掌握AZ-103微软Azure管理员最新考题与策略：监控虚拟机操作

需积分: 0 34 浏览量更新于2024-06-27 1 收藏 23.29MB PDF 举报

AZ-103微软认证考试是专为Microsoft Azure管理员设计的一项专业资格认证。该考试版本为20.034，主要针对的是管理和优化Azure环境中的虚拟机。考试的核心目标是测试考生对Azure资源管理、监控、安全性和成本控制等方面的知识与技能。考试内容涵盖了以下几个关键知识点： 1. 虚拟机管理：考生需要了解如何设置规则来确保收到关于虚拟机状态变更的通知，例如当虚拟机被关闭、重启或释放时。在确保资源效率的同时，正确配置警报系统至关重要。根据题目描述，至少需要一个规则和一个动作组来实现这一目标，因此答案是C：三规则一组动作组。 2. 监控与通知：考生将被评估是否熟悉Azure Monitor和Service Health的功能，这些工具允许用户配置自定义通知规则，以便在特定事件发生时接收通知。理解如何创建和管理多个规则以及如何关联到不同的动作组（如电子邮件通知）是考试的重点。 3. 安全与合规：虽然这部分在提供的部分中并未明确提及，但作为Azure管理员，考生还需掌握如何保障云环境的安全性，包括设置权限策略和遵守可能的法规要求。 4. 成本控制：AZ-103也可能涉及如何有效地管理Azure资源，以降低运营成本，例如通过正确的计费模型选择、资源利用率优化和资源退役策略。 5. 最新题库获取：考生可以在Passleader网站（<http://www.passleader.com>）获取最新的AZ-103考试题目和答案，这对于备考是非常有用的资源。参加AZ-103考试的人员应具备扎实的Azure平台操作、维护和管理能力，能够熟练运用Azure的各种工具和服务，以确保云环境的高效运行和合规管理。考试不仅测试技术知识，还考察实际问题解决的能力和对Azure生态系统整体的理解。

Get Latest & Actual AZ-103 Exam's Question and Answers from Passleader.

http://www.passleader.com

TXT

Answer: D

Explanation:

Create the TXT record. App Services uses this record only at configuration time to verify that you

own the custom domain. You can delete this TXT record after your custom domain is validated

and configured in App Service.

References: https://docs.microsoft.com/en-us/azure/dns/dns-web-sites-custom-domain

QUESTION 25

Note: This question is part of a series of questions that present the same scenario. Each

question in the series contains a unique solution that might meet the stated goals. Some

question sets might have more than one correct solution, while others might not have a

correct solution. After you answer a question in this section, you will NOT be able to

return to it. As a result, these questions will not appear in the review screen.

You have an Azure subscription that contains 10 virtual networks. The virtual networks are hosted

in separate resource groups.

Another administrator plans to create several network security groups (NSGs) in the subscription.

You need to ensure that when an NSG is created, it automatically blocks TCP port 8080 between

the virtual networks.

Solution: From the Resource providers blade, you unregister the Microsoft.ClassicNetwork

provider.

Does this meet the goal?

Yes

Answer: B

QUESTION 26

Note: This question is part of a series of questions that present the same scenario. Each

question in the series contains a unique solution that might meet the stated goals. Some

question sets might have more than one correct solution, while others might not have a

correct solution. After you answer a question in this section, you will NOT be able to

return to it. As a result, these questions will not appear in the review screen.

You have an Azure subscription that contains 10 virtual networks. The virtual networks are hosted

in separate resource groups.

Another administrator plans to create several network security groups (NSGs) in the subscription.

You need to ensure that when an NSG is created, it automatically blocks TCP port 8080 between

the virtual networks.

Solution: You configure a custom policy definition, and then you assign the policy to the

subscription.

Does this meet the goal?

Yes

Get Latest & Actual AZ-103 Exam's Question and Answers from Passleader.

http://www.passleader.com

Answer: A

Explanation:

Resource policy definition used by Azure Policy enables you to establish conventions for

resources in your organization by describing when the policy is enforced and what effect to take.

