[2024] AZ-104 Exam Dumps, Test Engine Practice Test Questions
Pass AZ-104 exam [Mar 15, 2024] Updated 298 Questions
How can you enhance your Microsoft AZ-104 Exam skills?
Microsoft Azure is a fast-growing technology company in the world which has a huge number of opportunities in front of it. Before appearing for the exam, candidates should have a clear idea about this company and should have a proper understanding about its services. Traffic management, management of Internet of Things (IoT), storage and virtual networking are some services of this company which can help you to develop your career. Balancing of different aspects and taking correct decisions with proper facts and figures is the most important factor in the career. Subnet mask is a big issue for candidates. Processes related to adding, manipulation and moving the resources are important for candidates who want to do well in AZ-104:Microsoft Azure Administrator Exam. Processes related to reading and writing the storage files are also required for candidates. Microsoft AZ-104 exam dumps are important for getting good marks in the exam. Overall, the knowledge of networking protocols and their knowledge helps in increasing the score in AZ-104:Microsoft Azure Administrator Exam.
Process of storage involves the creation of the storage account, storage services, location setting and pricing. Secure authentication and encryption is important for storing data in Azure. Interface used to access the storage includes PowerShell. Rules are used to write the storage policies. Object is used as an extension of the storage account. View allows the users to view the resources of storage. Demonstrate the procedures for listing, creating and deleting the files and directories. Real Time Compression is used for compressing the data in the real time. Hard disk is used for storing the data. Connect to a storage account, create a container and upload data. Lifecycle policies are used for managing the data in Azure.
Kubernetes is a container orchestrator which helps in simple deployment and management of containerized applications. Team of developers and IT professionals work together to create and manage the cluster.
Schedule exam
Languages: English, Chinese (Simplified), Korean, Japanese, French, German, Spanish
Retirement date: none
This exam measures your ability to accomplish the following technical tasks: manage Azure identities and governance; implement and manage storage; deploy and manage Azure compute resources; configure and manage virtual networking; and monitor and back up Azure resources.
NEW QUESTION # 88
You have an Azure Active Directory (Azure AD) tenant named adatum.com that contains the users shown in the following table.
Adatum.com has the following configurations:
Users may join devices to Azure AD is set toUser1.
Additional local administrators on Azure AD joined devices is set toNone.
You deploy Windows 10 to a computer named Computer. User1 joins Computer1 to adatum.com.
You need to identify which users are added to the local Administrators group on Computer1.
- A. User1, User2, User3, and User4
- B. User1 only
- C. User2 only
- D. User1, User2, and User3 only
- E. User1 and User2 only
Answer: E
Explanation:
Explanation
Users may join devices to Azure AD - This setting enables you to select the users who can register their devices as Azure AD joined devices. The default is All.
Additional local administrators on Azure AD joined devices - You can select the users that are granted local administrator rights on a device. Users added here are added to the Device Administrators role in Azure AD.
Global administrators, here User2, in Azure AD and device owners are granted local administrator rights by default.
References:
https://docs.microsoft.com/en-us/azure/active-directory/devices/device-management-azure-portal
NEW QUESTION # 89
You have a virtual network named VNET1 that contains the subnets shown in the following table:
D18912E1457D5D1DDCBD40AB3BF70D5D
You have two Azure virtual machines that have the network configurations shown in the following table:
For NSG1, you create the inbound security rule shown in the following table:
For NSG2, you create the inbound security rule shown in the following table:
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Box 1: Yes
The inbound security rule for NSG1 allows TCP port 1433 from 10.10.2.0/24 (or Subnet2 where VM2 and VM3 are located) to 10.10.1.0/24 (or Subnet1 where VM1 is located) while the inbound security rule for NSG2 blocks TCP port 1433 from 10.10.2.5 (or VM2) to 10.10.1.5 (or VM1). However, the NSG1 rule has a higher priority (or lower value) than the NSG2 rule.
Box 2: Yes
No rule explicitly blocks communication from VM1. The default rules, which allow communication, are thus applied.
Box 3: Yes
No rule explicitly blocks communication between VM2 and VM3 which are both on Subnet2. The default rules, which allow communication, are thus applied.
Reference:
https://docs.microsoft.com/en-us/azure/virtual-network/security-overview
NEW QUESTION # 90
You plan to deploy an Azure container instance by using the following Azure Resource Manager template.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the template.
Answer:
Explanation:
As the flag is mentioned as "on-failure" in the policy, so it will restart automatically Reference:
https://docs.microsoft.com/en-us/cli/azure/container?view=azure-cli-latest
https://docs.docker.com/config/containers/start-containers-automatically/
NEW QUESTION # 91
You have an Azure Active Directory (Azure AD) tenant.
You need to create a conditional access policy that requires all users to use multi-factor authentication when they access the Azure portal.
Which three settings should you configure? To answer, select the appropriate settings in the answer area.
Answer:
Explanation:
Explanation:
Box 1: Assignments, Users and Groups
When you configure the sign-in risk policy, you need to set:
The users and groups the policy applies to: Select Individuals and Groups
Box 2:
When you configure the sign-in risk policy, you need to set the type of access you want to be enforced.
Box 3:
When you configure the sign-in risk policy, you need to set:
The type of access you want to be enforced when your sign-in risk level has been met:
References:
https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/howto-user-risk-policy
NEW QUESTION # 92
You create a Recovery Services vault backup policy named Policy1 as shown in the following exhibit:
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Box 1: 10 years
The yearly backup point occurs to 1 March and its retention period is 10 years.
