Microsoft az-103 is the latest Microsoft exam code for 2020.
The new Microsoft exam is a brand new test! Brain2dumps offers the latest az-103 exam dumps, az-103 pdf, az-103 free exams to help you improve your skills! Improve the exam pass! Lea4pass is our partner and they have the most authoritative testing experts! Easily pass the exam,
select the complete Microsoft az-103 exam dumps https://www.lead4pass.com/az-103.html The latest updated exam dump.
Guaranteed to be effective and authentic! Lead4Pass year-round updates ensure your first exam passes!
Microsoft az-103 Exam Video
Brain2dumps Exam Table of Contents:
- Latest Microsoft az-103 google drive
- Effective Microsoft az-103 exam practice questions
- Lead4Pass Year-round Discount Code
- What are the advantages of Lead4pass?
Latest Microsoft az-103 google drive
[PDF] Free Microsoft az-103 pdf dumps download from Google Drive: https://drive.google.com/open?id=1lzUF2A_mUsXI639odIUq0xehuIje6XEO
Exam AZ-103: Microsoft Azure Administrator: https://docs.microsoft.com/en-us/learn/certifications/exams/az-103
Starting on May 1, 2019, you only need to pass Exam AZ-103 to earn this certification. This new exam combines the skills covered in AZ-100 and AZ-101 (which retired on May 1, 2019), with the majority of the new exam coming from AZ-100.
Candidates for this exam are Azure Administrators who manage cloud services that span storage, security, networking, and compute cloud capabilities. Candidates have a deep understanding of each service across the full IT lifecycle and take requests for infrastructure services, applications, and environments. They make recommendations on services to use for optimal performance and scale, as well as provision, size, monitor, and adjust resources as appropriate.
Candidates for this exam should have proficiency in using PowerShell, the Command Line Interface, Azure Portal, ARM templates, operating systems, virtualization, cloud infrastructure, storage structures, and networking.
Skills measured
- A NEW VERSION OF THIS EXAM, Microsoft AZ-104 exam, BECAME AVAILABLE ON APRIL 2, 2020. You will be able to take this exam until it retires on or around August 31, 2020. Please download the skills measured document below to see detailed information about the changes.
- NOTE: The bullets that appear below each of the skills measured in the document below are intended to illustrate how we are assessing that skill. This list is not definitive or exhaustive.
- Manage Azure subscriptions and resources (15-20%)
- Implement and manage storage (15-20%)
- Deploy and manage virtual machines (VMs) (15-20%)
- Configure and manage virtual networks (30-35%)
- Manage identities (15-20%)
Latest updates Microsoft az-103 exam practice questions
QUESTION 1
You need to define a custom domain name for Azure AD to support the planned infrastructure. Which domain name
should you use it?
A. Join the client computers in the Miami office to Azure AD.
B. Add http://autologon.microsoftazuread-sso.com to the intranet zone of each client computer in the Miami office.
C. Allow inbound TCP port 8080 to the domain controllers in the Miami office.
D. Install Azure AD Connect on a server in the Miami office and enable Pass-through Authentication
E. Install the Active Directory Federation Services (AD FS) role on a domain controller in the Miami office.
Correct Answer: BD
Every Azure AD directory comes with an initial domain name in the form of domainname.onmicrosoft.com. The initial
domain name cannot be changed or deleted, but you can add your corporate domain name to Azure AD as well. For
example, your organization probably has other domain names used to do business and users who sign in using your
corporate domain name. Adding custom domain names to Azure AD allows you to assign user names in the directory
that
are familiar to your users, such as `[email protected].\\’ instead of \\’alice@domain name.onmicrosoft.com\\’.
Scenario:
Network Infrastructure: Each office has a local data center that contains all the servers for that office. Each office has a
dedicated connection to the Internet.
Humongous Insurance has a single-domain Active Directory forest named humongousinsurance.com Planned Azure
AD Infrastructure: The on-premises Active Directory domain will be synchronized to Azure AD.
References:
https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/add-custom-domain
QUESTION 2
You have an Azure subscription that contains a resource group named RG1. RG1 contains 100 virtual machines.
Your company has three cost centers named Manufacturing, Sales, and Finance. You need to associate each virtual
machine to a specific cost center.
What should you do?
A. Add an extension to the virtual machines.
B. Modify the inventory settings of the virtual machine.
C. Assign tags to the virtual machines.
D. Configure locks for the virtual machine.
Correct Answer: C
References: https://docs.microsoft.com/en-us/azure/billing/billing-getting-started https://docs.microsoft.com/enus/azure/azure-resource-manager/resource-group-using-tags
QUESTION 3
You have an Azure Active Directory (Azure AD) tenant named adatum.com that contains the users shown in the
following table.
Adatum.com has the following configurations:
Users may join devices to Azure AD and are set to User1.
Additional local administrators on Azure AD joined devices is set to None.
You deploy Windows 10 to a computer named Computer. User1 joins Computer1 to adatum.com.
You need to identify which users are added to the local Administrators group on Computer1.
A. User1 only
B. User1, User2, and User3 only
C. User1 and User2 only
D. User1, User2, User3, and User4
E. User2 only
Correct Answer: C
Users may join devices to Azure AD – This setting enables you to select the users who can register their devices as
Azure AD joined devices. The default is All.
Additional local administrators on Azure AD joined devices – You can select the users that are granted local
administrator rights on a device. Users added here are added to the Device Administrators role in Azure AD. Global
administrators, here User2, in Azure AD and device owners are granted local administrator rights by default.
References: https://docs.microsoft.com/en-us/azure/active-directory/devices/device-management-azure-portal
QUESTION 4
You need to recommend an identity solution that meets the technical requirements. What should you recommend?
A. federated single-on (SSO) and Active Directory Federation Services (AD FS)
B. password hash synchronization and single sign-on (SSO)
C. cloud-only user accounts
D. Pass-through Authentication and single sign-on (SSO)
Correct Answer: A
Active Directory Federation Services is a feature and web service in the Windows Server Operating System that allows
sharing of identity information outside a company\\’s network.
Scenario: Technical Requirements include:
Prevent user passwords or hashes of passwords from being stored in Azure.
References: https://www.sherweb.com/blog/active-directory-federation-services/
QUESTION 5
Your company registers a domain name of contoso.com.
You create an Azure DNS named contoso.com and then you add an A record to the zone for a host named www that
has an IP address of 131.107.1.10.
You discover that Internet hosts are unable to resolve www.contoso.com to the 131.107.1.10 IP address.
You need to resolve the name resolution issue.
Solution: You modify the SOA record in the contoso.com zone
Does this meet the goal?
A. Yes
B. No
Correct Answer: B
Modify the NS record, not the SOA record.
Note: The SOA record stores information about the name of the server that supplied the data for the zone; the
the administrator of the zone; the current version of the data file; the number of seconds a secondary name server should
wait before
checking for updates; the number of seconds a secondary name server should wait before retrying a failed zone
transfer; the maximum number of seconds that a secondary name server can use data before it must either be
refreshed or
expire; and a default number of seconds for the time-to-live file on resource records.
References: https://searchnetworking.techtarget.com/definition/start-of-authority-record
QUESTION 6
Your network contains an on-premises Active Directory domain named adatum.com. The domain contains an
organizational unit (OU) named OU1. OU1 contains the objects shown in the following table.
You sync OU1 to Azure Active Directory (Azure AD) by using Azure AD Connect.
You need to identify which objects are synced to Azure AD.
Which objects should you identify?
A. User1 and Group1 only
B. User1, Group1, and Group2 only
C. User1, Group1, Group2, and Computer1
D. Computer1 only
Correct Answer: B
Reference: https://docs.microsoft.com/en-us/azure/active-directory-domain-services/synchronization
QUESTION 7
Your company has a main office in London that contains 100 client computers.
Three years ago, you migrated to Azure Active Directory (Azure AD).
