Latest Dec 09, 2021 AZ-303 Brain Dump: A Study Guide with Tips & Tricks for passing Exam

AZ-303 Question Bank: Free PDF Download Recently Updated Questions

Azure Infrastructure Implementation and Monitoring: 50-55%

• Azure Active Directory Implementation – The applicants should demonstrate the skills in managing and implementing guest accounts, self-service password reset, multiple directories, and Conditional Access. They also need competence in adding custom domains and configuring Azure Active Directory Identity Protection. Additionally, they need the skills in configuring fraud alerts, bypass options, user accounts for MFA, verification methods, and Trusted IPs;
• Hybrid Identities Implementation and Management – This area requires the knowledge of using Azure Active Directory Connect Health as well as installing and configuring Azure AD Connect and single sign-on. It also covers the skills in identity synchronization alternatives and configuring and managing password writeback and password sync.
• Implementation of Virtual Machines for Linux and Windows – It is important to know how to configure Azure Disk Encryption, High Availability, and storage for Virtual Machines. You also need the skills in configuring and deploying scale sets and choosing virtual machine sizes;
• Storage Accounts Implementation – The potential candidates should have competence in managing access keys as well as implementing Azure storage replication and Azure storage account failover. The topic also covers Shared Access Signatures, access policies, and Azure Active Directory authentication for storage. You must also demonstrate the knowledge of how to configure blob storage, Azure Files, and network access for the storage account;

The benefit of obtaining the AZ-303: Microsoft Azure Architect Technologies Exam Certification

• AZ-303 Certified professionals are distinguished among competitors when appearing for employment or promotion interviews.

• AZ-303 Exam provide proven knowledge to use the tools to complete the task efficiently and cost-effectively than the other non-certified professionals lack in doing so.

• AZ-303 Certification provides practical experience to candidates from all the aspects to be a proficient worker in the organization.

• This certification will be judging your skills and knowledge on your understanding of Azure Architect Technologies concepts & Understanding of how to operate on Planning and Administering Azure Architect Technologies.

• This certification credential will give you an edge over other counterparts. Apart from knowledge from AZ-303: Microsoft Azure Architect Technologies Exam.

• AZ-303 certification has more useful and relevant networks that help them in setting career goals for themselves. AZ-303 networks provide them with the correct career guidance than non certified generally are unable to get.

 

NEW QUESTION 11
You are designing a solution to secure a company's Azure resources. The environment hosts 10 teams. Each team manages a project and has a project manager, a virtual machine (VM) operator, developers, and contractors.
Project managers must be able to manage everything except access and authentication for users. VM operators must be able to manage VMs, but not the virtual network or storage account to which they are connected.
Developers and contractors must be able to manage storage accounts.
You need to recommend roles for each member.
What should you recommend? To answer, drag the appropriate roles to the correct employee types. Each role may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Explanation

 

NEW QUESTION 12
You have an Azure subscription.
You create a custom role in Azure by using the following Azure Resource Manager template.

You assign the role to a user named User1.
Which action can User1 perform?

• A. Create virtual machines.
• B. Delete virtual machines.
• C. Create resource groups.
• D. Create support requests.

Answer: D

Explanation:
Explanation
Explanation:
The "Microsoft.Support/*" operation will allow the user to create support tickets.
References:
https://docs.microsoft.com/en-us/azure/role-based-access-control/tutorial-custom-role-powershell

 

NEW QUESTION 13
You have an Azure subscription that contains 10 virtual machines on a virtual network.
You need to create a graph visualization to display the traffic flow between the virtual machines.
What should you do from Azure Monitor?

• A. From Workbooks, create a workbook.
• B. From Logs, create a new query.
• C. From Metrics, create a chart.
• D. From Activity log, use quick insights.

Answer: A

Explanation:
Workbooks support visualizing arbitrary graphs based on data from logs to show the relationships between monitoring entities.
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/metrics-supported

 

NEW QUESTION 14
Note: This question is part of series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a server named Server1 that runs Windows Server 2019. Server1 is a container host.
You are creating a Dockerfile to build a container image.
You need to add a file named File1.txt from Server1 to a folder named C:\Folder1 in the container image.
Solution: You add the following line to the Dockerfile.
Copy-Item File1.txt C:\Folder1\File1.txt
You then build the container image.
Does this meet the goal?

• A. Yes
• B. No

Answer: B

Explanation:
Explanation
Copy-Item is not supported. Copy is the correct command to copy a file to the container image.
References:
https://docs.docker.com/develop/develop-images/dockerfile_best-practices/#add-or-copy
https://docs.docker.com/engine/reference/builder/

 

NEW QUESTION 15
From Azure Cosmos DB, you create the containers shown in the following table.

