Renewal for Microsoft Certified: Azure Administrator Associate

Question 1 of 28

You plan to deploy an Azure web app that will have the following settings:

• Name: WebApp1
• Publish: Code
• Runtime stack: Java 11
• Operating system: Linux
• Continuous deployment: Disable

You need to ensure that you can integrate WebApp1 with GitHub Actions.

Which setting should you modify?

Select only one answer.

Publish

Runtime stack

Operating system

Continuous deployment

Question 2 of 28

You have Azure web app named WebApp1.

You need to integrate GitHub as a source code repository for WebApp1.

What should you use?

Select only one answer.

Extensions

Deployment slots

Deployment Center

Service Connector

Question 3 of 28

You have an Azure subscription that includes the following web apps:

• WebApp1, which runs code in a Windows operating system.
• WebApp2, which runs code in a Linux operating system.
• WebApp3, which runs in a Docker container on Windows.
• WebApp4, which runs in a Docker container on Linux.

From which web apps can you use WebJobs?

Select only one answer.

WebApp1 only

WebApp1 and WebApp2 only

WebApp1 and Web3 only

WebApp1, WebApp2, WebApp3 and WebApp4

Question 4 of 28

You have an Azure web service named Contoso2022 that runs in the Standard App Service plan. Contoso2022 has five deployment slots in use.

A user named User1 has the Contributor role for Contoso2022.

You need to ensure that User1 can create additional deployment slots to Contoso2022.

What should you do?

Select only one answer.

Assign User1 the Owner role for Contoso2022.

Assign User1 the Website Contributor role for Contoso2022.

Scale up the Contoso2022 App Service plan.

Scale out the Contoso2022 App Service plan.

Question 5 of 28

You have an Azure container registry named Registry1.

You create a container image named image1 on a Windows Server container host named Host1.

You need to store image1 in Registry1.

Which URL should you use to push image1 from Host1?

Select only one answer.

Registry1.azurecr.io

Registry1.onmicrosoft.com

azure.microsoft.com/Registry1

Registry1.file.core.windows.net

Question 6 of 28

You have an Azure subscription that contains the following resources:

• a storage account named storage123
• a container instance named AppContainer

The subscription contains a virtual network named VirtualNet4 that has the following subnets:

• SubnetA- has a Microsoft.Storage service endpoint.
• SubnetB- AppContainer is deployed to SubnetB.
• SubnetC- No resources are connected to SubnetC.

You plan to deploy an Azure container instance named container5 to VirtualNet4.

To which subnets can you deploy container5?

Select only one answer.

SubnetB only

SubnetC only

SubnetB and SubnetC only

SubnetA, SubnetB, and SubnetC

Question 7 of 28

You plan to create an Azure container instance named container1 that will use a Docker image named Image1.

You need to ensure that container1 has persistent storage.

Which Azure resources should you deploy for the persistent storage?

Select only one answer.

an Azure container registry

an Azure Storage account and a file share

an Azure Storage account and a blob container

an Azure SQL database

Question 8 of 28

You have an Azure Storage account named storage1 that is configured to use the Hot access tier.

Storage1 has a container named container1 and the lifecycle management rule with following settings:

• Move blob to cool storage: Selected
  • Days after last modification: 3
• Move blob to archive storage: Selected
  • Days after last modification: 5

On December 1, you create a file named File1 in container1.

On December 10, you rehydrate File1 and move the file to the Hot access tier.

When will File1 be moved to archive storage?

Select only one answer.

within 24 hours

on December 15

on December 18

on January 1

Question 9 of 28

You have an Azure storage account that contains a blob container named container1.

You need to configure access to container1.

Which authorization types can you use?

Select only one answer.

Azure AD only

Storage key or shared access signature only

Azure AD, shared access signature or certificate only

Azure AD, storage key or shared access signature only

Azure AD, storage key, shared access signature or certificate

Question 10 of 28

You have an Azure Storage account named storage1.

You create the following encryption scopes for storage1:

• Scope1 that has an encryption type of Microsoft-managed keys
• Scope2 that has an encryption type of Customer-managed keys

Which storage services can be used with Scope2?

