Microsoft AZ-102 Study Guides 2019

★ Pass on Your First TRY ★ 100% Money Back Guarantee ★ Realistic Practice Exam Questions

Free Instant Download NEW AZ-102 Exam Dumps (PDF & VCE):
Available on: https://www.certleader.com/AZ-102-dumps.html


We provide AZ-102 Exam Questions which are the best for clearing AZ-102 test, and to get certified by Microsoft Microsoft Azure Administrator Certification Transition. The AZ-102 Dumps Questions covers all the knowledge points of the real AZ-102 exam. Crack your Microsoft AZ-102 Exam with latest dumps, guaranteed!

Microsoft AZ-102 Free Dumps Questions Online, Read and Test Now.

NEW QUESTION 1
Note: This Questions is part of a series of Questions that present the same scenario. Each questions in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than one correct solution, while others might not have a correct solution.
After you answer a questions in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure virtual machine named VM1. VM1 was deployed by using a custom Azure Resource Manager template named ARM1.json.
You receive a notification that VM1 will be affected by maintenance. You need to move VM1 to a different host immediately.
Solution: From the Overview blade, you move the virtual machine to a different resource group. Does this meet the goal?

  • A. Yes
  • B. No

Answer: B

Explanation: You should redeploy the VM.
References: https://docs.microsoft.com/en-us/azure/virtual-machines/windows/redeploy-to-newnode

NEW QUESTION 2
HOT SPOT
You purchase a new Azure subscription named Subscription1.
You create a virtual machine named VM1 in Subscription1. VM1 is not protected by Azure Backup. You need to protect VM1 by using Azure Backup. Backups must be created at 01:00 and stored for 30 days.
What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
AZ-102 dumps exhibit

    Answer:

    Explanation: Box 1: A Recovery Services vault
    A Recovery Services vault is an entity that stores all the backups and recovery points you create over time.
    Box 2: A backup policy
    What happens when I change my backup policy?
    When a new policy is applied, schedule and retention of the new policy is followed. References:
    https://docs.microsoft.com/en-us/azure/backup/backup-configure-vault https://docs.microsoft.com/en-us/azure/backup/backup-azure-backup-faq

    NEW QUESTION 3
    DRAG DROP
    You have an on-premises file server named Server1 that runs Windows Server 2016. You have an Azure subscription that contains an Azure file share.
    You deploy an Azure File Sync Storage Sync Service, and you create a sync group. You need to synchronize files from Server1 to Azure.
    Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
    AZ-102 dumps exhibit

      Answer:

      Explanation: Step 1: Install the Azure File Sync agent on Server1
      The Azure File Sync agent is a downloadable package that enables Windows Server to be synced with an Azure file share
      Step 2: Register Server1.
      Register Windows Server with Storage Sync Service
      Registering your Windows Server with a Storage Sync Service establishes a trust relationship between your server (or cluster) and the Storage Sync Service.
      Step 3: Add a server endpoint
      Create a sync group and a cloud endpoint.
      A sync group defines the sync topology for a set of files. Endpoints within a sync group are kept in sync with each other. A sync group must contain one cloud endpoint, which represents an Azure file share and one or more server endpoints. A server endpoint represents a path on registered server. References: https://docs.microsoft.com/en-us/azure/storage/files/storage-sync-files-deploymentguide

      NEW QUESTION 4
      HOT SPOT
      You have an Azure subscription named Subscroption1. In Subscription1, you create an alert rule named Alert1.
      The Alert1 action group is configured as shown in the following exhibit.
      AZ-102 dumps exhibit
      Alert1 alert criteria is triggered every minute.
      Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
      NOTE: Each correct selection is worth one point.
      AZ-102 dumps exhibit

        Answer:

        Explanation: Box 1: 60
        One alert per minute will trigger one email per minute. Box 2: 12
        No more than 1 SMS every 5 minutes can be send, which equals 12 per hour.
        Note: Rate limiting is a suspension of notifications that occurs when too many are sent to a particular phone number, email address or device. Rate limiting ensures that alerts are manageable and actionable.
        The rate limit thresholds are:
        SMS: No more than 1 SMS every 5 minutes. Voice: No more than 1 Voice call every 5 minutes. Email: No more than 100 emails in an hour. Other actions are not rate limited.
        References:
        https://github.com/MicrosoftDocs/azure-docs/blob/master/articles/monitoring-anddiagnostics/ monitoring-overview-alerts.md

        NEW QUESTION 5
        You have an Azure Active Directory (Azure AD) tenant.
        You have an existing Azure AD conditional access policy named Policy1. Policy1 enforces the use of Azure AD-joined devices when members of the Global Administrators group authenticate to Azure AD from untrusted locations.
        You need to ensure that members of the Global Administrators group will also be forced to use multi- factor authentication when authenticating from untrusted locations.
        What should you do?

