AZ-103 Free Practice Test

You need to move the blueprint files to Azure. What should you do?

1. A. Generate a shared access signature (SAS). Map a drive, and then copy the files by using File Explorer.
2. B. Use the Azure Import/Export service.
3. C. Generate an access ke
4. D. Map a drive, and then copy the files by using File Explorer.
5. E. Use Azure Storage Explorer to copy the files.

Correct Answer: D
Azure Storage Explorer is a free tool from Microsoft that allows you to work with Azure Storage data on Windows, macOS, and Linux. You can use it to upload and download data from Azure blob storage.
Scenario:
Planned Changes include: move the existing product blueprint files to Azure Blob storage. Technical Requirements include: Copy the blueprint files to Azure over the Internet.
References: https://docs.microsoft.com/en-us/azure/machine-learning/team-data-science- process/move-data-to-azure-blob-using-azure-storage-explorer

You need to define a custom domain name for Azure AD to support the planned infrastructure. Which domain name should you use?

1. A. Join the client computers in the Miami office to Azure AD.
2. B. Add http://autologon.microsoftazuread-sso.com to the intranet zone of each client computer in the Miami office.
3. C. Allow inbound TCP port 8080 to the domain controllers in the Miami office.
4. D. Install Azure AD Connect on a server in the Miami office and enable Pass-through Authentication
5. E. Install the Active Directory Federation Services (AD FS) role on a domain controller in the Miami office.

Correct Answer: BD
Every Azure AD directory comes with an initial domain name in the form of domainname.onmicrosoft.com. The initial domain name cannot be changed or deleted, but you can add your corporate domain name to Azure AD as well. For example, your organization probably has other domain names used to do business and users who sign in using your corporate domain name. Adding custom domain names to Azure AD allows you to assign user names in the directory that are familiar to your users, such as ‘alice@contoso.com.’ instead of \'alice@domain name.onmicrosoft.com\'.
Scenario:
Network Infrastructure: Each office has a local data center that contains all the servers for that office. Each office has a dedicated connection to the Internet.
Humongous Insurance has a single-domain Active Directory forest named humongousinsurance.com Planned Azure AD Infrastructure: The on-premises Active Directory domain will be synchronized to Azure AD.
References: https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/add-custom-
domain

You are planning the move of App1 to Azure. You create a network security group (NSG).
You need to recommend a solution to provide users with access to App1. What should you recommend?

1. A. Create an outgoing security rule for port 443 from the Interne
2. B. Associate the NSG to all the subnets.
3. C. Create an incoming security rule for port 443 from the Interne
4. D. Associate the NSG to all the subnets.
5. E. Create an incoming security rule for port 443 from the Interne
6. F. Associate the NSG to the subnet thatcontains the web servers.
7. G. Create an outgoing security rule for port 443 from the Interne
8. H. Associate the NSG to the subnet thatcontains the web servers.

Correct Answer: C
As App1 is public-facing we need an incoming security rule, related to the access of the web servers. Scenario: You have a public-facing application named App1. App1 is comprised of the following three tiers: a SQL database, a web front end, and a processing middle tier.
Each tier is comprised of five virtual machines. Users access the web front end by using HTTPS only.

HOTSPOT
You have an Azure subscription.
You need to implement a custom policy that meet the following requirements:
*Ensures that each new resource group in the subscription has a tag named organization set to a value of Contoso.
*Ensures that resource group can be created from the Azure portal.
*Ensures that compliance reports in the Azure portal are accurate.
How should you complete the policy? To answer, select the appropriate options in the answers are a.

Solution:
<>

Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

DRAG DROP
You have an on-premises file server named Server1 that runs Windows Server 2016. You have an Azure subscription that contains an Azure file share.
You deploy an Azure File Sync Storage Sync Service, and you create a sync group. You need to synchronize files from Server1 to Azure.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Solution:
Step 1: Install the Azure File Sync agent on Server1
The Azure File Sync agent is a downloadable package that enables Windows Server to be synced with an Azure file share
Step 2: Register Server1.
Register Windows Server with Storage Sync Service
Registering your Windows Server with a Storage Sync Service establishes a trust relationship between your server (or cluster) and the Storage Sync Service.
Step 3: Add a server endpoint
Create a sync group and a cloud endpoint.
A sync group defines the sync topology for a set of files. Endpoints within a sync group are kept in sync with each other. A sync group must contain one cloud endpoint, which represents an Azure file share and one or more server endpoints. A server endpoint represents a path on registered server. References: https://docs.microsoft.com/en-us/azure/storage/files/storage-sync-files-deployment-guide

Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A