AZ104-Quiz25

Category: None

AZ104-Q908

You need to deploy an Azure virtual machine scale set that contains five instances as quickly as

possible.

What should you do?

Deploy five virtual machines. Modify the Availability Zones settings for each virtual machine.

Deploy five virtual machines. Modify the Size setting for each virtual machine.

Deploy one virtual machine scale set that is set to VM (virtual machines) orchestration mode.

Deploy one virtual machine scale set that is set to ScaleSetVM orchestration mode.

Category: None

AZ104-Q909

You have an Azure subscription named Subscription1. Subscription! contains a resource group named RG1.

RG1 contains resources that were deployed by using templates.

You need to view the date and time when the resources were created in RG1.

Solution: From the Subscriptions blade, you select the subscription, and then click Programmatic deployment.

Does this meet the goal?

Yes

No

Category: None

AZ104-Q910

You have an Azure subscription that contains the resources shown in the following table.

Name	Type	Region
RG1	Resource group	West US
RG2	Resource group	East Asia
storage1	Storage account	West US
storage2	Storage account	East Asia
VM1	Virtual machine	West US
VNET1	Virtual network	West US
VNET2	Virtual network	East Asia

VM1 connects to VNET1.
You need to connect VM1 to VNET2.
Solution: You create a new network interface, and then you add the network interface to VM1.
Does this meet the goal?

Yes

No

Category: None

AZ104-Q911

You have an Microsoft Entra ID (Microsoft Entra ID) tenant named adatum.com that contains the users shown in the following table.

Name	Role
User1	None
User2	Global administrator
User3	Cloud device administrator
User4	Intune administrator

Adatum.com has the following configurations:
⇨ Users may join devices to Microsoft Entra ID is set to User1.
⇨ Additional local administrators on Microsoft Entra ID joined devices is set to None.

You deploy Windows 10 to a computer named Computer1. User1 joins Computer1 to adatum.com.
You need to identify the local Administrator group membership on Computer1.

Which users are members of the local Administrators group?

User1 only

User2 only

User1 and User2 only

User1, User2, and User3 only

User1, User2, User3, and User4

Category: None

AZ104-Q912

Which of the following is a tool suited to visually analyzing Azure Search logs and metrics data?

Power BI

Power Data

Excel

PowerShell

Category: None

AZ104-Q913

There are several mission-critical network connections between Azure laaS Virtual Machines and Azure

service endpoints in your Azure production environment. The connection health between these VMs and Azure

endpoints needs to be continuously, automatically checked, and provide an alert if specific metrics approach

unhealthy thresholds.

Which Azure Network Watcher feature would be ideal in this case?

Connection Troubleshoot

IP Flow Verify

Connection Monitor

Traffic Analytics

Category: None

AZ104-Q914

You have a large amount (100 TB) of archival data that needs to be retained for several years, due to compliance

requirements. You determined that Azure Storage is the best data storage solution for this dataset. Your office is

connected to the internet over a low bandwidth connection that is heavily utilized. What Azure storage tool could help

you move this data to Azure?

Azure Storage Explorer

Azure CLI / Azure PowerShell

AzCopy

Azure Import/Export

Category: None

AZ104-Q915

Which of the following choices are true about Azure Storage encryption at rest? (Choose 2 answers)

Azure Storage encryption is two-way encryption with asymmetric keys.

Azure Storage encryption is managed transparently by Azure.

Azure Storage encryption is one-way encryption with asymmetric keys.

Azure Storage encryption is two-way encryption with symmetric keys.

Category: None

AZ104-Q916

What should you do to configure gateway traffic to flow from spoke to hub and connect to remote networks?

Allow all peering connections between the hub and spokes

Allow no peering connections

Configure the peering connection in the hub to allow gateway transit, and then configure the peering connection in each spoke to use remote gateways.

Configure the peering connection in the hub to allow gateway transit, the peering connection in each spoke to use remote gateways, and configure all peering connections to allow forwarded traffic.

Category: None

AZ104-Q917

A company’s current on-premise application runs on TCP protocol. The company has decided to move this

application to Azure, and to use a cloud-based load balancer of some kind set up in Azure for the application. How would

you efficiently set up a load balancer for this application?

Create an Application Gateway. Add the necessary configuration to load balance the application based on the TCP protocol.

Create a NAT Instance. Route the traffic via the NAT instance to a custom load balancer.

Use Azure Load Balancer with the necessary configuration to load balance the application based on the TCP protocol.

