This page was exported from Latest Exam Prep [ http://certify.vceprep.com ] Export date:Sat Sep 21 11:55:09 2024 / +0000 GMT ___________________________________________________ Title: Get Special Discount Offer of AZ-104 Certification Exam Sample Questions and Answers [Q133-Q153] --------------------------------------------------- Get Special Discount Offer of AZ-104 Certification Exam Sample Questions and Answers New AZ-104 Dumps For Preparing Microsoft Azure Administrator Associate Certified Microsoft Exam Well What is the duration, language, and format of AZ-104:Microsoft Azure Administrator Exam Language: EnglishLength of Examination: 50 minsThis is beta exam, would be available on or around March 31, 2020.Passing Score: 700 / 1000 The Importance of Microsoft AZ-104 Certification Exam Microsoft Certified Solutions Associate (MCSA): Microsoft Azure Solutions Architect Certification is an exam that measures your knowledge of Azure services and solutions. Units of measurement and country and regional settings for various Azure regions are also tested. Including this knowledge in your resume, cover letter, and other job application materials gives you an advantage over others. Harder to find candidates are more desirable candidates to employers. Smarter candidates learn faster and have a better chance of getting a job with big organizations. Upgrade your career with the Microsoft az-104 certification exam. Paying for materials to take practice exams and improve your chances of achieving Microsoft az-104 certification is often an unnecessary expense. Microsoft AZ-104 exam dumps include questions and answers to help you learn everything you need to know. Test material is useful, but these free materials will give you the same level of knowledge. Endpoint Data Services, Azure Admin Center, Azure Portal, Blob Storage, Data Lake Store, Data Warehouse, Encryption Gateway, Elastic Load Balancer, Event Hubs and Event Hubs Queues are the technologies tested. Easy to use tools are available to help you create, read, edit, and update Azure resources. Feel confident about your Microsoft az-104 exam preparation. Node Manager, Key Vault, Log Analytics, Machine Learning Studio, Network Watcher Replication, OMS Workspace Portal and Operations Management Suite Workload are all included in this practice exam.   Q133. You download an Azure Resource Manager template based on an existing virtual machine. The template will be used to deploy 100 virtual machines. You need to modify the template to reference an administrative password. You must prevent the password from being stored in plain text.What should you create to store the password?  Azure Active Directory (AD) Identity Protection and an Azure policy  a Recovery Services vault and a backup policy  an Azure Key Vault and an access policy  an Azure Storage account and an access policy You can use a template that allows you to deploy a simple Windows VM by retrieving the password that is stored in a Key Vault. Therefore the password is never put in plain text in the template parameter file.References: https://azure.microsoft.com/en-us/resources/templates/101-vm-secure-password/Q134. You have an Azure subscription named Subscription1 that has a subscription ID of c276fc76-9cd4-44c9-99a7-4fd71546436e.You need to create a custom RBAC role named CR1 that meets the following requirements:Can be assigned only to the resource groups in Subscription1Prevents the management of the access permissions for the resource groupsAllows the viewing, creating, modifying, and deleting of resource within the resource groupsWhat should you specify in the assignable scopes and the permission elements of the definition of CR1? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point. Reference:https://docs.microsoft.com/en-us/azure/role-based-access-control/resource-provider-operations#microsoftauthorizationhttps://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roleshttps://docs.microsoft.com/en-us/azure/role-based-access-control/custom-roleshttps://docs.microsoft.com/en-us/azure/role-based-access-control/resource-provider-operations#microsoftresourcesQ135. You have an Azure subscription that contains the storage accounts shown in the following table.You plan to manage the data stored in the accounts by using lifecycle management rules.To which storage accounts can you apply lifecycle management rules?  storage1 only  storage1 and storage2 only  storage3 and storage4 only  storage1, storage2, and storage3 only  storage1, storage2, storage3, and storage4 Reference:https://docs.microsoft.com/en-us/azure/storage/blobs/storage-lifecycle-management-concepts?tabs=azure-portalQ136. You need to resolve the licensing issue before you attempt to assign the license again.What should you do?  From the Groups blade, invite the user accounts to a new group.  From the Profile blade, modify the usage location.  