AZ104-Quiz26

Time limit: 0

Quiz Summary

0 of 40 Questions completed

Questions:

Information

You have already completed the quiz before. Hence you can not start it again.

Quiz is loading…

You must sign in or sign up to start the quiz.

You must first complete the following:

Results

Quiz complete. Results are being recorded.

Results

0 of 40 Questions answered correctly

Your time:

Time has elapsed

You have reached 0 of 0 point(s), (0)

Earned Point(s): 0 of 0, (0)
0 Essay(s) Pending (Possible Point(s): 0)

Categories

None 0%

Current
Review
Answered
Correct
Incorrect

Question 1 of 40

1. Question

Category: None

AZ104-Q948

You have an Azure subscription that contains a storage account named storage1. The storage! account contains a

container named container.

You need to configure access to container1. The solution must meet the following requirements:

* Only allow read access.

* Allow both HTTP and HTTPS protocols.

+ Apply access permissions to all the content in the container.

What should you use?

an access policy

a shared access signature (SAS)

Azure Content Delivery Network (CDN)

access keys

Correct

Incorrect
Question 2 of 40

2. Question

Category: None

AZ104-Q949

You need to create an Azure Storage account named storage1. The solution must meet the following requirements:

* Support Azure Data Lake Storage.

* Minimize costs for infrequently accessed data.

« Automatically replicate data to a secondary Azure region.

Which three options should you configure for storage1? Each correct answer presents part of the solution.

NOTE: Each correct answer is worth one point.

zone-redundant storage (ZRS)

the Cool access tire

geo-redundant storage (GRS)

the Hot access tier

hierarchical namespace

Correct

Incorrect
Question 3 of 40

3. Question

Category: None

AZ104-Q950

You plan to create an Azure Storage account named storage1 that will contain a file share named share1.

You need to ensure that share1 can support SMB Multichannel. The solution must minimize costs.

How should you configure storage?

Premium performance with locally-redundant storage (LRS)

Standard performance with zone-redundant storage (ZRS)

Premium performance with geo-redundant storage (GRS)

Standard performance with locally-redundant storage (LRS)

Correct

Incorrect
Question 4 of 40

4. Question

Category: None

AZ104-Q951

You have an Azure subscription named Subscription1.

You have 5 TB of data that you need to transfer to Subscription1.

You plan to use an Azure Import/Export job.

What can you use as the destination of the imported data?

Azure Data Lake Storage

Azure File Storage

Azure SQL Database

the Azure File Sync Storage Sync Service

Correct

Incorrect
Question 5 of 40

5. Question

Category: None

AZ104-Q952

You have an Azure subscription that contains a storage account named storage1.

You plan to use conditions when assigning role-based access control (RBAC) roles to storage1.

Which storage1 services support conditions when assigning roles?

containers only

file shares only

tables only

queues only

containers and queues only

files shares and tables only

Correct

Incorrect
Question 6 of 40

6. Question

Category: None

AZ104-Q953

You plan to deploy several Azure virtual machines that will run Windows Server 2019 in a virtual machine scale set by

using an Azure Resource Manager template.

You need to ensure that NGINX is available on all the virtual machines after they are deployed.

What should you use?

the Publish-AzVMDscConfiguration cmdlet

Azure Application Insights

a Desired State Configuration (DSC) extension

Microsoft Entra ID Application Proxy

Correct

Incorrect
Question 7 of 40

7. Question

Category: None

AZ104-Q954

You have an Azure Storage account that contains 5,000 blobs accessed by multiple users.

You need to ensure that the users can view only specific blobs based on blob index tags.

What should you include in the solution?

arole assignment condition

a stored access policy

just-in-time (JIT) VM access

a shared access signature (SAS)

Correct

Incorrect
Question 8 of 40

8. Question

Category: None

AZ104-Q955

You have an Azure Storage account named storage1.

For storage1, you create an encryption scope named Scope1.

