AZ102 Microsoft Azure Administrator Certification Transition Free Practice Test — 30 Questions

Question 1

Following a strategic decision to transition its core identity and access management infrastructure from on-premises Active Directory Domain Services to Azure Active Directory (Azure AD), a multinational corporation, \"Aether Dynamics,\" is now faced with the challenge of replicating the granular user and device configuration policies previously enforced via Group Policy Objects (GPOs). Aether Dynamics has a complex, multi-layered OU structure and numerous GPOs governing everything from desktop wallpapers and software deployment to security settings and network drive mappings. The migration aims to enhance security posture through Azure AD\'s modern authentication, conditional access, and single sign-on capabilities for a growing portfolio of cloud-based applications. Given that Azure AD does not directly interpret or enforce on-premises GPOs, what strategy should Aether Dynamics implement to effectively manage and enforce similar configurations on its user devices now primarily managed through Azure AD?

Accepted Answer

Utilize Azure AD Connect to synchronize all existing Group Policy Objects directly into the Azure AD tenant for continued application.

Question 2

A multinational corporation, \"Aethelred Solutions,\" is migrating its sensitive financial data to Azure. To ensure compliance with the stringent \"Global Financial Data Protection Act\" (GFDPA), they\'ve implemented an Azure Policy initiative across their entire Azure subscription. This initiative includes a specific policy definition, configured with a \"Deny\" effect, that prohibits the creation of any Azure SQL Database instances without Transparent Data Encryption (TDE) enabled. During a deployment, a junior administrator, attempting to provision a new Azure SQL Database for a non-production testing environment, inadvertently leaves the TDE option as \"Disabled\" in the deployment configuration. What is the most likely immediate outcome of this action?

Accepted Answer

The Azure SQL Database will be provisioned with TDE disabled, and an audit log entry will be generated indicating a policy violation.

Question 3

A cloud administrator is tasked with securing a critical application tier residing in an Azure subnet. The primary requirement is to strictly limit outbound internet connectivity for these virtual machines, permitting only essential management traffic and authorized access to specific software update repositories. While Network Security Groups are already in place to enforce basic ingress and egress filtering at the subnet level, the organization needs a more granular and centrally managed solution for outbound traffic control, including the ability to deny access to broad categories of websites and enforce specific FQDN-based access policies. Which combination of Azure services and configurations best addresses these requirements for robust outbound security?

Accepted Answer

Implement Azure Firewall with Network and Application Rules to filter outbound traffic, and configure the subnet's NSG to deny all outbound internet traffic except for traffic destined for the Azure Firewall's IP address.

Question 4

A financial services company\'s customer portal, hosted on Azure Virtual Machines and utilizing Azure Load Balancer, is experiencing sporadic and unpredictable user access failures. Initial investigations suggest the issue is not application-level but rather related to network path availability. The IT operations team needs to quickly identify the specific network components or configurations that might be introducing these intermittent disruptions. Which Azure diagnostic tool or feature is most appropriate for an administrator to employ first to pinpoint the source of the network path problem?

Accepted Answer

Utilize Azure Network Watcher's connection troubleshoot feature to trace the network path and identify any blocking NSG rules or route table anomalies.

Question 5

A company\'s customer-facing authentication service hosted on Azure is intermittently failing, leading to customer complaints about login issues. The Azure Administrator has confirmed no widespread Azure platform incidents are reported for the affected region. The administrator needs to quickly identify the cause and mitigate the impact. What is the most effective immediate action to take?

Accepted Answer

Analyze Azure Monitor logs and performance metrics for the authentication service to identify error patterns and resource utilization anomalies during failure periods.

Question 6

A global financial services firm is experiencing a critical outage of a core Azure service, impacting its trading platforms and client access. The incident has occurred without any prior warning, and there is no documented or tested disaster recovery plan specifically for this service. The Azure Administrator is tasked with mitigating the impact and ensuring business continuity while adhering to stringent financial regulations regarding data integrity and service availability. Which of the following approaches best addresses the immediate needs and sets the foundation for long-term resilience?

Accepted Answer

Immediately initiate the development and testing of a comprehensive disaster recovery plan for the affected service, while simultaneously exploring and implementing temporary, albeit potentially less efficient, Azure-native solutions to restore partial functionality and minimize data loss.