        • A. From the multi-factor authentication page, modify the service settings.
        • B. From the multi-factor authentication page, modify the user settings.
        • C. From the Azure portal, modify grant control of Policy1.
        • D. From the Azure portal, modify session control of Policy1.

        Answer: C

        Explanation: There are two types of controls: Grant controls – To gate access
        Session controls – To restrict access to a session
        Grant controls oversee whether a user can complete authentication and reach the resource that they’re attempting to sign-in to. If you have multiple controls selected, you can configure whether all of them are required when your policy is processed. The current implementation of Azure Active Directory enables you to set the following grant control requirements:
        AZ-102 dumps exhibit
        References:
        https://blog.lumen21.com/2017/12/15/conditional-access-in-azure-active-directory/

        NEW QUESTION 6
        Note: This questions is part of a series of questions that present the same scenario. Each questions in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than one correct solution, while others might not have a correct solution. After you answer a questions in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
        You have an Azure virtual machine named VM1. VM1 was deployed by using a custom Azure Resource Manager template named ARM1.json.
        You receive a notification that VM1 will be affected by maintenance. You need to move VM1 to a different host immediately.
        Solution: From the Update management blade, you click enable. Does this meet the goal?

        • A. Yes
        • B. No

        Answer: B

        Explanation: You would need to Redeploy the VM.
        References: https://docs.microsoft.com/en-us/azure/virtual-machines/windows/redeploy-to-newnode

        NEW QUESTION 7
        SIMULATION
        Click to expand each objective. To connect to the Azure portal, type https://portal.azure.com in the browser address bar.
        AZ-102 dumps exhibit
        AZ-102 dumps exhibit
        AZ-102 dumps exhibit
        When you are finished performing all the tasks, click the ‘Next’ button.
        Note that you cannot return to the lab once you click the ‘Next’ button. Scoring occur in the background while you complete the rest of the exam.
        Overview
        The following section of the exam is a lab. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design. Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn’t matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.
        Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.
        Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.
        To start the lab
        You may start the lab by clicking the Next button.
        You plan to configure VM1 to be accessible from the Internet.
        You need to add a public IP address to the network interface used by VM1. What should you do from Azure portal?

          Answer:

          Explanation: You can add private and public IP addresses to an Azure network interface by completing the steps that follow.
          Step 1: In Azure portal, click More services > type virtual machines in the filter box, and then click Virtual machines.
          Step 2: In the Virtual machines pane, click the VM you want to add IP addresses to. Click Network interfaces in the virtual machine pane that appears, and then select the network interface you want to add the IP addresses to. In the example shown in the following picture, the NIC named myNIC from the VM named myVM is selected:
          AZ-102 dumps exhibit
          Step 3: In the pane that appears for the NIC you selected, click IP configurations. Step 4: Click Create public IP address.
          AZ-102 dumps exhibit
          Step 5: In the Create public IP address pane that appears, enter a Name, select an IP address assignment type, a Subscription, a Resource group, and a Location, then click Create, as shown in the following picture:
          References: https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-multiple-ipaddresses- portal

          NEW QUESTION 8
          You need to prepare the environment to meet the authentication requirements.
          Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

          • A. Allow inbound TCP port 8080 to the domain controllers in the Miami office.
          • B. Add http://autogon.microsoftazuread-sso.com to the intranet zone of each client computer in the Miamioffice.
          • C. Join the client computers in the Miami office to Azure AD.
          • D. Install the Active Directory Federation Services (AD FS) role on a domain controller in the Miami office.
          • E. Install Azure AD Connect on a server in the Miami office and enable Pass-through Authenticatio

          Answer: BE

          Explanation: B: You can gradually roll out Seamless SSO to your users. You start by adding the following Azure AD URL to all or selected users' Intranet zone settings by using Group Policy in Active Directory: https://autologon.microsoftazuread-sso.com
          E: Seamless SSO works with any method of cloud authentication - Password Hash Synchronization or Pass-through Authentication, and can be enabled via Azure AD Connect.
          References:
          https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sso-quick-start

