AZ104-Quiz30

You need to configure WebApp1 to meet the technical requirements. (Case Study 3)

Which certificate can you use from Vault?

You need to meet the technical requirements for the KEK. (Case Study C)

Which PowerShell cmdlet and key should you use?

You need to add VM1 and VM2 to the backend pool of LB1.

What should you do first? (Case Study D)

You need to ensure that VM1 can communicate with VM4. The solution must

minimize administrative effort. What should you do? (Case Study D)

You have an Azure subscription that has a Recovery Services vault named Vault1. The subscription

contains the virtual machines shown in the following table:

You plan to schedule backups to occur every night at

23:00. Which virtual machines can you back up by using

Azure Backup?

You have the Azure virtual machines shown in the following table:

You have a Recovery Services vault that protects VM1 and VM2. You need to protect VM3 and VM4 by using Recovery Services.

What should you do first?

You have an Azure virtual machine named VM1. Azure collects events from VM1.

You are creating an alert rule in Azure Monitor to notify an administrator when an error is logged in the

System event log of VM1.

Which target resource should you monitor in the alert rule?

You have a Recovery Services vault named RSV1. RSV1 has a backup policy that retains instant

snapshots for five days and daily backup for 14 days.

RSV1 performs daily backups of VM1. VM1 hosts a static website that was updated eight days ago.

You need to recover VM1 to a point eight days ago. The solution must minimize downtime.

What should you do first?

You have an Azure subscription named Subscription1 that contains two Azure virtual networks named

VNet1 and VNet2. VNet1 contains a VPN gateway named VPNGW1 that uses static routing. There is a site-to-site

VPN connection between your on-premises network and VNet1.

On a computer named Client1 that runs Windows 10, you configure a point-to-site VPN connection to VNet1.

You configure virtual network peering between VNet1 and VNet2. You verify that you can connect to VNet2 from

the on-premises network. Client1 is unable to connect to VNet2.

You need to ensure that you can connect Client1 to VNet2.

What should you do?

You have an Azure Active Directory (Azure AD) tenant that is linked to 10 Azure subscriptions.

You need to centrally monitor user activity across all the subscriptions.

What should you use?

You have a subnet named Subnet! that contains Azure virtual machines. A network security group

(NSG) named NSG71 is associated to Subnet1. NSG1 only contains the default rules.

You need to create a rule in NSG1 to prevent the hosts on Subnet1 form connecting to the Azure portal.

The hosts must be able to connect to other internet hosts.

To what should you set Destination in the rule?

You have an Azure App Service web app named Appt.

You need to collect performance traces for App1.

What should you use?

You have an Azure subscription that contains the storage accounts shown in the following table.

You deploy a web app named App1 to the West US Azure region.

You need to back up App. The solution must minimize costs.

Which storage account should you use as the target for the backup?

You have an Azure subscription that contains eight virtual machines and the resources shown in the following table.

You need to configure access for VNET1. The solution must meet the following requirements:
• The virtual machines connected to VNET1 must be able to communicate with the virtual machines connected to VNET2 by using the Microsoft backbone.
• The virtual machines connected to VNET1 must be able to access storage1, storage2, and Azure AD by using the Microsoft backbone.

What is the minimum number of service endpoints you should add to VNET1?

You need to configure an Azure web app named contoso.azurewebsites.net

to host www.contoso.com. What should you do first?

You have an Azure subscription that contains 10 network security groups (NSGs), 10 virtual machines,

and a Log Analytics workspace named Workspace’. Each NSG is connected to a virtual machine.

You need to configure an Azure Monitor Network Insights alert that will be triggered when suspicious

network traffic is detected.

What should you do first?

You have an Azure subscription that contains a storage account named storage1 in the North

Europe Azure region.

You need to ensure that when blob data is added to storage1, a secondary copy is created in the East

US region. The solution must minimize administrative effort.

What should you configure?

You have an Azure subscription that contains two Log Analytics workspaces named Workspace1 and

Workspace2 and 100 virtual machines that run Windows Server.

You need to collect performance data and events from the virtual machines. The solution must meet the

following requirements:

*Logs must be sent to Workspace1 and Workspace 2.

*All Windows events must be captured.

*All security events must be captured.

What should you install and configure on each virtual machine?

You have an Azure subscription that contains a virtual machine named VM1 and an Azure function named App1.

You need to create an alert rule that will run App1 if VM1 stops.

What should you create for the alert rule?

You have an Azure subscription. The subscription contains virtual machines that connect to a virtual

network named VNett1.

You plan to configure Azure Monitor for VM Insights.

You need to ensure that all the virtual machines only communicate with Azure Monitor through VNet1.

What should you create first?

You have an Azure subscription that contains an Azure Stream Analytics job named Job1.

You need to monitor input events for Job1 to identify the number of events that were NOT processed.

Which metric should you use?

You have an Azure subscription that contains an Azure SQL database named DB1.

You plan to use Azure Monitor to monitor the performance of DB1. You must be able to run queries to

analyze log data.

Which destination should you configure in the Diagnostic settings of DB1?

You have an Azure subscription. The subscription contains virtual machines that run Windows Server.

You have a data collection rule (DCR) named Rule1.

You plan to use the Azure Monitor Agent to collect events from Windows System event logs.

You only need to collect system events that have an ID of 1001.

Which type of query should you use for the data source in Rule1?

You have an Azure subscription that has Traffic Analytics configured.

You deploy a new virtual machine named VM1 that has the following settings:

*Region: East US

“Virtual network: VNet1

*NIC network security group: NSG1

You need to monitor VM1 traffic by using Traffic Analytics.

Which settings should you configure?