Question 7

An Azure Administrator is overseeing the integration of Azure Arc into an on-premises environment. During a critical planning session, two senior engineers express diametrically opposed views on the security configuration for the hybrid identity management component. One engineer advocates for a highly restrictive, network-segmentation-heavy approach, citing potential attack vectors, while the other favors a more streamlined, identity-provider-centric model, emphasizing ease of management and faster deployment. The tension is palpable, impacting the team\'s ability to finalize the deployment plan, and progress has stalled. Which of the following actions by the Azure Administrator would best address this situation, demonstrating effective conflict resolution and adaptability in a complex technical transition?

Accepted Answer

Facilitate a structured technical deep-dive session with both engineers, supported by Azure security documentation and best practices, to collaboratively analyze the security implications and potential trade-offs of each proposed approach, aiming for a consensus-driven solution.

Question 8

A critical Azure Virtual Machine hosting a customer-facing e-commerce platform is intermittently inaccessible. Initial investigations by the lead administrator, Kaelen, have ruled out OS-level issues and confirmed that basic network security group (NSG) rules and Azure Firewall policies appear correctly configured for inbound web traffic. However, customers are still reporting sporadic connection failures. Kaelen needs to quickly identify if a routing misconfiguration or a more subtle network policy is disrupting the connection path from the internet to the VM. Which Azure Network Watcher feature should Kaelen leverage to diagnose the specific network path elements, such as UDRs or implicit deny rules, that might be causing these intermittent connectivity disruptions?

Accepted Answer

Connection Troubleshoot

Question 9

A multinational corporation has established a hybrid cloud environment connecting its Azure Virtual Network to its on-premises data center via an Azure VPN Gateway. A virtual machine (VM) located within a subnet in this Azure Virtual Network needs to establish a SQL Server connection to a database server residing in the on-premises data center. The on-premises firewall has been configured to permit inbound traffic from the Azure Virtual Network\'s address space on TCP port 1433. Concurrently, the Network Security Group (NSG) associated with the VM\'s subnet contains the following rules:

Rule A: Priority 100, Allow, TCP, Source: Any, Destination: Virtual Network, Destination Port: 1433
Rule B: Priority 200, Deny, TCP, Source: Any, Destination: Virtual Network, Destination Port: 1433

Given this configuration, what will be the outcome for the VM attempting to connect to the on-premises SQL Server?

Accepted Answer

The connection will be successful because the NSG rule with the lower priority number (100) allows the traffic to the specified destination port.

Question 10

A financial services organization operating within the European Union is subject to stringent data residency and security regulations. To ensure compliance, a new directive mandates that all virtual machines deployed within their Azure subscription must utilize disk encryption. An administrator is tasked with implementing a mechanism to proactively prevent the creation of any virtual machines that do not adhere to this encryption requirement. Which Azure governance feature, when configured with the appropriate policy definition, would most effectively enforce this directive at the point of resource creation?

Accepted Answer

Assigning an Azure Policy definition with a "Deny" effect at the subscription scope.

Question 11

A global administrator for Contoso Corporation is configuring Azure Active Directory (Azure AD) Conditional Access policies to enhance security. They have implemented a policy that targets \"All cloud apps\" and requires both \"Multi-Factor Authentication\" and a \"Compliant device\" for access. A user attempts to access internal Azure AD-joined resources using a custom-built legacy client application that predates modern authentication protocols and does not have built-in support for device compliance reporting. Given this configuration and the user\'s access method, what is the most likely outcome regarding the enforcement of the Conditional Access policy?

Accepted Answer

The policy will not enforce the "Compliant device" requirement due to the legacy client's limitations, potentially allowing access without full compliance.

Question 12

A cloud governance team is tasked with standardizing the deployment of virtual machines across several departments within their Azure subscription. They have identified that team members are frequently deploying virtual machines using non-approved operating system images and placing them in resource groups located in geographically dispersed regions, contrary to the organization\'s data residency and operational efficiency mandates. The team needs a mechanism to automatically enforce these standards for all new virtual machine deployments. Which Azure service is most appropriate for enforcing these declarative configuration requirements and preventing non-compliant resource deployments?

