QUESTION: 440 Exam Topic: Deploy and manage Azure compute resources Questions

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure subscription that contains the virtual machines shown in the following table.

You deploy a load balancer that has the following configurations:
-Name: LB1
-Type: Internal
-SKU: Standard
-Virtual network: VNET1

You need to ensure that you can add VM1 and VM2 to the backend pool of LB1.

Solution: You create two Standard public IP addresses and associate a Standard SKU public IP address to the network interface of each virtual machine.

Does this meet the goal?

Answer(s): A

Explanation:

A Backend Pool configured by IP address has the following limitations: Standard load balancer only

Reference:

https://docs.microsoft.com/en-us/azure/load-balancer/backend-pool-management

Reveal Solution Next Question

QUESTION: 441 Exam Topic: Deploy and manage Azure compute resources Questions

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have a computer named Computer1 that has a point-to-site VPN connection to an Azure virtual network named VNet1. The point-to-site connection uses a self-signed certificate.

From Azure, you download and install the VPN client configuration package on a computer named Computer2. You need to ensure that you can establish a point-to-site VPN connection to VNet1 from Computer2.

Solution: You export the client certificate from Computer1 and install the certificate on Computer2. Does this meet the goal?

Answer(s): A

Explanation:

Each client computer that connects to a VNet using Point-to-Site must have a client certificate installed. You generate a client certificate from the self-signed root certificate, and then export and install the client certificate. If the client certificate is not installed, authentication fails.

Reference:

https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-certificates-point-to-site

Reveal Solution Next Question

QUESTION: 442 Exam Topic: Deploy and manage Azure compute resources Questions

You have an Azure virtual machine named VM1.
The network interface for VM1 is configured as shown in the exhibit. (Click the Exhibit tab.)

You deploy a web server on VM1, and then create a secure website that is accessible by using the HTTPS protocol. VM1 is used as a web server only.

You need to ensure that users can connect to the website from the Internet. What should you do?

Modify the protocol of Rule4
Delete Rule1
For Rule5, change the Action to Allow and change the priority to 401
Create a new inbound rule that allows TCP protocol 443 and configure the rule to have a priority of 501.

Answer(s): C

Explanation:

HTTPS uses port 443.
Rule2, with priority 500, denies HTTPS traffic.
Rule5, with priority changed from 2000 to 401, would allow HTTPS traffic.

Note: Priority is a number between 100 and 4096. Rules are processed in priority order, with lower numbers processed before higher numbers, because lower numbers have higher priority. Once traffic matches a rule, processing stops. As a result, any rules that exist with lower priorities (higher numbers) that have the same attributes as rules with higher priorities are not processed.

Note:
There are several versions of this question in the exam. The question has two possible correct answers:
1. Change the priority of Rule3 to 450.
2. For Rule5, change the Action to Allow and change the priority to 401.

Other incorrect answer options you may see on the exam include the following:
-Modify the action of Rule1.
-Change the priority of Rule6 to 100.
-For Rule4, change the protocol from UDP to Any.

Reference:

https://docs.microsoft.com/en-us/azure/virtual-network/network-security-groups-overview

Reveal Solution Next Question

QUESTION: 443 Exam Topic: Deploy and manage Azure compute resources Questions

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure subscription that contains 10 virtual networks. The virtual networks are hosted in separate resource groups.

Another administrator plans to create several network security groups (NSGs) in the subscription.
You need to ensure that when an NSG is created, it automatically blocks TCP port 8080 between the virtual networks.

Solution: From the Resource providers blade, you unregister the Microsoft.ClassicNetwork provider. Does this meet the goal?

Answer(s): B

Explanation:

You should use a policy definition.
Resource policy definition used by Azure Policy enables you to establish conventions for resources in your organization by describing when the policy is enforced and what effect to take. By defining conventions, you can control costs and more easily manage your resources.

Reference:

https://docs.microsoft.com/en-us/azure/azure-policy/policy-definition

Reveal Solution Next Question

Free AZ-104 Exam Braindumps (page: 41)

QUESTION: 440 Exam Topic: Deploy and manage Azure compute resources Questions

Explanation:

Reference:

QUESTION: 441 Exam Topic: Deploy and manage Azure compute resources Questions

Explanation:

Reference:

QUESTION: 442 Exam Topic: Deploy and manage Azure compute resources Questions

Explanation:

Reference:

QUESTION: 443 Exam Topic: Deploy and manage Azure compute resources Questions

Explanation:

Reference: