Microsoft AZ-102 Real Exam Questions Answers-Microsoft AZ-102  Online Test Engine
                     Microsoft
A Z - 102 E xam
Microsoft Azure Administrator Certification Transition Exam
Questions & Answers
Demo
https://www.exam4lead.com/microsoft/az-102-dumps.html
Questions&AnswersPDF Page2
Version:11.0
CaseStudy:1
HumongousInsurance
Overview
ExistingEnvironment
ActiveDirectoryEnvironment
HumongousInsurancehasasingle-domainActiveDirectoryforestnamedhumongousinsurance.com.
ThefunctionalleveloftheforestisWindowsServer2012.
YourecentlyprovisionedanAzureActiveDirectory(AzureAD)tenant.
NetworkInfrastructure
Eachofficehasalocal datacenterthatcontainsall theserversforthatoffice. Eachofficehasa
dedicatedconnectiontotheInternet.
Eachofficehasseverallinkloadbalancersthatprovideaccesstotheservers.
ActiveDirectoryIssue
Severalusersinhumongousinsurance.comhaveUPNsthatcontainspecialcharacters.
YoususpectthatsomeofthecharactersareunsupportedinAzureAD
LicensingIssue
YouattempttoassignalicenseinAzuretoseveral usersandreceivethefollowingerrormessage:
"Licensesnotassigned.Licenseagreementfailedforoneuser."
YouverifythattheAzuresubscriptionhastheavailablelicenses.
Requirements
PlannedChanges
HumongousInsuranceplanstoopenanewofficeinParis.TheParisofficewill contain1,000users
whowillbehiredduringthenext12months.AlltheresourcesusedbytheParisofficeuserswillbe
hostedinAzure.
PlannedAzureADInfrastructure
Theon-premisesActiveDirectorydomainwillbesynchronizedtoAzureAD.
AllclientcomputersintheParisofficewillbejoinedtoanAzureADdomain.
PlannedAzureNetworkingInfrastructure
YouplantocreatethefollowingnetworkingresourcesinaresourcegroupnamedAll_Resources:
 DefaultAzuresystemroutesthatwillbetheonlyroutesusedtoroutetraffic
 Avirtual networknamedParis-VNetthat will containtwosubnetsnamedSubnet1and
Subnet2
 Avirtual network namedClientResources-VNet that will containonesubnet named
ClientSubnet
 AvirtualnetworknamedAllOffices-VNetthatwillcontaintwosubnetsnamedSubnet3and
Subnet4
YouplantoenablepeeringbetweenParis-VNetandAllOffices-VNet.YouwillenabletheUseremote
gatewayssettingfortheParis-VNetpeerings.
YouplantocreateaprivateDNSzonenamedhumongousinsurance.local andsettheregistration
networktotheClientResources-VNetvirtualnetwork.
Questions&AnswersPDF Page3
PlannedAzureComputerInfrastructure
Eachsubnetwill containseveral virtual machinesthatwill runeitherWindowsServer2012R2,
WindowsServer2016,orRedHatLinux.
DepartmentRequirements
HumongousInsuranceidentifiesthefollowingrequirementsforthecompany'sdepartments:
WebadministratorswilldeployAzurewebappsforthemarketingdepartment.Eachwebappwillbe
addedtoaseparateresourcegroup.Theinitial configurationofthewebappswill beidentical.The
webadministratorshavepermissiontodeploywebappstoresourcegroups.
Duringthetestingphase,auditorsinthefinancedepartmentmustbeabletoreviewallAzurecosts
fromthepastweek.
AuthenticationRequirements
UsersintheMiami officemust useAzureActiveDirectorySeamlessSingleSign-on(AzureAD
SeamlessSSO)whenaccessingresourcesinAzure.
Question:1
DRAGDROP
Youneedtopreparetheenvironmenttoensurethatthewebadministratorscandeploytheweb
appsasquicklyaspossible.
Whichthreeactionsshouldyouperforminsequence?Toanswer,movetheappropriateactionsfrom
thelistofactionstotheanswerareaandarrangetheminthecorrectorder.
Answer:
Questions&AnswersPDF Page4
Explanation:
Step1:
FirstyoucreateastorageaccountusingtheAzureportal.
Step2:
SelectAutomationoptionsatthebottomof thescreen. Theportal showsthetemplateonthe
Templatetab.
Deploy:DeploytheAzurestorageaccounttoAzure.
Step3:
Sharethetemplate.
Scenario:Webadministratorswill deployAzurewebappsforthemarketingdepartment.Eachweb
appwill beaddedtoaseparateresourcegroup. Theinitial configurationofthewebappswill be
identical.Thewebadministratorshavepermissiontodeploywebappstoresourcegroups.
References: https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-manager-
quickstart-create-templates-use-the-portal
Question:2
Whichbladeshouldyouinstructthefinancedepartmentauditorstouse?
