100% Free Azure Solutions Architect Expert AZ-303 Dumps PDF Demo Cert Guide Cover
PDF Exam Material 2022 Realistic AZ-303 Dumps Questions
Useful Books for AZ-303
Although training sessions are of great help, additional study materials will never hurt. You can supplement the above courses with the books from Amazon such as “Exam Ref AZ-303 Microsoft Azure Architect Technologies” by Mike Pfeiffer and “Microsoft Azure Architect Technologies and Design Complete Study Guide: Exams AZ-303 and AZ-304” by Benjamin Perkins. These resources won’t disappoint you at all. The first one provides detailed information about all the domains complemented with what-if scenarios to prepare you for solving real-world problems. On the other hand, you might prefer the second guide as it contains information on both required exams and includes sample questions to help you assess yourself beforehand.
Introduction to AZ-303: Microsoft Azure Architect Technologies Exam
Candidates for AZ-303 Exam are seeking to prove fundamental knowledge and skills in the Azure Architect Technologies domain. Before taking this exam, aspirants ought to have a solid fundamental information of the concepts shared in the preparation guide as well as basic understanding of Azure administration, Azure development, and DevOps would give an added edge.
It is suggested that professionals accustomed to the ideas and also the technologies represented here by taking relevant training courses. Candidates are expected to have some hands-on experience in monitoring security, performance, and monitoring performance capacity, Implement virtual networking.
After passing this exam, candidates get a certificate from Microsoft that helps them to demonstrate their proficiency to their clients and employers.
This exam is replaced with previous exam named as Microsoft Azure Architect Technologies Exam AZ-300.Microsoft Azure Architect Technologies Exam AZ-300 will be retired from 30.09.2020. To earn the Azure solutions architect expert certifications you can mix the old and new exams.
Az-300 and Az-303 = Azure solutions architect expert
NEW QUESTION 106
You have an Azure subscription that contains the resources shown in the following table.
A certificate named Certificate! is stored in Vault!
You need to grant VM1 and VM2 access to Certificate1 by using the same security principal.
What should you do?
- A. Create an Azure Active Directory (Azure AD) user. Create an access policy for Vaultl. Assign the access policy to the user. Configure a user-assigned managed identity forVMl andVM2.
- B. Create a managed identity. Assign the Key Vault Reader role-based access control (RBAC) role for Vault 1 to the managed identity. Configure a system-assigned managed identity for VM1 and VM2.
- C. Create an Azure Active Directory (Azure AD) user. Assign the Key Vault Reader role-based access control (RBAC) role for Vaultl to the user. Configure a user-assigned managed identity for VM1 and VM2.
- D. Create a managed identity. Add the Vaultl access policy to the managed identity. Configure a user-assigned managed identity for VM1 and VM2.
Answer: C
NEW QUESTION 107
Your network contains an on-premises Active Directory domain named contoso.com. The domain contains the users shown in the following table.
You plan to install Azure AD Connect and enable SSO.
You need to specify which user to use to enable SSO. The solution must use the principle of least privilege.
Which user should you specify?
- A. User3
- B. User4
- C. User1
- D. User2
Answer: A
NEW QUESTION 108
HOTSPOT
Your company hosts multiple website by using Azure virtual machine scale sets (VMSS) that run Internet Information Server (IIS).
All network communications must be secured by using end to end Secure Socket Layer (SSL) encryption. User sessions must be routed to the same server by using cookie-based session affinity.
The image shown depicts the network traffic flow for the web sites to the VMSS.
Use the drop-down menus to select the answer choice that answers each question.
NOTE: Each correct selection is worth one point.
Hot Area:
Answer:
Explanation:
Section: [none]
Explanation:
Box 1: Public
The following example shows site traffic coming from both ports 8080 and 8081 and being directed to the same backend pools.
Box 2: Application Gateway
You can create an application gateway with URL path-based redirection using Azure PowerShell.
Box 3: Path-based redirection and Websockets
References:
https://docs.microsoft.com/bs-latn-ba/azure//application-gateway/tutorial-url-redirect-powershell
NEW QUESTION 109
You have an Azure subscription that contains a resource group named RG1.
You have a group named Group1 that is assigned the Contributor role for RG1.
You need to enhance security for the virtual machines in RG1 to meet the following requirements:
* Prevent Group1 from assigning external IP addresses to the virtual machines.
* Ensure that Group1 can establish an RDP connection to the virtual machines through a shared external IP address.
What should you use to meet each requirement? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Box 1: Azure Policy
There is a built-in policy in the Azure Policy service that allows you to block public IPs on all NICs of a VM.
Note: Azure Policy is a powerful tool in your Azure toolbox. It allows you to enforce specific governance principals you want to see implemented in your environment. Some key examples of what Azure Policy allows you to do is:
Automatically tag resources
Block VMs from having a public IP
Enforce specific regions
Enforce VM size
Box 2: Azure Bastion
Azure Bastion is a fully managed PaaS service that provides secure and seamless RDP and SSH access to your virtual machines directly through the Azure Portal.