You add the following item to Container1.

You plan to add items to Azure Cosmos DB as shown in the following table.

You need to identify which items can be added successfully to Container1 and Container2.
What should you identify for each container? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

 

NEW QUESTION 16
You have an Azure subscription that contains two virtual networks named VNet1 and VNet2. Virtual machines connect to the virtual networks.
The virtual networks have the address spaces and the subnets configured as shown in the following table.

You need to add the address space of 10.33.0.0/16 to VNet1. The solution must ensure that the hosts on VNet1 and VNet2 can communicate.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer:

Explanation:

References:
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-manage-peering

 

NEW QUESTION 17
You have an Azure subscription that contains a resource group named RG1. RG1 contains multiple resources.
You need to trigger an alert when the resources in RG1 consume $1,000 USD.
What should you do?

• A. From RG1, create an event subscription.
• B. From Cost Management + Billing, add a cloud connector.
• C. From Cost Management + Billing create a budget.
• D. From the subscription, create an event subscription.

Answer: C

Explanation:
Explanation
Create budgets to manage costs and create alerts that automatically notify you are your stakeholders of spending anomalies and overspending.
To set it up, go to the Azure Portal, select 'Cost Management + Billing' -> 'Cost Management' -> 'Go to Cost Management'.

Note: Cost alerts are automatically generated based when Azure resources are consumed. Alerts show all active cost management and billing alerts together in one place. When your consumption reaches a given threshold, alerts are generated by Cost Management. There are three types of cost alerts: budget alerts, credit alerts, and department spending quota alerts.
Reference:
https://docs.microsoft.com/en-us/azure/cost-management-billing/manage/getting-started

 

NEW QUESTION 18
You have an Azure virtual network that contains a subnet named Subnet1. Subnet1 contains 50 virtual machines. Twenty-five of the virtual machines are web servers and the other 25 are application servers.
You need to filter traffic the web servers and the application servers by using application security groups.
Which additional resources should you provision?

• A. Azure Private Link
• B. a network security group (NSG)
• C. Azure-firewall
• D. a user-defined route

Answer: B

Explanation:
Explanation
Application security groups enable you to configure network security as a natural extension of an application's structure, allowing you to group virtual machines and define network security policies based on those groups.
You can filter network traffic inbound to and outbound from a virtual network subnet with a network security group.
Reference:
https://docs.microsoft.com/en-us/azure/virtual-network/tutorial-filter-network-traffic

 

NEW QUESTION 19
You have an application that is hosted across multiple Azure regions.
You need to ensure that users connect automatically to their nearest application host based on network latency.
What should you implement?

• A. Azure Load Balancer
• B. Azure Traffic Manager
• C. Azure Application Gateway
• D. Azure Bastion

Answer: B

Explanation:
Azure Traffic Manager is a DNS-based traffic load balancer. This service allows you to distribute traffic to your public facing applications across the global Azure regions. Traffic Manager also provides your public endpoints with high availability and quick responsiveness.
Reference:
https://docs.microsoft.com/en-us/azure/traffic-manager/traffic-manager-overview

 

NEW QUESTION 20
You need to meet the user requirement for Admin1.
What should you do?

• A. From the Azure Active Directory blade, modify the Properties.
• B. From the Subscriptions blade, select the subscription, and then modify the Properties.
• C. From the Azure Active Directory blade, modify the Groups.
• D. From the Subscriptions blade, select the subscription, and then modify the Access control (IAM) settings.

Answer: B

Explanation:
Explanation
Change the Service administrator for an Azure subscription
* Sign in to Account Center as the Account administrator.
* Select a subscription.
* On the right side, select Edit subscription details.
Scenario: Designate a new user named Admin1 as the service administrator of the Azure subscription.
References:
https://docs.microsoft.com/en-us/azure/billing/billing-add-change-azure-subscription-administrator

 

NEW QUESTION 21
You have an Azure subscription that contains the virtual networks shown in the following table.

You create an Azure Cosmos DB account as shown in the exhibit. (Click the Exhibit tab.) For each of the following statements, select yes if the statement is true. Otherwise, select no.

Answer:

Explanation:

 

NEW QUESTION 22
You have an Azure subscription that includes an Azure key vault named Vault1.
You create the Azure virtual machines shown in the following table.

