Exam AZ-100: Microsoft Azure Infrastructure and Deployment, exam AZ-100 training materials


 試験 AZ-100

Microsoft Azure インフラストラクチャおよび展開


この試験では、次の一覧に示す技術タスクを遂行する能力を評価します。パーセンテージは、試験の各主要トピック領域の相対的な重みを示します。パーセンテージが高いほど、試験でこのコンテンツ領域に関する質問の数が多くなる可能性があります。Microsoft の試験のさまざまな種類の質問 さまざまな種類の質問に関するビデオチュートリアルをご覧ください。




2019 AZ-100 Test Simulates & AZ-100 Training Materials & AZ-100 Key Content

マイクロソフト認定資格試験のフィードバック、その他の認定資格プログラム、登録、プロモーションや質問がある場合は連絡してくださいRegional Service Center


この試験の受験者は、ストレージ、セキュリティ、ネットワーキング、コンピューティング クラウド機能にまたがるクラウド サービスを管理する Azure 管理者です。受験者は、ITライフサイクルの各サービスに精通しており、インフラストラクチャ サービス、アプリケーション、および環境の依頼を受けます。適切なリソースのプロビジョニング、サイズ設定、監視、調整と同様、最適なパフォーマンスおよび規模で使用するサービを推奨します。

この試験の受験者は、PowerShell および Command Line Interface の使用に精通している必要があります。受験者は、Azure Portal、ARM テンプレート、オペレーティング システム、仮想化、クラウド インフラストラクチャ、ストレージ構造、およびネットワーキングに関する基本的な知識を持っている必要があります。


You need to define a custom domain name for Azure AD to support the planned infrastructure.
Which domain name should you use?
A. Install Azure AD Connect on a server in the Miami office and enable Pass-through Authentication
B. Install the Active Directory Federation Services (AD FS) role on a domain controller in the Miami
C. Allow inbound TCP port 8080 to the domain controllers in the Miami office.
D. Add
http://autologon.microsoftazuread-sso.com to the intranet zone of each client computer in the
Miami office.
E. Join the client computers in the Miami office to Azure AD.
Answer: A,D
Every Azure AD directory comes with an initial domain name in the form of
The initial domain name cannot be changed or deleted, but you can add your corporate domain
name to Azure AD as well. For example, your organization probably has other domain names used to
do business and users who sign in using your corporate domain name. Adding custom domain names
to Azure AD allows you to assign user names in the directory that are familiar to your users, such as
'alice@contoso.com.' instead of
'alice@domain name.onmicrosoft.com'.
Network Infrastructure: Each office has a local data center that contains all the servers for that office.
Each office has a dedicated connection to the Internet.
Humongous Insurance has a single-domain Active Directory forest named humongousinsurance.com
Planned Azure AD Infrastructure: The on-premises Active Directory domain will be synchronized to
Azure AD.
References: https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/add-custom-

You have an Azure DNS zone named adatum.com. You need to delegate a subdomain named
research.adatum.com to a different DNS server in Azure. What should you do?
A. Create an PTR record named research in the adatum.com zone.
B. Create an A record named ".research in the adatum.com zone.
C. Modify the SOA record of adatum.com.
D. Create an NS record named research in the adatum.com zone.
Answer: B
Configure A records for the domains and sub domains.

Note: This question is part of a series of questions that present the same scenario. Each
question in the series contains a unique solution that might meet the stated goals. Some question
sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these
questions will not appear in the review screen.
You have an Azure subscription that contains 10 virtual networks. The virtual networks are hosted in
separate resource groups.
Another administrator plans to create several network security groups (NSGs) in the subscription.
You need to ensure that when an NSG is created, it automatically blocks TCP port 8080 between the
virtual networks.
Solution: You assign a built-in policy definition to the subscription.
Does this meet the goal?
A. No
B. Yes
Answer: A

You have an Azure subscription that contains a virtual machine named VM1. VM1 hosts a line-
of-business application that is available 24 hours a day. VM1 has one network interface and one
managed disk. VM1 uses the D4s v3 size.
You plan to make the following changes to VM1:
* Change the size to D8s v3.
* Add a 500-GB managed disk.
* Add the Puppet Agent extension.
* Attach an additional network interface.
Which change will cause downtime for VM1?
A. Attach an additional network interface.
B. Add a 500-GB managed disk.
C. Add the Puppet Agent extension.
D. Change the size to D8s v3.
Answer: D
While resizing the VM it must be in a stopped state.
References: https://azure.microsoft.com/en-us/blog/resize-virtual-machines/

You have an Azure subscription that contains the resources in the following table.
To which subnets can you apply NSG1?
A. the subnets on VNet1 only
B. the subnets on VNet1, VNet2, and VNet3
C. the subnets on VNet2 only
D. the subnets on VNet2 and VNet3 only
E. the subnets on VNet3 only
Answer: E
All Azure resources are created in an Azure region and subscription. A resource can only be created in
a virtual network that exists in the same region and subscription as the resource.
References: https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-vnet-plan-

You have an Azure subscription named Subscription1. Subscription1 contains the resource
groups in the following table.
RG1 has a web app named WebApp1. WebApp1 is located in West Europe.
You move WebApp1 to RG2. What is the effect of the move?
A. The App Service plan to WebApp1 moves to North Europe. Policy2 applies to WebApp1.
B. The App Service plan to WebApp1 remains to West Europe. Policy1 applies to WebApp1.
C. The App Service plan to WebApp1 remains to West Europe. Policy2 applies to WebApp1.
D. The App Service plan to WebApp1 moves to North Europe. Policy1 applies to WebApp1.
Answer: C

You have an Azure subscription.
You plan to use Azure Resource Manager templates to deploy 50 Azure virtual machines that will be
part of the same availability set.
You need to ensure that as many virtual machines as possible are available if the fabric fails or during
How should you configure the template? To answer, select the appropriate options in the answer
NOTE: Each correct selection is worth one point.
Select two alternatives below.
A. platformUpdateDomainCount: 25
B. platformUpdateDomainCount: 50
C. platformUpdateDomainCount: 10
D. platformFaultDomainCount: 3
E. platformUpdateDomainCount: 30
F. platformFaultDomainCount: 4
G. platformUpdateDomainCount: 40
H. platformFaultDomainCount: 0
I. platformUpdateDomainCount: 20
J. platformFaultDomainCount: 2
K. platformFaultDomainCount: 1
Answer: I,J
Use two fault domains.
2 or 3 is max, depending on which region you are in.
Use 20 for platformUpdateDomainCount
Increasing the update domain (platformUpdateDomainCount) helps with capacity and availability
planning when the platform reboots nodes. A higher number for the pool (20 is max) means that
fewer of their nodes in any given availability set would be rebooted at once.

You create an Azure Storage account named contosostorage.
You plan to create a file share named data.
Users need to map a drive to the data file share from home computers that run Windows 10.
Which port should be open between the home computers and the data file share?
A. 3389
B. 80
C. 445
D. 443
Answer: C
Ensure port 445 is open: The SMB protocol requires TCP port 445 to be open; connections will fail if
port 445 is blocked.