You need to create an Azure Storage account named storage1. The solution must meet the following requirements:
• Support Azure Data Lake Storage.
• Minimize costs for infrequently accessed data.
• Automatically replicate data to a secondary Azure region.
Which three options should you configure for storage1? Each correct answer presents part of the solution.
NOTE: Each correct answer is worth one point.
A. zone-redundant storage (ZRS)
B. the Cool access tire
C. geo-redundant storage (GRS)
D. the Hot access tier
E. hierarchical namespace
Show Answer
Correct Answer: B, C, E
Explanation: Azure Data Lake Storage requires a hierarchical namespace to be enabled. To minimize storage costs for infrequently accessed data, the Cool access tier is appropriate. To automatically replicate data to a secondary Azure region, geo-redundant storage (GRS) must be configured. Zone-redundant storage does not provide cross-region replication, and the Hot tier is optimized for frequently accessed data.
Question 86
You have an Azure subscription.
You plan to deploy the resources shown in the following table.
You need to create a single Azure Resource Manager (ARM) template that will be used to deploy the resources.
Which resource should be added to the dependsOn section for VM1?
A. VNET1
B. NIC1
C. IP1
D. NSG1
Show Answer
Correct Answer: B
Explanation: In an ARM template, a virtual machine must depend on the network interface resource because the VM definition explicitly references the NIC ID. The NIC, in turn, depends on the virtual network, subnet, public IP, and NSG as needed. Therefore, the correct and most direct dependency to include in VM1's dependsOn section is NIC1.
Question 87
HOTSPOT -
You purchase a new Azure subscription.
You create an Azure Resource Manager (ARM) template named deploy.json as shown in the following exhibit.
You connect to the subscription and run the following command.
New-AzDeployment –Location westus –TemplateFile “deploy.json”
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: No
No
Yes
Explanation: The template creates four resource groups: two from the copy loop (RGS0, RGS1), one named ResGrp8, and one named RGroup4 (length of obj1 is 4). Therefore, not three are created and no RGroup5 exists. All resource group locations resolve to East US; the -Location westus parameter applies only to the deployment metadata, not the resources.
Question 88
You have an Azure subscription. The subscription contains 10 virtual machines that run Windows Server. Each virtual machine hosts a website in IIS and has the Azure Monitor Agent installed.
You need to collect the IIS logs from each virtual machine and store them in a Log Analytics workspace.
What should you configure first?
A. a data collection endpoint
B. an Azure Monitor Private Link Scope (AMPLS)
C. Diagnostic settings
D. VM insights
E. a private endpoint
Show Answer
Correct Answer: A
Explanation: To collect IIS logs from Windows VMs using the Azure Monitor Agent, you must use the modern Azure Monitor pipeline based on Data Collection Rules (DCRs). IIS logs are text-based guest OS logs, and these data sources require a Data Collection Endpoint (DCE) to route data before a DCR can be created and associated with the VMs. Diagnostic settings apply mainly to platform logs of Azure resources, not guest-level IIS logs collected via AMA. Therefore, the first thing to configure is a data collection endpoint.
Question 89
You have an Azure subscription that has Traffic Analytics configured.
You deploy a new virtual machine named VM1 that has the following settings:
• Region: East US
• Virtual network: VNet1
• NIC network security group: NSG1
You need to monitor VM1 traffic by using Traffic Analytics.
Which settings should you configure?
A. Diagnostic settings for VM1
B. NSG flow logs for NSG1
C. Diagnostic settings for NSG1
D. Insights for VM1
Show Answer
Correct Answer: B
Explanation: Traffic Analytics relies on NSG flow logs as its data source. To monitor VM1 traffic, you must enable NSG flow logs on the network security group associated with the VM’s NIC (NSG1). Diagnostic settings or VM insights alone do not provide the required flow data.
Question 90
You have an Azure subscription that contains a virtual machine named VM1.
You have an on-premises datacenter that contains a domain controller named DC1. ExpressRoute is used to connect the on-premises datacenter to Azure.
You need to use Connection Monitor to identify network latency between VM1 and DC1.
What should you install on DC1?
A. the Azure Connected Machine agent for Azure Arc-enabled servers
B. the Azure Network Watcher Agent virtual machine extension
C. the Log Analytics agent
D. an Azure Monitor agent extension
Show Answer
Correct Answer: A
Explanation: To use Connection Monitor with an on-premises machine, the machine must first be onboarded to Azure as a hybrid resource. This is done by installing the Azure Connected Machine agent, which enables Azure Arc–enabled servers. Once Arc-enabled, additional monitoring components like the Azure Monitor agent can be deployed, but Arc onboarding is the required installation for an on-premises server to participate in Connection Monitor.
Question 91
You have an Azure subscription. The subscription contains virtual machines that run Windows Server.
You have a data collection rule (DCR) named Rule1.
You plan to use the Azure Monitor Agent to collect events from Windows System event logs.
You only need to collect system events that have an ID of 1001.
Which type of query should you use for the data source in Rule1?
A. SQL
B. XPath
C. KQL
Show Answer
Correct Answer: B
Explanation: In an Azure Monitor Data Collection Rule, filtering Windows Event Log data at the data source uses XPath queries. XPath is supported by the Azure Monitor Agent to select specific Windows events (such as a specific Event ID) before ingestion. KQL is used only after data is ingested into Log Analytics, and SQL is not applicable to Windows Event Log collection.
Question 92
HOTSPOT
-
You have an Azure subscription that contains the vaults shown in the following table.
You deploy the virtual machines shown in the following table.
You have the backup policies shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: VM1 can be backed up by using Policy1: Yes
VM2 can be backed up by using Policy3: No
VM2 can be backed up by using Policy2: No
Explanation: Policy1 is a standard VM backup policy in an existing Recovery Services vault, which supports Windows VMs. Policy3 is in an Azure Backup vault, which does not support Azure VM backups. Policy2 is an enhanced policy required for Trusted Launch VMs, but it is associated with Recovery2, a vault that is not listed as existing, so it cannot be used.
Question 93
You have an Azure subscription that contains an Azure Stream Analytics job named Job1.
You need to monitor input events for Job1 to identify the number of events that were NOT processed.
Which metric should you use?
A. Out-of-Order Events
B. Output Events
C. Late Input Events
D. Backlogged Input Events
Show Answer
Correct Answer: D
Explanation: To identify input events that were not processed by an Azure Stream Analytics job, you should monitor the Backlogged Input Events metric. This metric shows the number of input events waiting to be processed, indicating that the job cannot keep up with the incoming event rate. Other metrics either describe processed output or events affected by timing policies rather than unprocessed backlog.
Question 94
HOTSPOT -
You have an Azure subscription that contains the virtual networks shown in the following table.
The subscription contains the subnets shown in the following table.
The subscription contains the storage accounts shown in the following table.
You create a service endpoint policy named Policy1 in the South Central US Azure region to allow connectivity to all the storage accounts in the subscription.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Yes
No
No
Explanation: 1) Service endpoint policies can be applied only to subnets in the same region as the policy. Subnet3 is in South Central US, matching Policy1.
2) Subnet2 has a Storage service endpoint but no policy applied; by default it can access all storage accounts, not only storage1 and storage2.
3) Policy1 allows connectivity to all storage accounts in the subscription, so access from VNet3 is not limited to only storage2.
$19
Get all 558 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.
