Microsoft Azure Architect Technologies Updated AZ-303 Dumps

1. Topic 1, Contoso, Ltd



Overview

Contoso, Ltd. is a manufacturing company that has offices worldwide. Contoso works with partner organizations to bring products to market.



Contoso products are manufactured by using blueprint files that the company authors and maintains.



Existing Environment

Currently, Contoso uses multiple types of servers for business operations, including the following:

- File servers

- Domain controllers

- Microsoft SQL Server servers



Your network contains an Active Directory forest named contoso.com. All servers and client computers are joined to Active Directory.

You have a public-facing application named App1.



App1 is comprised of the following three tiers:

- A SQL database

- A web front end

- A processing middle tier

Each tier is comprised of five virtual machines. Users access the web front end by using HTTPS only.



Requirments

Planned Changes

Contoso plans to implement the following changes to the infrastructure:

- Move all the tiers of App1 to Azure.

- Move the existing product blueprint files to Azure Blob storage.

- Create a hybrid directory to support an upcoming Microsoft Office 365 migration project.



Technical Requirements

Contoso must meet the following technical requirements:

- Move all the virtual machines for App1 to Azure.

- Minimize the number of open ports between the App1 tiers.

- Ensure that all the virtual machines for App1 are protected by backups.

- Copy the blueprint files to Azure over the Internet.

- Ensure that the blueprint files are stored in the archive storage tier.

- Ensure that partner access to the blueprint files is secured and temporary.

- Prevent user passwords or hashes of passwords from being stored in Azure.

- Use unmanaged standard storage for the hard disks of the virtual machines.

- Ensure that when users join devices to Azure Active Directory (Azure AD), the users use a mobile phone to verify their identity.

Minimize administrative effort whenever possible.



User Requirements

Contoso identifies the following requirements for users:

Ensure that only users who are part of a group named Pilot can join devices to Azure AD.

Designate a new user named Admin1 as the service administrator of the Azure subscription.

Ensure that a new user named User3 can create network objects for the Azure subscription.



You need to meet the user requirement for Admin1.

What should you do?

2. You need to move the blueprint files to Azure.

What should you do?

3. You need to implement a backup solution for App1 after the application is moved.

What should you create first?

4. HOTSPOT

You need to recommend a solution for App1. The solution must meet the technical requirements.

What should you include in the recommendation? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

5. HOTSPOT

You need to configure the Device settings to meet the technical requirements and the user requirements.

Which two settings should you modify? To answer, select the appropriate settings in the answer area.

6. You need to recommend an identify solution that meets the technical requirements.

What should you recommend?

7. You are planning the move of App1 to Azure.

You create a network security group (NSG).

You need to recommend a solution to provide users with access to App1.

What should you recommend?

8. HOTSPOT

You need to identify the storage requirements for Contoso.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

9. Topic 2, Misc. Questions



Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your company is deploying an on-premises application named Appl. Users will access App1 by using a URL of https://app1.contoso.com. You register App1 in Azure Active Directory (Azure AD) and publish Appl by using the Azure AD Application Proxy. You need to ensure that Appl appears in the My Apps portal for all the users.

Solution: You configure the delegated permission for App1 in Azure AD .

Does this meet the goal?

10. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your company is deploying an on-premises application named Appl. Users will access App1 by using a URL of https://app1.contoso.com. You register App1 in Azure Active Directory (Azure AD) and publish Appl by using the Azure AD Application Proxy. You need to ensure that Appl appears in the My Apps portal for all the users.

Solution: You create an offer for App1 and publish the offer to Azure Marketplace.

11. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your company is deploying an on-premises application named Appl. Users will access App1 by using a URL of https://app1.contoso.com. You register App1 in Azure Active Directory (Azure AD) and publish Appl by using the Azure AD Application Proxy. You need to ensure that Appl appears in the My Apps portal for all the users.

Solution: You create a conditional access policy for App1.

12. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it As a result, these questions will not appear in the review screen.

You have an Azure Active Directory {Azure AD) tenant named contoso.com.

A user named Admin1 attempts to create an access review from the Azure Active Directory admin center and discovers that the Access reviews settings are unavailable. Admin 1 discovers that all the other Identity Governance settings are available.

Admin1 is assigned The User administrator. Compliance administrator, and Security administrator roles.

You need to ensure that Admin1 can create access reviews in contoso.com. .

Solution: You assign the Global administrator role to Admin1.

Does this meet the goal?

13. Note: This question is part of series of questions that present the same scenario. Each

question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure Active Directory (Azure AD) tenant named contoso.com.

A user named Admin1 attempts to create an access review from the Azure Active Directory admin center and discovers that the Access reviews settings are unavailable. Admin1 discovers that all the other Identity Governance settings are available.

Admin1 is assigned the User administrator, Compliance administrator, and Security administrator roles.

You need to ensure that the Admin1 can create access reviews in contoso.com.

Solution: You purchase an Azure Directory Premium P2 license for contoso.com.

Does this meet the goal?

