Free AZ-303 sample questions

Correct answer: Run a full import using the Service Manager

Explanation: This issue is also mentioned in the Microsoft documentation. Staging modeStaging mode can be used for several scenarios, including:• High availability.• Test and deploy new configuration changes.• Introduce a new server and decommission the old. During installation, you can select the server to be in staging mode. This action makes the server active for import and synchronization, but it does not run any exports. A server in staging mode is not running password sync or password writeback, even ifyou selected these features during installation. When you disable staging mode, the server starts exporting, enables password sync, and enables password writeback. Since this is clearly mentioned in the documentation, all other options are incorrect -- Reference: httDs://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-staging-serverIt

Correct answer: Load Balancing rules

Explanation: You will define this in the load balancing rule as shown below:Add load balancing rule? X* Namedemo* IP Version® IPv4 O IPv6* Frontend IP address eI 51.140.87.135 (LoadBalancerFrontEnd)Protocol®TCP QUDP* PortI 80* Backend portFsoBackend pool eI demopool (1 virtual machine7Health probedemoprobe (TCP:80))Session persistence 6NoneNoneClient IPClient IP and protocolFloating lP (direct server retur

Correct answer: Azure Key Vault

Explanation: You can use the Azure Key vault service for the storage of encryption keys The Microsoft documentation mentions the following:About Azure Key VaultAzure Key Vault helps solve the following problems:• Secrets Management - Azure Key Vault can be used to Securely store and tightly control access to tokens, passwords, certificates, API keys, and other secrets• Key Management - Azure Key Vault can also be used as a Key Management solution. Azure Key Vault makes it easy to create and control the encryption keys used to encrypt your data.• Certificate Management - Azure Key Vault is also a service that lets you easily provision, manage, and deploy public and private Transport Layer Security/Secure Sockets Layer (TLS/SSL) certificates for use with Azure and your internal connected resources.• Store secrets backed by Hardware Security Modules - The secrets and keys can be protected either by software or FIPS 140-2 Level 2 validated HSMsSince this is clearly given in the Microsoft documentation, all other options are incorrect -- Reference: https://docs.microsoft.com/en-us/azure/key-vault/general/overview

Correct answer: No

B

Correct answer: No

B

Correct answer: Azure Application Gateway

Explanation: The Azure Application Gateway service has the ability to provide SSL offloading. This helps in the SSL encryption and decryption. The Microsoft documentation mentions the following:Overview ofTLS termination and end to end TLS with Application GatewayTransport Layer Security (TLS), previously known as Secure Sockets Layer (SSL), is the standard security technology for establishing an encrypted link between a web server and a browser. This link ensures that all data passed between the web server and browsers remain private and encrypted. Application gateway supports both TLS termination at the gateway as well as end to end TLS encryption. Since this is clearly mentioned in the Microsoft documentation, all other options are incorrect -- Reference: https://docs.microsoft.com/en-us/azure/application-gateway/ssl-overview

Correct answer: 4

Explanation: Here the scale out condition of “Increase the instance count by one when the CPU percentage is greater than 80% will be met. Hence the number of instances will keep on increasing till the maximum limit. The scale in condition of'Decrease the instance count by one when the Memory percentage is less than 50% will be ignored because you need to have both of the scale in conditions that need to be met. This logic of multiple scale in and scale out conditions is also given in the Microsoft documentation:Considerations for scaling when multiple rules are configured in a profileThere are cases where you may have to set multiple rules in a profile. The following autoscale rules are used by the autoscale engine when multiple rules are set. On scale-out, autoscale runs ifany rule is met. On scale-in, autoscale require all rules to be met. To illustrate, assume that you have the following four autoscale rules:*lfCPU(30%,scale-in by1• If Memory ( 50%, scale-in by 1*lfCPU)75%,scale-out by1• If Memory ) 75%, scale-out by 1Then the follow occurs:• If CPU is 76% and Memory is 50%, we scale out.• If CPU is 50% and Memory is 76%, we scale out. On the other hand, ifCPU is 25% and memory is 51% autoscale does not scale-in. In orderto scale-in, CPU must be 29% and Memory 49%.Since this is clear from the reasoning, all other options are incorrect -- Reference: https://docs.microsoft.com/en-us/azure/azure-monitor/platform/autoscale-best-practices

Correct answer: Yes

Explanation: Yes, you can achieve this by using Windows Server Backup. All of the backup data will be stored in the Azure Recovery Services vault. -- Reference: httDs://docs.microsoft.com/en-us/azure/backup/backu p-azure-microsoft-azure-backu pIt

Correct answer: monitoring

Explanation: Since we need to have monitoring as perthe case study, we need to enable this option. An example ofthis is given in the Microsoft documentation:Create AKS clusterUse the az aks create command to create an AKS cluster. The following example creates a cluster named myAKSCIuster with one node. Azure Monitor for containers is also enabled using the --enable-addons monitoring parameter. Azure CLIR5c0py0Try Itaz aks create \--resource-group myResourceGroup \--name myAKSCIuster \--node-count 1 \[--enable-addons monitoring |'--generate-ssh-keysSince this is clearly given in the Microsoft documentation, all other options are incorrect -- Reference: https://docs.microsoft.com/en-us/azure/aks/ku brn etes-wa I kth ro u g h

Correct answer: Add a new Outbound rule which denies traffic on port 80

Explanation: Here we need to add an outbound rule as shown below Click on Add outbound port rule:Inbound port rulesOutbound port rules ; Application security groupsLoad balancing0 Network security group demovm-nsg (attached to network interface: demovm995) Impacts 0 subnets, 1 network interfacesAdd outbourxl port rutePRIORITYNAMEPROTOCOLSOURCEDESTINATIONACTION65000AllowVnetOutBoundVirtualNetworkVirtualNetwork© Allow65001AllowlnternetOutBoundInternet© Allow65500DenyAIIOutBoundO Deny* Source eI Any* Source port ranges 6* DestinationI Service TagDestination service tagInternet* Destination port ranges e80* Protocol