Question Set 1

QUESTION 1

You plan to use the Azure Import/Export service to copy files to a storage account. Which two files should you create before you prepare the drives for the import job? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point. A. a driveset CSV file B. a JSON configuration file C. a PowerShell PS1 file D. an XML manifest file E. a dataset CSV file Correct Answer: AE Section: (none) Explanation Explanation/Reference: Explanation: A: Modify the driveset.csv file in the root folder where the tool resides. E: Modify the dataset.csv file in the root folder where the tool resides. Depending on whether you want to import a file or folder or both, add entries in the dataset.csv file References: https://docs.microsoft.com/en-us/azure/storage/common/storage-import-export-data- to-files

QUESTION 2

You create an Azure Storage account named contosostorage. You plan to create a file share named data. Users need to map a drive to the data file share from home computers that run Windows 10. Which outbound port should you open between the home computers and the data file share? A. 80 B. 443 C. 445 D. 3389 Correct Answer: C Section: (none) Explanation Explanation/Reference: Explanation: Ensure port 445 is open: The SMB protocol requires TCP port 445 to be open; connections will fail if port 445 is blocked. References: https://docs.microsoft.com/en-us/azure/storage/files/storage-how-to-use-files- windows

QUESTION 3

You have two Azure virtual machines named VM1 and VM2. You have two Recovery Services vaults named RSV1 and RSV2. VM2 is protected by RSV1. You need to use RSV2 to protect VM2. What should you do first? A. From the VM2 blade, click Disaster recovery, click Replication settings, and then select RSV2 as the Recovery Services vault. B. From the RSV2 blade, click Backup. From the Backup blade, select the backup for the virtual machine, and then click Backup. C. From the RSV1 blade, click Backup Jobs and export the VM2 job. D. From the RSV1 blade, click Backup items and stop the VM2 backup. Correct Answer: A Section: (none) Explanation Explanation/Reference: Reference: https://docs.microsoft.com/en-us/azure/backup/backup-azure-vms-first-look-arm

QUESTION 4

You have a Recovery Service vault that you use to test backups. The test backups contain two protected virtual machines. You need to delete the Recovery Services vault. What should you do first? A. From the Recovery Service vault, delete the backup data. B. Modify the disaster recovery properties of each virtual machine. C. From the Recovery Service vault, stop the backup of each backup item. D. Modify the locks of each virtual machine. Correct Answer: C Section: (none) Explanation Explanation/Reference: Explanation: You can't delete a Recovery Services vault if it is registered to a server and holds backup data. If you try to delete a vault, but can't, the vault is still configured to receive backup data. Remove vault dependencies and delete vault In the vault dashboard menu, scroll down to the Protected Items section, and click Backup Items. In this menu, you can stop and delete Azure File Servers, SQL Servers in Azure VM, and Azure virtual machines.

Reference: https://docs.microsoft.com/en-us/azure/backup/backup-azure-delete-vault

QUESTION 5

You have an Azure subscription that contains a storage account named account1. You plan to upload the disk files of a virtual machine to account1 from your on-premises network. The on-premises network uses a public IP address space of 131.107.1.0/24. You plan to use the disk files to provision an Azure virtual machine named VM1. VM1 will be attached to a virtual network named VNet1. VNet1 uses an IP address space of 192.168.0.0/24. You need to configure account1 to meet the following requirements: Ensure that you can upload the disk files to account1. Ensure that you can attach the disks to VM1.
Prevent all other access to account1. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point. A. From the Firewalls and virtual networks blade of account1, add VNet1. B. From the Firewalls and virtual networks blade of account1, select Allow trusted Microsoft services to access this storage account. C. From the Firewalls and virtual networks blade of account1, add the 131.107.1.0/24 IP address range. D. From the Firewalls and virtual networks blade of account1, select Selected networks. E. From the Service endpoints blade of VNet1, add a service endpoint. Correct Answer: DE Section: (none) Explanation Explanation/Reference: Explanation: D: By default, storage accounts accept connections from clients on any network. To limit access to selected networks, you must first change the default action. Azure portal

1. Navigate to the storage account you want to secure.
2. Click on the settings menu called Firewalls and virtual networks.
3. To deny access by default, choose to allow access from 'Selected networks'. To allow traffic from all networks, choose to allow access from 'All networks'.
4. Click Save to apply your changes. E: Grant access from a Virtual Network Storage accounts can be configured to allow access only from specific Azure Virtual Networks. By enabling a Service Endpoint for Azure Storage within the Virtual Network, traffic is ensured an optimal route to the Azure Storage service. The identities of the virtual network and the subnet are also transmitted with each request. Reference: https://docs.microsoft.com/en-us/azure/storage/common/storage-network- security

QUESTION 6

You have an Azure subscription named Subscription1. You have 5 TB of data that you need to transfer to Subscription1. You plan to use an Azure Import/Export job. What can you use as the destination of the imported data? A. an Azure Cosmos DB database B. Azure File Storage C. the Azure File Sync Storage Sync Service D. Azure Data Factory Correct Answer: B Section: (none) Explanation Explanation/Reference: Explanation:
Azure Import/Export service is used to securely import large amounts of data to Azure Blob storage and Azure Files by shipping disk drives to an Azure datacenter. The maximum size of an Azure Files Resource of a file share is 5 TB. Reference: https://docs.microsoft.com/en-us/azure/storage/common/storage-import-export- service

QUESTION 7

You have an Azure subscription that contains the resources in the following table.