The company\\’s security policy states that all personal devices and corporate-owned devices must be registered or
joined to Azure AD.
A remote user named User1 is unable to join a personal device to Azure AD from a home network.
You verify that other users can join their devices to Azure AD.
You need to ensure that User1 can join the device to Azure AD.
What should you do?
A. From the Device settings blade, modify the Users may join devices to Azure AD setting.
B. From the Device settings blade, modify the Maximum number of devices per user setting.
C. Create a point-to-site VPN from the home network of User1 to Azure.
D. Assign the User administrator role to User1.
Correct Answer: B
The Maximum number of devices setting enables you to select the maximum number of devices that a user can have in
Azure AD. If a user reaches this quota, they will not be able to add additional devices until one or more of the existing
devices are removed.
Incorrect Answers:
A: The Users may join devices to Azure AD setting enables you to select the users who can join devices to Azure AD.
Options are All, Selected, and None. The default is All.
C: Azure AD Join enables users to join their devices to Active Directory from anywhere as long as they have
connectivity with the Internet.
References: https://docs.microsoft.com/en-us/azure/active-directory/devices/device-management-azure-portal
http://techgenix.com/pros-and-cons-azure-ad-join/
QUESTION 8
SIMULATION
Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few
minutes, and the wait time will not be deducted from your overall test time.
When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a
live environment. While most functionality will be available to you as it would be in a live environment, some functionality
(e.g, copy and paste, ability to navigate to external websites) will not be possible by design.
Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn\\’t matter how you
accomplish the task, if you successfully perform it, you will earn credit for that task.
Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as
much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you
are able to complete the lab(s) and all other sections of the exam in the time provided.
Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to
the lab.
You may now click next to proceed to the lab.
Use the following login credentials as needed:
Azure Username: XXXXXXX Azure Password: XXXXXXX The following information is for technical support purposes
only: Lab Instance: 9172796
Task 2
You plan to store media files in the rg1lod9172796 storage account.
You need to configure the storage account to store the media files. The solution must ensure that only users who have
access keys can download the media files and that the files are accessible only over HTTPS.
What should you do from the Azure portal?
A. See the solution below.
Correct Answer: A
Step 1: Navigate to the rg1lod9172796n1 storage account.
Step 2: Click on the settings menu called Firewalls and virtual networks.
Step 3: Ensure that you have elected to allow access from \\’Selected networks\\’.
Step 4: To grant access to an internet IP range, enter the address range of 131.107.2.0 to 131.107.2.255 (in CIDR
format) under Firewall, Address Ranges.
References:
QUESTION 9
HOTSPOT
You have an Azure subscription named Subscription1.
Subscription1 contains the virtual machines in the following table.
You apply RT1 to Subnet1 and Subnet2.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
IP forwarding enables the virtual machine a network interface is attached to:
1.
Receive network traffic not destined for one of the IP addresses assigned to any of the IP configurations assigned to the
network interface.
2.
Send network traffic with a different source IP address than the one assigned to one of a network interface\\’s IP
configurations.
The setting must be enabled for every network interface that is attached to the virtual machine that receives traffic that
the virtual machine needs to forward. A virtual machine can forward traffic whether it has multiple network interfaces or
a single network interface attached to it. Box 1: Yes
The routing table allows connections from VM3 to VM1 and VM2. And as IP forwarding is enabled on VM3, VM3 can
connect to VM1.
Box 2: No VM3, which has IP forwarding, must be turned on, in order for VM2 to connect to VM1. Box 3: Yes
The routing table allows connections from VM1 and VM2 to VM3. IP forwarding on VM3 allows VM1 to connect to VM2
via VM3.
References: https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-udr-overview
https://www.quora.com/What-is-IP-forwarding
QUESTION 10
You plan to deploy 20 Azure virtual machines by using an Azure Resource Manager template. The virtual machines will
run the latest version of Windows Server 2016 Datacenter by using an Azure Marketplace image. You need to complete
the storage profile section of the template.
