An organization has an on-premises server that runs Windows Server 2003. The server hosts an IIS-based stateless web application that uses forms authentication. The application consists of classic Active Server Pages (ASP) pages and third-party components (DLLs) that are registered in the Windows registry. The deployment process for the web application is manual and is prone to errors. The deployment process makes it difficult to roll out updates, scale out, and recover after failures. You need to design a modernization approach for the web application that meets the following requirements:

• Improve the deployment process.
• Ensure that the application can run in the cloud.
• Minimize changes to application code.
• Minimize administrative effort required to implement the modernization solution.

What should you recommend?

Your company has the offices shown in the following table.

The network contains an Active Directory domain named contoso.com that is synced to Azure Active Directory (Azure AD). All users connect to an application hosted in Microsoft 365. You need to recommend a solution to ensure that all the users use Azure Multi-Factor Authentication (MFA) to connect to the application from one of the offices. What should you include in the recommendation?

You have 20 Azure virtual machines that run Windows Server 2016 based on a custom virtual machine image. Each virtual machine hosts an instance of a VSS-capable web app that was developed in-house. Each instance is accessed by using a public endpoint. Each instance uses a separate database. The average database size is 200 GB. You need to design a disaster recovery solution for individual instances. The solution must meet the following requirements:

• Provide a recovery time objective (RTO) of six hours
• Provide a recovery point objective (RPO) of eight hours
• Support recovery to a different Azure region
• Support VSS-based backups
• Minimize costs

What should you include in the recommendation for storage type?

You have a virtual machine scale set named SS1. You configure auto scaling as shown in the following exhibit.

You configure the scale out and scale in rules to have a duration of 10 minutes and a cool down time of 10 minutes. If SS1 Scales to 9 Virtual machines, and then the average processor utilization is 30 percent for one hour, How many Virtual machines will be in SS1?

Your company plans to migrate its on-premises data to Azure. You need to recommend which Azure services can be used to store the data. The solution must meet the following requirements:

• Encrypt all data while at rest.
• Encrypt data only by using a key generated by the company.

Which two possible services can you recommend?
A. Azure Table storage
B. Azure Backup
C. Azure Blob storage
D. Azure Queue storage
E. Azure Files

You have databases in Azure as shown in the following table.

You are designing a data retention policy. You need to identify which databases can retain monthly backups for up to 120 months.

Your company has three branch offices and an Azure subscription. Each branch office contains a Hyper-V host that hosts application servers. You need to recommend a storage solution for an Azure subscription. The solution must ensure that the application servers can connect to a central storage device by using iSCSI connections. Data saved to the iSCSI storage device from the application servers must be uploaded to Azure automatically. Which components should you include in the recommendation?

You are designing a solution for a stateless front-end application named Application1. Application1 will be hosted on two Azure virtual machines named VM 1 and VM 2. You plan to load balance connections to VM 1 and VM 2 from the Internet by using one Azure load balancer. You need to recommend the minimum number of required public IP addresses. How many public IP addresses should you recommend using for VM 1 and VM 2?

Your company has 20 web APIs that were developed in-house. The company is developing 10 web apps that will use the web APIs. The web apps and the APIs are registered in the company’s Azure Active Directory (Azure AD) tenant. The web APIs are published by using Azure API Management.
You need to recommend a solution to block unauthorized requests originating from the web apps from reaching the web APIs. The solution must meet the following requirements:

• Use Azure AD-generated claims.
• Minimize configuration and management effort.

What should you include in the recommendation?

Your company deploys an Azure App Service Web App. During testing the application fails under load. The application cannot handle more than 100 concurrent user sessions. You enable the Always On feature. You also configure auto-scaling to increase counts from two to 10 based on HTTP queue length. You need to improve the performance of the application. Which solution should you use for store content close to the application scenario?

You have 100 Standard DSv2 Azure virtual machines. Each virtual machine has two network adapters. You need to increase the network performance of the workloads running on the virtual machines. The solution must meet the following requirements:
• The CPU-to-memory ratio must remain the same.
• The solution must minimize costs.
What should you do?

You have 100 devices that write performance data to Azure Blob storage. You plan to store and analyze the performance data in an Azure SQL database. You need to recommend a solution to move the performance data to the SQL database. What should you include in the recommendation?

You have an Azure subscription that contains an Azure Cosmos DB account.
You need to recommend a solution to generate an alert from Azure Log Analytics when a request charge for a query exceeds 50 request units more than 20 times within a 15-minute window.
What should you recommend?

