



Prepara tus exámenes y mejora tus resultados gracias a la gran cantidad de recursos disponibles en Docsity
Gana puntos ayudando a otros estudiantes o consíguelos activando un Plan Premium
Prepara tus exámenes
Prepara tus exámenes y mejora tus resultados gracias a la gran cantidad de recursos disponibles en Docsity
Prepara tus exámenes con los documentos que comparten otros estudiantes como tú en Docsity
Los mejores documentos en venta realizados por estudiantes que han terminado sus estudios
Estudia con lecciones y exámenes resueltos basados en los programas académicos de las mejores universidades
Responde a preguntas de exámenes reales y pon a prueba tu preparación
Consigue puntos base para descargar
Gana puntos ayudando a otros estudiantes o consíguelos activando un Plan Premium
Comunidad
Pide ayuda a la comunidad y resuelve tus dudas de estudio
Descubre las mejores universidades de tu país según los usuarios de Docsity
Ebooks gratuitos
Descarga nuestras guías gratuitas sobre técnicas de estudio, métodos para controlar la ansiedad y consejos para la tesis preparadas por los tutores de Docsity
Examen actualizado al 16 de Noviembre
Tipo: Exámenes
1 / 5
Esta página no es visible en la vista previa
¡No te pierdas las partes importantes!
Custom View Settings Question #2 Topic 2 You have Azure Resource Manager templates that you use to deploy Azure virtual machines. You need to disable unused Windows features automatically as instances of the virtual machines are provisioned. What should you use? A. device con guration policies in Microsoft Intune B. an Azure Desired State Con guration (DSC) virtual machine extension C. application security groups D. Azure Logic Apps E. security policies in Azure Security Center F. Azure Advisor Correct Answer: B You can use Azure Automation State Con guration to manage Azure VMs (both Classic and Resource Manager), on-premises VMs, Linux machines, AWS VMs, and on-premises physical machines. Note: Azure Automation State Con guration provides a DSC pull server similar to the Windows Feature DSC-Service so that target nodes automatically receive con gurations, conform to the desired state, and report back on their compliance. The built-in pull server in Azure Automation eliminates the need to set up and maintain your own pull server. Azure Automation can target virtual or physical Windows or Linux machines, in the cloud or on-premises. Reference: https://docs.microsoft.com/en-us/azure/automation/automation-dsc-getting-started
Question #3 Topic 2 DRAG DROP - You have an Azure subscription that contains the virtual networks shown in the following table. The Azure virtual machines on SpokeVNetSubnet0 can communicate with the computers on the on-premises network. You plan to deploy an Azure rewall to HubVNet. You create the following two routing tables: ✑ RT1: Includes a user-de ned route that points to the private IP address of the Azure rewall as a next hop address ✑ RT2: Disables BGP route propagation and de nes the private IP address of the Azure rewall as the default gateway You need to ensure that tra c between SpokeVNetSubnet0 and the on-premises network ows through the Azure rewall. To which subnet should you associate each route table? To answer, drag the appropriate subnets to the correct route tables. Each subnet may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point. Select and Place: Correct Answer:
Correct Answer: Box 1: DeployIfNotExists - DeployIfNotExists executes a template deployment when the condition is met. Box 2: Template - The details property of the DeployIfNotExists effects has all the subproperties that de ne the related resources to match and the template deployment to execute. Deployment [required] This property should include the full template deployment as it would be passed to the Microsoft.Resources/deployment References: https://docs.microsoft.com/en-us/azure/governance/policy/concepts/effects
Question #5 Topic 2 You are con guring an Azure Kubernetes Service (AKS) cluster that will connect to an Azure Container Registry. You need to use the auto-generated service principal to authenticate to the Azure Container Registry. What should you create? A. an Azure Active Directory (Azure AD) group B. an Azure Active Directory (Azure AD) role assignment C. an Azure Active Directory (Azure AD) user D. a secret in Azure Key Vault Correct Answer: B When you create an AKS cluster, Azure also creates a service principal to support cluster operability with other Azure resources. You can use this auto-generated service principal for authentication with an ACR registry. To do so, you need to create an Azure AD role assignment that grants the cluster's service principal access to the container registry. References: https://docs.microsoft.com/bs-latn-ba/azure/container-registry/container-registry-auth-aks Previous Questions Next Questions