Azure Backup and Storage: Roles, Tags, Recovery, and Access, Exams of Information Technology

Download Azure Backup and Storage: Roles, Tags, Recovery, and Access and more Exams Information Technology in PDF only on Docsity! D338 Cloud Platform Solutions 127 Questions and Answers Administrators and users A company is creating guidelines for dictating which users can access their environment and when. Which role or roles can invite guest users into an Azure AD tenant by default? A built-in role Which type of Azure AD object should be used to manage delegation of permissions within an Azure AD administrative unit? Brainpower Read More Azure CLI A software development company needs to update three Microsoft Azure AD groups to meet new security requirements. Which tool can be used to update the groups? Email address Three new users need to be invited to a company's Azure AD tenant. Which piece of information should be specified for each new guest account? Custom role A company identifies a set of Azure security permissions required for a new IT group that manages virtual machines. What should be created to apply the security permissions to the group? A more permissive role at a resource-level scope grants the user additional permissions. What determines the effective permissions when assigning multiple roles to a user? Add users to groups and assign roles to the groups. An administrator is assigning an Azure role to an Azure user and receives the following error: No more role assignments can be created. What should be configured to resolve the issue? Clone an existing role and modify it. Azure AD users manage Azure resources based on a built-in role assignment. Their privileges need to be adjusted by removing a subset of permissions. How should the new security permissions be created with the least amount of work? Azure Policy What should be used to enforce standardized tagging rules to Azure resources? Tags A company has three virtual machines that are categorized by environment purpose, such as development, test, or production. The virtual machines are grouped by different business areas in the management group hierarchy, not by environment purpose. What can be implemented to identify the environment purpose for the virtual machines? Management groups A company has three business areas that are consuming Azure resources. The business areas are using several Enterprise Agreement (EA) subscriptions. What should be used to grant a user access to the EA subscriptions through a single role assignment? Resource A company has a single subscription for Azure resources shared between different business units. The company intends to assign tags to identify the Azure-related costs that should be charged back to each business unit. Which level should be used to assign the tags? Recovery Services vault A virtual machine hosted in Azure is backed up by using Azure Backup. Where are the backup policies associated with the virtual machine stored? An Azure Log Analytics workspace Which Azure resource should be created to store the Azure Backup reporting data? Azure Site Recovery A company needs to implement continuous replication of an on-premises VMware virtual machine to an Azure virtual machine. Which service should be used? Blobs + Disks Which two types of Azure Storage objects are supported by Azure Backup vaults? Full name An administrator is creating an Azure Active Directory user and enters the sign-in address for the user. Which additional property requires a value? Security group with Assigned membership Which group and membership types should be used to set permissions on Azure resources when creating a group in Azure Active Directory Free edition? Source Which Azure Active Directory user property specifies the type of user as a cloud or Microsoft Account user? CSV An administrator needs to create Azure Active Directory users in bulk. Which type of file should the administrator create? User Access Administrator first to allow access from the employee's workstation? User delegation SAS Which shared access signature (SAS) type uses Azure Active Directory credentials to secure access to blob storage? Geo-redunant storage (GRS) A cloud administrator is creating an Azure Storage account that must meet the following requirements: Minimize costs; Provide fault tolerance if the Azure region that hosts the storage account experiences a disaster; Support hot, cool, and archive blob tiers. Which account type should the administrator use? Contributor An administrator is creating a cloud endpoint that points to an Azure file share. The solution must satisfy the principle of least privilege. Which role should be assigned to the administrator? Dataset CSV file and Driveset CSV file A company needs to migrate 14 TB of files to an Azure Storage account using the Azure Import/Export service. An administrator needs to prepare the disks that contain data that needs to be migrated. Which files must the administrator create? Blob, Table, and File only An administrator needs to copy files from an on-premise server to an Azure Storage account by using AzCopy. Which Azure Storage services can the data be copied into? Azure Storage Explorer to copy the files An administrator needs to copy media files from an on-premise server to an Azure blob container by using a graphical user interface. Which tool should the administrator use? Blob versioning and change feed An administrator wants to implement Azure Blob Storage object replication. Which setting or settings should the administrator configure first? 