The accounting department at your company migrates to a new financial accounting software.
The accounting department must keep file-based database backups for seven years for compliance purposes. It is unlikely that the backups will be used to recover data. You need to move the backups to Azure. The solution must minimize costs. Where should you store the backups?

You plan to deploy an API by using Azure API Management. You need to recommend a solution to protect the API from a distributed denial of service (DDoS) attack. What should you recommend?

You are designing a solution for a stateless front-end application named Application 1. Application 1 will be hosted on two Azure virtual machines named VM 1 and VM 2. You plan to load balance connections to VM 1 and VM 2 from the Internet by using one Azure load balancer. You need to recommend the minimum number of required public IP addresses. How many public IP addresses should you recommend using for Load balancer?

You have an on-premises Active Directory forest and an Azure Active Directory (Azure AD) tenant. All Azure AD users are assigned a Premium P1 license. You deploy Azure AD Connect.
Which two features are available in this environment that can reduce operational overhead for your company’s help desk?
A. Azure AD Privileged Identity Management policies
B. access reviews
C. self-service password reset
D. Microsoft Cloud App Security Conditional Access App Control
E. password writeback

You plan to create an Azure Cosmos DB account that uses the SQL API. The account will contain data added by a web application. The web application will send data daily. You need to recommend a notification solution that meets the following requirements:

• Sends email notification when data is received from IoT devices.
• Minimizes compute cost.

What should you include in the recommendation?

You are designing a security solution for a company’s Azure Active Directory (Azure AD). The company currently uses Azure AD Premium for all employees. Contractors will periodically access the corporate network based on demand. you must ensure that all employees and contractors are required to log on by using two-factor authentication. The solution must minimize costs. You need to recommend a solution.
What should you recommend?

You have databases in Azure as shown in the following table.

You are designing a data retention policy.
You need to identify which databases can retain a daily backup for up to 35 days?

You have a web app named App 1 that is hosted on-premises and on four Azure virtual machines.
Each virtual machine is in a different region. You need to recommend a solution to ensure that users will always connect to the closest instance of App 1. The solution must prevent the users from attempting to connect to a failed instance of App 1.
Which two possible recommendations achieve the goal?
A. Azure Front Door Service
B. Azure Load Balancer
C. round-robin DNS
D. Azure Traffic Manager
E. Azure Application Gateway

You have 100 Microsoft SQL Server Integration Services (SSIS) packages that are configured to use 10 on-premises SQL Server databases as their destinations.
You plan to migrate the 10 on-premises databases to Azure SQL Database.
You need to recommend a solution to host the SSIS packages in Azure. The solution must ensure that the packages can target the SQL Database instances as their destinations.
What should you include in the recommendation?

Your network contains an on-premises Active Directory forest named contoso.com.
The forest is synced to an Azure Active Directory (Azure AD) tenant named contoso.com and an Azure AD Domain Services (Azure AD DS) domain named contoso-aad.com.
You have an Azure Storage account named Storage1 that contains a file share named Share1.
You configure NTFS permissions on Share1. You plan to deploy a virtual machine that will be used by several users to access Share1.

You need to ensure that the users can access Share1. Which type virtual machine should you deploy?

Your company deploys an Azure App Service Web App. During testing the application fails under load. The application cannot handle more than 100 concurrent user sessions. You enable the Always On feature. You also configure auto-scaling to increase counts from two to 10 based on HTTP queue length. You need to improve the performance of the application.
Which solution should you use for the application scenario of Store content close to end users?

Your network contains an Active Directory domain named contoso.com that is federated to an Azure Active Directory (Azure AD) tenant. The on-premises domain contains a VPN server named Server 1 that runs Windows Server 2016. You have a single on-premises location that uses an address space of 172.16.0.0/16. You need to implement two-factor authentication for users who establish VPN connections to Server 1.
What should you include in the implementation?

Your company has an on-premises Windows HPC cluster. The cluster runs an intrinsically parallel, compute-intensive workload that performs financial risk modelling. You plan to migrate the workload to Azure Batch. You need to design a solution that will support the workload. The solution must meet the following requirements:
. Support the large-scale parallel execution of Azure Batch jobs.
. Minimize cost.
What should you include in the solution?

You plan to run an image rendering workload in Azure. The workload uses parallel compute processes. What is the best service to use to run the workload? More than one answer choice may achieve the goal. Select the BEST answer.

You are designing a container solution in Azure that will include two containers. One container will host a web API that will be available to the public.
The other container will perform health monitoring of the web API and will remain private. The two containers will be deployed together as a group.
You need to recommend a compute service for the containers. The solution must minimize costs and maintenance overhead.
What should you include in the recommendation?

