Microsoft: AZ-203 — Questions and Answers
Question 1: Host1 and Host2 are the names of your two Hyper-V hosts. A custom Azure Resource was used to deploy VM1, an Azure virtual machine, on Host1. manager model. You must relocate VM1 to Host2. What ought you to do?
- From the Redeploy blade, click Redeploy. (Correct answer)
- From the Profile blade, modify the usage location.
- From the Update management blade, click Enable.
- From the Overview blade, move VM1 to a different subscription.
Correct answer: From the Redeploy blade, click Redeploy.
In Azure, if a virtual machine (VM) needs to be moved to a different underlying host within the same availability set, the 'Redeploy' option is the correct action. Redeploying a VM moves it to a new node within the Azure infrastructure, which can resolve host-related issues or simply relocate the VM without altering its configuration or resources.
Question 2: You use an Azure AD-joined device to control your company's Azure Kubernetes Service (AKS) cluster. The resource group in which the cluster is situated. MyApp is a program that developers have made. A container image containing MyApp was created. The application's YAML manifest file has to be deployed. Solution: You perform the kubectl apply '""f myapp.yaml command after installing the Azure CLI on the device. Is the objective being met?
- No
- Yes (Correct answer)
Correct answer: Yes
The `kubectl apply -f myapp.yaml` command is the standard and correct method for deploying an application defined in a YAML manifest file to a Kubernetes cluster. By installing the Azure CLI and configuring `kubectl` to interact with the Azure Kubernetes Service (AKS) cluster, a developer can successfully deploy the containerized application, thus meeting the objective.
Question 3: Your business has a subscription to Azure. Several Azure virtual machines must be deployed to the subscription using Azure Resource Manager (ARM) templates. One availability set will contain all of the virtual machines. In the event of a fabric failure or maintenance, you must make sure the ARM template enables access to as many virtual machines as possible. Which of the following should you set as the platformFaultDomainCount property's value?
- Min Value
- Max Value (Correct answer)
- 10
- 30
Correct answer: Max Value
To maximize the availability of virtual machines within an Azure Availability Set, the `platformFaultDomainCount` property should be set to its maximum value. This configuration ensures that VMs are distributed across the highest possible number of separate physical hardware units (fault domains) within the datacenter. This minimizes the impact of a single point of failure, such as power or network outages, on the underlying infrastructure.
Question 4: Your business has a subscription to Azure. Several Azure virtual machines must be deployed to the subscription using Azure Resource Manager (ARM) templates. One availability set will contain all of the virtual machines. In the event of a fabric failure or maintenance, you must make sure the ARM template enables access to as many virtual machines as possible. Which of the following should you provide as the platformUpdateDomainCount property's value?
- 40 (Correct answer)
- 30
- 20
- 10
Correct answer: 40
To ensure maximum accessibility of virtual machines during planned maintenance, the `platformUpdateDomainCount` property in an Azure Availability Set should be set to its maximum value. For many regions, this maximum is 20, but for specific scenarios or larger scale deployments, Azure allows up to 40 update domains. This distributes VMs across different groups that are updated sequentially, preventing all VMs from being offline simultaneously during host updates.
Question 5: You are creating an online store. Using Azure App Service authentication and Azure Active Directory, you wish to use Azure Key Vault to make sure that logins to the e-Commerce Web App are safe. AAD) directory. What are the best practices for the e-Commerce Web App?
- Create an Azure AD service principal.
- Run the az keyvault secret command.
- Enable Azure AD Connect.
- Enable Managed Service Identity (MSI). (Correct answer)
Correct answer: Enable Managed Service Identity (MSI).
The best practice for an Azure App Service to securely access Azure Key Vault, especially when using Azure Active Directory authentication, is to enable Managed Service Identity (MSI). MSI provides an automatically managed identity for Azure services, allowing the App Service to authenticate to Key Vault and retrieve secrets without needing to manage credentials in code or configuration, significantly enhancing security and simplifying credential management.
Question 6: You must assess the underlined text in this question to decide if it is accurate. An Azure subscription is connected to your Azure Active Directory (Azure AD) tenant. Your developer has produced a mobile application that uses the OAuth 2 implicit grant type to acquire Azure AD access tokens. The mobile app has to be added to Azure AD. For registration purposes, you need the developer to provide a redirect URI. Review the text that has been underlined. If it makes the assertion true, choose ""No change is needed,"" whereas if it makes the statement false, choose the appropriate response."
- a secret
- a login hint
- a client ID
- No change required. (Correct answer)
Correct answer: No change required.
For mobile applications utilizing the OAuth 2 implicit grant type to obtain Azure AD access tokens, a redirect URI is a mandatory component during application registration. This URI specifies the exact location where Azure AD should send the authentication response, including the access token, after a user successfully authenticates. Therefore, no change is needed to the statement.
Question 7: You are in charge of a SQL Azure database that supports Azure AD authentication. You must ensure that Microsoft SQL Server Management Studio (SSMS) may be used by database developers to connect to the SQL database. Additionally, you must ensure that the developers authenticate using their on-premises Active Directory accounts. Your plan should provide for a minimal amount of authentication prompts. Which of the following ought to you put into practice?
- Azure Multi-Factor authentication.
- OATH software tokens.
- Active Directory integrated authentication. (Correct answer)
- Azure AD token.
Correct answer: Active Directory integrated authentication.
To enable database developers to connect to a SQL Azure database using SSMS with their on-premises Active Directory accounts and minimal authentication prompts, Active Directory integrated authentication is the optimal solution. This method leverages the user's existing Windows login credentials, providing a seamless single sign-on experience. It eliminates the need for repeated password entries or additional authentication factors for each connection.
Microsoft: AZ-203
Host1 and Host2 are the names of your two Hyper-V hosts.
A custom Azure Resource was used to deploy VM1, an Azure virtual machine, on Host1.
manager model.
You must relocate VM1 to Host2.
What ought you to do?