🔍

AZ-104 — questions

Page 5 of 18 · 350 total questions.

AZ-104 Question 104

Single page →
Topic 2 · Question 104

You have an Azure subscription named Subscription1 that contains a virtual network named VNet1. VNet1 is in a resource group named RG1. Subscription1 has a user named User1. User1 has the following roles: • Reader • Security Admin • Security Reader You need to ensure that User1 can assign the Reader role for VNet1 to other users. What should you do?

  • AAssign User1 the Network Contributor role for VNet1.
  • BRemove User1 from the Security Reader role for Subscription1. Assign User1 the Contributor role for RG1.
  • CAssign User1 the Owner role for VNet1. (correct answer)
  • DAssign User1 the Network Contributor role for RG1.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Assign User1 the Owner role for VNet1.

AZ-104 Question 105

Single page →
Topic 2 · Question 105

You have an Azure subscription named Subscription1 that contains a virtual network named VNet1. VNet1 is in a resource group named RG1. Subscription1 has a user named User1. User1 has the following roles: • Reader • Security Admin • Security Reader You need to ensure that User1 can assign the Reader role for VNet1 to other users. What should you do?

  • ARemove User1 from the Security Reader role for Subscript on 1. Assign User1 the Contributor role for RG1.
  • BAssign User1 the Owner role for VNet1. (correct answer)
  • CRemove User1 from the Security Reader and Reader roles for Subscription1. Assign User1 the Contributor role for Subscription 1.
  • DAssign User1 the Contributor role for VNet1.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Assign User1 the Owner role for VNet1.

AZ-104 Question 106

Single page →
Topic 2 · Question 106

Your on-premises network contains a VPN gateway. You have an Azure subscription that contains the resources shown in the following table. You need to ensure that all the traffic from VM1 to storage1 travels across the Microsoft backbone network. What should you configure?

Exhibit 1 for question 106
  • AAzure Application Gateway
  • Bprivate endpoints (correct answer)
  • Ca network security group (NSG)
  • DAzure Virtual WAN
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: private endpoints

Explanation

A Private Endpoint gives private, in-VNet connectivity to an Azure service, keeping traffic off the public internet.

AZ-104 Question 108

Single page →
Topic 2 · Question 108

You have an Azure subscription named Subscription1 that contains a virtual network named VNet1. VNet1 is in a resource group named RG1. Subscription1 has a user named User1. User1 has the following roles: • Reader • Security Admin • Security Reader You need to ensure that User1 can assign the Reader role for VNet1 to other users. What should you do?

  • ARemove User1 from the Security Reader role for Subscription1. Assign User1 the Contributor role for RG1.
  • BAssign User1 the Access Administrator role for VNet1. (correct answer)
  • CRemove User1 from the Security Reader and Reader roles for Subscription1. Assign User1 the Contributor role for Subscription1.
  • DAssign User1 the Network Contributor role for RG1.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Assign User1 the Access Administrator role for VNet1.

AZ-104 Question 110

Single page →
Topic 2 · Question 110

You have an Azure subscription that contains the resources shown in the following table. You need to assign User1 the Storage File Data SMB Share Contributor role for share1. What should you do first?

Exhibit 1 for question 110
  • AEnable identity-based data access for the file shares in storage1. (correct answer)
  • BModify the security profile for the file shares in storage1.
  • CSelect Default to Azure Active Directory authorization in the Azure portal for storage1.
  • DConfigure Access control (IAM) for share1.
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Enable identity-based data access for the file shares in storage1.

AZ-104 Question 111

Single page →
Topic 2 · Question 111

You have an Azure subscription named Subscription1 that contains a virtual network named VNet1. VNet1 is in a resource group named RG1. Subscription1 has a user named User1. User1 has the following roles: • Reader • Security Admin • Security Reader You need to ensure that User1 can assign the Reader role for VNet1 to other users. What should you do?