14. Note: This question is part of series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure Active Directory (Azure AD) tenant named contoso.com.

A user named Admin1 attempts to create an access review from the Azure Active Directory admin center and discovers that the Access reviews settings are unavailable. Admin1 discovers that all the other Identity Governance settings are available.

Admin1 is assigned the User administrator, Compliance administrator, and Security administrator roles.

You need to ensure that Admin1 can create access reviews in contoso.com.

Solution: You create an access package.

Does this meet the goal?

15. Note: This question is part of series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure Active Directory (Azure AD) tenant named contoso.com.

A user named Admin1 attempts to create an access review from the Azure Active Directory admin center and discovers that the Access reviews settings are unavailable. Admin1 discovers that all the other Identity Governance settings are available.

Admin1 is assigned the User administrator, Compliance administrator, and Security administrator roles.

You need to ensure that Admin1 can create access reviews in contoso.com.

Solution: You assign the Service administrator role to Admin1.

Does this meet the goal?

16. You have an Azure SQL database named Db1 that runs on an Azure SQL server named SQLserver1.

You need to ensure that you can use the query editor on the Azure portal to query Db1.

What should you do?

17. HOTSPOT

You have an Azure subscription that contains the Azure SQL servers shown in the following table.





The subscription contains the elastic pool shown in the following table.





The subscription contains the Azure SQL databases shown in the following table.





For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

18. HOTSPOT

You have the Azure SQL Database servers shown in the following table.





You have the Azure SQL databases shown in the following table.





You create a failover group named failover1 that has the following settings:

• Primary server: sqlserver1

• Secondary server: sqlserver2

• Read/Write failover policy: Automatic

• Read/Write grace period (hours): 1 hour

19. Your company plans to develop an application that will use a NoSQL database. The database will be used to store transactions and customer information by using JSON documents.

Which two Azure Cosmos DB APIs can developers use for the application? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

20. You have two Azure SQL Database managed instances in different Azure regions.

You plan to configure the managed instances in an instance failover group.

What should you configure before you can add the managed instances to the instance failover group?

21. You have an Azure Cosmos DB account named Account1. Account1 includes a database named DB1 that contains a container named Container 1. The partition key tor Container1 is set to /city.

You plan to change the partition key for Container1

What should you do first?

22. HOTSPOT

From Azure Cosmos DB, you create the containers shown in the following table.





You add the following item to Container1.





You plan to add items to Azure Cosmos DB as shown in the following table.





You need to identify which items can be added successfully to Container1 and Container2.

What should you identify for each container? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

23. You have the virtual machines shown in the following table.





You deploy an Azure bastion named Bastion1 to VNET1.

To which virtual machines can you connect by using Bastion1?

24. You have an Azure subscription.

You create a custom role in Azure by using the following Azure Resource Manager template.





You assign the role to a user named User1.

Which action can User1 perform?

25. HOTSPOT

You have a hierarchy of management groups and Azure subscriptions as shown in the following table.





You create the Azure resources shown in the following table.





You assign roles to users as shown in the following table.





For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point

26. You have Azure virtual machines that have Update Management enabled.

The virtual machines are configured as shown in the following table.





You need to ensure that all critical and security updates are applied to each virtual machine every month.

What is the minimum number of update deployments you should create?

27. You have an Azure Active Directory (Azure AD) tenant linked to an Azure subscription. The tenant contains a group named Admins.

You need to prevent users, except for the members of Admins, from using the Azure portal and Azure PowerShell to access the subscription.

What should you do?

28. HOTSPOT

You have an Azure subscription that contains a resource group named RG1.

You have a group named Group1 that is assigned the Contributor role for RG1.

You need to enhance security for the virtual machines in RG1 to meet the following requirements:

• Prevent Group1 from assigning external IP addresses to the virtual machines.

• Ensure that Group1 can establish an RDP connection to the virtual machines through a shared external IP address.

What should you use to meet each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

29. You have Azure virtual machines deployed to three Azure regions. Each region contains a single virtual network that has four virtual machines on the same subnet. Each virtual machine runs an application named App1. App1 is accessible by using HTTPS. Currently, the virtual machines are inaccessible from the internet.

You need to use Azure Front Door to load balance requests for App1 across all the virtual machines.

Which additional Azure service should you provision?

30. You create the Azure resources shown in the following table.





You attempt to add a role assignment to a resource group as shown in the following exhibit.





What should you do to ensure that you can assign VM2 the Reader role for the resource group?

31. You have SQL Server on an Azure virtual machine named SQL1.

You need to automate the backup of the databases on SQL1 by using Automated Backup v2 for the virtual machines.

The backups must meet the following requirements:

• Meet a recovery point objective (RPO) of 15 minutes.

• Retain the backups for 30 days.

• Encrypt the backups at rest.

What should you provision as part of the backup solution?

32. You have an Azure Container Registry and an Azure container instance.

You pull an image from the registry, and then update the local copy of the image.

You need to ensure that the updated image can be deployed to the container instance. The solution must ensure that you can deploy the updated image or the previous version of the image.

What should you do?

