Premium

Microsoft Certified: Azure Solutions Architect Expert Certification Questions and Answer (Dumps and Practice Questions)



Question : Your role of Systems Administrator at ABC.com includes the management of the company's private and public clouds. The company has a Microsoft Azure subscription.
The company has a Development department. Developers have created an application that runs on two servers. The application on one server needs to
call a service on the other server by IP address. You plan to host the application on Azure virtual machines (VMs). You have configured two VMs on a single subnet in an
Azure virtual network. You need to configure the two VMs with static internal IP addresses. How should you configure the VMs?

  : Your role of Systems Administrator at ABC.com includes the management of the company's private and public clouds. The company has a Microsoft Azure subscription.
1. By running the New-AzureVMConfig PowerShell cmdlet.
2. By running the Set-AzureSubnet PowerShell cmdlet.
3. By modifying the VM properties in the Azure Management Portal.
4. By modifying the IP properties in Windows Network and Sharing Center.
5. By running the Set-AzureStaticVNetIP PowerShell cmdlet.


Correct Answer : 5
Explanation: Set the static VNet IP address information to a VM object. A Virtual Network in Microsoft Azure provides you the ability to predict which IP address your
virtual machine will have at boot time and as long as the virtual machine is not re-provisioned that IP address will remain the same. Persistent IP Addresses

As long as the virtual machines are only shut down from within the virtual machines themselves they will maintain this IP address.

However, if the virtual machines are shut down through PowerShell or the management portal they are effectively de-provisioned.
(Through PowerShell you can avoid this by specifying the -StayProvisioned flag to Stop-AzureVM - you are still paying for the VM when it is shut down).

Once a virtual machine is de-provisioned at next boot time it will go through the same process to find the first available IP address in the subnet.

What this means to you is without an alternative method of setting the IP address you are responsible for starting a set of virtual machines in the correct order to ensure their IP
addresses are set (unless it doesn't matter if they move). The Solution? Static VNET IPs

If you know ahead of time that your virtual machines need to retain the same IP addresses whether de-provisioned or not you can specify the IP address they should attempt to assign
using the Set-AzureStaticVNetIP cmdlet.

To solve the problem with the VMs being reassigned IP addresses if started out of order I can specify the IP address for each virtual machine in an update.

To ensure that I can actually assign the IP addresses I need to stop both virtual machines because each VM already is assigned the others IP.

Get-AzureVM -ServiceName vnetvmsvc1 | Stop-AzureVM -Force

Get-AzureVM -ServiceName vnetvmsvc1 -Name vnetvm1 |
Set-AzureStaticVNetIP -IPAddress "10.0.0.4" |
Update-AzureVM

Get-AzureVM -ServiceName vnetvmsvc1 -Name vnetvm2 |
Set-AzureStaticVNetIP -IPAddress "10.0.0.5" |
Update-AzureVM

Get-AzureVM -ServiceName vnetvmsvc1 | Start-AzureVM



Question : Select the correct statment
A. Azure Websites are created under the *.azurewebsites.net shared domain.
B. Adding deployment slots to a website requires that the website be in Standard mode.
C. A website has an implied production deployment slot. Up to four additional deployment slots can be added using any name, as long as the name is unique within the website.
D. Azure WebJobs provides a way to run background tasks in an Azure website. WebJobs can be configured to run On-Demand, Continuously, or as a Scheduled task.

 : Select the correct statment
1. A,B,C
2. B,C,D
3. A,C,D
4. A,B,C,D
Correct answer: 4



Question : Select correct statement from below
A. An Azure website can have multiple custom domains associated with it.
B. Azure Websites support Server Name Indication (SNI) SSL and IP-based SSL for websites with a custom domain
C. The Cross-Platform Command-Line tools for Azure can be run on Windows, and Linux but not on Mac
D. An Azure Website site setting is where you can configure language versions for .NET Framework, PHP, Java, and Python


 : Select the correct statment
1. A,B,C
2. B,C,D
3. A,C,D
4. A,B,D

Correct Answer : 4
Explanation: An Azure Website site setting is where you can configure language versions for .NET Framework, PHP, Java, and Python. This is also where you can set the site
to run in 32-bit or 64-bit mode, enable web sockets and the Always-On feature, configure handler mappings, custom domains, and SSL.
Application settings and connection strings can be defined in site settings and retrieved at application runtime using environment variables.
An Azure website can have multiple custom domains associated with it. To configure a custom domain, you must first add an A and/or CNAME record using your DNS registrar. For A
records, you must first add the awverify CNAME record.
Azure Websites support Server Name Indication (SNI) SSL and IP-based SSL for websites with a custom domain.
Azure Websites can be configured using the management portal, Azure PowerShell cmdlets, and the Cross-Platform Command-Line tools.
The Cross-Platform Command-Line tools for Azure can be run on Windows, Mac, and Linux.