You enable Azure Disk Encryption for all the virtual machines and use the -VolumeType All parameter.
You add data disks to the virtual machines as shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Explanation:
Premium and standard, but not basic, account types support disk encryption.
Disk encryption requires managed disks.
References:
https://docs.microsoft.com/en-us/azure/security/azure-security-disk-encryption-overview

 

NEW QUESTION 23
HOTSPOT
You need to design an authentication solution that will integrate on-premises Active Directory and Azure Active Directory (Azure AD). The solution must meet the following requirements:
* Active Directory users must not be able to sign in to Azure AD-integrated apps outside of the sign-in hours configured in the Active Directory user accounts.
* Active Directory users must authenticate by using multi-factor authentication (MFA) when they sign in to Azure AD-integrated apps.
* Administrators must be able to obtain Azure AD-generated reports that list the Active Directory users who have leaked credentials.
* The infrastructure required to implement and maintain the solution must be minimized.
What should you include in the solution? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Answer:

Explanation:

Section: [none]
Explanation:
Box 1: Pass-through Authentication with Azure AD Seamless SSO
Azure AD Seamless SSO versus Active Directory Federation Services
Companies with a security requirement to immediately enforce on-premises user account states, password policies, and sign-in hours might use Azure AD Pass-through Authentication.
You can combine Pass-through Authentication with the Seamless Single Sign-On feature.
Note: Azure AD supports the following authentication methods for hybrid identity solutions.
* Azure AD password hash synchronization
* Azure AD Pass-through Authentication
Box 2: Azure MFA
One key benefit with Azure AD Pass-through Authentication is that it works seamlessly with Azure MFA.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/choose-ad-authn

 

NEW QUESTION 24
You have an Azure subscription that contains the virtual networks shown in the following table.

You need to recommend a connectivity solution that will enable the virtual machines on VNET1 and VNET2 to communicate through the Microsoft backbone infrastructure.
What should you include in the recommendation?

• A. peering
• B. Azure ExpressRoute
• C. a site-to-site VPN
• D. a point-to-site VPN

Answer: A

Explanation:
Section: [none]
Explanation:
Virtual network peering enables you to seamlessly connect Azure virtual networks. Once peered, the virtual networks appear as one, for connectivity purposes. The traffic between virtual machines in the peered virtual networks is routed through the Microsoft backbone infrastructure, much like traffic is routed between virtual machines in the same virtual network, through private IP addresses only. Azure supports:
* VNet peering - connecting VNets within the same Azure region
* Global VNet peering - connecting VNets across Azure regions
References:
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-peering-overview

 

NEW QUESTION 25
You have an on-premises data center and an Azure subscription. The data center contains two VPN devices.
The subscription contains an Azure virtual network named VNet1. VNet1 contains a gateway subnet.
You need to create a site-to-site VPN. The solution must ensure that is a single instance of an Azure VPN gateway fails, or a single on-premises VPN device fails, the failure will not cause an interruption that is longer than two minutes.
What is the minimum number of public IP addresses, virtual network gateways, and local network gateways required in Azure? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Explanation
Box 1: 2
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-activeactive-rm-powershell Box 2: 2 Every Azure VPN gateway consists of two instances in an active-standby configuration. For any planned maintenance or unplanned disruption that happens to the active instance, the standby instance would take over (failover) automatically, and resume the S2S VPN or VNet-to-VNet connections.
Box 3: 2
Dual-redundancy: active-active VPN gateways for both Azure and on-premises networks References:
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-highlyavailable

 

NEW QUESTION 26
You need to recommend an identify solution that meets the technical requirements.
What should you recommend?

• A. cloud-only user accounts
• B. federated single-on (SSO) and Active Directory Federation Services (AD FS)
• C. Pass-through Authentication and single sign-on (SSO)
• D. password hash synchronization and single sign-on (SSO)

Answer: C

Explanation:
Active Directory Federation Services is a feature and web service in the Windows Server Operating System that allows sharing of identity information outside a company's network.
Scenario: Technical Requirements include:
Prevent user passwords or hashes of passwords from being stored in Azure.
References: https://www.sherweb.com/blog/active-directory-federation-services/

 

