You have five Azure virtual machines that run Windows Server 2016. The virtual machines are configured as web servers.
You have an Azure load balancer named LB1 that provides load balancing services for the virtual machines.
You need to ensure that visitors are serviced by the same web server for each request.
What should you configure?
A. Session persistence to None
B. a health probe
C. Session persistence to Client IP and protocol
D. Idle Time-out (minutes) to 20
Show Answer
Correct Answer: C
Explanation: To ensure that a visitor is consistently served by the same backend web server across multiple requests, Azure Load Balancer must use session persistence (also called sticky sessions). Configuring session persistence to **Client IP and protocol (2‑tuple)** ensures that requests from the same client IP using the same protocol are always directed to the same virtual machine.
Question 176
You deploy Azure virtual machines to three Azure regions
Each region contains a virtual network. Each virtual network contains multiple subnets peered in a full mesh topology.
Each subnet contains a network security group (NSG) that has defined rules.
A user reports that he cannot use port 33000 to connect from a virtual machine in one region to a virtual machine in another region.
Which two options can you use to diagnose the issue? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
A. Azure Virtual Network Manager
B. IP flow verify
C. Azure Monitor Network Insights
D. Connection troubleshoot
E. elective security rules
Show Answer
Correct Answer: B, D
Explanation: The issue is a connectivity problem on a specific port between VMs across peered virtual networks. **IP flow verify** allows you to test whether NSG rules permit or deny traffic to port 33000 between the source and destination, directly diagnosing rule-level blocking. **Connection troubleshoot** tests end-to-end connectivity between two VMs and identifies where traffic is failing (NSG, UDR, or platform issues). Both are Network Watcher diagnostic tools specifically designed for troubleshooting such connectivity issues.
Question 177
You have an Azure subscription that contains a virtual network named VNet1.
VNet1 uses two ExpressRoute circuits that connect to two separate on-premises datacenters.
You need to create a dashboard to display detailed metrics and a visual representation of the network topology.
What should you use?
A. Azure Monitor Network Insights
B. a Data Collection Rule (DCR)
C. Azure Virtual Network Watcher
D. Log Analytics
Show Answer
Correct Answer: A
Explanation: Azure Monitor Network Insights provides prebuilt dashboards with detailed metrics and topology visualization specifically for networking services, including ExpressRoute. It can display ExpressRoute circuit health, throughput, availability, and a visual topology of connections between virtual networks, gateways, and on‑premises locations. Network Watcher focuses more on diagnostics and traffic analysis rather than rich, centralized dashboards, while DCRs and Log Analytics are supporting components, not visualization solutions.
Question 178
HOTSPOT
-
You have an Azure subscription that contains the storage accounts shown in the following table.
You need to identify which storage accounts support lifecycle management, and which storage accounts support moving data to the Archive access tier.
Which storage accounts should you use? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Lifecycle management:
storage1, storage2, and storage3
The Archive access tier:
storage2 only
Explanation: Lifecycle management is supported for block and append blobs in General-purpose v2, Blob Storage, and BlockBlobStorage accounts, regardless of redundancy.
The Archive tier is supported only for LRS/GRS/RA-GRS accounts. It is not supported with ZRS or GZRS. Among the options, only storage2 (RA-GRS BlobStorage) supports Archive.
Question 179
You have an Azure subscription. The subscription contains a storage account named storage1 that has the lifecycle management rules shown in the following table.
On June 1, you store a blob named File1 in the Hot access tier of storage1.
What is the state of File1 on June 7?
A. stored in the Cool access tier
B. stored in the Archive access tier
C. stored in the Hot access tier
D. deleted
Show Answer
Correct Answer: D
Explanation: File1 is subject to multiple lifecycle actions that become eligible within the same timeframe. Azure Blob lifecycle management applies the least expensive action when more than one action applies to the same blob. Deletion is cheaper than moving to Archive or Cool tiers, so once the delete condition is met (by June 7), the blob is deleted rather than tiered.
Question 181
You have an Azure subscription named Subscription1.
You have 5 TB of data that you need to transfer to Subscription1.
You plan to use an Azure Import/Export job.
What can you use as the destination of the imported data?
A. Azure Blob Storage
B. Azure Data Lake Store
C. Azure SQL Database
D. a virtual machine
Show Answer
Correct Answer: A
Explanation: Azure Import/Export jobs support importing data into Azure Blob Storage and Azure File Storage only. Among the given options, Azure Blob Storage is the valid destination. Azure Data Lake Store, Azure SQL Database, and virtual machines are not supported as Import/Export targets.
Question 182
HOTSPOT
-
You have an Azure subscription that contains the storage account shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: 3
1
Explanation: A container supports a maximum of five stored access policies. Since two already exist, three additional policies can be created.
At the container scope, immutable blob storage supports up to two policies in total (one time-based retention and one legal hold). One time-based retention policy already exists, so only one additional policy can be created.
Question 184
HOTSPOT -
You plan to deploy the following Azure Resource Manager (ARM) template.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: No
No
No
Explanation: 1) The subnet name resolves to the value of the variable netname ("APP1"), not the literal string "netname".
2) The template does not restrict the load balancer to the same resource group as VNET1; resource groups are not specified in the resourceId reference.
3) sku is defined as a variable, not a parameter, so it cannot be provided at deployment time unless the template is changed.
Question 185
HOTSPOT
-
Your network contains an on-premises Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains the servers shown in the following table.
You plan to migrate contoso.com to Azure.
You create an Azure virtual network named VNET1 that has the following settings:
• Address space: 10.0.0.0/16
• Subnet:
o Name: Subnet1
o IPv4: 10.0.1.0/24
You need to move DC1 to VNET1. The solution must ensure that the member servers in contoso.com can resolve AD DS DNS names.
How should you configure DC1? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: IP address:
Obtain an IP address automatically
Name resolution:
Configure VNET1 to use a custom DNS server
Explanation: In Azure subnets, the first four and last IP addresses are reserved, so none of the provided static IP options are usable. Therefore, DC1 must obtain its IP automatically. Since DC1 is an AD DS domain controller and DNS server, VNET1 must be configured to use a custom DNS server so domain members can resolve AD DS DNS records.
Question 186
You need to ensure that VM1 can communicate with VM4. The solution must minimize administrative effort.
What should you do?
A. Create a user-defined route from VNET1 to VNET3.
B. Create an NSG and associate the NSG to VM1 and VM4.
C. Assign VM4 an IP address of 10.0.1.5/24.
D. Establish peering between VNET1 and VNET3.
Show Answer
Correct Answer: D
Explanation: VM1 and VM4 are deployed in different virtual networks (VNET1 and VNET3). Azure virtual networks are isolated by default, and connectivity is not transitive through other peerings. Establishing VNet peering directly between VNET1 and VNET3 enables private IP communication between the VMs over the Azure backbone with minimal configuration and administrative effort. Other options do not provide inter-VNet connectivity.
$19
Get all 558 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.