Select only one answer.

blob only

file only

blob and file only

table and queue only

blob, file, table, and queue

Question 11 of 28

You have an Azure subscription that contains the following storage accounts:

• storage1, configured as StorageV2 kind
• storage2, configured as BlobStorage kind
• storage3, configured as FileStorage kind

Which storage account or storage accounts can you use Lifecycle management?

Select only one answer.

storage1 only

storage1 and storage2 only

storage1 and storage3 only

storage2 and storage3 only

Storage1, storage2 and storage3

Question 12 of 28

You have an Azure subscription that contains a storage account named storage1 and the following virtual machines:

• VM1 has a public IP address of 13.68.158.24 and is connected to VNET1/Subnet1
• VM2 has a public IP address of 52.255.145.76 and is connected to VNET1/Subnet1
• VM3 has a public IP address of 13.68.158.50 and is connected to VNET1/Subnet2

The subnets have the following service endpoints:

• Subnet1 has a Microsoft.Storage service endpoint
• Subnet2 does NOThave any service endpoint

Storage1 has a firewall configured to allow access from the 13.68.158.0/24 IP address range only.

Which virtual machines can access storage1.

Select only one answer.

VM1 only

VM3 only

VM1 and VM2 only

VM1 and VM3 only

VM1, VM2, and VM3

Question 13 of 28

You have an Azure subscription that includes following resources:

• VNet1, a virtual network
• Subnet1, a subnet in VNet1
• VM1, a virtual machine
• NIC1, a network interface of VM1
• LB1, a load balancer

You create a network security group named NSG1.

To which two Azure resources can you associate NSG1?

Select all answers that apply.

LB1

VM1

NIC1

VNet1

Subnet1

Question 14 of 28

You have an Azure subscription that includes the following resources:

• VNet1, a virtual network
• Subnet1, a subnet in VNet1
• WebApp1, a web app application service
• NSG1, a network security group

You create an application security group named ASG1.

Which resource can use ASG1?

Select only one answer.

VNet1

Subnet1

WebApp1

NSG1

Question 15 of 28

You have an Azure virtual network named VNET1 that has an IP address space of 192.168.0.0/16 and the following subnets:

• Subnet1- has an IP address range of 192.168.1.0/24 and is connected to 15 VMs
• Subnet2- has an IP address range of 192.168.2.0/24 and does NOThave any VMs connected

You need to ensure that you can deploy Azure Firewall to VNET1.

What should you do?

Select only one answer.

Add a new subnet to VNET1.

Add a service endpoint to Subnet2.

Modify the subnet mask of Subnet2.

Modify the IP address space of VNET1.

Question 16 of 28

You have an Azure virtual network named VNET1 that is connected to a network security group (NSG) named NSG1. NSG1 has the following inbound security rules:

• Rule1 has a priority of 100 and allows port 3389 on TCP protocol from any source and to any destination
• Rule2 has a priority of 200 and allows ports 80 and 8080 on UDP protocol from any source and to any destination
• Rule3 has a priority of 300 and denies ports 1-2000 on TCP protocol from any source and to any destination
• Rule4 has a priority of 400 and allows ports 50-500 on TCP protocol from VirtualNetwork source and to any destination
• Rule5 has a priority of 500 and allows ports 80 and 443 on TCP protocol from any source and to any destination

You need to allow http and https connections from the internet to VNET1.

What should you change for NSG1?

Select only one answer.

Priority for Rule4 to 250

Protocol for Rule2 to TCP

Priority for Rule3 to 450

Priority for Rule5 to 250

Question 17 of 28

You have a Recovery Services vault named Vault1 that has soft delete enabled.

Vault1 stores backups for the following Azure resources:

• an Azure virtual machine named VM1
• an Azure file share named share1
• a SQL Server on Azure virtual machine named SQL1

Which backups are protected by soft delete?

Select only one answer.

VM1 only

share1 only

VM1 and SQL1 only

VM1, share1, and SQL1

Question 18 of 28

You have an Azure subscription that includes a virtual machine named VM1.

You need to protect VM1 by using Azure Backup.

