Microsoft AZ-102 Practice Test Questions~ Unique and the Most Challenging
                                      M    i  c rosoft AZ-102 Dumps
Microsoft Azure Administrator Certification Transition
For More Info:
https://www.dumpsprofessor.com/microsoft/az-102-dumps-pdf.html
 
QUESTION 1 
You have a Microsoft SQL Server Always On availability group on Azure virtual machines. You 
need to configure an Azure internal load balancer as a listener for the availability group. What 
should you do? 
 
A. Enable Floating IP. 
B. Set Session persistence to Client IP and protocol. 
C. Set Session persistence to Client IP. 
D. Create an HTTP health probe on port 1433. 
 
Answer: A 
Explanation: 
Incorrect Answers: 
D: The Health probe is created with the TCP protocol, not with the HTTP protocol. 
References: 
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/sql/virtual-machines-windows-
portal-sql-alwayson-int-listener 
 
 
QUESTION 2 
You have an on-premises network that contains a Hyper-V host named Host1.  
Host1 runs Windows Server 2016 and hosts 10 virtual machines that run Windows Server 2016. 
You plan to replicate the virtual machines to Azure by using Azure Site Recovery. 
You create a Recovery Services vault named ASR1 and a Hyper-V site named Site1. 
You need to add Host1 to ASR1. 
What should you do? 
 
A. Download the installation file for the Azure Site Recovery Provider. 
Download the vault registration key. 
Install the Azure Site Recovery Provider on Host1 and register the server. 
B. Download the installation file for the Azure Site Recovery Provider. 
Download the storage account key. 
Install the Azure Site Recovery Provider on Host1 and register the server. 
C. Download the installation file for the Azure Site Recovery Provider. 
Download the vault registration key. 
Install the Azure Site Recovery Provider on each virtual machine and register the virtual machines. 
D. Download the installation file for the Azure Site Recovery Provider. 
Download the storage account key. 
Install the Azure Site Recovery Provider on each virtual machine and register the virtual machines. 
 
Answer: A 
Explanation: 
Download the Vault registration key. You need this when you install the Provider. The key is valid 
for five days after you generate it. 
Install the Provider on each VMM server. You don't need to explicitly install anything on Hyper-V 
hosts. 
Incorrect Answers: 
B, D: Use the Vault Registration Key, not the storage account key. 
References: 
https://docs.microsoft.com/en-us/azure/site-recovery/migrate-tutorial-on-premises-azure 
 
 
QUESTION 3 
You plan to move services from your on-premises network to Azure.  
You identify several virtual machines that you believe can be hosted in Azure.  
                                                                                
 
The virtual machines are shown in the following table. 
 
 
 
Which two virtual machines can you access by using Azure migrate? Each correct answer 
presents a complete solution. 
NOTE: Each correct selection is worth one point. 
 
A. Sea-CA0l 
B. Hou-NW01 
C. NYC-FS01 
D. Sea-DC01 
E. BOS-DB01 
 
Answer: CE 
 
 
QUESTION 4 
You have an Azure subscription that contains a virtual network named VNet1. VNet 1 has two 
subnets named Subnet1 and Subnet2.  
VNet1 is in the West Europe Azure region. The subscription contains the virtual machines in the 
following table. 
 
 
 
You need to deploy an application gateway named AppGW1 to VNet1. 
What should you do first? 
 
A. Add a service endpoint. 
B. Add a virtual network. 
C. Move VM3 to Subnet1. 
D. Stop VM1 and VM2. 
 
Answer: D 
Explanation: 
If you have an existing virtual network, either select an existing empty subnet or create a new 
subnet in your existing virtual network solely for use by the application gateway. Verify that you 
                                                                                
 
have a working virtual network with a valid subnet. Make sure that no virtual machines or cloud 
deployments are using the subnet. The application gateway must be by itself in a virtual network 
subnet. 
 
 
QUESTION 5 
You have an Azure virtual network named VNet1 that contains a subnet named Subnet1. 
Subnet1 contains three Azure virtual machines. Each virtual machine has a public IP address. 
The virtual machines host several applications that are accessible over port 443 to user on the 
Internet. 
Your on-premises network has a site-to-site VPN connection to VNet1. 
You discover that the virtual machines can be accessed by using the Remote Desktop Protocol 
(RDP) from the Internet and from the on-premises network. 
You need to prevent RDP access to the virtual machines from the Internet, unless the RDP 
connection is established from the on-premises network.  
The solution must ensure that all the applications can still be accesses by the Internet users. 
What should you do? 
 
A. Modify the address space of the local network gateway. 
B. Remove the public IP addresses from the virtual machines. 
C. Modify the address space of Subnet1. 
D. Create a deny rule in a network security group (NSG) that is linked to Subnet1. 
 
Answer: D 
Explanation: 
You can filter network traffic to and from Azure resources in an Azure virtual network with a 
network security group.  
A network security group contains security rules that allow or deny inbound network traffic to, or 
outbound network traffic from, several types of Azure resources. 
References: 
https://docs.microsoft.com/en-us/azure/virtual-network/security-overview 
 
 
QUESTION 6 
You have a public load balancer that balancer ports 80 and 443 across three virtual machines. 
You need to direct all the Remote Desktop protocol (RDP) to VM3 only. 
What should you configure? 
 
A. an inbound NAT rule 
B. a load public balancing rule 
C. a new public load balancer for VM3 
D. a new IP configuration 
 
Answer: A 
Explanation: 
To port forward traffic to a specific port on specific VMs use an inbound network address 
translation (NAT) rule. 
Incorrect Answers: 
B: Load-balancing rule to distribute traffic that arrives at frontend to backend pool instances. 
References: 
https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-overview 
 
 
QUESTION 7 
You have an azure subscription that contain a virtual named VNet1. VNet1. contains four subnets 
                                                                                
 
named Gatesway, perimeter, NVA, and production. 
The NVA contain two network virtual appliance (NVAs) that will network traffic inspection between 
the perimeter subnet and the production subnet. 
You need o implement an Azure load balancer for the NVAs. The solution must meet the 
following requirements: 
The NVAs must run in an active-active configuration that uses automatic failover. 
The NVA must load balance traffic to two services on the Production subnet. The services have 
different IP addresses 
Which three actions should you perform? Each correct answer presents parts of the solution. 
NOTE: Each correct selection is worth one point. 
 
A. Add two load balancing rules that have HA Ports enabled and Floating IP disabled. 
B. Deploy a standard load balancer. 
C. Add a frontend IP configuration, two backend pools, and a health prob. 
D. Add a frontend IP configuration, a backend pool, and a health probe. 
E. Add two load balancing rules that have HA Ports and Floating IP enabled. 
F. Deploy a basic load balancer. 
 
Answer: BCE 
Explanation: 
A standard load balancer is required for the HA ports. -Two backend pools are needed as there 
are two services with different IP addresses. -Floating IP rule is used where backend ports are 
reused. 
Incorrect Answers: 
F: HA Ports are not available for the basic load balancer. 
References: 
https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-standard-overview 
https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-multivip-overview 
 
 
QUESTION 8 
You have five Azure virtual machines that run Windows Server 2016. 
You have an Azure load balancer named LB1 that provides load balancing se 
You need to ensure that visitors are serviced by the same web server for each request. 
What should you configure? 
 
A. Floating IP (direct server return) to Disable 
B. Session persistence to Client IP 
C. a health probe 
D. Session persistence to None 
 
Answer: B 
Explanation: 
You can set the sticky session in load balancer rules with setting the session persistence as the 
client IP. 
References: 
https://cloudopszone.com/configure-azure-load-balancer-for-sticky-sessions/