Valid AZ-301 Dumps shared by PassLeader for Helping Passing AZ-301 Exam! PassLeader now offer the newest AZ-301 VCE dumps and AZ-301 PDF dumps, the PassLeader AZ-301 exam questions have been updated and ANSWERS have been corrected, get the newest PassLeader AZ-301 dumps with VCE and PDF here: https://www.passleader.com/az-301.html (246 Q&As Dumps –> 277 Q&As Dumps)
BTW, DOWNLOAD part of PassLeader AZ-301 dumps from Cloud Storage: https://drive.google.com/open?id=1ah1U5ZfTQkd7hMRDhnN0gFL7q8qMqtUl
NEW QUESTION 225
A company named Contoso, Ltd. has an Azure Active Directory (Azure AD) tenant that is integrated with Microsoft Office 365 and an Azure subscription. Contoso has an on-premises identity infrastructure. The infrastructure includes servers that run Active Directory Domain Services (AD DS), Active Directory Federation Services (AD FS), Azure AD Connect, and Microsoft Identity Manager (MIM). Contoso has a partnership with a company named Fabrikam, Inc. Fabrikam has an Active Directory forest and an Office 365 tenant. Fabrikam has the same on-premises identity infrastructure as Contoso. A team of 10 developers from Fabrikam will work on an Azure solution that will be hosted in the Azure subscription of Contoso. The developers must be added to the Contributor role for a resource in the Contoso subscription. You need to recommend a solution to ensure that Contoso can assign the role to the 10 Fabrikam developers. The solution must ensure that the Fabrikam developers use their existing credentials to access resources. What should you recommend?
A. Configure an AD FS relying party trust between the Fabrikam and Contoso AD FS infrastructures.
B. Configure an organization relationship between the Office 365 tenants of Fabrikam and Contoso.
C. In the Azure AD tenant of Contoso, create guest accounts for the Fabrikam developers.
D. Configure a forest trust between the on-premises Active Directory forests of Contoso and Fabrikam.
Answer: D
Explanation:
Trust configurations – configure trust from managed forests(s) or domain(s) to the administrative forest A one-way trust is required from production environment to the admin forest. Selective authentication should be used to restrict accounts in the admin forest to only logging on to the appropriate production hosts.
https://docs.microsoft.com/en-us/windows-server/identity/securing-privileged-access/securing-privileged-access-reference-material
NEW QUESTION 226
You have an Azure Active Directory (Azure AD) tenant named contoso.com that has a security group named Group1. Group1 is configured for assigned membership. Group1 has 50 members, including 20 guest users. You need to recommend a solution for evaluating the membership of Group1. The solution must meet the following requirements:
– The evaluation must be repeated automatically every three months.
– Every member must be able to report whether they need to be in Group1.
– Users who report that they do not need to be in Group1 must be removed from Group1 automatically.
– Users who do not report whether they need to be in Group1 must be removed from Group1 automatically.
What should you include in the recommendation?
A. Implement Azure AD Identity Protection.
B. Change the Membership type of Group1 to Dynamic User.
C. Create an access review.
D. Implement Azure AD Privileged Identity Management.
Answer: B
Explanation:
In Azure Active Directory (Azure AD), you can create complex attribute-based rules to enable dynamic memberships for groups. Dynamic group membership reduces the administrative overhead of adding and removing users. When any attributes of a user or device change, the system evaluates all dynamic group rules in a directory to see if the change would trigger any group adds or removes. If a user or device satisfies a rule on a group, they are added as a member of that group. If they no longer satisfy the rule, they are removed.
https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/groups-dynamic-membership
NEW QUESTION 227
You have an Azure subscription that contains an Azure Cosmos DB account. You need to recommend a solution to generate an alert from Azure Log Analytics when a request charge for a query exceeds 50 request units more than 20 times within a 15-minute window. What should you recommend?
A. Create a search query to identify when requestCharge_s exceeds 50.
Configure an alert threshold of 20 and a period of 15.
B. Create a search query to identify when duration_s exceeds 20 and requestCharge_s exceeds 50.
Configure a period of 15.
C. Create a search query to identify when requestCharge_s exceeds 20.
Configure a period of 15 and a frequency of 20.
D. Create a search query to identify when duration_s exceeds 20.
Configure a period of 15.
Answer: A
NEW QUESTION 228
You have 70 TB of files on your on-premises file server. You need to recommend solution for importing data to Azure. The solution must minimize cost. What Azure service should you recommend?
A. Azure StorSimple
B. Azure Stack
C. Azure Data Box
D. Azure Batch
Answer: C
Explanation:
Microsoft has engineered an extremely powerful solution that helps customers get their data to the Azure public cloud in a cost-effective, secure, and efficient manner with powerful Azure and machine learning at play. The solution is called Data Box. Data Box and is in general availability status. It is a rugged device that allows organizations to have 100 TB of capacity on which to copy their data and then send it to be transferred to Azure.
