Pass AZ-303 Brain Dump Updated Certification Sample Questions
Online AZ-303 Test Brain Dump Question and Test Engine
How to study the AZ-303: Microsoft Azure Architect Technologies Exam
The preparation of certification exams could be covered with two resource types. The first one is the study guides, reference books, and study forums that are elaborated and appropriate for building information from the ground up. Apart from the video tutorials and lectures are a good option to ease the pain of through study and are relatively make the study process more interesting nonetheless these demand time and concentration from the learner. Smart candidates who wish to create a solid foundation altogether examination topics and connected technologies typically mix video lectures with study guides to reap the advantages of each but practice exams or practice exam engines is one important study tool that goes typically unnoted by most candidates. Practice exams are designed with our experts to make exam prospects test their knowledge on skills attained in the course, as well as prospects become comfortable and familiar with the real exam environment. Statistics have indicated exam anxiety plays a much bigger role in student’s failure in the exam than the fear of the unknown. RealValidExam expert team recommends preparing some notes on these topics along with it don’t forget to practice AZ-303 dumps which had been written by our expert team, each of these can assist you loads to clear this exam with excellent marks.
Introduction to AZ-303: Microsoft Azure Architect Technologies Exam
Candidates for AZ-303 Exam are seeking to prove fundamental knowledge and skills in the Azure Architect Technologies domain. Before taking this exam, aspirants ought to have a solid fundamental information of the concepts shared in the preparation guide as well as basic understanding of Azure administration, Azure development, and DevOps would give an added edge.
It is suggested that professionals accustomed to the ideas and also the technologies represented here by taking relevant training courses. Candidates are expected to have some hands-on experience in monitoring security, performance, and monitoring performance capacity, Implement virtual networking.
After passing this exam, candidates get a certificate from Microsoft that helps them to demonstrate their proficiency to their clients and employers.
This exam is replaced with previous exam named as Microsoft Azure Architect Technologies Exam AZ-300.Microsoft Azure Architect Technologies Exam AZ-300 will be retired from 30.09.2020. To earn the Azure solutions architect expert certifications you can mix the old and new exams.
Az-300 and Az-303 = Azure solutions architect expert
NEW QUESTION 43
Note: This question is part of series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure Active Directory (Azure AD) tenant named contoso.com.
A user named Admin1 attempts to create an access review from the Azure Active Directory admin center and discovers that the Access reviews settings are unavailable. Admin1 discovers that all the other Identity Governance settings are available.
Admin1 is assigned the User administrator, Compliance administrator, and Security administrator roles.
You need to ensure that Admin1 can create access reviews in contoso.com.
Solution: You assign the Service administrator role to Admin1.
Does this meet the goal?
- A. No
- B. Yes
Answer: A
Explanation:
Explanation
Instead use Azure AD Privileged Identity Management.
Note: PIM essentially helps you manage the who, what, when, where, and why for resources that you care about. Key features of PIM include:
* Conduct access reviews to ensure users still need roles
References:
https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure
NEW QUESTION 44
An app uses a virtual network with two subnets. One subnet is used for the application server. The other subnet is used for a database server. A network virtual appliance (NVA) is used as a firewall.
Traffic destined for one specific address prefix is routed to the NVA and then to an on-premises database server that stores sensitive data. A Border Gateway Protocol (BGP) route is used for the traffic to the on- premises database server.
You need to recommend a method for creating the user-defined route.
Which two options should you recommend? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
- A. For the next hop type, use a virtual network peering.
- B. For the virtual network configuration, use a VPN.
- C. For the virtual network configuration, use Azure ExpressRoute.
- D. For the next hop type, use a virtual network gateway.
Answer: B,D
Explanation:
Section: [none]
Explanation:
You can create custom, or user-defined, routes in Azure to override Azure's default system routes, or to add additional routes to a subnet's route table. You can specify the following next hop types when creating a user- defined route:
* Virtual appliance: A virtual appliance is a virtual machine that typically runs a network application, such as a firewall.
