（含图）

What is the minimum number of App Service plans you should create for the web apps?

You have an autoscale rule con􀂬gured as shown in the following exhibit.

（含图）

For the Instance limits scale condition setting, you set Maximum to 5.

During a 30-minute period, App1 uses 80 percent of the available memory.

What is the maximum number of instances for App1 during the 30-minute period?

You have an Azure subscription that contains an Azure App Service web app named App1 and an Azure key vault named KV1. KV1 contains a

wildcard certi􀂬cate for contoso.com.

You have a user named user1@contoso.com that is assigned the Owner role for App1 and KV1.

You need to con􀂬gure App1 to use the wildcard certi􀂬cate of KV1.

What should you do fisrst?

You plan to deploy the resources shown in the following table.

（含图）

You need to create a single Azure Resource Manager (ARM) template that will be used to deploy the resources.

Which resource should be added to the dependsOn section for VM1?

You create the following Azure Resource Manager (ARM) template named Template.json.

（含图）

You need to deploy Template.json.

Which PowerShell cmdlet should you run from Azure Cloud Shell?

You plan to create a storage account named storage1.

You have a Bicep 􀂬le named File1.

You need to modify File1 so that it can be used to automate the deployment of storage1 to RG1.

Which property should you modify?

（含图）

You need to con􀂬gure a proximity placement group for VMSS1.

Which proximity placement groups should you use?

You have an Azure subscription that contains resources in the East US and West US Azure regions. Each region contains a virtual network. The

virtual networks are peered.

You need to connect the datacenters to the subscription. The solution must minimize network latency between the datacenters.

What should you create?

（含图）

LB1 is con􀂬gured as shown in the following table.

（含图）

You plan to create new inbound NAT rules that meet the following requirements:

✑ Provide Remote Desktop access to VM1 from the internet by using port 3389.

✑ Provide Remote Desktop access to VM2 from the internet by using port 3389.

What should you create on LB1 before you can create the new inbound NAT rules?

（含图）

To which virtual networks can you establish a peering connection from VNet1?

VPN gateway named

VPNGW1 that uses static routing. There is a site-to-site VPN connection between your on-premises network and VNet1.

On a computer named Client1 that runs Windows 10, you con􀂬gure a point-to-site VPN connection to VNet1.

You con􀂬gure virtual network peering between VNet1 and VNet2. You verify that you can connect to VNet2 from the on-premises network.

Client1 is unable to connect to VNet2.

You need to ensure that you can connect Client1 to VNet2.

What should you do?

（含图）

To which subnets can you apply NSG1?

You have a virtual network named VNET1 and an Azure virtual machine named VM1 that hosts a MySQL database. VM1 connects to VNET1.

You need to ensure that webapp1 can access the data hosted on VM1.

What should you do?

VM1 is con􀂬gured as shown in the exhibit. (Click the Exhibit tab.)

（含图）

You need to enable Desired State Con􀂬guration for VM1.

What should you do first

You have an Azure load balancer named LB1 that provides load balancing services for the virtual machines.

You need to ensure that visitors are serviced by the same web server for each request.

What should you con􀂬gure?

（含图）

Each virtual machine uses a static IP address.

You need to create network security groups (NSGs) to meet following requirements:

✑ Allow web requests from the internet to VM3, VM4, VM5, and VM6.

✑ Allow all connections between VM1 and VM2.

✑ Allow Remote Desktop connections to VM1.

✑ Prevent all other network tra􀂮c to VNET1.

What is the minimum number of NSGs you should create?

（含图）

The Not allowed resource types Azure policy that has policy enforcement enabled is assigned to RG1 and uses the following parameters:

Microsoft.Network/virtualNetworks

Microsoft.Compute/virtualMachines

In RG1, you need to create a new virtual machine named VM2, and then connect VM2 to VNET1.

What should you do 􀂬rst?

The company also has two on-premises servers named Server1 and Server2 that run Windows Server 2016. Server1 is con􀂬gured as a DNS

server that has a primary DNS zone named adatum.com. Adatum.com contains 1,000 DNS records.

You manage Server1 and Subscription1 from Server2. Server2 has the following tools installed:

✑ The DNS Manager console

✑ Azure PowerShell

✑ Azure CLI 2.0

You need to move the adatum.com zone to an Azure DNS zone in Subscription1. The solution must minimize administrative effort.

What should you use?

You need to direct all the Remote Desktop Protocol (RDP) connections to VM3 only.

What should you con􀂬gure?

（含图）

VM1 and VM2 are deployed from the same template and host line-of-business applications.

You con􀂬gure the network security group (NSG) shown in the exhibit. (Click the Exhibit tab.)

（含图）

You need to prevent users of VM1 and VM2 from accessing websites on the Internet over TCP port 80.

What should you do?