement Azure services to host DB1 and DB2. The solution must support server-side transactions across DB1 and DB2.
Solution: You deploy DB1 and DB2 as Azure SQL databases on the some Azure SQL Database server.
Does this meet the goal?
You plan to move DB1 and DB2 to Azure.
You need to implement Azure services to host DB1 and DB2. The solution must support server-side transactions across DB1 and DB2.
Solution: You deploy DB1 and DB2 as Azure SQL databases on the some Azure SQL Database server.
Does this meet the goal?
正確答案: B
You have an Azure subscription that contains a virtual machine named VM1 and a Recovery Services vault named Vault 1. VM1 runs Linux.
VM1 is backed up to Vault1 daily.
You need to ensure that you can perform application-consistent backups of VM1.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
VM1 is backed up to Vault1 daily.
You need to ensure that you can perform application-consistent backups of VM1.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
正確答案: A,D
You have an Azure subscription that contains a general purpose v2 storage account named storage1.
In storage1, you create a file share named share1.
You need to control access to share1 by using Azure role-based access control (Azure RBAC).
What should you do first?
In storage1, you create a file share named share1.
You need to control access to share1 by using Azure role-based access control (Azure RBAC).
What should you do first?
正確答案:
Storage1 needs to be in the domain.
Note: To register your storage account with AD DS, create an account representing it in your AD DS.
You can think of this process as if it were like creating an account representing an on-premises Windows file server in your AD DS.
When the feature is enabled on the storage account, it applies to all new and existing file shares in the account.
Reference:
https://docs.microsoft.com/en-us/azure/storage/files/storage-files-identity-ad-ds-enable
Note: To register your storage account with AD DS, create an account representing it in your AD DS.
You can think of this process as if it were like creating an account representing an on-premises Windows file server in your AD DS.
When the feature is enabled on the storage account, it applies to all new and existing file shares in the account.
Reference:
https://docs.microsoft.com/en-us/azure/storage/files/storage-files-identity-ad-ds-enable
You have an Azure Cosmos DB account named Account1. Account1 includes a database named DB1 that contains a container named Container1. The partition key for Container1 is set to /city.
You plan to change the partition key for Container1.
What should you do first?
You plan to change the partition key for Container1.
What should you do first?
正確答案: B
說明：（僅 Fast2test 成員可見）
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it As a result, these questions will not appear in the review screen.
You have an Azure Active Directory {Azure AD) tenant named contoso.com.
A user named Admin1 attempts to create an access review from the Azure Active Directory admin center and discovers that the Access reviews settings are unavailable. Admin 1 discovers that all the other Identity Governance settings are available.
Admin1 is assigned The User administrator. Compliance administrator, and Security administrator roles.
You need to ensure that Admin1 can create access reviews in contoso.com.
Solution: You assign the Global administrator role to Admin1.
Does this meet the goal?
After you answer a question in this section, you will NOT be able to return to it As a result, these questions will not appear in the review screen.
You have an Azure Active Directory {Azure AD) tenant named contoso.com.
A user named Admin1 attempts to create an access review from the Azure Active Directory admin center and discovers that the Access reviews settings are unavailable. Admin 1 discovers that all the other Identity Governance settings are available.
Admin1 is assigned The User administrator. Compliance administrator, and Security administrator roles.
You need to ensure that Admin1 can create access reviews in contoso.com.
Solution: You assign the Global administrator role to Admin1.
Does this meet the goal?
正確答案: A
說明：（僅 Fast2test 成員可見）
Your company has an Azure subscription.
You enable multi-factor authentication (MFA) for all users.
The company's help desk reports an increase in calls from users who receive MFA requests while they work from the company's main office.
You need to prevent the users from receiving MFA requests when they sign in from the main office.
What should you do?
You enable multi-factor authentication (MFA) for all users.
The company's help desk reports an increase in calls from users who receive MFA requests while they work from the company's main office.
You need to prevent the users from receiving MFA requests when they sign in from the main office.
What should you do?
正確答案: D
說明：（僅 Fast2test 成員可見）
You have an Azure subscription named Subscription1.
Subscription1 contains the virtual machines in the following table:
Subscription1 contains a virtual network named VNet1 that has the subnets in the following table.
VM3 has multiple network adapters, including a network adapter named NIC3. IP forwarding is enabled on NIC3. Routing is enabled on VM3.
You create a route table named RT1 that contains the routers in the following table.
You apply RT1 to Subnet1 and Subnet2.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Subscription1 contains the virtual machines in the following table:
Subscription1 contains a virtual network named VNet1 that has the subnets in the following table.
VM3 has multiple network adapters, including a network adapter named NIC3. IP forwarding is enabled on NIC3. Routing is enabled on VM3.
