Independence Day Special Limited Time 60% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: 1b2718643m

AZ-303 Exam Dumps - Microsoft Azure Architect Technologies

Question # 4

You need to recommend a solution to provide KV1 with access to the on-premises network of Litware. The solution must meet the security requirements.

What should you include in the recommendation? To answer, select the appropriate options in the answer area.

NOTE:Each correct selection is worth one point.

Full Access
Question # 5

You need to recommend an identify solution that meets the technical requirements.

What should you recommend?

A.

federated single-on (SSO) and Active Directory Federation Services (AD FS)

B.

password hash synchronization andsingle sign-on (SSO)

C.

cloud-only user accounts

D.

Pass-through Authentication and single sign-on (SSO)

Full Access
Question # 6

You need to identify the storage requirements for Contoso.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE:Each correct selection is worthone point.

Full Access
Question # 7

You need to recommend a solution for App1. The solution must meet the technical requirements. What should you include in the recommendation?To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Full Access
Question # 8

You need to implement a backup solution for App1 after the application is moved.

What should you create first?

A.

a recovery plan

B.

an Azure Backup Server

C.

a backup policy

D.

a Recovery Services vault

Full Access
Question # 9

You need to meet the user requirement for Admin1.

What should you do?

A.

From the Subscriptions blade, select the subscription, and then modify the Properties.

B.

From the Subscriptions blade, select the subscription, and then modify the Access control (IAM) settings.

C.

From the Azure Active Directory blade, modify the Properties.

D.

From the Azure Active Directory blade, modify the Groups.

Full Access
Question # 10

You are planning the move of App1 to Azure.

You create a network security group (NSG).

You need to recommend a solution to provide users with access to App1.

What should you recommend?

A.

Create an outgoing security rule for port 443 from the Internet. Associatethe NSG to all the subnets.

B.

Create an incoming security rule for port 443 from the Internet. Associate the NSG to all the subnets.

C.

Create an incoming security rule for port 443 from the Internet. Associate the NSG to the subnet that contains the webservers.

D.

Create an outgoing security rule for port 443 from the Internet. Associate the NSG to the subnet that contains the web servers.

Full Access
Question # 11

You need to configure the Device settings to meet the technical requirements and the user requirements.

Which two settings should you modify? To answer, select the appropriate settings in the answer area.

Full Access
Question # 12

You network contains an Active Directory domain that is synced to Azure Active Directory (Azure AD) as shown in the following exhibit.

You have a user account configured as shown in the following exhibit.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE:Each correct selection is worth onepoint.

Full Access
Question # 13

Note: This question is part of series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets mighthave more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure Active Directory (Azure AD) tenant named contoso.com.

A user named Admin1 attempts to create an access review from the Azure Active Directory admin center and discovers that the Access reviews settings are unavailable. Admin1 discovers that all the other Identity Governance settings are available.

Admin1 is assigned the User administrator, Compliance administrator, and Security administrator roles.

You need to ensure that Admin1 can create access reviews in contoso.com.

Solution: You assign the Service administrator role to Admin1.

Does this meet the goal?

A.

Yes

B.

No

Full Access
Question # 14

You manage a solution in Azure that consists of a single application which runs on a virtual machine (VM).

Traffic to the application has increased dramatically.

The application must not experience any downtime and scaling must be dynamically defined.

You need to define an auto-scale strategy to ensure that the VM canhandle the workload.

Which three options should you recommend? Each correct answer presents a complete solution.

NOTE:Each correct selection is worth one point.

A.

Deploy application automatic vertical scaling.

B.

Create a VM availability set.

C.

Create a VM scale set.

D.

Deploy application automatic horizontal scaling.

E.

Deploy a custom auto-scale implementation.

Full Access
Question # 15

You plan to configure an Azure Cosmos DB account as shown in the following table.

You need to ensure the highest level of resiliency for CosmosDB1.

What should you use?

A.

availability zones

B.

multi-region writes

C.

geo-redundant storage (GRS)

D.

an availability set

Full Access
Question # 16

You have a server named Server1 that runs Windows Server 2019. Server! is a container host.

You plan to create a container image.

You create the following instructions in a text editor.

You need 10 be able to automate the container image creation by using the instructions. To which file should you save the instructions?

A.

Dockerfile

B.

daemon.json

C.

dockerconfig.json

D.

dockerconfig.sjon

Full Access
Question # 17

You network contains an Active Directory domain named adatum.com and an Azure Active Directory (Azure AD) tenant named adatum.onmicrosoft.com.

Adatum.com contains the user accounts in the following table.

Adatum.onmicrosoft.com contains the user accounts in the following table.

You need to implement Azure AD Connect. The solution must follow the principle of least privilege.

Which user accounts should you use? To answer,select the appropriate options in the answer area.

NOTE:Each correct selection is worth one point.

Full Access
Question # 18

You have a resource group named RG1 that contains the following:

• A virtual network that contains two subnets named Subnet 1 andAzureFirewallSubnet

• An Azure Storage account named contososa1

• An Azure firewall deployed to AzureFirewallSubnet

You need to ensure that contososa1 is accessible from Subnet 1 over the Azure backbone network. What should you do?

A.

Create a stored access policy for contososa1.

B.

Remove the Azure firewall-

C.

implement a virtual network service endpoint.

D.

Modify the Firewall and virtual networks settings for contososa1.

Full Access
Question # 19

: 290

Note: This question is part of series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, youwill NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure Cosmos DB database that contains a container named Container1. The partition key for Container1 is set to /day. Container1 contains theitems shown in the following table.

You need to programmatically query Azure Cosmos DB and retrieve item1 and item2 only.

Solution: You run the following query.

You set the EnableCrossPartitionQuery property to True.

Does this meet the goal?

A.

Yes

B.

No

Full Access
Question # 20

: 299

You Wave an Acme Directory forest named contoso.com.

Youinstall and configure Azure AD Connect to use password hath synchronization as the single sign-on (SSO) method Staging mode is enabled

You review the synchronization results and discover that the Synchronization Service Manager does not display any sync jobs.

You need to ensure that the synchronization completes successfully.

What should you do?

A.

From Synchronization Service Manager, run a full import

B.

From Azure PowerShell, run Start-AdSyncCycle -PolicyType initial.

C.

Run Azure AD Connect and setthe SSO method to Pass-through Authentication

D.

Run Azure AD Connect and disable staging mode.

Full Access
Question # 21

You have an on-premises virtual machine named VM1 configured as shown in the following exhibit.

VM is started.

You need to create a new virtual machine image in Azure from VM1.

Which three actions should you perform before you create the new image? Each correct answer presents partof the solution.

NOTE:Each correct selection is worth one point.

A.

Remove the Backup (volume shadow copy) integration service

B.

Generalize VM1

C.

Run Add-AzureRmVhd and specify a blob service container as the destination

D.

Run Add-AzureRmVhd and specify a file share as the destination

E.

Reduce the amount of memory to 16 GB

F.

Convert the disk type to VHD

Full Access
Question # 22

Youhave a network security group (NSG) named nsg1 that has the rules shown in the following exhibit.

Users on the internet report that they fail to connect to the servers on the virtual network.

You need to ensure that the users can connect to the servers by using the Remote Desktop client.

A.

Modify the protocol for the RDP rule

B.

Modify the port for the RDP rule

C.

Create a new inbound security rule

D.

Modify the source network for the RDP rule

Full Access