You have an Azure subscription that contains an Azure Blob storage account named store1. You have an on-premises file server named Server1 that runs Windows Server 2016.
Server1 stores 500 GB of company files.
You need to store a copy of the company files in store1.

Which two possible Azure services achieve this goal?

A. an Azure Import/Export job
B. an integration account
C. an Azure Batch account
D. Azure data Factory
E. an On-premises data gateway

You plan to use Azure Site Recovery to protect several on-premises physical server workloads. Each server workload is independent of the other. The workloads are stateless.
You need to recommend a failover strategy to ensure that if the on-premises data center fails, the workloads are available in Azure as quickly as possible.
Which failover strategy should you include in the recommendation?

You use Azure Application Insights. You plan to use continuous export. You need to store Application Insights data for five years. Which Azure service should you use?

You manage a solution in Azure. You must collect usage data including MAC addresses from all devices on the network. You need to recommend a monitoring solution.
What should you recommend?

You use a virtual network to extend an on-premises IT environment into the cloud. The virtual network has two virtual machines (VMs) that store sensitive data. The data must only be available using internal communication channels. Internet access to those VMs is not permitted.
You need to ensure that the VMs cannot access the Internet.
Which two options should you recommend?

A. network interface (NIC)
B. Source Network Address Translation (SNAT)
C. Azure ExpressRoute
D. Network Security Groups (NSG)

Your company develops a web service that is deployed to an Azure virtual machine named VM1. The web service allows an API to access real-time data from VM1. The current virtual machine deployment is shown below.

The chief technology officer (CTO) sends you the following email message: “Our developers have deployed the web service to a virtual machine named VM1. Testing has shown that the APIs is accessible from VM1 and VM2. Our partners must be able to connect to the API over the Internet. Partners will use this data in application that they develop”.
You deploy an Azure API Management (APIM) service. The relevant API Management configuration is shown in the API exhibit.

select the following statements which is true?
A. The API is available to partners over the internet.
B. The APIM instance can access real-time from VM1.
C. A VPN gateway is required for partner access.

You plan to store data in Azure Blob storage for many years. The stored data will be accessed rarely.
You need to ensure that the data in Blob storage is always available for immediate access. The solution must minimize storage costs.
Which storage tier should you use?

You are working with a security team that has conducted an audit of your Azure environment.
The security team has recommended the implementation of an external third-party Security Information and Event Management (SIEM) solution. The SIEM solution must be integrated with your Azure environment.
What configuration do you recommend to support the new SIEM solution?

Your company purchases an app named App 1.
You need to recommend a solution to ensure that App 1 can read and modify access reviews.
What should you recommend?

You plan to archive 10 TB of on-premises data files to Azure. You need to recommend a data archival solution. The solution must minimize the cost of storing the data files.
Which Azure Storage account type should you include in the recommendation?

You have 20 Azure virtual machines that run Windows Server 2016 based on a custom virtual machine image. Each virtual machine hosts an instance of a VSS-capable web app that was developed in-house. Each instance is accessed by using a public endpoint. Each instance uses a separate database. The average database size is 200 GB.
You need to design a disaster recovery solution for individual instances. The solution must meet the following requirements:
. Provide a recovery time objective (RTO) of six hours Provide a recovery point objective (RPO) of eight hours
. Support recovery to a different Azure region
. Support VSS-based backups Minimize costs
What should you include in the recommendation for disaster recovery solutions?

You are designing an Azure web app. You need to ensure that users who have impaired vision can use the app. Which reference material should you use when designing the app?

You store web access logs data in Azure Blob storage. You plan to generate monthly reports from the access logs. You need to recommend an automated process to upload the data to Azure SQL Database every month.
What should you include in the recommendation?

Your company has 20 web APIs that were developed in-house. The company is developing 10 web apps that will use the web APIs. The web apps and the APIs are registered in the company’s Azure Active Directory (Azure AD) tenant. The web APIs are published by using Azure API Management. You need to recommend a solution to block unauthorized requests originating from the web apps from reaching the web APIs.
The solution must meet the following requirements:
. Use Azure AD-generated claims.
. Minimize configuration and management effort.
What should you include in the recommendation?

You are designing a monitoring solution for an Azure SQL Database service. The solution needs to achieve the following:
. Retain an audit trail of events
.Track events that occur within the database
You need to recommend a solution for the above which requires the least effort to implement. What do you include in your recommendation?

You are designing an Azure Web App that includes many static content files.
The application is accessed from locations all over the world by using a custom domain name.
You need to recommend an approach for providing access to the static content with the least amount of latency.
Which two actions should you recommend?