Which storage types can you encrypt by using Scope?

file shares only

containers only

file shares and containers only

containers and tables only

file shares, containers, and tables only

file shares, containers, tables, and queues

Correct

Incorrect
Question 9 of 40

9. Question

Category: None

AZ104-Q956

You have an Azure subscription that contains a storage account named storage1.

You plan to create a blob container named container1.

You need to use customer-managed key encryption for container1.

Which key should you use?

an EC key that uses the P-384 curve only

an EC key that uses the P-521 curve only

an EC key that uses the P-384 curve or P-521 curve only

an RSA key with a key size of 4096 only

an RSA key type with a key size of 2048, 3072, or 4096 only

Correct

Incorrect
Question 10 of 40

10. Question

Category: None

AZ104-Q957

You have an Azure subscription named Subscription1.

You have 5 TB of data that you need to transfer to Subscription1.

You plan to use an Azure Import/Export job.

What can you use as the destination of the imported data?

Azure Blob Storage

Azure Data Lake Storage

Azure SQL Database

a virtual machine

Correct

Incorrect
Question 11 of 40

11. Question

Category: None

AZ104-Q958

You have an Azure subscription. The subscription contains a storage account named storage] that has the lifecycle

management rules shown in the following table. If base blobs were last modified more

than (days)

On June 1, you store a blob named File1 in the Hot access tier of storage1.

What is the state of File1 on June 7?

stored in the Cool access tier

stored in the Archive access tier

stored in the Hot access tier

deleted

Correct

Incorrect
Question 12 of 40

12. Question

Category: None

AZ104-Q959

You have an Azure subscription named Subscription1.

You have 5 TB of data that you need to transfer to Subscription1.

You plan to use an Azure Import/Export job.

What can you use as the destination of the imported data?

an Azure Cosmos DB database

Azure Data Lake Storage

Azure Blob storage

Azure Data Factory

Correct

Incorrect
Question 13 of 40

13. Question

Category: None

AZ104-Q960

You have an Azure subscription named Subscription1.

You have 5 TB of data that you need to transfer to Subscription1.

You plan to use an Azure Import/Export job.

What can you use as the destination of the imported data?

an Azure Cosmos DB database

Azure Blob Storage

Azure SQL Database

the Azure File Sync Storage Sync Service

Correct

Incorrect
Question 14 of 40

14. Question

Category: None

AZ104-Q961

You have two Azure virtual machines named VM1 and VM2. You have two Recovery Services vaults named

RSV1 and RSV2.

VM2 is backed up to RSV1.

You need to back up VM2 to RSV2.

What should you do first?

From the RSV1 blade, click Backup items and stop the VM2 backup

From the RSV2 blade, click Backup. From the Backup blade, select the backup for the virtual machine, and then click Backup

From the VM2 blade, click Disaster recovery, click Replication settings, and then select RSV2 as the Recovery Services vault

From the RSV1 blade, click Backup Jobs and export the VM2 job

Correct

Incorrect
Question 15 of 40

15. Question

Category: None

AZ104-Q962

You have an Azure subscription that contains a storage account named account1.

You plan to upload the disk files of a virtual machine to account1 from your on-premises network. The on-premises network uses a

public IP address space of

131.107.1.0/24.

You plan to use the disk files to provision an Azure virtual machine named VM1. VM11 will be attached to a virtual network named

VNet1. VNet1 uses an IP address space of 192.168.0.0/24.

You need to configure account1 to meet the following requirements:

c® Ensure that you can upload the disk files to account1.

c® Ensure that you can attach the disks to VM1.

c® Prevent all other access to account1.

Which two actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

From the Networking blade of account1, select Selected networks.

From the Networking blade of account1, select Allow trusted Microsoft services to access this storage account.

From the Networking blade of account1, add the 131.107.1.0/24 IP address range.

From the Networking blade of account1, add VNet1.

From the Service endpoints blade of VNet1, add a service endpoint.

