AZ104-Quiz23

Time limit: 0

Quiz Summary

0 of 40 Questions completed

Questions:

Information

You have already completed the quiz before. Hence you can not start it again.

Quiz is loading…

You must sign in or sign up to start the quiz.

You must first complete the following:

Results

Quiz complete. Results are being recorded.

Results

0 of 40 Questions answered correctly

Your time:

Time has elapsed

You have reached 0 of 0 point(s), (0)

Earned Point(s): 0 of 0, (0)
0 Essay(s) Pending (Possible Point(s): 0)

Categories

None 0%

Current
Review
Answered
Correct
Incorrect

Question 1 of 40

1. Question

Category: None

AZ104-Q828

You have an Azure subscription that contains a resource group named RG26.

RG26 is set to the West Europe location and is used to create temporary resources for a project. RG26 contains the

resources shown in the following table.

Name Type Location

VM1 Virtual machine North Europe

RGV1 Recovery Services vault North Europe

SQLD01 SQL server in Azure VM North Europe

sa001 Storage account West Europe

SQLDB01 is backed up to RGV1.

When the project is complete, you attempt to delete RG26 from the Azure portal. The deletion fails.

You need to delete RG26.

What should you do first?

Delete VM1

Stop VM1

Stop the backup of SQLDBO1

Delete sa001

Correct

Incorrect
Question 2 of 40

2. Question

Category: None

AZ104-Q829

You have a microservice application hosted on Azure App Services named Azure Service Environment 1. The

application communicates with on-premise database servers and data analysis applications. You need to find an

effective monitoring solution to do the following:Monitor performance of Azure Service Environment 1 and the on-

premise database servers.Provide alerts when communication between the on-premise database and Azure Service

Environment 1 is disrupted.Provide quantitative data regarding customer usage.What Azure services or features within

Azure App Service can meet all your requirements?

Azure Application Insights

Azure Monitor

Azure App Service Diagnostic Logs

Azure App Service Metrics

Correct

Incorrect
Question 3 of 40

3. Question

Category: None

AZ104-Q830

You have an Azure subscription named Subscription1 that contains a virtual network named VNet1. VNet1 is ina

resource group named RG1.

Subscription! has a user named User1. User1 has the following roles:

o® Reader

c® Security Admin

c® Security Reader

You need to ensure that User1 can assign the Reader role for VNet1 to other users.

What should you do?

Remove User1 from the Security Reader and Reader roles for Subscription1.

Assign User1 the User Access Administrator role for VNet1.

Assign User1 the Network Contributor role for VNet1.

Assign User1 the Network Contributor role for RG1.

Correct

Incorrect
Question 4 of 40

4. Question

Category: None

AZ104-Q831

If you sort the following hosting plans from least expensive to most expensive, which is the first plan where is it

possible to configure the Auto-Scale feature for Azure App Services?

Free

Basic

Standard

Premium

Correct

Incorrect
Question 5 of 40

5. Question

Category: None

AZ104-Q832

You have an Microsoft Entra ID (Microsoft Entra ID) tenant named contosocloud.onmicrosoft.com.

Your company has a public DNS zone for contoso.com.

You add contoso.com as a custom domain name to Microsoft Entra ID.

You need to ensure that Azure can verify the domain name.

Which type of DNS record should you create?

MX

NSEC

PTR

RRSIG

Correct

Incorrect
Question 6 of 40

6. Question

Category: None

AZ104-Q833

Your team is spending too much time recovering from unplanned events, specifically when small resource updates

occur that disrupt service operations, or noncompliant resources are created. You want to automate a process to

review log data related to resource updates, to detect anomalies within the updates. You would like to utilize live

dashboards to evaluate the log data quickly. What type of logs would you analyze, and with what Azure service?

Process activity logs with Azure Event Hub.

Process diagnostic logs with Log Analytics.

Process application logs with tables in Azure Storage.

Process diagnostic logs with Power BI.

Correct

Incorrect
Question 7 of 40

7. Question

Category: None

AZ104-Q834

You have an Azure Directory (Microsoft Entra ID) tenant named Adatum and an Azure Subscription named

Subscription1. Adatum contains a group named Developers.

Subscription! contains a resource group named Dev.

You need to provide the Developers group with the ability to create Azure logic apps in the Dev resource group.

Solution: On Subscription1, you assign the DevTest Labs User role to the Developers group.

Does this meet the goal?

Yes

No

Correct

Incorrect
Question 8 of 40

8. Question

Category: None

AZ104-Q835

You have an Azure Directory (Microsoft Entra ID) tenant named Adatum and an Azure Subscription named

Subscription1. Adatum contains a group named Developers.

Subscription contains a resource group named Dev.

You need to provide the Developers group with the ability to create Azure logic apps in the Dev resource group.

Solution: On Subscription1, you assign the Logic App Operator role to the Developers group.

Does this meet the goal?

Yes

No

Correct

Incorrect
Question 9 of 40

9. Question

Category: None

AZ104-Q836

You have an Azure Directory (Microsoft Entra ID) tenant named Adatum and an Azure Subscription named

Subscription1. Adatum contains a group named Developers.

Subscription1 contains a resource group named Dev.

You need to provide the Developers group with the ability to create Azure logic apps in the Dev resource group.

Solution: On Dev, you assign the Contributor role to the Developers group.

Does this meet the goal?

Yes

No

Correct

Incorrect
Question 10 of 40

10. Question

Category: None

AZ104-Q837

You have an Azure Kubernetes Service (AKS) cluster named AKS1.

You need to configure cluster autoscaler for AKS1.

Which two tools should you use? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

the kubectl command

the az aks command

the Set-AzVm cmdlet

the Azure portal

the Set-AzAks cmdlet

Correct

Incorrect

Name	Type	Location
VM1	Virtual machine	North Europe
RGV1	Recovery Services vault	North Europe
SQLD01	SQL server in Azure VM	North Europe
sa001	Storage account	West Europe

Question 11 of 40

11. Question

Category: None

AZ104-Q838

You have an Azure subscription that contains the resources shown in the following table.

Name	Type	Resource group	Location
RG1	Resource group	Not applicable	Central US
RG2	Resource group	Not applicable	West US
VMSS1	Virtual machine scale set	RG2	West US
Proximity1	Proximity placement group	RG1	Central US
Proximity2	Proximity placement group	RG2	West US
Proximity3	Proximity placement group	RG1	Central US

You need to configure a proximity placement group for VMSS1.

Which proximity placement groups should you use?

Proximity2 only

Proximity1, Proximity2, and Proximity3

Proximity1 only

Proximity1 and Proximity3 only

Correct

Incorrect

Question 12 of 40

12. Question

Category: None

AZ104-Q839

You have an Azure subscription named Subscription1 that contains an Azure Log Analytics workspace named

Workspace.

You need to view the error events from a table named Event.

Which query should you run in Workspace1?

Get-Event Event | where {$_.EventType == “error”}

search in (Event) “error”

select * from Event where EventType == “error”

search in (Event) * | where EventType -eq “error”

Correct

Incorrect
Question 13 of 40

13. Question

Category: None

AZ104-Q840

A company’s app hosted in Azure is using the App Service. They want this app to interface with another application in

another domain. Which of the below configurations will make this possible?

Enable CORS for the App Service.

Enable Autoscale for the App Service.

Enable OAuth for the App Service.

Enable API Definition for the App Service.

Correct

Incorrect
Question 14 of 40

14. Question

Category: None

AZ104-Q841

You have an Azure subscription named Subscription1. Subscription! contains the resource groups in the

following table.

RG1 has a web app named WebApp1. WebApp1 is located in West Europe.

You move WebApp1 to RG2.

What is the effect of the move?

The App Service plan for WebApp1 remains in West Europe. Policy2 applies to WebApp1.

The App Service plan for WebApp1 moves to North Europe. Policy2 applies to WebApp1.

The App Service plan for WebApp1 remains in West Europe. Policy1 applies to WebApp1.

The App Service plan for WebApp1 moves to North Europe. Policy1 applies to WebApp1.

Correct

Incorrect
Question 15 of 40

15. Question

Category: None

AZ104-Q842

An Azure subscription named Subscription 1 contains three resource groups named Development, Test, and

Production. Thomas, Logan, and Guy have been assigned roles via role-based access controls (RBAC) to access

Subscription 1 resources.Logan can perform all read and write operations on all compute and storage resources

within the Development and Test resource groups. Guy is an owner of the Development and Test resource

groups. Thomas is an owner of Subscription 1.If necessary, who would be able to delete the entire Development

resource group and all resources within it?

Both Guy and Thomas

Only Thomas

Only Guy

Both Logan and Guy

Correct

Incorrect
Question 16 of 40

16. Question

Category: None

AZ104-Q843

You have an Azure subscription.

Users access the resources in the subscription from either home or from customer sites. From home, users must establish a point-to-site VPN to access the Azure resources. The users on the customer sites access the Azure resources by using site-to-site VPNs.

You have a line-of-business-app named App1 that runs on several Azure virtual machine. The virtual machines run Windows Server 2016.

You need to ensure that the connections to App1 are spread across all the virtual machines.

What are two possible Azure services that you can use? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

an internal load balancer

a public load balancer

an Azure Content Delivery Network (CDN)

Traffic Manager

an Azure Application Gateway

Correct

Incorrect
Question 17 of 40

17. Question

Category: None

AZ104-Q844

Which of the following statements correctly describes the difference between role-based access controls

(RBAC) and resource locks?

Resource locks apply a restriction across all users and roles

RBAC applies a restriction across all users and roles

Resource locks apply a restriction to users only

RBAC applies a restriction to roles only.

Correct

Incorrect
Question 18 of 40

18. Question

Category: None

AZ104-Q845

You have an Azure subscription.

You have 100 Azure virtual machines.

You need to quickly identify underutilized virtual machines that can have their service tier changed to a less expensive

offering.

Which blade should you use?

Monitor

Advisor

Metrics

Customer insights

Correct

Incorrect

Question 19 of 40

19. Question

Category: None

AZ104-Q846

You have an Azure subscription named Subscription1 that contains the storage accounts shown in the following table:

Name	Account kind	Azure service that contains data
storage1	Storage	File
storage2	StorageV2 (general purpose v2)	File, Table
storage3	StorageV2 (general purpose v2)	Queue
storage4	BlobStorage	Blob

You plan to use the Azure Import/Export service to export data from Subscription1.

You need to identify which storage account can be used to export the data.

What should you identify?

storage

storage2

storage3

storage4

Correct

Incorrect

Question 20 of 40

20. Question

Category: None
AZ104-Q847
1. You have an Microsoft Entra ID (Microsoft Entra ID) tenant named contoso.onmicrosoft.com.
  The User administrator role is assigned to a user named Admin1.
An external partner has a Microsoft account that uses the user1@outlook.com sign in.
Admin1 attempts to invite the external partner to sign in to the Microsoft Entra ID tenant and receives the following error message:
Unable to invite user user1@outlook.com "Generic authorization exception.

You need to ensure that Admin1 can invite the external partner to sign in to the Microsoft Entra ID tenant.
What should you do?
From the Users settings blade, modify the External collaboration settings.

From the Custom domain names blade, add a custom domain.

From the Organizational relationships blade, add an identity provider.

From the Roles and administrators blade, assign the Security administrator role to Admin1.
Correct

Incorrect
Question 21 of 40

21. Question

Category: None

AZ104-Q848

You have an Azure subscription that contains 10 virtual machines, a key vault named Vault1, and a network

security group (NSG) named NSG1. All the resources are deployed to the East US Azure region.

The virtual machines are protected by using NSG1. NSG1 is configured to block all outbound traffic to the internet.

You need to ensure that the virtual machines can access Vault1. The solution must use the principle of least privilege

and minimize administrative effort

What should you configure as the destination of the outbound security rule for NSG1?

an application security group

a service tag

an IP address range

Correct

Incorrect
Question 22 of 40

22. Question

Category: None

AZ104-Q849

You need to ensure that an Microsoft Entra ID (Microsoft Entra ID) user named Admin1 is assigned the

required role to enable Traffic Analytics for an Azure subscription.

Solution: You assign the Network Contributor role at the subscription level to Admin1.

Does this meet the goal?

Yes

No

Correct

Incorrect
Question 23 of 40

23. Question

Category: None

AZ104-Q850

You need to ensure that an Microsoft Entra ID (Microsoft Entra ID) user named Admin’ is assigned the

required role to enable Traffic Analytics for an Azure subscription.

Solution: You assign the Owner role at the subscription level to Admin1.

Does this meet the goal?

Yes

No

Correct

Incorrect
Question 24 of 40

24. Question

Category: None

AZ104-Q851

You have an Microsoft Entra ID (Microsoft Entra ID) tenant named contoso.com.

You have a CSV file that contains the names and email addresses of 500 external users.

You need to create a guest user account in contoso.com for each of the 500 external users.

Solution: From Microsoft Entra ID in the Azure portal, you use the Bulk invite users operation.

Does this meet the goal?

Yes

No

Correct

Incorrect
Question 25 of 40

25. Question

Category: None

AZ104-Q852

You have an Azure subscription that contains a user named User1.

You need to ensure that User1 can deploy virtual machines and manage virtual networks. The solution must use

the principle of least privilege.

Which role-based access control (RBAC) role should you assign to User1?

Owner

Virtual Machine Contributor

Contributor

Virtual Machine Administrator Login

Correct

Incorrect
Question 26 of 40

26. Question

Category: None

AZ104-Q853

You have an Azure App Services web app named App1.

You plan to deploy App1 by using Web Deploy.

You need to ensure that the developers of App1 can use their Microsoft Entra ID credentials to deploy content to App1.

The solution must use the principle of least privilege.

What should you do?

Assign the Owner role to the developers

Configure app-level credentials for FTPS

Assign the Website Contributor role to the developers

Configure user-level credentials for FTPS

Correct

Incorrect
Question 27 of 40

27. Question

Category: None

AZ104-Q854

You have an Azure subscription named Subscription’ that contains an Azure virtual machine named VM1. VM11 is

in a resource group named RG1.

VM1 runs services that will be used to deploy resources to RG1.

You need to ensure that a service running on VM1 can manage the resources in RG1 by using the identity of VM1.

What should you do first?

From the Azure portal, modify the Managed Identity settings of VM1

From the Azure portal, modify the Access control (IAM) settings of RG1

From the Azure portal, modify the Access control (IAM) settings of VM1

From the Azure portal, modify the Policies settings of RG1

Correct

Incorrect
Question 28 of 40

28. Question

Category: None

AZ104-Q855

You have an Azure subscription named Subscription1 that contains an Azure Log Analytics workspace named Workspace.

You need to view the error events from a table named Event.

Which query should you run in Workspace1?

select * from Event where EventType == “error”

Event | search “error”

Event | where EventType is “error”

Get-Event Event | where {$_.EventType == “error”}

Correct

Incorrect
Question 29 of 40

29. Question

Category: None

AZ104-Q856

You have an Azure DNS zone named adatum.com.

You need to delegate a subdomain named research.adatum.com to a different DNS server in Azure.

What should you do?

Create an NS record named research in the adatum.com zone.

Create a PTR record named research in the adatum.com zone.

Modify the SOA record of adatum.com.

Create an A record named *.research in the adatum.com zone.

Correct

Incorrect
Question 30 of 40

30. Question

Category: None

AZ104-Q857

You have two Azure subscriptions named Sub1 and Sub2.

An administrator creates a custom role that has an assignable scope to a resource group named RG1 in Sub1.

You need to ensure that you can apply the custom role to any resource group in Sub1 and Sub2. The solution must minimize administrative effort.

What should you do?

Select the custom role and add Sub1 and Sub2 to the assignable scopes. Remove RG1 from the assignable scopes.

Create a new custom role for Sub1. Create a new custom role for Sub2. Remove the role from RG1.

Create a new custom role for Sub1 and add Sub2 to the assignable scopes. Remove the role from RG1.

Select the custom role and add Sub1 to the assignable scopes. Remove RG1 from the assignable scopes. Create a new custom role for Sub2.

Correct

Incorrect

Question 31 of 40

31. Question

Category: None

AZ104-Q858

You have an Azure subscription that contains the following users in an Microsoft Entra ID tenant named contoso.onmicrosoft.com:

Name	Role	Scope
User1	Global administrator	Azure Active Directory
User2	Global administrator	Azure Active Directory
User3	User administrator	Azure Active Directory
User4	Owner	Azure Subscription

User1 creates a new Microsoft Entra ID tenant named external.contoso.onmicrosoft.com.

You need to create new user accounts in external.contoso.onmicrosoft.com.

Solution: You instruct User3 to create the user accounts.

Does that meet the goal?

Yes

Correct

Incorrect

Question 32 of 40

32. Question

Category: None

AZ104-Q859

You have an Azure subscription named Subscription1 that contains an Azure Log Analytics workspace named Workspace1.

You need to view the error events from a table named Event.

Which query should you run in Workspace1?

Get-Event Event | where {$_.EventType == “error”}

Event | search “error”

select * from Event where EventType == “error”

search in (Event) * | where EventType “eq” “error”

Correct

Incorrect

Question 33 of 40

33. Question

Category: None

AZ104-Q860

You have an Azure subscription that contains the following users in an Microsoft Entra ID tenant named contoso.onmicrosoft.com:

Name	Role	Scope
User1	Global administrator	Azure Active Directory
User2	Global administrator	Azure Active Directory
User3	User administrator	Azure Active Directory
User4	Owner	Azure Subscription

User1 creates a new Microsoft Entra ID tenant named external.contoso.onmicrosoft.com.

You need to create new user accounts in external.contoso.onmicrosoft.com.

Solution: You instruct User4 to create the user accounts.

Does that meet the goal?

Yes

Correct

Incorrect

Question 34 of 40

34. Question

Category: None

AZ104-Q861

You have a registered DNS domain named contoso.com.

You create a public Azure DNS zone named contoso.com.

You need to ensure that records created in the contoso.com zone are resolvable from the internet.

What should you do?

Create NS records in contoso.com.

Modify the SOA record in the DNS domain registrar.

Create the SOA record in contoso.com.

Modify the NS records in the DNS domain registrar.

Correct

Incorrect
Question 35 of 40

35. Question

Category: None

AZ104-Q862

You have 15 Azure subscriptions.

You have an Microsoft Entra ID (Microsoft Entra ID) tenant that contains a security group named Group1.

You plan to purchase additional Azure subscription.

You need to ensure that Group1 can manage role assignments for the existing subscriptions and the planned subscriptions. The solution must meet the following requirements:

– Use the principle of least privilege.

– Minimize administrative effort.

What should you do?

Assign Group1 the Owner role for the root management group.

Assign Group1 the User Access Administrator role for the root management group.

Create a new management group and assign Group1 the User Access Administrator role for the group.

Create a new management group and assign Group1 the Owner role for the group.

Correct

Incorrect
Question 36 of 40

36. Question

Category: None

AZ104-Q863

You have an Azure subscription that contains a storage account named storage1. The storage1 account contains a file

share named share1.

The subscription is linked to a hybrid Microsoft Entra ID (Microsoft Entra ID) tenant that contains a security group named

Group1.

You need to grant Group1 the Storage File Data SMB Share Elevated Contributor role for share1.

What should you do first?

Enable Active Directory Domain Service (AD DS) authentication for storage1.

Grant share-level permissions by using File Explorer.

Mount share1 by using File Explorer.

Create a private endpoint.

Correct

Incorrect
Question 37 of 40

37. Question

Category: None

AZ104-Q864

You have an Azure subscription named Subscription1 that contains a virtual network named VNet1. VNet1 is in a resource group named RG1.

Subscription has a user named User1. User1 has the following roles:

– Reader

– Security Admin

– Security Reader

You need to ensure that User1 can assign the Reader role for VNet1 to other users.

What should you do?

Remove User1 from the Security Reader role for Subscription1. Assign User1 the Contributor role for RG1.

Assign User1 the Owner role for VNet1.

Assign User1 the Contributor role for VNet1.

Assign User1 the Network Contributor role for VNet1.

Correct

Incorrect
Question 38 of 40

38. Question

Category: None

AZ104-Q865

You have three offices and an Azure subscription that contains an Microsoft Entra ID (Microsoft Entra ID)

tenant.

You need to grant user management permissions to a local administrator in each office.

What should you use?

Microsoft Entra ID roles

administrative units

access packages in Microsoft Entra ID entitlement management

Azure roles

Correct

Incorrect
Question 39 of 40

39. Question

Category: None

AZ104-Q866

You have an Microsoft Entra ID (Microsoft Entra ID) tenant.

You plan to delete multiple users by using Bulk delete in the Microsoft Entra ID admin center.

You need to create and upload a file for the bulk delete.

Which user attributes should you include in the file?

The user principal name and usage location of each user only

The user principal name of each user only

The display name of each user only

The display name and usage location of each user only

The display name and user principal name of each user only

Correct

Incorrect
Question 40 of 40

40. Question

Category: None

AZ104-Q867

You need to ensure that an Microsoft Entra ID (Microsoft Entra ID) user named Admin1 is assigned the

required role to enable Traffic Analytics for an Azure subscription.

Solution: You assign the Traffic Manager Contributor role at the subscription level to Admin1.

Does this meet the goal?

Yes

No

Correct

Incorrect

AZ104-Quiz23

Quiz Summary

Information

Results

Results

Categories

1. Question

2. Question

3. Question

4. Question

5. Question

6. Question

7. Question

8. Question

9. Question

10. Question

11. Question

12. Question

13. Question

14. Question

15. Question

16. Question

17. Question

18. Question

19. Question

20. Question

21. Question

22. Question

23. Question

24. Question

25. Question

26. Question

27. Question

28. Question

29. Question

30. Question

31. Question

32. Question

33. Question

34. Question

35. Question

36. Question

37. Question

38. Question

39. Question

40. Question