Humongous Insurance is an insurance company that has three offices in Miami, Tokyo and Bangkok. Each office has 5,000 users.\nExisting Environment\nActive Directory Environment\nHumongous Insurance has a single-domain Active Directory forest named humongousinsurance.com. The functional level of the forest is Windows Server 2012.\nYou recently provisioned an Azure Active Directory (Azure AD) tenant.\nNetwork Infrastructure\nEach office has a local data center that contains all the servers for that office. Each office has a dedicated connection to the Internet.\nEach office has several link load balancers that provide access to the servers.\nActive Directory Issue\nSeveral users in humongousinsurance.com have UPNs that contain special characters.\nYou suspect that some of the characters are unsupported in Azure AD.\nLicensing Issue\nYou attempt to assign a license in Azure to several users and receive the following error message: \"Licenses not assigned. License assignment failed for one\nuser.\"\nYou verify that the Azure subscription has the available licenses.\nRequirements\nPlanned Changes\nHumongous Insurance plans to open a new office in Paris. The Paris office will contain 1,000 users who will be hired during the next 12 months. All the resources\nused by the Paris office users will be hosted in Azure.\nPlanned Azure AD Infrastructure\nThe on-premises Active Directory domain will be synchronized to Azure AD.\nAll client computers in the Paris office will be joined to an Azure AD domain.\nPlanned Azure Networking Infrastructure\nYou plan to create the following networking resources in a resource group named All_Resources:\nDefault Azure system routes that will be the only routes used to route traffic\nA virtual network named Paris-VNet that will contain two subnets named Subnet1 and Subnet2\nA virtual network named ClientResources-VNet that will contain one subnet named ClientSubnet\nA virtual network named AllOffices-VNet that will contain two subnets named Subnet3 and Subnet4\nYou plan to enable peering between Paris-VNet and AllOffices-VNet. You will enable the Use remote gateways setting for the Paris-VNet peerings.\nYou plan to create a private DNS zone named humongousinsurance.local and set the registration network to the ClientResources-VNet virtual network.\nPlanned Azure Computer Infrastructure\nEach subnet will contain several virtual machines that will run either Windows Server 2012 R2, Windows Server 2016, or Red Hat Linux.\nDepartment Requirements\nHumongous Insurance identifies the following requirements for the company's departments:\nWeb administrators will deploy Azure web apps for the marketing department. Each web app will be added to a separate resource group. The initial\nconfiguration of the web apps will be identical. The web administrators have permission to deploy web apps to resource groups. During the testing\nphase, auditors in the finance department must be able to review all Azure costs from the past week.\nAuthentication Requirements\nUsers in the Miami office must use Azure Active Directory Seamless Single Sign-on (Azure AD Seamless SSO) when accessing resources in Azure.\nDeploy and manage virtual machines (VMs)
\nQuestion Set 1
\nNote: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might\nmeet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.\nAfter you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.\nYou have an Azure virtual machine named VM1. VM1 was deployed by using a custom Azure Resource Manager template named ARM1.json.\nYou receive a notification that VM1 will be affected by maintenance.\nYou need to move VM1 to a different host immediately.\nSolution: From the Overview blade, you move the virtual machine to a different subscription.\nDoes this meet the goal?\nA. Yes\nB. No\nCorrect Answer: B\nSection: (none)\nExplanation\nExplanation/Reference:\nExplanation:\nYou would need to redeploy the VM.\nReferences: https://docs.microsoft.com/en-us/azure/virtual-machines/windows/redeploy-to-new-\nnode
\nNote: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might\nmeet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.\nAfter you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.\nYou have an Azure virtual machine named VM1. VM1 was deployed by using a custom Azure Resource Manager template named ARM1.json.\nYou receive a notification that VM1 will be affected by maintenance.\nYou need to move VM1 to a different host immediately.\nSolution: From the Redeploy blade, you click Redeploy.\nDoes this meet the goal?\nA. Yes\nB. No\nCorrect Answer: A\nSection: (none)\nExplanation\nExplanation/Reference:\nExplanation:\nWhen you redeploy a VM, it moves the VM to a new node within the Azure infrastructure and then powers it back on, retaining all your configuration options and\nassociated resources.\nReferences: https://docs.microsoft.com/en-us/azure/virtual-machines/windows/redeploy-to-new-\nnode
