Your company has two on-premises servers named SRV01 and SRV02. Developers
have created an application that runs on SRV01. The application calls a service on
SRV02 by IP address.
You plan to migrate the application on Azure virtual machines (VMs). You have
configured two VMs on a single subnet in an Azure virtual network.
You need to configure the two VMs with static internal IP addresses.
What should you do?
A. Run the New-AzureRMVMConfig PowerShell cmdlet.
B. Run the Set-AzureSubnet PowerShell cmdlet.
C. Modify the VM properties in the Azure Management Portal.
D. Modify the IP properties in Windows Network and Sharing Center.
E. Run the Set-AzureStaticVNetIP PowerShell cmdlet.
Give this one a try later!
, E. Run the Set-AzureStaticVNetIP PowerShell cmdlet.
Explanation: Specify a static internal IP for a previously created VM If you
want to set a static IP address for a VM that you previously created, you can
do so by using the following cmdlets. If you already set an IP address for
the VM and you want to change it to a different IP address, you'll need to
remove the existing static IP address before running these cmdlets. See the
instructions below to remove a static IP.
For this procedure, you'll use the Update-AzureVM cmdlet. The Update-
AzureVM cmdlet restarts the VM as part of the update process. The DIP
that you specify will be assigned after the VM restarts. In this example, we
set the IP address for VM2, which is located in cloud service StaticDemo.
Get-AzureVM -ServiceName StaticDemo -Name VM2 | Set-
AzureStaticVNetIP -IPAddress 192.168.4.7 | Update-AzureVM
Reference: https://docs.microsoft.com/en-
us/powershell/module/servicemanagement/azure/setazurestaticvnetip?
view=azuresmps-4.0.0
Your company's Azure subscription includes Azure virtual machines (VMs) that run
Windows Server 2016.
One of the VMs is backed up every day using Azure Backup Instant Restore.
When the VM becomes infected with data encrypting ransomware, you decide to
recover the VM's files.
Which of the following is TRUE in this scenario?
A. You can only recover the files to the infected VM.
B. You can recover the files to any VM within the company's subscription.
C. You can only recover the files to a new VM.
D. You will not be able to recover the files.
Give this one a try later!
, A. You can only recover the files to the infected VM.
Your company has virtual machines (VMs) hosted in Microsoft Azure. The VMs are
located in a single Azure virtual network named VNet1.
The company has users that work remotely. The remote workers require access to the
VMs on VNet1.
You need to provide access for the remote workers.
What should you do?
A. Configure a Site-to-Site (S2S) VPN.
B. Configure a VNet-toVNet VPN.
C. Configure a Point-to-Site (P2S) VPN.
D. Configure DirectAccess on a Windows Server 2012 server VM.
E. Configure a Multi-Site VPN
Give this one a try later!
C. Configure a Point-to-Site (P2S) VPN.
Explanation: A Point-to-Site (P2S) VPN gateway connection lets you create
a secure connection to your virtual network from an individual client
computer.
Reference: https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-
gateway-about-vpngateways
Your company has an Azure subscription with two storage accounts. Each of these
storage accounts includes a queue service, a table service, and a blob service.
You have created two apps that must be configured to store various types of data to
all the storage services on the two storage accounts.
, You need to configure the required amount of endpoints for the apps.
Solution: You configure three endpoints per app.
A. Yes
B. No
Give this one a try later!
B. No
Each app needs a service endpoint in each Storage Account.
Reference: https://docs.microsoft.com/en-
us/azure/storage/common/storage-network-security
Your company has an Azure Active Directory (Azure AD) subscription.
You want to implement an Azure AD conditional access policy.
The policy must be configured to require members of the Global Administrators
group to use Multi-Factor Authentication and an Azure AD-joined device when they
connect to Azure AD from untrusted locations.
Solution: You access the Azure portal to alter the grant control of the Azure AD
conditional access policy.
Does the solution meet the goal?
