Want to know features? Want to lear more about experience? Study . Gat a success with an absolute guarantee to pass Microsoft AZ-301 (Microsoft Azure Architect Design) test on your first attempt.

Check AZ-301 free dumps before getting the full version:

NEW QUESTION 1
You manage a single-domain, on-premises Active Directory for named contoso.com. The forest functional level is window Server 2016.
You have several on-premises applications that depend on Active Directory. You plan to migrate the applications to Azure.
You need to recommend an identity solution for the appkcatkms. The solution mufl meet the following requirements:
• Eliminate the need for hybrid network connectivity
• Minimize management overhead for Active Directory. What should you recommend?

  • A. In Azure, deploy additional domain controllers for the contoso.com domain
  • B. In Azure, deploy an additional child domain to the contoso.com forest.
  • C. Implement Azure Active Directory Domain Services (Azure AD DS).
  • D. Implement a new Acuve Directory forest in Azure.

Answer: A

NEW QUESTION 2
You plan to deploy logical Azure SQL Database servers to The East US Azure region and the Wen US Azure region. Each server will contain 20 database accessed by a different user who reads in a different on premises location. The databases will be configured to use active geo-replication.
You need to recommend a solution that meets the following requirement!;
• Restricts user access to each database
• Restricts network access to each database based on each user's respective location
• Ensures that the databases remain accessible from down applications if the local Azure region fails
What should you include in the recommendation? To answer, select the appropriate options m the answer area NOTE: Each correct selection is worth one point.
AZ-301 dumps exhibit

    Answer:

    Explanation: AZ-301 dumps exhibit


    Topic 3, Case Study B
    Overview
    Contoso,Ltd is a US-base finance service company that has a main office New York and an office in San Francisco.
    Payment Processing Query System
    Contoso hosts a business critical payment processing system in its New York data center. The system has three tiers a front-end web app a middle -tier API and a back end data store implemented as a Microsoft SQL Server 2014 database All servers run Windows Server 2012 R2.
    The front -end and middle net components are hosted by using Microsoft Internet Inform-non Services (IK) The application rode is written in C# and middle- tier API uses the Entity framework to communicate the SQL Server database. Maintenance of the database e performed by using SQL Server Ago-
    The database is currently J IB and is not expected to grow beyond 3 TB.
    The payment processing system has the following compliance related requirement
    • Encrypt data in transit and at test. Only the front-end and middle-tier components must be able to access the encryption keys that protect the date store.
    • Keep backups of the two separate physical locations that are at last 200 miles apart and can be restored for op to seven years.
    • Support blocking inbound and outbound traffic based on the source IP address, the description IP address, and the port number
    • Collect Windows security logs from all the middle-tier servers and retain the log for a period of seven years,
    • Inspect inbound and outbound traffic from the from-end tier by using highly available network appliances.
    • Only allow all access to all the tiers from the internal network of Contoso.
    Tape backups ate configured by using an on-premises deployment or Microsoft System Center Data protection Manager (DPMX and then shaped ofsite for long term storage
    Historical Transaction Query System
    Contoso recently migrate a business-Critical workload to Azure. The workload contains a NET web server for querying the historical transaction data residing in azure Table Storage. The NET service is accessible from a client app that was developed in-house and on the client computer in the New Your office. The data in the storage is 50 GB and is not except to increase.
    Information Security Requirement
    The IT security team wants to ensure that identity management n performed by using Active Directory. Password hashes must be stored on premises only.
    Access to all business-critical systems must rely on Active Directory credentials. Any suspicious authentication attempts must trigger multi-factor authentication prompt automatically Legitimate users must be able to authenticate successfully by using multi-factor authentication.
    Planned Changes
    Contoso plans to implement the following changes:
    * Migrate the payment processing system to Azure.
    * Migrate the historical transaction data to Azure Cosmos DB to address the performance issues.
    Migration Requirements
    Contoso identifies the following general migration requirements:
    Infrastructure services must remain available if a region or a data center fails. Failover must occur without any administrative intervention
    • Whenever possible. Azure managed serves must be used to management overhead
    • Whenever possible, costs must be minimized.
    Contoso identifies the following requirements for the payment processing system:
    • If a data center fails, ensure that the payment processing system remains available without any administrative intervention. The middle-tier and the web front end must continue to operate without any additional configurations-
    • If that the number of compute nodes of the from -end and the middle tiers of the payment processing system can increase or decrease automatically based on CPU utilization.
    • Ensure that each tier of the payment processing system is subject to a Service level Agreement (SLA) of 9959 percent availability
    • Minimize the effort required to modify the middle tier API and the back-end tier of the payment processing system.
    • Generate alerts when unauthorized login attempts occur on the middle-tier virtual machines.
    • Insure that the payment processing system preserves its current compliance status.
    • Host the middle tier of the payment processing system on a virtual machine.
    Contoso identifies the following requirements for the historical transaction query system:
    • Minimize the use of on-premises infrastructure service.
    • Minimize the effort required to modify the .NET web service querying Azure Cosmos DB.
    • If a region fails, ensure that the historical transaction query system remains available without any administrative intervention.
    Current Issue
    The Contoso IT team discovers poor performance of the historical transaction query as the queries frequently cause table scans.
    Information Security Requirements
    The IT security team wants to ensure that identity management is performed by using Active Directory. Password hashes must be stored on-premises only.
    Access to all business-critical systems must rely on Active Directory credentials. Any suspicious authentication attempts must trigger a multi-factor authentication prompt automatically. legitimate users must be able to authenticate successfully by using multi-factor authentication.