  • ARemove User1 from the Security Reader role for Subscription1. Assign User1 the Contributor role for RG1.
  • BAssign User1 the User Access Administrator role for VNet1. (correct answer)
  • CRemove User1 from the Security Reader and Reader roles for Subscription1.
  • DAssign User1 the Contributor role for VNet1.
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Assign User1 the User Access Administrator role for VNet1.

AZ-104 Question 114

Single page →
Topic 2 · Question 114

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure Active Directory (Azure AD) tenant named contoso.com. You have a CSV file that contains the names and email addresses of 500 external users. You need to create a guest user account in contoso.com for each of the 500 external users. Solution: You create a PowerShell script that runs the New-MgUser cmdlet for each external user. Does this meet the goal?

  • AYes
  • BNo (correct answer)
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: No.

AZ-104 Question 115

Single page →
Topic 2 · Question 115

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure Active Directory (Azure AD) tenant named contoso.com. You have a CSV file that contains the names and email addresses of 500 external users. You need to create a guest user account in contoso.com for each of the 500 external users. Solution: You create a PowerShell script that runs the New-MgInvitation cmdlet for each external user. Does this meet the goal?

  • AYes (correct answer)
  • BNo
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Yes.

AZ-104 Question 116

Single page →
Topic 2 · Question 116

You have an Azure subscription named Subscription1 that contains virtual network named VNet1. VNet1 is in a resource group named RG1. A user named User1 has the following roles for Subscription1: • Reader • Security Admin • Security Reader You need to ensure that User1 can assign the Reader role for VNet1 to other users. What should you do?

  • AAssign User1 the Contributor role for VNet1.
  • BAssign User1 the Network Contributor role for VNet1.
  • CAssign User1 the User Access Administrator role for VNet1. (correct answer)
  • DRemove User1 from the Security Reader and Reader roles for Subscription1. Assign User1 the Contributor role for Subscription1.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Assign User1 the User Access Administrator role for VNet1.

AZ-104 Question 119

Single page →
Topic 2 · Question 119

You have an Azure subscription that contains the resources shown in the following table. You need to assign Workspace1 a role to allow read, write, and delete operations for the data stored in the containers of storage1. Which role should you assign?

Exhibit 1 for question 119
  • AStorage Account Contributor
  • BContributor
  • CStorage Blob Data Contributor (correct answer)
  • DReader and Data Access
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Storage Blob Data Contributor.

AZ-104 Question 120

Single page →
Topic 2 · Question 120

You have an Azure subscription named Subscription1 that contains virtual network named VNet1. VNet1 is in a resource group named RG1. A user named User1 has the following roles for Subscription1: • Reader • Security Admin • Security Reader You need to ensure that User1 can assign the Reader role for VNet1 to other users. What should you do?

  • ARemove User1 from the Security Reader and Reader roles for Subscription1. Assign User1 the Contributor role for Subscription1.
  • BAssign User1 the Contributor role for VNet1.
  • CAssign User1 the Owner role for VNet1. (correct answer)
  • DAssign User1 the Network Contributor role for RG1.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Assign User1 the Owner role for VNet1.

AZ-104 Question 123

Single page →
Topic 2 · Question 123

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure Active Directory (Azure AD) tenant named contoso.com. You have a CSV file that contains the names and email addresses of 500 external users. You need to create a guest user account in contoso.com for each of the 500 external users. Solution: You create a PowerShell script that runs the New-MgUser cmdlet for each user. Does this meet the goal?

  • AYes
  • BNo (correct answer)
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: No.

AZ-104 Question 125

Single page →
Topic 2 · Question 125

Your on-premises network contains a VPN gateway. You have an Azure subscription that contains the resources shown in the following table. You need to ensure that all the traffic from VM1 to storage1 travels across the Microsoft backbone network. What should you configure?

Exhibit 1 for question 125
  • AAzure AD Application Proxy
  • Bprivate endpoints (correct answer)
  • Ca network security group (NSG)
  • DAzure Peering Service
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: private endpoints

Explanation

A Private Endpoint gives private, in-VNet connectivity to an Azure service, keeping traffic off the public internet.

