Manage Windows Server Virtual Machines on Azure AZ-800 Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   You have a VM scale set that runs a stateless web application. The scale set uses autoscale based on CPU percentage. You need to ensure that the scale set can scale out quickly during a sudden spike. What should you do?

   • ADecrease the autoscale rule's cooldown period.
   • BIncrease the autoscale rule's cooldown period.
   • CIncrease the VM size in the scale set.
   • DUse a custom image instead of a marketplace image.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   You need to assign a static private IP address to a Windows Server VM. Where should you configure this?

   • AOn the network interface (NIC)
   • BOn the subnet
   • COn the VM's operating system
   • DOn the virtual network
   Reveal Solution Discussion Select an answer first
4. 23expert · medium

   You are designing a two-tier application with two Windows Server VMs in the web tier and two in the database tier. The application requires low latency between the web and database tiers. You need to protect against a complete datacenter failure while minimizing the number of VMs. What should you do?

   • ADeploy all four VMs in the same availability zone but in different availability sets.
   • BDeploy one web VM and one database VM in Zone 1, and the other web and database VMs in Zone 2.
   • CDeploy the web tier in Zone 1 and the database tier in Zone 2.
   • DDeploy all four VMs in a single availability set with three fault domains.
   Reveal Solution Discussion Select an answer first
5. 24expert · medium

   You have a Windows Server VM that hosts a database. The VM is in a subnet with an NSG that currently allows all inbound traffic. You need to restrict inbound traffic to only the application tier's subnet and allow RDP only from the admin's IP. You also want to avoid exposing the VM to the internet. What should you do?

   • ACreate NSG rules to allow inbound traffic from the app subnet and RDP from the admin IP, and deny all other inbound traffic.
   • BUse Azure Bastion for RDP and create an NSG rule to allow traffic from the app subnet only.
   • CAssign a public IP and configure NSG rules for the app subnet and admin IP.
   • DMove the VM to a different subnet and rely on network security groups at the subnet level.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   Your company has a Windows Server VM in Azure that hosts a sensitive application. You need to provide secure RDP access to administrators without assigning a public IP address to the VM. What should you configure?

   • AA network security group (NSG) rule that allows RDP from the internet.
   • BA VPN gateway and a point-to-site connection.
   • CAzure Bastion in the same virtual network as the VM.
   • DAzure AD Application Proxy for the VM.
   Reveal Solution Discussion Select an answer first