AZ-303

AZ-303 practice questions, page 11 of 14, with answer review and explanations.

Question 51

Your network contains an on-premises Active Directory domain named contoso.com. The domain contains the users shown in the following table. You plan to install Azure AD Connect and enable SSO. You need to specify which user to use to enable SSO. The solution must use the principle of least privilege. Which user should you specify?

  1. User3
  2. User2
  3. User1
  4. User4

Question 52

You have an Azure subscription that contains the resource groups shown in the following table. RG1 contains the virtual machines shown in the following table. RG2 contains the virtual machines shown in the following table. All the virtual machines are configured to use premium disks and are accessible from the Internet. VM1 and VM2 are in an availability set named AVSET1. VM3 and VM4 are in the same availability zone. VM5 and VM6 are in different availability zones. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:

Question 53

A company plans to use third-party application software to perform complex data analysis processes. The software will use up to 500 identical virtual machines (VMs) based on an Azure Marketplace VM image. You need to design the infrastructure for the third-party application server. The solution must meet the following requirements: ✑ The number of VMs that are running at any given point in time must change when the user workload changes. ✑ When a new version of the application is available in Azure Marketplace it must be deployed without causing application downtime. ✑ Use VM scale sets. ✑ Minimize the need for ongoing maintenance. Which two technologies should you recommend? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

  1. single placement group
  2. single storage account
  3. managed disks
  4. autoscale

Question 54

You have a resource group named RG1 that contains the following: ✑ A virtual network that contains two subnets named Subnet1 and AzureFirewallSubnet ✑ An Azure Storage account named contososa1 ✑ An Azure firewall deployed to AzureFirewallSubnet You need to ensure that contososa1 is accessible from Subnet1 over the Azure backbone network. What should you do?

  1. Modify the Firewalls and virtual networks settings for contososa1.
  2. Create a stored access policy for contososa1.
  3. Implement a virtual network service endpoint.
  4. Remove the Azure firewall.

Question 55

You have an Azure subscription that contains 100 virtual machines. You have a set of PowerShell scripts that validate the virtual machine environment. You need to run the scripts whenever there is an operating system update on the virtual machines. The solution must minimize implementation time and recurring costs. Which three resources should you use to implement the scripts? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

  1. an alert action group
  2. an Azure Monitor query
  3. an Azure Automation runbook
  4. a virtual machine that has network access to the 100 virtual machines
  5. an alert rule