AZ-103 Exam Dumps | Latest AZ-103 Questions | RealExamCollection
                      
 
 
 
Micros oft
AZ-10  3Microsoft Azure Administrator
  
 
 
https://www.realexamcollection.com/microsoft/az-103-dumps.html
 
 
 
 
Question: 1 
     
DRAG DROP 
You need to prepare the environment to ensure that the web administrators can deploy the web 
apps as quickly as possible. 
Which three actions should you perform in sequence? To answer, move the appropriate actions from 
the list of actions to the answer area and arrange them in the correct order. 
 
 
Answer:  
 
 
 
Explanation: 
Step 1: 
First you create a storage account using the Azure portal. 
Step 2: 
Select Automation options at the bottom of the screen. The portal shows the template on the 
Template tab. 
Deploy: Deploy the Azure storage account to Azure. 
 
Step 3: 
Share the template. 
Scenario: Web administrators will deploy Azure web apps for the marketing department. Each web 
app will be added to a separate resource group. The initial configuration of the web apps will be 
identical. The web administrators have permission to deploy web apps to resource groups. 
References: 
https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-manager-quickstartcreate- 
templates-use-the-portal 
 
Question: 2 
 
Which blade should you instruct the finance department auditors to use? 
 
A. Partner information 
B. Overview 
C. Payment methods 
D. Invoices 
 
Answer: D     
 
Explanation: 
You can opt in and configure additional recipients to receive your Azure invoice in an email. This 
feature may not be available for certain subscriptions such as support offers, Enterprise Agreements, 
or Azure in Open. 
Select your subscription from the Subscriptions page. Opt-in for each subscription you own. Click 
Invoices then Email my invoice. 
 
Click Opt in and accept the terms. 
Scenario: During the testing phase, auditors in the finance department must be able to review all 
Azure costs from the past week. 
References: 
 
https://docs.microsoft.com/en-us/azure/billing/billing-download-azure-invoice-daily-usage-date 
Question: 3 
   
You need to prepare the environment to meet the authentication requirements. 
Which two actions should you perform? Each correct answer presents part of the solution. 
NOTE Each correct selection is worth one point. 
 
A. Azure Active Directory (AD) Identity Protection and an Azure policy 
B. a Recovery Services vault and a backup policy 
C. an Azure Key Vault and an access policy 
D. an Azure Storage account and an access policy 
 
Answer: BD     
 
Explanation: 
D: Seamless SSO works with any method of cloud authentication - Password Hash Synchronization or 
Pass-through Authentication, and can be enabled via Azure AD Connect. 
B: You can gradually roll out Seamless SSO to your users. You start by adding the following Azure AD 
URL to all or selected users' Intranet zone settings by using Group Policy in Active Directory: 
https://autologon.microsoftazuread-sso.com 
Incorrect Answers: 
A: Seamless SSO needs the user's device to be domain-joined, but doesn't need for the device to be 
Azure AD Joined. 
C: Azure AD connect does not port 8080. It uses port 443. 
E: Seamless SSO is not applicable to Active Directory Federation Services (ADFS). 
Scenario: Users in the Miami office must use Azure Active Directory Seamless Single Sign-on (Azure 
AD Seamless SSO) when accessing resources in Azure. 
Planned Azure AD Infrastructure include: The on-premises Active Directory domain will be 
synchronized to Azure AD. 
References: 
https://docs.microsoft.com/en-us/azure/active-directory/connect/active-directory-aadconnect-
ssoquick- 
start 
 
Question: 4 
   
You need to define a custom domain name for Azure AD to support the planned infrastructure. 
Which domain name should you use? 
 
A. Join the client computers in the Miami office to Azure AD. 
B. Add http://autologon.microsoftazuread-sso.com to the intranet zone of each client computer in 
the Miami office. 
C. Allow inbound TCP port 8080 to the domain controllers in the Miami office. 
D. Install Azure AD Connect on a server in the Miami office and enable Pass-through Authentication 
 
E. Install the Active Directory Federation Services (AD FS) role on a domain controller in the Miami 
office. 
 
Answer: BD     
 
Explanation: 
Every Azure AD directory comes with an initial domain name in the form of 
domainname.onmicrosoft.com. The initial domain name cannot be changed or deleted, but you can 
add your corporate domain name to Azure AD as well. For example, your organization probably has 
other domain names used to do business and users who sign in using your corporate domain name. 
Adding custom domain names to Azure AD allows you to assign user names in the directory that are 
familiar to your users, such as ‘[email protected].’ instead of 'alice@domain 
name.onmicrosoft.com'. 
Scenario: 
Network Infrastructure: Each office has a local data center that contains all the servers for that office. 
Each office has a dedicated connection to the Internet. 
Humongous Insurance has a single-domain Active Directory forest named humongousinsurance.com 
Planned Azure AD Infrastructure: The on-premises Active Directory domain will be synchronized to 
Azure AD. 
References: 
https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/add-custom-domain 
 
Question: 5 
   
HOTSPOT 
You are evaluating the name resolution for the virtual machines after the planned implementation of 
the Azure networking infrastructure. 
For each of the following statements, select Yes if the statement is true. Otherwise, select No. 
 
