Free Microsoft Azure Architect Technologies Exam AZ-303 Exam Practice Test

You have an Azure Cosmos DB account named Account1. Account1 includes a database named DB1 that contains a container named Container1. The partition key for Container1 is set to /city.You plan to change the partition key for Container1.What should you do first?

• Delete Container1.
• Create a new Azure Cosmos DB account.
• Implement the Azure Cosmos DB.NET.SDK.
• Regenerate the keys for Account1.

You have a resource group named RG1 that contains the following:* A virtual network that contains two subnets named Subnet 1 and AzureFirewallSubnet* An Azure Storage account named contososa1* An Azure firewall deployed to AzureFirewallSubnetYou need to ensure that contososa1 is accessible from Subnet 1 over the Azure backbone network. What should you do?

• Create a stored access policy for contososa1.
• Remove the Azure firewall-
• implement a virtual network service endpoint.
• Modify the Firewall and virtual networks settings for contososa1.

You have an Azure subscription that contains 20 virtual machines. The virtual machines require authenticated access to several Azure resources.You need to ensure that the virtual machines can authenticate by using Azure Active Directory (Azure AD).Solution: You configure the Access control (IAM) settings for each virtual machine.Does this meet the goal?

• Yes
• No

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You manage an Active Directory domain named contoso.local.You install Azure AD Connect and connect to an Azure Active Directory (Azure AD) tenant named contoso.com without syncing any accounts.You need to ensure that only users who have a UPN suffix of contoso.com in the contoso.local domain sync to Azure AD.Solution: You use Azure AD Connect to customize the synchronization options.Does this meet the goal?

• Yes
• No

You have an Azure Active Directory (Azure AD) tenant named contoso.com.A user named Admin1 attempts to create an access review from the Azure Active Directory admin center and discovers that the Access reviews settings are unavailable. Admin1 discovers that all the other Identity Governance settings are available,Admin1 is assigned the User administrator. Compliance administrator, and Security administrator roles.You need to ensure that Admin1 can create access reviews in contoso.com.Solution: You purchase an Azure Active Directory Premium P2 license for contoso.comDoes this meet the goal?

• Yes
• No

You have an Azure subscription named Subscription1.You create several Azure virtual machines in Subscription1. All of the virtual machines belong to the same virtual network.You have an on-premises Hyper-V server named Server1. Server1 hosts a virtual machine named VM1.You plan to replicate VM1 to Azure.You need to create additional objects in Subscription1 to support the planned deployment.Which three objects should you create? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.

• Hyper-V site
• Azure Recovery Services Vault
• storage account
• replication policy
• Azure Traffic Manager instance
• endpoint

You need to recommend an identify solution that meets the technical requirements.What should you recommend?

• federated single-on (SSO) and Active Directory Federation Services (AD FS)
• password hash synchronization and single sign-on (SSO)
• cloud-only user accounts
• Pass-through Authentication and single sign-on (SSO)

You have the following Azure Active Directory (Azure AD) tenants* Contosoonmicrosoft.com Linked to a Microsoft Office 365 tenant and syncs to an Active Directory forest named contoso.com by using password hash synchronization* Contosoazure onmicrosoft.com Linked to an Azure subscription named Subscription1.You need to ensure that you can assign the users in contoso.com access to the resources in Subscription1. What should you do?

• Configure contosoxHVTttcrosoft.com to use pass-through authentication.
• Associate Subscription1 to contoso.onmicrosoft.com Reassign all the roles in Subscnption1.
• Deploy a second Azure AD Connect server and sync contoso.com to contosoazure. onmicrosoft.com.
• Configure Active Directory federation Services (AD FS) federation between contosoazure.onmicrosoft.com and contoso.com.

Note: This question is part of series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have an Azure Active Directory (Azure AD) tenant named contoso.com.A user named Admin1 attempts to create an access review from the Azure Active Directory admin center and discovers that the Access reviews settings are unavailable. Admin1 discovers that all the other Identity Governance settings are available.Admin1 is assigned the User administrator, Compliance administrator, and Security administrator roles.You need to ensure that Admin1 can create access reviews in contoso.com.Solution: You create an access package.Does this meet the goal?

• Yes
• No

You have an Azure subscription that contains 10 virtual machines on a virtual network.You need to create a graph visualization to display the traffic flow between the virtual machines.What should you do from Azure Monitor?

• From Activity log, use quick insights.
• From Metrics, create a chart.
• From Logs, create a new query.
• From Workbooks, create a workbook.