Azure Bastion is provisioned directly in your Virtual Network (VNet) and supports all VMs in your Virtual Network (VNet) using SSL without any exposure through public IP addresses.
Reference:
https://blog.nillsf.com/index.php/2019/11/02/using-azure-policy-to-deny-public-ips-on-specific-vnets/
https://azure.microsoft.com/en-us/services/azure-bastion/
NEW QUESTION 110
You have virtual machines (VMs) that run a mission-critical application.
You need to ensure that the VMs never experience down time.
What should you recommend? To answer, drag the appropriate solutions to the correct scenarios. Each solution may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Box 1: Scale set
A virtual machine scale set allows you to deploy and manage a set of identical, auto scaling virtual machines.
Box 2: Availability Set
An Availability Set is a logical grouping capability for isolating VM resources from each other when they're deployed. Azure makes sure that the VMs you place within an Availability Set run across multiple physical servers, compute racks, storage units, and network switches. If a hardware or software failure happens, only a subset of your VMs are impacted and your overall solution stays operational. Availability Sets are essential for building reliable cloud solutions.
Box 3: Fault domain
A fault domain is a logical group of underlying hardware that share a common power source and network switch, similar to a rack within an on-premises datacenter. As you create VMs within an availability set, the Azure platform automatically distributes your VMs across these fault domains. This approach limits the impact of potential physical hardware failures, network outages, or power interruptions.
References:
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/tutorial-create-vmss
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/tutorial-availability-sets
NEW QUESTION 111
You have an on-premises virtual machine named VM1 configured as shown in the following exhibit.
VM is started.
You need to create a new virtual machine image in Azure from VM1.
Which three actions should you perform before you create the new image? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
- A. Convert the disk type to VHD
- B. Reduce the amount of memory to 16 GB
- C. Generalize VM1
- D. Run Add-AzureRmVhd and specify a file share as the destination
- E. Remove the Backup (volume shadow copy) integration service
- F. Run Add-AzureRmVhd and specify a blob service container as the destination
Answer: A,C,F
NEW QUESTION 112
From Azure Cosmos DB, you create the containers shown in the following table.
You add the following item to Container1.
You plan to add items to Azure Cosmos DB as shown in the following table.
You need to identify which items can be added successfully to Container1 and Container2.
What should you identify for each container? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
NEW QUESTION 113
You have an Azure subscription named Subscription1. Subscription1 contains the resources in the following table:
VNet1 is in RG1. VNet2 is in RG2. There is no connectivity between VNet1 and VNet2. An administrator named Admin1 creates an Azure virtual machine VM1 in RG1. VM1 uses a disk named Disk1 and connects to VNet1. Admin1 then installs a custom application in VM1.
You need to move the custom application to VNet2. The solution must minimize administrative effort.
Which two actions should you perform? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://blogs.technet.microsoft.com/canitpro/2014/06/16/step-by-step-move-a-vm-to-a-different-vnet-on-azure/
https://4sysops.com/archives/move-an-azure-vm-to-another-virtual-network-vnet/#migrate-an-azure-vm-between-vnets
NEW QUESTION 114
HOTSPOT
You have an Azure subscription named Subscription1 that contains a virtual network named VNet1.
You add the users in the following table.
Which user can perform each configuration? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Answer:
Explanation:
Explanation:
Box 1: User1 only.
User1: The Owner Role lets you manage everything, including access to resources.
Not User3: The Network Contributor role lets you manage networks, but not access to them.
Box 2: User1 and User2 only
The Security Admin role: In Security Center only: Can view security policies, view security states, edit security policies, view alerts and recommendations, dismiss alerts and recommendations.
Reference:
https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles
NEW QUESTION 115
You have an Azure subscription that contains an Azure Log Analytics workspace. You have a resource group that contains 100 virtual machines. The virtual machines run Linux. You need to collect events from the virtual machines to the Log Analytics workspace. Which type of data source should you configure in the workspace?
- A. custom fields
https://docs.microsoft.com/en-us/azure/azure-monitor/learn/quick-collect-azurevm - B. Syslog
- C. Linux performance counters
Answer: B
Explanation:
Syslog is an event logging protocol that is common to Linux. Applications will send messages that may be stored on the local machine or delivered to a Syslog collector. When the Log Analytics agent for Linux is installed, it configures the local Syslog daemon to forward messages to the agent. The agent then sends the message to Azure Monitor where a corresponding record is created.
Reference:
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/data-sources-custom-logs
NEW QUESTION 116
You manage an Active Directory domain named contoso.local.
You install Azure AD Connect and connect to an Azure Active Directory (Azure AD) tenant named contoso.com without syncing any accounts.
You need to ensure that only users who have a UPN suffix of contoso.com in the contoso.local domain sync to Azure AD.
What should you do?
- A. Use the Synchronization Service Manager to modify the Metaverse Designer tab.