How should you complete the storage profile section? To answer, select the appropriate options in the answer area;
NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
…
“storageProfile”: {
“imageReference”: {
“publisher”: “MicrosoftWindowsServer”,
“offer”: “WindowsServer”,
“sku”: “2016-Datacenter”,
“version”: “latest”
},
…
References:
https://docs.microsoft.com/en-us/rest/api/compute/virtualmachines/createorupdate
QUESTION 11
You plan to use the Azure Import/Export service to copy files to a storage account. Which two files should you create
before you prepare the drives for the import job? Each correct answer presents part of the solution. NOTE: Each correct
selection is worth one point.
A. an XML manifest file
B. a drive set CSV file
C. a dataset CSV file
D. a PowerShell PS1 file
E. a JSON configuration file
Correct Answer: BC
B: Modify the driveset.csv file in the root folder where the tool resides.
C: Modify the dataset.csv file in the root folder where the tool resides. Depending on whether you want to import a file or
folder or both, add entries in the dataset.csv file
References: https://docs.microsoft.com/en-us/azure/storage/common/storage-import-export-data-to-files
QUESTION 12
You have an Azure subscription that contains a storage account named account1.
You plan to upload the disk files of a virtual machine to account1 from your on-premises network. The on-premises
the network uses a public IP address space of 131.107.1.0/24. You plan to use the disk files to provision an Azure virtual
machine
named VM1. VM1 will be attached to a virtual network named VNet1. VNet1 uses an IP address space of
192.168.0.0/24.
You need to configure account1 to meet the following requirements:
1.
Ensure that you can upload the disk files to account1.
2.
Ensure that you can attach the disks to VM1.
3.
Prevent all other access to account1.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
A. From the Firewalls and virtual networks blade of account1, add VNet1.
B. From the Firewalls and virtual networks blade of account1, select Allow trusted Microsoft services to access this
storage account.
C. From the Firewalls and virtual networks blade of account1, add the 131.107.1.0/24 IP address range.
D. From the Firewalls and virtual networks blade of account1, select Selected networks.
E. From the Service endpoints blade of VNet1, add a service endpoint.
Correct Answer: DE
D: By default, storage accounts accept connections from clients on any network. To limit access to selected networks,
you must first change the default action.
Azure portal
1.
Navigate to the storage account you want to secure.
2.
Click on the settings menu called Firewalls and virtual networks.
3.
To deny access by default, choose to allow access from \\’Selected networks\\’. To allow traffic from all networks,
choose to allow access from \\’All networks\\’.
4.
Click Save to apply your changes.
E: Grant access from a Virtual Network
Storage accounts can be configured to allow access only from specific Azure Virtual Networks.
By enabling a Service Endpoint for Azure Storage within the Virtual Network, traffic is ensured an optimal route to the
Azure Storage service. The identities of the virtual network and the subnet are also transmitted with each request.
Reference: https://docs.microsoft.com/en-us/azure/storage/common/storage-network-security
Latest Lead4Pass Year-round Discount Code 2020
Why Lead4Pass is the industry leader
Lead4Pass has many years of exam experience! Finishing school is your goal! Getting good employment conditions is your goal!
Our goal is to help more people pass the Microsoft exam! Exams are a part of life but important! In the study, you need to make great efforts, to sum up the study! Trust Lead4Pass if you can’t easily pass because of exam details!
We have the most authoritative Microsoft exam experts! The most efficient pass rate! We are an industry leader!
Summarize:
This blog shares the latest Microsoft az-103 exam dumps, az-103 exam questions and answers! az-103 pdf, az-103 exam video!
You can also practice the test online! Lead4pass is the industry leader!
Select Lead4Pass az-103 exams Pass Microsoft az-103 exams “Microsoft Azure Administrator”. Help you successfully pass the az-103 exam.
Latest update Lead4pass az-103 exam dumps: https://www.lead4pass.com/az-103.html (410 Q&As)
[Q1-Q12 PDF] Free Microsoft az-103 pdf dumps download from Google Drive: https://drive.google.com/open?id=1lzUF2A_mUsXI639odIUq0xehuIje6XEO