By defining conventions, you can control costs and more easily manage your resources.

References: https://docs.microsoft.com/en-us/azure/azure-policy/policy-definition

QUESTION 27

Note: This question is part of a series of questions that present the same scenario. Each

question in the series contains a unique solution that might meet the stated goals. Some

question sets might have more than one correct solution, while others might not have a

correct solution. After you answer a question in this section, you will NOT be able to

return to it. As a result, these questions will not appear in the review screen.

You have an Azure subscription that contains 10 virtual networks. The virtual networks are hosted

in separate resource groups.

Another administrator plans to create several network security groups (NSGs) in the subscription.

You need to ensure that when an NSG is created, it automatically blocks TCP port 8080 between

the virtual networks.

Solution: You create a resource lock, and then you assign the lock to the subscription.

Does this meet the goal?

Yes

Answer: B

Explanation:

How can I freeze or lock my production/critical Azure resources from accidental deletion? There

is way to do this with both ASM and ARM resources using Azure resource lock.

References: https://blogs.msdn.microsoft.com/azureedu/2016/04/27/using-azure-resource-

manager-policy-and-azure-lock-to-control-your-azure-resources/

QUESTION 28

You have an Azure Active Directory (Azure AD) domain that contains 5,000 user accounts.

You create a new user account named AdminUser1.

You need to assign the User administrator administrative role to AdminUser1.

What should you do from the user account properties?

From the Directory role blade, modify the directory role.

From the Groups blade, invite the user account to a new group.

From the Licenses blade, assign a new license.

Answer: A

Explanation:

Assign a role to a user

directory.

Select Azure Active Directory, select Users, and then select a specific user from the list. For the

selected user, select Directory role, select Add role, and then pick the appropriate admin roles

from the Directory roles list, such as Conditional access administrator.

Press Select to save.

Get Latest & Actual AZ-103 Exam's Question and Answers from Passleader.

http://www.passleader.com

References: https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-

directory-users-assign-role-azure-portal

QUESTION 29

You have an Active Directory forest named contoso.com.

You install and configure Azure AD Connect to use password hash synchronization as the single

sign-on (SSO) method. Staging mode is enabled.

You review the synchronization results and discover that the Synchronization Service Manager

does not display any sync jobs.

You need to ensure that the synchronization completes successfully.

What should you do?

From Synchronization Service Manager, run a full import.

Run Azure AD Connect and set the SSO method to Pass-through Authentication.

From Azure PowerShell, run Start-AdSyncSyncCycle -PolicyType Initial.

Run Azure AD Connect and disable staging mode.

Answer: D

Explanation:

Staging mode must be disabled. If the Azure AD Connect server is in staging mode, password

hash synchronization is temporarily disabled.

References: https://docs.microsoft.com/en-us/azure/active-directory/connect/active-directory-

aadconnectsync-troubleshoot-password-hash-synchronization#no-passwords-are-synchronized-

troubleshoot-by-using-the-troubleshooting-task

QUESTION 30

You have an Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com that

contains 100 user accounts.

You purchase 10 Azure AD Premium P2 licenses for the tenant. You need to ensure that 10

users can use all the Azure AD Premium features.

What should you do?

From the Groups blade of each user, invite the users to a group.

From the Licenses blade of Azure AD, assign a license.

From the Directory role blade of each user, modify the directory role.

From the Azure AD domain, add an enterprise application.

Answer: B

Explanation:

To assign a license, under Azure Active Directory > Licenses > All Products, select one or more

products, and then select Assign on the command bar.

References: https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/license-users-

groups

QUESTION 31

You download an Azure Resource Manager template based on an existing virtual machine. The

template will be used to deploy 100 virtual machines. You need to modify the template to

reference an administrative password. You must prevent the password from being stored in plain

text.

What should you create to store the password?

