DRAG DROP
You plan to deploy a cloud service named contosoapp that has a web role named contosoweb and a
worker role named contosoimagepurge.
You need to ensure the service meets the following requirements:
 Contosoweb can be accessed over the Internet by using http.
 Contosoimagepurge can only be accessed through tcp port 5001 from
contosoweb.
 Contosoimagepurge cannot be accessed directly over the Internet.Which configuration should you use? To answer, drag the appropriate configuration setting to the correct
location in the service configuration file. Each configuration setting may be used once, more than once, or
not at all. You may need to drag the split bar between panes or scroll to view content.

Your company network includes two branch offices. Users at the company access internal virtual machines
(VMs).
You want to ensure secure communications between the branch offices and the internal VMs and
network.
You need to create a site-to-site VPN connection.
What are two possible ways to achieve this goal? Each correct answer presents a complete solution.

You manage an Azure virtual network that hosts 15 virtual machines (VMs) on a single subnet which is
used for testing a line of business (LOB) application. The application is deployed to a VM named
TestWebServiceVM.
You need to ensure that TestWebServiceVM always starts by using the same IP address. You need to
achieve this goal by using the least amount of administrative effort.
What should you do?

DRAG DROP
You administer two virtual machines (VMs) that are deployed to a cloud service. The VMs are part of a
virtual network.
The cloud service monitor and virtual network configuration are configured as shown in the exhibits. (Click
the Exhibits button.)

You need to create an internal load balancer named fabLoadBalancer that has a static IP address of
172.16.0.100.
Which value should you use in each parameter of the Power Shell command?
To answer, drag the appropriate value to the correct location in the Power Shell command. Each value may
be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to
view content.

DRAG DROP
Your development team has created a new solution that is deployed in a virtual network named
fabDevVNet.
Your testing team wants to begin testing the solution in a second Azure subscription.
You need to create a virtual network named fabTestVNet that is identical to fabDevVNet. You want to
achieve this goal by using the least amount of administrative effort.
Which three steps should you perform in sequence? To answer, move the appropriate actions from the list
of actions to the answer area and arrange them in the correct order.

Your network environment includes remote employees.
You need to create a secure connection for the remote employees who require access to your Azure
virtual network.
What should you do?

DRAG DROP
You manage two solutions in separate Azure subscriptions.
You need to ensure that the two solutions can communicate on a private network.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the
list of actions to the answer area and arrange them in the correct order.

You manage a cloud service that has a web role named fabWeb. You create a virtual network named
fabVNet that has two subnets defined as Web and Apps.
You need to be able to deploy fabWeb into the Web subnet.
What should you do?

DRAG DROP
You have a solution deployed into a virtual network in Azure named fabVNet. The fabVNet virtual network
has three subnets named Apps, Web, and DB that are configured as shown in the exhibit. (Click the
Exhibits button.)

You want to deploy two new VMs to the DB subnet.You need to modify the virtual network to expand the size of the DB subnet to allow more IP addresses.
Which three steps should you perform in sequence? To answer, move the appropriate actions from the list
of actions to the answer area and arrange them in the correct order.

Your company has recently signed up for Azure.
You plan to register a Data Protection Manager (DPM) server with the Azure Backup service.
You need to recommend a method for registering the DPM server with the Azure Backup vault.
What are two possible ways to achieve this goal? Each correct answer presents a complete solution.