Use Azure Load Balancer, but change the application to use the HTTP protocol since there is no support for TCP in Azure Load Balancers.

Category: None

AZ104-Q918

To specify that one resource must be created before another resource, what element do you need to use in an

Azure Resource Manager (ARM) template?

linked

prerequisite

required

dependsOn

Category: None

AZ104-Q919

To allow a value in an Azure Resource Manager (ARM) template to be set on the command line when the template

is used to deploy resources, which of the following would you need to create?

Variable

Function

Parameter

Copy element

Category: None

AZ104-Q920

Which of the following is not part of the default metrics for Azure Virtual machines when using the Azure

Monitor service?

PercentageCPU

Disk Read Bytes

Memory Consumed

Network Out

Category: None

AZ104-Q921

Your application requires a high number of IOPS to satisfy minimum performance thresholds. You have selected

Premium disks, and are now reviewing replication options.

Which replication options offer the most redundancy, based on your selection of Premium disks? (Choose 2 answers)

LRS

GRS

RA-GRS

ZRS

Category: None

AZ104-Q922

Which feature in Microsoft Entra ID allows you to restrict access to devices and applications based on

predefined rules?

Role-Based Access and Control (RBAC)

Multi-Factor Authentication (MFA)

Conditional Access

Microsoft Entra ID Connect

Category: None

AZ104-Q923

Your organization has a Microsoft 365 tenant and an Microsoft Entra ID (Microsoft Entra ID) tenant named

organization1.com. The company uses several Azure Files shares. Each share is assigned to a different department in

the organization. The department attribute in Microsoft Entra ID is populated for all users.

You need to ensure that the users can access the departmental file shares. Your solution must minimize administrative

effort.

Which types of groups should you use? (Choose 2 answers)

A security group that uses the dynamic membership type

A distribution group

A Microsoft 365 group that uses the dynamic membership type

A Microsoft 365 group that uses the assigned membership type

Category: None

AZ104-Q924

You would like to implement a hub-and-spoke VNet peering connection between two of your virtual networks,

VNet1 in the East US region and VNet2 in the East US-2 region, using a network virtual appliance (NVA).

You have deployed VNet3 to serve as the network hub, and a custom Linux virtual machine in VNet3 to serve as the

NVA.

How should you configure the peering connections between the VNets with this particular hub-and-spoke

architecture?

Configure all peering connections to allow forwarded traffic.

Configure peering connections directed to the hub network (VNet3) to allow gateway transit.

Configure peering connections directed to the spoke networks (VNet1 and VNet2) to use remote gateways.

Configure peering connections directed to the hub network (VNet3) to use remote gateways. Configure all other peering connections to allow gateway transit.

Category: None

AZ104-Q925

Which AKS Service type supports public IP addresses and port numbers to allow direct access to AKS nodes by

incoming traffic?

ClusterlP Service type

NodePort Service type

LoadBalancer Service type

ExternalName Service type

Category: None

AZ104-Q926

You would like to implement a Hub-and-Spoke VNet peering connection between two existing VNets in the East US

region, (VNet 1 and VNet2), without using a network virtual appliance. You want resources in VNet1 and VNet2 to be

able to communicate.

You have deployed VNet3 in the East US region that will serve as a hub between the other VNets. VNet1 and VNet2

should be able to communicate with each other through VNet3 using a VPN virtual network gateway.

Which VNet peering connections should be configured to allow all forwarded traffic?

All peering connections between the hub and spokes

No peering connections

Only peering connections directed to VNet3 as the hub

Only peering connections directed to VNet1 and VNet2 as the spokes

Category: None

AZ104-Q927

Your work for a company with an Azure subscription.

You have created multiple management groups under your Root Management Group. You are modifying the

management groups and want to unlink a subscription and a management group without deleting either the

subscription or the management group.

Which PowerShell cmdlet should you use?

Remove_AzManagementGroup

Remove_AzManagementGroupSubscription

Update_AzManagmentGroup

New_AzManagementGroupDeployment

Category: None

AZ104-Q928

Your organization wants to connect two Azure networks using an Azure VPN Gateway. Which connection

method can you implement to meet this requirement?

An Azure Hybrid network

An Azure Accelerated Network

A VNet Peering connection

A VNet-to-VNet connection

Category: None

AZ104-Q929

You are investigating Azure Storage replication options to discover when you get the read and write access to the

remote replica.

Which statement regarding read and write access to Azure Storage replicas is correct?

