AZ104-Quiz22

Category: None

AZ104-Q788

Your company has virtual machines (VMs) hosted in Microsoft Azure. The VMs are located in a single Azure virtual

network named VNet1.

The company has users that work remotely. The remote workers require access to the VMs on VNet1.

You need to provide access for the remote workers.

What should you do?

Configure a Site-to-Site (S2S) VPN.

Configure a VNet-toVNet VPN.

Configure a Point-to-Site (P2S) VPN.

Configure DirectAccess on a Windows Server 2012 server VM.

Configure a Multi-Site VPN

Category: None

AZ104-Q789

Your Chief Technology officer wants to manage the Azure Virtual Machine (VM) infrastructure by establishing a

baseline, high-level standard of quality for all the resources in your environment. What tool can be used to implement

this request?

VM Access extension

Azure VM agent extension

PowerShell DSC

Bitlocker

Category: None

AZ104-Q790

Your company has a Microsoft SQL Server Always On availability group configured on their Azure virtual machines

(VMs).

You need to configure an Azure internal load balancer as a listener for the availability group.

Solution: You create an HTTP health probe on port 1433.

Does the solution meet the goal?

Yes

No

Category: None

AZ104-Q791

You have begun migrating your existing applications from on-premise servers to resources on an Azure Virtual

Network. The on-premise network and Azure are currently connected via ExpressRoute. You need to ensure the

ExpressRoute connection is healthy at all times. What Network Watcher service can you utilize to monitor the

connection?

Connection Monitor (formerly Network Performance Monitor)

Traffic Analytics

VPN Troubleshoot

Connection Monitor (Classic)

Category: None

AZ104-Q792

Your company has a Microsoft SQL Server Always On availability group configured on their Azure virtual machines

(VMs).

You need to configure an Azure internal load balancer as a listener for the availability group.

Solution: You set Session persistence to Client IP.

Does the solution meet the goal?

Yes

No

Category: None

AZ104-Q793

Your company has a Microsoft SQL Server Always On availability group configured on their Azure virtual

machines (VMs).

You need to configure an Azure internal load balancer as a listener for the availability group.

Solution: You enable Floating IP.

Does the solution meet the goal?

Yes

No

Category: None

AZ104-Q794

A company is planning to deploy a set of web servers and database servers. They want to ensure high

availability through availability sets. Which of the following is the recommended design practice to use?

Place the web servers and database servers in the same availability set.

Place half of the web servers and half of the database servers in one availability set, and the other half in another availability set.

Place all the web servers in one availability set and the database servers in another availability set.

Have an availability set for each web server and database server.

Category: None

AZ104-Q795

Your company has two on-premises servers named SRVO1 and SRVO2. Developers have created an application

that runs on SRVO1. The application calls a service on SRVO2 by IP address.

You plan to migrate the application on Azure virtual machines (VMs). You have configured two VMs on a single

subnet in an Azure virtual network.

You need to configure the two VMs with static internal IP addresses.

What should you do?

Run the New-AzureRMVMConfig PowerShell cmdlet.

Run the Set-AzureSubnet PowerShell cmdlet.

Modify the VM properties in the Azure Management Portal.

Modify the IP properties in Windows Network and Sharing Center.

Run the Set-AzureStaticVNetIP PowerShell cmdlet.

Category: None

AZ104-Q796

A company needs to connect their on-premise data centers to Azure. They have huge workloads that need to

regularly transfer between on premise data centers and Azure. The company wants to avoid sending data over the

public internet for security reasons. Which of the following connections should the company opt for to establish this

connection?

Create a Site-to-Site connection

Create a Point-to-Site connection

Create an ExpressRoute connection

Create a VNet-to-VNet connection

Category: None

AZ104-Q797

Your company has an Microsoft Entra ID (Microsoft Entra ID) subscription.

You need to deploy five virtual machines (VMs) to your company’s virtual network subnet.

The VMs will each have both a public and private IP address. Inbound and outbound security rules for all of these virtual

machines must be identical.

Which of the following is the least amount of network interfaces needed for this configuration?

5

10

20

40

Category: None

AZ104-Q798

You are building a group of 10 virtual machines and putting them into an availability set to ensure high

availability. You configure the maximum number of fault domains available in your desired region, which is

three. How many of your virtual machines will end up in the first fault domain?

4

3

5

10

Category: None

AZ104-Q799

Your company has an Microsoft Entra ID (Microsoft Entra ID) subscription.

You need to deploy five virtual machines (VMs) to your company’s virtual network subnet.

The VMs will each have both a public and private IP address. Inbound and outbound security rules for all of

these virtual machines must be identical.

Which of the following is the least amount of security groups needed for this configuration?