- B. Use Synchronization Service Manager to modify the Active Directory Domain Services (AD DS) Connector.
- C. Use Azure AD Connect to customize the synchronization options.
- D. Use the Synchronization Rules Editor to create a synchronization rule.
Answer: D
Explanation:
Filtering what objects are synced to Azure AD is a common request and there are many instances where filtering by OU just doesn't cut it. One option is to filter users by their UPN suffix so that only users with the public FQDN as their UPN suffix are synced to Azure AD (e.g., [email protected] would be synced while [email protected] would not).
Filtering can be configured using either the GUI or PowerShell.
Through GUI:
Using The Synchronization Rules Editor
1. Open the Synchronization Rules Editor on the server where Azure AD Connect is installed.
2. Click the Add new rule button on the View and manage your synchronization rules window.
3. Fill out the appropriate fields on the Description tab and click Next >.
4. On the Scoping filter tab, click Add group, then Add clause, add a userPrincipalName attribute filter, and click Next >.
Attribute: userPrincipalName
Operator: ENDSWITH
Value: Your internal UPN suffix prefixed with @ (e.g., @internal.acme.com). Users with this UPN suffix will NOT be synced with Office 365.
Reference:
https://www.sidekicktech.com/blog/field-notes/2019/upn-suffix-filtering-ad-connect/
NEW QUESTION 117
You have 10 Azure virtual machines on a subnet named Subnet1. Subnet1 is on a virtual network named VNet1.
You plan to deploy a public Azure Standard Load Balancer named LB1 to the same Azure region as the 10 virtual machines.
You need to ensure that traffic from all the virtual machines to the internet flows through LB1. The solution must prevent the virtual machines from being accessible on the internet.
Which three actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
- A. Add an inbound rule to LB1.
- B. Associate a user-defined route to Subnet1.
- C. Associate a network security group (NSG) to Subnet1.
- D. Add an outbound rule to LB1.
- E. Add health probes to LB1.
- F. Add the network interfaces of the virtual machines to the backend pool of LB1.
Answer: D,E,F
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/load-balancer/tutorial-load-balancer-standard-manage-portal2
NEW QUESTION 118
You need to recommend a solution to provide KV1 with access to the on-premises network of Litware. The solution must meet the security requirements.
What should you include in the recommendation? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/key-vault/general/private-link-service?tabs=portal
NEW QUESTION 119
SIMULATION
Click to expand each objective. To connect to the Azure portal, type https://portal.azure.com in the browser address bar.
When you are finished performing all the tasks, click the 'Next' button.
Note that you cannot return to the lab once you click the 'Next' button. Scoring occur in the background while you complete the rest of the exam.
Overview
The following section of the exam is a lab. In this section, you will perform a set of tasks in a live environment.
While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.
Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn't matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.
Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.
Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.
To start the lab
You may start the lab by clicking the Next button.
You need to deploy an Azure load balancer named ib1016 to your Azure subscription. The solution must meet the following requirements:
* Support the load balancing of IP traffic from the Internet to Azure virtual machines connected to VNET1016
\subnet0.
* Provide a Service Level Agreement (SLA) of 99,99 percent availability for the Azure virtual machines.
* Minimize Azure-related costs.
What should you do from the Azure portal?
To complete this task, you do NOT need to wait for the deployment to complete. Once the deployment starts in Azure, you can move to the next task.
Answer:
Explanation:
See explanation below.
Section: [none]
Explanation:
Step 1:
On the top left-hand side of the screen, click Create a resource > Networking > Load Balancer.
Step 2:
In the Create a load balancer page enter these values for the load balancer:
myLoadBalancer - for the name of the load balancer.
Internal - for the type of the load balancer.
Basic - for SKU version.
Microsoft guarantees that apps running in a customer subscription will be available 99.99% of the time.
VNET1016\subnet0 - for subnet that you choose from the list of existing subnets.
Step 3: Accept the default values for the other settings and click Create to create the load balancer.
NEW QUESTION 120
You have an Azure subscription named Subscription1 that contains a virtual network named VNet1. VNet1 is in a resource group named RG1.
Subscription1 has a user named User1. User1 has the following roles:
* Reader
* Security Admin
* Security Reader
You need to ensure that User1 can assign the Reader role for VNet1 to other users.
What should you do?
- A. Remove User1 from the Security Reader and Reader roles for Subscription1.
- B. Assign User1 the Network Contributor role for VNet1.
- C. Remove User1 from the Security Reader and Reader roles for Subscription1. Assign User1 the Contributor role for Subscription1.
- D. Assign User1 the Owner role for VNet1.
Answer: D
Explanation:
Section: [none]
NEW QUESTION 121
......
Updated Microsoft AZ-303 Dumps – PDF & Online Engine: https://www.itexamreview.com/AZ-303-exam-dumps.html
AZ-303.pdf - Questions Answers PDF Sample Questions Reliable: https://drive.google.com/open?id=1B4eN7viBkz1vso7xSQ9EQ5dk9BppPbQG
