2020 AZ-303 Actual Tests - AZ-303 Actual Dumps PDF - Realexamcollection
                      
 
 
 
  
MICROS  OFT
 
 
Jun iper AZ-303 
 Microsoft Azure Architect Technologies
Junos, Associate (JNCIA-Junos)
JN0-102
https://www.realexamcollection.com/microsoft/az-303-dumps.html
 
 
Question: 1 
   
You need to meet the user requirement for Admin1. 
What should you do? 
 
A. From the Subscriptions blade, select the subscription, and then modify the Properties. 
B. From the Subscriptions blade, select the subscription, and then modify the Access control (IAM) 
settings. 
C. From the Azure Active Directory blade, modify the Properties. 
D. From the Azure Active Directory blade, modify the Groups. 
 
Answer: A     
 
Explanation: 
Change the Service administrator for an Azure subscription 
• Sign in to Account Center as the Account administrator. 
• Select a subscription. 
• On the right side, select Edit subscription details. 
Scenario: Designate a new user named Admin1 as the service administrator of the Azure subscription. 
References: 
https://docs.microsoft.com/en-us/azure/billing/billing-add-change-azure-subscription-administrator 
 
Question: 2 
   
You need to move the blueprint files to Azure. 
What should you do? 
 
A. Generate a shared access signature (SAS). Map a drive, and then copy the files by using File Explorer. 
B. Use the Azure Import/Export service. 
C. Generate an access key. Map a drive, and then copy the files by using File Explorer. 
D. Use Azure Storage Explorer to copy the files. 
 
Answer: D     
 
Explanation: 
Azure Storage Explorer is a free tool from Microsoft that allows you to work with Azure Storage data on 
Windows, macOS, and Linux. You can use it to upload and download data from Azure blob storage. 
Scenario: 
Planned Changes include: move the existing product blueprint files to Azure Blob storage. 
Technical Requirements include: Copy the blueprint files to Azure over the Internet. 
References: 
https://docs.microsoft.com/en-us/azure/machine-learning/team-data-science-process/move-data-
toazure-blob-using-azure-storage-explorer 
 
 
Question: 3 
   
You need to implement a backup solution for App1 after the application is moved. 
What should you create first? 
 
A. a recovery plan 
B. an Azure Backup Server 
C. a backup policy 
D. a Recovery Services vault 
 
Answer: D     
 
Explanation: 
A Recovery Services vault is a logical container that stores the backup data for each protected resource, 
such as Azure VMs. When the backup job for a protected resource runs, it creates a recovery point 
inside the Recovery Services vault. 
Scenario: 
There are three application tiers, each with five virtual machines. 
Move all the virtual machines for App1 to Azure. 
Ensure that all the virtual machines for App1 are protected by backups. 
References: 
https://docs.microsoft.com/en-us/azure/backup/quick-backup-vm-portal 
 
Question: 4 
   
HOTSPOT 
You need to recommend a solution for App1. The solution must meet the technical requirements. What 
should you include in the recommendation? To answer, select the appropriate options in the answer 
area. 
NOTE: Each correct selection is worth one point. 
 
 
 
Answer:  
 
 
 
Explanation: 
Box 1: 3 
One virtual network for every tier 
Box 2: 1 
Only one subnet for each tier, to minimize the number of open ports. 
Scenario: You have a public-facing application named App1. App1 is comprised of the following three 
tiers: 
• A SQL database 
• A web front end 
• A processing middle tier 
Each tier is comprised of five virtual machines. Users access the web front end by using HTTPS only. 
Technical requirements: 
• Move all the virtual machines for App1 to Azure. 
• Minimize the number of open ports between the App1 tiers. 
 
Question: 5 
 
DRAG DROP 
You have an Azure subscription that contains the resources shown in the following table. 
 
In RG2, you need to create a new virtual machine named VM2 that will connect to VNET1. VM2 will use 
a network interface named VM2_Interface. 
In which region should you create VM2 and VM2_Interface? To answer, drag the appropriate regions to 
 
the correct targets. Each region may be used once, more than once, or not at all. You may need to drag 
the split bar between panes or scroll to view content. 
NOTE: Each correct selection is worth one point. 
 