Incorrect:
Not A: StoreSimple would not be able to handle 70 TB of data.
https://www.vembu.com/blog/what-is-microsoft-azure-data-box-disk-edge-heavy-gateway-overview/
NEW QUESTION 229
You have an Azure subscription. Your on-premises network contains a file server named Server1. Server1 stores 5 TB of company files that are accessed rarely. You plan to copy the files to Azure Storage. You need to implement a storage solution for the files that meets the following requirements:
– The files must be available within 24 hours of being requested.
– Storage costs must be minimized.
Which two possible storage solutions achieve this goal? (Each correct answer presents a complete solution. Choose two.)
A. Create a general-purpose v2 storage account that is set to the Cool access tier.
Create a file share in the storage account and copy the files to the file share.
B. Create a general-purpose v2 storage account that is set to the Host access tier.
Create a blob container, copy the files to the blob container, and set each file to the Archive access tier.
C. Create a general-purpose v1 storage account.
Create a file share in the storage account and copy the files to the file share.
D. Create an Azure Blob storage account that is set to the Cool access tier.
Create a blob container, copy the files to the blob container, and set each file to the Archive access tier.
E. Create a general-purpose v1 storage account.
Create a blob container and copy the files to the blob container.
Answer: AE
Explanation:
A: Azure storage offers different access tiers, which allow you to store blob object data in the most cost- effective manner. The Cool access tier is optimized for storing data that is infrequently accessed and stored for at least 30 days.
E: Using a file share is cheaper than using a blob container.
Incorrect:
Not B, D: The Archive tier is optimized for storing data that is rarely accessed and stored for at least 180 days with flexible latency requirements (on the order of hours).
Not C: Using a Blob container would be cheaper than using a file share.
https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-storage-tiers
NEW QUESTION 230
You have an on-premises Hyper-V clusters that hosts 20 virtual machines. Some virtual machines run Windows Server 2016 and some run Linux. You plan to migrate the virtual machines to an Azure subscription. You need to recommend a solution to replicate the disks of the virtual machines to Azure. The solution must ensure that the virtual machines remain available during the migration of the disks.
Solution: You recommend implementing an Azure Storage account that has a file service and a blob service, and then using the Data Migration Assistant.
Does this meet the goal?
A. Yes
B. No
Answer: B
Explanation:
Data Migration Assistant is used to migrate SQL databases. Instead use Azure Site Recovery.
https://docs.microsoft.com/en-us/azure/site-recovery/site-recovery-overview
NEW QUESTION 231
You have an on-premises Hyper-V clustern that hosts 20 virtual machines. Some virtual machines run Windows Server 2016 and some run Linux. You plan to migrate the virtual machines to an Azure subscription. You need to recommend a solution to replicate the disks of the virtual machines to Azure. The solution must ensure that the virtual machines remain available during the migration of the disks.
Solution: You recommend implementing a Recovery Services vault, and then using Azure Site Recovery.
Does this meet the goal?
A. Yes
B. No
Answer: A
Explanation:
Site Recovery can replicate on-premises VMware VMs, Hyper-V VMs, physical servers (Windows and Linux), Azure Stack VMs to Azure.
https://docs.microsoft.com/en-us/azure/site-recovery/site-recovery-overview
NEW QUESTION 232
You are designing an Azure web app. You need to ensure that users who have impaired vision can use the app. Which reference material should you use when designing the app?
A. Accessibility in Windows Dev Center
B. Azure Application Architecture Guide
C. Web Content Accessibility Guidelines
D. Cloud Application Architecture Guide
Answer: C
Explanation:
https://www.microsoft.com/en-us/trust-center/compliance/accessibility
NEW QUESTION 233
You manage an Azure environment for a company. The environment has over 25,000 licensed users and 100 mission-critical applications. You need to recommend a solution that provides advanced endpoint threat detection and remediation strategies. What should you recommend?
A. Azure Active Directory (Azure AD) Authentication
B. Microsoft Identity Manager
C. Azure Active Directory Federation Services (AD FS)
D. Azure Active Directory (AZ AD) Connect
E. Azure Active Directory (Azure AD) Identity Protection
Answer: E
Explanation:
Identity Protection uses adaptive machine learning algorithms and heuristics to detect anomalies and risk detections that might indicate that an identity has been compromised. Using this data, Identity Protection generates reports and alerts so that you can investigate these risk detections and take appropriate remediation or mitigation action.
https://docs.microsoft.com/en-us/azure/security/fundamentals/threat-detection
NEW QUESTION 234
You have an Azure Storage account that contains two 1-GB data files named File1 and File2. The data files are set to use the archive access tier. You need to ensure that File1 is accessible immediately when a retrieval request is initiated.
