AZ-103 practice test

1. Question 1 · 1

   Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure Active Directory (Azure AD) tenant named Adatum and an Azure Subscription named Subscription1. Adatum contains a group named Developers. Subscription1 contains a resource group named Dev. You need to provide the Developers group with the ability to create Azure logic apps in the Dev resource group. Solution: On Dev, you assign the Contributor role to the Developers group. Does this meet the goal?

   Choose one answer.

   • Yes
   • No

   Read explanation

   The Contributor role can manage all resources (and add resources) in a Resource Group.

2. Question 2 · 1

   HOTSPOT - You have an Azure Active Directory (Azure AD) tenant that contains three global administrators named Admin1, Admin2, and Admin3. The tenant is associated to an Azure subscription. Access control for the subscription is configured as shown in the Access control exhibit. (Click the Exhibit tab.) You sign in to the Azure portal as Admin1 and configure the tenant as shown in the Tenant exhibit. (Click the Exhibit tab.) For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:

   Choose an option for each prompt.

   

   

   

   Admin1 can add Admin2 as an owner of the subscription.

   • • Yes
   • • No

   Admin2 can add Admin1 as an owner of the subscription.

   • • Yes
   • • No

   Admin2 can create a resource group in the subscription.

   • • Yes
   • • No

3. Question 3 · 1

   You have an Azure policy as shown in the following exhibit. What is the effect of the policy?

   Choose one answer.

   

   • You are prevented from creating Azure SQL Servers in ContosoRG1 only.
   • You can create Azure SQL servers in ContosoRG1 only.
   • You can create Azure SQL servers in any resource group within Subscription1.
   • You are prevented from creating Azure SQL servers anywhere in Subscription1.

   Read explanation

   You are prevented from creating Azure SQL servers anywhere in Subscription 1 with the exception of ContosoRG1

4. Question 4 · 1

   You have an Azure subscription. Users access the resources in the subscription from either home or from customer sites. From home, users must establish a point-to-site VPN to access the Azure resources. The users on the customer sites access the Azure resources by using site-to-site VPNs. You have a line-of-business app named App1 that runs on several Azure virtual machine. The virtual machines run Windows Server 2016. You need to ensure that the connections to App1 are spread across all the virtual machines. What are two possible Azure services that you can use? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

   Choose one answer.

   • an Azure Content Delivery Network (CDN)
   • an Azure Application Gateway
   • Traffic Manager
   • an internal load balancer
   • a public load balancer

   Read explanation

   Line-of-business apps are custom apps that are used by internal staff members.

5. Question 5 · 1

   HOTSPOT - You have an Azure subscription that contains the resources in the following table. You install the Web Server server role (IIS) on VM1 and VM2, and then add VM1 and VM2 to LB1. LB1 is configured as shown in the LB1 exhibit. (Click the Exhibit tab.) Rule1 is configured as shown in the Rule1 exhibit. (Click the Exhibit tab.) For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:

   Choose an option for each prompt.

   

   

   

   VM1 is the same availability set as VM2.

   • • Yes
   • • No

   If Probe1.htm is present on VM1 and VM2, LB1 will balance TCP port 80 between VM1 and VM2.

   • • Yes
   • • No

   If you delete Rule1, LB1 will balance all the requests between VM1 and VM2 for all the ports.

   • • Yes
   • • No

   Read explanation

   Manage Azure subscriptions and resources

6. Question 6 · 1

   Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure subscription named Subscription1. Subscription1 contains a resource group named RG1. RG1 contains resources that were deployed by using templates. You need to view the date and time when the resources were created in RG1. Solution: From the Subscriptions blade, you select the subscription, and then click Programmatic deployment. Does this meet the goal?

   Choose one answer.

   • Yes
   • No

7. Question 7 · 1

   Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure subscription named Subscription1. Subscription1 contains a resource group named RG1. RG1 contains resources that were deployed by using templates. You need to view the date and time when the resources were created in RG1. Solution: From the Subscriptions blade, you select the subscription, and then click Resource providers. Does this meet the goal?

   Choose one answer.

   • Yes
   • No

8. Question 8 · 1

   Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure subscription named Subscription1. Subscription1 contains a resource group named RG1. RG1 contains resources that were deployed by using templates. You need to view the date and time when the resources were created in RG1. Solution: From the RG1 blade, you click Automation script. Does this meet the goal?

   Choose one answer.

   • Yes
   • No

9. Question 9 · 13

   You are planning the move of App1 to Azure. You create a network security group (NSG). You need to recommend a solution to provide users with access to App1. What should you do?

   Choose one answer.

   • Create an incoming security rule for port 443 from the Internet. Associate the NSG to the subnet that contains the web servers.
   • Create an outgoing security rule for port 443 from the Internet. Associate the NSG to all the subnets.
   • Create an incoming security rule for port 443 from the Internet. Associate the NSG to all the subnets.
   • Create an outgoing security rule for port 443 from the Internet. Associate the NSG to the subnet that contains the web servers.

