Deploy and Configure an Azure Virtual Machine Scale Sets AZ-104 Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   You integrate an Azure Load Balancer with a Virtual Machine Scale Set. What is the primary purpose of this integration?

   • ATo provide a public IP address for each instance
   • BTo automatically scale the number of instances based on traffic
   • CTo secure the instances from external access
   • DTo distribute incoming traffic across the scale set instances
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   You want to restrict inbound traffic to a Virtual Machine Scale Set to only allow HTTP (port 80) from the internet. Which Azure resource should you configure?

   • ANetwork security group (NSG)
   • BAzure Policy
   • CAzure Firewall
   • DApplication security group
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A company runs a web application on a Virtual Machine Scale Set behind a public Azure Load Balancer. The application experiences unpredictable traffic spikes. You configure autoscale based on CPU percentage. During a spike, the scale set scales out, but the new instances are not immediately ready to serve traffic, causing some requests to fail. You need to minimize request failures during scale-out. What should you do?

   • AIncrease the instance count manually before the expected spike.
   • BConfigure a custom autoscale profile with a larger scale-out step and a shorter cool-down period.
   • CUse Azure Load Balancer health probes to mark instances as healthy only after they are ready, and configure autoscale to scale out earlier based on a metric that predicts demand.
   • DDisable autoscale and use a fixed instance count that is high enough to handle peak load.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   You are deploying a Virtual Machine Scale Set that will host a stateless web application. The application must be reachable from the internet on port 443. You need to ensure that incoming traffic is distributed evenly across all instances in the scale set. What should you configure?

   • AA network security group applied to the scale set subnet that allows inbound HTTPS traffic from the internet
   • BAn Azure Application Gateway with a backend pool containing the scale set and an HTTP listener for port 443
   • CAn Azure Load Balancer with a frontend IP configuration, a backend pool containing the scale set, and a load balancing rule for port 443
   • DA public IP address assigned directly to the scale set with a network security group allowing inbound HTTPS traffic
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   You need to ensure that a Virtual Machine Scale Set can be reached from the internet on port 80. Which networking configuration should you implement?

   • AEnable accelerated networking on the scale set
   • BConfigure a site-to-site VPN to the scale set
   • CCreate a private DNS record for the scale set
   • DAssign a public IP to the scale set and allow inbound port 80 in the NSG
   Reveal Solution Discussion Select an answer first