AZ104-Quiz31

Category: None

AZ104-Q1132

You have an Azure subscription that contains multiple virtual machines in the West US Azure region.

You need to use Traffic Analytics in Azure Network Watcher to monitor virtual machine traffic.

Which two resources should you create? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

a Log Analytics workspace

an Azure Monitor workbook

a storage account

a Microsoft Sentinel workspace

a Data Collection Rule (DCR) in Azure Monitor

Category: None

AZ104-Q1133

You discover that VM3 does NOT meet the technical requirements. You need to verify whether the issue

relates to the NSGs. (Case Study A)

What should you use?

Diagram in VNet1

Diagnostic settings in Azure Monitor

Diagnose and solve problems in Traffic Manager profiles

The security recommendations in Azure Advisor

IP flow verify in Azure Network Watcher

Category: None

AZ104-Q1134

You have an Azure subscription that contains a storage account named account1.

You plan to upload the disk files of a virtual machine to account1 from your on-premises network. The on- premises network uses a public IP address space of 131.107.1.0/24.

You plan to use the disk files to provision an Azure virtual machine named VM1. VM1 will be attached to a virtual network named VNet1. VNet1 uses an IP address space of 192.168.0.0/24.

You need to configure account1 to meet the following requirements:

-Ensure that you can upload the disk files to account1.

-Ensure that you can attach the disks to VM1.

-Prevent all other access to account1.

Which two actions should you perform? Each correct answer presents part of the solution.

Note: Each correct selection is worth one point.

From the Firewalls and virtual networks blade of account1, select Selected networks.

From the Firewalls and virtual networks blade of account1, select Allow trusted Microsoft services to access this storage account.

From the Firewalls and virtual networks blade of account, add the 131.107.1.0/24 IP address range.

From the Firewalls and virtual networks blade of account1, add VNet1.

From the Service endpoints blade of VNet1, add a service endpoint.

Category: None

AZ104-Q1135

You have an Azure Kubernetes Service (AKS) cluster named AKS1. You need to configure cluster autoscaler for AKS1.

Which two tools should you use? Each correct answer presents a complete solution.

Note: Each correct selection is worth one point.

the kubectl command

the azaks command

the Set-AzVmemdlet

the Azure portal

the Set-AzAkscmdlet

Category: None

AZ104-Q1136

You develop the following Azure Resource Manager (ARM) template to create a resource group and deploy an Azure Storage account to the resource group.

Which cmdlet should you run to deploy the template?

New-AzResource

New-AzResourceGroupDeployment

New-AzTenantDeployment

New-AzDeployment

Category: None

AZ104-Q1137

You plan to deploy several Azure virtual machines that will run Windows Server 2019 in a virtual machine scale set by

using an Azure Resource Manager template.

You need to ensure that NGINX is available on all the virtual machines after they are deployed.

What should you use?

Azure Custom Script Extension

Deployment Center in Azure App Service

the New-AzConfigurationAssignment cmdlet

Microsoft Entra ID Application Proxy

Category: None

AZ104-Q1138

You have an Azure subscription that contains a virtual network named VNet1. VNet1 contains four
subnets named Gateway, Perimeter, NVA, and Production.

The NVA subnet contains two network virtual appliances (NVAs) that will perform network traffic inspection
between the Perimeter subnet and the Production subnet.

You need to implement an Azure load balancer for the NVAs. The solution must meet the following
requirements:

-The NVAs must run in an active-active configuration that uses automatic failover.

-The NVA must load balance traffic to two services on the Production subnet. The services have different IP
addresses.

Which three actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

Deploy a basic load balancer

Deploy a standard load balancer

Add two load balancing rules that have HA Ports and Floating IP enabled

Add two load balancing rules that have HA Ports enabled and Floating IP disabled

Add a frontend IP configuration, a backend pool, and a health probe

Add a frontend IP configuration, two backend pools, and a health probe

Category: None

AZ104-Q1139

You plan to create an Azure virtual machine named VM1 that will be configured as shown in the following exhibit.