No matter which replication option you’ve selected for your Azure Storage account, you gain read and write access to the remote replica when you initiate failover.

If you have configured RA-GRS replication for your Azure Storage account, you always have read and write access to the Azure Storage account’s replica.

No matter which replication option you’ve selected, once Azure fails over to the account’s remote sites, then you are granted write access to the replicated data.

If you have configured GRS or RA-GRS replication for your Azure Storage account, you always have read and write access to the Azure Storage account’s replica.

Category: None

AZ104-Q930

With a web application deployed to Azure Web Apps, a company wants to start deploying rolling updates, but at the

same time, they want to test the updates on the Azure environment before promoting the app to production.

Which of the approaches below would help fulfill their requirements?

Create a virtual machine and re-create the web application there. Deploy the updates, test the application and then deploy it to production.

Create an on-premise virtual machine and re-create the web application there. Deploy the updates, test the application and then deploy it to production.

Create a deployment slot and configure the app on this slot. Test the app, then swap the slots.

Create a separate web app, then deploy and test it. Then deploy the web app with the updates to the production site using Visual Studio.

Category: None

AZ104-Q931

Which of the following can be used to easily remove a resource lock?

Resourceld

Applicationld

Userld

Systemld

Category: None

AZ104-Q932

You are an Microsoft Entra IDministrator for a company with 10 different departments.

The company has an Azure subscription that contains 400 virtual machines (VMs). Users in each department use

only their department’s virtual machines.

You need to apply resource tags for each department to the virtual machines.

Which of these should you use? (Choose two answers.)

App registrations

Microsoft Entra IDvisor

PowerShell

Azure Resource Manager (ARM) templates

Category: None

AZ104-Q933

Your organization has a custom line-of-business (LOB) application that uses several Azure resources. All of the

LOB application resources are in the same resource group.

You want to create a template for the resource group currently being used by the LOB application.

What should you do?

Use the Get-AzResourceGroupDeployment cmdlet.

Use the Export-AzResrouceGroup cmdlet.

Use the Save-AzResourceGroupDeploymentTemplate cmdlet.

Use the Get-AzResourceGroupDeploymentOperation cmdlet.

Category: None

AZ104-Q934

What does placing your virtual machines into an availability set accomplish regarding failures or outages?

It limits the impact of potential physical hardware failures.

It prevents hardware failures.

It may limit the impact of network outages in the future.

It protects your application from failures, power outages or anything else.

Category: None

AZ104-Q935

You are a cost-sensitive IT administrator, and want to turn off your virtual machines at night to save money.

What is a recommended method to do this?

Create an operating system script that will turn off instances at the OS level, resulting in the VM state “Stopped.”

Stop VMs from the Azure portal or using Azure Automation, resulting in the VM state “Stopped (Deallocated)”

Shutting down your VMs either through an operating system script or using the Azure Portal will work, as long as the VM state is “Stopped” or “Stopped (Deallocated).

Stop VMs using Azure Command Line Interface, resulting in the VM state “Stopped.”

Category: None

AZ104-Q936

What Azure network resource can allow or deny layer-3 traffic based on a series of security rules, and can also

be directly applied to virtual machines, subnets, or network interface cards attached to virtual machines?

Network Security Groups

Access Control Lists

Azure Firewalls

Application Gateways

Category: None

AZ104-Q937

You want to configure an Azure storage account to be accessible from only one Virtual Network in your Azure

Virtual Network (VNet). The storage account should not be accessible from other networks or regions across your

company’s Azure subscription.

What should you do to implement this requirement?

Activate the Secure transfer required option.

Add a network security group.

Create a VNet service endpoint.

Deploy Azure Traffic Manager.

Category: None

AZ104-Q938

What statement accurately describes an Azure Function trigger requirement?

A trigger provides a declarative way to connect to data from within your code.

A function must have exactly one trigger.

Manual invocation of triggers should be used whenever possible for more control.

Triggers should be used to simplify the coding for input and output data.

Category: None

AZ104-Q939

In addition to the high availability offered by multi-region deployment, what benefits does deployment within

paired Azure regions offer? (Choose 2 answers)

Added stability during planned updates

Prioritized system recovery from an outage

Reduced multi-region deployment costs

Cross region system intercommunication (CRSI) is enabled

Category: None

AZ104-Q940

What compute service does Azure Functions provide?

Batch computing within the Azure cloud

Serverless computing within the Azure Cloud

Real-time data stream processing

Azure virtual machine management services

Category: None

AZ104-Q941

A company is looking at using the Azure Media services to deliver their video content. They have users

distributed in many geographic locations. They want to deliver the video content so that the users have the least

latency when viewing the video content. Which of the below options can help them achieve this purpose?