A.Partnerinformation
B.Overview
C.Paymentmethods
D.Invoices
Answer:D
Explanation:
Youcanoptinandconfigureadditional recipientstoreceiveyourAzureinvoiceinanemail. This
featuremaynotbeavailableforcertainsubscriptionssuchassupportoffers,EnterpriseAgreements,
orAzureinOpen.
SelectyoursubscriptionfromtheSubscriptionspage. Opt-inforeachsubscriptionyouown. Click
InvoicesthenEmailmyinvoice.
Questions&AnswersPDF Page5
ClickOptinandaccepttheterms.
Scenario:Duringthetestingphase, auditorsinthefinancedepartmentmustbeabletoreviewall
Azurecostsfromthepastweek.
References: https://docs.microsoft.com/en-us/azure/billing/billing-download-azure-invoice-daily-
usage-date
Question:3
Youneedtopreparetheenvironmenttomeettheauthenticationrequirements.
Whichtwoactionsshouldyouperform?Eachcorrectanswerpresentspartofthesolution.
NOTEEachcorrectselectionisworthonepoint.
A.AzureActiveDirectory(AD)IdentityProtectionandanAzurepolicy
B.aRecoveryServicesvaultandabackuppolicy
C.anAzureKeyVaultandanaccesspolicy
D.anAzureStorageaccountandanaccesspolicy
Answer:BD
Explanation:
D:SeamlessSSOworkswithanymethodofcloudauthentication-PasswordHashSynchronizationor
Pass-throughAuthentication,andcanbeenabledviaAzureADConnect.
B:YoucangraduallyrolloutSeamlessSSOtoyourusers.YoustartbyaddingthefollowingAzureAD
URLtoall or selectedusers' Intranet zonesettingsbyusingGroupPolicyinActiveDirectory:
https://autologon.microsoftazuread-sso.com
IncorrectAnswers:
A:SeamlessSSOneedstheuser'sdevicetobedomain-joined,butdoesn'tneedforthedevicetobe
AzureADJoined.
C:AzureADconnectdoesnotport8080.Itusesport443.
E:SeamlessSSOisnotapplicabletoActiveDirectoryFederationServices(ADFS).
Scenario:UsersintheMiami officemustuseAzureActiveDirectorySeamlessSingleSign-on(Azure
ADSeamlessSSO)whenaccessingresourcesinAzure.
PlannedAzureADInfrastructureinclude: Theon-premises ActiveDirectory domainwill be
synchronizedtoAzureAD.
Questions&AnswersPDF Page6
References: https://docs.microsoft.com/en-us/azure/active-directory/connect/active-directory-
aadconnect-sso-quick-start
Question:4
YouneedtodefineacustomdomainnameforAzureADtosupporttheplannedinfrastructure.
Whichdomainnameshouldyouuse?
A.JointheclientcomputersintheMiamiofficetoAzureAD.
B. Addhttp://autologon.microsoftazuread-sso.comtotheintranetzoneofeachclientcomputerin
theMiamioffice.
C.AllowinboundTCPport8080tothedomaincontrollersintheMiamioffice.
D.InstallAzureADConnectonaserverintheMiamiofficeandenablePass-throughAuthentication
E.Install theActiveDirectoryFederationServices(ADFS)roleonadomaincontrollerintheMiami
office.
Answer:BD
Explanation:
Every Azure AD directory comes with an initial domain name in the form of
domainname.onmicrosoft.com.Theinitialdomainnamecannotbechangedordeleted,butyoucan
addyourcorporatedomainnametoAzureADaswell.Forexample,yourorganizationprobablyhas
otherdomainnamesusedtodobusinessanduserswhosigninusingyourcorporatedomainname.
AddingcustomdomainnamestoAzureADallowsyoutoassignusernamesinthedirectorythatare
familiar to your users, such as ‘[email protected].’ instead of 'alice@domain
name.onmicrosoft.com'.
Scenario:
NetworkInfrastructure:Eachofficehasalocaldatacenterthatcontainsalltheserversforthatoffice.
EachofficehasadedicatedconnectiontotheInternet.
HumongousInsurancehasasingle-domainActiveDirectoryforestnamedhumongousinsurance.com
PlannedAzureADInfrastructure:Theon-premisesActiveDirectorydomainwill besynchronizedto
AzureAD.
References: https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/add-custom-
domain
Question:5
YouneedtoresolvetheActiveDirectoryissue.
Whatshouldyoudo?
A.FromActiveDirectoryUsersandComputers,selecttheuseraccounts,andthenmodifytheUser
Principal
Namevalue.
B.Runidfix.exe,andthenusetheEditaction.
C.FromActiveDirectoryDomainsandTrusts,modifythelistofUPNsuffixes.
D.FromAzureADConnect,modifytheoutboundsynchronizationrule.
Questions&AnswersPDF Page7
Answer:B
Explanation:
IdFixisusedtoperformdiscoveryandremediationofidentityobjectsandtheirattributesinanon-
premisesActiveDirectoryenvironmentinpreparationformigrationtoAzureActiveDirectory.IdFixis
intendedfortheActiveDirectoryadministratorsresponsiblefordirectorysynchronizationwithAzure
ActiveDirectory.