 
Answer:  
 
 
 
 
Question: 6 
 
Which blade should you instruct the finance department auditors to use? 
 
A. invoices 
B. partner information 
C. cost analysis 
D. External services 
 
Answer: A     
 
Question: 7 
   
You need to define a custom domain name for Azure AD to support the planned infrastructure. 
Which domain name should you use? 
 
A. ad.humongousinsurance.com 
B. humongousinsurance.onmicrosoft.com 
C. humongousinsurance.local 
D. humongousinsurance.com 
 
Answer: D     
 
Explanation: 
Every Azure AD directory comes with an initial domain name in the form of 
domainname.onmicrosoft.com. The initial domain name cannot be changed or deleted, but you can 
add your corporate domain name to Azure AD as well. For example, your organization probably has 
other domain names used to do business and users who sign in using your corporate domain name. 
Adding custom domain names to Azure AD allows you to assign user names in the directory that are 
familiar to your users, such as ‘[email protected].’ instead of 'alice@domain 
name.onmicrosoft.com'. 
Scenario: 
Network Infrastructure: Each office has a local data center that contains all the servers for that office. 
 
Each office has a dedicated connection to the Internet. 
Humongous Insurance has a single-domain Active Directory forest named humongousinsurance.com 
Planned Azure AD Infrastructure: The on-premises Active Directory domain will be synchronized to 
Azure AD. 
References: 
https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/add-custom-domain 
 
Question: 8 
   
You need to prepare the environment to meet the authentication requirements. 
Which two actions should you perform? Each correct answer presents part of the solution. 
NOTE: Each correct selection is worth one point. 
 
A. Allow inbound TCP port 8080 to the domain controllers in the Miami office. 
B. Add http://autogon.microsoftazuread-sso.com to the intranet zone of each client computer in the 
Miami office. 
C. Join the client computers in the Miami office to Azure AD. 
D. Install the Active Directory Federation Services (AD FS) role on a domain controller in the Miami 
office. 
E. Install Azure AD Connect on a server in the Miami office and enable Pass-through Authentication. 
 
Answer: BE     
 
Explanation: 
B: You can gradually roll out Seamless SSO to your users. You start by adding the following Azure AD 
URL to all or selected users' Intranet zone settings by using Group Policy in Active Directory: 
https://autologon.microsoftazuread-sso.com 
E: Seamless SSO works with any method of cloud authentication - Password Hash Synchronization or 
Pass-through Authentication, and can be enabled via Azure AD Connect. 
References: 
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sso-quick-start 
 
Question: 9 
   
DRAG DROP 
You have an Azure subscription that contains two virtual networks named VNet1 and VNet2. Virtual 
machines connect to the virtual networks. 
The virtual networks have the address spaces and the subnets configured as shown in the following 
table. 
 
 
You need to add the address space of 10.33.0.0/16 to VNet1. The solution must ensure that the hosts 
on VNet1 and VNet2 can communicate. 
Which three actions should you perform in sequence? To answer, move the appropriate actions from 
the list of actions to the answer area and arrange them in the correct order. 
 
 
Answer:  
 
 
 
Explanation: 
Step 1: Remove peering between Vnet1 and VNet2. 
You can't add address ranges to, or delete address ranges from a virtual network's address space 
once a virtual network is peered with another virtual network. To add or remove address ranges, 
delete the peering, add or remove the address ranges, then re-create the peering. 
Step 2: Add the 10.44.0.0/16 address space to VNet1. 
 
Step 3: Recreate peering between VNet1 and VNet2 
References: 
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-manage-peering 
 
Question: 10 
 
You need to resolve the licensing issue before you attempt to assign the license again. 
What should you do? 
 
A. From the Groups blade, invite the user accounts to a new group. 
B. From the Profile blade, modify the usage location. 
C. From the Directory role blade, modify the directory role. 
 
Answer: A     
 
Explanation: 
License cannot be assigned to a user without a usage location specified. 
Scenario: Licensing Issue 
You attempt to assign a license in Azure to several users and receive the following error message: 
"Licenses 
not assigned. License agreement failed for one user." 
You verify that the Azure subscription has the available licenses. 
https://www.realexamcollection.com/microsoft/az-103-dumps.html