🔍

AZ-104 — questions

Page 18 of 18 · 350 total questions.

AZ-104 Question 517

Single page →
Topic 7 · Question 517

You need to meet the user requirement for Admin1. What should you do?

  • AFrom the Azure Active Directory blade, modify the Groups
  • BFrom the Azure Active Directory blade, modify the Properties
  • CFrom the Subscriptions blade, select the subscription, and then modify the Access control (IAM) settings (correct answer)
  • DFrom the Subscriptions blade, select the subscription, and then modify the Properties
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: From the Subscriptions blade, select the subscription, and then modify the Access control (IAM) settings.

AZ-104 Question 521

Single page →
Topic 9 · Question 521

You need to ensure that you can grant Group4 Azure RBAC read only permissions to all the Azure file shares. What should you do?

  • AOn storage2, enable identity-based access for the file shares. (correct answer)
  • BRecreate storage2 and set Hierarchical namespace to Enabled.
  • COn storage1 and storage4, change the Account kind type to StorageV2 (general purpose v2).
  • DCreate a shared access signature (SAS) for storage1, storage2, and storage4.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: On storage2, enable identity-based access for the file shares.

AZ-104 Question 522

Single page →
Topic 10 · Question 522

You need to implement a backup solution for App1 after the application is moved. What should you create first?

  • Aa recovery plan
  • Ban Azure Backup Server
  • Ca backup policy
  • Da Recovery Services vault (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: a Recovery Services vault

Explanation

A Recovery Services Vault stores backup and replication data for Azure Backup and Site Recovery.

AZ-104 Question 526

Single page →
Topic 11 · Question 526

You need to identify which storage account to use for the flow logging of IP traffic from VM5. The solution must meet the retention requirements. Which storage account should you identify?

  • Astorage1
  • Bstorage2 (correct answer)
  • Cstorage3
  • Dstorage4
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: storage2.

AZ-104 Question 527

Single page →
Topic 12 · Question 527

You discover that VM3 does NOT meet the technical requirements. You need to verify whether the issue relates to the NSGs. What should you use?

  • ADiagram in VNet1
  • BDiagnostic settings in Azure Monitor
  • CDiagnose and solve problems in Traffic Manager profiles
  • DThe security recommendations in Azure Advisor
  • EIP flow verify in Azure Network Watcher (correct answer)
Reveal answer & explanation
Correct answer: E

The correct answer is E. Option E: IP flow verify in Azure Network Watcher.

AZ-104 Question 528

Single page →
Topic 13 · Question 528

You need to ensure that VM1 can communicate with VM4. The solution must minimize the administrative effort. What should you do?

  • ACreate an NSG and associate the NSG to VM1 and VM4.
  • BEstablish peering between VNET1 and VNET3. (correct answer)
  • CAssign VM4 an IP address of 10.0.1.5/24.
  • DCreate a user-defined route from VNET1 to VNET3.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Establish peering between VNET1 and VNET3.

AZ-104 Question 531

Single page →
Topic 14 · Question 531

You are planning the move of App1 to Azure. You create a network security group (NSG). You need to recommend a solution to provide users with access to App1. What should you recommend?

  • ACreate an incoming security rule for port 443 from the Internet. Associate the NSG to the subnet that contains the web servers. (correct answer)
  • BCreate an outgoing security rule for port 443 from the Internet. Associate the NSG to the subnet that contains the web servers.
  • CCreate an incoming security rule for port 443 from the Internet. Associate the NSG to all the subnets.
  • DCreate an outgoing security rule for port 443 from the Internet. Associate the NSG to all the subnets.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Create an incoming security rule for port 443 from the Internet. Associate the NSG to the subnet that contains the web servers.

Explanation

A Network Security Group (NSG) applies allow/deny rules to control traffic at the subnet or NIC level.

AZ-104 Question 533

Single page →
Topic 15 · Question 533

You need to add VM1 and VM2 to the backend pool of LB1. What should you do first?

  • AConnect VM2 to VNET1/Subnet1.
  • BRedeploy VM1 and VM2 to the same availability zone.
  • CRedeploy VM1 and VM2 to the same availability set. (correct answer)
  • DCreate a new NSG and associate the NSG to VNET1/Subnet1.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Redeploy VM1 and VM2 to the same availability set.

Explanation

An Availability Set spreads VMs across fault and update domains within a datacenter to avoid single points of failure.

AZ-104 Question 534

Single page →
Topic 15 · Question 534

You need to ensure that VM1 can communicate with VM4. The solution must minimize administrative effort. What should you do?

  • ACreate a user-defined route from VNET1 to VNET3.
  • BCreate an NSG and associate the NSG to VM1 and VM4.
  • CAssign VM4 an IP address of 10.0.1.5/24.
  • DEstablish peering between VNET1 and VNET3. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Establish peering between VNET1 and VNET3.

AZ-104 Question 536

Single page →
Topic 16 · Question 536

You need to recommend a solution to automate the configuration for the finance department users. The solution must meet the technical requirements. What should you include in the recommendation?

  • AAzure AD B2C
  • Bdynamic groups and conditional access policies (correct answer)
  • CAzure AD Identity Protection
  • Dan Azure logic app and the Microsoft Identity Management (MIM) client
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: dynamic groups and conditional access policies

Explanation

Conditional Access enforces access policies based on user, device, location, and risk signals.

Showing questions 341–350 of 350 · Page 18 of 18