New Updated AZ-100 Exam Questions from PassLeader AZ-100 PDF dumps! Welcome to download the newest PassLeader AZ-100 VCE dumps: https://www.passleader.com/az-100.html (123 Q&As)
Keywords: AZ-100 exam dumps, AZ-100 exam questions, AZ-100 VCE dumps, AZ-100 PDF dumps, AZ-100 practice tests, AZ-100 study guide, AZ-100 braindumps, Microsoft Azure Infrastructure and Deployment Exam
P.S. New AZ-100 dumps PDF: https://drive.google.com/open?id=1kl-hIi3K7aaxv7mu9ioBXhfsdj8smhxV
P.S. New AZ-101 dumps PDF: https://drive.google.com/open?id=13I-3nl7-TLLxAvHSElTA6A58hR15YagN
P.S. New AZ-102 dumps PDF: https://drive.google.com/open?id=1HceOeaJ6TUh6408k3UU7gZb7aXGzzGb-
NEW QUESTION 101
You are the global administrator for an Azure Active Directory (Azure AD) tenant named adatum.com. You need to enable two-step verification for Azure users. What should you do?
A. Configure a playbook in Azure AD conditional access policy.
B. Create an Azure AD conditional access policy.
C. Create and configure the Identify Hub.
D. Install and configure Azure AD Connect.
Answer: B
Explanation:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-mfasettings
NEW QUESTION 102
You manage a virtual network named Vnet1 that is hosted in the West US Azure region. VNet1 hosts two virtual machines named VM1 and VM2 run Windows Server. You need to inspect all the network traffic from VM1 to VM2 for a period of three hours.
Solution: From Azure Network Watcher, you create a connection monitor.
Does this meet the goal?
A. Yes
B. No
Answer: A
Explanation:
Azure Network Watcher provides tools to monitor, diagnose, view metrics, and enable or disable logs for resources in an Azure virtual network.
https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-monitoring-overview
NEW QUESTION 103
SIMULATION
Click to expand each objective. To connect to the Azure portal, type https://portal.azure.com in the browser address bar.
……
More SIMULATION
……
NEW QUESTION 113
You have an Azure subscription that contains three virtual networks named VNet1, VNet2, VNet3. VNet2 contains a virtual appliance named VM2 that operates as a router. You are configuring the virtual networks in a hub and spoke topology that uses VNet2 as the hub network. You plan to configure peering between VNet1 and VNet2 and between VNet2 and VNet3. You need to provide connectivity between VNet1 and VNet3 through VNet2. Which two configurations should you perform? (Each correct answer presents part of the solution. Choose two.)
A. On the peering connections, allow forwarded traffic.
B. On the peering connections, allow gateway transit.
C. Create route tables and assign the table to subnets.
D. Create a route filter.
E. On the peering connections, use remote gateways.
Answer: BE
Explanation:
Allow Gateway Transit.
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-manage-peering#requirements-and-constraints
NEW QUESTION 114
You have two Azure virtual networks named VNet1 and VNet2. VNet1 contains an Azure virtual machine named VM1. VNet2 contains an Azure virtual machine named VM2. VM1 hosts a frontend application that connects to VM2 to retrieve data. Users report that the frontend application is slower than usual. You need to view the average round-trip time (RTT) of the packets from VM1 to VM2. Which Azure Network Watcher feature should you use?
A. NSG flow logs
B. Connection troubleshoot
C. IP flow verify
D. Connection monitor
Answer: D
Explanation:
https://azure.microsoft.com/en-us/updates/general-availability-azure-network-watcher-connection-monitor-in-all-public-regions/
NEW QUESTION 115
You are troubleshooting a performance issue for an Azure Application Gateway. You need to compare the total requests to the failed requests during the past six hours. What should you use?
A. Metrics in Application Gateway
B. Diagnostics logs in Application Gateway
C. NSG flow logs in Azure Network Watcher
D. Connection monitor in Azure Network Watcher
Answer: A
Explanation:
https://docs.microsoft.com/en-us/azure/application-gateway/application-gateway-diagnostics#Metrics
NEW QUESTION 116
Drag and Drop
You have two Azure virtual machines named VM1 and VM2. VM1 has a single data disk named Disk1. You need to attach Disk1 to VM2. The solution must minimize downtime for both virtual machines. Which four actions should you perform in sequence? (To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.)
