πŸ”

AZ-104 β€” questions

Page 6 of 18 Β· 350 total questions.

Topic 2 Β· Question 137

You have a Microsoft Entra tenant named contoso.com. You collaborate with an external partner named fabrikam.com. You plan to invite users in fabrikam.com to the contoso.com tenant. You need to ensure that invitations can be sent only to fabrikam.com users. What should you do in the Microsoft Entra admin center?

  • AFrom Cross-tenant access settings, configure the Tenant restrictions settings.
  • BFrom Cross-tenant access settings, configure the Microsoft cloud settings.
  • CFrom External collaboration settings, configure the Guest user access restrictions settings.
  • DFrom External collaboration settings, configure the Collaboration restrictions settings. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: From External collaboration settings, configure the Collaboration restrictions settings.

Topic 2 Β· Question 138 Β· Select all that apply

You have an Azure subscription that contains a storage account named storage1. The storage1 account contains blob data. You need to assign a role to a user named User1 to ensure that the user can access the blob data in storage1. The role assignment must support conditions. Which two roles can you assign to User1? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

  • AOwner
  • BStorage Account Contributor
  • CStorage Account Backup Contributor
  • DStorage Blob Data Contributor (correct answer)
  • EStorage Blob Data Owner (correct answer)
  • FStorage Blob Delegator
Reveal answer & explanation
Correct answer: D, E

The correct answer is D, E. Option D: Storage Blob Data Contributor Option E: Storage Blob Data Owner.

Topic 2 Β· Question 140

You have a Microsoft Entra tenant configured as shown in the following exhibit. The tenant contains the identities shown in the following table. You purchase a Microsoft Fabric license. To which identities can you assign the license?

Exhibit 1 for question 140Exhibit 2 for question 140
  • AUser1 only (correct answer)
  • BUser1 and Group1 only
  • CUser1 and Group2 only
  • DUser1, Group1, and Group2
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: User1 only.

Topic 2 Β· Question 141

You have an Azure subscription that contains a storage account named storage. The storage account contains a blob that stores images. Client access to storage1 is granted by using a shared access signature (SAS). You need to ensure that users receive a warning message when they generate a SAS that exceeds a seven-day time period. What should you do for storage?

  • AEnable a read-only lock.
  • BConfigure an alert rule.
  • CAdd a lifecycle management rule.
  • DSet Allow recommended upper limit for shared access signature (SAS) expiry interval to Enabled. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: Set Allow recommended upper limit for shared access signature (SAS) expiry interval to Enabled.

Topic 3 Β· Question 143

You have Azure subscription that includes data in following locations: You plan to export data by using Azure import/export job named Export1. You need to identify the data that can be exported by using Export1. Which data should you identify?

  • ADB1
  • Bcontainer1 (correct answer)
  • Cshare1
  • DTable1
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: container1.

Topic 3 Β· Question 146 Β· Select all that apply

You have an Azure subscription that contains the resources in the following table. Store1 contains a file share named data. Data contains 5,000 files. You need to synchronize the files in the file share named data to an on-premises server named Server1. Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

  • ACreate a container instance
  • BRegister Server1 (correct answer)
  • CInstall the Azure File Sync agent on Server1 (correct answer)
  • DDownload an automation script
  • ECreate a sync group (correct answer)
Reveal answer & explanation
Correct answer: B, C, E

The correct answer is B, C, E. Option B: Register Server1 Option C: Install the Azure File Sync agent on Server1 Option E: Create a sync group.

Topic 3 Β· Question 155

You have an Azure subscription that contains the storage accounts shown in the following table. You need to identify which storage account can be converted to zone-redundant storage (ZRS) replication by requesting a live migration from Azure support. What should you identify?

  • Astorage1
  • Bstorage2 (correct answer)
  • Cstorage3
  • Dstorage4
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: storage2.

Topic 3 Β· Question 156 Β· Select all that apply

You have an Azure subscription that contains a storage account named account1. You plan to upload the disk files of a virtual machine to account1 from your on-premises network. The on-premises network uses a public IP address space of 131.107.1.0/24. You plan to use the disk files to provision an Azure virtual machine named VM1. VM1 will be attached to a virtual network named VNet1. VNet1 uses an IP address space of 192.168.0.0/24. You need to configure account1 to meet the following requirements: β€’ Ensure that you can upload the disk files to account1. β€’ Ensure that you can attach the disks to VM1. β€’ Prevent all other access to account1. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

  • AFrom the Networking blade of account1, select Selected networks. (correct answer)
  • BFrom the Networking blade of account1, select Allow trusted Microsoft services to access this storage account.
  • CFrom the Networking blade of account1, add the 131.107.1.0/24 IP address range. (correct answer)
  • DFrom the Networking blade of account1, add VNet1.
  • EFrom the Service endpoints blade of VNet1, add a service endpoint.
Reveal answer & explanation
Correct answer: A, C

The correct answer is A, C. Option A: From the Networking blade of account1, select Selected networks. Option C: From the Networking blade of account1, add the 131.107.1.0/24 IP address range.

Topic 3 Β· Question 159

You have a Recovery Service vault that you use to test backups. The test backups contain two protected virtual machines. You need to delete the Recovery Services vault. What should you do first?

  • AFrom the Recovery Service vault, delete the backup data.
  • BModify the disaster recovery properties of each virtual machine.
  • CModify the locks of each virtual machine.
  • DFrom the Recovery Service vault, stop the backup of each backup item. (correct answer)
Reveal answer & explanation
Correct answer: D

The correct answer is D. Option D: From the Recovery Service vault, stop the backup of each backup item.

Topic 3 Β· Question 161

You have an Azure subscription named Subscription1. You have 5 TB of data that you need to transfer to Subscription1. You plan to use an Azure Import/Export job. What can you use as the destination of the imported data?

