2021 Microsoft Azure Architect Technologies AZ-303 Real Questions

1. AZ-303 Free Questions AZ-303 Free Questions Microsoft Azure Architect Technologies Microsoft Azure Architect Technologies https://www.passquestion.com/ https://www.passquestion.com/AZ-303 AZ-303.html .html

2. Question 1 Question 1 You need to move the blueprint files to Azure. You need to move the blueprint files to Azure. What should you do? What should you do? A. Generate a shared access signature (SAS). Map a drive, and then copy the files by using A. Generate a shared access signature (SAS). Map a drive, and then copy the files by using File Explorer. File Explorer. B. Use the Azure Import/Export service. B. Use the Azure Import/Export service. C. Generate an access key. Map a drive, and then copy the files by using File Explorer. C. Generate an access key. Map a drive, and then copy the files by using File Explorer. D. Use Azure Storage Explorer to copy the files. D. Use Azure Storage Explorer to copy the files. Answer: D Answer: D

3. Question 2 Question 2 You need to implement a backup solution for App1 after the application is moved. You need to implement a backup solution for App1 after the application is moved. What should you create first? What should you create first? A. a recovery plan A. a recovery plan B. an Azure Backup Server B. an Azure Backup Server C. a backup policy C. a backup policy D. a Recovery Services vault D. a Recovery Services vault Answer: D Answer: D

4. Question 3 Question 3 You are planning the move of App1 to Azure. You are planning the move of App1 to Azure. You create a network security group (NSG). You create a network security group (NSG). You need to recommend a solution to provide users with access to App1. You need to recommend a solution to provide users with access to App1. What should you recommend? What should you recommend? A. Create an outgoing security rule for port 443 from the Internet. Associate the NSG to all the A. Create an outgoing security rule for port 443 from the Internet. Associate the NSG to all the subnets. subnets. B. Create an incoming security rule for port 443 from the Internet. Associate the NSG to all the B. Create an incoming security rule for port 443 from the Internet. Associate the NSG to all the subnets. subnets. C. Create an incoming security rule for port 443 from the Internet. Associate the NSG to the subnet C. Create an incoming security rule for port 443 from the Internet. Associate the NSG to the subnet that contains the web servers. that contains the web servers. D. Create an outgoing security rule for port 443 from the Internet. Associate the NSG to the subnet D. Create an outgoing security rule for port 443 from the Internet. Associate the NSG to the subnet that contains the web servers. that contains the web servers. Answer: C Answer: C

5. Question 4 Question 4 You need to meet the user requirement for Admin1. You need to meet the user requirement for Admin1. What should you do? What should you do? A. From the Subscriptions blade, select the subscription, and then modify the Properties. A. From the Subscriptions blade, select the subscription, and then modify the Properties. B. From the Subscriptions blade, select the subscription, and then modify the Access control (IAM) B. From the Subscriptions blade, select the subscription, and then modify the Access control (IAM) settings. settings. C. From the Azure Active Directory blade, modify the Properties. C. From the Azure Active Directory blade, modify the Properties. D. From the Azure Active Directory blade, modify the Groups. D. From the Azure Active Directory blade, modify the Groups. Answer: A Answer: A

6. Question 5 Question 5 You need to recommend an identify solution that meets the technical requirements. You need to recommend an identify solution that meets the technical requirements. What should you recommend? What should you recommend? A. federated single-on (SSO) and Active Directory Federation Services (AD FS) A. federated single-on (SSO) and Active Directory Federation Services (AD FS) B. password hash synchronization and single sign-on (SSO) B. password hash synchronization and single sign-on (SSO) C. cloud-only user accounts C. cloud-only user accounts D. Pass-through Authentication and single sign-on (SSO) D. Pass-through Authentication and single sign-on (SSO) Answer: D Answer: D

