We share the latest effective Microsoft Azure AZ-102 exam dumps online Practice test to improve your skills! You can also choose AZ-102 PDF! Get the full AZ-102 dumps: https://www.pass4itsure.com/az-102.html (Q&As: 192) to pass the exam easily!
[PDF] Free Microsoft Azure AZ-102 pdf dumps download from Google Drive: https://drive.google.com/open?id=1IaunHjVrLlJaBzAWqMOh0jXxNpE53bAH
[PDF] Free Full Microsoft pdf dumps download from Google Drive: https://drive.google.com/open?id=1gdQrKIsiLyDEsZ24FxsyukNPYmpSUDDO
Exam AZ-102: Microsoft Azure Administrator Certification Transition: https://www.microsoft.com/en-us/learning/exam-az-102.aspx
- Manage Azure subscriptions and resources (5-10%)
- Implement and manage storage (5-10%)
- Configure and manage virtual networks (15-20%)
- Manage identities (15-20%)
- Evaluate and perform server migration to Azure (15-20%)
- Implement and manage application services (5-10%)
- Implement advanced virtual networking (5-10%)
- Secure identities (5-10%)
Latest effective Microsoft Azure AZ-102 Exam Practice Tests
QUESTION 1
You have an Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com that contains 100 user
accounts.
You purchase 10 Azure AD Premium P2 licenses for the tenant.
You need to ensure that 10 users can use all the Azure AD Premium features.
What should you do?
A. From the Groups blade of each user, invite the users to a group.
B. From the Licenses blade of Azure AD, assign a license.
C. From the Directory role blade of each user, modify the directory role.
D. From the Azure AD domain, add an enterprise application.
Correct Answer: B
To assign a license, under Azure Active Directory > Licenses > All Products, select one or more products, and then
select Assign on the command bar. References: https://docs.microsoft.com/en-us/azure/active-
directory/fundamentals/license-users-groups
QUESTION 2
From the MFA Server blade, you open the Block/unblock users blade as shown in the exhibit.
What caused AlexW to be blocked?
A. An administrator manually blocked the user.
B. The user reports a fraud alert when prompted for additional authentication.
C. The user account password expired.
D. The user entered an incorrect PIN four times within 10 minutes.
Correct Answer: B
QUESTION 3
DRAG DROP
You have an on-premises file server named Server1 that runs Windows Server 2016.
You have an Azure subscription that contains an Azure file share.
You deploy an Azure File Sync Storage Sync Service, and you create a sync group.
You need to synchronize files from Server1 to Azure.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions
to the answer area and arrange them in the correct order.
Select and Place:
Correct Answer: 
Explanation:
Step 1: Install the Azure File Sync agent on Server1
The Azure File Sync agent is a downloadable package that enables Windows Server to be synced with an Azure file
share
Step 2: Register Server1.
Register Windows Server with Storage Sync Service
Registering your Windows Server with a Storage Sync Service establishes a trust relationship between your server (or
cluster) and the Storage Sync Service.
Step 3: Add a server endpoint
Create a sync group and a cloud endpoint.
A sync group defines the sync topology for a set of files. Endpoints within a sync group are kept in sync with each other.
A sync group must contain one cloud endpoint, which represents an Azure file share and one or more server endpoints.
A server endpoint represents a path on registered server.
References: https://docs.microsoft.com/en-us/azure/storage/files/storage-sync-files-deployment-guide
QUESTION 4
You download an Azure Resource Manager template based on an existing virtual machine. The template will be used to
deploy 100 virtual machines.
You need to modify the template to reference an administrative password. You must prevent the password from being
stored in plain text.
What should you create to store the password?
A. Azure Active Directory (AD) Identity Protection and an Azure policy
B. a Recovery Services vault and a backup policy
C. an Azure Key Vault and an access policy
D. an Azure Storage account and an access policy
Correct Answer: C
You can use a template that allows you to deploy a simple Windows VM by retrieving the password that is stored in a
Key Vault. Therefore, the password is never put in plain text in the template parameter file. References:
https://azure.microsoft.com/en-us/resources/templates/101-vm-secure-password/
QUESTION 5
DRAG DROP
You have an Azure Linux virtual machine that is protected by Azure Backup.
One week ago, two files were deleted from the virtual machine.
You need to restore the deleted files to an on-premises computer as quickly as possible.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to
the answer area and arrange them in the correct order.
Select and Place:
Correct Answer: 
Explanation:
To restore files or folders from the recovery point, go to the virtual machine and choose the desired recovery point.
Step 0. In the virtual machine\\’s menu, click Backup to open the Backup dashboard.
Step 1. In the Backup dashboard menu, click File Recovery.
Step 2. From the Select recovery point drop-down menu, select the recovery point that holds the files you want. By
default, the latest recovery point is already selected.
