You have five Azure virtual machines that run Windows Server 2016. The virtual machines are configured as web servers.
You have an Azure load balancer named LB1 that provides load balancing services for the virtual machines.
You need to ensure that visitors are serviced by the same web server for each request.
What should you configure?
A. Session persistence to None
B. a health probe
C. Session persistence to Client IP
D. Idle Time-out (minutes) to 20
Show Answer
Correct Answer: C
Explanation: To ensure visitors are serviced by the same web server for each request, Azure Load Balancer must use session persistence (also called affinity). Configuring session persistence to Client IP ensures that successive requests from the same client IP address are consistently directed to the same backend virtual machine. The other options do not control request affinity.
Question 189
You have two Azure virtual machines named VM1 and VM2 that run Windows Server. The virtual machines are in a subnet named Subnet1. Subnet1 is in a virtual network named VNet1.
You need to prevent VM1 from accessing VM2 on port 3389.
What should you do?
A. Create a network security group (NSG) that has an outbound security rule to deny destination port 3389 and apply the NSG to the network interface of VM1.
B. Configure Azure Bastion in VNet1.
C. Create a network security group (NSG) that has an outbound security rule to deny source port 3389 and apply the NSG to Subnet1.
D. Create a network security group (NSG) that has an inbound security rule to deny source port 3389 and apply the NSG to Subnet1.
Show Answer
Correct Answer: A
Explanation: To stop VM1 from initiating RDP connections to VM2, you must block outbound traffic from VM1 to destination port 3389. An NSG outbound rule denying destination port 3389 and applied directly to VM1’s network interface ensures only VM1 is affected. Options C and D incorrectly use source port 3389, which is not how RDP connections are initiated, and applying them at the subnet would affect more resources than required. Azure Bastion does not control VM-to-VM traffic.
Question 190
You have an Azure subscription that contains the resources shown in the following table.
You configure Azure Site Recovery to replicate VM1 between the US East and West US regions.
You perform a test failover of VM1 and specify VNET2 as the target virtual network.
When the test version of VM1 is created, to which subnet will the virtual machine be connected?
A. TestSubnet1
B. DemoSubnet1
C. RecoverySubnetA
D. RecoverySubnetB
Show Answer
Correct Answer: B
Explanation: In Azure Site Recovery, the target subnet during test failover is selected by subnet name, not by IP range. If a subnet with the same name as the source subnet exists in the target VNET, it is used. If no matching name exists, ASR selects the first subnet in alphabetical order in the target VNET. VM1’s source subnet name does not exist in VNET2, so ASR chooses the alphabetically first subnet, which is DemoSubnet1.
Question 192
You have five Azure virtual machines that run Windows Server 2016. The virtual machines are configured as web servers.
You have an Azure load balancer named LB1 that provides load balancing services for the virtual machines.
You need to ensure that visitors are serviced by the same web server for each request.
What should you configure?
A. Protocol to UDP
B. Session persistence to None
C. Floating IP (direct server return) to Disabled
D. Session persistence to Client IP
Show Answer
Correct Answer: D
Explanation: To ensure that visitors are consistently serviced by the same backend virtual machine (session affinity), Azure Load Balancer must be configured with session persistence. Setting session persistence to **Client IP** ensures that all requests from the same client IP address are directed to the same web server. Other options do not provide session stickiness.
Question 193
You have five Azure virtual machines that run Windows Server 2016. The virtual machines are configured as web servers.
You have an Azure load balancer named LB1 that provides load balancing services for the virtual machines.
You need to ensure that visitors are serviced by the same web server for each request.
What should you configure?
A. Floating IP (direct server return) to Disabled
B. Session persistence to Client IP
C. Protocol to UDP
D. Idle Time-out (minutes) to 20
Show Answer
Correct Answer: B
Explanation: To ensure that each visitor is consistently served by the same web server (session affinity), Azure Load Balancer must be configured with session persistence. Setting session persistence to **Client IP** enables source IP affinity, causing all requests from the same client IP address to be directed to the same backend virtual machine. The other options do not provide session stickiness.