4

3

2

1

Category: None

AZ104-Q800

Your company has an application where users upload images and they’re processed with different filters. The app

is currently on-premises and you must design a solution in Azure. The solution should minimize management effort, it

should allow for deployments to be promoted, and the image processing code should run as a separate process from

the web application. Which option is best?

WebJobs

laaS VMs

Azure HPC

Azure HDInsight

Category: None

AZ104-Q801

Your company’s Azure subscription includes Azure virtual machines (VMs) that run Windows Server 2016.

One of the VMs is backed up every day using Azure Backup Instant Restore.

When the VM becomes infected with data encrypting ransomware, you decide to recover the VM’s files.

Which of the following is TRUE in this scenario?

You can only recover the files to the infected VM.

You can recover the files to any VM within the company’s subscription.

You can only recover the files to a new VM.

You will not be able to recover the files.

Category: None

AZ104-Q802

If you want to review detailed information about what incoming requests have been allowed or denied by

network security groups on a per-rule basis, what Network Watcher service will best assist you?

NSG Flow Logs

Diagnostic Logs

Network Performance Monitor

IP Flow Verify

Category: None

AZ104-Q803

You administer a solution in Azure that is currently having performance issues.

You need to find the cause of the performance issues pertaining to metrics on the Azure infrastructure.

Which of the following is the tool you should use?

Azure Traffic Analytics

Azure Monitor

Azure Activity Log

Microsoft Entra IDvisor

Category: None

AZ104-Q804

You want to configure a recovery service vault for your on-premise server backup as well as VM disks. What

steps are required for on-premise servers that are not required for Azure VMs? (Choose 2 answers)

Install a recovery service agent

Register your on-premise server

Configure a backup policy

Configure the vault storage replication

Category: None

AZ104-Q805

Your company has an Azure subscription that includes a Recovery Services vault.

You want to use Azure Backup to schedule a backup of your company’s virtual machines (VMs) to the Recovery Services

vault.

Which of the following VMs can you back up? Choose all that apply.

VMs that run Windows 10.

VMs that run Windows Server 2012 or higher.

VMs that have NOT been shut down.

VMs that run Debian 8.2+.

VMs that have been shut down.

Category: None

AZ104-Q806

You have an on-premises server that contains a folder named D:\Folder1.

You need to copy the contents of D:\Folder1 to the public container in an Azure Storage account named

contosodata.

Which command should you run?

az storage blob copy start D:\Folder1 https://contosodata.blob.core.windows.net/public

azcopy sync D:\folder1 https://contosodata.blob.core.windows.net/public –snapshot

azcopy copy D:\folder1 https://contosodata.blob.core.windows.net/public –recursive

az storage blob copy start-batch D:\Folder1 https://contosodata.blob.core.windows.net/public

Category: None

AZ104-Q807

You have an Microsoft Entra ID (Microsoft Entra ID) tenant named contoso.com.

You have a CSV file that contains the names and email addresses of 500 external users.

You need to create a guest user account in contoso.com for each of the 500 external users.

Solution: You create a PowerShell script that runs the New-AzureADUser cmdlet for each user.

Does this meet the goal?

Yes

No

Category: None

AZ104-Q808

You have an Microsoft Entra ID (Microsoft Entra ID) tenant named contoso.com.

You have a CSV file that contains the names and email addresses of 500 external users.

You need to create a guest user account in contoso.com for each of the 500 external users.

Solution: From Microsoft Entra ID in the Azure portal, you use the Bulk create user operation.

Does this meet the goal?

Yes

No

Category: None

AZ104-Q809

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions

will not appear in the review screen.

You have an Microsoft Entra ID (Microsoft Entra ID) tenant named contoso.com.

You have a CSV file that contains the names and email addresses of 500 external users.

You need to create a guest user account in contoso.com for each of the 500 external users.

Solution: You create a PowerShell script that runs the New-AzureADMSInvitation cmdlet for each external user.

Does this meet the goal?

Yes

No

Category: None

AZ104-Q810

A company needs to connect their on-premise data center to Azure. They want to have a dedicated connection

and at the same time want to have a failover connection. They don’t mind having a drop in latency when it comes to

the failover connection. They also have around 500+ employees who will need to use this connection. Which of the

following connection types would you use?

Site-to-Site for the main and failover connection.

Site-to-Site for the main and Point-to-Site for the failover connection.

ExpressRoute for the main connection and Site-to-Site for the failover connection.

Site-to-Site for the main and ExpressRoute for the failover connection.

Category: None

AZ104-Q811

Your IT consulting business has recently partnered with two other businesses in different regions of the country.