Step 3: To download the software used to copy files from the recovery point, click Download Executable (for Windows
Azure VM) or Download Script (for Linux Azure VM, a python script is generated).
Step 4: Copy the files by using AzCopy
AzCopy is a command-line utility designed for copying data to/from Microsoft Azure Blob, File, and Table storage, using
simple commands designed for optimal performance. You can copy data between a file system and a storage account,
or
between storage accounts.
References: https://docs.microsoft.com/en-us/azure/backup/backup-azure-restore-files-from-vm
https://docs.microsoft.com/en-us/azure/storage/common/storage-use-azcopy
QUESTION 6
You have an Azure DNS zone named adatum.com. You need to delegate a subdomain named research.adatum.com to
a different DNS server in Azure. What should you do?
A. Create an PTR record named research in the adatum.com zone.
B. Create an NS record named research in the adatum.com zone.
C. Modify the SOA record of adatum.com.
D. Create an A record named “.research in the adatum.com zone.
Correct Answer: D
Configure A records for the domains and sub domains.
References: http://www.stefanjohansson.org/2012/12/how-to-configure-custom-dns-names-for-multiple-subdomain-
based-azure-web-sites/
QUESTION 7
You have an Azure subscription named Subscnption1 that contains an Azure virtual machine named VM1.
VM1 is in a resource group named RG1.
VM1 runs services that will be used to deploy resources to RG1.
You need to ensure that a service running on VM1 can manage the resources in RG1 by using the identity of VM1.
What should you do fit
A. From the Azure portal modify the Access control (1AM) settings of VM1.
B. From the Azure portal, modify the Policies settings of RG1.
C. From the Azure portal, modify the value of the Managed Service Identity option for VM1.
D. From the Azure portal, modify the Access control (IAM) settings of RG1.
Correct Answer: C
A managed identity from Azure Active Directory allows your app to easily access other AAD-protected resources such
as Azure Key Vault. The identity is managed by the Azure platform and does not require you to provision or rotate any
secrets.
User assigned managed identities can be used on Virtual Machines and Virtual Machine Scale Sets.
References: https://docs.microsoft.com/en-us/azure/app-service/app-service-managed-service-identity
QUESTION 8
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains
a unique solution that might meet the stated goals. Some question sets might have more than one correct solution,
while
others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not
appear in the review screen.
You have an Azure subscription that contains 10 virtual networks. The virtual networks are hosted in separate resource
groups.
Another administrator plans to create several network security groups (NSGs) in the subscription.
You need to ensure that when an NSG is created, it automatically blocks TCP port 8080 between the virtual networks.
Solution: You create a resource lock, and then you assign the lock to the subscription.
Does this meet the goal?
A. Yes
B. No
Correct Answer: B
How can I freeze or lock my production/critical Azure resources from accidental deletion? There is way to do this with
both ASM and ARM resources using Azure resource lock. References: https://blogs.msdn.microsoft.com/azureedu/2016
/04/27/using-azure-resource-manager-policy-and-azure-lock-to-control-your-azure-resources/
QUESTION 9
Another administrator reports that she is unable to configure a web app named corplod7509086n3 to prevent all
connections from an IP address of 11.0.0.11. You need to modify corplod7509086n3 to successfully prevent the
connections from the IP address. The solution must minimize Azure-related costs.
What should you do from the Azure portal?
A. Check the answer in explanantion.
Correct Answer: A
See explanation below.
Step 1:
Find and select application corplod7509086n3:
1.
In the Azure portal, on the left navigation panel, click Azure Active Directory.
2.
In the Azure Active Directory blade, click Enterprise applications.
Step 2:
To add an IP restriction rule to your app, use the menu to open Network>IP Restrictions and click on Configure IP
Restrictions
Step 3:
Click Add rule
You can click on [+] Add to add a new IP restriction rule. Once you add a rule, it will become effective immediately. 
Step 4:
Add name, IP address of 11.0.0.11, select Deny, and click Add Rule 
References: https://docs.microsoft.com/en-us/azure/app-service/app-service-ip-restrictions
QUESTION 10
You need to prevent remote users from publishing via FTP to a function app named FunctionApplod7509087fa. Remote
users must be able to publish via FTPS. What should you do from the Azure portal?
A. Check the answer in explanantion.
Correct Answer: A
See explanation below.
Step 1:
Locate and select the function app FunctionApplod7509087fa.
Step 2:
Select Application Settings > FTP Access, change FTP access to FTPS Only, and click Save.
References: https://blogs.msdn.microsoft.com/appserviceteam/2018/05/08/web-apps-making-changes-to-ftp-
deployments/
QUESTION 11
DRAG DROP
You have an Azure subscription that is used by four departments in your company. The subscription contains 10
resource groups. Each department uses resources in several resource groups.
