Microsoft AZ-301 Braindumps 2021

NEW QUESTION 1
You need to recommend a solution for implementing the back-end tier of the payment processing system in Azure.
What should you include in the recommendation?

• A. an Azure SQL Database managed instance
• B. a SQL Server database on an Azure virtual machine
• C. an Azure SQL Database single database
• D. an Azure SQL Database elastic pool

Answer: C

NEW QUESTION 2
You have an on-premises network that uses on IP address space of 172.16.0.0/16 You plan to deploy 25 virtual machines to a new azure subscription.
You identity the following technical requirements.
All Azure virtual machines must be placed on the same subnet subnet1.
All the Azure virtual machines must be able to communicate with all on premises severs.
The servers must be able to communicate between the on-premises network and Azure by using a site to site VPN.
You need to recommend a subnet design that meets the technical requirements.
What should you include in the recommendation? To answer, drag the appropriate network addresses to the correct subnet. Each network address may be used once, more than once or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

NEW QUESTION 3
You have the network topology shown in the following exhibit.

You have a user-defined route that has a default route of 0.0.0.0/0 and the next hop set to the network virtual appliance.
You configure the Azure Storage account to use virtual network service endpoints.
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Answer:

Explanation: References:
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-udr-overview

NEW QUESTION 4
You need to recommend a solution for the collection of security logs the middle tier of the payment processing system.
What should you include in the recommendation?

• A. Azure Notification Hubs
• B. the Azure Diagnostics agent
• C. Azure Event Hubs
• D. the Azure Log Analytics agent

Answer: D

Explanation: References:
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/diagnostics-extension-overview

NEW QUESTION 5
You have five .NET Core applications that run on 10 Azure virtual machines in the same subscription.
You need to recommend a solution to ensure that the applications can authenticate by using the same Azure Active Directory (Azure AD) identity. The solution must meet the following requirements:
Ensure that the applications can authenticate only when running on the 10 virtual machines.
Minimize administrative effort.
What should you include in the recommendation? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Answer:

Explanation:

NEW QUESTION 6
The accounting department at your company migrates to new financial accounting software. The accounting department must keep file-based database backups for years for compliances purposes. It is unlikely that the backup will be used to recover data.
You need to more the backups to Azure. The solution must minimize costs. Where should store the backups?

• A. Azure SQL Database
• B. a Recovery Services vault
• C. Azure Blob storage that uses the archive tier
• D. Azure storage that uses the Cool tier

Answer: C

NEW QUESTION 7
You are designing an access policy for the sales department at your company.
Occasionally, the developers at the company must stop, start, and restart Azure virtual machines. The development team changes often.
You need to recommend a solution to provide the developers with the required access to the virtual machines. The solution must meet the following requirements:
Provide permissions only when needed.
Use the principle of least privilege.
Minimize costs.
What should you include in the recommendation? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Answer:

Explanation:

NEW QUESTION 8
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions with not appear in the review screen.
You need to deploy resources to host a stateless web app in an Azure subscription The solution must meet the following requirements:
• Provide access to the full .NET framework.
• Provide redundancy it an Azure region fails.
• Grant administrators access to the operating system to install custom application dependencies. Solution: You deploy an Azure virtual machine to two Azure regions, and you create a Traffic Manager
profile.
Does this meet the goal?

• A. Yes
• B. No

Answer: A

NEW QUESTION 9
You deploy several Azure SQL Database instances.
You plan to configure the Diagnostics settings on the databases as shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

Answer:

Explanation: In the exhibit, the SQLInsights data is configured to be stored in Azure Log Analytics for 90 days. However, the question is asking for the “maximum” amount of time that the data can be stored which is 730 days.

NEW QUESTION 10
You have 100 Standard F2vs-v2 Azure virtual machines. Each virtual machine has two network adapter. You need to increase the network performance of the workloads running an the virtual machine The solution must meet the following requirements.
*The CPU-to-memory ratio must remain the same.
*The solution must minimize costs. What should you do?

• A. Enable SRIOV
• B. Enable ROMA over InfiniBand
• C. Install an additional network adapter.
• D. Configure NIC teaming.

Answer: A

NEW QUESTION 11
You are designing a data protection strategy for Azure virtual machines. All the virtual machines are in the Standard tier and use managed disks.
You need to recommend a solution that meets the following requirements:
The use of encryption keys is audited.
All the data is encrypted at rest always.
You manage the encryption keys, not Microsoft.
What should you include in the recommendation?

• A. BitLocker Drive Encryption (BitLocker)
• B. Azure Storage Service Encryption
• C. client-side encryption
• D. Azure Disk Encryption

Answer: D

Explanation: References:
https://docs.microsoft.com/en-us/azure/security/azure-security-disk-encryption-overview

NEW QUESTION 12
A company named Contoso, Ltd. has an Azure Active Directory (Azure AD) tenant that is integrated with Microsoft Office 365 and an Azure subscription.
Contoso has an on-premises identity infrastructure. The infrastructure includes servers that run Active Directory Domain Services (AD DS), Active Directory Federation Services (AD FS), Azure AD Connect, and Microsoft Identity Manager (MIM).
Contoso has a partnership with a company named Fabrikam, Inc. Fabrikam has an Active Directory forest and an Office 365 tenant. Fabrikam has the same on-premises identity infrastructure as Contoso.
A team of 10 developers from Fabrikam will work on an Azure solution that will be hosted in the Azure subscription of Contoso. The developers must be added to the Contributor role for a resource in the Contoso subscription.
You need to recommend a solution to ensure that Contoso can assign the role to the 10 Fabrikam developers.
The solution must ensure that the Fabrikam developers use their existing credentials to access resources. What should you recommend?

• A. Configure a forest trust between the on-premises Active Directory forests of Contoso and Fabrikam.
• B. Configure an organization relationship between the Office 365 tenants of Fabrikam and Contoso.
• C. In the Azure AD tenant of Contoso, enable Azure Active Directory Domain Services (Azure AD DS).Createa one-way forest trust that uses selective authentication between the Active Directory forests of Contoso and Fabrikam.
• D. In the Azure AD tenant of Contoso, create guest accounts for the Fabrikam developers.

Answer: D

Explanation: References:
https://docs.microsoft.com/en-us/azure/role-based-access-control/role-assignments-external-users

NEW QUESTION 13
You configure OAuth 2 authorization in API Management as shown in the exhibit.

Use the drop-domain to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

NEW QUESTION 14
You are evaluating the components of the migration to Azure that require you to provision an Azure Storage account.
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Answer:

Explanation:

NEW QUESTION 15
You need to deploy resources to host a stateless web app in an Azure subscription. The solution must meet the following requirements:
• Provide access to the full .NET framework.
• Provide redundancy if an Azure region fails.
• Grant administrators access to the operating system to install custom application dependencies. Solution: You deploy a virtual machine scale set that uses autoscaling.
Does this meet the goal?

• A. Yes
• B. No

Answer: B

NEW QUESTION 16
You have an on-premises deployment of MongoDB.
You plan to migrate MongoDB to an Azure Cosmos DB account that uses the MongoDB API. You need to recommend a solution for migrating MongoDB to Azure Cosmos DB.
What should you include in the recommendation?

• A. mongorestore
• B. Data Migration Assistant
• C. Azure Storage Explorer
• D. Azure Cosmos DB Data Migration Tool

Answer: A

Explanation: References:
https://docs.microsoft.com/en-us/azure/cosmos-db/mongodb-migrate