The planned disk configurations for VM1 are shown in the following exhibit.

You need to ensure that VM1 can be created in an Availability Zone.

Which two settings should you modify? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

Use managed disks

OS disk type

Availability options

Size

Image

Category: None

AZ104-Q1140

You have an Azure subscription named Subscription that contains an Azure virtual network named

VNet1. VNet1 connects to your on-premises network by using Azure ExpressRoute.

You plan to prepare the environment for automatic failover in case of ExpressRoute failure.

You need to connect VNet1 to the on-premises network by using a site-to-site VPN. The solution must

minimize cost.

Which three actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

Create a connection

Create a local site VPN gateway

Create a VPN gateway that uses the VpnGw1 SKU

Create a gateway subnet

Create a VPN gateway that uses the Basic SKU

Category: None

AZ104-Q1141

You have an Azure subscription that contains a policy-based virtual network gateway named GW1 and

a virtual network named VNet1.

You need to ensure that you can configure a point-to-site connection from an on-premises computer to

VNet1. Which two actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

Add a service endpoint to VNet1

Reset GW1

Create a route-based virtual network gateway

Add a connection to GW1

Delete GW1

Add a public IP address space to VNet1

Category: None

AZ104-Q1142

You have an Azure subscription that contains two virtual machines named VM1 and VM2. You create

an Azure load balancer.

You plan to create a load balancing rule that will load balance HTTPS traffic between VM1 and VM2. Which

two additional load balancer resources should you create before you can create the load balancing rule?

Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

a frontend IP address

an inbound NAT rule

a virtual network

a backend pool

a health probe

Category: None

AZ104-Q1143

You have an Azure subscription that contains the resources shown in the following table.

Name	Type
VM1	Virtual machine
VNet1	Virtual network
NIC1	Network interface
LB1	Load balancer
VPN1	Virtual network gateway

You create a public IP address named IP1.

Which two resources can you associate to IP1? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

VM1

LB1

NIC1

VPN1

VNet1

Category: None

AZ104-Q1144

You deploy Azure virtual machines to three Azure regions.

Each region contains a virtual network. Each virtual network contains multiple subnets peered in a full

mesh topology.

Each subnet contains a network security group (NSG) that has defined rules.

A user reports that he cannot use port 33000 to connect from a virtual machine in one region to a virtual

machine in another region.

Which two options can you use to diagnose the issue? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

effective security rules

Azure Monitor Network Insights

IP flow verify

Azure Virtual Network Manager

Connection troubleshoot

AZ104-Q1145

You have an Azure subscription that contains the virtual networks shown in the following table.

Name	Location
Vnet1	US East
Vnet2	US East
Vnet3	US East
Vnet4	UK South
Vnet5	UK South
Vnet6	UK South
Vnet7	Asia East
Vnet8	Asia East
Vnet9	Asia East
Vnet10	Asia East

All the virtual networks are peered. Each virtual network contains nine virtual machines.

You need to configure secure RDP connections to the virtual machines by using Azure Bastion.

What is the minimum number of Bastion hosts required?

1

3

9

10

AZ104-Q1146

You have an Azure subscription that contains the resources shown in the following table.

Name	Location	Description
VNet1	East US	Virtual network
Subnet1	East US	Subnet on VNet1
NIC1	East US	Network interface

You create a route table named RT1 in the East US Azure region.

To which resources can you associate RT1?

VNet1 only

Subnet1 only

VNet1 and NIC1 only

Subnet1 and NIC1 only

VNet1, Subnet1, and NIC1

AZ104-Q1147

You have an Azure subscription that contains a virtual machine named VM1.

You have an on-premises datacenter that contains a domain controller named DC1. ExpressRoute is used to connect the on-premises datacenter to Azure.

You need to use Connection Monitor to identify network latency between VM1 and DC1.

