Pass4itsure share these resources with you. Both VCE and PDF dumps contain the latest Microsoft AZ-303 exam questions, which will ensure your AZ-303 exam 100% passed! You can get AZ-303 VCE dumps and AZ-303 PDF dumps from Pass4itsure. Please get the latest Pass4itsure AZ-303 dumps here: https://www.pass4itsure.com/az-303.html (418 QA Dumps).
Download The Real Microsoft AZ-303 PDF Here, Free
[free pdf] Microsoft AZ-303 PDF [Drive] https://drive.google.com/file/d/1n_pIN-I-60dhgHSJWSlmuzZ1SPxOXgVK/view?usp=sharing
Microsoft AZ-303 Practice Test Questions Answers
QUESTION 1
HOTSPOT
You have an Azure subscription that includes an Azure key vault named Vault1. You create the Azure virtual machines
shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct
selection is worth one point.
Hot Area:
Correct Answer:
QUESTION 2
An administrator plans to create a function app in Azure that will have the following settings: Runtime stack: .NET Core
Operating System: Linux Plan type: Consumption Enable Application Insights: Yes You need to ensure that you can
back up the function app. Which settings should you recommend changing before creating the function app?
A. Runtime stack
B. Enable Application Insights
C. Operating System
D. Plan type
Correct Answer: D
The Backup and Restore feature requires the App Service plan to be in the Standard, Premium, or Isolated tier.
Reference: https://docs.microsoft.com/en-us/azure/app-service/manage-backup#requirements-and-restrictions
QUESTION 3
You have an Azure Active Directory (Azure AD) tenant named contoso.com.
A user named Admin1 attempts to create an access review from the Azure Active Directory admin center and discovers
that the Access review settings are unavailable. Admin1 discovers that all the other Identity Governance settings are
available.
Admin1 is assigned the User administrator, Compliance administrator, and Security administrator roles.
You need to ensure that Admin1 can create access reviews in contoso.com.
Solution: You assign the Service administrator role to Admin1.
Does this meet the goal?
A. Yes
B. No
Correct Answer: B
Instead, use Azure AD Privileged Identity Management.
Note: PIM essentially helps you manage the who, what, when, where, and why for resources that you care about. Key
features of PIM include:
Conduct access reviews to ensure users still need roles
References:
https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure
QUESTION 4
You plan to automate the deployment of a virtual machine scale set that uses the Windows Server 2016 Datacenter
image. You need to ensure that when the scale set virtual machines are provisioned, they have web server components
installed. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each
correct selection is worth one point.
A. Create a new virtual machine scale set in the Azure portal.
B. Create an automation account.
C. Upload a configuration script.
D. Modify the extension profile section of the Azure Resource Manager template.
E. Create an Azure policy.
Correct Answer: AD
References: https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/tutorial-install-apps-template
QUESTION 5
You are planning the move of App1 to Azure.
You create a network security group (NSG).
You need to recommend a solution to provide users with access to App1.
What should you recommend?
A. Create an outgoing security rule for port 443 from the Internet. Associate the NSG to all the subnets.
B. Create an incoming security rule for port 443 from the Internet. Associate the NSG to all the subnets.
C. Create an incoming security rule for port 443 from the Internet. Associate the NSG to the subnet that contains the
web servers.
D. Create an outgoing security rule for port 443 from the Internet. Associate the NSG to the subnet that contains the
web servers.
Correct Answer: C
As App1 is public-facing we need an incoming security rule, related to the access of the web servers.
Scenario: You have a public-facing application named App1. App1 is comprised of the following three tiers: SQL
database, a web front end, and a processing middle tier.
Each tier is comprised of five virtual machines. Users access the web front end by using HTTPS only.
QUESTION 6
HOTSPOT
Your network contains an Active Directory domain named adatum.com and an Azure Active Directory (Azure AD), tenant
named adatum.onmicrosoft.com.
Adatum.com contains the user accounts in the following table.
You need to implement Azure AD Connect. The solution must follow the principle of least privilege.
Which user accounts should you use in Adatum.com and Adatum.onmicrosoft.com to implement Azure AD Connect? To
answer select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
Box 1: User5
In Express settings, the installation wizard asks for the following:
AD DS Enterprise Administrator credentials
Azure AD Global Administrator credentials
The AD DS Enterprise Admin account is used to configure your on-premises Active Directory. These credentials are
only used during the installation and are not used after the installation has completed. The Enterprise Admin, not the
Domain
Admin should make sure the permissions in Active Directory can be set in all domains.
