Exam AZ-102 : Microsoft Azure Administrator Certification Transition Exam (beta), exam AZ-102 exam study materials and reference

Exam AZ-102
Languages: English
Audiences:IT professionals
Technology: Microsoft Azure
Certification: Microsoft Azure

Skills measured
This exam measures your ability to accomplish the technical tasks listed below. The percentages indicate the relative weight of each major topic area on the exam. The higher the percentage, the more questions you are likely to see on that content area on the exam. View video tutorials about the variety of question types on Microsoft exams.

Please note that the questions may test on, but will not be limited to, the topics described in the bulleted text.

Do you have feedback about the relevance of the skills measured on this exam? Please send Microsoft your comments. All feedback will be reviewed and incorporated as appropriate while still maintaining the validity and reliability of the certification process. Note that Microsoft will not respond directly to your feedback. We appreciate your input in ensuring the quality of the Microsoft Certification program.

If you have concerns about specific questions on this exam, please scan: 

https://www.testsimulate.com/AZ-102-study-materials.html

If you have other questions or feedback about Microsoft Certification exams or about the certification program, registration, or promotions, please contact your Regional Service Center.

Note To ensure that they are aware of the latest updates, it is recommended that all individuals registering for this exam review this page several times before their scheduled exam.

To learn more about these new exams and what they assess, visit: 

https://www.testsimulate.com/AZ-102-study-materials.html
If you have taken this exam and want to transition to the new Azure Administrator certification, you should take Exam AZ-102: Microsoft Azure Administrator Certification Transition.

Who should take this exam?

Candidates for this exam implement infrastructure solutions in Microsoft Azure. Candidates have experience implementing and monitoring cloud and hybrid solutions as well as supporting application lifecycle management.

Here are free demo for reference: 

NEW QUESTION: 1
Click to expand each objective. To connect to the Azure portal, type https://portal.azure.com
in the browser address bar.
When you are finished performing all the tasks, click the 'Next' button.
Note that you cannot return to the lab once you click the 'Next' button. Scoring occur in the
background while you complete the rest of the exam.
Overview
The following section of the exam is a lab. In this section, you will perform a set of tasks in a live
environment. While most functionality will be available to you as it would be in a live environment,
some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible
by design.
Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn't
matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.
Labs are not timed separately, and this exam may have more than one lab that you must complete.
You can use as much time as you would like to complete each lab. But, you should manage your time
appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in
the time provided.
Please note that once you submit your work by clicking the Next button within a lab, you will NOT be
able to return to the lab.
To start the lab
You may start the lab by clicking the Next button.
You plan to protect on-premises virtual machines and Azure virtual machines by using Azure Backup.
You need to prepare the backup infrastructure in Azure. The solution must minimize the cost of
storing the backups in Azure.
What should you do from the Azure portal?
Answer:
See solution below.
Explanation
First, create Recovery Services vault.
Step 1: On the left-hand menu, select All services and in the services list, type Recovery Services. As
you type, the list of resources filters. When you see Recovery Services vaults in the list, select it to
open the Recovery Services vaults menu.
Step 2: In the Recovery Services vaults menu, click Add to open the Recovery Services vault menu.
Step 3: In the Recovery Services vault menu, for example,
Type myRecoveryServicesVault in Name.
The current subscription ID appears in Subscription. If you have additional subscriptions, you could
choose another subscription for the new vault.
For Resource group select Use existing and choose myResourceGroup. If myResourceGroup doesn't
exist, select Create new and type myResourceGroup.
From the Location drop-down menu, choose West Europe.
Click Create to create your Recovery Services vault.
References:https://docs.microsoft.com/en-us/azure/backup/tutorial-backup-vm-at-scale