Correct

Incorrect
Question 16 of 40

16. Question

Category: None

AZ104-Q963

You have Azure subscription that includes data in followinglocations:

Name Type

container1 Blob container

share1 Azure files share

DB1 SQL database

Table1 Azure Table

You plan to export data by using Azure import/export job named Export1.

You need to identify the data that can be exported by using Export. |sharet | Azure files share

Which data should you identify? SQL database

Table1 Azure Table

DB1

container1

share

Table1

Correct

Incorrect
Question 17 of 40

17. Question

Category: None

AZ104-Q964

You have an Azure subscription that contains the resources in the following table.

Name Type

RG1 Resource group

store1 Azure Storage account

Sync1 Azure File Sync

Store1 contains a file share named data. Data contains 5,000 files.

You need to synchronize the files in the file share named data to an on-premises server named Server1.

Which three actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

Create a container instance

Register Server1

Install the Azure File Sync agent on Server

Download an automation script

Create a sync group

Correct

Incorrect

Name	Type
container1	Blob container
share1	Azure files share
DB1	SQL database
Table1	Azure Table

Name	Type
RG1	Resource group
store1	Azure Storage account
Sync1	Azure File Sync

Question 18 of 40

18. Question

Category: None

AZ104-Q965

Your on-premises network contains a VPN gateway.

You have an Azure subscription that contains the resources shown in the following table.

Name	Type	Description
vgw1	Virtual network gateway	Gateway for Site-to-Site VPN to the on-premises network
storage1	Storage account	Standard performance tier
Vnet1	Virtual network	Enabled forced tunneling
VM1	Virtual machine	Connected to Vnet1

You need to ensure that all the traffic from VM1 to storage1 travels across the Microsoft backbone network.

What should you configure?

Microsoft Entra ID Application Proxy

private endpoints

a network security group (NSG)

Azure Peering Service

Correct

Incorrect

Question 19 of 40

19. Question

Category: None

AZ104-Q966

Your on-premises network contains a VPN gateway.

You have an Azure subscription that contains the resources shown in the following table.

Name	Type	Description
vgw1	Virtual network gateway	Gateway for Site-to-Site VPN to the on-premises network
storage1	Storage account	Standard performance tier
Vnet1	Virtual network	Enabled forced tunneling
VM1	Virtual machine	Connected to Vnet1

You need to ensure that all the traffic from

VM1 to storage1 travels across the Microsoft backbone network.

What should you configure? Enabled forced tunneling

Microsoft Entra ID Application Proxy

service endpoints

a network security group (NSG)

Azure Firewall

Correct

Incorrect

Question 20 of 40

20. Question

Category: None

AZ104-Q967

You have an Azure subscription named Sub1 that contains the resources shown in the following table.

Name Type

MG1 Management group

RG1 Resource group

VM1 Virtual machine

You create a user named Admin1.

To what can you add Admin1 as a co-administrator?

RG1

MG1

Sub1

VM1

Correct

Incorrect
Question 21 of 40

21. Question

Category: None

AZ104-Q968

You have an Azure subscription named Subscription1 that contains virtual network named VNet1. VNet1 is in a resource

group named RG1.

A user named User1 has the following roles for Subscription1:

+ Reader

* Security Admin

* Security Reader

You need to ensure that User1 can assign the Reader role for VNet1 to other users.

What should you do?

Assign User1 the Contributor role for VNet1.

Assign User1 the Network Contributor role for VNet1.

Assign User1 the User Access Administrator role for VNet1.

Remove User1 from the Security Reader and Reader roles for Subscription1. Assign User1 the Contributor role for Subscription1.

Correct

Incorrect
Question 22 of 40

22. Question

Category: None

AZ104-Q969

You have an Azure subscription named Subscription1 that contains virtual network named VNet1. VNet1 is in a resource

group named RG1.