* Virtual network gateway: Specify when you want traffic destined for specific address prefixes routed to a virtual network gateway. The virtual network gateway must be created with type VPN. You cannot specify a virtual network gateway created as type ExpressRoute in a user-defined route because with ExpressRoute, you must use BGP for custom routes.
* None: Specify when you want to drop traffic to an address prefix, rather than forwarding the traffic to a destination.
* Virtual network: Specify when you want to override the default routing within a virtual network.
* Internet: Specify when you want to explicitly route traffic destined to an address prefix to the Internet, or if you want traffic destined for Azure services with public IP addresses kept within the Azure backbone network.
Incorrect Answers:
B: You cannot specify VNet peering or VirtualNetworkServiceEndpoint as the next hop type in user-defined routes. Routes with the VNet peering or VirtualNetworkServiceEndpoint next hop types are only created by Azure, when you configure a virtual network peering, or a service endpoint.
C: You cannot specify a virtual network gateway created as type ExpressRoute in a user-defined route because with ExpressRoute, you must use BGP for custom routes.
Reference:
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-udr-overview
NEW QUESTION 45
You play to deploy an Azure virtual machine named VM1 by using an Azure Resource Manager template.
You need to complete the template.
What should you include in the template? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Within your template, the dependsOn element enables you to define one resource as a dependent on one or more resources. Its value can be a comma-separated list of resource names.
Box 1: 'Microsoft.Network/networkInterfaces'
This resource is a virtual machine. It depends on two other resources:
Microsoft.Storage/storageAccounts
Microsoft.Network/networkInterfaces
Box 2: 'Microsoft.Network/virtualNetworks/'
The dependsOn element enables you to define one resource as a dependent on one or more resources. The resource depends on two other resources:
Microsoft.Network/publicIPAddresses
Microsoft.Network/virtualNetworks
References:
https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-manager-tutorial-create-templates-with-dependent-resources
NEW QUESTION 46
HOTSPOT
Your company runs several Windows and Linux virtual machines (VMs).
You must design a solution that implements data privacy, compliance, and data sovereignty for all storage uses in Azure. You plan to secure all Azure storage accounts by using Role-Based Access Controls (RBAC) and Azure Active Directory (Azure AD).
You need to secure the data used by the VMs.
Which solution should you use? To answer, select the appropriate solutions in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Answer:
Explanation:
Section: [none]
Explanation/Reference:
References:
https://docs.microsoft.com/en-us/azure/security/security-storage-overview
NEW QUESTION 47
Note: This question is part of series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure Cosmos DB database that contains a container named Container1. The partition key for Container1 is set to /day. Container1 contains the items shown in the following table.
You need to programmatically query Azure Cosmos DB and retrieve item1 and item2 only.
Solution: You run the following query.
You set the EnableCrossPartitionQuery property to False.
Does this meet the goal?
- A. No
- B. Yes
Answer: A
Explanation:
Explanation
Returns Item1 only as EnableCrossPartitionQuery property to False. If EnableCrossPartitionQuery property is set to true, it will return Item1 and Item3.
Reference:
https://docs.microsoft.com/en-us/azure/cosmos-db/sql-query-where
NEW QUESTION 48
Your company hosts multiple websites by using Azure virtual machine scale sets (VMSS) that run Internet Information Server (IIS).
All network communications must be secured by using end to end Secure Socket Layer (SSL) encryption. User sessions must be routed to the same server by using cookie-based session affinity.
The image shown depicts the network traffic flow for the websites to the VMSS.
Use the drop-down menus to select the answer choice that answers each question.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/bs-latn-ba/azure//application-gateway/tutorial-url-redirect-powershell
NEW QUESTION 49
HOTSPOT
You have a web server app named App1 that is hosted in three Azure regions.
You plan to use Azure Traffic Manager to distribute traffic optimally for App1.
You need to enable Real User Measurements to monitor the network latency data for App1.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Answer:
Explanation:
Section: [none]
Explanation:
Box 1: Select Generate key
You can configure your web pages to send Real User Measurements to Traffic Manager by obtaining a Real User Measurements (RUM) key and embedding the generated code to web page.