Question : Select the correct statement

A. Azure Websites provides two categories of diagnostic logs: application diagnostics and site diagnostics.
B. There are three site diagnostic log files available: Web Server, Detailed Errors, and Failed Request
C. When enabling application diagnostic logging, you must specify the logging level, which can be Error, Warning, Information, or Verbose
D. Azure Website backups can not be used to back up website configuration, file content, and databases


  : Select the correct statement
1. A,B,C
2. B,C,D
3. A,C,D
4. A,B,D

Correct Answer : 1
Explanation: Azure Websites provides two categories of diagnostic logs: application diagnostics and site diagnostics. There are three site diagnostic log files available:
Web Server, Detailed Errors, and Failed Request.
When enabling application diagnostic logging, you must specify the logging level, which can be Error, Warning, Information, or Verbose.
Site Control Manager (Kudu) is a website extension and is installed by default for every website. It is accessible at https://.scm.azurewebsites.net. To
authenticate, sign-in using the same credentials you use to sign-in to the management portal.
When configuring endpoint monitoring, you can have up to two endpoints monitored per websites. For each endpoint, you can have up to three external locations perform web tests
against the endpoint.
Alerts can be configured for endpoints configured with endpoint monitoring, for performance counter metrics, and for events.
Azure Website backups can be used to back up website configuration, file content, and databases. The databases supported for backup are SQL Database and MySQL.
Azure Website backups can be performed on-demand or on a schedule.







Related Questions


Question : You manage an Azure Active Directory (AD) tenant You plan to allow users to log in to a third-party application by using their Azure AD credentials. To access the
application,
users will be prompted for their existing third-party user names and passwords. You need to add the application to Azure AD. Which type of application should you add?

   : You manage an Azure Active Directory (AD) tenant You plan to allow users to log in to a third-party application by using their Azure AD credentials. To access the
1. Existing Single Sign-On with identity provisioning
2. Password Single Sign-On with identity provisioning
3. Access Mostly Uused Products by 50000+ Subscribers
4. Password Single Sign-On without identity provisioning





Question : You plan to use Password Sync on your DirSync Server with Azure Active Directory {Azure AD) on your company network. You configure the DirSync server and complete an
initial synchronization of the users.

Several remote users are unable to log in to Office 365. You discover multiple event log entries for "Event ID 611 Password synchronization failed for domain. You need to resolve
the password synchronization issue. Which two actions should you perform? Each correct answer presents part of the solution.

A. Restart Azure AD Sync Service.

B. Run the Set-FullPasswordSync Power Shell cmdlet.

C. Force a manual synchronization on the DirSync server.

D. Add the DirSync service account to the Schema Admins domain group.


   : 	You plan to use Password Sync on your DirSync Server with Azure Active Directory {Azure AD) on your company network. You configure the DirSync server and complete an
1. A,B
2. B,C
3. Access Mostly Uused Products by 50000+ Subscribers
4. D,E





Question : You administer an Access Control Service namespace named contosoACS that is used by a web application. ContosoACS currently utilizes Microsoft and Yahoo accounts.
Several users in your organization have Google accounts and would like to access the web application through ContosoACS.
You need to allow users to access the application by using their Google accounts. What should you do?


   : 	You administer an Access Control Service namespace named contosoACS that is used by a web application. ContosoACS currently utilizes Microsoft and Yahoo accounts.
1. Register the application directly with Google.
2. Edit the existing Microsoft Account identity provider and update the realm to include Google.
3. Access Mostly Uused Products by 50000+ Subscribers
4. Add a new WS-Federation identity provider and configure the WS-Federation metadata to point to the Google sign-in URL.






Question : You publish an application named MyApp to Azure Active Directory (Azure AD). You grant access to the web APIs through OAuth .. MyApp is generating numerous
user consent prompts. You need to reduce the amount of user consent prompts. What should you do?

  : You publish an application named MyApp to Azure Active Directory (Azure AD). You grant access to the web APIs through OAuth .. MyApp is generating numerous
1. Enable Multi-resource refresh tokens.
2. Enable WS-federation access tokens.
3. Access Mostly Uused Products by 50000+ Subscribers
4. Configure SAML 2.0.




Question : Your company network includes users in multiple directories. You plan to publish a softwareas-a-service application named SaasApp to Azure Active Directory.
You need to ensure that all users can access SaasApp1. What should you do?
  : Your company network includes users in multiple directories. You plan to publish a softwareas-a-service application named SaasApp to Azure Active Directory.
1. Configure the Federation Metadata URL
2. Register the application as a web application.
3. Access Mostly Uused Products by 50000+ Subscribers
4. Register the application as a native client application.




Question : You are migrating a local virtual machine (VM) to an Azure VM. You upload the virtual hard disk (VHD) file to Azure Blob storage as a Block Blob.
You need to change the Block 8lob to a page blob. What should you do?

 : You are migrating a local virtual machine (VM) to an Azure VM. You upload the virtual hard disk (VHD) file to Azure Blob storage as a Block Blob.
1. Delete the Block Blob and re-upload the VHD as a page blob.
2. Update the type of the blob programmatically by using the Azure Storage .NET SDK.
3. Access Mostly Uused Products by 50000+ Subscribers
4. Create a new empty page blob and use the Azure Blob Copy Power Shell cmdlet to copy the current data to the new blob.