You have an Azure subscription that contains the virtual networks shown in the following table.
You need to ensure that all the traffic between VNet1 and VNet2 traverses the Microsoft backbone network.
What should you configure?
A. a private endpoint
B. peering
C. Express Route
D. a route table
Show Answer
Correct Answer: B
Explanation: Virtual network peering connects two Azure VNets so that traffic between them is routed privately over the Microsoft backbone network. This applies to both regional and global VNet peering. Private endpoints are for accessing Azure PaaS services privately, ExpressRoute is for on‑premises to Azure connectivity, and route tables only influence routing but do not guarantee use of the Microsoft backbone between VNets.
Question 63
Your on-premises network contains a VPN gateway.
You have an Azure subscription that contains the resources shown in the following table.
You need to ensure that all the traffic from VM1 to storage1 travels across the Microsoft backbone network.
What should you configure?
A. Azure Application Gateway
B. service endpoints
C. a network security group (NSG)
D. Azure Peering Service
Show Answer
Correct Answer: B
Explanation: Azure service endpoints for Azure Storage ensure that traffic from a virtual machine in a virtual network to the storage account is routed over the Microsoft backbone network rather than the public internet. Application Gateway, NSGs, and Azure Peering Service do not control backbone routing for VM-to-storage traffic in this way.
Question 64
You have an Azure subscription that contains the resources shown in the following table.
You need to configure a proximity placement group for VMSS1.
Which proximity placement groups should you use?
A. Proximity2 only
B. Proximity1, Proximity2, and Proximity3
C. Proximity1 only
D. Proximity1 and Proximity3 only
Show Answer
Correct Answer: C
Explanation: A proximity placement group can only be used by resources in the same Azure region as the target resource. VMSS1 is located in West US, and among the listed proximity placement groups, only Proximity1 is also in West US. Proximity2 and Proximity3 are in different regions, so they cannot be associated with VMSS1.
Question 65
You have an Azure subscription.
You create the following Azure Resource Manager (ARM) template named Template.json.
You need to deploy Template.json.
Which PowerShell cmdlet should you run from Azure Cloud Shell?
A. New-AzSubscriptionDeployment
B. New-AzManagementGroupDeployment
C. New-AzResourceGroupDeployment
D. New-AzTenantDeployment
Show Answer
Correct Answer: A
Explanation: The ARM template deploys at the subscription scope because it creates a resource group, which is a subscription-level resource. Subscription-scope templates must be deployed with New-AzSubscriptionDeployment. Resource-group deployments are only for deploying resources into an existing resource group.
Question 66
You have an Azure subscription that contains a resource group named RG1.
You plan to create a storage account named storage1.
You have a Bicep file named File1.
You need to modify File1 so that it can be used to automate the deployment of storage1 to RG1.
Which property should you modify?
A. kind
B. scope
C. sku
D. location
Show Answer
Correct Answer: B
Explanation: In Bicep, the property that determines *where* a resource is deployed in terms of Azure scope (such as a specific resource group) is **scope**. To automate deployment of the storage account to the existing resource group RG1, you must set the scope to that resource group. Properties like kind, sku, and location define the resource type, performance tier, and Azure region, but they do not control the target resource group.
Question 67
You have an Azure subscription.
You plan to migrate 50 virtual machines from VMware vSphere to the subscription.
You create a Recovery Services vault.
What should you do next?
A. Configure an extended network.
B. Create a recovery plan.
C. Deploy an Open Virtualization Application (OVA) template to vSphere.
D. Configure a virtual network.
Show Answer
Correct Answer: D
Explanation: The question explicitly starts with creating a Recovery Services vault, which aligns with Azure Site Recovery (ASR) rather than Azure Migrate. In the ASR workflow for migrating VMware VMs to Azure, the next required step on the Azure side is to configure a virtual network where replicated VMs will be placed after failover/migration. Deploying an OVA (configuration server) comes later when preparing the on‑premises VMware environment. Therefore, the correct next step is to configure a virtual network.
Question 68
HOTSPOT
-
Your company purchases a new Azure subscription.
You create a file named Deploy.json as shown in the following exhibit.
You connect to the subscription and run the following cmdlet.
New-AzDeployment -Location westus -TemplateFile “deploy.json”
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: You can deploy a virtual machine to RG1: Yes
You can deploy a virtual machine to RG2: No
You can manually create a resource group named RG3: Yes
Explanation: The template creates three resource groups using copyIndex(): RG0, RG1, and RG2.
RG1 has a CanNotDelete lock, which allows modifications such as deploying VMs.
RG2 has a ReadOnly lock, which blocks creating or modifying resources.
RG3 does not exist and there is no subscription-level lock, so it can be created manually.
Question 69
HOTSPOT
-
You have an Azure Storage account named storage1 that contains a container named container1. The container1 container stores thousands of image files.
You plan to use an Azure Resource Manager (ARM) template to create a blob inventory rule named rule1.
You need to ensure that only blobs whose names start with the word finance are stored daily as a CSV file in container1.
How should you complete rule1? To answer, select the options in the answer area.
NOTE: Each correct answer is worth one point.
Explanation: Blob inventory targets block blobs for standard file storage such as images and generated CSV inventory files. The prefixMatch must include the container name and the starting blob name, so container1/finance matches only blobs whose names begin with finance in container1. The schedule is daily and the destination format is CSV as required.
Question 70
HOTSPOT
-
You have an Azure Storage account named storage1 that contains two containers named container1 and container2. Blob versioning is enabled for both containers.
You periodically take blob snapshots of critical blobs.
You create the following lifecycle management policy.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Yes
No
No
Explanation: The lifecycle rule applies to block blobs in container1 and includes version actions. Blob snapshots are included under version lifecycle actions, so they move to Cool after 15 days. The rule does not apply to container2 due to the prefixMatch filter. Rehydrated versions are protected by the daysAfterLastTierChangeGreaterThan condition, so they do not automatically move back to Archive after 30 days.
Question 71
Your on-premises network contains a VPN gateway.
You have an Azure subscription that contains the resources shown in the following table.
You need to ensure that all the traffic from VM1 to storage1 travels across the Microsoft backbone network.
What should you configure?
A. Azure AD Application Proxy
B. service endpoints
C. a network security group (NSG)
D. Azure Firewall
Show Answer
Correct Answer: B
Explanation: To ensure that traffic from VM1 to storage1 stays on the Microsoft backbone network, you must configure a Virtual Network service endpoint for Azure Storage. Service endpoints extend the VNet identity to the Azure service and route traffic directly over the Azure backbone instead of the public internet. Azure AD Application Proxy, NSGs, and Azure Firewall do not control backbone routing to Azure PaaS services.
$19
Get all 558 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.