Scenario:ActiveDirectoryIssue
Severalusersinhumongousinsurance.comhaveUPNsthatcontainspecialcharacters.
YoususpectthatsomeofthecharactersareunsupportedinAzureAD.
References:https://www.microsoft.com/en-us/download/details.aspx?id=36832
Question:6
Whichbladeshouldyouinstructthefinancedepartmentauditorstouse?
A.invoices
B.partnerinformation
C.costanalysis
D.Externalservices
Answer:A
Question:7
YouneedtodefineacustomdomainnameforAzureADtosupporttheplannedinfrastructure.
Whichdomainnameshouldyouuse?
A.ad.humongousinsurance.com
B.humongousinsurance.onmicrosoft.com
C.humongousinsurance.local
D.humongousinsurance.com
Answer:D
Explanation:
Every Azure AD directory comes with an initial domain name in the form of
domainname.onmicrosoft.com.Theinitialdomainnamecannotbechangedordeleted,butyoucan
addyourcorporatedomainnametoAzureADaswell.Forexample,yourorganizationprobablyhas
otherdomainnamesusedtodobusinessanduserswhosigninusingyourcorporatedomainname.
AddingcustomdomainnamestoAzureADallowsyoutoassignusernamesinthedirectorythatare
familiar to your users, such as ‘[email protected].’ instead of 'alice@domain
name.onmicrosoft.com'.
Scenario:
NetworkInfrastructure:Eachofficehasalocaldatacenterthatcontainsalltheserversforthatoffice.
EachofficehasadedicatedconnectiontotheInternet.
Questions&AnswersPDF Page8
HumongousInsurancehasasingle-domainActiveDirectoryforestnamedhumongousinsurance.com
PlannedAzureADInfrastructure:Theon-premisesActiveDirectorydomainwill besynchronizedto
AzureAD.
References: https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/add-custom-
domain
Question:8
HOTSPOT
Youareevaluatingthenameresolutionforthevirtualmachinesaftertheplannedimplementationof
theAzurenetworkinginfrastructure.
Foreachofthefollowingstatements,selectYesifthestatementistrue.Otherwise,selectNo.
Answer:
Explanation:
Scenario: YouplantocreateaprivateDNSzonenamedhumongousinsurance.local andset the
registrationnetworktotheClientResources-VNetvirtualnetwork.
Thereis avirtual networknamedClientResources-VNet that will containonesubnet named
ClientSubnet
Note:AzureDNSprovidesthefollowingcapabilities:
Automaticregistrationofvirtual machinesfromasinglevirtual networkthat'slinkedtoaprivate
zoneasaregistrationvirtualnetwork.
Questions&AnswersPDF Page9
ForwardDNSresolutionissupportedacrossvirtual networksthatarelinkedtotheprivatezoneas
resolutionvirtualnetworks.
ReverseDNSlookupissupportedwithinthevirtual-networkscope.
References:
https://docs.microsoft.com/en-us/azure/dns/private-dns-overview
Question:9
Whichbladeshouldyouinstructthefinancedepartmentauditorstouse?
A.Costanalysis
B.Usage+quotas
C.Externalservices
D.Paymentmethods
Answer:B
Explanation:
Subscriptioncostsarebasedonusage.
MicrosoftAzurelimitsarealsocalledquotas.
Scenario:Duringthetestingphase, auditorsinthefinancedepartmentmustbeabletoreviewall
Azurecostsfromthepastweek.
IncorrectAnswers:
C:ExternalservicesarepublishedbythirdpartysoftwarevendorsintheAzuremarketplace.
References:https://docs.microsoft.com/en-us/azure/azure-subscription-service-limits
Question:10
Youneedtopreparetheenvironmenttomeettheauthenticationrequirements.
Whichtwoactionsshouldyouperform?Eachcorrectanswerpresentspartofthesolution.
NOTE:Eachcorrectselectionisworthonepoint.
A.AllowinboundTCPport8080tothedomaincontrollersintheMiamioffice.
B.Addhttp://autogon.microsoftazuread-sso.comtotheintranetzoneofeachclientcomputerinthe
Miami
office.
C.JointheclientcomputersintheMiamiofficetoAzureAD.
D.Install theActiveDirectoryFederationServices(ADFS)roleonadomaincontrollerintheMiami
office.
E.InstallAzureADConnectonaserverintheMiamiofficeandenablePass-throughAuthentication.
Answer:BE
Explanation:
B:YoucangraduallyrolloutSeamlessSSOtoyourusers.YoustartbyaddingthefollowingAzureAD
URLtoall or selectedusers' Intranet zonesettingsbyusingGroupPolicyinActiveDirectory:
https://autologon.microsoftazuread-sso.com
Questions&AnswersPDF Page10
E:SeamlessSSOworkswithanymethodofcloudauthentication-PasswordHashSynchronizationor
Pass-throughAuthentication,andcanbeenabledviaAzureADConnect.
References:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sso-quick-start
https://www.exam4lead.com/microsoft/az-102-dumps.html