AZ-102 PDF Dumps

How to use our free microsoft AZ-102 PDF Dumps

Our Free AZ-102 PDF dumps are based on the full AZ-102 mock exams which are available on our Web Site. The microsoft AZ-102 PDF consists in questions and answers with detailed explanations.
You can use the PDF AZ-102 practice exam as a study material to pass the AZ-102 exam, and don't forget to try also our AZ-102 testing engine Web Simulator.

On-Line Users: {{voteInfo.result.viewUsers}}
Subscribed Users: {{voteInfo.result.subscribedUsers}}
Thank you for your vote {{voteInfo.result.stars}} Your vote has already been submitted ({{voteInfo.result.votingPeople}} votes)

Follow us on SlideShare to see the latest available AZ-102 tests pdf.

										
											Q1.You need to prepare the environment to meet the authentication requirements.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
 - A:   Allow inbound TCP port 8080 to the domain controllers in the Miami office.
 - B:   Add http://autogon.microsoftazuread-sso.com to the intranet zone of each client computer in the Miami

office.
 - C:   Join the client computers in the Miami office to Azure AD.
 - D:   Install the Active Directory Federation Services (AD FS) role on a domain controller in the Miami office.
 - E:   Install Azure AD Connect on a server in the Miami office and enable Pass-through Authentication.

 solution: B, E

Explanation:
B: You can gradually roll out Seamless SSO to your users. You start by adding the following Azure AD URL to
all or selected users' Intranet zone settings by using Group Policy in Active Directory: https://
autologon.microsoftazuread-sso.com
E: Seamless SSO works with any method of cloud authentication - Password Hash Synchronization or Pass-
through Authentication, and can be enabled via Azure AD Connect.
References:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sso-quick-start


Q2.You need to define a custom domain name for Azure AD to support the planned infrastructure.
Which domain name should you use?
 - A:   humongousinsurance.onmicrosoft.com
 - B:   humongousinsurance.local
 - C:   ad.humongousinsurance.com
 - D:   humongousinsurance.com

 solution: D

Explanation:
Every Azure AD directory comes with an initial domain name in the form of domainname.onmicrosoft.com. The
initial domain name cannot be changed or deleted, but you can add your corporate domain name to Azure AD
as well. For example, your organization probably has other domain names used to do business and users who
sign in using your corporate domain name. Adding custom domain names to Azure AD allows you to assign
user names in the directory that are familiar to your users, such as 'alice@contoso.com.' instead of
'alice@domain name.onmicrosoft.com'.
Scenario:
Network Infrastructure: Each office has a local data center that contains all the servers for that office. Each
office has a dedicated connection to the Internet.
Humongous Insurance has a single-domain Active Directory forest named humongousinsurance.com
Planned Azure AD Infrastructure: The on-premises Active Directory domain will be synchronized to Azure AD.
References:
https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/add-custom-domain


Q3.Which blade should you instruct the finance department auditors to use?
 - A:   Cost analysis
 - B:   Usage + quotas
 - C:   External services
 - D:   Payment methods

 solution: B

Explanation:
Explanation: 
Subscription costs are based on usage. 
Microsoft Azure limits are also called quotas.
Scenario: During the testing phase, auditors in the finance department must be able to review all Azure costs
from the past week.
Incorrect Answers:
C: External services are published by third party software vendors in the Azure marketplace. 
References: https://docs.microsoft.com/en-us/azure/azure-subscription-service-limits
Question Set 2


Q4.Note: This question is part of a series of questions that present the same scenario. Each question in
the series contains a unique solution that might meet the stated goals. Some question sets might have
more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these
questions will not appear in the review screen.
You manage a virtual network named Vnet1 that is hosted in the West US Azure region.
VNet hosts two virtual machines named VM1 and VM2 run Windows Server.
You need to inspect all the network traffic from VM1 to VM2 for a period of three hours.
Solution: From Azure Network Watcher, you create a connection monitor.
Does this meet the goal?
 - A:   Yes
 - B:   No

 solution: A

Explanation:
Azure Network Watcher provides tools to monitor, diagnose, view metrics, and enable or disable logs for
resources in an Azure virtual network.
Capture packets to and from a VM
Advanced filtering options and fine-tuned controls, such as the ability to set time and size limitations, provide
versatility. The capture can be stored in Azure Storage, on the VM's disk, or both. You can then analyze the
capture file using several standard network capture analysis tools.
Network Watcher variable packet capture allows you to create packet capture sessions to track traffic to and
from a virtual machine. Packet capture helps to diagnose network anomalies both reactively and proactivity.
References:
https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-monitoring-overview