User named User1 has the following roles for Subscription1:

+ Reader

* Security Admin

* Security Reader

You need to ensure that User1 can assign the Reader role for VNet1 to other users.

What should you do?

Remove User1 from the Security Reader and Reader roles for Subscription1. Assign User1 the Contributor role for Subscription1.

Remove User1 from the Security Reader role for Subscription1. Assign User1 the Contributor role for RG1.

Assign User1 the Network Contributor role for VNet1.

Assign User1 the User Access Administrator role for VNet1.

Correct

Incorrect
Question 23 of 40

23. Question

Category: None

AZ104-Q970

You have an Azure subscription that contains the resources shown in the following table.

Name Description

RG1 Resource group

RG2 Resource group

storage1 Storage account in RG1

Workspace1 Azure Synapse Analytics workspace in RG2

You need to assign Workspace1 a role to allow read, write, and delete operations for the data stored in the

containers of storage1.

Which role should you assign?

Storage Account Contributor

Contributor

Storage Blob Data Contributor

Reader and Data Access

Correct

Incorrect
Question 24 of 40

24. Question

Category: None

AZ104-Q971

You have an Microsoft Entra ID tenant that contains the groups shown in the following table.

Name Type Security

Group1 Security Enabled

Group2 Mail-enabled security Enabled

Group3 Microsoft 365 Enabled

Group4 Microsoft 365 Disabled

You purchase Microsoft Entra ID Premium P2 licenses.

To which groups can you assign a license?

Group1 only

Group1 and Group3 only

Group3 and Group4 only

Group1, Group2, and Group3 only

Group1, Group2, Group3, and Group4

Correct

Incorrect
Question 25 of 40

25. Question

Category: None

AZ104-Q972

You have an Azure subscription that contains the resources shown in the following

table.

Name Description

share1 File share in storage1

storage1 Storage account

User1 Azure AD user

You need to assign User the Storage File Data SMB Share Contributor role for share1.

What should you do first?

Enable identity-based data access for the file shares in storage1.

Modify the security profile for the file shares in storage1.

Select Default to Microsoft Entra ID authorization in the Azure portal for storage.

Configure Access control (IAM) for share1.

Correct

Incorrect
Question 26 of 40

26. Question

Category: None

AZ104-Q973

You are planning to deploy an Ubuntu Server virtual machine to your company’s Azure subscription.

You are required to implement a custom deployment that includes adding a particular trusted root certification

authority (CA).

Which of the following should you use to create the virtual machine?

The New-AzureRmVm cmdlet.

The New-AzVM cmdlet.

The Create-AzVM cmdlet.

The az vm create command.

Correct

Incorrect
Question 27 of 40

27. Question

Category: None

AZ104-Q974

Which statements regarding resource tagging is false? (Choose 2 answers)

Tagging a resource requires write access permission for the resource type.

Tags to a resource group are inherited by resources within the group

Tags cannot be applied to Azure Classic deployment resources.

After a resource group has been tagged, any new resources added to the resource group inherit the resource group’s tags.

Correct

Incorrect

Name	Type
MG1	Management group
RG1	Resource group
VM1	Virtual machine

Name	Description
RG1	Resource group
RG2	Resource group
storage1	Storage account in RG1
Workspace1	Azure Synapse Analytics workspace in RG2

Name	Type	Security
Group1	Security	Enabled
Group2	Mail-enabled security	Enabled
Group3	Microsoft 365	Enabled
Group4	Microsoft 365	Disabled

Name	Description
share1	File share in storage1
storage1	Storage account
User1	Azure AD user

Question 28 of 40

28. Question

Category: None

AZ104-Q975

You have an Azure subscription named Subscription that contains the resources shown in the following table.

Name	Type	Region	Resource group
RG1	Resource group	West Europe	Not applicable
RG2	Resource group	North Europe	Not applicable
Vault1	Recovery Services vault	West Europe	RG1

You create virtual machines in Subscription1 as shown in the following table.

