AZ104-Quiz21

Category: None

AZ104-Q748

You have an Azure Subscription that contains a storage account named storageacct1234 and two users named User1 and User2.

You assign User1 the roles shown in the following exhibit.

Which two actions can User1 perform? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.

Assign roles to User2 for storageacct1234.

Upload blob data to storageacct1234.

Modify the firewall of storageacct1234.

View blob data in storageacct1234.

View file shares in storageacct1234.

Category: None

AZ104-Q749

You have an Microsoft Entra ID tenant named adatum.com that contains the groups shown in the following table.

Name	Member of
Group1	None
Group2	Group1
Group3	Group2

Adatum.com contains the users shown in the following table.

Name	Member of
User1	Group1
User2	Group2
User3	Group3
User4	None

You assign the Microsoft Entra ID Premium Plan 2 license to Group1 and User4.

Which users are assigned the Microsoft Entra ID Premium Plan 2 license?

User4 only

User1 and User4 only

User1, User2, and User4 only

User1, User2, User3, and User4

Category: None

AZ104-Q750

You have an Azure subscription that contains a virtual machine named VM1.

You plan to deploy an Azure Monitor alert rule that will trigger an alert when CPU usage on VM1 exceeds 80

percent.

You need to ensure that the alert rule sends an email message to two users named User1 and User2.

What should you create for Azure Monitor?

an action group

a mail-enabled security group

a distribution group

a Microsoft 365 group

Category: None

AZ104-Q751

You have an Azure Directory (Microsoft Entra ID) tenant named Adatum and an Azure Subscription named Subscription1. Adatum contains a group named Developers.

Subscription1 contains a resource group named Dev.

You need to provide the Developers group with the ability to create Azure logic apps in the Dev resource group.

Solution: On Dev, you assign the Logic App Contributor role to the Developers group.

Does this meet the goal?

Yes

No

Category: None

AZ104-Q752

You have an Azure subscription that contains two resource groups named RG1 and RG2.

RG1 contains the resources shown in the following table.

Which resources are in RG2 after the move?

VM1 only

VM1 and Disk1 only

VM1, NIC1, and Disk1 only

VM1, VNet1, NIC1, and Disk1

Category: None

AZ104-Q753

Your company has an Microsoft Entra ID (Microsoft Entra ID) subscription.

You want to implement an Microsoft Entra ID conditional access policy.

The policy must be configured to require members of the Global Administrators group to use Multi-Factor

Authentication and an Microsoft Entra ID-joined device when they connect to Microsoft Entra ID from untrusted

locations.

Solution: You access the Azure portal to alter the session control of the Microsoft Entra ID conditional access policy.

Does the solution meet the goal?

Yes

No

Category: None

AZ104-Q754

Your company has an Microsoft Entra ID (Microsoft Entra ID) subscription.

You want to implement an Microsoft Entra ID conditional access policy.

The policy must be configured to require members of the Global Administrators group to use Multi-Factor

Authentication and an Microsoft Entra ID-joined device when they connect to Microsoft Entra ID from untrusted

locations.

Solution: You access the Azure portal to alter the grant control of the Microsoft Entra ID conditional access policy.

Does the solution meet the goal?

Yes

No

Category: None

AZ104-Q755

You need to recommend a solution to automate the configuration for the finance department

users. The solution must meet the technical requirements. (Case Study A)

What should you include in the recommendation?

Azure AD B2C

dynamic groups and conditional access policies

Azure AD Identity Protection

an Azure logic app and the Microsoft Identity Management (MIM) client

Category: None

AZ104-Q756

Your organization’s system administrator has deployed two standalone Azure virtual machines (VMs) for a new web

service. You now want to add these virtual machines to fault domains in an availability set. When you attempt to do

this in the portal, you receive an error message preventing you from completing the task. What is the reason for this?

You did not check the required “Standalone” parameter in Azure Portal

You may not add running standalone VMs to availability sets

The VMs operating system is not compatible with fault domains.

The availability set has to be paused or stopped before standalone VMs can be added.

Category: None

AZ104-Q757

Which Azure tool is a cloud-based, command-line service for copying and migrating data between Azure Storage

accounts?

AzCopy

Import/Export Service

Azure Data Box

Azure Storage Explorer

Category: None

AZ104-Q758

Your company makes use of Multi-Factor Authentication for when users are not in the office. The Per Authentication

option has been configured as the usage model.

After the acquisition of a smaller business and the addition of the new staff to Microsoft Entra ID (Microsoft Entra ID)

obtains a different company and adding the new employees to Microsoft Entra ID (Microsoft Entra ID), you are informed

that these employees should also make use of Multi-Factor Authentication.

To achieve this, the Per Enabled User setting must be set for the usage model.

