Verified AZ-301 Study Guides 2021

NEW QUESTION 1
You have an Azure Contoso DB account named Account1 that has one write region and four read regions. You need to recommend a solution to ensure that, by default, any reads containers in Account1 will never see out writes. The solution must minimize costs.
What should you recommend?

• A. Configure Account1 to use the Strong consistency level.
• B. Create all the containers m Account1 as fixed.
• C. Create all the containers m Account1 as unlimited.
• D. Configure Account 1 to use the Consistent Prefix consistency level

Answer: A

NEW QUESTION 2
You have 100 servers that run Windows Server 2012 R2 and host Microsoft SQL Server 2012 R2 instances. The instances host databases that have the following characteristics:
The largest database is currently 3 TB. None of the databases will ever exceed 4 TB.
Stored procedures are implemented by using CLR.
You plan to move all the data from SQL Server to Azure.
You need to recommend an Azure service to host the databases. The solution must meet the following requirements:
Whenever possible, minimize management overhead for the migrated databases.
Minimize the number of database changes required to facilitate the migration.
Ensure that users can authenticate by using their Active Directory credentials.
What should you include in the recommendation?

• A. Azure SQL Database single databases
• B. Azure SQL Database Managed Instance
• C. Azure SQL Database elastic pools
• D. SQL Server 2021 on Azure virtual machines

Answer: B

Explanation: References:
https://docs.microsoft.com/en-us/azure/sql-database/sql-database-managed-instance

NEW QUESTION 3
You plan to deploy the backup policy shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

Answer:

Explanation: References:
https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-storage-tiers#archive-access-tier-preview

NEW QUESTION 4
Your company develops a web service that is deployed to at, Azure virtual machine named VM1 the web service allows an API to access real- time data from VM1 The current virtual machine deployment is shown in the Deployment exhibit. (Click the Deployment tab).

The chief technology officer (CTO) sends you the following email message: "Our developers have deployed the web service to a virtual machine named WL Testing has shown that the API i accessible from VM1 and VM? Our partners must be able to connect to the API over the Internet Partners will me this data in applications that they develop:
You deploy an Azure API Management service. The relevant API Management configuration is shown m the API ambit. Click the API tab).

For each of the following statements, select. Yes if the statement is true. Otherwise. select No. NOTE: Each correct selection is worth one point.

Answer:

Explanation:

NEW QUESTION 5
Note: This question is part of series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure subscription that contains a resource group named RG1.
You create an Azure Active Directory (Azure AD) group named ResearchUsers that contains the user accounts of all researchers.
You need to recommend a solution that meets the following requirements:
The researchers must be allowed to create Azure virtual machines.
The researchers must only be able to create Azure virtual machines by using specific Azure Resource
Manager templates.
Solution: Create a lab in Azure DevTest Lab. Configure the DevTest Labs settings. Assign the DevTest Labs User role to the ResearchUsers group.
Does this meet the goal?

• A. Yes
• B. No

Answer: B

NEW QUESTION 6
You need to recommend a strategy for the web tier of WebApp1. The solution must minimize What should
you recommend?

• A. Create a runbook that resizes virtual machines automatically to a smaller size outside of business hours.
• B. Configure the Scale Up settings for a web app.
• C. Deploy a virtual machine scale set that scales out on a 75 percent CPU threshold.
• D. Configure the Scale Out settings for a web app.

Answer: D

NEW QUESTION 7
You need to recommend a backup solution for the data store of the payment processing. What should you include in the recommendation?
A Microsoft System Center Data Protection Manager (DPM)

• A. long-term retention
• B. a Recovery Services vault
• C. Azure Backup Server

Answer: B

Explanation:
References:
https://docs.microsoft.com/en-us/azure/sql-database/sql-database-long-term-backup-retention-configure

NEW QUESTION 8
You need to recommend a solution for data of the historical transaction query system.
What should you include in the recommendation? To answer, Select the appropriate or options in the answer area.
NOTE: Each correct selection is worth one point

Answer:

Explanation:

NEW QUESTION 9
You have an Azure subscription that contains a custom application named Application was developed by an external company named fabric, Ltd. Developers at Fabrikam were assigned role-based access control (RBAV) permissions to the Application components. All users are licensed for the Microsoft 365 E5 plan.
You need to recommends a solution to verify whether the Faricak developers still require permissions to Application1. The solution must the following requirements.
* To the manager of the developers, send a monthly email message that lists the access permissions to Application1.
* If the manager does not verify access permission, automatically revoke that permission.
* Minimize development effort. What should you recommend?

• A. Create an Azure Automation runbook that the Get-AureADUSAppRoleAssigmety cmdlet.
• B. In azure Active directory (Azure AD) create an access review of application1.
• C. In Azure Active Directory (AD) privileged identity Managed, create a custom roles assignment for the Application 1 resources.
• D. Create an Azure Automation runbook that runs the get-AzureRaRolesAssigned cmdlet.

