You have five Azure virtual machines that run Windows Server 2016. The virtual machines are configured as web servers.
You have an Azure load balancer named LB1 that provides load balancing services for the virtual machines.
You need to ensure that visitors are serviced by the same web server for each request.
What should you configure?
A. Floating IP (direct server return) to Disabled
B. Session persistence to Client IP
C. Protocol to UDP
D. Idle Time-out (minutes) to 20
Show Answer
Correct Answer: B
Explanation: To ensure a client is consistently served by the same backend web server (session affinity/sticky sessions) behind an Azure Load Balancer, configure Session persistence to Client IP. This distribution mode hashes on the client IP so requests from the same client are directed to the same backend instance. The other options do not provide client affinity: Floating IP is for direct server return scenarios, Protocol to UDP is unrelated, and Idle Time-out only controls connection timeout.
Question 190
You have an Azure subscription that contains a storage account. The account stores website data.
You need to ensure that inbound user traffic uses the Microsoft point-of-presence (POP) closest to the user's location.
What should you configure?
A. private endpoints
B. Azure Firewall rules
C. Routing preference
D. load balancing
Show Answer
Correct Answer: C
Explanation: Azure Storage network routing preference controls how traffic reaches the storage account's public endpoint. By default, the Microsoft global network routes clients through the Microsoft point-of-presence (POP) closest to the user, which is the feature directly related to POP selection. Private endpoints, Azure Firewall rules, and load balancing do not configure Azure Storage network routing behavior to the nearest Microsoft POP.
Question 191
You have an Azure subscription that contains the virtual networks shown in the following table.
You need to deploy an Azure firewall named AF1 to RG1 in the West US Azure region.
To which virtual networks can you deploy AF1?
A. VNET1, VNET2, VNET3, and VNET4
B. VNET1 and VNET2 only
C. VNET1 only
D. VNET1, VNET2, and VNET4 only
E. VNET1 and VNET4 only
Show Answer
Correct Answer: C
Explanation: Azure Firewall must be deployed into a virtual network in the same Azure region, and the firewall resource and its virtual network must be in the same resource group. Since AF1 must be deployed to RG1 in the West US region, only the virtual network that is both in West US and in RG1 is eligible: VNET1.
Question 192
You have an on-premises network.
You have an Azure subscription that contains three virtual networks named VNET1. VNET2. and VNET3. The virtual networks are peered and connected to the on-premises network. The subscription contains the virtual machines shown in the following table.
You need to monitor connectivity between the virtual machines and the on-premises network by using Connection Monitor.
What is the minimum number of connection monitors you should deploy?
A. 1
B. 2
C. 3
D. 4
Show Answer
Correct Answer: A
Explanation: A single Connection Monitor (current version) can include multiple source endpoints and destination endpoints, including hybrid/on-premises connectivity, and supports cross-region monitoring. Therefore, the minimum number of connection monitors needed to monitor connectivity between the Azure VMs and the on-premises network is one.
Sources:
https://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-peering-overview#gateways-and-on-premises-connectivity
Question 193
You have an Azure subscription that contains the resources shown in the following table.
You need to perform the tasks shown in the following table.
Which tasks can you perform by using Azure Storage Explorer?
A. Task1 and Task3 only
B. Task1, Task2, and Task3 only
C. Task1, Task3, and Task4 only
D. Task2, Task3, and Task4 only
E. Task1, Task2, Task3, and Task4
Show Answer
Correct Answer: D
Explanation: Azure Storage Explorer is used to manage existing storage accounts and their data. It cannot create a new storage account, but it can create and manage storage resources within an existing account (such as file shares, blobs, queues, and tables) and perform management operations on supported storage objects. Therefore, the only task that cannot be performed is creating a storage account, making Task2, Task3, and Task4 the correct combination.
Question 194
HOTSPOT
-
You have an Azure subscription named Sub1 that contains the resources shown in the following table.
Sub1 contains the following alert rule:
• Name: Alert1
• Scope: All resource groups in Sub1
o Include all future resources
• Condition: All administrative operations
• Actions: Action1
Sub1 contains the following alert processing rule:
• Name: Rule1
• Scope: Sub1
• Rule type: Suppress notifications
• Apply the rule: On a specific time
o Start: August 10, 2022
o End: August 13, 2022
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Yes
No
Yes
Explanation: Administrative activity alerts still fire and are listed. The alert processing rule suppresses notifications only during Aug 10–13, so no email is sent on Aug 12. Adding a tag is an administrative operation, and on Aug 15 the suppression window has ended, so the action group sends the email.
Question 195
HOTSPOT
-
You have an Azure subscription that contains a resource group named RG1.
You plan to use an Azure Resource Manager (ARM) template named template1 to deploy resources. The solution must meet the following requirements:
• Deploy new resources to RG1.
• Remove all the existing resources from RG1 before deploying the new resources.
How should you complete the command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: -ResourceGroupName
Complete
Explanation: Use -ResourceGroupName to target RG1. Use deployment mode Complete so resources in the resource group that are not defined in the ARM template are removed before/as part of the deployment.
Question 197
You have an Azure subscription that contains 20 virtual machines, a network security group (NSG) named NSG1, and two virtual networks named VNET1 and VNET2 that are peered.
You plan to deploy an Azure Bastion Basic SKU host named Bastion1 to VNET1.
You need to configure NSG1 to allow inbound access to the virtual machines via Bastion1.
Which port should you configure for the inbound security rule?
A. 22
B. 443
C. 389
D. 8080
Show Answer
Correct Answer: B
Explanation: The exam wording asks which port to configure for the inbound security rule to allow access via Azure Bastion. Azure Bastion client connections use HTTPS/TLS over port 443. Although Bastion connects onward to VMs using RDP (3389) or SSH (22), the question does not specify the VM OS and offers only 22 (not 3389). In Microsoft exam context, the expected answer is 443.
Question 198
DRAG DROP
-
You have an Azure subscription that contains a virtual machine named VM1.
You need to back up VM1. The solution must ensure that backups are stored across three availability zones in the primary region.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Show Answer
Correct Answer: Create a Recovery Services vault.
Set Replication to Zone-redundant storage (ZRS).
For VM1, create a backup policy and configure the backup.
Explanation: A Recovery Services vault is required first. The vault storage redundancy must be set to ZRS before protecting items to ensure backups are stored across three availability zones. Then enable backup for the VM using a backup policy.
Question 199
HOTSPOT
-
You have an Azure subscription that contains a storage account named storage1. The storage1 account contains a container named container1.
You need to create a lifecycle management rule for storage1 that will automatically move the blobs in container1 to the lowest-cost tier after 90 days.
How should you complete the rule? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: tierToArchive
prefixMatch
Explanation: Archive is the lowest-cost access tier for supported blobs. Use prefixMatch with "container1/" to scope the lifecycle rule to blobs in that container.
$19
Get all 555 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.