Name	Resource group	Region	Operating system
VM1	RG1	West Europe	Windows Server 2016
VM2	RG1	North Europe	Windows Server 2016
VM3	RG2	West Europe	Windows Server 2016
VMA	RG1	West Europe	Ubuntu Server 18.04
VMB	RG1	North Europe	Ubuntu Server 18.04
VMC	RG2	West Europe	Ubuntu Server 18.04

You plan to use Vault1 for the backup of as many virtual machines as possible.

Which virtual machines can be backed up to Vault1?

VM1 only

VM3 and VMC only

VM1, VM2, VM3, VMA, VMB, and VMC

VM1, VM3, VMA, and VMC only

VM1 and VM3 only

Correct

Incorrect

Question 29 of 40

29. Question

Category: None

AZ104-Q976

Your company has serval departments. Each department has a number of virtual machines (VMs).

The company has an Azure subscription that contains a resource group named RG1.

All VMs are located in RG1.

You want to associate each VM with its respective department.

What should you do?

Create Azure Management Groups for each department.

Create a resource group for each department.

Assign tags to the virtual machines.

Modify the settings of the virtual machines.

Correct

Incorrect
Question 30 of 40

30. Question

Category: None

AZ104-Q977

You have an Azure Directory (Microsoft Entra ID) tenant named Adatum and an Azure Subscription named

Subscription1. Adatum contains a group named Developers.

Subscription1 contains a resource group named Dev.

You need to provide the Developers group with the ability to create Azure logic apps in the Dev resource group.

Solution: On Dev, you assign the Logic App Contributor role to the Developers group.

Does this meet the goal?

Yes

No

Correct

Incorrect

Question 31 of 40

31. Question

Category: None

AZ104-Q978

You have an Azure subscription that contains a resource group named TestRG.

You use TestRG to validate an Azure deployment.

TestR6 contains the following resources:

Name	Type	Description
VM1	Virtual Machine	VM1 is running and configured to back up to Vault1 daily
Vault1	Recovery Services Vault	Vault1 includes all backups of VM1
VNET1	Virtual Network	VNET1 has a resource lock of type Delete

You need to delete TestRG.

What should you do first?

Modify the backup configurations of VM1 and modify the resource lock type of VNET1

Remove the resource lock from VNET1 and delete all data in Vault1

Turn off VM1 and remove the resource lock from VNET1

Turn off VM1 and delete all data in Vault1

Correct

Incorrect

Question 32 of 40

32. Question

Category: None

AZ104-Q979

You have an Azure subscription linked to an Microsoft Entra ID tenant. The tenant includes a user account named

User.

You need to ensure that User1 can assign a policy to the tenant root management group.

What should you do?

Assign the Owner role for the Azure Subscription to User1, and then modify the default conditional access policies.

Assign the Owner role for the Azure subscription to User1, and then instruct User1 to configure access management for Azure resources.

Assign the Global administrator role to User1, and then instruct User1 to configure access management for Azure resources.

Create a new management group and delegate User1 as the owner of the new management group.

Correct

Incorrect
Question 33 of 40

33. Question

Category: None

AZ104-Q980

You have an Azure policy as shown in the following exhibit:

What is the effect of the policy?

You are prevented from creating Azure SQL servers anywhere in Subscription 1.

You can create Azure SQL servers in ContosoRG1 only.

You are prevented from creating Azure SQL Servers in ContosoRG1 only.

You can create Azure SQL servers in any resource group within Subscription 1.

Correct

Incorrect
Question 34 of 40

34. Question

Category: None

AZ104-Q981

Your company’s Azure subscription includes Azure virtual machines (VMs) that run Windows Server 2016.

One of the VMs is backed up every day using Azure Backup Instant Restore.

When the VM becomes infected with data encrypting ransomware, you are required to restore the VM.

Which of the following actions should you take?

You should restore the VM after deleting the infected VM.

You should restore the VM to any VM within the company’s subscription.