Create storage accounts in separate locations and store the video content for previewing in the user’s location

Create Azure SQL Databases in separate locations and store the video content for previewing in the user’s location

Use the Azure CDN service along with the Azure Media Services

Create multiple Azure Media Services in the different geographic locations.

Category: None

AZ104-Q942

You have an Azure subscription named Subscription1 that has the following providers registered:
⇨ Authorization
⇨ Automation
⇨ Resources
⇨ Compute
⇨ KeyVault
⇨ Network
⇨ Storage
⇨ Billing
⇨ Web

Subscription1 contains an Azure virtual machine named VM1 that has the following configurations:
⇨ Private IP address: 10.0.0.4 (dynamic)
⇨ Network security group (NSG): NSG1
⇨ Public IP address: None
⇨ Availability set: AVSet
⇨ Subnet: 10.0.0.0/24
⇨ Managed disks: No
⇨ Location: East US

You need to record all the successful and failed connection attempts to VM1.

Which three actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

Enable Azure Network Watcher in the East US Azure region.

Add an Azure Network Watcher connection monitor.

Register the MicrosoftLogAnalytics provider.

Create an Azure Storage account.

Register the Microsoft.Insights resource provider.

Enable Azure Network Watcher flow logs

Category: None

AZ104-Q943

You plan to create the Azure web apps shown in the following table.

Name	Runtime stack
WebApp1	.NET Core 3.1 (LTS)
WebApp2	ASP.NET V 4.8
WebApp3	PHP 7.3
WebApp4	Ruby 2.6

What is the minimum number of App Service plans you should create for the web apps?

1

2

3

4

Category: None

AZ104-Q944

You plan to automate the deployment of a virtual machine scale set that uses the Windows Server 2016 Datacenter image.

You need to ensure that when the scale set virtual machines are provisioned, they have web server components installed.

Which two actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

Upload a configuration script

Create an automation account

Create an Azure policy

Modify the extensionProfile section of the Azure Resource Manager template

Create a new virtual machine scale set in the Azure portal

Category: None

AZ104-Q945

You have an Azure Resource Manager template named Template1 that is used to deploy an Azure virtual machine.

Template1 contains the following text:

“location”: {
“type”: “String”,
“defaultValue”: “eastus”,
“allowedValues”: [
“canadacentral”,
“eastus”,
“westeurope”,
“westus”
]
}

The variables section in Template1 contains the following text:

“location”: “westeurope”

The resources section in Template1 contains the following text:

“type”: “Microsoft.Compute/virtualMachines”,
“apiVersion”: “2018-10-01”,
“name”: “[variables(‘vmName’)]”,
“location”: “westeurope”,

You need to deploy the virtual machine to the West US location by using Template1.
What should you do?

Modify the location in the resources section to westus

Select West US during the deployment

Modify the location in the variables section to westus

Category: None

AZ104-Q946

You have an Azure virtual machine named VM1 and an Azure key vault named Vault1.

On VM1, you plan to configure Azure Disk Encryption to use a key encryption key (KEK).

You need to prepare Vault1 for Azure Disk Encryption.

Which two actions should you perform on Vault1? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

Select Azure Virtual machines for deployment.

Create a new key.

Create a new secret.

Configure a key rotation policy.

Select Azure Disk Encryption for volume encryption.

Category: None

AZ104-Q947

You have an Azure subscription that contains a virtual machine named VM1 and an Azure key vault named KV1.

You need to configure encryption for VM1. The solution must meet the following requirements:

* Store and use the encryption key in KV1.

* Maintain encryption if VM1 is downloaded from Azure.

* Encrypt both the operating system disk and the data disks.

Which encryption method should you use?

customer-managed keys

Confidential disk encryption

Azure Disk Encryption

encryption at host

Quiz Summary

Information

Results

Results

Categories

1. Question

2. Question

3. Question

4. Question

5. Question

6. Question

7. Question

8. Question

9. Question

10. Question

11. Question

12. Question

13. Question

14. Question

15. Question

16. Question

17. Question

18. Question

19. Question

20. Question

21. Question

22. Question

23. Question

24. Question

25. Question

26. Question

27. Question

28. Question

29. Question

30. Question

31. Question

32. Question

33. Question

34. Question

35. Question

36. Question

37. Question

38. Question

39. Question

40. Question