Each of your three offices has resources deployed in Microsoft Azure cloud. Although you plan to eventually merge your

separate offices into a single Microsoft Entra ID tenant, you would like to connect several VNets in your separate

subscriptions beforehand with your existing, separate Microsoft Entra ID tenants in place.What Azure solution is the

easiest way to accomplish this?

Create VNet peering connection

Create Virtual Network Gateways

Create a DNS zone with split-horizon view

Create a VNet-to-VNet VPN

Category: None

AZ104-Q812

You have an Azure subscription that contains an Microsoft Entra ID (Microsoft Entra ID) tenant named

contoso.com and an Azure Kubernetes Service (AKS) cluster named AKS1.

An administrator reports that she is unable to grant access to AKS1 to the users in contoso.com.

You need to ensure that access to AKS1 can be granted to the contoso.com users.

What should you do first?

From contoso.com, modify the Organization relationships settings.

From contoso.com, create an OAuth 2.0 authorization endpoint.

Recreate AKS1.

From AKS1, create a namespace.

Category: None

AZ104-Q813

Which of the following statements about Azure VPN Gateways and subnets is false?

When creating on-premises to virtual network (VNet) connections, there cannot be overlapping subnet address ranges

VPN Gateways require a specific gateway subnet that must be named GatewaySubnet

Virtual machines cannot be deployed on a gateway subnet

When creating VNet-to-VNet connections there can be overlapping subnet address ranges

Category: None

AZ104-Q814

You have a Microsoft 365 tenant and an Microsoft Entra ID (Microsoft Entra ID) tenant named contoso.com.

You plan to grant three users named User1, User2, and User3 access to a temporary Microsoft SharePoint document

library named Library1.

You need to create groups for the users. The solution must ensure that the groups are deleted automatically after 180

days.

Which two groups should you create? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

a Microsoft 365 group that uses the Assigned membership type

a Security group that uses the Assigned membership type

a Microsoft 365 group that uses the Dynamic User membership type

a Security group that uses the Dynamic User membership type

a Security group that uses the Dynamic Device membership type

Category: None

AZ104-Q815

Which of the following statements is incorrect regarding a resource policy created

using Azure Policy?

Azure Policy scans Azure resources for noncompliance with defined resource policies.

It applies to Azure resources, not Azure subscribers or users.

Once a policy is created, it applies to both new and existing resources.

Users can search through Azure policy with custom policy queries.

Category: None

AZ104-Q816

You have an Azure subscription named AZPT1 that contains the resources shown in the following table:

Name	Type
storage1	Azure Storage account
VNET1	Virtual network
VM1	Azure virtual machine
VM1Managed	Managed disk for VM1
RVAULT1	Recovery Services vault for the site recovery of VM1

You create a new Azure subscription named AZPT2.

You need to identify which resources can be moved to AZPT2.

Which resources should you identify?

VM1, storage1, VNET1, and VM1Managed only

VM1 and VM1Managed only

VM1, storage1, VNET1, VM1Managed, and RVAULT1

RVAULT1 only

Category: None

AZ104-Q817

Your organization’s system administrator has deployed two standalone Azure virtual machines (VMs) for a new

web service. You now want to add these virtual machines to fault domains in an availability set. When you attempt

to do this in the portal, you receive an error message preventing you from completing the task. What is the reason

for this?

You did not check the required “Standalone” parameter in Azure Portal

You may not add running standalone VMs to availability sets

The VMs operating system is not compatible with fault domains.

The availability set has to be paused or stopped before standalone VMs can be added.

Category: None

AZ104-Q818

You recently created a new Azure subscription that contains a user named Admin1.

Admin1 attempts to deploy an Azure Marketplace resource by using an Azure Resource Manager template. Admin1

deploys the template by using Azure

PowerShell and receives the following error message: “User failed validation to purchase resources. Error message:

“Legal terms have not been accepted for this item on this subscription. To accept legal terms, please go to the Azure

portal (http://go.microsoft.com/fwlink/?Linkld=534873) and configure programmatic deployment for the Marketplace

item or create it there for the first time.”

You need to ensure that Admin1 can deploy the Marketplace resource successfully.

What should you do?

From Azure PowerShell, run the Set-AzApiManagementSubscription cmdlet

From the Azure portal, register the Microsoft.Marketplace resource provider

From Azure PowerShell, run the Set-AzMarketplaceTerms cmdlet

From the Azure portal, assign the Billing administrator role to Admin1

Category: None

AZ104-Q819

Your organization’s expenses have increased as operations have expanded. You need to identify expenses for

Azure resources used by the IT and Development departments of your organization.Which Azure service or tool

should you use to better understand your organization’s resource expenses by department?

Microsoft Entra IDvisor

Azure Budget

Azure Price Calculator

Azure Resource Tags

Category: None

AZ104-Q820

You have an Microsoft Entra ID (Microsoft Entra ID) tenant that contains 5,000 user accounts.