33. HOTSPOT

You have an Azure logic app named App1 and an Azure Service Bus queue named Queue1.

You need to ensure that App1 can read messages from Queue1. App1 must authenticate by using Azure Active Directory (Azure AD).

What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

34. You have an Azure Kubernetes Service (AKS) cluster named Clus1 in a resource group named RG1.

An administrator plans to manage Clus1 from an Azure AD-joined device.

You need to ensure that the administrator can deploy the YAML application manifest file for a container application.

You install the Azure CLI on the device.

Which command should you run next?

35. You create a container image named Image1 on a developer workstation.

You plan to create an Azure Web App for Containers named WebAppContainer that will use Image1.

You need to upload Image1 to Azure. The solution must ensure that WebAppContainer can use Image1.

To which storage type should you upload Image1?

36. You have an Azure Service Bus and two clients named Client1 and Client2.

You create a Service Bus queue named Queue1 as shown in the exhibit. (Click the Exhibit tab.)





Client1 sends messages to Queue1 as shown in the following table.





Client2 reads the messages from Queue1 at 12:01:05.

How will the messages be presented to Client2?

37. You have an on-premises virtual machine named VM1 configured as shown in the following exhibit.





VM is started.

You need to create a new virtual machine image in Azure from VM1.

Which three actions should you perform before you create the new image? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

38. HOTSPOT

You have an Azure subscription that contains the resource groups shown in the following table.





RG1 contains the virtual machines shown in the following table.





RG2 contains the virtual machines shown in the following table.





All the virtual machines are configured to use premium disks and are accessible from the Internet.

VM1 and VM2 are in an available set named AVSET1. VM3 and VM4 are in the same availability zone and are in an availability set named AVSET2. VM5 and VM6 are in different availability zones.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

39. HOTSPOT

Your network contains an on-premises Active Directory domain named contoso.com that contains a user named User1. The domain syncs to Azure Active Directory (Azure AD).

You have the Windows 10 devices shown in the following table.





The User Sign-In settings are configured as shown in the following exhibit.









For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point

40. You have an Azure subscription named Subscription1 that contains an Azure virtual network named VNet1. VNet1 connects to your on-premises network by using Azure ExpressRoute.

You need to connect VNet1 to the on-premises network by using a site-to-site VPN. The solution must minimize cost.

Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

41. You plan to create an Azure Storage account named storage! that will store blobs and be accessed by Azure Databricks.

You need to ensure that you can set permissions for individual blobs by using Azure Active Directory (Azure AD) authentication.

Which Advanced setting should you enable for storage1?

42. Your network contains an on-premises Active Directory domain named contoso.com.

The domain contains the users shown in the following table.





You plan to install Azure AD Connect and enable SSO.

You need to specify which user to use to enable SSO. The solution must use the principle of least privilege.

Which user should you specify?

43. DRAG DROP

You have an Azure subscription that contains the resources shown in the following table.





In RG2, you need to create a new virtual machine named VM2 that will connect to VNET1. VM2 will use a network interface named VM2_Interface.

In which region should you create VM2 and VM2_Interface? To answer, drag the appropriate regions to the correct targets. Each region may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

44. HOTSPOT

You create a virtual machine scale set named Scale1.

Scale1 is configured as shown in the following exhibit.

The subscription contains the Azure SQL databases shown in the following table.





Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

45. You have an Azure subscription named Subscription1 that is used by several departments at your company.

Subscription1 contains the resources in the following table.





Another administrator deploys a virtual machine named VM1 and an Azure Storage account named Storage2 by using a single Azure Resource Manager template.

You need to view the template used for the deployment.

From which blade can you view the template that was used for the deployment?

46. A company plans to use third-party application software to perform complex data analysis processes. The software will use up to 500 identical virtual machines (VMs) based on an Azure Marketplace VM image.

You need to design the infrastructure for the third-party application server.

The solution must meet the following requirements:

- The number of VMs that are running at any given point in time must change when the user workload changes.

- When a new version of the application is available in Azure Marketplace it must be deployed without causing application downtime.

- Use VM scale sets.

- Minimize the need for ongoing maintenance.

Which two technologies should you recommend? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

47. HOTSPOT

You have Azure Storage accounts as shown in the following exhibit.





Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

48. DRAG DROP

You have virtual machines (VMs) that run a mission-critical application.

You need to ensure that the VMs never experience down time.

What should you recommend? To answer, drag the appropriate solutions to the correct scenarios. Each solution may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

49. You have an Azure subscription that contains the resources shown in the following table.





Subnet1 is on VNET1. VM1 connects to Subnet1.

You plan to create a virtual network gateway on VNET1.

You need to prepare the environment for the planned virtual network gateway.

What are two ways to achieve this goal? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

50. Your company has an office in Seattle.

You have an Azure subscription that contains a virtual network named VNET1.

You create a site-to-site VPN between the Seattle office and VNET1.

VNET1 contains the subnets shown in the following table.





You need to redirect all Internet-bound traffic from Subnet1 to the Seattle office.

What should you create?