Microsoft AZ-301 Free Practice Questions 2021

NEW QUESTION 1
A company named Contoso, Ltd. has an Azure Active Directory (Azure AD) tenant that uses the BAsic license.
You plan t deploy two applications to Azure. The application has the requirements shown in the following table.

Which authentication Strategy should you recommend for each application? To answer, drag the appropriate authentication strategies to the correct applications. Each authentication strategy may be used once more than once, or not at all. You may need to drag the split bar between panes or scroll to view content
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

NEW QUESTION 2
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result these questions will not appear in the review screen.
You need to deploy resources to host a stateless web app in an Azure subscription. The solution must meet the following requirements:
• Provide access to the full .NET framework.
• Provide redundancy it an Azure legion fails.
• Grant administrators access to the operating system to install custom application dependencies. Solution: You deploy a web app in an Isolated App Service plan. Does this meet the goal?

• A. Yes
• B. No

Answer: A

NEW QUESTION 3
You are designing a data protection strategy for Azure virtual machines. All the virtual machines are in the Standard tier and use managed disks.
You need to recommend a solution that meets the following requirements:
The use of encryption keys is audited.
All the data is encrypted at rest always.
You manage the encryption keys, not Microsoft.
What should you include in the recommendation?

• A. BitLocker Drive Encryption (BitLocker)
• B. Azure Storage Service Encryption
• C. client-side encryption
• D. Azure Disk Encryption

Answer: D

Explanation: References:
https://docs.microsoft.com/en-us/azure/security/azure-security-disk-encryption-overview

NEW QUESTION 4
You have an Azure subscription that contains an Azure Cosmos DB account.
You need to recommend a solution to generate an alert from Azure Log Analytics when a request charge for a query exceeds 50 request units more than 20 times within a 15-minute window.
What should you recommend?

• A. Create a search query to identify when requestCharge_s exceeds 50. Configure an alert threshold of 20 and a period of 15.
• B. Create a search query to identify when duration_s exceeds 20 and requestCharge_s exceeds 50.Configure a period of 15.
• C. Create a search query to identify when requestCharge_s exceeds 20. Configure a period of 15 and a frequency of 20.
• D. Create a search query to identify when duration_s exceeds 20. Configure a period of 15.

Answer: A

NEW QUESTION 5
You have the application architecture shown in the following exhibit.

Use the drop-down menus to select choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

Answer:

Explanation: References:
https://docs.microsoft.com/en-us/azure/traffic-manager/traffic-manager-routing-methods https://docs.microsoft.com/en-us/azure/traffic-manager/traffic-manager-monitoring

NEW QUESTION 6
You plan to import data from your on-premises environment into Azure. The data is shown in the following table.

What should you recommend using to migrate the data? To answer, drag the appropriate tools to the correct data sources. Each tool may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

Answer:

Explanation: References:
https://docs.microsoft.com/en-us/azure/dms/tutorial-sql-server-to-azure-sql https://docs.microsoft.com/en-us/azure/cosmos-db/import-data

NEW QUESTION 7
You deploy Azure service by using Azure Resources Manager templates. The template reference secrets are stored in Azure key Vault.
You need to recommend a solution for accessing the secrets during deployments. The solution must prevent the users who are performing the deployments from accessing the secrets in the key vault directly.
What should you include in the recommendation? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Answer:

Explanation:

NEW QUESTION 8
You have standard Load balancer configured to support three virtual machines on the same subnet. You need to recommend a solution to notify administrators when the load balancer fails.
Which metrics should you recommend using to test the load balancer? To answer, drag the appropriate metrics to the correct conditions. Each metric may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOT: Each correct selection is worth one point.

Answer:

Explanation:

NEW QUESTION 9
To meet the authentication requirements of Fabrikam, what should you include in the solution? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Answer:

Explanation:

NEW QUESTION 10
You need to recommend a solution for the collection of security logs the middle tier of the payment processing system.
What should you include in the recommendation?

• A. Azure Notification Hubs
• B. the Azure Diagnostics agent
• C. Azure Event Hubs
• D. the Azure Log Analytics agent

Answer: D

Explanation: References:
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/diagnostics-extension-overview

NEW QUESTION 11
You need to deploy resources to host a stateless web app in an Azure subscription. The solution must meet the following requirements:
• Provide access to the full .NET framework.
• Provide redundancy if an Azure region fails.
• Grant administrators access to the operating system to install custom application dependencies. Solution: You deploy a web app in an Isolated App Service plan.
Does this meet the goal?

• A. Yes
• B. No

Answer: A

NEW QUESTION 12
You have an Azure Contoso DB account named Account1 that has one write region and four read regions. You need to recommend a solution to ensure that, by default, any reads containers in Account1 will never see out writes. The solution must minimize costs.
What should you recommend?

• A. Configure Account1 to use the Strong consistency level.
• B. Create all the containers m Account1 as fixed.
• C. Create all the containers m Account1 as unlimited.
• D. Configure Account 1 to use the Consistent Prefix consistency level

Answer: A

NEW QUESTION 13
You plan to use Azure Site Recovery to protect several on-premises physical server workloads. Each server workload is independent of the other. The workloads are stateless.
You need to recommend a failover strategy to ensure that if the on-premises data center fails, the workloads are available in Azure as quickly as possible.
Which failover strategy should you include in the recommendation?

• A. Latest
• B. Latest app-consistent
• C. Latest multi-VM processed
• D. Latest processed

Answer: D

Explanation: References:
https://docs.microsoft.com/en-us/azure/site-recovery/site-recovery-failover

NEW QUESTION 14
You have five .NET Core applications that run on 10 Azure virtual machines in the same subscription.
You need to recommend a solution to ensure that the applications can authenticate by using the same Azure Active Directory (Azure AD) identity. The solution must meet the following requirements:
Ensure that the applications can authenticate only when running on the 10 virtual machines.
Minimize administrative effort.
What should you include in the recommendation? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Answer:

Explanation:

NEW QUESTION 15
You deploy several Azure SQL Database instances.
You plan to configure the Diagnostics settings on the databases as shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

Answer:

Explanation: In the exhibit, the SQLInsights data is configured to be stored in Azure Log Analytics for 90 days. However, the question is asking for the “maximum” amount of time that the data can be stored which is 730 days.

NEW QUESTION 16
Note: This question is part of series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure subscription named Project1. Only a group named Project1admins is assigned roles in the Project1 subscription. The Project1 subscription contains all the resources for an application named Application1.
Your company is developing a new application named Application2. The members of the Application2 development team belong to an Azure Active Directory (Azure AD) group named App2Dev.
You identify the following requirements for Application2:
The members of App2Dev must be prevented from changing the role assignments in Azure.
The members of App2Dev must be able to create new Azure resources required by Application2.
All the required role assignments for Application2 will be performed by the members of
Project1admins.
You need to recommend a solution for the role assignments of Application2.
Solution: Create a new Azure subscription named Project2. Assign Project1admins the Owner role for the Project2 subscription. Assign App2Dev the Contributor role for the Project2 subscription.
Does this meet the goal?

• A. Yes
• B. No

Answer: A