    NEW QUESTION 3
    A company named Contoso, Ltd. has an Azure Active Directory (Azure AD) tenant that is integrated with Microsoft Office 365 and an Azure subscription.
    Contoso has an on-premises identity infrastructure. The infrastructure includes servers that run Active Directory Domain Services (AD DS), Active Directory Federation Services (AD FS), Azure AD Connect, and Microsoft Identity Manager (MIM).
    Contoso has a partnership with a company named Fabrikam, Inc. Fabrikam has an Active Directory forest and an Office 365 tenant. Fabrikam has the same on-premises identity infrastructure as Contoso.
    A team of 10 developers from Fabrikam will work on an Azure solution that will be hosted in the Azure subscription of Contoso. The developers must be added to the Contributor role for a resource in the Contoso subscription.
    You need to recommend a solution to ensure that Contoso can assign the role to the 10 Fabrikam developers.
    The solution must ensure that the Fabrikam developers use their existing credentials to access resources. What should you recommend?

    • A. Configure a forest trust between the on-premises Active Directory forests of Contoso and Fabrikam.
    • B. Configure an organization relationship between the Office 365 tenants of Fabrikam and Contoso.
    • C. In the Azure AD tenant of Contoso, enable Azure Active Directory Domain Services (Azure AD DS).Createa one-way forest trust that uses selective authentication between the Active Directory forests of Contoso and Fabrikam.
    • D. In the Azure AD tenant of Contoso, create guest accounts for the Fabrikam developers.

    Answer: D

    Explanation: References:
    https://docs.microsoft.com/en-us/azure/role-based-access-control/role-assignments-external-users

    NEW QUESTION 4
    You are designing a virtual machine that will run Microsoft SQL Server and will contain two data disks. The first data disk will store log files, and the second data disk will store data. Both disks are P40 managed disks.
    You need to recommend a caching policy for each disk. The policy must provide the best overall performance for the virtual machine.
    Which caching policy should you recommend for each disk? To answer, drag the appropriate policies to the correct disks. Each policy may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
    NOTE: Each correct selection is worth one point.
    AZ-301 dumps exhibit

      Answer:

      Explanation: References:
      https://docs.microsoft.com/en-us/azure/virtual-machines/windows/sql/virtual-machines-windows-sql-performan

      NEW QUESTION 5
      You deploy several Azure SQL Database instances.
      You plan to configure the Diagnostics settings on the databases as shown in the following exhibit.
      AZ-301 dumps exhibit
      Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
      NOTE: Each correct selection is worth one point.
      AZ-301 dumps exhibit

        Answer:

        Explanation: In the exhibit, the SQLInsights data is configured to be stored in Azure Log Analytics for 90 days. However, the question is asking for the “maximum” amount of time that the data can be stored which is 730 days.

        NEW QUESTION 6
        A company named Contoso Ltd., has a single-domain Active Directory forest named contoso.com.
        Contoso is preparing to migrate all workloads to Azure. Contoso wants users to use single sign-on (SSO) when they access cloud-based services that integrate with Azure Active Directory (Azure AD).
        You need to identify any objects in Active Directory that will fail to synchronize to Azure AD due to formatting issues. The solution must minimize costs.
        What should you include in the solution?

        • A. Azure Advisor
        • B. Microsoft Office 365 IdFix
        • C. Azure AD Connect Health
        • D. Password Export Server version 3.1 (PES v3.1) in Active Directory Migration Tool (ADMT)

        Answer: B

        NEW QUESTION 7
        You plan to import data from your on-premises environment into Azure. The data is shown in the following table.
        AZ-301 dumps exhibit
        What should you recommend using to migrate the data? To answer, drag the appropriate tools to the correct data sources. Each tool may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
        NOTE: Each correct selection is worth one point.
        AZ-301 dumps exhibit

          Answer:

          Explanation: References:
          https://docs.microsoft.com/en-us/azure/dms/tutorial-sql-server-to-azure-sql https://docs.microsoft.com/en-us/azure/cosmos-db/import-data

          NEW QUESTION 8
          You are planning to deploy an application by using the Azure Kubermets Services (AKS)> the application will reedy on having access to an encryption key that will be used to ... transmit files
          What should you use to provides the encryption key AKS security?

