All the resources used by Contoso are hosted on-premises. Contoso created a new Azure subscription. The Azure Active Directory (Azure AD) tenant uses a domain named contoso.onmicrosoft.com. The tenant uses the P1 pricing tier. Existing Environment The network contains an Active Directory forest named contoso.com. All domain controllers are configured as DNS servers and host the contoso.com DNS zone. Contoso has finance, human resources, sales, research, and information technology departments. Each department has an organizational unit (OU) that contains all the accounts of that respective department. All the user accounts have the department attribute set to their respective department. New users are added frequently.
Contoso.com contains a user named User1. All the offices connect by using private links. Contoso has data centers in the Montreal and Seattle offices. Each data center has a firewall that can be configured as a VPN device. All infrastructure servers are virtualized. The virtualization environment contains the servers in the following table. Contoso uses two web applications named App1 and App2. Each instance on each web application requires 1 GB of memory. The Azure subscription contains the resources in the following table. The network security team implements several network security groups (NSGs). Requirements Planned Changes Contoso plans to implement the following changes: Deploy Azure ExpressRoute to the Montreal office Migrate the virtual machine hosted on Server1 and Server2 to Azure Synchronize on-premises Active Directory to Azure Active Directory (Azure AD) Migrate App1 and App2 to two Azure web apps named WebApp1 and WebApp2. Technical Requirements Contoso must meet the following technical requirements: Ensure that WebApp1 can adjust the number of instances automatically based on the load and can scale up to five instances Ensure that VM3 can establish outbound connections over TCP port 8080 to the applications servers in the Montreal office Ensure
that routing information is exchanged automatically between Azure and the routers in the Montreal office Enable Azure Multi-Factor Authentication (MFA) for the users in the finance department only Ensure that webapp2.azurewebsites.net can be accessed by using the name app2.contoso.com Connect the New York office to VNet1 over the Internet by using an encrypted connection Create a workflow to send an email message when the settings of VM4 are modified Create a custom Azure role named Role1 that is based on the Reader role Minimize costs whenever possible QUESTION 1 You need to configure a host name for WebApp2. What should you do first? A. In Azure AD, add contoso.com as a custom domain name B. In the public DNS zone of contoso.onmicrosoft.com, add an NS record C. In Azure AD, add webapp2.azurewebsites.net as a custom domain name D. In the public DNS zone of contoso.com, add a CNAME record Correct Answer: C Section: [none] Explanation Explanation/Reference: Explanation: Scenario: Ensure that webapp2.azurewebsites.net can be accessed by using the name app2.contoso.com When you create a Cloud Service, Azure assigns it to a subdomain of cloudapp.net. For example, if your Cloud Service is named "contoso", your users will be able
You've reached the end of your free preview.
Want to read all 136 pages?
- Fall '18
- zaigham abbas
- virtual machine, Azure