A. Configure a custom domain name that is an alias for the Azure Storage domain.
B. Configure a CNAME DNS record for the Azure Content Delivery Network (CDN) domain.
C. Place the static content in Azure Table storage.
D. Place the static content in Azure Blob storage and enable Content Delivery Network (CDN) on the account.

You are working for an organization with a head office in America. Your organization uses Azure Active Directory to secure access to company resources and applications. Your organization recently hired a third-party security consultancy to perform a security audit of your current environment. The audit revealed an apparent security breach. One user had appeared to access resources from Australia, although no staff has ever traveled to this location. This was identified as a risk. You need to recommend a solution which can force the user to authenticate with multi-factor authentication when such risks are identified.
What do you include in your recommendation?

You are architecting a microservices application that will leverage Azure App Service, Azure SQL Database, and Azure Blob storage.
You need to include a monitoring solution within the design that can help you analyze connectivity between application components and dependencies.
What should you recommend to meet these requirements?

You have an Azure SQL database named DB1 that contains multiple tables. You need to improve the performance of DB1. The solution must minimize administrative effort. What should you use?

You manage an application instance. The application consumes data from multiple databases. Application code references database tables using a combination of the server, database, and table name. You need to migrate the application instance to Azure. what are two possible ways to achieve this goal?

A. SQL Server Stretch Database
B. SQL Server in an Azure virtual machine
C. Azure SQL Database
D. SQL Managed Instance

You are designing a data protection strategy for Azure virtual machines. All the virtual machines are in the Standard tier and use managed disks.
You need to recommend a solution that meets the following requirements:
. The use of encryption keys is audited.
. All the data is encrypted at rest always.
You manage the encryption keys, not Microsoft. What should you include in the recommendation?

You are consulting as a solution architect to a new company. The company wishes to manage the identities of its users by using Azure Active Directory. In a project meeting, a security engineer for the company asks you whether it is possible to prevent staff from using inappropriate passwords such as ‘P@55w0rd’. They ask if you can do this when only using cloud-based identities. You have been asked to advise on a solution that requires the least effort to implement and maintain.
How do you respond to the question?

You have an Azure subscription. Your on-premises network contains a file server named Server 1. Server 1 stores 5 TB of company files that are accessed rarely. You plan to copy the files to Azure Storage. You need to implement a storage solution for the files that meets the following requirements:
. The files must be available within 24 hours of being requested.
. Storage costs must be minimized.
Which two possible storage solutions achieve this goal?

A. Create a general-purpose v2 storage account that is set to the Cool access tier. Create a file share in the storage account and copy the files to the file share.

B. Create a general-purpose v2 storage account that is set to the Hot access tier. Create a blob container, copy the files to the blob container, and set each file to the Archive access tier.

C. Create a general-purpose v1 storage account. Create a file share in the storage account and copy the files to the file share.

D. Create an Azure Blob storage account that is set to the Cool access tier. Create a blob container, copy the files to the blob container, and set each file to the Archive access tier.

E. Create a general-purpose v1 storage account. Create a blob container and copy the files to the blob container.

You have an application named App 1. App 1 generates log files that must be archived for five years.
The log files must be readable by App 1 but must not be modified.
Which storage solution should you recommend for archiving?

You have a virtual machine scale set named SS1.
You configure auto scaling as shown in the following exhibit.

You configure the scale out and scale in rules to have a duration of 10 minutes and a cool down time of 10 minutes.
If SS1 Scales to 9 virtual machines, What is the minimum amount of time before SS1 will scale up?

An organization has an on-premises server that runs Windows Server 2003. The server hosts an IIS-based stateless web application that uses forms authentication. The application consists of classic Active Server Pages (ASP) pages and third-party components (DLLs) that are registered in the Windows registry.
The deployment process for the web application is manual and is prone to errors. The deployment process makes it difficult to roll out updates, scale out, and recover after failures.

You need to design a modernization approach for the web application that meets the following requirements:
Improve the deployment process.
Ensure that the application can run in the cloud.
Minimize changes to application code.
Minimize administrative effort required to implement the modernization solution.

What should you recommend?

You deploy Azure App Service Web Apps that connect to on-premises Microsoft SQL Server instances by using Azure ExpressRoute. You plan to migrate the SQL Server instances to Azure.
Migration of the SQL Server instances to Azure must:
. Support automatic patching and version updates to SQL Server.
. Provide automatic backup services.
Allow for high-availability of the instances. Provide a native VNET with private IP addressing. Encrypt all data in transit. Be in a single-tenant environment with dedicated underlying infrastructure (compute, storage) You need to migrate the SQL Server instances to Azure.
Which Azure service should you use?