Accepted Answer

Azure Policy

Question 13

A multinational corporation relies on a critical financial application hosted on Azure Virtual Machines. This application requires constant, low-latency connectivity to on-premises data centers for real-time data synchronization. During a recent simulated disaster recovery exercise, it was discovered that the existing VPN connection, utilizing a single Azure Virtual Network gateway instance, represented a significant single point of failure. The company\'s business continuity policy mandates a maximum of 15 minutes of downtime for critical applications. Which Azure networking configuration, when implemented with corresponding on-premises redundancy, would most effectively address this vulnerability and meet the stated downtime objective?

Accepted Answer

Deploying an Active-Active VPN Gateway configuration with two dedicated VPN tunnels to the on-premises network.

Question 14

A global e-commerce platform hosted on Azure relies on a stateless web application front-end and a high-transaction volume Azure SQL Database. The application\'s Service Level Agreement (SLA) mandates zero downtime for customer access and mandates that the Recovery Point Objective (RPO) must be less than 5 minutes, with a Recovery Time Objective (RTO) of under 15 minutes. The organization plans to upgrade the underlying infrastructure by migrating the virtual machines hosting the web application to a new Azure Availability Zone within the same region to enhance resilience against datacenter failures. The Azure SQL Database is configured with premium performance tiers and active geo-replication to a secondary region for disaster recovery purposes. What is the most effective strategy to achieve this infrastructure upgrade while adhering to the strict availability and data durability requirements?

Accepted Answer

Orchestrate a phased migration of the application virtual machines to the new Availability Zone within the same region, ensuring that network connectivity to the Azure SQL Database remains stable and that the geo-replication configuration for the database is validated post-migration.

Question 15

A global enterprise utilizing Azure services for its primary customer-facing applications is informed of an immediate, stringent regulatory mandate requiring all sensitive customer data to reside within a specific national jurisdiction. This mandate impacts several core Azure services currently deployed in a multi-region architecture. The IT operations team, led by the Azure Administrator, must rapidly devise and implement a compliant solution with minimal disruption to service availability and performance. Which of the following approaches best demonstrates the required adaptability, leadership, and technical acumen to navigate this sudden, high-stakes compliance challenge?

Accepted Answer

Immediately re-architect the application's data storage and network access controls to ensure all data processing and residency adhere to the new mandate, communicating the plan and potential temporary service impacts transparently to all stakeholders while actively seeking alternative Azure service configurations that offer equivalent functionality within the compliant region.

Question 16

A cloud administrator is deploying a new Azure virtual machine using an ARM template. The template includes a parameter for the virtual machine\'s hostname, with metadata specifying a `minLength` of 3 and a `maxLength` of 15 characters. The administrator attempts to deploy the template with a hostname value of \"vm1\". Upon initiating the deployment, the process immediately halts. Which of the following diagnostic messages most accurately reflects the root cause of this deployment failure?

Accepted Answer

Deployment failed: Parameter 'vmHostname' value 'vm1' violates the defined length constraint (minLength: 3, maxLength: 15).

Question 17

A critical regulatory update mandates that all Azure Storage accounts within your organization must utilize server-side encryption with customer-managed keys. Your current Azure Policy setup audits for storage account encryption but does not enforce it, leading to several non-compliant resources. You need to implement a strategy that ensures all new and existing storage accounts adhere to this new encryption standard. Which of the following actions would most effectively achieve this compliance goal?

Accepted Answer

Create a new Azure Policy definition with the "DeployIfNotExists" effect to enforce server-side encryption with customer-managed keys, assign it to the relevant scope, and then initiate a remediation task for the policy assignment.

Question 18

Anya, an Azure administrator, is tasked with ensuring that all newly deployed virtual machines across the organization adhere to specific operational standards, including mandatory tagging for cost allocation and environment identification, and the prohibition of certain high-cost VM SKUs. Additionally, there\'s a mandate to ensure that all production VMs have Azure Backup enabled by default. Anya needs a mechanism to automatically enforce these requirements, preventing non-compliant deployments and auditing existing resources. Which Azure service is best suited to fulfill these multifaceted enforcement and auditing requirements?