Obtain a Real User Measurements key
The measurements you take and send to Traffic Manager from your client application are identified by the service using a unique string, called the Real User Measurements (RUM) Key. You can get a RUM key using the Azure portal, a REST API, or by using the PowerShell or Azure CLI.
To obtain the RUM Key using Azure portal:
1. From a browser, sign in to the Azure portal. If you don't already have an account, you can sign up for a free one-month trial.
2. In the portal's search bar, search for the Traffic Manager profile name that you want to modify, and then click the Traffic Manager profile in the results that the displayed.
3. In the Traffic Manager profile blade, click Real User Measurements under Settings.
4. Click Generate Key to create a new RUM Key.
Box 2: Embed the Traffic Manager JavaScript code snippet.
Embed the code to an HTML web page
After you have obtained the RUM key, the next step is to embed this copied JavaScript into an HTML page that your end users visit.
This example shows how to update an HTML page to add this script. You can use this guidance to adapt it to your HTML source management workflow.
1. Open the HTML page in a text editor
2. Paste the JavaScript code you had copied in the earlier step to the BODY section of the HTML (the copied code is on line 8 & 9, see figure 3).
Reference:
https://docs.microsoft.com/en-us/azure/traffic-manager/traffic-manager-create-rum-web-pages Testlet 2 Case study Overview ADatum Corporation is a financial company that has two main offices in New York and Los Angeles. ADatum has a subsidiary named Fabrikam, Inc. that shares the Los Angeles office.
ADatum is conducting an initial deployment of Azure services to host new line-of-business applications and is preparing to migrate its existing on-premises workloads to Azure.
ADatum uses Microsoft Exchange Online for email.
Existing Environment
On-Premises Environment
The on-premises workloads run on virtual machines hosted in a VMware vSphere 6 infrastructure. All the virtual machines are members of an Active Directory forest named adatum.com and run Windows Server 2016.
The New York office uses an IP address space of 10.0.0.0/16. The Los Angeles office uses an IP address space of 10.10.0.0/16.
The offices connect by using a VPN provided by an ISP. Each office has one Azure ExpressRoute circuit that provides access to Azure services and Microsoft Online Services. Routing is implemented by using Microsoft peering.
The New York office has a virtual machine named VM1 that has the vSphere console installed.
Azure Environment
You provision the Azure infrastructure by using the Azure portal. The infrastructure contains the resources shown in the following table.
AG1 has two backend pools named Pool11 and Pool12. AG2 has two backend pools named Pool21 and Pool22.
Requirements
Planned Changes
ADatum plans to migrate the virtual machines from the New York office to the East US Azure region by using Azure Site Recovery.
Infrastructure Requirements
ADatum identifies the following infrastructure requirements:
* A new web app named App1 that will access third-parties for credit card processing must be deployed
* A newly developed API must be implemented as an Azure function named App2. App2 will use a blob storage trigger. App2 must process new blobs immediately.
* The Azure infrastructure and the on-premises infrastructure must be prepared for the migration of the VMware virtual machines to Azure.
* The sizes of the Azure virtual machines that will be used to migrate the on-premises workloads must be identified.
* All migrated and newly deployed Azure virtual machines must be joined to the adatum.com domain.
* AG1 must load balance incoming traffic in the following manner:
1. http://corporate.adatum.com/video/* will be load balanced across Pool11
2. http://corporate.adatum.com/images/* will be load balanced across Pool12
* AG2 must load balance incoming traffic in the following manner:
1. http://www.adatum.com will be load balanced across Pool21
2. http://www.fabrikam.com will be load balanced across Pool22
* ER1 must route traffic between the New York office and the platform as a service (PaaS) services in the East US Azure region, as long as ER1 is available.
* ER2 must route traffic between the Los Angeles office and the PaaS services in the West US region, as long as ER2 is available.
* ER1 and ER2 must be configured to fail over automatically.