\nNote: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might\nmeet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.\nAfter you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.\nYou have an Azure virtual machine named VM1. VM1 was deployed by using a custom Azure Resource Manager template named ARM1.json.\nYou receive a notification that VM1 will be affected by maintenance.\nYou need to move VM1 to a different host immediately.\nSolution: From the Update management blade, you click Enable.\nDoes this meet the goal?\nA. Yes\nB. No\nCorrect Answer: B\nSection: (none)\nExplanation\nExplanation/Reference:\nExplanation:\nYou would need to redeploy the VM.\nReferences: https://docs.microsoft.com/en-us/azure/virtual-machines/windows/redeploy-to-new-\nnode
\nYou download an Azure Resource Manager template based on an existing virtual machine. The template will be used to deploy 100 virtual machines.\nYou need to modify the template to reference an administrative password. You must prevent the password from being stored in plain text.\nWhat should you create to store the password?\nA. an Azure Key Vault and an access policy\nB. a Recovery Services vault and a backup policy\nC. Azure Active Directory (AD) Identity Protection and an Azure policy\nD. an Azure Storage account and an access policy\nCorrect Answer: A\nSection: (none)\nExplanation\nExplanation/Reference:\nExplanation:\nYou can use a template that allows you to deploy a simple Windows VM by retrieving the password that is stored in a Key Vault. Therefore, the password is never\nput in plain text in the template parameter file.\nReferences: https://azure.microsoft.com/en-us/resources/templates/101-vm-secure-\npassword/
\nYou plan to automate the deployment of a virtual machine scale set that uses the Windows Server 2016 Datacenter image.\nYou need to ensure that when the scale set virtual machines are provisioned, they have web server components installed.\nWhich two actions should you perform? Each correct answer presents part of the solution.\nNOTE: Each correct selection is worth one point.\nA. Modify the section of the Azure Resource Manager template.\nB. Create an automation account.\nC. Upload a configuration script.\nD. Create a new virtual machine scale set in the Azure portal.\nE. Create an Azure policy.\nCorrect Answer: AD\nSection: (none)\nExplanation\nExplanation/Reference:\nExplanation:\nVirtual Machine Scale Sets can be used with the Azure Desired State Configuration (DSC) extension handler. Virtual machine scale sets provide a way to deploy\nand manage large numbers of virtual machines, and can elastically scale in and out in response to load. DSC is used to configure the VMs as they come online so\nthey are running the production software.\nReferences: https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/virtual-machine-\nscale-sets-dsc
\nYou have an Azure subscription that contains a virtual machine named VM1. VM1 hosts a line-of-business application that is available 24 hours a day. VM1 has\none network interface and one managed disk. VM1 uses the D4s v3 size.\nYou plan to make the following changes to VM1:\nChange the size to D8s v3.\nAdd a 500-GB managed disk.\nAdd the Puppet Agent extension.\nAttach an additional network interface.\nWhich change will cause downtime for VM1?\nA. Add the Puppet Agent extension.\nB. Change the size to D8s v3.\nC. Add a 500-GB managed disk.\nD. Attach an additional network interface.\nCorrect Answer: B\nSection: (none)\nExplanation\nExplanation/Reference:\nExplanation:\nWhile resizing the VM it must be in a stopped state.\nReferences: https://azure.microsoft.com/en-us/blog/resize-virtual-\nmachines/\nQUESTION 7\nYou have an Azure virtual machine named VM1 that you use for testing. VM1 is protected by Azure Backup.\nYou delete VM1.\nYou need to remove the backup data stored for VM1.\nWhat should you do first?\nA. Delete the Recovery Services vault.\nB. Delete the storage account.\nC. Stop the backup\nD. Modify the backup policy.\nCorrect Answer: D\nSection: (none)\nExplanation\nExplanation/Reference:\nExplanation:\nAzure Backup provides backup for virtual machines created through both the classic deployment model and the Azure Resource Manager deployment model