          Case Study: 2
          Contoso Ltd Overview
          Contoso, Ltd. is a manufacturing company that has offices worldwide. Contoso works with partner organizations to bring products to market.
          Contoso products are manufactured by using blueprint files that the company authors and maintains. Existing Environment
          Currently, Contoso uses multiple types of servers for business operations, including the following:
          ? File servers
          ? Domain controllers
          ? Microsoft SQL Server servers
          Your network contains an Active Directory forest named contoso.com. All servers and client computers are joined to Active Directory.
          You have a public-facing application named App1. App1 is comprised of the following three tiers:
          ? A SQL database
          ? A web front end
          ? A processing middle tier
          Each tier is comprised of five virtual machines. Users access the web front end by using HTTPS only. Requirements
          Planned Changes
          Contoso plans to implement the following changes to the infrastructure: Move all the tiers of App1 to Azure.
          Move the existing product blueprint files to Azure Blob storage.
          Create a hybrid directory to support an upcoming Microsoft Office 365 migration project. Technical Requirements
          Contoso must meet the following technical requirements: Move all the virtual machines for App1 to Azure. Minimize the number of open ports between the App1 tiers.
          Ensure that all the virtual machines for App1 are protected by backups. Copy the blueprint files to Azure over the Internet.
          Ensure that the blueprint files are stored in the archive storage tier. Ensure that partner access to the blueprint files is secured and temporary.
          Prevent user passwords or hashes of passwords from being stored in Azure. Use unmanaged standard storage for the hard disks of the virtual machines.
          Ensure that when users join devices to Azure Active Directory (Azure AD), the users use a mobile phone to verify their identity.
          Minimize administrative effort whenever possible. User Requirements
          Contoso identifies the following requirements for users:
          Ensure that only users who are part of a group named Pilot can join devices to Azure AD. Designate a new user named Admin1 as the service administrator of the Azure subscription. Ensure that a new user named User3 can create network objects for the Azure subscription.

          NEW QUESTION 9
          You have an Azure subscription that contains a policy-based virtual network gateway named GW1 and a virtual network named VNet1. You need to ensure that you can configure a point-to-site connection from VNet1 to an on-premises computer. Which two actions should you perform? Each correct answer presents part of the solution.
          NOTE: Each correct selection is worth one point.

          • A. Reset GW1.
          • B. Add a service endpoint to VNet1.
          • C. Add a connection to GW1.
          • D. Add a public IP address space to VNet1.
          • E. Delete GWL
          • F. Create a route-based virtual network gatewa

          Answer: EF

          Explanation: E: Policy-based VPN devices use the combinations of prefixes from both networks to define how traffic is encrypted/decrypted through IPsec tunnels. It is typically built on firewall devices that perform packet filtering. IPsec tunnel encryption and decryption are added to the packet filtering and processing engine.
          F: A VPN gateway is used when creating a VPN connection to your on-premises network.
          Route-based VPN devices use any-to-any (wildcard) traffic selectors, and let routing/forwarding tables direct traffic to different IPsec tunnels. It is typically built on router platforms where each IPsec tunnel is modeled as a network interface or VTI (virtual tunnel interface).
          Incorrect Answers:
          D: Point-to-Site connections do not require a VPN device or a public-facing IP address. References:
          https://docs.microsoft.com/en-us/azure/vpn-gateway/create-routebased-vpn-gateway-portal https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-connect-multiple-policybasedrm- ps

          Case Study: 10
          Lab 2 Overview
          This is a lab or performance-based testing (PBT) section.
          The following section of the exam is a lab. In this section, you will perform a set of tasks m a live environment. While most liable to you as it would be m a live environment, some functionality (e g, copy and paste, ability to having sites) will not be possible by design.
          Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn't matter how you accomplish the lab9s0 and all other sections of the exam in the time provided.
          Please note that once you submit your work by clicking the Next button within a lab. you will NOT be able to return to the tab.
          AZ-102 dumps exhibit
          AZ-102 dumps exhibit
          AZ-102 dumps exhibit
          To connect to Azure portal, type https://portal.azure.com in te browser address bar.

          NEW QUESTION 10
          From the MFA Server blade, you open the Block/unblock users blade as shown in the exhibit. Block/unblock users
          A blocked user will not receive Multi-Factor Authentication requests. Authentication attempts for that user will be automatically denied. A user will remain blocked for 90 days from the time they are blocked. To manually unblock a user, click the “Unblock” action.
          AZ-102 dumps exhibit
          What caused AlexW to be blocked?

          • A. The user entered an incorrect PIN four times within 10 minutes.
          • B. The user account password expired.
          • C. An administrator manually blocked the user.
          • D. The user reported a fraud alert when prompted for additional authenticatio

          Answer: D

          NEW QUESTION 11
          You sign up for Azure Active Directory (Azure AD) Premium.
          You need to add a user named admin1@contoso.com as an administrator on all the computers that will be joined to the Azure AD domain.
          What should you configure in Azure AD?