You create a route table named RT1 that contains the routers in the following table.
You apply RT1 to Subnet1 and Subnet2.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
正確答案:
Reference:
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-udr-overview
https://www.quora.com/What-is-IP-forwarding
An administrator plans to create a function app in Azure that will have the following settings:
Runtime stack: .NET Core
Operating System: Linux
Plan type: Consumption
Enable Application Insights: Yes
You need to ensure that you can back up the function app.
Which settings should you recommend changing before creating the function app?
D18912E1457D5D1DDCBD40AB3BF70D5D
Runtime stack: .NET Core
Operating System: Linux
Plan type: Consumption
Enable Application Insights: Yes
You need to ensure that you can back up the function app.
Which settings should you recommend changing before creating the function app?
D18912E1457D5D1DDCBD40AB3BF70D5D
正確答案: B
說明：（僅 Fast2test 成員可見）
You migrate WebApp1 to Azure.
You need to implement a traffic filtering solution for WebApp1. The solution must meet the security requirements.
What should you do?
You need to implement a traffic filtering solution for WebApp1. The solution must meet the security requirements.
What should you do?
正確答案: A
說明：（僅 Fast2test 成員可見）
You have an Azure subscription that contains 20 virtual machines. The virtual machines require authenticated access to several Azure resources.
You need to ensure that the virtual machines can authenticate by using Azure Active Directory (Azure AD).
Solution: You configure the Access control (IAM) settings for each virtual machine.
Does this meet the goal?
You need to ensure that the virtual machines can authenticate by using Azure Active Directory (Azure AD).
Solution: You configure the Access control (IAM) settings for each virtual machine.
Does this meet the goal?
正確答案: A
說明：（僅 Fast2test 成員可見）
You have several Azure web apps trial use access keys to access databases.
You plan to migrate the access keys to Azure Key Vault. Each app must authenticate by using Azure Active Directory (Azure AD) to gain access to the access keys What should you create m Azure to ensure that the apps can access the access keys?
You plan to migrate the access keys to Azure Key Vault. Each app must authenticate by using Azure Active Directory (Azure AD) to gain access to the access keys What should you create m Azure to ensure that the apps can access the access keys?
正確答案: B
說明：（僅 Fast2test 成員可見）
You have a server named Server1 that runs Windows Server 2019. Server! is a container host.
You plan to create a container image.
You create the following instructions in a text editor.
You need 10 be able to automate the container image creation by using the instructions. To which file should you save the instructions?
You plan to create a container image.
You create the following instructions in a text editor.
You need 10 be able to automate the container image creation by using the instructions. To which file should you save the instructions?
正確答案: B
說明：（僅 Fast2test 成員可見）
You manage an Active Directory domain named contoso.local.
You install Azure AD Connect and connect to an Azure Active Directory (Azure AD) tenant named contoso.com without syncing any accounts.
You need to ensure that only users who have a UPN suffix of contoso.com in the contoso.local domain sync to Azure AD.
What should you do?
You install Azure AD Connect and connect to an Azure Active Directory (Azure AD) tenant named contoso.com without syncing any accounts.
You need to ensure that only users who have a UPN suffix of contoso.com in the contoso.local domain sync to Azure AD.
What should you do?
正確答案: A
說明：（僅 Fast2test 成員可見）
You have an Azure subscription named Subscription1 that contains a virtual network named VNet1. You add the users in the following table.
Which user can perform each configuration? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Which user can perform each configuration? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
正確答案:
Reference:
https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles
Note: This question is part of series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure Active Directory (Azure AD) tenant that contains a group named Group1.
You need to enable multi-factor authentication (MFA) for the users in Group1 only.
Solution: From the Azure portal, you configure an authentication method policy.
Does this meet the goal?
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure Active Directory (Azure AD) tenant that contains a group named Group1.
You need to enable multi-factor authentication (MFA) for the users in Group1 only.
Solution: From the Azure portal, you configure an authentication method policy.
Does this meet the goal?
正確答案: A
說明：（僅 Fast2test 成員可見）
You monitor Azure virtual machines by using Azure Monitor.
You plan to restart the virtual machines when CPU usage exceeds 95 percent for more than 30 minutes.
You need to create an alert in Azure Monitor to restart the virtual machines. The solution must minimize administrative effort.
Which type of action should you use in the alert?
You plan to restart the virtual machines when CPU usage exceeds 95 percent for more than 30 minutes.
You need to create an alert in Azure Monitor to restart the virtual machines. The solution must minimize administrative effort.
Which type of action should you use in the alert?
正確答案: D
說明：（僅 Fast2test 成員可見）