You have Azure Resource Manager templates that you use to deploy Azure virtual machines.You need to disable unused Windows features automatically as instances of the virtual machines are provisioned.What should you use?
Answer(s): B
The primary use case for the Azure Desired State Configuration (DSC) extension is to bootstrap a VM to the Azure Automation State Configuration (DSC) service.The service provides benefits that include ongoing management of the VM configuration and integration with other operational tools, such as Azure Monitoring.Using the extension to register VM's to the service provides a flexible solution that even works across Azure subscriptions.
https://docs.microsoft.com/en-us/azure/virtual-machines/extensions/dsc-overview
HOTSPOT (Drag and Drop is not supported) (Drag and Drop is not supported)You have an Azure subscription that contains the virtual machines shown in the following table.You create the Azure policies shown in the following table.You create the resource locks shown in the following table.For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Each correct selection is worth one point.Hot Area:
Answer(s): A
References:https://docs.microsoft.com/en-us/azure/governance/blueprints/concepts/resource-locking
HOTSPOT (Drag and Drop is not supported) (Drag and Drop is not supported)You have an Azure subscription that contains an Azure Active Directory (Azure AD) tenant named contoso.com. The tenant contains the users shown in the following table.You create a resource group named RG1.Which users can modify the permissions for RG1 and which users can create virtual networks in RG1? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.Hot Area:
Box 1: Only an owner can change permissions on resources.Box 2: A Contributor can create/modify/delete anything in the subscription but cannot change permissions.
SIMULATION You need to configure network connectivity between a virtual network named VNET1 and a virtual network named VNET2. The solution must ensure that virtual machines connected to VNET1 can communicate with virtual machines connected to VNET2.To complete this task, sign in to the Azure portal and modify the Azure resources.
You need to configure VNet Peering between the two networks. The questions states, ג€The solution must ensure that virtual machines connected to VNET1 can communicate with virtual machines connected to VNET2ג€. It doesn't say the VMs on VNET2 should be able to communicate with VMs on VNET1. Therefore, we need to configure the peering to allow just the one-way communication.1. In the Azure portal, type Virtual Networks in the search box, select Virtual Networks from the search results then select VNET1. Alternatively, browse toVirtual Networks in the left navigation pane.2. In the properties of VNET1, click on Peerings.3. In the Peerings blade, click Add to add a new peering.4. In the Name of the peering from VNET1 to remote virtual network box, enter a name such as VNET1-VNET2 (this is the name that the peering will be displayed as in VNET1)5. In the Virtual Network box, select VNET2.6. In the Name of the peering from remote virtual network to VNET1 box, enter a name such as VNET2-VNET1 (this is the name that the peering will be displayed as in VNET2).There is an option Allow virtual network access from VNET to remote virtual network. This should be left as Enabled.7. For the option Allow virtual network access from remote network to VNET1, click the slider button to Disabled.8. Click the OK button to save the changes.
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-manage-peering
SIMULATION You need to deploy an Azure firewall to a virtual network named VNET3.To complete this task, sign in to the Azure portal and modify the Azure resources.This task might take several minutes to complete. You can perform other tasks while the task completes.
To add an Azure firewall to a VNET, the VNET must first be configured with a subnet named AzureFirewallSubnet (if it doesn't already exist).Configure VNET3.1. In the Azure portal, type Virtual Networks in the search box, select Virtual Networks from the search results then select VNET3. Alternatively, browse toVirtual Networks in the left navigation pane.2. In the Overview section, note the Location (region) and Resource Group of the virtual network. We'll need these when we add the firewall.3. Click on Subnets.4. Click on + Subnet to add a new subnet.5. Enter AzureFirewallSubnet in the Name box. The subnet must be named AzureFirewallSubnet.6. Enter an appropriate IP range for the subnet in the Address range box.7. Click the OK button to create the subnet.Add the Azure Firewall.1. In the settings of VNET3 click on Firewall.2. Click the Click here to add a new firewall link.3. The Resource group will default to the VNET3 resource group. Leave this default.4. Enter a name for the firewall in the Name box.5. In the Region box, select the same region as VNET3.6. In the Public IP address box, select an available public IP address if one exists, or click Add new to add a new public IP address.7. Click the Review + create button.8. Review the settings and click the Create button to create the firewall.
https://docs.microsoft.com/en-us/azure/firewall/tutorial-firewall-deploy-portal
Post your Comments and Discuss Microsoft AZ-500 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AZ-500 content, but please register or login to continue.