Answer:
Explanation:
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/detach-disk
https://docs.microsoft.com/en-us/azure/lab-services/devtest-lab-attach-detach-data-disk
NEW QUESTION 117
Hotspot
You have an Azure Active Directory (Azure AD) tenant. You need to create a conditional access policy that requires all users to use multi-factor authentication when they access the Azure portal. Which three settings should you configure? (To answer, select the appropriate settings in the answer area.)
Answer:
Explanation:
https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/howto-user-risk-policy
NEW QUESTION 118
You have a resource group named RG1. RG1 contains an Azure Storage account named storageaccount1 and a virtual machine named VM1 that runs Windows Server 2016. Storageaccount1 contains the disk files for VM1. You apply a ReadOnly lock to RG1. What can you do from the Azure portal?
A. Generate an automation script for RG1.
B. View the keys of storageaccount1.
C. Upload a blob to storageaccount1.
D. Start VM1.
Answer: B
Explanation:
ReadOnly means authorized users can read a resource, but they can’t delete or update the resource. Applying this lock is similar to restricting all authorized users to the permissions granted by the Reader role.
https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-lock-resources
NEW QUESTION 119
You configure Azure AD Connect for Azure Active Directory Seamless Single Sign-On (Azure AD Seamless SSO) for an on-premises network. Users report that when they attempt to access myapps.microsoft.com, they are prompted multiple times to sign in and are forced to use an account name that ends with onmicrosoft.com. You discover that there is a UPN mismatch between Azure AD and the on-premises Active Directory. You need to ensure that the users can use single-sign on (SSO) to access Azure resources. What should you do first?
A. From the on-premises network, deploy Active Directory Federation Services (AD FS).
B. From Azure AD, add and verify a custom domain name.
C. From the on-premises network, request a new certificate that contains the Active Directory domain name.
D. From the server that runs Azure AD Connect, modify the filtering options.
Answer: B
Explanation:
Azure AD Connect lists the UPN suffixes that are defined for the domains and tries to match them with a custom domain in Azure AD. Then it helps you with the appropriate action that needs to be taken. The Azure AD sign-in page lists the UPN suffixes that are defined for on-premises Active Directory and displays the corresponding status against each suffix.
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/plan-connect-user-signin
NEW QUESTION 120
You have two Azure Active Directory (Azure AD) tenants named contoso.com and fabrikam.com. You have a Microsoft account that you use to sign in to both tenants. You need to configure the default sign-in tenant for the Azure portal. What should you do?
A. From the Azure portal, configure the portal settings.
B. From the Azure portal, change the directory.
C. From Azure Cloud Shell, run Set-AzureRmContext.
D. From Azure Cloud Shell, run Set-AzureRmSubscription.
Answer: B
Explanation:
Change the subscription directory in the Azure portal. The classic portal feature Edit Directory, that allows you to associate an existing subscription to your Azure Active Directory (AAD), is now available in Azure portal. It used to be available only to Service Admins with Microsoft accounts, but now it’s available to users with AAD accounts as well. To get started:
– go to subscriptions.
– select a subscription.
– select change directory.
Incorrect:
Not C: The Set-AzureRmContext cmdlet sets authentication information for cmdlets that you run in the current session. The context includes tenant, subscription, and environment information.
https://azure.microsoft.com/en-us/updates/edit-directory-now-in-new-portal/
NEW QUESTION 121
……
Download the newest PassLeader AZ-100 dumps from passleader.com now! 100% Pass Guarantee!
AZ-100 PDF dumps & AZ-100 VCE dumps: https://www.passleader.com/az-100.html (123 Q&As) (New Questions Are 100% Available and Wrong Answers Have Been Corrected! Free VCE simulator!)
P.S. New AZ-100 dumps PDF: https://drive.google.com/open?id=1kl-hIi3K7aaxv7mu9ioBXhfsdj8smhxV
P.S. New AZ-101 dumps PDF: https://drive.google.com/open?id=13I-3nl7-TLLxAvHSElTA6A58hR15YagN
P.S. New AZ-102 dumps PDF: https://drive.google.com/open?id=1HceOeaJ6TUh6408k3UU7gZb7aXGzzGb-