NEW QUESTION 27
You have an Azure subscription.
You plan to deploy an app that has a web front end and an application tier.
You need to recommend a load balancing solution that meets the following requirements:
Internet to web tier:
- Provides URL-based routing
- Supports connection draining
- Prevents SQL injection attacks
Web tier to application tier:
- Provides port forwarding
- Supports HTTPS health probes
- Supports an availability set as a backend pool
Which load balancing solution should you recommend for each tier? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Explanation:
Box 1: An Azure Application Gateway that has a web application firewall (WAF) Azure Application Gateway offers a web application firewall (WAF) that provides centralized protection of your web applications from common exploits and vulnerabilities. Web applications are increasingly targeted by malicious attacks that exploit commonly known vulnerabilities. SQL injection and cross-site scripting are among the most common attacks.
Application Gateway operates as an application delivery controller (ADC). It offers Secure Sockets Layer (SSL) termination, cookie-based session affinity, round-robin load distribution, content-based routing, ability to host multiple websites, and security enhancements.
Box 2: An internal Azure Standard Load Balancer
The internet to web tier is the public interface, while the web tier to application tier should be internal.
Note: When using load-balancing rules with Azure Load Balancer, you need to specify a health probes to allow Load Balancer to detect the backend endpoint status.
Health probes support the TCP, HTTP, HTTPS protocols.
References:
https://docs.microsoft.com/en-us/azure/application-gateway/waf-overview
https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-custom-probe-overview

 

NEW QUESTION 28
An administrator plans to create a function app in Azure that will have the following settings:
* Runtime stack: .NET Core
* Operating System: Linux
* Plan type: Consumption
* Enable Application Insights: Yes
You need to ensure that you can back up the function app.
Which settings should you recommend changing before creating the function app?
D18912E1457D5D1DDCBD40AB3BF70D5D

• A. Plan type
• B. Enable Application Insights
• C. Runtime stack
• D. Operating System

Answer: A

Explanation:
Explanation
The Backup and Restore feature requires the App Service plan to be in the Standard, Premium or Isolated tier.
Reference:
https://docs.microsoft.com/en-us/azure/app-service/manage-backup#requirements-and-restrictions

 

NEW QUESTION 29
You have an on-premises data center and an Azure subscription. The data center contains two VPN devices. The subscription contains an Azure virtual network named VNet1. VNet1 contains a gateway subnet.
You need to create a site-to-site VPN. The solution must ensure that is a single instance of an Azure VPN gateway fails, or a single on-premises VPN device fails, the failure will not cause an interruption that is longer than two minutes.
What is the minimum number of public IP addresses, virtual network gateways, and local network gateways required in Azure? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Explanation:
Box 1: 2
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-activeactive-rm-powershell Box 2: 2 Every Azure VPN gateway consists of two instances in an active-standby configuration. For any planned maintenance or unplanned disruption that happens to the active instance, the standby instance would take over (failover) automatically, and resume the S2S VPN or VNet-to-VNet connections.
Box 3: 2
Dual-redundancy: active-active VPN gateways for both Azure and on-premises networks References:
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-highlyavailable

 

NEW QUESTION 30
You create and save an Azure Resource Manager template named Template1 that includes the following four sections.

You deploy template1.
For each of the following statement, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

Topic 1, Contoso, Ltd
Overview
Contoso, Ltd. is a manufacturing company that has offices worldwide. Contoso works with partner organizations to bring products to market.
Contoso products are manufactured by using blueprint files that the company authors and maintains.
Existing Environment
Currently, Contoso uses multiple types of servers for business operations, including the following:
* File servers
* Domain controllers
* Microsoft SQL Server servers
Your network contains an Active Directory forest named contoso.com. All servers and client computers are joined to Active Directory.
You have a public-facing application named App1. App1 is comprised of the following three tiers:
* A SQL database
* A web front end
* A processing middle tier
Each tier is comprised of five virtual machines. Users access the web front end by using HTTPS only.
Requirements
Planned Changes
Contoso plans to implement the following changes to the infrastructure:
* Move all the tiers of App1 to Azure.
* Move the existing product blueprint files to Azure Blob storage.
* Create a hybrid directory to support an upcoming Microsoft Office 365 migration project.
Technical Requirements
Contoso must meet the following technical requirements:
* Move all the virtual machines for App1 to Azure.
* Minimize the number of open ports between the App1 tiers.
* Ensure that all the virtual machines for App1 are protected by backups.
* Copy the blueprint files to Azure over the Internet.
* Ensure that the blueprint files are stored in the archive storage tier.
* Ensure that partner access to the blueprint files is secured and temporary.
* Prevent user passwords or hashes of passwords from being stored in Azure.
* Use unmanaged standard storage for the hard disks of the virtual machines.
* Ensure that when users join devices to Azure Active Directory (Azure AD), the users use a mobile phone to verify their identity.
Minimize administrative effort whenever possible.
User Requirements
Contoso identifies the following requirements for users:
Ensure that only users who are part of a group named Pilot can join devices to Azure AD.
Designate a new user named Admin1 as the service administrator of the Azure subscription.
Ensure that a new user named User3 can create network objects for the Azure subscription.