Solution: You reconfigure the existing usage model via the Azure portal.

Does the solution meet the goal?

Yes

No

Category: None

AZ104-Q759

Your company’s Azure solution makes use of Multi-Factor Authentication for when users are not in the office. The

Per Authentication option has been configured as the usage model.

After the acquisition of a smaller business and the addition of the new staff to Microsoft Entra ID (Microsoft Entra ID)

obtains a different company and adding the new employees to Microsoft Entra ID (Microsoft Entra ID), you are informed

that these employees should also make use of Multi-Factor Authentication.

To achieve this, the Per Enabled User setting must be set for the usage model.

Solution: You reconfigure the existing usage model via the Azure CLI.

Does the solution meet the goal?

Yes

No

Category: None

AZ104-Q760

You suspect hackers and bots have been attacking your application’s network. What Azure Network Watcher

network monitoring or analysis tool would best fit your needs?

Connection Monitor

Network Performance Monitor

Security Group View

Traffic Analytics

Category: None

AZ104-Q761

Your company has an Microsoft Entra ID (Microsoft Entra ID) tenant named weyland.com that is configured for

hybrid coexistence with the on-premises Active

Directory domain.

You have a server named DirSync1 that is configured as a DirSync server.

You create a new user account in the on-premise Active Directory. You now need to replicate the user information to

Microsoft Entra ID immediately.

Solution: You use Active Directory Sites and Services to force replication of the Global Catalog on a domain

controller.

Does the solution meet the goal?

Yes

No

Category: None

AZ104-Q762

Your company has an Microsoft Entra ID (Microsoft Entra ID) tenant named weyland.com that is configured for

hybrid coexistence with the on-premises Active

Directory domain.

You have a server named DirSync1 that is configured as a DirSync server.

You create a new user account in the on-premise Active Directory. You now need to replicate the user information to

Microsoft Entra ID immediately.

Solution: You restart the NetLogon service on a domain controller.

Does the solution meet the goal?

Yes

No

Category: None

AZ104-Q763

Which Azure service can provide performance metrics of not only solutions deployed on Azure, but also

solutions hosted on-premise as well as Google Cloud and Amazon Web Services?

Azure Application Insights

Azure Monitor

Azure Log Analytics

Azure Network Watcher

Category: None

AZ104-Q764

Your company has a Microsoft Azure subscription.

The company has datacenters in Los Angeles and New York.

You are configuring the two datacenters as geo-clustered sites for site resiliency.

You need to recommend an Azure storage redundancy option.

You have the following data storage requirements:

c® Data must be stored on multiple nodes.

c® Data must be stored on nodes in separate geographic locations.

c® Data can be read from the secondary location as well as from the primary location.

Which of the following Azure stored redundancy options should you recommend?

Geo-redundant storage

Read-only geo-redundant storage

Zone-redundant storage

Locally redundant storage

Category: None

AZ104-Q765

What is not a requirement to deploy Microsoft Entra ID Join?

An Microsoft Entra ID subscription

An Microsoft Entra ID Premium subscription

Mobile device management

A deployment of Microsoft Entra ID Connect

Category: None

AZ104-Q766

Your company has an azure subscription that includes a storage account, a resource group, a blob container and a

file share.

A colleague named Jon Ross makes use of a solitary Azure Resource Manager (ARM) template to deploy a virtual

machine and an additional Azure Storage account.

You want to review the ARM template that was used by Jon Ross.

Solution: You access the Virtual Machine blade.

Does the solution meet the goal?

Yes

No

Category: None

AZ104-Q767

Your company has an azure subscription that includes a storage account, a resource group, a blob container and

a file share.

A colleague named Jon Ross makes use of a solitary Azure Resource Manager (ARM) template to deploy a virtual

machine and an additional Azure Storage account.

You want to review the ARM template that was used by Jon Ross.

Solution: You access the Resource Group blade.

Does the solution meet the goal?

Yes

No

Category: None

AZ104-Q768

Your company has an azure subscription that includes a storage account, a resource group, a blob container and

a file share.

A colleague named Jon Ross makes use of a solitary Azure Resource Manager (ARM) template to deploy a virtual

machine and an additional Azure Storage account.

You want to review the ARM template that was used by Jon Ross.

Solution: You access the Container blade.

Does the solution meet the goal?

Yes

No

Category: None

AZ104-Q769

You have several VMs and the traffic to them needs to be filtered through a custom firewall virtual appliance.

Which of the following is the best way to direct traffic through the virtual appliance before it reaches your virtual

machines?

User-defined routes

Network security groups

Azure Traffic Manager

Azure Application Gateway

Category: None

AZ104-Q770

Your company has three virtual machines (VMs) that are included in an availability set.