Box 2: UserA
Azure AD Global Admin credentials are only used during the installation and are not used after the installation has
completed. It is used to create the Azure AD Connector account used for synchronizing changes to Azure AD. The
account
also enables sync as a feature in Azure AD.
Reference: https://docs.microsoft.com/en-us/azure/active-directory/connect/active-directory-aadconnect-accounts-permissions
QUESTION 7
HOTSPOT
You have an Azure subscription named Subscription1. Supscription1 contains the resources in the following table.
VNet1 is in RG1. VNet2 is in RG2. There is no connectivity between VNet1 and VNet2.
An administrator named Admin1 creates an Azure virtual machine named VM1 in RG1. VM1 uses a disk named Disk1
and connects to VNet1. Admin1 then installs a custom application in VM1.
You need to move the custom application to VNet2. The solution must minimize administrative effort.
Which two actions should you perform? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
We cannot just move a virtual machine between networks. What we need to do is identify the disk used by the VM,
delete the VM itself while retaining the disk, and recreate the VM in the target virtual network and then attach the original
disk to it.
Reference: https://blogs.technet.microsoft.com/canitpro/2014/06/16/step-by-step-move-a-vm-to-a-different-vnet-onazure/
https://4sysops.com/archives/move-an-azure-vm-to-another-virtual-network-vnet/#migrate-an-azure-vm-between-vnets
QUESTION 8
HOTSPOT
You create and save an Azure Resource Manager template named Template1 that includes the following four sections.
You deploy template1.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
QUESTION 9
You have an Azure subscription that contains the resources shown in the following table.
Subnet1 is on VNET1. VM1 connects to Subnet1.
You plan to create a virtual network gateway on VNET1.
You need to prepare the environment for the planned virtual network gateway.
What are two ways to achieve this goal? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
A. Create a subnet named GatewaySubnet on VNET1.
B. Delete Subnet1.
C. Modify the address space used by Subnet1.
D. Modify the address space used by VNET1
E. Create a local network gateway.
Correct Answer: AD
QUESTION 10
You create a container image named Image1 on a developer workstation.
You plan to create an Azure Web App for Containers named WebAppContainer that will use Image1.
You need to upload Image1 to Azure. The solution must ensure that WebAppContainer can use Image1.
To which storage type should you upload Image1?
A. Azure Container Registry
B. an Azure Storage account that contains a blob container
C. an Azure Storage account that contains a file share
D. Azure Container Instances
Correct Answer: A
Configure registry credentials in the web app.
App Service needs information about your registry and image to pull the private image. In the Azure portal, go to
Container settings from the web app and update the Image source, Registry, and save.
References:
https://docs.microsoft.com/en-us/azure/devops/pipelines/targets/webapp-on-container-linux
QUESTION 11
You have an Azure key vault named KV1.
You need to ensure that applications can use KV1 to provision certificates automatically from an external certification
authority (CA).
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
A. From KV1, create a certificate issuer resource.
B. Obtain the CA account credentials.
C. Obtain the root CA certificate.
D. From KV1, create a certificate signing request (CSR).
E. From KV1, create a private key,
Correct Answer: CD
QUESTION 12
You need to create a new virtual machine image in Azure from VM1.
Which three actions should you perform before you create the new image? Each correct answer presents part of the
solution.
NOTE: Each correct selection is worth one point.
A. Remove the Backup (volume shadow copy) integration service
B. Generalize VM1
C. Run Add-AzureRmVhd and specify a blob service container as the destination
D. Run Add-AzureRmVhd and specify a file share as the destination
E. Reduce the amount of memory to 16 GB
F. Convert the disk type to VHD
Correct Answer: BCF
QUESTION 13
You have an Azure Container Registry and an Azure container instance.
You pull an image from the registry and then update the local copy of the image.
You need to ensure that the updated image can be deployed to the container instance. The solution must ensure that
you can deploy the updated image or the previous version of the image.
What should you do?
A. Run the docker image push command and specify the tag parameter.
B. Run the az image copy command and specify the tag parameter.
C. Run the az aks update command and specify the attach-acr parameter.
D. Run the kubect1 apply command and specify the dry-run parameter.
Correct Answer: B
Pass4itsure Discount Code 2020
P.S
Exampass shares all the resources: Latest Microsoft AZ-303 practice questions, latest AZ-303 pdf dumps, AZ-303 exam video learning. Microsoft AZ-303 dumps https://www.pass4itsure.com/az-303.html has come to help you prepare for the implementation of the Microsoft AZ-303 exam and its comprehensive and thorough AZ-303 exam practice materials, which will help you successfully pass the examination.