Accepted Answer

Azure Policy

Question 19

A critical Azure service supporting a global financial trading platform experiences an unannounced, widespread outage, leading to a complete cessation of trading activities. The platform is designed with a multi-region architecture for resilience, and regulatory compliance mandates stringent data integrity, auditability, and minimal downtime. The IT operations team must act swiftly to mitigate the impact and restore services. Which of the following sequences of actions best addresses this urgent situation while adhering to regulatory obligations?

Accepted Answer

Initiate failover to a secondary Azure region that hosts a replicated instance of the trading platform and simultaneously commence root cause analysis of the Azure service outage.

Question 20

A critical business application hosted on Azure Virtual Machines is experiencing sporadic and unpredictable connection failures. Initial investigations by the Azure administrator have confirmed that the application services are running and healthy, and application logs do not indicate any application-level errors. The administrator suspects a network or security configuration issue is intermittently blocking traffic. Which Azure Network Watcher tool should the administrator prioritize to gain immediate insight into whether network security group rules or user-defined routes are the root cause of these intermittent connection disruptions?

Accepted Answer

IP Flow Verify

Question 21

An organization\'s critical Azure Active Directory (now Microsoft Entra ID) tenant, managing access for thousands of users across hundreds of applications, is experiencing sporadic and unpredictable authentication failures. Users report being intermittently unable to sign in, with error messages varying but often indicating issues with token validation or service availability. The IT operations team has confirmed no widespread network connectivity issues from the client side and that the Azure portal itself is accessible. Which of the following diagnostic and mitigation strategies best addresses the immediate service disruption and facilitates a thorough root cause analysis for this complex, intermittent authentication problem?

Accepted Answer

Initiate a phased rollback of recent Azure AD (Microsoft Entra ID) configuration changes while simultaneously analyzing Azure Monitor logs for spikes in authentication request latency and HTTP error codes, cross-referencing findings with Azure Service Health advisories for any reported platform-level anomalies.

Question 22

Consider a scenario where an Azure Administrator is responsible for migrating a mission-critical legacy application to Azure. This application relies on a proprietary middleware component that has documented compatibility issues with modern operating systems and containerization technologies. The project timeline is aggressive, and a full application refactoring is not feasible at this stage. The primary objectives are to ensure minimal service disruption, maintain data integrity, and establish a stable foundation for potential future modernization. Which migration strategy would best address these immediate requirements while acknowledging the inherent limitations of the middleware?

Accepted Answer

Migrate the application to Azure Virtual Machines running a supported operating system that is known to be compatible with the proprietary middleware, coupled with comprehensive monitoring and alerting for performance anomalies.

Question 23

A senior cloud administrator is tasked with providing a specialized development team temporary, auditable access to a production resource group for a critical, time-bound project. The access must be limited to the project\'s duration, and all activations of this access need to be logged and easily reviewable for compliance purposes, while minimizing the overall standing privileges within the environment. Which of the following approaches best satisfies these requirements?

Accepted Answer

Utilize Azure AD Privileged Identity Management (PIM) to make the development team members eligible for the necessary Azure RBAC role on the resource group.

Question 24

A multinational corporation\'s critical customer-facing applications, hosted on Azure, are experiencing sporadic but significant performance degradation. Users report slow response times and occasional timeouts. The IT operations team has confirmed that the issue is not localized to specific user networks or devices. The infrastructure involves Azure Virtual Machines running custom applications, Azure SQL Database for data storage, and Azure Application Gateway for traffic management. The administrator needs to identify the most effective initial approach to diagnose the root cause of this widespread performance issue.

Accepted Answer

Correlate performance metrics from Azure Monitor, Application Insights, and Azure SQL Database diagnostics, while simultaneously analyzing Azure Application Gateway logs for any traffic anomalies or error patterns.

Question 25

A critical Azure virtual machine, hosting the company\'s primary customer-facing portal, has become unresponsive. Users are reporting complete service unavailability. Initial checks indicate that the virtual machine\'s boot diagnostics show no obvious hardware failures, and network connectivity to the Azure region appears stable. The application itself is proprietary and its internal logging is not immediately providing clear error messages. The incident response team is under significant pressure to restore service within the next 30 minutes. Which of the following actions should be the immediate priority to facilitate the fastest possible service restoration?