You try to resize one of the VMs, which returns an allocation failure message.

It is imperative that the VM is resized.

Which of the following actions should you take?

You should only stop one of the VMs.

You should stop two of the VMs.

You should stop all three VMs.

You should remove the necessary VM from the availability set.

Category: None

AZ104-Q771

You have successfully containerized your application within an Azure Container Registry, created an image of

your application and pushed it into the container registry. You have also created an AKS cluster. Now you want to

deploy the containerized application onto your AKS cluster. Which three steps do you need to complete? (Choose 3

answers)

Get credentials to authenticate kubectl commands sent to the Kubernetes cluster.

Create a manifest file declaring the required Kubernetes resources.

Create the resources in the cluster

Create a service principal to allow your cluster to interact with Azure resources

Category: None

AZ104-Q772

You have an Azure virtual machine (VM) that has a single data disk. You have been tasked with attaching this

data disk to another Azure VM.

You need to make sure that your strategy allows for the virtual machines to be offline for the least amount of time

possible.

Which of the following is the action you should take FIRST?

Stop the VM that includes the data disk.

Stop the VM that the data disk must be attached to.

Detach the data disk.

Delete the VM that includes the data disk.

Category: None

AZ104-Q773

A company hosts a web-based .Net application in Azure. They require that whenever an abnormal activity occurs,

such as high page request rate, a custom application is notified so that it can be handled accordingly. Which option

below meets this requirement?

Create an alert in the Azure dashboard and configure the email alert. Ensure the custom application consumes the email alerts.

Create a custom powershell utility to check the the application request rate and then alerts the custom application accordingly.

Create an alert and use the Webhook functionality to send the notification to the custom application.

Create a custom utility that monitors and checks the application request rate and then sends the alert to the custom application.

Category: None

AZ104-Q774

Your company has an Azure subscription.

You need to deploy a number of Azure virtual machines (VMs) using Azure Resource Manager (ARM) templates. You

have been informed that the VMs will be included in a single availability set.

You are required to make sure that the ARM template you configure allows for as many VMs as possible to remain

accessible in the event of fabric failure or maintenance.

Which of the following is the value that you should configure for the platformFaultDomainCount property?

10

30

Min Value

Max Value

Category: None

AZ104-Q775

When using Azure Resource Manager (ARM) templates, what feature enables you to control resource properties

during deployment in your organization?

Active Directory

API Management

Azure Policy

Resource tags

Category: None

AZ104-Q776

Your company has an Azure subscription.

You need to deploy a number of Azure virtual machines (VMs) using Azure Resource Manager (ARM) templates. You

have been informed that the VMs will be included in a single availability set.

You are required to make sure that the ARM template you configure allows for as many VMs as possible to remain

accessible in the event of fabric failure or maintenance.

Which of the following is the value that you should configure for the platformUpdateDomainCount property?

10

20

30

40

Category: None

AZ104-Q777

What extension should be enabled for Azure Scale sets to auto scale based on in-guest virtual machine metrics?

Azure Diagnostics Extension

Azure DCS Extension

Azure VM Extension

Azure Custom Script Extension

Category: None

AZ104-Q778

Your company has virtual machines hosted in Azure as well as on premise, and needs to share files across

the virtual machines. Which storage option would best meet this requirement?

Store the files using Blob storage.

Store the files using File storage.

Store the files using Table storage.

Store the files using Queue storage.

Category: None

AZ104-Q779

Your company has an Microsoft Entra ID (Microsoft Entra ID) tenant that is configured for hybrid coexistence with the

on-premises Active Directory domain.

The on-premise virtual environment consists of virtual machines (VMs) running on Windows Server 2012 R2 Hyper-V host

servers.

You have created some PowerShell scripts to automate the configuration of newly created VMs. You plan to create

several new VMs.

You need a solution that ensures the scripts are run on the new VMs.

Which of the following is the best solution?

Configure a SetupComplete.cmd batch file in the %windir%\setup\scripts directory.

Configure a Group Policy Object (GPO) to run the scripts as logon scripts.

Configure a Group Policy Object (GPO) to run the scripts as startup scripts.

Place the scripts in a new virtual hard disk (VHD).

Category: None

AZ104-Q780

You are a cost-sensitive IT administrator, and want to turn off your virtual machines at night to save money.

What is a recommended method to do this?

Create an operating system script that will turn off instances at the OS level, resulting in the VM state “Stopped.”

Stop VMs from the Azure portal or using Azure Automation, resulting in the VM state “Stopped (Deallocated)”

Shutting down your VMs either through an operating system script or using the Azure Portal will work, as long as the VM state is “Stopped” or “Stopped (Deallocated).

Stop VMs using Azure Command Line Interface, resulting in the VM state “Stopped.”