What should you install on DC1?

the Azure Connected Machine agent for Azure Arc-enabled servers

the Azure Network Watcher Agent virtual machine extension

the Log Analytics agent

an Azure Monitor agent extension

AZ104-Q1148

Case study A

This is a case study. Case studies are not timed separately. You can use as much exam time as you would like
to complete each case. However, there may be additional case studies and sections on this exam. You must
manage your time to ensure that you are able to complete all questions included on this exam in the time
provided.

To answer the questions included in a case study, you will need to reference information that is provided in
the case study. Case studies might contain exhibits and other resources that provide more information about
the scenario that is described in the case study. Each question is independent of the other questions in this
case study.

At the end of this case study, a review screen will appear. This screen allows you to review your answers and
to make changes before you move to the next section of the exam. After you begin a new section, you cannot
return to this section.

To start the case study

To display the first question in this case study, click the Next button. Use the buttons in the left pane to
explore the content of the case study before you answer the questions. Clicking these buttons displays
information such as business requirements, existing environment, and problem statements. If the case study
has an All Information tab, note that the information displayed is identical to the information displayed on
the subsequent tabs. When you are ready to answer a question, click the question button to return to the
question.

Overview

Litware, Inc. is a consulting company that has a main office in Montreal and two branch offices in Seattle and
New York.

The Montreal office has 2,000 employees. The Seattle office has 1,000 employees. The New York office has 200
employees.

All the resources used by Litware are hosted on-premises.

Litware creates a new Azure subscription. The Azure Active Directory (Azure AD) tenant uses a domain named
litware.onmicrosoft.com. The tenant uses the P1 pricing tier.

Existing Environment

The network contains an Active Directory forest named litware.com. All domain controllers are configured as
DNS servers and host the litware.com DNS zone.

Litware has finance, human resources, sales, research, and information technology departments. Each
department has an organizational unit (OU) that contains all the accounts of that respective department. All
the user accounts have the department attribute set to their respective department. New users are added
frequently.

Litware.com contains a user named User1.
All the offices connect by using private connections.
Litware has data centers in the Montreal and Seattle offices. Each office has a firewall that can be configured
as a VPN device.
All infrastructure servers are virtualized. The virtualization environment contains the servers in the following
table.

Name	Role	Contains virtual machine
Server1	VMware vCenter server	VM1
Server2	Hyper-V host	VM2

Litware uses two web applications named App1 and Appz. Each instance on each web application requires 1 GB of memory.

The Azure subscription contains the resources in the following table.

Name	Type
VNet1	Virtual network
VM3	Virtual machine
VM4	Virtual machine

The network security team implements several network security groups (NSGs)
Requirements

Planned Changes

Litware plans to implement the following changes:

Planned Changes

Litware plans to implement the following changes:

-Deploy Azure ExpressRoute to the Montreal office.

-Migrate the virtual machines hosted on Server1 and Server2 to Azure.
-Synchronize on-premises Active Directory to Azure Active Directory (Azure AD).
-Migrate App1 and App2 to two Azure web apps named WebApp1 and WebApp2.
Technical Requirements

Litware must meet the following technical requirements:

-Ensure that WebApp1 can adjust the number of instances automatically based on the load and can scale
up to five instances.

-Ensure that VM3 can establish outbound connections over TCP port 8080 to the applications servers in the
Montreal office.

-Ensure that routing information is exchanged automatically between Azure and the routers in the Montreal
office.

-Enable Azure Multi-Factor Authentication (MFA) for the users in the finance department only.

-Ensure that webapp2.azurewebsites.net can be accessed by using the name app2.litware.com.

-Connect the New York office to VNet1 over the Internet by using an encrypted connection.

-Create a workflow to send an email message when the settings of VM4 are modified.

-Create a custom Azure role named Role’ that is based on the Reader role.

-Minimize costs whenever possible.

Question: AZ104-Q755、AZ104-Q1106、AZ104-Q1133

Quiz Summary

Information

Results

Results

Categories

1. Question

2. Question

3. Question

4. Question

5. Question

6. Question

7. Question

8. Question

9. Question

10. Question

11. Question

12. Question

13. Question

14. Question

15. Question

16. Question

17. Question