NEW QUESTION: 2
Click to expand each objective. To connect to the Azure portal, type https://portal.azure.com
in the browser address bar.
When you are finished performing all the tasks, click the 'Next' button.
Note that you cannot return to the lab once you click the 'Next' button. Scoring occur in the
background while you complete the rest of the exam.
Overview
The following section of the exam is a lab. In this section, you will perform a set of tasks in a live
environment. While most functionality will be available to you as it would be in a live environment,
some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible
by design.
Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn't
matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.
Labs are not timed separately, and this exam may have more than one lab that you must complete.
You can use as much time as you would like to complete each lab. But, you should manage your time
appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in
the time provided.
Please note that once you submit your work by clicking the Next button within a lab, you will NOT be
able to return to the lab.
To start the lab
You may start the lab by clicking the Next button.
Another administrator attempts to establish connectivity between two virtual networks named
VNET1 and VNET2.
The administrator reports that connections across the virtual networks fail.
You need to ensure that network connections can be established successfully between VNET1 and
VNET2 as quickly as possible.
What should you do from the Azure portal?
Answer:
See solution below.
Explanation
You can connect one VNet to another VNet using either a Virtual network peering, or an Azure VPN
Gateway.
To create a virtual network gateway
Step1 : In the portal, on the left side, click +Create a resource and type 'virtual network gateway' in
search.
Locate Virtual network gateway in the search return and click the entry. On the Virtual network
gateway page, click Create at the bottom of the page to open the Create virtual network gateway
page.
Step 2: On the Create virtual network gateway page, fill in the values for your virtual network
gateway.
Name: Name your gateway. This is not the same as naming a gateway subnet. It's the name of the
gateway object you are creating.
Gateway type: Select VPN. VPN gateways use the virtual network gateway type VPN.
Virtual network: Choose the virtual network to which you want to add this gateway. Click Virtual
network to open the 'Choose a virtual network' page. Select the VNet. If you don't see your VNet,
make sure the Location field is pointing to the region in which your virtual network is located.
Gateway subnet address range: You will only see this setting if you did not previously create a
gateway subnet for your virtual network. If you previously created a valid gateway subnet, this
setting will not appear.
Step 4: Select Create New to create a Gateway subnet.
Step 5: Click Create to begin creating the VPN gateway. The settings are validated and you'll see the
"Deploying Virtual network gateway" tile on the dashboard. Creating a gateway can take up to 45
minutes.
You may need to refresh your portal page to see the completed status.
References: https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-vnet-vnet-
resource-manage

NEW QUESTION: 3
You have an Azure subscription named Subscription1. Subscription1 contains the virtual
networks in the following table.
Subscription1 contains the virtual machines in the following table:
The firewalls on all the virtual machines are configured to allow all ICMP traffic.
You add the peerings in the following table.
For each of the following statements, select Yest if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation
Box 1: Yes
Vnet1 and Vnet3 are peers.
Box 2: Yes
Vnet2 and Vnet3 are peers.
Box 3: No
Peering connections are non-transitive.
References:
https://docs.microsoft.com/en-us/azure/architecture/reference-architectures/hybrid-
networking/hub-spoke

NEW QUESTION: 4
You have an Azure subscription named Subscription1.
You plan to deploy an Ubuntu Server virtual machine named VM1 to Subscription1.
You need to perform a custom deployment of the virtual machine. A specific trusted root certification
authority (CA) must be added during the deployment.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation
Box 1: Unattend.xml
In preparation to deploy shielded VMs, you may need to create an operating system specialization
answer file.
On Windows, this is commonly known as the "unattend.xml" file. The New-ShieldingDataAnswerFile
Windows PowerShell function helps you do this. Starting with Windows Server version 1709, you can
run certain Linux guest OSes in shielded VMs. If you are using the System Center Virtual Machine
Manager Linux agent to specialize those VMs, the New-ShieldingDataAnswerFile cmdlet can create
compatible answer files for it.
Box 2: The Azure Portal
You can use the Azure portal to deploy a Linux virtual machine (VM) in Azure that runs Ubuntu.
References: https://docs.microsoft.com/en-us/azure/virtual-machines/linux/quick-create-portal