AZ-104 Question 126

Single page →
Topic 2 · Question 126

Your on-premises network contains a VPN gateway. You have an Azure subscription that contains the resources shown in the following table. You need to ensure that all the traffic from VM1 to storage1 travels across the Microsoft backbone network. What should you configure?

Exhibit 1 for question 126
  • AAzure AD Application Proxy
  • Bservice endpoints (correct answer)
  • Ca network security group (NSG)
  • DAzure Firewall
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: service endpoints

Explanation

A Virtual Network Service Endpoint secures Azure service access to specific subnets over the Azure backbone.

AZ-104 Question 127

Single page →
Topic 2 · Question 127

Your on-premises network contains a VPN gateway. You have an Azure subscription that contains the resources shown in the following table. You need to ensure that all the traffic from VM1 to storage1 travels across the Microsoft backbone network. What should you configure?

Exhibit 1 for question 127
  • AAzure Application Gateway
  • Bservice endpoints (correct answer)
  • Ca network security group (NSG)
  • DAzure Peering Service
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: service endpoints

Explanation

A Virtual Network Service Endpoint secures Azure service access to specific subnets over the Azure backbone.

AZ-104 Question 128

Single page →
Topic 2 · Question 128

You have an Azure subscription named Sub1 that contains the resources shown in the following table. You create a user named Admin1. To what can you add Admin1 as a co-administrator?

Exhibit 1 for question 128
  • ARG1
  • BMG1
  • CSub1 (correct answer)
  • DVM1
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Sub1.

AZ-104 Question 130

Single page →
Topic 2 · Question 130

You have an Azure subscription that contains the resources shown in the following table. You need to ensure that data transfers between storage1 and VM1 do NOT traverse the internet What should you configure for storage1?

Exhibit 1 for question 130
  • Adata protection
  • Ba private endpoint (correct answer)
  • CPublic network access in the Firewalls and virtual networks settings
  • Da shared access signature (SAS)
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: a private endpoint

Explanation

A Private Endpoint gives private, in-VNet connectivity to an Azure service, keeping traffic off the public internet.

AZ-104 Question 132

Single page →
Topic 2 · Question 132

Your on-premises network contains a VPN gateway. You have an Azure subscription that contains the resources shown in the following table. You need to ensure that all the traffic from VM1 to storage1 travels across the Microsoft backbone network. What should you configure?

Exhibit 1 for question 132
  • Aa network security group (NSG)
  • Bprivate endpoints (correct answer)
  • CMicrosoft Entra Application Proxy
  • DAzure Virtual WAN
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: private endpoints

Explanation

A Private Endpoint gives private, in-VNet connectivity to an Azure service, keeping traffic off the public internet.

AZ-104 Question 133

Single page →
Topic 2 · Question 133 · Select all that apply

You have a Microsoft Entra tenant. You plan to perform a bulk import of users. You need to ensure that imported user objects are added automatically as the members of a specific group based on each user's department. The solution must minimize administrative effort. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

  • ACreate groups that use the Assigned membership type.
  • BCreate an Azure Resource Manager (ARM) template.
  • CCreate groups that use the Dynamic User membership type. (correct answer)
  • DWrite a PowerShell script that parses an import file.
  • ECreate an XML file that contains user information and the appropriate attributes.
  • FCreate a CSV file that contains user information and the appropriate attributes. (correct answer)
Reveal answer & explanation
Correct answer: C, F

The correct answer is C, F. Option C: Create groups that use the Dynamic User membership type. Option F: Create a CSV file that contains user information and the appropriate attributes.

AZ-104 Question 134

Single page →
Topic 2 · Question 134

You have an Azure subscription that contains a storage account named storage1. You need to ensure that the access keys for storage1 rotate automatically. What should you configure?

  • Aa backup vault
  • Bredundancy for storage1
  • Clifecycle management for storage1
  • Dan Azure key vault (correct answer)
  • Ea Recovery Services vault
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: an Azure key vault

Explanation

Azure Key Vault securely stores and manages secrets, keys, and certificates with access policies.

Showing questions 81–100 of 350 · Page 5 of 18