NEW QUESTION 1 You have an Azure subscription that contains 100 virtual machines. You regularly create and delete virtual machines. You need to identify unused disks that can be deleted. What should you do? A. From Microsoft Azure Storage Explorer, view the Account Management properties. B. From the Azure portal, configure the Advisor recommendations. C. From Cloudyn, open the Optimizer tab and create a report. D. From Cloudyn, create a Cost Management report. Answer: C Explanation: The Unattached Disks report lists storage that is not attached to any active VM. To open the report, click in the Optimizer tab. Select Inefficiencies and the click Unattached Disks.

NEW QUESTION 2 You plan to automate the deployment of a virtual machine scale set that uses the Windows Server 2016 Datacenter image. You need to ensure that when the scale set virtual machines are provisioned, they have web server components installed. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.) A. Modify the extensionProfile section of the Azure Resource Manager template. B. Create a new virtual machine scale set in the Azure portal. C. Create an Azure policy. D. Create an automation account. E. Upload a configuration script.

NEW QUESTION 3 Your company has an Azure subscription named Subscription1. The company also has two onpremises servers named Server1 and Server2 that run Windows Server 2016. Server1 is configured as a DNS server that has a primary DNS zone named contains 1,000 DNS records. You manage Server1 and Subscription1 from Server2. Server2 has the following tools installed: - The DNS Manager console - Azure PowerShell - Azure CLI 2.0 You need to move the zone to Subscription1. The solution must minimize administrative effort. What should you use? A. The Azure PowerShell B. The Azure CLI C. The Azure Portal D. The DNS Manager Console Answer: B Explanation: Azure DNS supports importing and exporting zone files by using the Azure command-line interface (CLI). Zone file import is not currently supported via Azure PowerShell or the Azure portal.

NEW QUESTION 4 You have an Azure Active Directory (Azure AD) tenant named Your company has a public DNS zone for You add as a custom domain name to Azure AD. You need to ensure that Azure can verify the domain name. Which type of DNS record should you create? A. RRSIG B. PTR C. DNSKEY D. TXT Answer: D Explanation: Create the TXT record. App Services uses this record only at configuration time to verify that you own the custom domain. You can delete this TXT record after your custom domain is validated and configured in App Service.

NEW QUESTION 6 You have a resource group named RG1. RG1 contains an Azure Storage account named storageaccount1 and a virtual machine named VM1 that runs Windows Server 2016. Storageaccount1 contains the disk files for VM1. You apply a ReadOnly lock to RG1. What can you do from the Azure portal? A. Generate an automation script for RG1. B. View the keys of storageaccount1. C. Upload a blob to storageaccount1. D. Start VM1. Answer: B Explanation: ReadOnly means authorized users can read a resource, but they can't delete or update the resource. Applying this lock is similar to restricting all authorized users to the permissions granted by the Reader role.

NEW QUESTION 7 You have an Azure subscription that contains 10 virtual networks. The virtual networks are hosted in separate resource groups. Another administrator plans to create several network security groups (NSGs) in the subscription. You need to ensure that when an NSG is created, it automatically blocks TCP port 8080 between the virtual networks. Solution: You assign a built-in policy definition to the subscription. Does this meet the goal? A. Yes B. No Answer: B NEW

QUESTION 8 You have an Azure subscription that contains a resource group named RG1. RG1 contains 100 virtual machines. Your company has three cost centers named Manufacturing, Sales, and Finance. You need to associate each virtual machine to a specific cost center. What should you do? A. Add an extension to the virtual machines. B. Modify the inventory settings of the virtual machine. C. Assign tags to the virtual machines. D. Configure locks for the virtual machine. Answer: C