Application Requirements
App2 must be able to connect directly to the private IP addresses of the Azure virtual machines. App2 will be deployed directly to an Azure virtual network.
Inbound and outbound communications to App1 must be controlled by using NSGs.
Pricing Requirements
ADatum identifies the following pricing requirements:
* The cost of App1 and App2 must be minimized.
* The transactional charges of Azure Storage accounts must be minimized.
NEW QUESTION 50
HOTSPOT
You have an Azure subscription named Subscription1 that contains a virtual network named VNet1.
You add the users in the following table.
Which user can perform each configuration? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Answer:
Explanation:
Section: [none]
Explanation:
Box 1: User1 only.
User1: The Owner Role lets you manage everything, including access to resources.
Not User3: The Network Contributor role lets you manage networks, but not access to them.
Box 2: User1 and User2 only
The Security Admin role: In Security Center only: Can view security policies, view security states, edit security policies, view alerts and recommendations, dismiss alerts and recommendations.
Reference:
https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles
NEW QUESTION 51
You have an Azure subscription named Subscription1.
You create several Azure virtual machines in Subscription1. All of the virtual machines belong to the same virtual network.
You have an on-premises Hyper-V server named Server1. Server1 hosts a virtual machine named VM1.
You plan to replicate VM1 to Azure.
You need to create additional objects in Subscription1 to support the planned deployment.
Which three objects should you create? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
- A. storage account
- B. endpoint
- C. Azure Recovery Services Vault
- D. Hyper-V site
- E. Azure Traffic Manager instance
- F. replication policy
Answer: C,D,F
Explanation:
Section: [none]
NEW QUESTION 52
You have an Azure Service Bus and two clients named Client1 and Client2.
You create a Service Bus queue named Queue1 as shown in the exhibit. (Click the Exhibit tab.)
Client1 send messages to Queue1 as shown in the following table.
Client2 reads the messages from Queue1 at 12:01:05.
How will the messages be presented to Client2?
- A. Client2 will read four messages in the following order: M3, M2, M1 and then M3.
- B. Client2 will read three messages in the following order: M3, M1, and then M2.
- C. Client2 will read four messages in the following order: M3, M1, M2 and then M3.
- D. Client2 will read three messages in the following order: M1, M2, and then M3.
Answer: A
Explanation:
Section: [none]
Explanation:
It should be M3, M2, M1 as duplicate detection is enabled, and the duplication detection window is set to 10 minutes. The second M3 message in the queue would be discarded.
Note 1: Duplicate detection enables the sender resend the same message, and the queue or topic discards any duplicate copies.
Note 2: Queues offer First In, First Out (FIFO) message delivery to one or more competing consumers. That is, receivers typically receive and process messages in the order in which they were added to the queue, and only one message consumer receives and processes each message.
Reference:
https://docs.microsoft.com/en-us/azure/service-bus-messaging/service-bus-queues-topics-subscriptions
https://docs.microsoft.com/en-us/azure/service-bus-messaging/duplicate-detection
NEW QUESTION 53
You need to recommend an identify solution that meets the technical requirements.
What should you recommend?
- A. federated single-on (SSO) and Active Directory Federation Services (AD FS)
- B. cloud-only user accounts
- C. Pass-through Authentication and single sign-on (SSO)
- D. password hash synchronization and single sign-on (SSO)
Answer: C
Explanation:
Explanation
Active Directory Federation Services is a feature and web service in the Windows Server Operating System that allows sharing of identity information outside a company's network.
Scenario: Technical Requirements include:
Prevent user passwords or hashes of passwords from being stored in Azure.
References: https://www.sherweb.com/blog/active-directory-federation-services/
NEW QUESTION 54
You discover that VM3 does NOT meet the technical requirements.
You need to verify whether the issue relates to the NSGs.
What should you use?
