πŸ”

AZ-104 β€” questions

Page 3 of 18 Β· 350 total questions.

Topic 2 Β· Question 47

You have an Azure subscription named Subscription1 and an on-premises deployment of Microsoft System Center Service Manager. Subscription1 contains a virtual machine named VM1. You need to ensure that an alert is set in Service Manager when the amount of available memory on VM1 is below 10 percent. What should you do first?

  • ACreate an automation runbook
  • BDeploy a function app
  • CDeploy the IT Service Management Connector (ITSM) (correct answer)
  • DCreate a notification
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Deploy the IT Service Management Connector (ITSM).

Topic 2 Β· Question 48

You sign up for Azure Active Directory (Azure AD) Premium P2. You need to add a user named [email protected] as an administrator on all the computers that will be joined to the Azure AD domain. What should you configure in Azure AD?

  • ADevice settings from the Devices blade (correct answer)
  • BProviders from the MFA Server blade
  • CUser settings from the Users blade
  • DGeneral settings from the Groups blade
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Device settings from the Devices blade.

Topic 2 Β· Question 50

You have an Azure subscription that contains a resource group named RG26. RG26 is set to the West Europe location and is used to create temporary resources for a project. RG26 contains the resources shown in the following table. SQLDB01 is backed up to RGV1. When the project is complete, you attempt to delete RG26 from the Azure portal. The deletion fails. You need to delete RG26. What should you do first?

  • ADelete VM1
  • BStop VM1
  • CStop the backup of SQLDB01 (correct answer)
  • DDelete sa001
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Stop the backup of SQLDB01.

Topic 2 Β· Question 51

You have an Azure subscription named Subscription1 that contains a virtual network named VNet1. VNet1 is in a resource group named RG1. Subscription1 has a user named User1. User1 has the following roles: β€’ Reader β€’ Security Admin β€’ Security Reader You need to ensure that User1 can assign the Reader role for VNet1 to other users. What should you do?

  • ARemove User1 from the Security Reader and Reader roles for Subscription1.
  • BAssign User1 the User Access Administrator role for VNet1. (correct answer)
  • CAssign User1 the Network Contributor role for VNet1.
  • DAssign User1 the Network Contributor role for RG1.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Assign User1 the User Access Administrator role for VNet1.

Topic 2 Β· Question 52

You have an Azure Active Directory (Azure AD) tenant named contosocloud.onmicrosoft.com. Your company has a public DNS zone for contoso.com. You add contoso.com as a custom domain name to Azure AD. You need to ensure that Azure can verify the domain name. Which type of DNS record should you create?

  • AMX (correct answer)
  • BNSEC
  • CPTR
  • DRRSIG
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: MX.

Topic 2 Β· Question 53

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure Directory (Azure AD) tenant named Adatum and an Azure Subscription named Subscription1. Adatum contains a group named Developers. Subscription1 contains a resource group named Dev. You need to provide the Developers group with the ability to create Azure logic apps in the Dev resource group. Solution: On Subscription1, you assign the DevTest Labs User role to the Developers group. Does this meet the goal?

  • AYes
  • BNo (correct answer)
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: No.

Topic 2 Β· Question 54

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure Directory (Azure AD) tenant named Adatum and an Azure Subscription named Subscription1. Adatum contains a group named Developers. Subscription1 contains a resource group named Dev. You need to provide the Developers group with the ability to create Azure logic apps in the Dev resource group. Solution: On Subscription1, you assign the Logic App Operator role to the Developers group. Does this meet the goal?

  • AYes
  • BNo (correct answer)
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: No.

Topic 2 Β· Question 55

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure Directory (Azure AD) tenant named Adatum and an Azure Subscription named Subscription1. Adatum contains a group named Developers. Subscription1 contains a resource group named Dev. You need to provide the Developers group with the ability to create Azure logic apps in the Dev resource group. Solution: On Dev, you assign the Contributor role to the Developers group. Does this meet the goal?

  • AYes (correct answer)
  • BNo
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Yes.

Topic 2 Β· Question 57

You have an Azure subscription named Subscription1 that contains an Azure Log Analytics workspace named Workspace1. You need to view the error events from a table named Event. Which query should you run in Workspace1?

  • AGet-Event Event | where {$_.EventType == "error"}
  • Bsearch in (Event) "error" (correct answer)
  • Cselect * from Event where EventType == "error"
  • Dsearch in (Event) * | where EventType -eq "error"
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: search in (Event) "error".

Topic 2 Β· Question 59

You have an Azure subscription named Subscription1. Subscription1 contains the resource groups in the following table. RG1 has a web app named WebApp1. WebApp1 is located in West Europe. You move WebApp1 to RG2. What is the effect of the move?

  • AThe App Service plan for WebApp1 remains in West Europe. Policy2 applies to WebApp1. (correct answer)
  • BThe App Service plan for WebApp1 moves to North Europe. Policy2 applies to WebApp1.
  • CThe App Service plan for WebApp1 remains in West Europe. Policy1 applies to WebApp1.
  • DThe App Service plan for WebApp1 moves to North Europe. Policy1 applies to WebApp1.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: The App Service plan for WebApp1 remains in West Europe. Policy2 applies to WebApp1.

Explanation

Azure App Service is a fully managed platform for hosting web apps and APIs with built-in scaling and patching.