Get Latest & Actual AZ-103 Exam's Question and Answers from Passleader.

http://www.passleader.com

Azure Active Directory (AD) Identity Protection and an Azure policy

a Recovery Services vault and a backup policy

an Azure Key Vault and an access policy

an Azure Storage account and an access policy

Answer: C

Explanation:

You can use a template that allows you to deploy a simple Windows VM by retrieving the

password that is stored in a Key Vault. Therefore the password is never put in plain text in the

template parameter file.

References: https://azure.microsoft.com/en-us/resources/templates/101-vm-secure-password/

QUESTION 32

Note: This question is part of a series of questions that present the same scenario. Each

question in the series contains a unique solution that might meet the stated goals. Some

question sets might have more than one correct solution, while others might not have a

correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result,

these questions will not appear in the review screen.

Your company registers a domain name of contoso.com.

You create an Azure DNS named contoso.com and then you add an A record to the zone for a

host named www that has an IP address of 131.107.1.10.

You discover that Internet hosts are unable to resolve www.contoso.com to the 131.107.1.10 IP

address.

You need to resolve the name resolution issue.

Solution: You modify the name server at the domain register.

Does this meet the goal?

Yes

Answer: A

QUESTION 33

Note: This question is part of a series of questions that present the same scenario. Each

question in the series contains a unique solution that might meet the stated goals. Some

question sets might have more than one correct solution, while others might not have a

correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result,

these questions will not appear in the review screen.

Your company registers a domain name of contoso.com.

You create an Azure DNS zone named contoso.com, and then you add an A record to the zone

for a host named www that has an IP address of 131.107.1.10.

You discover that Internet hosts are unable to resolve www.contoso.com to the 131.107.1.10 IP

address.

Get Latest & Actual AZ-103 Exam's Question and Answers from Passleader.

http://www.passleader.com

You need to resolve the name resolution issue.

Solution: You add an NS record to the contoso.com Azure DNS zone.

Does this meet the goal?

Yes

Answer: A

Explanation:

Before you can delegate your DNS zone to Azure DNS, you need to know the name servers for

your zone. The NS record set contains the names of the Azure DNS name servers assigned to

the zone. References: https://docs.microsoft.com/en-us/azure/dns/dns-delegate-domain-azure-

dns

QUESTION 34

Note: This question is part of a series of questions that present the same scenario. Each

question in the series contains a unique solution that might meet the stated goals. Some

question sets might have more than one correct solution, while others might not have a

correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result,

these questions will not appear in the review screen.

Your company registers a domain name of contoso.com.

You create an Azure DNS named contoso.com and then you add an A record to the zone for a

host named www that has an IP address of 131.107.1.10.

You discover that Internet hosts are unable to resolve www.contoso.com to the 131.107.1.10 IP

address.

You need to resolve the name resolution issue.

Solution: You modify the SOA record in the contoso.com zone.

Does this meet the goal?

Yes

Answer: B

Explanation:

Modify the NS record, not the SOA record.

Note: The SOA record stores information about the name of the server that supplied the data for

the zone; the administrator of the zone; the current version of the data file; the number of seconds

a secondary name server should wait before checking for updates; the number of seconds a

secondary name server should wait before retrying a failed zone transfer; the maximum number

of seconds that a secondary name server can use data before it must either be refreshed or

expire; and a default number of seconds for the time-to-live file on resource records.

References: https://searchnetworking.techtarget.com/definition/start-of-authority-record

QUESTION 35

Note: This question is part of a series of questions that present the same scenario. Each

剩余481页未读，继续阅读

悠悠酱

粉丝: 0
资源: 1

掌握AZ-103微软Azure管理员最新考题与策略：监控虚拟机操作

准备AZ-800微软认证考试的资源

准备AZ-204微软认证考试：Hyper-V与Azure实战

掌握最新微软AZ-900认证考试题库

AZ-305微软认证-ET

AZ-801微软MCP认证

Az-102最新认证考试题库.pdf

AZ-303最新认证考试题库(222Q).pdf

AZ-700微软MCP认证T_202407.pdf

AZ-140微软MCP认证T_202407.pdf

AZ-204微软MCP认证T_202407.pdf

最新资源