\nby using custom-defined backup policies in a Recovery Services vault.\nWith the release of backup policy management, customers can manage backup policies and model them to meet their changing requirements from a single\nwindow. Customers can edit a policy, associate more virtual machines to a policy, and delete unnecessary policies to meet their compliance requirements.\nIncorrect Answers:\nB: You can't delete a Recovery Services vault if it is registered to a server and holds backup data. If you try to delete a vault, but can't, the vault is still configured\nto receive backup data.\nReferences: https://azure.microsoft.com/en-in/updates/azure-vm-backup-policy-\nmanagement/\nQUESTION 8\nYou have an Azure subscription named Subscription1.\nYou deploy a Linux virtual machine named VM1 to Subscription1.\nYou need to monitor the metrics and the logs of VM1.\nWhat should you use?\nA. the AzurePerformanceDiagnostics extension\nB. Azure HDInsight\nC. Linux Diagnostic Extension (LAD) 3.0\nD. Azure Analysis Services\nCorrect Answer: A\nSection: (none)\nExplanation\nExplanation/Reference:\nExplanation:\nYou can use extensions to configure diagnostics on your VMs to collect additional metric data.\nThe basic host metrics are available, but to see more granular and VM-specific metrics, you need to install the Azure diagnostics extension on the VM. The Azure\ndiagnostics extension allows additional monitoring and diagnostics data to be retrieved from the VM.\nReferences: https://docs.microsoft.com/en-us/azure/virtual-machines/linux/tutorial-\nmonitoring\nQUESTION 9\nYou have an Azure subscription that contains 100 virtual machines.\nYou regularly create and delete virtual machines.\nYou need to identify unattached disks that can be deleted.\nWhat should you do?\nA. From Microsoft Azure Storage Explorer, view the Account Management properties.\nB. From the Azure portal, configure the Advisor recommendations.\nC. From Azure Cost Management, view Advisor Recommendations.\nD. From Azure Cost Management, view Cost Analysis.\nCorrect Answer: A\nSection: (none)\nExplanation\nExplanation/Reference:\nExplanation:
\nYou can find unused disks in the Azure Storage Explorer console.Once you drill down to the Blob containers under a storage account, you can see the lease state\nof the residing VHD (the lease state determines if the VHD is being used by any resource) and the VM to which it is leased out. If you find that the lease state and\nthe VM fields are blank, it means that the VHD in question is unused. The screenshot below shows two active VHDs being used by VMs as data and OS disks.\nThe name of the VM and lease state are shown in the \"VM Name\" and \"Lease State\" columns, respectively.\nReference:\nhttps://cloud.netapp.com/blog/reduce-azure-storage-costs\nQUESTION 10\nYou have an Azure virtual machine named VM1.\nAzure collects events from VM1.\nYou are creating an alert rule in Azure Monitor to notify an administrator when an error is logged in the System event log of VM1.\nYou need to specify which resource type to monitor.\nWhat should you specify?\nA. metric alert\nB. Azure Log Analytics workspace\nC. virtual machine\nD. virtual machine extension\nCorrect Answer: D\nSection: (none)\nExplanation\nExplanation/Reference:\nExplanation:
\nAzure Monitor can collect data directly from your Azure virtual machines into a Log Analytics workspace for detailed analysis and correlation. Installing the Log\nAnalytics VM extension for Windows and Linux allows Azure Monitor to collect data from your Azure VMs.\nIncorrect Answers:\nB: Azure Log Analytics workspace is used for on-premises computers monitored by System Center Operations Manager.\nReference:\nhttps://docs.microsoft.com/en-us/azure/azure-monitor/learn/quick-collect-azurevm\nQUESTION 11\nYou plan to back up an Azure virtual machine named VM1.\nYou discover that the Backup Pre-Check status displays a status of Warning.\nWhat is a possible cause of the Warning status?\nA. VM1 is stopped.\nB. VM1 does not have the latest version of WaAppAgent.exe installed.\nC. VM1 has an unmanaged disk.\nD. A Recovery Services vault is unavailable.\nCorrect Answer: B\nSection: (none)\nExplanation\nExplanation/Reference:\nExplanation:\nded steps to ensure successful\nbackups. Not having the latest VM Agent installed, for example, can cause backups to fail intermittently and falls in this class of issues.\nReferences: https://azure.microsoft.com/en-us/blog/azure-vm-backup-pre-\nchecks/\nQUESTION 12\nYou have an Azure subscription named Subscription1 that is used by several departments at your company. Subscription1 contains the resources in the following\ntable.