7. Question 6 Question 6 You need to configure Azure AD Seamless SSO for Fabrikam. The solution must meet the You need to configure Azure AD Seamless SSO for Fabrikam. The solution must meet the authentication and authorization requirements. authentication and authorization requirements. What should you install first? What should you install first? A. the Azure AD Connect provisioning agent on SERVER1 A. the Azure AD Connect provisioning agent on SERVER1 B. the Azure AD Connect provisioning agent on DC1 B. the Azure AD Connect provisioning agent on DC1 C. Azure AD Connect in staging mode on SERVER1 C. Azure AD Connect in staging mode on SERVER1 D. an Azure AD Connect primary server on SERVER1 D. an Azure AD Connect primary server on SERVER1 Answer: A Answer: A

8. Question 7 Question 7 You migrate WebApp1 to Azure. You migrate WebApp1 to Azure. You need to configure the AKS cluster to enable WebApp1 to access KV1. The solution must meet You need to configure the AKS cluster to enable WebApp1 to access KV1. The solution must meet the authentication and authorization requirements. the authentication and authorization requirements. What should you do? What should you do? A. Configure Azure role-based access control (Azure R8AQ for Kubernetes Authorization. A. Configure Azure role-based access control (Azure R8AQ for Kubernetes Authorization. B. Configure a pod-managed identity. B. Configure a pod-managed identity. C. Implement pod security policies. C. Implement pod security policies. D. Implement the Secrets Store CSl Driver. D. Implement the Secrets Store CSl Driver. Answer: B Answer: B

9. Question 8 Question 8 You need to ensure that the NoSQL data is encrypted. The solution must meet the security You need to ensure that the NoSQL data is encrypted. The solution must meet the security requirements. requirements. What should you do first? What should you do first? A. Upgrade storage2 to StorageV2 (general purpose v2). A. Upgrade storage2 to StorageV2 (general purpose v2). B. Create a new general-purpose v2 storage account. B. Create a new general-purpose v2 storage account. C. Create a new Azure Blob storage account. C. Create a new Azure Blob storage account. D. Modify the Encryption settings of storage2. D. Modify the Encryption settings of storage2. Answer: B Answer: B

10. Question 9 Question 9 You need to ensure that you can implement Azure AD Seamless SSO for Fabrikam. The solution You need to ensure that you can implement Azure AD Seamless SSO for Fabrikam. The solution must meet the following requirements: must meet the following requirements: ✑ ✑ Support the planned changes. Support the planned changes. ✑ ✑ Meet the authentication and authorization requirements. Meet the authentication and authorization requirements. What should you do? What should you do? A. Create a new Azure AD tenant named fabrikam.com A. Create a new Azure AD tenant named fabrikam.com B. From the Fabrikam forest, configure an additional UPN suffix of Litware.com. B. From the Fabrikam forest, configure an additional UPN suffix of Litware.com. C. From the Fabrikam forest, configure all users to have a UPN suffix ofLitware.com. C. From the Fabrikam forest, configure all users to have a UPN suffix ofLitware.com. D. From the Litware.com tenant, add a custom domain named fabrikam com. D. From the Litware.com tenant, add a custom domain named fabrikam com. Answer: D Answer: D

11. Question 10 Question 10 You create and publish the BP1 blueprint. You create and publish the BP1 blueprint. You need to ensure that you can use BP1 to configure permissions for RG1. The solution must meet You need to ensure that you can use BP1 to configure permissions for RG1. The solution must meet the authentication and authorization requirements. the authentication and authorization requirements. What should you do? What should you do? A. Add a read-only resource lock to Sub1. A. Add a read-only resource lock to Sub1. B. Assign an Azure role-based access control (Azure RBAC) role to Sub1. B. Assign an Azure role-based access control (Azure RBAC) role to Sub1. C. Assign an Azure role-based access control (Azure RBAC) role to BP1. C. Assign an Azure role-based access control (Azure RBAC) role to BP1. D. Select the Read Only blueprint lock mode for the BP1 assignment. D. Select the Read Only blueprint lock mode for the BP1 assignment. Answer: C Answer: C