You have an Azure subscription named Sub1. Sub1 contains a virtual network named VNet1 that contains one subnet named Subnet1.Subnet1 contains an Azure virtual machine named VM1 that runs Ubuntu Server 18.04.You create a service endpoint for Microsoft.Storage in Subnet1.You need to ensure that when you deploy Docker containers to VM1, the containers can access Azure Storage resources by using the service endpoint.What should you do on VM1 before you deploy the container?
Answer(s): C
The Azure Virtual Network container network interface (CNI) plug-in installs in an Azure Virtual Machine. The plug-in supports both Linux and Windows platform.The plug-in assigns IP addresses from a virtual network to containers brought up in the virtual machine, attaching them to the virtual network, and connecting them directly to other containers and virtual network resources. The plug-in doesn't rely on overlay networks, or routes, for connectivity, and provides the same performance as virtual machines.The following picture shows how the plug-in provides Azure Virtual Network capabilities to Pods:References:https://docs.microsoft.com/en-us/azure/virtual-network/container-networking-overview
References:https://docs.microsoft.com/en-us/azure/virtual-network/container-networking-overview
You have Azure Resource Manager templates that you use to deploy Azure virtual machines.You need to disable unused Windows features automatically as instances of the virtual machines are provisioned.What should you use?
Answer(s): B
The primary use case for the Azure Desired State Configuration (DSC) extension is to bootstrap a VM to the Azure Automation State Configuration (DSC) service.The service provides benefits that include ongoing management of the VM configuration and integration with other operational tools, such as Azure Monitoring.Using the extension to register VM's to the service provides a flexible solution that even works across Azure subscriptions.
https://docs.microsoft.com/en-us/azure/virtual-machines/extensions/dsc-overview
DRAG DROP (Drag and Drop is not supported) (Drag and Drop is not supported)You have an Azure subscription that contains the virtual networks shown in the following table.The Azure virtual machines on SpokeVNetSubnet0 can communicate with the computers on the on-premises network.You plan to deploy an Azure firewall to HubVNet.You create the following two routing tables:-RT1: Includes a user-defined route that points to the private IP address of the Azure firewall as a next hop address-RT2: Disables BGP route propagation and defines the private IP address of the Azure firewall as the default gatewayYou need to ensure that traffic between SpokeVNetSubnet0 and the on-premises network flows through the Azure firewall.To which subnet should you associate each route table? To answer, drag the appropriate subnets to the correct route tables. Each subnet may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.NOTE: Each correct selection is worth one point.Select and Place:
Answer(s): A
https://docs.microsoft.com/en-us/azure/firewall/tutorial-hybrid-portal#create-the-routes
HOTSPOT (Drag and Drop is not supported) (Drag and Drop is not supported)You have an Azure subscription. The subscription contains Azure virtual machines that run Windows Server 2016.You need to implement a policy to ensure that each virtual machine has a custom antimalware virtual machine extension installed.How should you complete the policy? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.Hot Area:
Box 1: DeployIfNotExists DeployIfNotExists executes a template deployment when the condition is met.Box 2: Template The details property of the DeployIfNotExists effects has all the subproperties that define the related resources to match and the template deployment to execute.Deployment [required]This property should include the full template deployment as it would be passed to the Microsoft.Resources/deploymentReferences:https://docs.microsoft.com/en-us/azure/governance/policy/concepts/effects
References:https://docs.microsoft.com/en-us/azure/governance/policy/concepts/effects
You are configuring an Azure Kubernetes Service (AKS) cluster that will connect to an Azure Container Registry.You need to use the auto-generated service principal to authenticate to the Azure Container Registry.What should you create?
When you create an AKS cluster, Azure also creates a service principal to support cluster operability with other Azure resources. You can use this auto-generated service principal for authentication with an ACR registry. To do so, you need to create an Azure AD role assignment that grants the cluster's service principal access to the container registry.References:https://docs.microsoft.com/bs-latn-ba/azure/container-registry/container-registry-auth-aks
References:https://docs.microsoft.com/bs-latn-ba/azure/container-registry/container-registry-auth-aks
Post your Comments and Discuss Microsoft AZ-500 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AZ-500 content, but please register or login to continue.