Which Azure resource should you create first?

Select only one answer.

a backup vault

a storage account

a recovery services vault

a backup policy

Question 19 of 28

You have the following Azure resources:

• a virtual machine named VM1
• a Recovery Services vault named Vault1

On January 1, you configure backups for VM1 by using the following backup policy:

• Frequency: Daily
• Time: 23:00
• Timezone: (UTC) Coordinated Universal Time
• Retain instant recovery snapshot(s) for: 2 Day(s)
• Retention of daily backup point: 7 Day(s)
• Azure Backup Resource Group: Backup1RG

How many restore point collections recovery points will be stored in Backup1RG on January 10?

Select only one answer.

2

7

9

10

Question 20 of 28

You have a Windows Server Azure virtual machine named VM1.

You need to back up two folders in VM1 by using Azure Backup. The solution should minimize administrative effort.

What should you deploy first?

Select only one answer.

Azure Backup Server

Recovery Services agent

Microsoft Monitoring agent

Windows Server Backup role

Question 21 of 28

You have an Azure subscription and an availability set named AS1 that has 5 update domains.

You deploy 27 virtual machines to AS1.

After a planned update, what is the minimum number of virtual machines that are available?

Select only one answer.

14

20

21

22

26

Question 22 of 28

You have an Azure virtual machine named VM1.

VM1 contains the following:

• a File named File1 that is stored on volume C:\
• a File named File2 that is stored on volume D:\
• an App named App1 that is in a running state
• a user named User1 that is connected to VM1

You plan to resize VM1.

What is preserved after the resize?

Select only one answer.

File1 only

File1 and File2 only

File1 and the state of App1 only

File1, File2 and the state of App1 only

File1, File2, the state of App1 and the connection of User1

Question 23 of 28

You have an Azure subscription.

You plan to use fault domains.

From which Azure resource can you configure the fault domains?

Select only one answer.

Virtual machine

Virtual machine scale set

Availability set

Virtual network

Question 24 of 28

Your company has an Azure subscription.

You plan to create a virtual machine scale set named VMSS1 that has the following settings:

• Resource group name: RG1
• Region: West US
• Orchestration mode: Uniform
• Security type: Standard
• OS disk type: SSD standard
• Key management: Platform-managed key

You need to add custom virtual machines to VMSS1.

What setting should you modify?

Select only one answer.

Orchestration mode

Security type

OS disk type

Key management

Question 25 of 28

You have an Azure subscription.

You plan to run a data warehouse in an Azure virtual machine named VM1.

You need to ensure that VM1 is optimized for running a data warehouse.

Which VM type should you use for VM1?

Select only one answer.

General purpose (D-Series)

Compute optimized (F-Series)

Memory optimized (M-Series)

Storage optimized (Ls-Series)

High performance computing (H-Series)

Question 26 of 28

You have an Azure AD tenant that contains the following users:

• User1 has a Department set to Sales and a Country set to USA
• User2 has a Department set to Marketing and a Country set to USA
• User3 has a Department set to Sales and a Country set to DE
• User4 has a Department set to Marketing and a Country set to DE

You create a group named Group1 that has the following dynamic membership rule.

user.country -eq "USA" -and user.department -eq "Marketing" -or user.department -eq "Sales"

Which users are members of Group1?

Select only one answer.

User1 and User2 only

User1 and User3 only

User2 and User3 only

User1, User2, and User3 only

User1, User2, User3 and User4

Question 27 of 28

You have an Azure AD tenant.

You create a user named Admin1.

You need to ensure that Admin1 can perform following tasks:

• Assign licenses to Azure AD groups
• Reset passwords of Azure AD users

What Azure AD role should you add to Admin1?

Select only one answer.

User Administrator

Billing Administrator

License Administrator

Helpdesk Administrator

Question 28 of 28

You have an Azure subscription that contains a user named User1, a resource group named RG1, and a virtual machine named VM1.

You enable a system-assigned managed identity for VM1.

To which identities can you assign the Reports Reader role?

Select only one answer.

User1 only

User1 and RG1 only

User1 and VM1 only

User1, RG1, and VM1

 

---