Tüm alıştırma soruları

Your company is planning to deploy a new Azure Kubernetes Service (AKS) cluster. Due to IP address constraints in your Azure Virtual Network, you decide to use the kubenet networking model.

Which two statements correctly describe how IP addresses are allocated in this configuration? (Select two.)

An organization has deployed a virtual network containing two subnets: WebSubnet ($10.10.1.0/24$) and ApplianceSubnet ($10.10.2.0/24$). A firewall virtual machine operating as a router is deployed in ApplianceSubnet with the IP address $10.10.2.100$. All outbound internet traffic from WebSubnet must pass through this router. Which two settings must be configured to achieve this routing flow? (Select TWO)

An administrator is planning the deployment of a new web application to Azure App Service. The application hosting environment must meet the following requirements:
- Support automatic scaling of up to 15 instances during peak traffic.
- Support at least 5 staging slots for testing and deployment validation.
- Support daily automated backups of the application.
- Support hybrid connections to an on-premises database.
- The solution must not use a dedicated hosting environment (App Service Environment) to avoid high baseline costs.

Which of the following Azure App Service plan tiers meet these requirements? (Select TWO.)

You are configuring external collaboration settings in a Microsoft Entra ID tenant to control guest user permissions and invitation capabilities. Match each Microsoft Entra ID external collaboration setting to its corresponding behavior.

An administrator is configuring a virtual machine named VM-Prod-01 in the East US region. The virtual machine has a single network interface named nic-prod-01. The primary IP configuration, ipconfig-primary, on nic-prod-01 is associated with a Basic SKU public IP address. You need to add a secondary IP configuration named ipconfig-secondary to nic-prod-01. The secondary configuration must include a public IP address that supports zone redundancy, which requires a Standard SKU public IP. Which of the following actions must you perform to allow the association of the Standard SKU public IP address with the secondary configuration?

An administrator manages a web app hosted on an Azure App Service plan named ASP1. ASP1 is currently configured on the Basic (B1) pricing tier. You need to configure the hosting environment to meet the following requirements:
- Enable testing of web app updates in a staging slot before swapping to production.
- Enable automatic scale-out based on CPU utilization.
- Minimize costs.
Which two actions should you perform? (Select two.)

An Azure administrator configures three virtual networks in the East US region as follows:

* VNet1 ($10.10.0.0/16$) contains a subnet named Subnet1 ($10.10.1.0/24$) with a virtual machine named VM1 ($10.10.1.4$).
* VNet2 ($10.20.0.0/16$) contains a subnet named Subnet2 ($10.20.1.0/24$) with a virtual machine named VM2 ($10.20.1.4$).
* VNet3 ($10.30.0.0/16$) contains a subnet named Subnet3 ($10.30.1.0/24$) with a virtual machine named VM3 ($10.30.1.4$).

The administrator establishes the following configuration:

1. Virtual network peering is configured between VNet1 and VNet2. The peering settings are:
* Peering from VNet1 to VNet2: 'Allow forwarded traffic' is enabled; 'Use remote gateways' is disabled.
* Peering from VNet2 to VNet1: 'Allow forwarded traffic' is enabled; 'Allow gateway transit' is disabled.
2. Virtual network peering is configured between VNet2 and VNet3. The peering settings are:
* Peering from VNet2 to VNet3: 'Allow forwarded traffic' is enabled; 'Allow gateway transit' is disabled.
* Peering from VNet3 to VNet2: 'Allow forwarded traffic' is enabled; 'Use remote gateways' is disabled.
3. IP forwarding is enabled on the network interface of VM2, and the operating system inside VM2 is configured to route traffic (functioning as a Network Virtual Appliance).
4. A route table named RT1 is created with a user-defined route for prefix $10.30.0.0/16$ pointing to the private IP address of VM2 ($10.20.1.4$) as the Next Hop. RT1 is associated with Subnet1.

Based on this scenario, is the statement that VM1 can establish a successful bidirectional ping with VM3 true or false?

An administrator plans to deploy a new Azure virtual machine named VM1 in the West US 3 region. VM1 will host a database workload that requires high-performance storage using Ultra Disk managed disks.

Which two configurations should the administrator perform during the deployment of VM1 to support the use of Ultra Disks? (Select two.)

You have an Azure App Service web app named app-portal-prod that currently runs on the Basic B1 App Service plan. You need to implement a deployment slot named staging for testing. The staging slot must use a staging database, and the production slot must use a production database. These connection strings must remain with their respective slots after a slot swap operation. Which two actions should you perform? (Select two.)

You are deploying a new Azure Kubernetes Service (AKS) cluster to host a microservice workload. The network routing requirements are as follows:
- The node pool must be deployed inside an existing virtual network subnet with the CIDR block $10.240.0.0/27$ (which provides $30$ usable IP addresses).
- The cluster must be able to scale up to $120$ Pods during peak traffic.
- Pods must not be assigned IP addresses directly from the virtual network subnet to prevent IP address exhaustion.

