AZ-303

AZ-303 practice questions, page 5 of 14, with answer review and explanations.

Question 21

You are designing a solution to secure a company's Azure resources. The environment hosts 10 teams. Each team manages a project and has a project manager, a virtual machine (VM) operator, developers, and contractors. Project managers must be able to manage everything except access and authentication for users. VM operators must be able to manage VMs, but not the virtual network or storage account to which they are connected. Developers and contractors must be able to manage storage accounts. You need to recommend roles for each member. What should you recommend? To answer, drag the appropriate roles to the correct employee types. Each role may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point. Select and Place:

Question 22

You have an Azure virtual machine named VM1 and an Azure Active Directory (Azure AD) tenant named adatum.com. VM1 has the following settings: ✑ IP address: 10.10.0.10 ✑ System-assigned managed identity: On You need to create a script that will run from within VM1 to retrieve the authentication token of VM1. Which address should you use in the script?

  1. vm1.adatum.com.onmicrosoft.com
  2. 169.254.169.254
  3. 10.10.0.10
  4. vm1.adatum.com

Question 23

Your company has a virtualization environment that contains the virtualization hosts shown in the following table. The virtual machines are configured as shown in the following table. All the virtual machines use basic disks. VM1 is protected by using BitLocker Drive Encryption (BitLocker). You plan to migrate the virtual machines to Azure by using Azure Site Recovery. You need to identify which virtual machines can be migrated. Which virtual machines should you identify for each server? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

Question 24

You are designing an Azure solution. The solution must meet the following requirements: ✑ Distribute traffic to different pools of dedicated virtual machines (VMs) based on rules. ✑ Provide SSL offloading capabilities. You need to recommend a solution to distribute network traffic. Which technology should you recommend?

  1. Azure Application Gateway
  2. Azure Load Balancer
  3. Azure Traffic Manager
  4. server-level firewall rules

Question 25

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You manage an Active Directory domain named contoso.local. You install Azure AD Connect and connect to an Azure Active Directory (Azure AD) tenant named contoso.com without syncing any accounts. You need to ensure that only users who have a UPN suffix of contoso.com in the contoso.local domain sync to Azure AD. Solution: You use Azure AD Connect to customize the synchronization options. Does this meet the goal?

  1. Yes
  2. No