          • A. Device settings from the Devices blade.
          • B. General settings from the Groups blade.
          • C. User settings from the Users blade.
          • D. Providers from the MFA Server blade.

          Answer: C

          Explanation: When you connect a Windows device with Azure AD using an Azure AD join, Azure AD adds the following security principles to the local administrators group on the device:
          The Azure AD global administrator role The Azure AD device administrator role
          The user performing the Azure AD join In the Azure portal, you can manage the device administrator role on the Devices page. To open the Devices
          page: 1. Sign in to your Azure portal as a global administrator or device administrator.
          2. On the left navbar, click Azure Active Directory.
          3. In the Manage section, click Devices.
          4. On the Devices page, click Device settings.
          5. To modify the device administrator role, configure Additional local administrators on Azure AD joined
          devices.
          References: https://docs.microsoft.com/en-us/azure/active-directory/devices/assign-local-admin

          NEW QUESTION 12
          You plan to migrate an on-premises Hyper-V environment to Azure by using Azure Site Recovery. The Hyper-V environment is managed by using Microsoft System Center Virtual Machine Manager (VMM).
          The Hyper-V environment contains the virtual machines in the following table.
          AZ-102 dumps exhibit
          Which virtual machine can be migrated by using Azure Site Recovery?

          • A. DC1
          • B. SQL1
          • C. CA1
          • D. FS1

          Answer: B

          Explanation: Up to 300 GB OS disk size is supported for generation 2 VMs and BitLocker is not enabled.

          NEW QUESTION 13
          Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
          After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
          You manage a virtual network named VNet1 that is hosted in the West US Azure region. VNet1 hosts two virtual machines named VM1 and VM2 that run Windows Server.
          You need to inspect all the network traffic from VM1 to VM2 for a period of three hours. Solution: From Azure Monitor, you create a metric on Network In and Network Out. Does this meet the goal?

          • A. Yes
          • B. No

          Answer: B

          Explanation: You should use Azure Network Watcher. References:
          https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-monitoring-overview Case Study: 5

          Mix Questions Set B (Implement advanced networking)

          NEW QUESTION 14
          You have an Azure subscription named Subscription1. Subscription1 contains the resource groups in the following table.
          AZ-102 dumps exhibit
          RG1 has a web app named WebApp1. WebApp1 is located in West Europe. You move WebApp1 to RG2. What is the effect of the move?

          • A. The App Service plan to WebApp1 moves to North Europ
          • B. Policy2 applies to WebApp1.
          • C. The App Service plan to WebApp1 moves to North Europ
          • D. Policy1 applies to WebApp1.
          • E. The App Service plan to WebApp1 remains to West Europ
          • F. Policy2 applies to WebApp1.
          • G. The App Service plan to WebApp1 remains to West Europ
          • H. Policy1 applies to WebApp1.

          Answer: C

          NEW QUESTION 15
          DRAG DROP
          You have an Azure subscription named Subscription1.
          You create an Azure Storage account named contosostorage, and then you create a file share named
          data.
          Which UNC path should you include in a script that references files from the data file share? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.
          AZ-102 dumps exhibit

            Answer:

            Explanation: Box 1: contosostorage The name of account
            Box 2: file.core.windows.net
            Box 3: data
            The name of the file share is data. Example:
            AZ-102 dumps exhibit
            References: https://docs.microsoft.com/en-us/azure/storage/files/storage-how-to-use-files-windows

            NEW QUESTION 16
            HOT SPOT
            You have an Azure subscription named Subscription1. Subscription1 contains the resources in the following table.
            AZ-102 dumps exhibit
            VNet1 is in RG1. VNet2 is in RG2. There is no connectivity between VNet1 and Vnet2.
            An administrator named Admin1 creates an Azure virtual machine named VM1 in RG1. VM1 uses a disk named Disk1 and connects to VNet1. Admin1 then installs a custom application in VM1.
            You need to move the custom application to Vnet2. The solution must minimize administrative effort.
            Which two actions should you perform? To answer, select the appropriate options in the answer area.
            NOTE: Each correct selection is worth one point.
            AZ-102 dumps exhibit

              Answer:

              Explanation: You can move a VM and its associated resources to another resource group using the portal. References: https://docs.microsoft.com/en-us/azure/virtual-machines/windows/move-vm

              Recommend!! Get the Full AZ-102 dumps in VCE and PDF From Surepassexam, Welcome to Download: https://www.surepassexam.com/AZ-102-exam-dumps.html (New 195 Q&As Version)