Answer: A

NEW QUESTION 10
You need to recommend a solution for configuring the Azure Multi-Factor Authentication (MFA) settings. What should you include in the recommendation? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Answer:

Explanation: References:
https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/howto-sign-in-risk-policy https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/howto-mfa-policy

NEW QUESTION 11
You plan to deploy 200 Microsoft SQL Server databases to Azure by using SQL Database and Azure SQL Database Managed Instance.
You need to recommend a monitoring solution that provides a consistent monitoring approach for all deployments The solution must meet the following requirements: Support current-state analysis on metrics collected near -real-time multiple times per minutes and maintained for up to one hour.
Support longer term analysis based on metrics collected multiple timer per hour and maintained for up two weeks.
Support monitoring of the number of concurrent logins and concurrent sessions. What should you include in the recommendation?

• A. Azure Monitor
• B. dynamic management views
• C. SQL Server-Profiler
• D. trace flags

Answer: D

NEW QUESTION 12
Note: This question is part of series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure subscription named Project1. Only a group named Project1admins is assigned roles in the Project1 subscription. The Project1 subscription contains all the resources for an application named Application1.
Your company is developing a new application named Application2. The members of the Application2 development team belong to an Azure Active Directory (Azure AD) group named App2Dev.
You identify the following requirements for Application2:
The members of App2Dev must be prevented from changing the role assignments in Azure.
The members of App2Dev must be able to create new Azure resources required by Application2.
All the required role assignments for Application2 will be performed by the members of
Project1admins.
You need to recommend a solution for the role assignments of Application2.
Solution: Create a new Azure subscription named Project2. Assign Project1admins the User Access Administrator role for the Project2 subscription. Assign App2Dev the Owner role for the Project2 subscription.
Does this meet the goal?

• A. Yes
• B. No

Answer: B

NEW QUESTION 13
You are planning to deploy an application by using the Azure Kubermets Services (AKS)> the application will reedy on having access to an encryption key that will be used to ... transmit files
What should you use to provides the encryption key AKS security?

• A. secrets
• B. Azure Storage Service Encryption
• C. a Kubernetes deployment YAML file
• D. ConfigureMap

Answer: C

NEW QUESTION 14
A company named Contoso, Ltd. has an Azure Active Directory (Azure AD) tenant that is integrated with Microsoft Office 365 and an Azure subscription.
Contoso has an on-premises identity infrastructure. The infrastructure includes servers that run Active Directory Domain Services (AD DS), Active Directory Federation Services (AD FS), Azure AD Connect, and Microsoft Identity Manager (MIM).
Contoso has a partnership with a company named Fabrikam, Inc. Fabrikam has an Active Directory forest and an Office 365 tenant. Fabrikam has the same on-premises identity infrastructure as Contoso.
A team of 10 developers from Fabrikam will work on an Azure solution that will be hosted in the Azure subscription of Contoso. The developers must be added to the Contributor role for a resource in the Contoso subscription.
You need to recommend a solution to ensure that Contoso can assign the role to the 10 Fabrikam developers.
The solution must ensure that the Fabrikam developers use their existing credentials to access resources. What should you recommend?

• A. Configure a forest trust between the on-premises Active Directory forests of Contoso and Fabrikam.
• B. Configure an organization relationship between the Office 365 tenants of Fabrikam and Contoso.
• C. In the Azure AD tenant of Contoso, enable Azure Active Directory Domain Services (Azure AD DS).Createa one-way forest trust that uses selective authentication between the Active Directory forests of Contoso and Fabrikam.
• D. In the Azure AD tenant of Contoso, create guest accounts for the Fabrikam developers.

Answer: D

Explanation: References:
https://docs.microsoft.com/en-us/azure/role-based-access-control/role-assignments-external-users

NEW QUESTION 15
You configure OAuth 2 authorization in API Management as shown in the exhibit.

Use the drop-domain to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

NEW QUESTION 16
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions with not appear in the review screen.
You need to deploy resources to host a stateless web app in an Azure subscription The solution must meet the following requirements:
• Provide access to the full .NET framework.
• Provide redundancy it an Azure region fails.
• Grant administrators access to the operating system to install custom application dependencies. Solution: You deploy an Azure virtual machine to two Azure regions, and you create a Traffic Manager
profile.
Does this meet the goal?

• A. Yes
• B. No

Answer: A

NEW QUESTION 17
You need to recommend a solution lo generate a monthly report of all the new Azure Resource Manager resource deployment in your subscription What should you include in the recommend3tlon,

• A. Azure Activity Log
• B. Azure Monitor action groups
• C. Azure Advisor
• D. Azure Monitor metrics

Answer: B