You should restore the VM to a new Azure VM.

You should restore the VM to an on-premise Windows device.

Correct

Incorrect
Question 35 of 40

35. Question

Category: None

AZ104-Q982

Your company has several departments. Each department has a number of virtual machines (VMs). The company has

an Azure subscription that contains a resource group named RG1.

All VMs are located in RG1.

You want to associate each VM with its respective department.

What should you do?

Create Azure Management Groups for each department.

Create a resource group for each department.

Assign tags to the virtual machines.

Modify the settings of the virtual machines.

Correct

Incorrect
Question 36 of 40

36. Question

Category: None

AZ104-Q983

Your company has an Microsoft Entra ID (Microsoft Entra ID) subscription. You want to implement an Microsoft Entra ID

conditional access policy.

The policy must be configured to require members of the Global Administrators group to use Multi-Factor Authentication and an

Microsoft Entra ID-joined device when they connect to Microsoft Entra ID from untrusted locations.

Solution: You access the multi-factor authentication page to alter the user settings.

Does the solution meet the goal?

Yes

No

Correct

Incorrect
Question 37 of 40

37. Question

Category: None

AZ104-Q984

Your company has an Microsoft Entra ID (Microsoft Entra ID) subscription. You want to implement an Microsoft Entra ID

conditional access policy.

The policy must be configured to require members of the Global Administrators group to use Multi-Factor Authentication and an

Microsoft Entra ID-joined device when they connect to Microsoft Entra ID from untrusted locations.

Solution: You access the Azure portal to alter the session control of the Microsoft Entra ID conditional access policy. Does the

solution meet the goal?

Yes

No

Correct

Incorrect
Question 38 of 40

38. Question

Category: None

AZ104-Q985

Your company has an Microsoft Entra ID (Microsoft Entra ID) subscription. You want to implement an Microsoft Entra ID

conditional access policy.

The policy must be configured to require members of the Global Administrators group to use Multi-Factor Authentication and

an Microsoft Entra ID-joined device when they connect to Microsoft Entra ID from untrusted locations.

Solution: You access the Azure portal to alter the grant control of the Microsoft Entra ID conditional access policy. Does the

solution meet the goal?

Yes

No

Correct

Incorrect
Question 39 of 40

39. Question

Category: None

AZ104-Q986

Your company has an Microsoft Entra ID (Microsoft Entra ID) tenant named weyland.com that is configured for hybrid

coexistence with the on-premises Active Directory domain.

You have a server named DirSync1 that is configured as a DirSync server.

You create a new user account in the on-premise Active Directory. You now need to replicate the user information to

Microsoft Entra ID immediately.

Solution: You run the Start-ADSyncSyncCycle -PolicyType Initial PowerShell cmdlet. Does the solution meet the goal?

Yes

No

Correct

Incorrect
Question 40 of 40

40. Question

Category: None

AZ104-Q987

Your company has an Microsoft Entra ID (Microsoft Entra ID) tenant named weyland.com that is configured for hybrid

coexistence with the on-premises Active Directory domain.

You have a server named DirSync1 that is configured as a DirSync server.

You create a new user account in the on-premise Active Directory. You now need to replicate the user information to Microsoft

Entra ID immediately.

Solution: You restart the NetLogon service on a domain controller. Does the solution meet the goal?

Yes

No

Correct

Incorrect

AZ104-Quiz26

Quiz Summary

Information

Results

Results

Categories

1. Question

2. Question

3. Question

4. Question

5. Question

6. Question

7. Question

8. Question

9. Question

10. Question

11. Question

12. Question

13. Question

14. Question

15. Question

16. Question

17. Question

18. Question

19. Question

20. Question

21. Question

22. Question

23. Question

24. Question

25. Question

26. Question

27. Question

28. Question

29. Question

30. Question

31. Question

32. Question

33. Question

34. Question

35. Question

36. Question

37. Question

38. Question

39. Question

40. Question