NEW QUESTION: 1
You need to define a custom domain name for Azure AD to support the planned infrastructure.
Which domain name should you use?
A. Install Azure AD Connect on a server in the Miami office and enable Pass-through Authentication
B. Install the Active Directory Federation Services (AD FS) role on a domain controller in the Miami
C. Allow inbound TCP port 8080 to the domain controllers in the Miami office.
http://autologon.microsoftazuread-sso.com to the intranet zone of each client computer in the
E. Join the client computers in the Miami office to Azure AD.
Every Azure AD directory comes with an initial domain name in the form of
The initial domain name cannot be changed or deleted, but you can add your corporate domain
name to Azure AD as well. For example, your organization probably has other domain names used to
do business and users who sign in using your corporate domain name. Adding custom domain names
to Azure AD allows you to assign user names in the directory that are familiar to your users, such as
'firstname.lastname@example.org.' instead of
Network Infrastructure: Each office has a local data center that contains all the servers for that office.
Each office has a dedicated connection to the Internet.
Humongous Insurance has a single-domain Active Directory forest named humongousinsurance.com
Planned Azure AD Infrastructure: The on-premises Active Directory domain will be synchronized to
NEW QUESTION: 2
You have an Azure DNS zone named adatum.com. You need to delegate a subdomain named
research.adatum.com to a different DNS server in Azure. What should you do?
A. Create an PTR record named research in the adatum.com zone.
B. Create an A record named ".research in the adatum.com zone.
C. Modify the SOA record of adatum.com.
D. Create an NS record named research in the adatum.com zone.
Configure A records for the domains and sub domains.
NEW QUESTION: 3
Note: This question is part of a series of questions that present the same scenario. Each
question in the series contains a unique solution that might meet the stated goals. Some question
sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these
questions will not appear in the review screen.
You have an Azure subscription that contains 10 virtual networks. The virtual networks are hosted in
separate resource groups.
Another administrator plans to create several network security groups (NSGs) in the subscription.
You need to ensure that when an NSG is created, it automatically blocks TCP port 8080 between the
Solution: You assign a built-in policy definition to the subscription.
Does this meet the goal?
NEW QUESTION: 4
You have an Azure subscription that contains a virtual machine named VM1. VM1 hosts a line-
of-business application that is available 24 hours a day. VM1 has one network interface and one
managed disk. VM1 uses the D4s v3 size.
You plan to make the following changes to VM1:
* Change the size to D8s v3.
* Add a 500-GB managed disk.
* Add the Puppet Agent extension.
* Attach an additional network interface.
Which change will cause downtime for VM1?
A. Attach an additional network interface.
B. Add a 500-GB managed disk.
C. Add the Puppet Agent extension.
D. Change the size to D8s v3.
While resizing the VM it must be in a stopped state.
NEW QUESTION: 5
You have an Azure subscription that contains the resources in the following table.
To which subnets can you apply NSG1?
A. the subnets on VNet1 only
B. the subnets on VNet1, VNet2, and VNet3
C. the subnets on VNet2 only
D. the subnets on VNet2 and VNet3 only
E. the subnets on VNet3 only
All Azure resources are created in an Azure region and subscription. A resource can only be created in
a virtual network that exists in the same region and subscription as the resource.
NEW QUESTION: 6
You have an Azure subscription named Subscription1. Subscription1 contains the resource
groups in the following table.
RG1 has a web app named WebApp1. WebApp1 is located in West Europe.
You move WebApp1 to RG2. What is the effect of the move?
A. The App Service plan to WebApp1 moves to North Europe. Policy2 applies to WebApp1.
B. The App Service plan to WebApp1 remains to West Europe. Policy1 applies to WebApp1.
C. The App Service plan to WebApp1 remains to West Europe. Policy2 applies to WebApp1.
D. The App Service plan to WebApp1 moves to North Europe. Policy1 applies to WebApp1.
NEW QUESTION: 7
You have an Azure subscription.
You plan to use Azure Resource Manager templates to deploy 50 Azure virtual machines that will be
part of the same availability set.
You need to ensure that as many virtual machines as possible are available if the fabric fails or during
How should you configure the template? To answer, select the appropriate options in the answer
NOTE: Each correct selection is worth one point.
Select two alternatives below.
A. platformUpdateDomainCount: 25
B. platformUpdateDomainCount: 50
C. platformUpdateDomainCount: 10
D. platformFaultDomainCount: 3
E. platformUpdateDomainCount: 30
F. platformFaultDomainCount: 4
G. platformUpdateDomainCount: 40
H. platformFaultDomainCount: 0
I. platformUpdateDomainCount: 20
J. platformFaultDomainCount: 2
K. platformFaultDomainCount: 1
Use two fault domains.
2 or 3 is max, depending on which region you are in.
Use 20 for platformUpdateDomainCount
Increasing the update domain (platformUpdateDomainCount) helps with capacity and availability
planning when the platform reboots nodes. A higher number for the pool (20 is max) means that
fewer of their nodes in any given availability set would be rebooted at once.
NEW QUESTION: 8
You create an Azure Storage account named contosostorage.
You plan to create a file share named data.
Users need to map a drive to the data file share from home computers that run Windows 10.
Which port should be open between the home computers and the data file share?
Ensure port 445 is open: The SMB protocol requires TCP port 445 to be open; connections will fail if
port 445 is blocked.