Another administrator deploys a virtual machine named VM1 and an Azure Storage account named Storage2 by using a single Azure Resource Manager\ntemplate.\nYou need to view the template used for the deployment.\nFrom which blade can you view the template that was used for the deployment?\nA. Container1\nB. RG1\nC. VM1\nD. Storage2\nCorrect Answer: B\nSection: (none)\nExplanation\nExplanation/Reference:\nExplanation:\nView template from deployment history
\nReferences: https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-manager-export-\ntemplate
\nNote: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might\nmeet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.\nAfter you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.\nYou have an Azure subscription that contains the resources shown in the following table.
\nVM1 connects to VNET1.\nYou need to connect VM1 to VNET2.\nSolution: You create a new network interface, and then you add the network interface to VM1.\nDoes this meet the goal?\nA. Yes\nB. No\nCorrect Answer: B\nSection: (none)\nExplanation\nExplanation/Reference:\nExplanation:
\nInstead you should delete VM1. You recreate VM1, and then you add the network interface for VM1.\nNote: When you create an Azure virtual machine (VM), you must create a virtual network (VNet) or use an existing VNet. You can change the subnet a VM is\nconnected to after it's created, but you cannot change the VNet.\nReferences: https://docs.microsoft.com/en-us/azure/virtual-machines/windows/network-\noverview
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might\nmeet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.\nAfter you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.\nYou manage a virtual network named VNet1 that is hosted in the West US Azure region.\nVNet1 hosts two virtual machines named VM1 and VM2 that run Windows Server.\nYou need to inspect all the network traffic from VM1 to VM2 for a period of three hours.\nSolution: From Azure Monitor, you create a metric on Network In and Network Out.\nDoes this meet the goal?\nA. Yes\nB. No\nCorrect Answer: B\nSection: (none)\nExplanation\nExplanation/Reference:\nExplanation:\nUse the Connection Monitor feature of Azure Network Watcher.\nReferences: https://azure.microsoft.com/en-us/updates/general-availability-azure-network-watcher-connection-monitor-in-all-public-\nregions/
\nNote: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might\nmeet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.\nAfter you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.\nYou have an Azure subscription that contains the resources shown in the following table.
\nVM1 connects to VNET1.\nYou need to connect VM1 to VNET2.\nSolution: You move the VM1 to RG2, and then you add a new network interface to VM1.\nDoes this meet the goal?\nA. Yes\nB. No\nCorrect Answer: B\nSection: (none)\nExplanation\nExplanation/Reference:\nExplanation:\nYou cannot move a VM. Instead you should delete VM1. You recreate VM1, and then you add the network interface for VM1.\nNote: When you create an Azure virtual machine (VM), you must create a virtual network (VNet) or use an existing VNet. You can change the subnet a VM is\nconnected to after it's created, but you cannot change the VNet.\nReferences: https://docs.microsoft.com/en-us/azure/virtual-machines/windows/network-\noverview
\nThis question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet\nthe stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.\nAfter you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.\nYou have an Azure subscription named Subscription1 that contains the resources shown in the following table.
\nVM1 connects to a virtual network named VNET2 by using a network interface named NIC1.\nYou need to create a new network interface named NIC2 for VM1.\nSolution: You create NIC2 in RG1 and Central US.\nDoes this meet the goal?\nA. Yes\nB. No\nCorrect Answer: B\nSection: (none)\nExplanation\nExplanation/Reference:\nExplanation:
\nThe virtual machine you attach a network interface to and the virtual network you connect it to must exist in the same location, here West US, also referred to as a\nregion.\nReferences:\nhttps://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-network-interface
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might\nmeet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.\nAfter you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.\nYou have an Azure subscription named Subscription1 that contains the resources shown in the following table.
\nVM1 connects to a virtual network named VNET2 by using a network interface named NIC1.\nYou need to create a new network interface named NIC2 for VM1.\nSolution: You create NIC2 in RG2 and Central US.\nDoes this meet the goal?\nA. Yes\nB. No\nCorrect Answer: B\nSection: (none)\nExplanation\nExplanation/Reference:\nExplanation:
\nThe virtual machine you attach a network interface to and the virtual network you connect it to must exist in the same location, here West US, also referred to as a\nregion.\nReferences:\nhttps://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-network-interface
You have an Azure subscription named Subscription1 that contains the resources shown in the following table.
\nYou create virtual machines in Subscription1 as shown in the following table.
