Free Microsoft Azure Architect Technologies Exam AZ-303 Exam Practice Test

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.<a target='_blank' href='https://app1.contoso.com'>Your company is deploying an on-premises application named Appl. Users will access App1 by using a URL of https://app1.contoso.com. You register App1 in Azure Active Directory (Azure AD) and publish Appl by using the Azure AD Application Proxy. You need to ensure that Appl appears in the My Apps portal for all the users.</a>Solution: You create a conditional access policy for App1.

• Yes
• No

Your company has an Azure subscription.You enable multi-factor authentication (MFA) for all users.The company's help desk reports an increase in calls from users who receive MFA requests while they work from the company's main office.You need to prevent the users from receiving MFA requests when they sign in from the main office.What should you do?

• From Azure Active Directory (Azure AD), configure organizational relationships.
• From the MFA service settings, create a trusted IP range.
• From Conditional access in Azure Active Directory (Azure AD), create a custom control.
• From Conditional access in Azure Active Directory (Azure AD), create a named location.

You are planning the move of App1 to Azure.You create a network security group (NSG).You need to recommend a solution to provide users with access to App1.What should you recommend?

• Create an outgoing security rule for port 443 from the Internet. Associate the NSG to all the subnets.
• Create an incoming security rule for port 443 from the Internet. Associate the NSG to all the subnets.
• Create an incoming security rule for port 443 from the Internet. Associate the NSG to the subnet that contains the web servers.
• Create an outgoing security rule for port 443 from the Internet. Associate the NSG to the subnet that contains the web servers.

You have an Azure App Service app.You need to implement tracing for the app. The tracing information must include the following:Usage trendsAJAX call responsesPage load speed by browserServer and browser exceptionsWhat should you do?

• Configure IIS logging in Azure Log Analytics.
• Configure a connection monitor in Azure Network Watcher.
• Configure custom logs in Azure Log Analytics.
• Enable the Azure Application Insights site extension.

You have an Azure virtual network that contains a subnet named Subnet1. Subnet1 contains 50 virtual machines. Twenty-five of the virtual machines are web servers and the other 25 are application servers.You need to filter traffic the web servers and the application servers by using application security groups.Which additional resources should you provision?

• Azure Private Link
• a network security group (NSG)
• a user-defined route
• Azure-firewall

No. Access control via ACLs is enabled for a storage account as long as the Hierarchical Namespace (HNS) feature is turned ON.Note 1: We [Microsoft] are pleased to share the general availability of Azure Active Directory (AD) based access control for Azure Storage Blobs and Queues. Enterprises can now grant specific data access permissions to users and service identities from their Azure AD tenant using Azure's Role-based access control (RBAC).

• Note 2: Azure Data Lake Storage Gen2 implements an access control model that supports both Azure role-based access control (Azure RBAC) and POSIX-like access control lists (ACLs). You can associate a security principal with an access level for files and directories. These associations are captured in an access control list (ACL). Each file and directory in your storage account has an access control list. When a security principal attempts an operation on a file or directory, An ACL check determines whether that security principal (user, group, service principal, or managed identity) has the correct permission level to perform the operation.

You migrate WebApp1 to Azure.You need to configure the AKS cluster to enable WebApp1 to access KV1. The solution must meet the authentication and authorization requirements.What should you do?

• Configure Azure role-based access control (Azure R8AQ for Kubernetes Authorization.
• Configure a pod-managed identity.
• Implement pod security policies.
• Implement the Secrets Store CSl Driver.

You need to meet the user requirement for Admin1.What should you do?

• From the Subscriptions blade, select the subscription, and then modify the Properties.
• From the Subscriptions blade, select the subscription, and then modify the Access control (IAM) settings.
• From the Azure Active Directory blade, modify the Properties.
• From the Azure Active Directory blade, modify the Groups.

You have an Azure SQL database named Db1 that runs on an Azure SQL server named SQLserver1.You need to ensure that you can use the query editor on the Azure portal to query Db1.What should you do?

• Modify the Advanced Data Security settings of Db1
• Configure the Firewalls and virtual networks settings for SQLserver1
• Copy the ADO.NET connection string of Db1 and paste the string to the query editor
• Approve private endpoint connections for SQLserver1

You have the following Azure Active Directory (Azure AD) tenants* Contosoonmicrosoft.com Linked to a Microsoft Office 365 tenant and syncs to an Active Directory forest named contoso.com by using password hash synchronization* Contosoazure onmicrosoft.com Linked to an Azure subscription named Subscription1.You need to ensure that you can assign the users in contoso.com access to the resources in Subscription1. What should you do?

• Configure contosoxHVTttcrosoft.com to use pass-through authentication.
• Associate Subscription1 to contoso.onmicrosoft.com Reassign all the roles in Subscnption1.
• Deploy a second Azure AD Connect server and sync contoso.com to contosoazure. onmicrosoft.com.
• Configure Active Directory federation Services (AD FS) federation between contosoazure.onmicrosoft.com and contoso.com.