Solution: You move File1 to a new storage account. For File1, you set Access tier to Archive.
Does this meet the goal?
A. Yes
B. No
Answer: B
Explanation:
Instead use the hot access tier. The hot access tier has higher storage costs than cool and archive tiers, but the lowest access costs.
https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-storage-tiers
NEW QUESTION 235
You have an Azure Storage account that contains two 1-GB data files named File1 and File2. The data files are set to use the archive access tier. You need to ensure that File1 is accessible immediately when a retrieval request is initiated.
Solution: For File1, you set Access tier to Hot.
Does this meet the goal?
A. Yes
B. No
Answer: A
Explanation:
The hot access tier has higher storage costs than cool and archive tiers, but the lowest access costs.
https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-storage-tiers
NEW QUESTION 236
You have an application named App1. App1 generates log files that must be archived for five years. The log files must be readable by App1 but must not be modified. Which storage solution should you recommend for archiving?
A. Use an Azure Blob storage account and a time-based retention policy.
B. Ingest the log files into an Azure Log Analytics workspace.
C. Use an Azure Blob storage account configured to use the Archive access tier.
D. Use an Azure file share that has access control enabled.
Answer: A
Explanation:
https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-immutable-storage
NEW QUESTION 237
You plan to archive 10 TB of on-premises data files to Azure. You need to recommend a data archival solution. The solution must minimize the cost of storing the data files. Which Azure Storage account type should you include in the recommendation?
A. Premium Storage (general purpose v1)
B. Standard StorageV2 (general purpose v2)
C. Standard Storage (general purpose v1)
D. Premium StorageV2 (general purpose v2)
Answer: B
Explanation:
Standard StorageV2 supports the Archive access tier, which would be the cheapest solution.
https://docs.microsoft.com/en-us/azure/storage/common/storage-introduction
NEW QUESTION 238
You are developing a sales application that will contain several Azure cloud services and will handle different components of a transaction. Different cloud services will process customer orders, billing, payment, inventory, and shipping. You need to recommend a solution to enable the cloud services to asynchronously communicate transaction information by using REST messages. What should you include in the recommendation?
A. Azure Data Lake
B. Azure Service Fabric
C. Azure Service Bus
D. Azure Notification Hubs
Answer: C
Explanation:
Service Bus is a transactional message broker and ensures transactional integrity for all internal operations against its message stores. All transfers of messages inside of Service Bus, such as moving messages to a dead-letter queue or automatic forwarding of messages between entities, are transactional.
Incorrect:
Not D: Azure Notification Hubs is a massively scalable mobile push notification engine for quickly sending millions of notifications to iOS, Android, Windows, or Kindle devices.
https://docs.microsoft.com/en-us/azure/service-bus-messaging/service-bus-transactions
NEW QUESTION 239
Hotspot
You have an on-premises file server that stores 2 TB of data files. You plan to move the data files to Azure Blob storage in the Central Europe region. You need to recommend a storage account type to store the data files and a replication solution for the storage account. The solution must meet the following requirements:
– Be available if a single Azure datacenter fails.
– Support storage tiers.
– Minimize cost.
What should you recommend? (To answer, select the appropriate options in the answer area.)
Answer:
Explanation:
https://cloud.netapp.com/blog/storage-tiers-in-azure-blob-storage-find-the-best-for-your-data
https://docs.microsoft.com/en-us/azure/storage/common/storage-redundancy
NEW QUESTION 240
Hotspot
Your on-premises network contains a file server named Server1 that stores 500 GB of data. You need to use Azure Data Factory to copy the data from Server1 to Azure Storage. You add a new data factory. What should you do next? (To answer, select the appropriate options in the answer area.)
Answer:
Explanation:
Box 1: Install a self-hosted integration runtime. The Integration Runtime is a customer-managed data integration infrastructure used by Azure Data Factory to provide data integration capabilities across different network environments.
Box 2: Create a pipeline. With ADF, existing data processing services can be composed into data pipelines that are highly available and managed in the cloud. These data pipelines can be scheduled to ingest, prepare, transform, analyze, and publish data, and ADF manages and orchestrates the complex data and processing dependencies.
https://docs.microsoft.com/en-us/azure/machine-learning/team-data-science-process/move-sql-azure-adf
NEW QUESTION 241
……
Get the newest PassLeader AZ-301 VCE dumps here: https://www.passleader.com/az-301.html (246 Q&As Dumps –> 277 Q&As Dumps)
And, DOWNLOAD the newest PassLeader AZ-301 PDF dumps from Cloud Storage for free: https://drive.google.com/open?id=1ah1U5ZfTQkd7hMRDhnN0gFL7q8qMqtUl