\nYou plan to use Vault1 for the backup of as many virtual machines as possible.\nWhich virtual machines can be backed up to Vault1?\nA. VM1, VM3, VMA, and VMC only\nB. VM1 and VM3 only\nC. VM1, VM2, VM3, VMA, VMB, and VMC\nD. VM1 only\nE. VM3 and VMC only\nCorrect Answer: A\nSection: (none)\nExplanation\nExplanation/Reference:\nExplanation:
\nTo create a vault to protect virtual machines, the vault must be in the same region as the virtual machines. If you have virtual machines in several regions, create a\nRecovery Services vault in each region.\nReferences: https://docs.microsoft.com/bs-cyrl-ba/azure/backup/backup-create-rs-\nvault
You have an azure subscription named Subscription1 that has the following providers registered:\nAuthorization\nAutomation\nResources
\nCompute\nKeyVault\nNetwork\nStorage\nBilling\nWeb\nSubscription1 contains an Azure virtual machine named VM1 that has the following configurations:\nPrivate IP address: 10.0.0.4 (dynamic)\nNetwork security group (NSG): NSG1\nPublic IP address: None\nAvailability set: AVSet\nSubnet: 10.0.0.0/24\nManaged disks: No
\nLocation: East US\nYou need to record all the successful and failed connection attempts to VM1.\nWhich three actions should you perform? Each correct answer presents part of the solution.\nNOTE: Each correct selection is worth one point.\nA. Create an Azure Storage account.\nB. Register the Microsoft.Insights resource provider.\nC. Add an Azure Network Watcher connection monitor.\nD. Enable Azure Network Watcher in the East US Azure region.\nE. Enable Azure Network Watcher flow logs.\nF. Register the Microsoft.LogAnalytics provider.\nCorrect Answer: ABD\nSection: (none)\nExplanation\nExplanation/Reference:\nExplanation:
\nA: NSG flow log data is written to an Azure Storage account. You need to create an Azure Storage account,\nWith an Azure Storage account NSG flow logs can be enabled.\nD: Enable network watcher in the East US region.\nB: NSG flow logging requires the Microsoft.Insights provider.\nReferences: https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-nsg-flow-\nlogging-portal
You have an Azure virtual machine named VM1.\nYou use Azure Backup to create a backup of VM1 named Backup1.\nAfter creating Backup1, you perform the following changes to VM1:\nModify the size of VM1.\nCopy a file named Budget.xls to a folder named Data.\nReset the password for the built-in administrator account.
\nAdd a data disk to VM1.\nAn administrator uses the Replace existing option to restore VM1 from Backup1.\nYou need to ensure that all the changes to VM1 are restored.\nWhich change should you perform again?\nA. Modify the size of VM1.\nB. Add a data disk.\nC. Reset the password for the built-in administrator account.\nD. Copy Budget.xls to Data.\nCorrect Answer: D\nSection: (none)\nExplanation\nExplanation/Reference:\nReferences: https://docs.microsoft.com/en-us/azure/backup/backup-azure-arm-restore-vms#replace-existing-\ndisks
You have an Azure subscription that contains the resources shown in the following table.
\nYou need to create a network interface named NIC1.\nIn which location can you create NIC1?\nA. East US and North Europe only.\nB. East US and West Europe only.\nC. East US, West Europe, and North Europe.\nD. East US only.\nCorrect Answer: D\nSection: (none)\nExplanation\nExplanation/Reference:\nExplanation:
\nA virtual network is required when you create a NIC. Select the virtual network for the network interface. You can only assign a network interface to a virtual\nnetwork that exists in the same subscription and location as the network interface. Once a network interface is created, you cannot change the virtual network it is\nassigned to. The virtual machine you add the network interface to must also exist in the same location and subscription as the network interface.\nReferences: https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-network-\ninterface
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might\nmeet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.\nAfter you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.\nYou have an Azure subscription named Subscription1 that contains the resources shown in the following table.
\nVM1 connects to a virtual network named VNET2 by using a network interface named NIC1.\nYou need to create a new network interface named NIC2 for VM1.\nSolution: You create NIC2 in RG1 and West US.\nDoes this meet the goal?\nA. Yes\nB. No\nCorrect Answer: A\nSection: (none)\nExplanation\nExplanation/Reference:\nExplanation:
\nThe virtual machine you attach a network interface to and the virtual network you connect it to must exist in the same location, here West US, also referred to as a\nregion.\nReferences: https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-network-\ninterface