QUESTION: 416 Exam Topic: Deploy and manage Azure compute resources Questions

You have an Azure subscription that contains the resources in the following table.

VM1 and VM2 are deployed from the same template and host line-of-business applications. You configure the network security group (NSG) shown in the exhibit. (Click the Exhibit tab.)

You need to prevent users of VM1 and VM2 from accessing websites on the Internet over TCP port 80. What should you do?

Disassociate the NSG from a network interface
Change the Port_80 inbound security rule.
Associate the NSG to Subnet1.
Change the DenyWebSites outbound security rule.

Answer(s): C

Explanation:

You can associate or dissociate a network security group from a network interface or subnet.
The NSG has the appropriate rule to block users from accessing the Internet. We just need to associate it with Subnet1.

Reference:

https://docs.microsoft.com/en-us/azure/virtual-network/manage-network-security-group

Reveal Solution Next Question

QUESTION: 417 Exam Topic: Deploy and manage Azure compute resources Questions

You have two subscriptions named Subscription1 and Subscription2. Each subscription is associated to a different Azure AD tenant.

Subscription1 contains a virtual network named VNet1. VNet1 contains an Azure virtual machine named VM1 and has an IP address space of 10.0.0.0/16.

Subscription2 contains a virtual network named VNet2. VNet2 contains an Azure virtual machine named VM2 and has an IP address space of 10.10.0.0/24.

You need to connect VNet1 to VNet2. What should you do first?

Move VM1 to Subscription2.
Move VNet1 to Subscription2.
Modify the IP address space of VNet2.
Provision virtual network gateways.

Answer(s): D

Explanation:

The virtual networks can be in the same or different regions, and from the same or different subscriptions. When connecting VNets from different subscriptions, the subscriptions do not need to be associated with the same Active Directory tenant.

Configuring a VNet-to-VNet connection is a good way to easily connect VNets. Connecting a virtual network to another virtual network using the VNet-to-VNet connection type (VNet2VNet) is similar to creating a Site-to-Site IPsec connection to an on-premises location. Both connectivity types use a VPN gateway to provide a secure tunnel using IPsec/IKE, and both function the same way when communicating.

The local network gateway for each VNet treats the other VNet as a local site. This lets you specify additional address space for the local network gateway in order to route traffic.

Reference:

https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-vnet-vnet-resource-manager-portal

Reveal Solution Next Question

QUESTION: 418 Exam Topic: Deploy and manage Azure compute resources Questions

You plan to create an Azure virtual machine named VM1 that will be configured as shown in the following exhibit.

The planned disk configurations for VM1 are shown in the following exhibit.

You need to ensure that VM1 can be created in an Availability Zone.
Which two settings should you modify? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

Use managed disks
OS disk type
Availability options
Size
Image

Answer(s): A,C

Explanation:

A: Your VMs should use managed disks if you want to move them to an Availability Zone by using Site Recovery.

C: When you create a VM for an Availability Zone, Under Settings > High availability, select one of the numbered zones from the Availability zone dropdown.

Reference:

https://docs.microsoft.com/en-us/azure/site-recovery/move-azure-vms-avset-azone https://docs.microsoft.com/en-us/azure/virtual-machines/windows/create-portal-availability-zone

Reveal Solution Next Question

QUESTION: 419 Exam Topic: Deploy and manage Azure compute resources Questions

HOTSPOT (Drag and Drop is not supported)
You have an Azure subscription that contains the resources shown in the following table.

VMSS1 is set to VM (virtual machines) orchestration mode.
You need to deploy a new Azure virtual machine named VM1, and then add VM1 to VMSS1.

Which resource group and location should you use to deploy VM1? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.
Hot Area:

See Explanation section for answer.

Answer(s): A

Explanation:

Box 1: RG1, RG2, or RG3
The resource group stores metadata about the resources. When you specify a location for the resource group, you're specifying where that metadata is stored.

Box 2: West US only
Note: Virtual machine scale sets will support 2 distinct orchestration modes:

ScaleSetVM – Virtual machine instances added to the scale set are based on the scale set configuration model. The virtual machine instance lifecycle - creation, update, deletion - is managed by the scale set.
VM (virtual machines) – Virtual machines created outside of the scale set can be explicitly added to the scaleset.

Reference:

https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/overview

Reveal Solution Next Question

Free AZ-104 Exam Braindumps (page: 35)

QUESTION: 416 Exam Topic: Deploy and manage Azure compute resources Questions

Explanation:

Reference:

QUESTION: 417 Exam Topic: Deploy and manage Azure compute resources Questions

Explanation:

Reference:

QUESTION: 418 Exam Topic: Deploy and manage Azure compute resources Questions

Explanation:

Reference:

QUESTION: 419 Exam Topic: Deploy and manage Azure compute resources Questions

Explanation:

Reference: