CertsTopics Logo

New Year Special 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: save70

Free and Premium Microsoft AZ-303 Dumps Questions Answers

Page: 1 / 5
Total 218 questions
Get AZ-303 Full Access Download AZ-303 PDF

Microsoft Azure Architect Technologies Questions and Answers

Question 1

You migrate WebApp1 to Azure.

You need toconfigure the AKS cluster to enable WebApp1 to access KV1. The solution must meet the authentication and authorization requirements.

What should you do?

Options:

A.

Configure Azure role-based access control (Azure R8AQ for KubernetesAuthorization.

B.

Configure a pod-managed identity.

C.

Implement pod security policies.

D.

Implement the Secrets Store CSl Driver.

Buy Now
Question 2

You migrate WebApp1 to Azure.

You need to implementa traffic filtering solution for WebApp1. The solution must meet the security requirements.

What should you do?

Options:

A.

Configure the Threat intelligence settings for FW1.

B.

Deploy an Azure Application Gateway to VNet1.

C.

Deploy Azure Bastion to VNet1

D.

Configure an inbound rule on FW1.

Question 3

You need to ensure that you can implement Azure AD Seamless SSO for Fabrikam. The solution must meet the following requirements:

  • Support the planned changes.
  • Meet the authentication and authorization requirements.

What should you do?

Options:

A.

Create a new Azure AD tenant namedfabrikam.com

B.

From the Fabrikam forest, configure an additional UPN suffix ofLitware.com.

C.

From the Fabrikam forest, configure all users to have a UPN suffixofLitware.com.

D.

From theLitware.comtenant, add a custom domain named fabrikam com.

Question 4

You create and publish the BP1 blueprint.

You need to ensure that you can use BP1 to configure permissions for RG1. The solution must meet the authentication and authorization requirements.

What should you do?

Options:

A.

Add a read-only resource lock to Sub1.

B.

Assign an Azure role-based access control (Azure RBAC) role to Sub1.

C.

Assign an Azure role-based access control (Azure RBAC) role to BP1.

D.

Select the Read Only blueprint lock mode for the BP1 assignment.

Question 5

You need to deploy resources to RG1 by using the existing ARM templates. The solution must meet the deployment requirements.

What should you modify in the templates, and which cmdlet should you run to deploy the resources?

Options:

Question 6

You need to ensure that the NoSQL data is encrypted. The solution must meet the security requirements.

What should you do first?

Options:

A.

Upgrade storage2 to StorageV2 (general purpose v2).

B.

Create a new general-purpose v2 storage account.

C.

Create a new Azure Blob storage account.

D.

Modify the Encryption settings of storage2.

Question 7

You need to recommend a solution to provide KV1 with access to the on-premises network of Litware. The solution must meet the security requirements.

What should you include in the recommendation? To answer, select the appropriate options in the answer area.

NOTE:Each correct selection is worth one point.

Options:

Question 8

You need to configure Azure AD Seamless SSO for Fabrikam. The solution must meet the authentication and authorization requirements.

What should you install first?

Options:

A.

the Azure AD Connect provisioning agent on SERVER1

B.

the Azure AD Connect provisioning agent on DC1

C.

Azure AD Connect in staging mode on SERVER1

D.

an Azure AD Connect primary server on SERVER1

Question 9

You need to ensure that the virtual machine disks are encrypted. The solution must meet the security requirements.

Which three actions should you perform in Sub1 in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Options:

Question 10

You plan to migrate WebApp1 to Azure.

You need to implement the AKS cluster that will host WebApp1. The solution must meet thedeployment requirements.

What should you do? To answer, select the appropriate options in the answer area.

NOTE:Each correct selection is worth one point.

Options:

Question 11

You have 10 Azure virtual machines on a subnet named Subnet1. Subnet1 is on a virtual network named VNet1.

You plan to deploy a public Azure Standard Load Balancer named LB1 to the same Azure region as the 10 virtual machines.

You need toensure that traffic from all the virtual machines to the internet flows through LB1. The solution must prevent the virtual machines from being accessible on the internet.

Which three actions should you perform? Each correct answer presents part of the solution.

NOTE:Each correct selection is worth one point.

Options:

A.

Add health probes to LB1.

B.

Add the network interfaces of the virtual machines to the backend pool of LB1.

C.

Add an inbound rule to LB1.

D.

Add an outbound rule to LB1.

E.

Associate anetwork security group (NSG) to Subnet1.

F.

Associate a user-defined route to Subnet1.

Question 12

You need to configure the Device settings to meet the technical requirements and the user requirements.

Which two settings should you modify? To answer, select the appropriate settings in the answer area.

Options:

Question 13

You need to meet the user requirement for Admin1.

What should you do?

Options:

A.

From the Subscriptions blade, select the subscription, and then modify the Properties.

B.

From the Subscriptions blade, select the subscription, and then modify the Access control (IAM) settings.

C.

From the Azure Active Directory blade, modify the Properties.

D.

From the Azure Active Directory blade, modify the Groups.

Question 14

You need to move the blueprint files to Azure.

What should you do?

Options:

A.

Generate a shared access signature (SAS). Map a drive, and then copy the files by using File Explorer.

B.

Use the Azure Import/Export service.

C.

Generate an access key. Map a drive, and then copy the files by using File Explorer.

D.

Use Azure Storage Explorer to copy the files.

Question 15

You need to identify the storage requirements for Contoso.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE:Each correct selection is worthone point.

Options:

Question 16

You need to recommend an identify solution that meets the technical requirements.

What should you recommend?

Options:

A.

federated single-on (SSO) and Active Directory Federation Services (AD FS)

B.

password hash synchronization andsingle sign-on (SSO)

C.

cloud-only user accounts

D.

Pass-through Authentication and single sign-on (SSO)

Question 17

You are planning the move of App1 to Azure.

You create a network security group (NSG).

You need to recommend a solution to provide users with access to App1.

What should you recommend?

Options:

A.

Create an outgoing security rule for port 443 from the Internet. Associatethe NSG to all the subnets.

B.

Create an incoming security rule for port 443 from the Internet. Associate the NSG to all the subnets.

C.

Create an incoming security rule for port 443 from the Internet. Associate the NSG to the subnet that contains the webservers.

D.

Create an outgoing security rule for port 443 from the Internet. Associate the NSG to the subnet that contains the web servers.

Question 18

You need to recommend a solution for App1. The solution must meet the technical requirements. What should you include in the recommendation?To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Question 19

You need to implement a backup solution for App1 after the application is moved.

What should you create first?

Options:

A.

a recovery plan

B.

an Azure Backup Server

C.

a backup policy

D.

a Recovery Services vault

Exam Detail
Vendor: Microsoft
Certification: Microsoft Other Certification
Exam Code: AZ-303
Exam Name: Microsoft Azure Architect Technologies
Last Update: Apr 14, 2023
AZ-303 Question Answers
Page: 1 / 5
Total 218 questions
Get AZ-303 Full Access Download AZ-303 PDF