You create a new user account named AdminUser1.

You need to assign the User administrator administrative role to AdminUser1.

What should you do from the user account properties?

From the Licenses blade, assign a new license

From the Directory role blade, modify the directory role

From the Groups blade, invite the user account to a new group

Category: None

AZ104-Q821

Your organization wants to secure customer personal data stored within your Azure Virtual Machine (VM)

environment. You suggest Azure Disk Encryption, which is an option available to both Linux and Windows VMs. While

the encryption process is actually pretty straightforward, and is as easy as deploying a VM extension in PowerShell,

what is one caveat to the process that adds a level of complexity?

Bitlocker enabled and Azure Backup Service are mutually exclusive processes.

Bitlocker is ineffective at encrypting the operating system.

Amechanism must be in place to manage the encryption keys for the encrypted disk.

The process of creating the encryption keys is complex.

Category: None

AZ104-Q822

You have an Microsoft Entra ID (Microsoft Entra ID) tenant named contoso.onmicrosoft.com that contains 100

user accounts.

You purchase 10 Microsoft Entra ID Premium P2 licenses for the tenant.

You need to ensure that 10 users can use all the Microsoft Entra ID Premium features.

What should you do?

From the Licenses blade of Microsoft Entra ID, assign a license

From the Groups blade of each user, invite the users to a group

From the Microsoft Entra ID domain, add an enterprise application

From the Directory role blade of each user, modify the directory role

Category: None

AZ104-Q823

The following is a subsection of an ARM template to deploy a Windows VM. In order to create the network

interface you need a public IP Address and a Virtual Network. Which of the answers below belong in the dependsOn

array to accomplish that objective?…{“apiVersion”: “2016-03-30″,”type”:

“Microsoft.Network/networkInterfaces”,”name’: “[variables(‘nicName’)]”,”location”:

“[resourceGroup().location]”,”dependsOn”:

[____FILL_IN_THE_BLANK____”[resourceld(‘Microsoft.Network/virtualNetworks/’,

variables(‘virtualNetworkName’))]’,…

“[resourceld(‘Microsoft.Network/publiclIPAddresses/’, variables(‘publiclPAddressName’))]”,

“[resourceld(‘Microsoft.Network/networkinterfaces/’, variables(‘nicName’))]”

“[reference(variables(‘publiclPAddressName’)).dnsSettings.fqdn]”

“[resourceld(‘Microsoft.Storage/storageAccounts/’, variables(‘storageAccountName’))]”,

Category: None

AZ104-Q824

You have an Azure subscription named Subscription1 and an on-premises deployment of Microsoft System Center Service Manager.

Subscription1 contains a virtual machine named VM1.

You need to ensure that an alert is set in Service Manager when the amount of available memory on VM11 is below 10 percent.

What should you do first?

Create an automation runbook

Deploy a function app

Deploy the IT Service Management Connector (ITSM)

Create a notification

Category: None

AZ104-Q825

Which Microsoft Microsoft Entra ID solution should you use to enable a cloud identity management solution for your

consumer-facing web and mobile applications?

Microsoft Entra ID B2C

Microsoft Entra ID

Microsoft Entra ID Domain Services

Azure Multi-Factor Authentication

Category: None

AZ104-Q826

You sign up for Microsoft Entra ID (Microsoft Entra ID) Premium P2.

You need to add a user named admin1@contoso.com as an administrator on all the computers that will be

joined to the Microsoft Entra ID domain.

What should you configure in Microsoft Entra ID?

Device settings from the Devices blade

Providers from the MFA Server blade

User settings from the Users blade

General settings from the Groups blade

Category: None

AZ104-Q827

Reviewing your recently launched application, you notice several changes that could affect performance or security.

You are concerned that the IT management team is not reviewing corporate requirements in these areas.You want to

automate a process to review Azure resources, including storage accounts and VMs, against the rules you specify. You

want to be automatically notified of any noncompliance.What steps can you take to accomplish this goal?

Create resource policies with Azure Policy.

Implement ‘Read-Only’ resource locks.

Create alerts using Azure Log Analytics.

Initialize change tracking with Azure Automation and Log Analytics.

Quiz Summary

Information

Results

Results

Categories

1. Question

2. Question

3. Question

4. Question

5. Question

6. Question

7. Question

8. Question

9. Question

10. Question

11. Question

12. Question

13. Question

14. Question

15. Question

16. Question

17. Question

18. Question

19. Question

20. Question

21. Question

22. Question

23. Question

24. Question

25. Question

26. Question

27. Question

28. Question

29. Question

30. Question

31. Question

32. Question

33. Question

34. Question

35. Question

36. Question

37. Question

38. Question

39. Question

40. Question