          • A. secrets
          • B. Azure Storage Service Encryption
          • C. a Kubernetes deployment YAML file
          • D. ConfigureMap

          Answer: C

          NEW QUESTION 9
          You have an on-premises network that uses on IP address space of 172.16.0.0/16 You plan to deploy 25 virtual machines to a new azure subscription.
          You identity the following technical requirements.
          All Azure virtual machines must be placed on the same subnet subnet1.
          All the Azure virtual machines must be able to communicate with all on premises severs.
          The servers must be able to communicate between the on-premises network and Azure by using a site to site VPN.
          You need to recommend a subnet design that meets the technical requirements.
          What should you include in the recommendation? To answer, drag the appropriate network addresses to the correct subnet. Each network address may be used once, more than once or not at all. You may need to drag the split bar between panes or scroll to view content.
          NOTE: Each correct selection is worth one point.
          AZ-301 dumps exhibit

            Answer:

            Explanation: AZ-301 dumps exhibit

            NEW QUESTION 10
            Note: This question is part of series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
            After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
            You have an Azure subscription that contains a resource group named RG1.
            You create an Azure Active Directory (Azure AD) group named ResearchUsers that contains the user accounts of all researchers.
            You need to recommend a solution that meets the following requirements:
            The researchers must be allowed to create Azure virtual machines.
            The researchers must only be able to create Azure virtual machines by using specific Azure Resource
            Manager templates.
            Solution: Create a lab in Azure DevTest Lab. Configure the DevTest Labs settings. Assign the DevTest Labs User role to the ResearchUsers group.
            Does this meet the goal?

            • A. Yes
            • B. No

            Answer: B

            NEW QUESTION 11
            You plan to deploy an API by using Azure API Management.
            You need to recommend a solution to protect the API from a distribute derail of service (DDoS) attack. What should you recommend/

            • A. Create network security groups (NSG)
            • B. Enable rate limiting
            • C. Strip the Power-By response header
            • D. Enable quotas.

            Answer: A

            NEW QUESTION 12
            You deploy two instances of an Azure web app. One instance is in the East US Azure region and the other instance is in the West US Azure region. The web app uses Azure Blob storage to deliver large files to end users.
            You need to recommend a solution for delivering the files to the users. The solution must meet the following requirements:
            Ensure that the users receive files from the same region as the web app that they access.
            Ensure that the files only need to be updated once.
            Minimize costs.
            What should you include in the recommendation?

            • A. Azure File Sync
            • B. Distributed File System (DFS)
            • C. read-access geo-redundant storage (RA-GRS)
            • D. geo-redundant storage (GRS)

            Answer: C

            NEW QUESTION 13
            You need to recommend a high-availability solution for the middle tier of the payment processing system. What should you include in the recommendation?

            • A. availability zones
            • B. an availability set
            • C. the Premium App Service plan
            • D. the Isolated App Server plan

            Answer: A

            NEW QUESTION 14
            You have an Azure subscription for used for testing and development purposes only. The subscription contains Azure virtual machines that unmanaged, standard hard disk drives (HDD).
            You need to recommend a recovery strategy for the virtual machines if an Azure region fails for a sustained period. The recovery time objective WTO) can be up to seven days. The solution must minimize costs.
            What should you include in the recommendation?

            • A. Store the disks in a Standard_LRS storage accoun
            • B. Configure Azure site Recover
            • C. IF a failure occurs, initiate a manual failure over.
            • D. Store the disks in a Standard_GRS storage accoun
            • E. Configure Azure Recover
            • F. If a failure occurs, initiate a manual failover.
            • G. Store the disks in a Standrs_LRS storage accoun
            • H. If a disaster occurs, manually create the virtual machines by used Azure Rsources Mnaager templates.
            • I. Store the disks in a Standard_GRS storage accoun
            • J. If a disaster occurs, manually create the virtual machines by Azure Resource Manager templates.

            Answer: B

            NEW QUESTION 15
            You are designing a container solution in azure that will include two containers. One container will host a web API that will be available to the public. The other container will perform health monitoring of the web API and will remain private. The two containers will be deployed together as a group.
            You need to recommend a compute service for the containers. The solution must minimize costs and maintenance over head.
            What should you include in the recommendation?

            • A. Azure container instances
            • B. Azure container Service
            • C. Azure kubernetes service (aks)
            • D. Azure service fabric

            Answer: A

            Explanation: References:
            https://docs.microsoft.com/en-us/azure/container-instances/container-instances-container-groups

            NEW QUESTION 16
            You have five .NET Core applications that run on 10 Azure virtual machines in the same subscription.
            You need to recommend a solution to ensure that the applications can authenticate by using the same Azure Active Directory (Azure AD) identity. The solution must meet the following requirements:
            Ensure that the applications can authenticate only when running on the 10 virtual machines.
            Minimize administrative effort.
            What should you include in the recommendation? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
            AZ-301 dumps exhibit

              Answer:

              Explanation: AZ-301 dumps exhibit

              NEW QUESTION 17
              You need to deploy resources to host a stateless web app in an Azure subscription. The solution must meet the following requirements:
              • Provide access to the full .NET framework.
              • Provide redundancy if an Azure region fails.
              • Grant administrators access to the operating system to install custom application dependencies. Solution: You deploy a web app in an Isolated App Service plan.
              Does this meet the goal?

              • A. Yes
              • B. No

              Answer: A

              Recommend!! Get the Full AZ-301 dumps in VCE and PDF From Simply pass, Welcome to Download: https://www.simply-pass.com/Microsoft-exam/AZ-301-dumps.html (New 108 Q&As Version)