445 Which port should an administrator open to ensure that users can connect to an Azure file share from their home computer? Soft Delete A company has a general-purpose v2 Azure Storage account in the Standard/Hot performance access tier with locally redundant storage. Blob data that is accidentally removed must be retained for up to 14 days. Which feature or service should the administrator use? Run the command StorageSyncAgent.msi /l*v AFSInstaller.log. An administrator is having difficulty installing Azure File Sync on a server. The administrator would like to troubleshoot and get more details on the potential problems. What should the administrator do? JSON What can an administrator use to modify an Azure Resource Manager (ARM) template? Azure virtual machine extensions What should administrators use to configure deployed Azure virtual machines? Automation scripts Which resource group menu option in the Azure portal provides the ability to generate an Azure Resource Manager template that represents the current state of that resource group? Shared access signature Which mechanism generates a URL that provides secure access to an Azure Storage blob containing the script used by the Azure custom script extension? Azure Disk Encryption A company needs to ensure that the information on a given Azure virtual machine (VM) disk meets security and compliance standards for protecting the data against unauthorized access. What should the administrator use? On the virtual machine Where should an administrator perform actions to move a virtual machine (VM) from one resource group to another? Placement group What can be used to increase the number of instances that a virtual machine scale set can support above the 100 instance limit? Scale sets A company uses several virtual machines (VMs) to run multiple instances of an application. What can be used to automatically provision or deprovision additional virtual machines based on application demand? Implementing multiple containers in container groups Which Azure Container Instance configuration option requires the use of a Linux operating system? Orchestration of containers What distinguishes Azure Kubernetes Service (AKS) from Azure Container Instances (ACI)? One node at a time How many nodes are upgraded by Kubernetes at a time when upgrading an Azure Kubernetes Service (AKS) cluster? 3 A company needs to upgrade an Azure Kubernetes Service (AKS) cluster from version 2.15.5 to 2.18.1. How many upgrades must an administrator perform? Azure DevOps Which service should be used to implement continuous deployment pipelines that target Azure App Services? The custom domain verification ID A company is creating a custom domain name for an App Service app. While creating a CNAME DNS record at the domain registrar, the root domain ownership needs to be confirmed by creating a DNS TXT record. Which parameter should be used as the value for the TXT record? Pricing tier What should be specified when creating an Azure App Service plan? Deployment slots A company wants to redirect 5% of web traffic targeting a web app to a new version of the web app for testing purposes. What should an administrator implement? New-AzResourceGroupDeployment Which PowerShell cmdlet can be used to provision Azure resources by using an Azure Resource Manager template? Only the complete mode provides the ability to delete existing resources. What is the primary difference between the complete and incremental mode of the Azure Resource Manager template deployment? Schema Which element of an Azure Resource Manager template determines whether the template supports deployment to subscriptions? VHD Which disk format is used to create Azure virtual machine disk files? Deployment of each into a different availability zone What is required to ensure that a pair of Azure virtual machines (VMs) qualifies for 99.99% availability service level agreement (SLA)? Both VMs have to belong to the same availability set. What is required to ensure that a pair of Azure virtual machines (VMs) deployed into the same datacenter qualifies for a 99.95% availability service level agreement (SLA)? 4096 What is the largest RSA key size supported by Azure Disk Encryption when using a custom key? 16 GB What is the largest amount of memory that can be allocated to an Azure Container Instance? Ingress controller Which Azure Kubernetes Service (AKS) component provides the ability to distribute external traffic to a set of pods based on an incoming URL? Azure Files Which Azure Storage service should be used to implement shared storage for multiple pods on an Azure Kubernetes Service (AKS) cluster? Azure Container Instance Which Azure service should be used to provide the fastest node scaling of Azure Kubernetes Service (AKS)? Processing of incoming HTTP requests What is the role of Azure App Service workers? Azure Key Vault Which Azure service stores secrets used to implement Azure App Service authentication with third-party identity providers? Standard What is the minimum Azure App Service pricing tier required to implement automatic backups? Hybrid Connection Which feature is required to implement communication from Azure App Service to an on-premises database server by using Transmission Control Protocol (TCP)? Subnet Which Azure resource supports association with a route table? Enable the Allow Forwarded Traffic setting A company has a peering connection that connects to a virtual network hosting service. What should an administrator do to implement service chaining? Subnet Which Azure resource is a private endpoint associated with? Virtual Appliance An administrator is configuring a virtual network traffic route. Which next hop type for an Azure user-defined route requires specifying an IP address? Create a security rule