You need to send a report to the finance department. The report must detail the costs for each department. Which three
actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer
area and arrange them in the correct order.
Select and Place:
Correct Answer: 
Explanation:
Box 1: Assign a tag to each resource.
You apply tags to your Azure resources giving metadata to logically organize them into a taxonomy. After you apply
tags, you can retrieve all the resources in your subscription with that tag name and value. Each resource or resource
group
can have a maximum of 15 tag name/value pairs. Tags applied to the resource group are not inherited by the resources
in that resource group.
Box 2: From the Cost analysis blade, filter the view by tag
After you get your services running, regularly check how much they\\’re costing you. You can see the current spend and
burn rate in Azure portal.
1.
Visit the Subscriptions blade in Azure portal and select a subscription.
2.
You should see the cost breakdown and burn rate in the popup blade.
3.
Click Cost analysis in the list to the left to see the cost breakdown by resource. Wait 24 hours after you add a service for
the data to populate.
4.
You can filter by different properties like tags, resource group, and timespan. Click Apply to confirm the filters and
Download if you want to export the view to a Comma-Separated Values (.csv) file.
Box 3: Download the usage report
References: https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-using-tags
https://docs.microsoft.com/en-us/azure/billing/billing-getting-started
QUESTION 12
You have 100 Azure subscriptions. All the subscriptions are associated to the same Azure Active Directory (Azure AD)
tenant named contoso.com.
You are a global administrator.
You plan to create a report that lists all the resources across all the subscriptions.
You need to ensure that you can view all the resources in all the subscriptions.
What should you do?
A. From the Azure portal, modify the profile settings of your account.
B. From Windows PowerShell, run the Add-AzureADAdministrativeUnitMember cmdlet.
C. From Windows PowerShell, run the New-AzureADUserAppRoleAssignment cmdlet.
D. From the Azure portal, modify the properties of the Azure AD tenant.
Correct Answer: C
The New-AzureADUserAppRoleAssignment cmdlet assigns a user to an application role in Azure Active Directory (AD).
Use it for the application report. References: https://docs.microsoft.com/en-us/powershell/module/azuread/new-
azureaduserapproleassignment?view=azureadps-2.0
QUESTION 13
You configure Azure AD Connect for Azure Active Directory Seamless Single Sign-On (Azure AD Seamless SSO) for an
on-premises network. Users report that when they attempt to access myapps.microsoft.com, they are prompted
multiple
times to sign in and are forced to use an account name that ends with onmicrosoft.com.
You discover that there is a UPN mismatch between Azure AD and the on-premises Active Directory. You need to
ensure that the users can use single-sign on (SSO) to access Azure resources.
What should you do first?
A. From the on-premises network, deploy Active Directory Federation Services (AD FS).
B. From Azure AD, add and verify a custom domain name.
C. From the on-premises network, request a new certificate that contains the Active Directory domain name.
D. From the server that runs Azure AD Connect, modify the filtering options.
Correct Answer: B
Azure AD Connect lists the UPN suffixes that are defined for the domains and tries to match them with a custom domain
in Azure AD. Then it helps you with the appropriate action that needs to be taken. The Azure AD sign-in page lists the
UPN suffixes that are defined for on-premises Active Directory and displays the corresponding status against each
suffix. The status values can be one of the following:
State: Verified
Azure AD Connect found a matching verified domain in Azure AD. All users for this domain can sign in by using their on-
premises credentials.
State: Not verified
Azure AD Connect found a matching custom domain in Azure AD, but it isn\\’t verified. The UPN suffix of the users of
this domain will be changed to the default .onmicrosoft.com suffix after synchronization if the domain isn\\’t verified.
Action Required: Verify the custom domain in Azure AD.
References: https://docs.microsoft.com/en-us/azure/active-directory/hybrid/plan-connect-user-signin
Microsoft Certified: Azure Administrator Associate Azure Administrators implement, monitor, and maintain Microsoft Azure solutions, including major services related to compute, storage, network, and security.
Share 13 of the latest Microsoft Azure AZ-102 dumps Practice tests for free to help you improve your skills. AZ-102 PDF download Online! Get the full AZ-102 dumps: https://www.pass4itsure.com/az-102.html (Q&As: 192). Easily pass the exam!
[PDF] Free Microsoft Azure AZ-102 pdf dumps download from Google Drive: https://drive.google.com/open?id=1IaunHjVrLlJaBzAWqMOh0jXxNpE53bAH
[PDF] Free Full Microsoft pdf dumps download from Google Drive: https://drive.google.com/open?id=1gdQrKIsiLyDEsZ24FxsyukNPYmpSUDDO
Pass4itsure Promo Code 15% Off
related: https://www.certificationvce.com/first-hand-microsoft-070-341-dump-exam/