  • Aa virtual machine
  • Ban Azure Cosmos DB database
  • CAzure File Storage (correct answer)
  • Dthe Azure File Sync Storage Sync Service
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Azure File Storage.

Topic 3 Β· Question 163

You have an Azure subscription that contains an Azure Storage account. You plan to create an Azure container instance named container1 that will use a Docker image named Image1. Image1 contains a Microsoft SQL Server instance that requires persistent storage. You need to configure a storage service for Container1. What should you use?

  • AAzure Files (correct answer)
  • BAzure Blob storage
  • CAzure Queue storage
  • DAzure Table storage
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Azure Files

Explanation

Azure Files offers fully managed SMB/NFS file shares that multiple clients can mount concurrently.

Topic 3 Β· Question 164

You have an Azure subscription named Subscription1. You have 5 TB of data that you need to transfer to Subscription1. You plan to use an Azure Import/Export job. What can you use as the destination of the imported data?

  • Aan Azure Cosmos DB database
  • BAzure Blob storage (correct answer)
  • CAzure Data Lake Store
  • Dthe Azure File Sync Storage Sync Service
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Azure Blob storage

Explanation

Azure Blob Storage provides durable, scalable object storage for unstructured data. Azure Blob Storage provides durable, scalable object storage with hot, cool, and archive tiers for cost control.

Topic 3 Β· Question 170

You have two Azure virtual machines named VM1 and VM2. You have two Recovery Services vaults named RSV1 and RSV2. VM2 is backed up to RSV1. You need to back up VM2 to RSV2. What should you do first?

  • AFrom the RSV1 blade, click Backup items and stop the VM2 backup (correct answer)
  • BFrom the RSV2 blade, click Backup. From the Backup blade, select the backup for the virtual machine, and then click Backup
  • CFrom the VM2 blade, click Disaster recovery, click Replication settings, and then select RSV2 as the Recovery Services vault
  • DFrom the RSV1 blade, click Backup Jobs and export the VM2 job
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: From the RSV1 blade, click Backup items and stop the VM2 backup.

Topic 3 Β· Question 171

You have a general-purpose v1 Azure Storage account named storage1 that uses locally-redundant storage (LRS). You need to ensure that the data in the storage account is protected if a zone fails. The solution must minimize costs and administrative effort. What should you do first?

  • ACreate a new storage account.
  • BConfigure object replication rules.
  • CUpgrade the account to general-purpose v2. (correct answer)
  • DModify the Replication setting of storage1.
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: Upgrade the account to general-purpose v2. This option delivers the requirement at the lowest cost.

Topic 3 Β· Question 172

You create an Azure Storage account named contosostorage. You plan to create a file share named data. Users need to map a drive to the data file share from home computers that run Windows 10. Which outbound port should you open between the home computers and the data file share?

  • A80
  • B443
  • C445 (correct answer)
  • D3389
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: 445.

Topic 3 Β· Question 173

You have an Azure subscription named Subscription1. You have 5 TB of data that you need to transfer to Subscription1. You plan to use an Azure Import/Export job. What can you use as the destination of the imported data?

  • AAzure File Storage (correct answer)
  • Ban Azure Cosmos DB database
  • CAzure Data Factory
  • DAzure SQL Database
Reveal answer & explanation
Correct answer: A

The correct answer is A. Option A: Azure File Storage.

Topic 3 Β· Question 175

You have an Azure subscription that contains a storage account named storage1. You have the devices shown in the following table. From which devices can you use AzCopy to copy data to storage1?

  • ADevice 1 only
  • BDevice1, Device2 and Device3 (correct answer)
  • CDevice1 and Device2 only
  • DDevice1 and Device3 only
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: Device1, Device2 and Device3.

Topic 3 Β· Question 176

You have an Azure Storage account named storage1 that contains a blob container named container1. You need to prevent new content added to container1 from being modified for one year. What should you configure?

  • Athe access tier
  • Ban access policy (correct answer)
  • Cthe Access control (IAM) settings
  • Dthe access level
Reveal answer & explanation
Correct answer: B

The correct answer is B. Option B: an access policy.

Topic 3 Β· Question 178 Β· Select all that apply

You are configuring Azure Active Directory (Azure AD) authentication for an Azure Storage account named storage1. You need to ensure that the members of a group named Group1 can upload files by using the Azure portal. The solution must use the principle of least privilege. Which two roles should you configure for storage1? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

  • AStorage Account Contributor
  • BStorage Blob Data Contributor (correct answer)
  • CReader (correct answer)
  • DContributor
  • EStorage Blob Data Reader
Reveal answer & explanation
Correct answer: B, C

The correct answer is B, C. Option B: Storage Blob Data Contributor Option C: Reader.

Topic 3 Β· Question 179

You have an on-premises server that contains a folder named D:\Folder1. You need to copy the contents of D:\Folder1 to the public container in an Azure Storage account named contosodata. Which command should you run?

  • Ahttps://contosodata.blob.core.windows.net/public
  • Bazcopy sync D:\folder1 https://contosodata.blob.core.windows.net/public --snapshot
  • Cazcopy copy D:\folder1 https://contosodata.blob.core.windows.net/public --recursive (correct answer)
  • Daz storage blob copy start-batch D:\Folder1 https://contosodata.blob.core.windows.net/public
Reveal answer & explanation
Correct answer: C

The correct answer is C. Option C: azcopy copy D:\folder1 https://contosodata.blob.core.windows.net/public --recursive

Explanation

AzCopy is a command-line tool that efficiently copies data to and from Azure Storage.

Showing questions 101–120 of 350 Β· Page 6 of 18