NEW QUESTION: 5
Which blade should you instruct the finance department auditors to use?
A. Partner information
B. Payment methods
C. Overview
D. Invoices
Answer: D
Explanation
You can opt in and configure additional recipients to receive your Azure invoice in an email. This
feature may not be available for certain subscriptions such as support offers, Enterprise Agreements,
or Azure in Open.
* Select your subscription from the Subscriptions page. Opt-in for each subscription you own. Click
Invoices then Email my invoice.
* Click Opt in and accept the terms.
Scenario: During the testing phase, auditors in the finance department must be able to review all
Azure costs from the past week.
References: https://docs.microsoft.com/en-us/azure/billing/billing-download-azure-invoice-daily-
usage-date

NEW QUESTION: 6
Which blade should you instruct the finance department auditors to use?
A. External services
B. Usage + quotas
C. Cost analysis
D. Payment methods
Answer: B
Explanation
Subscription costs are based on usage.
Microsoft Azure limits are also called quotas.
Scenario: During the testing phase, auditors in the finance department must be able to review all
Azure costs from the past week.

NEW QUESTION: 7
You plan to use Azure Network Watcher to perform the following tasks:
* Task1: Identify a security rule that prevents a network packet from reaching an Azure virtual
machine.
* Task2: Validate outbound connectivity from an Azure virtual machine to an external host.
Which feature should you use for each task? To answer, select the appropriate options in the answer
area.
NOTE:Each correct selection is worth one point.
Answer:
Explanation
Task 1: IP flow verify
IP flow verify checks if a packet is allowed or denied to or from a virtual machine. The information
consists of direction, protocol, local IP, remote IP, local port, and remote port. If the packet is denied
by a security group, the name of the rule that denied the packet is returned. While any source or
destination IP can be chosen, IP flow verify helps administrators quickly diagnose connectivity issues
from or to the internet and from or to the on-premises environment.
Task 2:
With the addition of Connection Troubleshoot, Network Watcher will see an incremental increase in
its capabilities and ways for you to utilize it in your day to day operations. You can now, for example,
check connectivity between source (VM) and destination (VM, URI, FQDN, IP Address).
References:
https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-ip-flow-verify-overview
https://azure.microsoft.com/en-us/blog/network-watcher-connection-troubleshoot-now-generally-
available/

NEW QUESTION: 8
You have two Azure Active Directory (Azure AD) tenants named contoso.com and
fabrikam.com.
You have a Microsoft account that you use to sign in to both tenants.
You need to configure the default sign-in tenant for the Azure portal.
What should you do?
A. From Azure Cloud Shell, runSet-AzureRmSubscription.
B. From Azure Cloud Shell, runSet-AzureRmContext.
C. From the Azure portal, configure the portal settings.
D. From the Azure portal, change the directory.
Answer: D
Explanation
Change the subscription directory in the Azure portal.
The classic portal feature Edit Directory, that allows you to associate an existing subscription to your
Azure Active Directory (AAD), is now available in Azure portal. It used to be available only to Service
Admins with Microsoft accounts, but now it's available to users with AAD accounts as well.
To get started:
* Go to Subscriptions.
* Select a subscription.
* Select Change directory.

NEW QUESTION: 9
You have an on-premises data center and an Azure subscription. The data center contains two
VPN devices.
The subscription contains an Azure virtual network named VNet1. VNet1 contains a gateway subnet.
You need to create a site-to-site VPN. The solution must ensure that is a single instance of an Azure
VPN gateway fails, or a single on-premises VPN device fails, the failure will not cause an interruption
that is longer than two minutes.
What is the minimum number of public IP addresses, virtual network gateways, and local network
gateways required in Azure? To answer, select the appropriate options in the answer area.
NOTE:Each correct selection is worth one point.
Answer:
Explanation
Box 1: 4
Two public IP addresses in the on-premises data center, and two public IP addresses in the VNET.
The most reliable option is to combine the active-active gateways on both your network and Azure,
as shown in the diagram below.
Box 2: 2
Every Azure VPN gateway consists of two instances in an active-standby configuration. For any
planned maintenance or unplanned disruption that happens to the active instance, the standby
instance would take over (failover) automatically, and resume the S2S VPN or VNet-to-VNet
connections.
Box 3: 2
Dual-redundancy: active-active VPN gateways for both Azure and on-premises networks References:

https://www.testsimulate.com/AZ-102-study-materials.html