Which network configuration should you select for the AKS cluster?

You are managing the network resources for a web application. You deploy a Standard load balancer named LB1. You intend to add the network interfaces of two virtual machines, VM1 and VM2, to the backend pool of LB1. Both virtual machines currently have public IP addresses assigned to their network interfaces. However, when attempting to add the virtual machines to the backend pool of LB1, the operation fails with a compatibility error. You need to ensure both virtual machines can be added to the backend pool of LB1. What should you do?

You are configuring an Azure Virtual Machine Scale Set (VMSS) named `vmss-sales` that uses Uniform orchestration, has an initial instance count of $10$, and uses an Automatic upgrade policy. The scale set is deployed in a subnet that has only $5$ available private IP addresses. You plan to configure an autoscale rule to scale out the VMSS by $4$ instances. You need to ensure that the scale-out operation succeeds without failing due to a lack of available IP addresses. Which configuration change should you apply to the scale set?

You manage an Azure environment containing a virtual machine named VM-Prod1. The network interface of VM-Prod1 is currently a member of the backend pool of a Basic Load Balancer. You need to assign a new public IP address directly to the network interface of VM-Prod1. The public IP address must support zone redundancy. What should you do first?

You have a web application named `app-portal` hosted on an Azure App Service plan named `asp-portal`. The App Service plan is currently configured for the Basic ($B1$) pricing tier.

You need to implement a deployment slot named `staging` for the web app and route $10\%$ of the production web traffic to the `staging` slot for testing purposes.

Which two actions should you perform? (Select two.)

You are the administrator for a Microsoft Entra ID tenant. You configure a Self-Service Password Reset (SSPR) policy that requires users to use at least two methods to reset their password. You enable the following authentication methods for SSPR:
- Email
- Mobile app notification
- Mobile app code

A user named User1 is in the group scoped for SSPR. User1 installs the Microsoft Authenticator app on their smartphone and registers it for both notifications and verification codes. User1 does not register any other authentication methods.

When User1 attempts to reset their password, they receive an error indicating they have not registered the required number of authentication methods.

What is the cause of this issue?

Your company has an Azure subscription that contains a virtual network named `vnet-finance`. The virtual network is configured with the address space $192.168.32.0/22$. Currently, `vnet-finance` contains a subnet named `Subnet-Web` that uses the address range $192.168.32.0/24$. You need to configure two new subnets to support the deployment of an Azure Bastion host and an Azure VPN Gateway. Which two of the following subnets can you create in `vnet-finance` to support these deployments? (Select two.)

Your company has an on-premises branch office file server named Server1. You deploy Azure File Sync to centralize files in an Azure file share named Share1. You install the Azure File Sync agent on Server1, register the server, and create a sync group named SyncGroup1 with Share1 configured as the cloud endpoint. You need to configure sync for a folder on Server1 at D:\Data. The configuration must ensure that volume D: always maintains at least $30\%$ free space, and files that have not been accessed for more than 45 days are tiered to the cloud. Which configuration should you perform?

You are designing the hosting infrastructure for a newly developed microservice that acts as an API gateway. The API gateway has the following specific requirements:
- It must support horizontal autoscaling up to $12$ instances to handle unpredictable traffic spikes.
- It requires at least $8$ deployment slots to accommodate parallel integration testing pipelines.
- It must connect securely to resources in an Azure Virtual Network.

You need to select the most cost-effective pricing tier for the App Service plan.

Which pricing tier should you choose?

An administrator is configuring a new virtual network named `VNet1` in an Azure subscription to support a hybrid application architecture.

The virtual network has the following requirements:
- A subnet named `Subnet-Web` must host $11$ virtual machine instances that require private IP addresses.
- An Azure Bastion host must be deployed to provide secure connectivity to the virtual machines.
- A virtual network gateway must be deployed to support both an ExpressRoute connection and a VPN gateway in a coexisting configuration.
- Internal name resolution for resources in the virtual network must be resolved using an Azure Private DNS zone named `corp.internal`.

The administrator allocates the address block $10.150.20.0/24$ for `VNet1`.

Which two configurations should the administrator implement to meet the requirements while minimizing address space consumption? (Select two.)

An administrator is configuring a secondary IP configuration for an Azure virtual machine named VM-Db1. VM-Db1 has a single network interface named nic-db1. VM-Db1 is currently part of the backend pool of a Standard Load Balancer named LB-Prod. The administrator needs to configure a new IP configuration named ipconfig2 on nic-db1 to meet the following requirements:

- The private IP address of ipconfig2 must be set to $10.10.1.50$.
- The public IP address of ipconfig2 must be accessible from the internet.
- VM-Db1 must remain in the backend pool of LB-Prod.

Which configuration must the administrator apply to ipconfig2 and the associated public IP address?