Q5.Note: This question is part of a series of questions that present the same scenario. Each question in
the series contains a unique solution that might meet the stated goals. Some question sets might have
more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these
questions will not appear in the review screen.
Your company registers a domain name of contoso.com.
You create an Azure DNS zone named contoso.com, and then you add an A record to the zone for a host
named www that has an IP address of 131.107.1.10.
You discover that Internet hosts are unable to resolve www.contoso.com to the 131.107.1.10 IP address.
You need to resolve the name resolution issue.
Solution: You modify the name servers at the domain registrar.
Does this meet the goal?
 - A:   Yes
 - B:   No

 solution: A

Explanation:
Before you can delegate your DNS zone to Azure DNS, you need to know the name servers for your zone. The
NS record set contains the names of the Azure DNS name servers assigned to the zone.
References:
https://docs.microsoft.com/en-us/azure/dns/dns-delegate-domain-azure-dns


Q6.You have an on-premises network that contains a Hyper-V host named Host1. Host1 runs Windows Server
2016 and hosts 10 virtual machines that run Windows Server 2016.
You plan to replicate the virtual machines to Azure by using Azure Site recovery.
You create a Recovery Services vault named ASR1 and Hyper-V site named Site1.
You need to add Host1 to ASR1.
What should you do?
 - A:   Download the installation file for the Azure Site Recovery Provider.

Download the vault registration key.
Install the Azure Site Recovery Provider on Host1 and register the server.
 - B:   Download the installation file for the Azure Site Recovery Provider.

Download the storage account key.
Install the Azure Site Recovery Provider on each virtual machine and register the virtual machines.
 - C:   Download the installation file for the Azure Site Recovery Provider.

Download the vault registration key.
Install the Azure Site Recovery Provider on each virtual machine and register the virtual machines.
 - D:   Download the installation file for the Azure Site Recovery Provider.

Download the storage account key.
Install the Azure Site Recovery Provider on Host1 and register the server.

 solution: A

Explanation:
Download the Vault registration key. You need this when you install the Provider. The key is valid for five days
after you generate it.
Install the Provider on each VMM server. You don't need to explicitly install anything on Hyper-V hosts.
Incorrect Answers:
B, D: Use the Vault Registration Key, not the storage account key.
References:
https://docs.microsoft.com/en-us/azure/site-recovery/migrate-tutorial-on-premises-azure


Q7.Note: This question is part of a series of questions that present the same scenario. Each question in
the series contains a unique solution that might meet the stated goals. Some question sets might have
more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these
questions will not appear in the review screen.
You manage a virtual network named Vnet1 that is hosted in the West US Azure region.
VNet hosts two virtual machines named VM1 and VM2 run Windows Server.
You need to inspect all the network traffic from VM1 to VM2 for a period of three hours.
Solution: From Azure Monitor, you create a metric on Network In and Network Out.
Does this meet the goal?
 - A:   Yes
 - B:   No

 solution: B

Explanation:
You should use Azure Network Watcher.
References:
https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-monitoring-overview


Q8.Note: This question is part of a series of questions that present the same scenario. Each question in
the series contains a unique solution that might meet the stated goals. Some question sets might have
more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these
questions will not appear in the review screen.
You manage a virtual network named Vnet1 that is hosted in the West US Azure region.
VNet hosts two virtual machines named VM1 and VM2 run Windows Server.
You need to inspect all the network traffic from VM1 to VM2 for a period of three hours.
Solution: From Performance Monitor, you create a Data Collector Set (DCS).
Does this meet the goal?
 - A:   Yes
 - B:   No

 solution: B

Explanation:
You should use Azure Network Watcher.
References:
https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-monitoring-overview


Q9.Note: This question is part of a series of questions that present the same scenario. Each question in
the series contains a unique solution that might meet the stated goals. Some question sets might have
more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these
questions will not appear in the review screen.
Your company registers a domain name of contoso.com.
You create an Azure DNS zone named contoso.com, and then you add an A record to the zone for a host
named www that has an IP address of 131.107.1.10.
You discover that Internet hosts are unable to resolve www.contoso.com to the 131.107.1.10 IP address.
You need to resolve the name resolution issue.
Solution: You modify the SOA record in the contoso.com zone.
Does this meet the goal?
 - A:   Yes
 - B:   No

 solution: B

Explanation:
Modify the Name Server (NS) record.
References:
https://docs.microsoft.com/en-us/azure/dns/dns-delegate-domain-azure-dns


Q10.Note: This question is part of a series of questions that present the same scenario. Each question in
the series contains a unique solution that might meet the stated goals. Some question sets might have
more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these
questions will not appear in the review screen.
Your company registers a domain name of contoso.com.
You create an Azure DNS zone named contoso.com, and then you add an A record to the zone for a host
named www that has an IP address of 131.107.1.10.
You discover that Internet hosts are unable to resolve www.contoso.com to the 131.107.1.10 IP address.
You need to resolve the name resolution issue.
Solution: You create a PTR record for www in the contoso.com zone.
Does this meet the goal?
 - A:   Yes
 - B:   No

 solution: B

Explanation:
Modify the Name Server (NS) record.
References:
https://docs.microsoft.com/en-us/azure/dns/dns-delegate-domain-azure-dns