Store1 contains a file share named Data. Data contains 5,000 files. You need to synchronize the files in the file share named Data to an on-premises server named Server1. Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point. A. Download an automation script. B. Register Server1. C. Create a sync group. D. Create a container instance. E. Install the Azure File Sync agent on Server1. Correct Answer: BCE Section: (none) Explanation Explanation/Reference: Explanation: Step 1 (E): Install the Azure File Sync agent on Server1 The Azure File Sync agent is a downloadable package that enables Windows Server to be synced with an Azure file share Step 2 (B): Register Server1. Register Windows Server with Storage Sync Service Registering your Windows Server with a Storage Sync Service establishes a trust relationship between your server (or cluster) and the Storage Sync Service. Step 3 (C): Create a sync group and a cloud endpoint. A sync group defines the sync topology for a set of files. Endpoints within a sync group are kept in sync with each other. A sync group must contain one cloud endpoint, which represents an Azure file share and one or more server endpoints. A server endpoint represents a path on registered server. References: https://docs.microsoft.com/en-us/azure/storage/files/storage-sync-files-deployment- guide

QUESTION 8

You have the Azure virtual machines shown in the following table.

You have a Recovery Services vault that protects VM1 and VM2. You need to protect VM3 and VM4 by using Recovery Services. What should you do first? A. Create a new backup policy. B. Configure the extensions for VM3 and VM4. C. Create a storage account. D. Create a new Recovery Services vault. Correct Answer: D Section: (none) Explanation Explanation/Reference: Explanation: A Recovery Services vault is a storage entity in Azure that houses data. The data is typically copies of data, or configuration information for virtual machines (VMs), workloads, servers, or workstations. You can use Recovery Services vaults to hold backup data for various Azure services References: https://docs.microsoft.com/en-us/azure/site-recovery/azure-to-azure-tutorial-enable- replication

QUESTION 9

You have an Azure subscription named Subscription1. You have 5 TB of data that you need to transfer to Subscription1. You plan to use an Azure Import/Export job. What can you use as the destination of the imported data? A. Azure Data Lake Store B. a virtual machine C. the Azure File Sync Storage Sync Service D. Azure Blob storage Correct Answer: D Section: (none) Explanation Explanation/Reference: Explanation:
Azure Import/Export service is used to securely import large amounts of data to Azure Blob storage and Azure Files by shipping disk drives to an Azure datacenter. The maximum size of an Azure Files Resource of a file share is 5 TB. Reference: https://docs.microsoft.com/en-us/azure/storage/common/storage-import-export-service

QUESTION 10

You have an Azure subscription that contains the storage accounts shown in the following table.

You need to identify which storage account can be converted to zone-redundant storage (ZRS) replication by requesting a live migration from Azure support. What should you identify? A. Storage1 B. Storage2 C. Storage3 D. Storage4 Correct Answer: B Section: (none) Explanation Explanation/Reference: Explanation:
ZRS currently supports standard general-purpose v2, FileStorage and BlockBlobStorage storage account types. Incorrect Answers: A, not C: Live migration is supported only for storage accounts that use LRS replication. If your account uses GRS or RA-GRS, then you need to first change your account's replication type to LRS before proceeding. This intermediary step removes the secondary endpoint provided by GRS/RA-GRS. Also, only standard storage account types support live migration. Premium storage accounts must be migrated manually. D: ZRS currently supports standard general-purpose v2, FileStorage and BlockBlobStorage storage account types. References: https://docs.microsoft.com/en-us/azure/storage/common/storage-redundancy-zrs

QUESTION 11

You have an Azure subscription that contains the following resources: 100 Azure virtual machines 20 Azure SQL databases 50 Azure file shares You need to create a daily backup of all the resources by using Azure Backup. What is the minimum number of backup policies that you must create? A. 1 B. 2 C. 3 D. 150 E. 170 Correct Answer: C Section: (none) Explanation Explanation/Reference: Explanation:
There is a limit of 100 VMs that can be associated to the same backup policy from portal. We recommend that for more than 100 VMs, create multiple backup policies with same schedule or different schedule. One policy for VMS, one for SQL databases, and one for the file shares. References: https://docs.microsoft.com/en-us/azure/backup/backup-azure-vm-backup- faq

QUESTION 12

You have an Azure subscription that includes data in following locations:

You plan to export data by using Azure import/export job named Export1. You need to identify the data that can be exported by using Export1. Which data should you identify? A. DB1 B. Table1 C. container1 D. Share1 Correct Answer: D Section: (none) Explanation Explanation/Reference: Explanation:
Azure Import/Export service is used to securely import large amounts of data to Azure Blob storage and Azure Files by shipping disk drives to an Azure datacenter. References: https://docs.microsoft.com/en-us/azure/storage/common/storage-import-export-service Implement and manage storage