Archive - AZ-101: Microsoft Azure Integration and Security
Sample Questions
Question: 100
Measured Skill: Implement advanced virtual networking (30-35%)
Note: This questions is based on a case study. The case study is not shown in this demo.
You need to configure AG1.
What should you create?| A | A multi-site listener |
| B | An URL path-based routing rule |
| C | A basic listener |
| D | A basic routing rule |
Correct answer: BExplanation:
The Infrastructure Requirements section states that AG1 must load balance incoming traffic based on URLs. We need to implement an URL path-based routing rule.
Question: 101
Measured Skill: Implement advanced virtual networking (30-35%)
Note: This questions is based on a case study. The case study is not shown in this demo.
What should you create to configure AG2?| A | Multi-site listeners |
| B | Basic listeners |
| C | URL path-based routing rules |
| D | Basic routing rules |
| E | An additional public IP address |
Correct answer: AExplanation:
The case study contains the following requirements for AG2:
AG2 must load balance incoming traffic in the following manner:
- http://www.adatum.com will be load balanced across Pool21.
- http://fabrikam.com will be load balanced across Pool22.
Multiple site hosting enables you to configure more than one web application on the same application gateway instance. This feature allows you to configure a more efficient topology for your deployments by adding up to 100 websites to one application gateway. Each website can be directed to its own backend pool.
In the following example, application gateway is serving traffic for contoso.com and fabrikam.com from two back-end server pools called ContosoServerPool and FabrikamServerPool.
Reference: Application Gateway multiple site hosting
Question: 102
Measured Skill: Evaluate and perform server migration to Azure (15-20%)
Note: This questions is based on a case study. The case study is not shown in this demo.
You need to identify the appropriate sizes for the Azure virtual machines.
Which five actions should you perform in sequence?
(To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.)
| A | Sequence: 6, 3, 5, 2, 4 |
| B | Sequence: 6, 7, 5, 1, 4 |
| C | Sequence: 6, 7, 1, 5, 2 |
| D | Sequence: 4, 3, 5, 2, 6 |
Correct answer: BExplanation:
The Azure Migrate service assesses on-premises workloads for migration to Azure. The service assesses the migration suitability of on-premises machines, performs performance-based sizing, and provides cost estimations for running on-premises machines in Azure. If you're contemplating lift-and-shift migrations, or are in the early assessment stages of migration, this service is for you. After the assessment, you can use services such as Azure Site Recovery and Azure Database Migration Service, to migrate the machines to Azure.
The required steps to discover and assess on-premises VMware VMs for migration to Azure are described in the following Microsoft Azure article:
Discover and assess on-premises VMware VMs for migration to Azure
Question: 103
Measured Skill: Implement and manage application services (20-25%)
Note: This questions is based on a case study. The case study is not shown in this demo.
You need to implement App2 to meet the application requirements.
What should you include in the implementation?
(To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.)
| A | App Service plan pricing tier: Isolated
Enabled feature: Web Sockets |
| B | App Service plan pricing tier: Isolated
Enabled feature: Auto Swap |
| C | App Service plan pricing tier: Shared
Enabled feature: Always on |
| D | App Service plan pricing tier: Shared
Enabled feature: Web Sockets |
| E | App Service plan pricing tier: Standard
Enabled feature: Auto Swap |
| F | App Service plan pricing tier: Standard
Enabled feature: Always on |
Correct answer: FExplanation:
The Application Requirements section of the case study contains the following requirements for App2:
App2 must be available to connect directly to the private IP addresses of the Azure virtual machines. App2 will be deployed directly to an Azure virtual network.
VNet Integration gives your web app access to resources in your virtual network but doesn't grant private access to your web app from the virtual network. Private site access refers to making your app only accessible from a private network such as from within an Azure virtual network. Private site access is only available with an ASE configured with an Internal Load Balancer (ILB).
VNet Integration is often used to enable access from apps to a databases and web services running in your VNet. With VNet Integration, you don't need to expose a public endpoint for applications on your VM but can use the private non-internet routable addresses instead.
The VNet Integration feature:
- requires a Standard, Premium, or PremiumV2 pricing plan
- works with Classic or Resource Manager VNet
- supports TCP and UDP
- works with Web, Mobile, API apps, and Function apps
- enables an app to connect to only 1 VNet at a time
- enables up to five VNets to be integrated with in an App Service Plan
- allows the same VNet to be used by multiple apps in an App Service Plan
- requires a Virtual Network Gateway that is configured with Point to Site VPN
- supports a 99.9% SLA due to the SLA on the gateway
There are some things that VNet Integration doesn't support including:
- mounting a drive
- AD integration
- NetBios
- private site access
- accessing resources across ExpressRoute
- accessing resources across Service Endpoints
Azure App Services Always On
By default, apps are unloaded if they are idle for some period of time. This lets the system conserve resources. In Basic or Standard mode, you can enable Always On to keep the app loaded all the time. If your app runs continuous WebJobs or runs WebJobs triggered using a CRON expression, you should enable Always On, or the web jobs may not run reliably.
Question: 104
Measured Skill: Implement advanced virtual networking (30-35%)
Note: This questions is based on a case study. The case study is not shown in this demo.
You need to configure the Azure ExpressRoute circuits.
How should you configure Azure ExpressRoute routing?
(To answer, drag the appropriate configurations to the correct locations. Each configuration may be used once, more than once, or not at all. NOTE: Each correct selection is worth one point.)
| A | Routing from A. Datum to Azure: Use BGP to append the private AS numbers to the advertised prefixes.
Routing from Microsoft Online Services to A. Datum: Use BGP to append the public AS numbers to the advertised prefixes. |
| B | Routing from A. Datum to Azure: Use BGP communities to configure BGP´s Local Preference.
Routing from Microsoft Online Services to A. Datum: Use BGP communities to configure BGP´s Local Preference. |
| C | Routing from A. Datum to Azure: Use BGP to append the private AS numbers to the advertised prefixes.
Routing from Microsoft Online Services to A. Datum: Use BGP communities to configure BGP´s Local Preference. |
| D | Routing from A. Datum to Azure: Use BGP to append the public AS numbers to the advertised prefixes.
Routing from Microsoft Online Services to A. Datum: Use BGP to append the private AS numbers to the advertised prefixes. |
Correct answer: CExplanation:
ExpressRoute lets you extend your on-premises networks into the Microsoft cloud over a private connection facilitated by a connectivity provider. With ExpressRoute, you can establish connections to Microsoft cloud services, such as Microsoft Azure, Office 365, and Dynamics 365.
Connectivity can be from an any-to-any (IP VPN) network, a point-to-point Ethernet network, or a virtual cross-connection through a connectivity provider at a co-location facility. ExpressRoute connections do not go over the public Internet. This allows ExpressRoute connections to offer more reliability, faster speeds, lower latencies, and higher security than typical connections over the Internet.
Reference:
ExpressRoute routing requirements