From the Directory role blade, modify the directory role. Scenario: Licensing Issue1. You attempt to assign a license in Azure to several users and receive the following error message: “Licenses not assigned. License agreement failed for one user.”2. You verify that the Azure subscription has the available licenses.Solution:License cannot be assigned to a user without a usage location specified.Some Microsoft services aren’t available in all locations because of local laws and regulations. Before you can assign a license to a user, you must specify the Usage location property for the user. You can specify the location under the User > Profile > Settings section in the Azure portal.Reference:https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/licensing-groups-resolve-problemsTopic 3, Contoso LtdOverviewContoso, Ltd. is a manufacturing company that has offices worldwide. Contoso works with partner organizations to bring products to market.Contoso products are manufactured by using blueprint files that the company authors and maintains.Existing EnvironmentCurrently, Contoso uses multiple types of servers for business operations, including the following:* File servers* Domain controllers* Microsoft SQL Server serversYour network contains an Active Directory forest named contoso.com. All servers and client computers are joined to Active Directory.You have a public-facing application named App1. App1 is comprised of the following three tiers:* A SQL database* A web front end* A processing middle tierEach tier is comprised of five virtual machines. Users access the web front end by using HTTPS only.RequirementsPlanned ChangesContoso plans to implement the following changes to the infrastructure:Move all the tiers of App1 to Azure.Move the existing product blueprint files to Azure Blob storage.Create a hybrid directory to support an upcoming Microsoft Office 365 migration project.Technical RequirementsContoso must meet the following technical requirements:* Move all the virtual machines for App1 to Azure.* Minimize the number of open ports between the App1 tiers.* Ensure that all the virtual machines for App1 are protected by backups.* Copy the blueprint files to Azure over the Internet.* Ensure that the blueprint files are stored in the archive storage tier.* Ensure that partner access to the blueprint files is secured and temporary.* Prevent user passwords or hashes of passwords from being stored in Azure.* Use unmanaged standard storage for the hard disks of the virtual machines.* Ensure that when users join devices to Azure Active Directory (Azure AD), the users use a mobile phone to verify their identity.Minimize administrative effort whenever possible.User RequirementsContoso identifies the following requirements for users:* Ensure that only users who are part of a group named Pilot can join devices to Azure AD.* Designate a new user named Admin1 as the service administrator of the Azure subscription.* Admin1 must receive email alerts regarding service outages.* Ensure that a new user named User3 can create network objects for the Azure subscription.Q137. You have an Azure Linux virtual machine that is protected by Azure Backup.One week ago, two files were deleted from the virtual machine.You need to reses clients connect n on-premises computer as quickly as possible.Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. 1 – From the Azure portal, click File Recovery from the vault.2 – Select a restore point.3 – Download and run a script.4 – Copy the files by using AZCopy.Reference:https://docs.microsoft.com/en-us/azure/backup/backup-azure-restore-files-from-vmhttps://docs.microsoft.com/en-us/azure/storage/common/storage-use-azcopyQ138. You have an Azure subscription that contains three virtual networks named VNET1, VNET2, and VNET3.Peering for VNET1 is configured as shown in the following exhibit.Peering for VNET2 is configured as shown in the following exhibit.Peering for VNET3 is configured as shown in the following exhibit.How can packets be routed between the virtual networks? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point. Reference:https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-peering-overviewQ139. You have an Azure tenant that contains two subscriptions named Subscription1 and Subscription2.In Subscription1, you deploy a virtual machine named Server1 that runs Windows Server 2016. Server1 uses managed disks.You need to move Server1 to Subscription2. The solution must minimize administration effort.What should you do first?  In Subscription2, create a copy of the virtual disk.  From Azure PowerShell, run the Move-AzureRmResource cmdlet.  Create a snapshot of the virtual disk.  Create a new virtual machine in Subscription2. To move existing resources to another resource group or subscription, use the Move-AzureRmResource cmdlet.Reference:https://docs.microsoft.com/en-in/azure/azure-resource-manager/resource-group-move-resources#moveresourcesQ140. You have two Azure subscriptions named Sub1 and Sub2.An administrator creates a custom role that has an assignable scope to a resource group named RG1 in Sub1.You need to ensure that you can apply the custom role to any resource group in Sub1 and Sub2. The solution must minimize administrative effort.What should you do?  Create a new custom role for Sub1 and add Sub2 to the assignable scopes. Remove the role from RG1.  Select the custom role and add Sub1 and Sub2 to the assignable scopes. Remove RG1 from the assignable scopes.  Select the custom role and add Sub1 to the assignable scopes. Remove RGi from the assignable scopes. Create a new custom role for Sub2.  Create a new custom role for Sub1. Create a new custom role for Sub2. Remove the role from RG1. Q141. