| Question.76 You have an Azure subscription that contains the storage accounts shown in the following table.  You need to identify which storage account can be converted to zone-redundant storage (ZRS) replication by requesting a live migration from Azure support. What should you identify? (A) Storage1 (B) Storage2 (C) Storage3 (D) Storage4 |
76. Click here to View Answer
Live migration is supported only for storage accounts that use LRS or GRS replication. If your account uses RA-GRS, then you need to first change your account’s replication type to either LRS or GRS before proceeding. This intermediary step removes the secondary read-only endpoint provided by RA-GRS before migration. ZRS supports general-purpose v2 accounts only.
A: Incorrect – General purpose v1.
B: Correct – General purpose v2 + LRS.
C: Incorrect – RA-GRS needs to be converted to LRS before Live migration request to ZRS.
D: Incorrect – Only premium blob blocks are supported by ZRS.
Reference:
https://docs.microsoft.com/en-us/azure/storage/common/storage-redundancy-zrs
https://docs.microsoft.com/en-us/learn/modules/provide-disaster-recovery-replicate-storage-data/2-evaluate-data-redundancy-options
| Question.77 You have an Azure subscription that contains a storage account named account1. You plan to upload the disk files of a virtual machine to account1 from your on-premises network. The on-premises network uses a public IP address space of 131.107.1.0/24. You plan to use the disk files to provision an Azure virtual machine named VM1. VM1 will be attached to a virtual network named VNet1. VNet1 uses an IP address space of 192.168.0.0/24. You need to configure account1 to meet the following requirements: -Ensure that you can upload the disk files to account1. -Ensure that you can attach the disks to VM1. -Prevent all other access to account1. Which two actions should you perform? (A) From the Firewalls and virtual networks blade of account1, select Selected networks. (B) From the Firewalls and virtual networks blade of account1, select Allow trusted Microsoft services to access this storage account. (C) From the Firewalls and virtual networks blade of account1, add the 131.107.1.0/24 IP address range. (D) From the Firewalls and virtual networks blade of account1, add VNet1. (E) From the Service endpoints blade of VNet1, add a service endpoint. |
77. Click here to View Answer
Answers are;
A. From the Firewalls and virtual networks blade of account1, select Selected networks.
C. From the Firewalls and virtual networks blade of account1, add the 131.107.1.0/24 IP address range.
Virtual machine disk traffic (including mount and unmount operations, and disk IO) is not affected by network rules. REST access to page blobs is protected by network rules.
You can use IP network rules to allow access from specific public internet IP address ranges by creating IP network rules. Each storage account supports up to 200 rules. These rules grant access to specific internet-based services and on-premises networks and blocks general internet traffic.
Reference:
https://docs.microsoft.com/en-gb/azure/storage/common/storage-network-security?tabs=azure-portal
| Question.78 You plan to create an Azure Storage account in the Azure region of East US 2. You need to create a storage account that meets the following requirements: -Replicates synchronously. -Remains available if a single data center in the region fails. How should you configure the storage account?  |
78. Click here to View Answer
Box 1: Zone-redundant storage (ZRS)
Zone-redundant storage (ZRS) replicates your data synchronously across three storage clusters in a single region.
LRS would not remain available if a data center in the region fails
GRS and RA GRS use asynchronous replication.
Box 2: StorageV2 (general purpose V2)
ZRS only support GPv2.
Reference:
https://docs.microsoft.com/en-us/azure/storage/common/storage-redundancy
https://docs.microsoft.com/en-us/azure/storage/common/storage-redundancy-zrs
| Question.79 You plan to use the Azure Import/Export service to copy files to a storage account. Which two files should you create before you prepare the drives for the import job? (A) An XML manifest file (B) A dataset CSV file (C) A JSON configuration file (D) A PowerShell PS1 file (E) A driveset CSV file |
79. Click here to View Answer
B: Modify the dataset.csv file in the root folder where the tool resides. Depending on whether you want to import a file or folder or both, add entries in the dataset.csv file
E: Modify the driveset.csv file in the root folder where the tool resides.
Reference:
https://docs.microsoft.com/en-us/azure/storage/common/storage-import-export-data-to-files
| Question.80 You have an Azure subscription named Subscription1 that contains the resources shown in the following table.  In storage1, you create a blob container named blob1 and a file share named share1. Which resources can be backed up to Vault1 and Vault2?  |
80. Click here to View Answer
Box 1: VM1 only
VM1 is in the same region as Vault1.
File1 is not in the same region as Vautl1.
SQL is not in the same region as Vault1.
Blobs cannot be backup up to service vaults.
Note: To create a vault to protect virtual machines, the vault must be in the same region as the virtual machines.
Box 2: Share1 only
Storage1 is in the same region (West USA) as Vault2. Share1 is in Storage1.
Note: After you select Backup, the Backup pane opens and prompts you to select a storage account from a list of discovered supported storage accounts. They’re either associated with this vault or present in the same region as the vault, but not yet associated to any Recovery Services vault.
Reference:
https://docs.microsoft.com/bs-cyrl-ba/azure/backup/backup-create-rs-vault
https://docs.microsoft.com/en-us/azure/backup/backup-afs