Topic 2 Β· Question 60 Β· Select all that apply

You have an Azure subscription. Users access the resources in the subscription from either home or from customer sites. From home, users must establish a point-to-site VPN to access the Azure resources. The users on the customer sites access the Azure resources by using site-to-site VPNs. You have a line-of-business-app named App1 that runs on several Azure virtual machine. The virtual machines run Windows Server 2016. You need to ensure that the connections to App1 are spread across all the virtual machines. What are two possible Azure services that you can use? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

  • Aan internal load balancer (correct answer)
  • Ba public load balancer
  • Can Azure Content Delivery Network (CDN)
  • DTraffic Manager
  • Ean Azure Application Gateway (correct answer)
Reveal answer & explanation
Correct answer: A, E

The correct answer is A, E. Option A: an internal load balancer Option E: an Azure Application Gateway

Explanation

Azure Application Gateway is a layer-7 load balancer with WAF, path-based routing, and SSL termination. Azure Load Balancer distributes layer-4 traffic across healthy backends in a region for availability.

Topic 2 Β· Question 61

You have an Azure subscription. You have 100 Azure virtual machines. You need to quickly identify underutilized virtual machines that can have their service tier changed to a less expensive offering. Which blade should you use?

  • AMonitor
  • BAdvisor (correct answer)
  • CMetrics
  • DCustomer insights
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Advisor.

Topic 2 Β· Question 63

You have an Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com. The User administrator role is assigned to a user named Admin1. An external partner has a Microsoft account that uses the [email protected] sign in. Admin1 attempts to invite the external partner to sign in to the Azure AD tenant and receives the following error message: `Unable to invite user [email protected] `" Generic authorization exception.` You need to ensure that Admin1 can invite the external partner to sign in to the Azure AD tenant. What should you do?

  • AFrom the Users settings blade, modify the External collaboration settings. (correct answer)
  • BFrom the Custom domain names blade, add a custom domain.
  • CFrom the Organizational relationships blade, add an identity provider.
  • DFrom the Roles and administrators blade, assign the Security administrator role to Admin1.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: From the Users settings blade, modify the External collaboration settings.

Topic 2 Β· Question 64

You have an Azure subscription linked to an Azure Active Directory tenant. The tenant includes a user account named User1. You need to ensure that User1 can assign a policy to the tenant root management group. What should you do?

  • AAssign the Owner role for the Azure Subscription to User1, and then modify the default conditional access policies.
  • BAssign the Owner role for the Azure subscription to User1, and then instruct User1 to configure access management for Azure resources.
  • CAssign the Global administrator role to User1, and then instruct User1 to configure access management for Azure resources. (correct answer)
  • DCreate a new management group and delegate User1 as the owner of the new management group.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Assign the Global administrator role to User1, and then instruct User1 to configure access management for Azure resources.

Topic 2 Β· Question 67

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You need to ensure that an Azure Active Directory (Azure AD) user named Admin1 is assigned the required role to enable Traffic Analytics for an Azure subscription. Solution: You assign the Network Contributor role at the subscription level to Admin1. Does this meet the goal?

  • AYes
  • BNo (correct answer)
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: No.

Topic 2 Β· Question 68

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You need to ensure that an Azure Active Directory (Azure AD) user named Admin1 is assigned the required role to enable Traffic Analytics for an Azure subscription. Solution: You assign the Owner role at the subscription level to Admin1. Does this meet the goal?

  • AYes (correct answer)
  • BNo
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Yes.

Topic 2 Β· Question 69

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You need to ensure that an Azure Active Directory (Azure AD) user named Admin1 is assigned the required role to enable Traffic Analytics for an Azure subscription. Solution: You assign the Reader role at the subscription level to Admin1. Does this meet the goal?

  • AYes
  • BNo (correct answer)
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: No.

Topic 2 Β· Question 70

You have an Azure subscription that contains a user named User1. You need to ensure that User1 can deploy virtual machines and manage virtual networks. The solution must use the principle of least privilege. Which role-based access control (RBAC) role should you assign to User1?

  • AOwner
  • BVirtual Machine Contributor
  • CContributor (correct answer)
  • DVirtual Machine Administrator Login
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Contributor.

Topic 2 Β· Question 72

You have an Azure subscription named Subscription1 that contains an Azure virtual machine named VM1. VM1 is in a resource group named RG1. VM1 runs services that will be used to deploy resources to RG1. You need to ensure that a service running on VM1 can manage the resources in RG1 by using the identity of VM1. What should you do first?

  • AFrom the Azure portal, modify the Managed Identity settings of VM1 (correct answer)
  • BFrom the Azure portal, modify the Access control (IAM) settings of RG1
  • CFrom the Azure portal, modify the Access control (IAM) settings of VM1
  • DFrom the Azure portal, modify the Policies settings of RG1
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: From the Azure portal, modify the Managed Identity settings of VM1

Explanation

A Managed Identity lets Azure resources authenticate to services without storing credentials.

Topic 2 Β· Question 73

You have an Azure subscription that contains a resource group named TestRG. You use TestRG to validate an Azure deployment. TestRG contains the following resources: You need to delete TestRG. What should you do first?

  • AModify the backup configurations of VM1 and modify the resource lock type of VNET1
  • BRemove the resource lock from VNET1 and delete all data in Vault1 (correct answer)
  • CTurn off VM1 and remove the resource lock from VNET1
  • DTurn off VM1 and delete all data in Vault1
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Remove the resource lock from VNET1 and delete all data in Vault1.

Showing questions 41–60 of 350 Β· Page 3 of 18