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have an Azure subscription that contains the following resources:* A virtual network that has a subnet named Subnet1* Two network security groups (NSGs) named NSG-VM1 and NSG-Subnet1* A virtual machine named VM1 that has the required Windows Server configurations to allow Remote Desktop connections NSG-Subnet1 has the default inbound security rules only.NSG-VM1 has the default inbound security rules and the following custom inbound security rule:* Priority: 100* Source: Any* Source port range: ** Destination: ** Destination port range: 3389* Protocol: UDP* Action: AllowVM1 connects to Subnet1. NSG1-VM1 is associated to the network interface of VM1.NSG-Subnet1 is associated to Subnet1.You need to be able to establish Remote Desktop connections from the internet to VM1.Solution: You modify the custom rule for NSG-VM1 to use the internet as a source and TCP as a protocol.Does this meet the goal?  Yes  No NSGs deny all inbound traffic except from virtual network or load balancers. For inbound traffic, Azure processes the rules in a network security group associated to a subnet first, and then the rules in a network security group associated to the network interface.By default NSG rule to allow traffic through RDP port 3389 is not created automatically during the creation of VM , unless you change the setting during creation. Subnets usually do not have any NSG associated unless you go out of the way to do so, which this scenario does. when you create that extra NSG, it won’t have an RDP rule by default, thus blocking inbound connections.Request first goes to NSG -subnet1 and as there is no allow rule for RDP so it will block the request by default.Since the Subnet NSG (the one with the default rules) is evaluated first, it blocks the inbound RDP connection.References:https://docs.microsoft.com/en-us/azure/virtual-machines/troubleshooting/troubleshoot-rdp-connectionhttps://docs.microsoft.com/en-us/azure/virtual-network/security-overview#default-security-rulesQ142. You have an Azure subscription that contains the virtual machines shown in the following table:VM1 and VM2 use public IP addresses. From Windows Server 2019 on VM1 and VM2, you allow inbound Remote Desktop connections.Subnet1 and Subnet2 are in a virtual network named VNET1.The subscription contains two network security groups (NSGs) named NSG1 and NSG2. NSG1 uses only the default rules.NSG2 uses the default rules and the following custom incoming rule:* Priority: 100* Name: Rule1* Port: 3389* Protocol: TCP* Source: Any* Destination: Any* Action: AllowNSG1 is associated to Subnet1. NSG2 is associated to the network interface of VM2.For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Each correct selection is worth one point. ExplanationQ143. You have an Azure subscription named Subscription1 that contains the quotas shown in the following table.You deploy virtual machines to Subscription1 as shown in the following table. Q144. VM1 is running and connects to NIC1 and Disk1. NIC1 connects to VNET1.RG2 contains a public IP address named IP2 that is in the East US location. IP2 is not assigned to a virtual machine.For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Each correct selection is worth one point. Reference:https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/move-support-resourceshttps://docs.microsoft.com/en-us/azure/virtual-network/move-across-regions-publicip-powershellQ145. You have an Azure subscription that contains an Azure Storage account named storage1 and the users shown in the following table.You plan to monitor storage1 and to configure email notifications for the signals shown in the following table.You need to identify the minimum number of alert rules and action groups required for the planned monitoring.How many alert rules and action groups should you identify? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point. Q146. You have the Azure virtual networks shown in the following table.To which virtual networks can you establish a peering connection from VNet1?  VNet2 andVNet3 only  VNet2 only  VNet3 and VNet4 only  VNet2, VNet3, and VNet4 ExplanationExplanation:Incorrect Answers:A, B, C: The address space for VNet2 overlaps with VNet1. We therefore cannot establish a peering between VNet2 and VNet1.Reference:https://docs.microsoft.com/en-us/azure/virtual-network/tutorial-connect-virtual-networks-portalQ147. You have an Azure Active Directory (Azure AD) tenant named adatum.com. Adatum.com contains the groups in the following table.You create two user accounts that are configured as shown in the following table.To which groups do User1 and User2 belong? To answer. select the appropriate options in the answer area.NOTE: Each correct selection is worth one point. Q148. You have Azure subscription that includes following Azure file shares:You have the following on-premises servers:You create a Storage Sync Service named Sync1 and an Azure File Sync group named Group1. Group1 uses share1 as a cloud endpoint.You register Server1 and Server2 in Sync1. You add D:Folder1 on Server1 as a server endpoint of Group1.For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Each correct selection is worth one point. Reference:https://docs.microsoft.com/en-us/azure/storage/file-sync/file-sync-server-endpoint-create?tabs=azure-portalQ149. You plan to create a new Azure Active Directory (Azure AD) role.You need to ensure that the new role can view all the resources in the Azure subscription and issue support requests to Microsoft. The solution must use the principle of least privilege.How should you complete the JSON definition? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point. Explanation:Box 1: “*/read”,*/read lets you view everything, but not make any changes.Box 2: ” Microsoft.Support/*”The action Microsoft.Support/* enables creating and management of support tickets.References:https://docs.microsoft.com/en-us/azure/role-based-access-control/tutorial-custom-role-powershellhttps://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-rolesQ150. You have two Azure virtual machines named VM1 and VM2. VM1 has a single data disk named Disk1. You need to attach Disk1 to VM2. The solution must minimize downtime for both virtual machines.Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. ExplanationStep 1: Stop VM1.Step 2: Detach Disk1 from VM1.Step 3: Start VM1.Detach a data disk using the portal* In the left menu, select Virtual Machines.* Select the virtual machine that has the data disk you want to detach and click Stop to deallocate the VM.* In the virtual machine pane, select Disks.* At the top of the Disks pane, select Edit.* In the Disks pane, to the far right of the data disk that you would like to detach, click the Detach button image detach button.* After the disk has been removed, click Save on the top of the pane.* In the virtual machine pane, click Overview and then click the Start button at the top of the pane to restart the VM.* The disk stays in storage but is no longer attached to a virtual machine.Step 4: Attach Disk1 to VM2Attach an existing diskFollow these steps to reattach an existing available data disk to a running VM.* Select a running VM for which you want to reattach a data disk.* From the menu on the left, select Disks.* Select Attach existing to attach an available data disk to the VM.* From the Attach existing disk pane, select OK.References:https://docs.microsoft.com/en-us/azure/virtual-machines/windows/detach-diskhttps://docs.microsoft.com/en-us/azure/lab-services/devtest-lab-attach-detach-data-diskQ151. You have an Azure subscription named Subscription1. Subscription1 contains the resource groups in the following table.RG1 has a web app named WebApp1. WebApp1 is located in West Europe.You move WebApp1 to RG2. What is the effect of the move?  The App Service plan to WebApp1 moves to North Europe. Policy2 applies to WebApp1.  The App Service plan to WebApp1 moves to North Europe. Policy1 applies to WebApp1.  The App Service plan to WebApp1 remains to West Europe. Policy2 applies to WebApp1.  The App Service plan to WebApp1 remains to West Europe. Policy1 applies to WebApp1. ExplanationYou can move an app to another App Service plan, as long as the source plan and the target plan are in the same resource group and geographical region.The region in which your app runs is the region of the App Service plan it’s in. However, you cannot change an App Service plan’s region.References: https://docs.microsoft.com/en-us/azure/app-service/app-service-plan-manageQ152. You create a virtual machine scale set named Scale1. Scale1 is configured as shown in the following exhibit.Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. ExplanationBox 1:The Autoscale scale out rule increases the number of VMs by 2 if the CPU threshold is 80% or higher. The initial instance count is 4 and rises to 6 when the 2 extra instances of VMs are added.Box 2:The Autoscale scale in rule decreases the number of VMs by 4 if the CPU threshold is 30% or lower. The initial instance count is 4 and thus cannot be reduced to 0 as the minimum instances is set to 2. Instances are only added when the CPU threshold reaches 80%.References:https://docs.microsoft.com/en-us/azure/azure-monitor/platform/autoscale-overviewhttps://docs.microsoft.com/en-us/azure/azure-monitor/platform/autoscale-best-practiceshttps://docs.microsoft.com/en-us/azure/azure-monitor/platform/autoscale-common-scale-patternsQ153. Your company has a main office in Australia and several branch offices in Asia.The company’s data center uses a VMware virtualization infrastructure to host several virtualized servers.You purchase an Azure subscription and plan to move all virtual machines to Azure to a resource group in the Australia Southeast location.You need to create an Azure Migrate migration project.Which geography should you select?  Central India  Australia Central  Australia Southeast  United States ExplanationIn Project Details, specify the project name, and geography in which you want to create the project. Review supported geographies for public and government clouds.References:https://docs.microsoft.com/en-us/azure/migrate/how-to-add-tool-first-time Loading … IT enthusiasts who want to hone their basic Azure skills a bit more and cement their feet in the industry can take the help of the Microsoft AZ-104 exam. Packed with substantial awareness of Azure storage and identities, passing this test is a fabulous way to have in-depth subject matter knowledge that is needed for end-to-end Azure administrators.   Updated AZ-104 Dumps Questions Are Available For Passing Microsoft Exam: https://www.vceprep.com/AZ-104-latest-vce-prep.html --------------------------------------------------- Images: https://certify.vceprep.com/wp-content/plugins/watu/loading.gif https://certify.vceprep.com/wp-content/plugins/watu/loading.gif --------------------------------------------------- --------------------------------------------------- Post date: 2023-05-31 09:42:22 Post date GMT: 2023-05-31 09:42:22 Post modified date: 2023-05-31 09:42:22 Post modified date GMT: 2023-05-31 09:42:22