   Read explanation

   As App1 is public-facing we need an incoming security rule, related to the access of the web servers. Scenario: You have a public-facing application named App1. App1 is comprised of the following three tiers: a SQL database, a web front end, and a processing middle tier. Each tier is comprised of five virtual machines. Users access the web front end by using HTTPS only.

10. Question 10 · 14

    HOTSPOT - You need to configure the Device settings to meet the technical requirements and the user requirements. Which two settings should you modify? To answer, select the appropriate settings in the answer area. Hot Area:

    Choose an option for each prompt.

    

    Users may join devices to Azure AD

    • • All
    • • Selected
    • • None

    Require Multi-Factor Auth to join devices

    • • Yes
    • • No

    Read explanation

    Box 1: Selected - Only selected users should be able to join devices Box 2: Yes - Require Multi-Factor Auth to join devices. From scenario: ✑ Ensure that only users who are part of a group named Pilot can join devices to Azure AD ✑ Ensure that when users join devices to Azure Active Directory (Azure AD), the users use a mobile phone to verify their identity.

11. Question 11 · 15

    HOTSPOT - You need to implement Role1. Which command should you run before you create Role1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

    Choose an option for each prompt.

    

    command

    • • Find-RoleCapability
    • • Get-AzureADDirectoryRole
    • • Get-AzureRmRoleAssignment
    • • Get-AzureRmRoleDefinition

    conversion

    • • ConvertFrom-Json
    • • ConvertFrom-String
    • • ConvertTo-Json
    • • ConvertTo-Xml

    Read explanation

    Manage identities

12. Question 12 · 16

    Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure subscription that contains the following resources: ✑ A virtual network that has a subnet named Subnet1 ✑ Two network security groups (NSGs) named NSG-VM1 and NSG-Subnet1 ✑ A virtual machine named VM1 that has the required Windows Server configurations to allow Remote Desktop connections NSG-Subnet1 has the default inbound security rules only. NSG-VM1 has the default inbound security rules and the following custom inbound security rule: ✑ Priority: 100 ✑ Source: Any ✑ Source port range: * ✑ Destination: * ✑ Destination port range: 3389 ✑ Protocol: UDP ✑ Action: Allow VM1 connects to Subnet1. NSG1-VM1 is associated to the network interface of VM1. NSG-Subnet1 is associated to Subnet1. You need to be able to establish Remote Desktop connections from the internet to VM1. Solution: You add an inbound security rule to NSG-Subnet1 that allows connections from the Internet source to the VirtualNetwork destination for port range 3389 and uses the UDP protocol. Does this meet the goal?

    Choose one answer.

    • Yes
    • No

13. Question 13 · 2

    HOTSPOT - You have an Azure subscription named Subscription1 that contains the resources shown in the following table. The status of VM1 is Running. You assign an Azure policy as shown in the exhibit. (Click the Exhibit tab.) You assign the policy by using the following parameters: For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:

    Choose an option for each prompt.

    

    

    

    

    An administrator can move VNET1 to RG2.

    • • Yes
    • • No

    The state of VM1 changed to deallocated.

    • • Yes
    • • No

    An administrator can modify the address space of VNET2.

    • • Yes
    • • No

14. Question 14 · 3

    HOTSPOT - You have an Azure subscription named Subscription1. Subscription1 contains two Azure virtual machines named VM1 and VM2. VM1 and VM2 run Windows Server 2016. VM1 is backed up daily by Azure Backup without using the Azure Backup agent. VM1 is affected by ransomware that encrypts data. You need to restore the latest backup of VM1. To which location can you restore the backup? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

    Choose an option for each prompt.

    

    You can perform a file recovery of VM1 to:

    • • VM1 only
    • • VM2 only
    • • VM1 and VM2 only
    • • A new Azure virtual machine only
    • • Any Windows computer that has Internet connectivity

    You can restore VM1 to:

    • • VM1 only
    • • VM2 only
    • • VM1 and VM2 only
    • • A new Azure virtual machine only
    • • Any Windows computer that has Internet connectivity

15. Question 15 · 4

    HOTSPOT - You have an Azure subscription named Subscription1 that contains a resource group named RG1. In RG1, you create an internal load balancer named LB1 and a public load balancer named LB2. You need to ensure that an administrator named Admin1 can manage LB1 and LB2. The solution must follow the principle of least privilege. Which role should you assign to Admin1 for each task? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

    Choose an option for each prompt.

    

    To add a backend pool to LB1:

    • • Contributor on LB1
    • • Network Contributor on LB1
    • • Network Contributor on RG1
    • • Owner on LB1

    To add a health probe to LB2:

    • • Contributor on LB2
    • • Network Contributor on LB2
    • • Network Contributor on RG1
    • • Owner on LB2

Paid access to all 26 questions

Each purchase applies to this certification. Prices are one-time payments, not monthly subscriptions.