Accepted Answer

Initiate a support request with Azure technical support, providing all available diagnostic information, and collaborate with them on immediate troubleshooting steps.

Question 26

A critical business application hosted on Azure Kubernetes Service (AKS) is intermittently inaccessible due to network connectivity problems within the cluster, impacting customer transactions. Initial troubleshooting of AKS node health, pod status, and control plane logs has not identified a root cause, and the issue persists. The IT operations team needs to rapidly restore service availability and ensure business continuity. Which of the following actions represents the most effective pivot in strategy to address the ongoing service disruption and demonstrate adaptability?

Accepted Answer

Initiate a phased redeployment of the critical application's workloads to a secondary Azure region using a multi-region AKS deployment strategy with global traffic management.

Question 27

A multinational corporation, \"Globex Corporation,\" is transitioning its IT infrastructure by migrating its on-premises Active Directory Domain Services (AD DS) to leverage cloud-based identity and access management solutions. The strategic objective is to provide seamless single sign-on (SSO) access for its employees to a suite of Software-as-a-Service (SaaS) applications hosted in Microsoft Azure, while maintaining centralized user identity management. The IT administration team needs to implement a robust mechanism to synchronize user identities, group memberships, and password policies from their existing on-premises AD DS environment to Azure Active Directory (Azure AD). Which Azure service is most critical for establishing this hybrid identity synchronization and enabling the intended SSO functionality?

Accepted Answer

Azure AD Connect

Question 28

A rapidly growing e-commerce platform, \"NovaCart,\" is facing an imminent peak sales season and needs to deploy a critical application update that significantly enhances customer experience. The deployment must occur within 48 hours with zero tolerance for service interruption during the transition. Furthermore, to mitigate the risk of a catastrophic regional outage impacting the upcoming sales event, the company requires a robust disaster recovery solution that can facilitate a swift failover to an alternate Azure region with minimal data loss. Which combination of Azure deployment and disaster recovery strategies would best satisfy NovaCart\'s stringent requirements?

Accepted Answer

Implement a blue-green deployment strategy for the application update and configure Azure Site Recovery for cross-region replication and failover.

Question 29

A global e-commerce platform hosted on Azure is experiencing sporadic disruptions to its primary customer portal, which relies on Azure Virtual Machine Scale Sets (VMSS) for its backend services. The application team reports that users are intermittently unable to access critical functionalities. The Azure administrator has already verified the health status of individual VMSS instances, confirmed sufficient resource allocation within the VMSS, and ruled out application-level errors through log analysis. The intermittent nature of the problem and the lack of clear error patterns in application logs suggest a potential issue at the Azure platform level or a subtle configuration drift affecting the scale set\'s overall availability. What is the most effective next step to systematically diagnose and address the root cause of these intermittent service disruptions?

Accepted Answer

Review Azure Service Health for any ongoing or recent platform incidents affecting VMSS in the relevant Azure region and examine Azure Advisor recommendations for the VMSS to identify potential configuration optimizations impacting availability.

Question 30

Elara, an Azure administrator, is tasked with migrating a critical business application to Azure Kubernetes Service (AKS). This application consists of two main components: a stateless front-end web service that experiences highly variable traffic, and a stateful back-end database requiring persistent storage and high availability. Elara must ensure that both components are resilient to datacenter failures within a region and that resource consumption is optimized to stay within budget constraints. She has decided to use AKS and Azure Managed Disks for persistent storage. Which combination of AKS and Azure storage configurations best addresses the high availability requirements for the stateful database component while maintaining cost-effectiveness for the stateless front-end?

Accepted Answer

Deploy AKS nodes across multiple availability zones and utilize Azure Premium SSD Managed Disks with zone-redundant storage (ZRS) capabilities for the database's persistent volumes. For the stateless front-end, implement Horizontal Pod Autoscaler (HPA) based on CPU utilization.

AZ102 Microsoft Azure Administrator Certification Transition Free Practice Test — 30 Questions

A lot more is already mapped out

About the AZ102 Microsoft Azure Administrator Certification Transition Certification