- A. IP flow verify in Azure Network Watcher
- B. the security recommendations in Azure Advisor
- C. Diagram in VNet1
- D. Diagnostic settings in Azure Monitor
- E. Diagnose and solve problems in Traffic Manager profiles
Answer: A
Explanation:
Section: [none]
Explanation:
Scenario: Contoso must meet technical requirements including:
Ensure that VM3 can establish outbound connections over TCP port 8080 to the applications servers in the Montreal office.
IP flow verify checks if a packet is allowed or denied to or from a virtual machine. The information consists of direction, protocol, local IP, remote IP, local port, and remote port. If the packet is denied by a security group, the name of the rule that denied the packet is returned. While any source or destination IP can be chosen, IP flow verify helps administrators quickly diagnose connectivity issues from or to the internet and from or to the on-premises environment.
References:
https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-ip-flow-verify-overview
NEW QUESTION 55
You have a web app named WebApp1 that uses an Azure App Service plan named Plan1. Plan1 uses the D1 pricing tier and has an instance count of 1.
You need to ensure that all connections to WebApp1 use HTTPS.
What should you do first?
- A. Scale out Plan1.
- B. Scale up Plan1.
- C. Disable anonymous access to WebApp1.
- D. Modify the connection strings for WebApp1.
Answer: B
Explanation:
Section: [none]
Explanation:
The D1 (Shared) pricing tier does not support HTTPS.
NEW QUESTION 56
HOTSPOT
You have an Azure subscription named Subscription1.
Subscription1 contains the virtual machines in the following table.
Subscription1 contains a virtual network named VNet1 that has the subnets in the following table.
VM3 has a network adapter named NIC3. IP forwarding is enabled on NIC3. Routing is enabled on VM3.
You create a route table named RT1 that contains the routes in the following table.
You apply RT1 to Subnet1 and Subnet2.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:
Answer:
Explanation:
Section: [none]
Explanation:
IP forwarding enables the virtual machine a network interface is attached to:
* Receive network traffic not destined for one of the IP addresses assigned to any of the IP configurations assigned to the network interface.
* Send network traffic with a different source IP address than the one assigned to one of a network interface's IP configurations.
The setting must be enabled for every network interface that is attached to the virtual machine that receives traffic that the virtual machine needs to forward. A virtual machine can forward traffic whether it has multiple network interfaces or a single network interface attached to it.
Box 1: Yes
The routing table allows connections from VM3 to VM1 and VM2. And as IP forwarding is enabled on VM3, VM3 can connect to VM1.
Box 2: No
VM3, which has IP forwarding, must be turned on, in order for VM2 to connect to VM1.
Box 3: Yes
The routing table allows connections from VM1 and VM2 to VM3. IP forwarding on VM3 allows VM1 to connect to VM2 via VM3.
Reference:
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-udr-overview
https://www.quora.com/What-is-IP-forwarding
NEW QUESTION 57
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution. Determine whether the solution meets the stated goals.
You need to meet the vendor notification requirement.
Solution: Update the Delivery API to send emails by using a cloud-based email service.
Does the solution meet the goal?
- A. No
- B. Yes
Answer: A
Explanation:
Section: [none]
Explanation/Reference:
References:
https://docs.microsoft.com/en-us/azure/api-management/api-management-howto-configure-notifications
NEW QUESTION 58
......
The AZ-303: Microsoft Azure Architect Technologies exam is for those candidates with experience in the design and implementation of solutions that work on Microsoft Azure. These include different areas, such as compute, security, storage, and network.
The potential candidates for this path are the Azure Solution Architects who want to get certified. They collaborate with the Cloud DBAs, Cloud administrators, and clients for the implementation of various solutions. These professionals have competence in translating the business requirements into reliable, scalable, and secure Cloud solutions. They also have the role of advising the stakeholders on various business activities. Those applicants who pass the Microsoft AZ-303 exam fulfill a part of the requirements for obtaining the Microsoft Certified: Azure Solutions Architect Expert certification.
Real Microsoft AZ-303 Exam Dumps with Correct 211 Questions and Answers: https://www.realvalidexam.com/AZ-303-real-exam-dumps.html