 

NEW QUESTION 31
HOTSPOT
You have an Azure subscription that contains the virtual networks shown in the following table.

You create an Azure Cosmos DB account as shown in the exhibit. (Click the Exhibit tab.)

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

Answer:

Explanation:

Section: [none]
Explanation:
Box 1: No
Connectivity Method: Private Network
Box 2: Yes
Private endpoint: Endpoint1 (Core (SQL)) (Vnet1)
VM1 is in Vnet1.
Box 3: No
VM2 is not in Vnet1.
Reference:
https://docs.microsoft.com/en-us/azure/private-link/tutorial-private-endpoint-cosmosdb-portal

 

NEW QUESTION 32
You have an Azure Active Directory (Azure AD) tenant.
You need to create a conditional access policy that requires all users to use multi-factor authentication when they access the Azure portal.
Which three settings should you configure? To answer, select the appropriate settings to the answer area.
NOTE: Each correct selection is worth one point.

https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-access-policies

Answer:

Explanation:

 

NEW QUESTION 33
HOTSPOT
You have an Azure subscription that contains multiple resource groups. You create an availability set as shown in the following exhibit.

You deploy 10 virtual machines to AS1.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Hot Area:

Answer:

Explanation:

Section: [none]
Explanation:
Box 1: 6
Two out of three update domains would be available, each with at least 3 VMs.
An update domain is a group of VMs and underlying physical hardware that can be rebooted at the same time.
As you create VMs within an availability set, the Azure platform automatically distributes your VMs across these update domains. This approach ensures that at least one instance of your application always remains running as the Azure platform undergoes periodic maintenance.
Box 2: the West Europe region and the RG1 resource group
References:
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/regions

 

NEW QUESTION 34
You have an Azure subscription named Subscription1 that contains an Azure virtual network named VNet1. VNet1 connects to your on-premises network by using Azure ExpressRoute.
You need to connect VNet1 to the on-premises network by using a site-to-site VPN. The solution must minimize cost.
Which three actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

• A. Create a gateway subnet.
• B. Create a connection.
• C. Create a VPN gateway that uses the Basic SKU.
• D. Create a VPN gateway that uses the VpnGw1 SKU.
• E. Create a local site VPN gateway.

Answer: B,D,E

Explanation:
References:
https://docs.microsoft.com/en-za/archive/blogs/canitpro/step-by-step-configuring-a-site-to-site-vpn-gateway-between-azure-and-on-premise

 

NEW QUESTION 35
......

Microsoft AZ-303 will evaluate the candidates’ competence and knowledge in a range of topics. Therefore, it is recommended to go through the official website to review the updated skills that will be measured in the test. The domains that are highlighted by Microsoft are as follows:

• Implementation of Solutions for Applications: 10-15%

  Here, you must be able to implement Azure application infrastructure. It covers the skills in the creation and configuration of the Azure App Services and Application Service plan. This part also focuses on one’s ability to configure App Service and networking for App Services. The individuals should also have expertise in implementing Logic Apps and Azure Functions as well as creating and operating deployment slots. This area will also evaluate your skills in implementing the container-based applications.

• Implementation of Management & Security Solutions: 25-30%

  This domain requires that the applicants have the skills in managing workloads in Azure and implementing network security and load balancing. These include the implementation of Azure Load Balancer, application gateway, Azure Firewall, Web Application Firewall, Azure Firewall Manager, and Bastion, among others. It also covers the details of the implementation and management of Azure governance solutions as well as the management of app security.

• Implementation & Monitoring of Azure Infrastructures: 50-55%

  The potential candidates should be able to demonstrate the skills in implementing Cloud infrastructure monitoring processes, such as monitoring security, performance, cost, health, and availability. This section also evaluates their expertise in configuring advanced logging and logging for workloads. It also focuses on the knowledge related to the implementation of storage accounts, VMs for Linux and Windows, Azure AD, Virtual networking, and hybrid identities. It will also measure your skills in automating the configuration and deployment of resources.

• Data Platforms Implementation & Management: 10-15%

  The questions from this subject area will measure your knowledge of the implementation of NoSQL databases. Therefore, you should develop competence in storage account tables’ configuration, installing replicas in CosmosDB, and selecting relevant CosmosDB APIs. It will also evaluate your expertise in implementing the managed instances of Azure SQL Database. This domain covers the examinees’ skills in configuring Azure SQL database settings and publishing Azure SQL databases.

 

New AZ-303 Exam Dumps with High Passing Rate: https://www.vce4dumps.com/AZ-303-valid-torrent.html