A. Yes
B. No
Give this one a try later!
have created an application that runs on SRV01. The application calls a service on
SRV02 by IP address.
You plan to migrate the application on Azure virtual machines (VMs). You have
configured two VMs on a single subnet in an Azure virtual network.
You need to configure the two VMs with static internal IP addresses.
What should you do?
A. Run the New-AzureRMVMConfig PowerShell cmdlet.
B. Run the Set-AzureSubnet PowerShell cmdlet.
C. Modify the VM properties in the Azure Management Portal.
D. Modify the IP properties in Windows Network and Sharing Center.
E. Run the Set-AzureStaticVNetIP PowerShell cmdlet.
Give this one a try later!
, E. Run the Set-AzureStaticVNetIP PowerShell cmdlet.
Explanation: Specify a static internal IP for a previously created VM If you
want to set a static IP address for a VM that you previously created, you can
do so by using the following cmdlets. If you already set an IP address for
the VM and you want to change it to a different IP address, you'll need to
remove the existing static IP address before running these cmdlets. See the
instructions below to remove a static IP.
For this procedure, you'll use the Update-AzureVM cmdlet. The Update-
AzureVM cmdlet restarts the VM as part of the update process. The DIP
that you specify will be assigned after the VM restarts. In this example, we
set the IP address for VM2, which is located in cloud service StaticDemo.
Get-AzureVM -ServiceName StaticDemo -Name VM2 | Set-
AzureStaticVNetIP -IPAddress 192.168.4.7 | Update-AzureVM
Reference: https://docs.microsoft.com/en-
us/powershell/module/servicemanagement/azure/setazurestaticvnetip?
view=azuresmps-4.0.0
Your company's Azure subscription includes Azure virtual machines (VMs) that run
Windows Server 2016.
One of the VMs is backed up every day using Azure Backup Instant Restore.
When the VM becomes infected with data encrypting ransomware, you decide to
recover the VM's files.
Which of the following is TRUE in this scenario?
A. You can only recover the files to the infected VM.
B. You can recover the files to any VM within the company's subscription.
C. You can only recover the files to a new VM.
D. You will not be able to recover the files.
Give this one a try later!
, A. You can only recover the files to the infected VM.
Your company has virtual machines (VMs) hosted in Microsoft Azure. The VMs are
located in a single Azure virtual network named VNet1.
The company has users that work remotely. The remote workers require access to the
VMs on VNet1.
You need to provide access for the remote workers.
What should you do?
A. Configure a Site-to-Site (S2S) VPN.
B. Configure a VNet-toVNet VPN.
C. Configure a Point-to-Site (P2S) VPN.
D. Configure DirectAccess on a Windows Server 2012 server VM.
E. Configure a Multi-Site VPN
Give this one a try later!
C. Configure a Point-to-Site (P2S) VPN.
Explanation: A Point-to-Site (P2S) VPN gateway connection lets you create
a secure connection to your virtual network from an individual client
computer.
Reference: https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-
gateway-about-vpngateways
Your company has an Azure subscription with two storage accounts. Each of these
storage accounts includes a queue service, a table service, and a blob service.
You have created two apps that must be configured to store various types of data to
all the storage services on the two storage accounts.
, You need to configure the required amount of endpoints for the apps.
Solution: You configure three endpoints per app.
A. Yes
B. No
Give this one a try later!
B. No
Each app needs a service endpoint in each Storage Account.
Reference: https://docs.microsoft.com/en-
us/azure/storage/common/storage-network-security
Your company has an Azure Active Directory (Azure AD) subscription.
You want to implement an Azure AD conditional access policy.
The policy must be configured to require members of the Global Administrators
group to use Multi-Factor Authentication and an Azure AD-joined device when they
connect to Azure AD from untrusted locations.
Solution: You access the Azure portal to alter the grant control of the Azure AD
conditional access policy.
Does the solution meet the goal?
A. Yes
B. No
Give this one a try later!