 
Answer:  
 
 
 
Explanation: 
VM2: West US 
In RG2, which is in West US, you need to create a new virtual machine named VM2. 
VM2_interface: East US 
VM2 will use a network interface named VM2_Interface to connect to VNET1, which is in East US. 
References: 
https://docs.microsoft.com/en-us/azure/virtual-network/associate-public-ip-address-vm 
 
Question: 6 
 
You need to recommend an identify solution that meets the technical requirements. 
What should you recommend? 
 
A. federated single-on (SSO) and Active Directory Federation Services (AD FS) 
 
B. password hash synchronization and single sign-on (SSO) 
C. cloud-only user accounts 
D. Pass-through Authentication and single sign-on (SSO) 
 
Answer: D     
 
Explanation: 
Active Directory Federation Services is a feature and web service in the Windows Server Operating 
System that allows sharing of identity information outside a company’s network. 
Scenario: Technical Requirements include: 
Prevent user passwords or hashes of passwords from being stored in Azure. 
References: 
https://www.sherweb.com/blog/active-directory-federation-services/ 
 
Question: 7 
   
You are planning the move of App1 to Azure. 
You create a network security group (NSG). 
You need to recommend a solution to provide users with access to App1. 
What should you recommend? 
 
A. Create an outgoing security rule for port 443 from the Internet. Associate the NSG to all the subnets. 
B. Create an incoming security rule for port 443 from the Internet. Associate the NSG to all the subnets. 
C. Create an incoming security rule for port 443 from the Internet. Associate the NSG to the subnet that 
contains the web servers. 
D. Create an outgoing security rule for port 443 from the Internet. Associate the NSG to the subnet that 
contains the web servers. 
 
Answer: C     
 
Explanation: 
As App1 is public-facing we need an incoming security rule, related to the access of the web servers. 
Scenario: You have a public-facing application named App1. App1 is comprised of the following three 
tiers: a SQL database, a web front end, and a processing middle tier. 
Each tier is comprised of five virtual machines. Users access the web front end by using HTTPS only. 
 
Question: 8 
   
HOTSPOT 
You need to identify the storage requirements for Contoso. 
For each of the following statements, select Yes if the statement is true. Otherwise, select No. 
NOTE: Each correct selection is worth one point. 
 
 
 
Answer:  
 
 
 
Explanation: 
Box 1: Yes 
Contoso is moving the existing product blueprint files to Azure Blob storage. 
Use unmanaged standard storage for the hard disks of the virtual machines. We use Page Blobs for 
these. 
Box 2: No 
Box 3: No 
 
Question: 9 
 
You have an Azure Cosmos DB account named Account1. Account1 includes a database named DB1 that 
contains a container named Container 1. The partition key tor Container1 is set to /city. 
You plan to change the partition key for Container1 
What should you do first? 
 
A. Delete Container1 
B. Create a new container in DB1 
C. Regenerate the keys for Account1. 
D. Implement the Azure CosmosDB.NET SDK 
 
Answer: B     
 
 
Explanation: 
The good news is that there are two features, the Change Feed Processor and Bulk Executor Library, in 
Azure Cosmos DB that can be leveraged to achieve a live migration of your data from one container to 
another. This allows you to re-distribute your data to match the desired new partition key scheme, and 
make the relevant application changes afterwards, thus achieving the effect of “updating your partition 
key”. 
Reference: 
https://devblogs.microsoft.com/cosmosdb/how-to-change-your-partition-key/ 
 
Question: 10 
   
You have the virtual machines shown in the following table. 
 
You deploy an Azure bastion named Bastion1 to VNET1. 
To which virtual machines can you connect by using Bastion1? 
 
A. VM1 only 
B. VM1 and VM2 only 
C. VM2 and VM3 only 
D. VM1, VM2, and VM3 
 
Answer: C     
 
https://www.realexamcollection.com/microsoft/az-303-dumps.html