Question 194
You have an Azure subscription that contains a storage account. The account stores website data.
You need to ensure that inbound user traffic uses the Microsoft point-of-presence (POP) closest to the user's location.
What should you configure?
A. private endpoints
B. Azure Firewall rules
C. Routing preference
D. load balancing
Show Answer
Correct Answer: C
Explanation: To ensure inbound user traffic to an Azure Storage account uses the Microsoft point-of-presence (POP) closest to the user, you configure the storage account’s network routing preference. Routing preference allows you to choose the Microsoft global network, which automatically routes both inbound and outbound traffic through the nearest Microsoft POP for optimal latency and reliability. Private endpoints, firewall rules, and load balancing do not control POP-based entry into Microsoft’s global network for public storage endpoints.
Question 195
You have an Azure subscription that contains the virtual networks shown in the following table.
You need to deploy an Azure firewall named AF1 to RG1 in the West US Azure region.
To which virtual networks can you deploy AF1?
A. VNET1, VNET2, VNET3, and VNET4
B. VNET1 and VNET2 only
C. VNET1 only
D. VNET1, VNET2, and VNET4 only
E. VNET1 and VNET4 only
Show Answer
Correct Answer: C
Explanation: Azure Firewall must be deployed into a virtual network that is in the same resource group and the same region as the firewall. Since AF1 must be deployed to RG1 in the West US region, only the virtual network that is both in RG1 and West US is eligible. From the table, only VNET1 meets both requirements.
Question 196
You have an on-premises network.
You have an Azure subscription that contains three virtual networks named VNET1. VNET2. and VNET3. The virtual networks are peered and connected to the on-premises network. The subscription contains the virtual machines shown in the following table.
You need to monitor connectivity between the virtual machines and the on-premises network by using Connection Monitor.
What is the minimum number of connection monitors you should deploy?
A. 1
B. 2
C. 3
D. 4
Show Answer
Correct Answer: A
Explanation: With the current Azure Connection Monitor (v2), a single connection monitor can include multiple source VMs across peered virtual networks and monitor connectivity to on‑premises endpoints. Cross‑VNet and cross‑region monitoring are supported, so only one connection monitor is required to cover all the VMs connected to the on‑premises network.
Question 197
You have an Azure subscription that contains the resources shown in the following table.
You need to perform the tasks shown in the following table.
Which tasks can you perform by using Azure Storage Explorer?
A. Task1 and Task3 only
B. Task1, Task2, and Task3 only
C. Task1, Task3, and Task4 only
D. Task2, Task3, and Task4 only
E. Task1, Task2, Task3, and Task4
Show Answer
Correct Answer: D
Explanation: Azure Storage Explorer is a client tool for managing data inside existing storage accounts. It cannot create new storage accounts, but it can manage storage services within them (such as blobs, file shares, queues, and tables) and perform data operations like upload, download, and delete. Therefore, any task involving creating a storage account cannot be done, while tasks involving managing or creating containers/file shares and working with data can be performed. Hence, Task2, Task3, and Task4 only are supported.
Question 198
HOTSPOT
-
You have an Azure subscription named Sub1 that contains the resources shown in the following table.
Sub1 contains the following alert rule:
• Name: Alert1
• Scope: All resource groups in Sub1
o Include all future resources
• Condition: All administrative operations
• Actions: Action1
Sub1 contains the following alert processing rule:
• Name: Rule1
• Scope: Sub1
• Rule type: Suppress notifications
• Apply the rule: On a specific time
o Start: August 10, 2022
o End: August 13, 2022
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Yes
No
Yes
Explanation: Alert processing rule suppresses notifications only, not alert creation. During Aug 10–13, alerts still appear in the portal but action groups aren’t invoked. Outside the suppression window, administrative operations (including tagging) trigger the action group and send email.
$19
Get all 558 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.
