正真正銘のAZ-304問題集には100%合格率練習テスト問題集 [Q163-Q178]

正真正銘のAZ-304問題集には100%合格率練習テスト問題集

Microsoft AZ-304リアル試験問題保証付き更新された問題集

Microsoft AZ-304 認定試験の出題範囲：

トピック	出題範囲
トピック 1	設計およびAzureSiteRecoveryソリューションコンプライアンス要件のログソリューションを推奨する
トピック 2	保存データ、送信中のデータ、使用中のデータを暗号化するためのソリューションを推奨するバックアップとリカバリのためのソリューションを設計する
トピック 3	アイデンティティとセキュリティの設計、コスト管理とコスト報告のための認証ソリューション
トピック 4	多要素認証を含む条件付きアクセスのソリューションログのレベルと保存場所を決定する
トピック 5	リカバリの目標を満たすAzureハイブリッドおよびオンプレミスワークロードのリカバリソリューションを推奨するコスト最適化の設計
トピック 6	ソリューションに適切な監視ツールを推奨する要件に基づいて適切なデータプラットフォームを選択する
トピック 7	イベントのルーティングとエスカレーションのメカニズムを選択するロギングとモニタリングのソリューションを設計する

質問 163
Your company has the infrastructure shown in the following table.

The on-premises Active Directory domain syncs to Azure Active Directory (Azure AD).
Server1 runs an application named Appl that uses LDAP queries to verify user identities in the on-premises Active Directory domain.
You plan to migrate Server1 to a virtual machine in Subscription1.
A company security policy states that the virtual machines and services deployed to Subscription! must be prevented from accessing the on-premises network.
You need to recommend a solution to ensure that Appl continues to function after the migration. The solution must meet the security policy.
What should you include in the recommendation?

A. Azure AD Domain Services (Azure AD DS)
B. an Azure VPN gateway
C. Azure AD Application Proxy
D. the Active Directory Domain Services role on a virtual machine

正解: C

解説:
Explanation
You can join a Windows Server virtual machine to an Azure Active Directory Domain Services managed domain.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory-domain-services/join-windows-vm

質問 164
You have an on-premises file server that stores 2 TB of data files.
You plan to move the data files to Azure Blob storage in the Central Europe region.
You need to recommend a storage account type to store the data files and a replication solution for the storage account. The solution must meet the following requirements:
Be available if a single Azure datacenter fails.
Support storage tiers.
Minimize cost.
What should you recommend? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

正解:

解説:

Reference:
https://cloud.netapp.com/blog/storage-tiers-in-azure-blob-storage-find-the-best-for-your-data

質問 165
You manage a network that includes an on-premises Active Directory Domain Services domain and an Azure Active Directory (Azure AD).
Employees are requires to use different accounts when using on-premises or cloud resources. You must recommend a solution that lets employees sign in to all company resources by using a single account. The solution must implement an identity provider.
You need provide guidance on the different identity providers.
How should you describe each identity provider? To answer, select the appropriate description from each list in the answer area.
NOTE: Each correct selection is worth one point.

正解:

解説:

References:
https://docs.microsoft.com/en-us/azure/active-directory-domain-services/active-directory-ds-overview
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/whatis-fed

質問 166
You have an Azure Storage v2 account named storage1.
You plan to archive data to storage1.
You need to ensure that the archived data cannot be deleted for five years. The solution must prevent administrators from deleting the data.
What should you do?

A. You create a file share, and you configure an access policy.
B. You create a file share and snapshots.
C. You create an Azure Blob storage container, and you configure a legal hold access policy.
D. You create an Azure Blob storage container, and you configure a time-based retention policy and lock the policy.

正解: D

解説:
Reference:
https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-immutability-policies-manage?tabs=azure-portal

質問 167
You have a virtual machine scale set named SS1.
You configure autoscaling as shown in the following exhibit.

You configure the scale out and scale in rules to have a duration of 10 minutes and a cool down time of 10 minutes.
Use the drop-down menus to select the answer choice that answers each question based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

正解:

解説:

質問 168
You have 100 servers that run Windows Server 2012 R2 and host Microsoft SQL Server 2014 instances.
The instances host databases that have the following characteristics:
* The largest database is currently 3 TB. None of the databases will ever exceed 4 TB.
* Stored procedures are implemented by using CLR.
You plan to move all the data from SQL Server to Azure.
You need to recommend an Azure service to host the databases. The solution must meet the following requirements:
* Whenever possible, minimize management overhead for the migrated databases.
* Minimize the number of database changes required to facilitate the migration.
* Ensure that users can authenticate by using their Active Directory credentials.
What should you include in the recommendation?

A. SQL Server 2016 on Azure virtual machines
B. Azure SQL Database single databases
C. Azure SQL Database Managed Instance
D. Azure SQL Database elastic pools

正解: C

解説:
Explanation/Reference:
https://docs.microsoft.com/en-us/azure/sql-database/sql-database-managed-instance

質問 169
You have an Azure App Service Web App that includes Azure Blob storage and an Azure SQL Database instance. The application is instrumented by using the Application Insights SDK.
You need to design a monitoring solution for the web app.
Which Azure monitoring services should you use? To answer, select the appropriate Azure monitoring services in the answer area.
NOTE: Each correct selection is worth one point.