Category: None

AZ104-Q781

Your company has an Microsoft Entra ID (Microsoft Entra ID) tenant that is configured for hybrid coexistence with

the on-premises Active Directory domain.

You plan to deploy several new virtual machines (VMs) in Azure. The VMs will have the same operating system and

custom software requirements.

You configure a reference VM in the on-premise virtual environment. You then generalize the VM to create an image.

You need to upload the image to Azure to ensure that it is available for selection when you create the new Azure VMs.

Which PowerShell cmdlets should you use?

Add-AzVM

Add-AzVhd

Add-Azlmage

Add-AzlmageDataDisk

Category: None

AZ104-Q782

Your manager has asked for advice on how best to fire off a console app that will nightly pick up some files

that are uploaded to a Web App hosted on App Service and add them to Blob Storage. Cost and management

effort are a concern. Given what you know, which service would work best?

WebJobs

Azure Logic Apps

Azure Functions

Azure Automation

Category: None

AZ104-Q783

Which Azure Storage service is designed for large-scale, offline data migration intended to help businesses

migrate their data onto the Azure cloud?

AzCopy

Azure Data Box

Azure Storage Explorer

StorSimple

Category: None

AZ104-Q784

Your company’s Azure subscription includes two Azure networks named VirtualNetworkA and VirtualNetworkB.

VirtualNetworkA includes a VPN gateway that is configured to make use of static routing. Also, a site-to-site VPN

connection exists between your company’s on- premises network and VirtualNetworkA.

You have configured a point-to-site VPN connection to VirtualNetworkA from a workstation running Windows 10. After

configuring virtual network peering between

VirtualNetworkA and VirtualNetworkB, you confirm that you are able to access VirtualNetworkB from the company’s on-

premises network. However, you find that you cannot establish a connection to VirtualNetworkB from the Windows 10

workstation.

You have to make sure that a connection to VirtualNetworkB can be established from the Windows 10 workstation.

Solution: You choose the Allow gateway transit setting on VirtualNetworkA.

Does the solution meet the goal?

Yes

No

Category: None

AZ104-Q785

Your company’s Azure subscription includes two Azure networks named VirtualNetworkA and VirtualNetworkB.

VirtualNetworkA includes a VPN gateway that is configured to make use of static routing. Also, a site-to-site VPN

connection exists between your company’s on- premises network and VirtualNetworkA.

You have configured a point-to-site VPN connection to VirtualNetworkA from a workstation running Windows 10. After

configuring virtual network peering between

VirtualNetworkA and VirtualNetworkB, you confirm that you are able to access VirtualNetworkB from the company’s on-

premises network. However, you find that you cannot establish a connection to VirtualNetworkB from the Windows 10

workstation.

You have to make sure that a connection to VirtualNetworkB can be established from the Windows 10 workstation.

Solution: You choose the Allow gateway transit setting on VirtualNetworkB.

Does the solution meet the goal?

Yes

No

Category: None

AZ104-Q786

Your company’s Azure subscription includes two Azure networks named VirtualNetworkA and VirtualNetworkB.

VirtualNetworkA includes a VPN gateway that is configured to make use of static routing. Also, a site-to-site VPN connection

exists between your company’s on- premises network and VirtualNetworkA.

You have configured a point-to-site VPN connection to VirtualNetworkA from a workstation running Windows 10. After

configuring virtual network peering between

VirtualNetworkA and VirtualNetworkB, you confirm that you are able to access VirtualNetworkB from the company’s on-

premises network. However, you find that you cannot establish a connection to VirtualNetworkB from the Windows 10

workstation.

You have to make sure that a connection to VirtualNetworkB can be established from the Windows 10 workstation.

Solution: You download and re-install the VPN client configuration package on the Windows 10 workstation.

Does the solution meet the goal?

Yes

No

Category: None

AZ104-Q787

Which of the following choices are true about Azure Storage encryption at rest? (Choose 2 answers)

Azure Storage encryption is two-way encryption with asymmetric keys.

Azure Storage encryption is managed transparently by Azure.

Azure Storage encryption is one-way encryption with asymmetric keys.

Azure Storage encryption is two-way encryption with symmetric keys.

Quiz Summary

Information

Results

Results

Categories

1. Question

2. Question

3. Question

4. Question

5. Question

6. Question

7. Question

8. Question

9. Question

10. Question

11. Question

12. Question

13. Question

14. Question

15. Question

16. Question

17. Question

18. Question

19. Question

20. Question

21. Question

22. Question

23. Question

24. Question

25. Question

26. Question

27. Question

28. Question

29. Question

30. Question

31. Question

32. Question

33. Question

34. Question

35. Question

36. Question

37. Question

38. Question

39. Question

40. Question