正解:

解説:

1. Azure Monitor Log
2. Azure Application Insights (application map in App insights)
3. Azure Application Insights
4. Azure Application insights
https://docs.microsoft.com/en-us/azure/azure-monitor/app/app-map?tabs=net
https://docs.microsoft.com/en-us/azure/azure-monitor/insights/service-map

質問 170
You are designing a virtual machine that will run Microsoft SQL Server and will contain two data disks. The first data disk will store log files, and the second data disk will store data. Both disks are P40 managed disks.
You need to recommend a caching policy for each disk. The policy must provide the best overall performance for the virtual machine.
Which caching policy should you recommend for each disk? To answer, drag the appropriate policies to the correct disks. Each policy may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.

正解:

解説:

Explanation

References:
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/sql/virtual-machines-windows-sql-performanc

質問 171
You have an on-premises network and an Azure subscription. The on-premises network has several branch offices.
A branch office in Toronto contains a virtual machine named VM1 that is configured as a file server. Users access the shared files on VM1 from all the offices.
You need to recommend a solution to ensure that the users can access the shared files as quickly as possible if the Toronto branch office is inaccessible.
What should you include in the recommendation?

A. an Azure file share and Azure File Sync
B. a Recovery Services vault and Windows Server Backup
C. Azure blob containers and Azure File Sync
D. Explanation:
Use Azure File Sync to centralize your organization's file shares in Azure Files, while keeping the flexibility, performance, and compatibility of an on-premises file server. Azure File Sync transforms Windows Server into a quick cache of your Azure file share.
You need an Azure file share in the same region that you want to deploy Azure File Sync.
E. a Recovery Services vault and Azure Backup

正解: A

解説:
Backups would be a slower solution.
Reference:
https://docs.microsoft.com/en-us/azure/storage/files/storage-sync-files-deployment-guide

質問 172
Note: This question is part of series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your company has an on-premises Active Directory Domain Services (AD DS) domain and an established Azure Active Directory (Azure AD) environment.
Your company would like users to be automatically signed in to cloud apps when they are on their corporate desktops that are connected to the corporate network.
You need to enable single sign-on (SSO) for company users.
Solution: Configure an AD DS server in an Azure virtual machine (VM). Configure bidirectional replication.
Does the solution meet the goal?

A. Yes
B. No

正解: B

解説:
Instead install and configure an Azure AD Connect server.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sso

質問 173
You have an Azure subscription that contains the storage accounts shown in the following table.

You plan to implement two new apps that have the requirements shown in the following table.

Which storage accounts should you recommend using for each app? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

正解:

解説:

Explanation

Box 1: Storage1, storage2, and storage3 only
Azure Blob Storage lifecycle management offers a rich, rule-based policy for GPv2 and blob storage accounts.
Use the policy to transition your data to the appropriate access tiers or expire at the end of the data's lifecycle.
Box 2: Storage1, storage2, and storage4 only
General purpose version 2 (GPv2) storage accounts: GPv2 storage accounts allow you to deploy Azure file shares on standard/hard disk-based (HDD-based) hardware.
FileStorage storage accounts: FileStorage storage accounts allow you to deploy Azure file shares on premium/solid-state disk-based (SSD-based) hardware.
Reference:
https://docs.microsoft.com/en-us/azure/storage/blobs/storage-lifecycle-management-concepts

質問 174
You need to design a resource governance solution for an Azure subscription. The solution must meet the following requirements:
* Ensure that all ExpressRoute resources are created in a resource group named RG1.
* Delegate the creation of the ExpressRoute resources to an Azure Active Directory (Azure AD) group named Networking.
* Use the principle of least privilege.
What should you include in the solution? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

正解:

解説:

Explanation

Box 1: An Azure policy assignment at the subscription level that has an exclusion Box 2: A custom RBAC role assignment at the level of RG1 Azure role-based access control (Azure RBAC) is the authorization system you use to manage access to Azure resources. To grant access, you assign roles to users, groups, service principals, or managed identities at a particular scope.
Reference:
https://docs.microsoft.com/en-us/azure/governance/policy/tutorials/create-and-manage

質問 175
You have the application architecture shown in the following exhibit.

Use the drop-down menus to select choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

正解:

解説:

Reference:
https://docs.microsoft.com/en-us/azure/traffic-manager/traffic-manager-routing-methods
https://docs.microsoft.com/en-us/azure/traffic-manager/traffic-manager-monitoring

質問 176
You deploy several Azure SQL Database instances.
You plan to configure the Diagnostics settings on the databases as shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

正解:

解説:

質問 177
You have an Azure subscription that contains the SQL servers shown in the following table.

The subscription contains the storage accounts shown in the following table.

You create the Azure SQL databases shown in the following table.

正解:

解説:

Explanation

Box 1: Yes
Be sure that the destination is in the same region as your database and server.
Box 2: No
Box 3: No
Reference:
https://docs.microsoft.com/en-us/azure/sql-database/sql-database-auditing