Box 2: 36 months
The monthly backup point occurs on the 1st of every month and its retention period is 36 months.
NEW QUESTION # 93
Your company has a main office in London that contains 100 client computers.
Three years ago, you migrated to Azure Active Directory (Azure AD).
The company's security policy states that all personal devices and corporate-owned devices must be
registered or joined to Azure AD.
A remote user named User1 is unable to join a personal device to Azure AD from a home network.
You verify that other users can join their devices to Azure AD.
You need to ensure that User1 can join the device to Azure AD.
What should you do?
- A. From the Device settings blade, modify the Users may join devices to Azure AD setting.
- B. Assign the User administrator role to User1.
- C. Create a point-to-site VPN from the home network of User1 to Azure.
- D. From the Device settings blade, modify the Maximum number of devices per user setting.
Answer: D
Explanation:
The Maximum number of devices setting enables you to select the maximum number of devices that a user can have in Azure AD. If a user reaches this quota, they will not be able to add additional devices until one or more of the existing devices are removed.
Incorrect Answers:
A: The Users may join devices to Azure AD setting enables you to select the users who can join devices to Azure AD. Options are All, Selected and None. The default is All.
C: Azure AD Join enables users to join their devices to Active Directory from anywhere as long as they have connectivity with the Internet.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/devices/device-management-azure-portal
http://techgenix.com/pros-and-cons-azure-ad-join/
NEW QUESTION # 94
You have an Azure subscription that contains the resources shown in the following table.
You need to create a network interface named NIC1.
In which location can you create NIC1?
- A. East US and West Europe only.
- B. East US, West Europe, and North Europe.
- C. East US only.
- D. East US and North Europe only.
Answer: C
Explanation:
Explanation
A virtual network is required when you create a NIC. Select the virtual network for the network interface. You can only assign a network interface to a virtual network that exists in the same subscription and location as the network interface. Once a network interface is created, you cannot change the virtual network it is assigned to.
The virtual machine you add the network interface to must also exist in the same location and subscription as the network interface.
References:
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-network-interface
NEW QUESTION # 95
You have an Azure subscription named Subscription1 that contains the resources shown in the following table.
You plan to configure Azure Backup reports for Vault1.
You are configuring the Diagnostics settings for the AzureBackupReports log.
Which storage accounts and which Log Analytics workspaces can you use for the Azure Backup reports of Vault1? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 96
You have an Azure subscription named Subscription1. Subscription1 contains two Azure virtual machines named VM1 and VM2. VM1 and VM2 run Windows Server 2016.
VM1 is backed up daily by Azure Backup without using the Azure Backup agent.
VM1 is affected by ransomware that encrypts data.
You need to restore the latest backup of VM1.
To which location can you restore the backup? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Box 1 : VM1 and VM2 only
When recovering files, you can't restore files to a previous or future operating system version.You can restore files from a VM to the same server operating system, or to the compatible client operating system. Therefore -
"VM1 and VM2 only" is the best answer since both run on Windows Server 2016.
"A new Azure virtual machine only" ,this will also work but why to create unnecessary new VM in Azure if existing VM will do the task. So this option is incorrect.
Box 2 : VM1 or A new Azure virtual machine only
When restoring a VM, you can't use the replace existing VM option for encrypted VMs. This option is only supported for unencrypted managed disks. And also You can restore files from a VM to the same server operating system, or to the compatible client operating system only. Hence "VM1 or A new Azure virtual machine only" is correct answer.
References:
https://docs.microsoft.com/en-us/azure/backup/backup-azure-arm-restore-vms
https://docs.microsoft.com/en-us/azure/backup/backup-azure-restore-files-from-vm#system-requirements
NEW QUESTION # 97
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure subscription that contains the following users in an Azure Active Directory tenant named contoso.onmicrosoft.com:
User1 creates a new Azure Active Directory tenant named external.contoso.onmicrosoft.com.
You need to create new user accounts in external.contoso.onmicrosoft.com.
Solution: You instruct User1 to create the user accounts.
Does that meet the goal?
- A. No
- B. Yes
Answer: B
Explanation:
Only a global administrator can add users to this tenant.
Reference:
https://docs.microsoft.com/en-us/azure/devops/organizations/accounts/add-users-to-azure-ad
NEW QUESTION # 98
You have an Azure subscription named Subscription1.
You create an Azure Storage account named contosostorage, and then you create a file share named data.
Which UNC path should you include in a script that references files from the data file share? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 99
Which blade should you instruct the finance department auditors to use?
- A. Payment methods
- B. Overview
- C. Invoices
- D. Partner information
Answer: C
Explanation:
Explanation
You can opt in and configure additional recipients to receive your Azure invoice in an email. This feature may not be available for certain subscriptions such as support offers, Enterprise Agreements, or Azure in Open.
* Select your subscription from the Subscriptions page. Opt-in for each subscription you own. Click Invoices then Email my invoice.
* Click Opt in and accept the terms.
Scenario: During the testing phase, auditors in the finance department must be able to review all Azure costs from the past week.
References: https://docs.microsoft.com/en-us/azure/billing/billing-download-azure-invoice-daily-usage-date
NEW QUESTION # 100
You plan to automate the deployment of a virtual machine scale set that uses the Windows Server 2016 Datacenter image.
You need to ensure that when the scale set virtual machines are provisioned, they have web server components installed.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE Each correct selection is worth one point.
- A. Create an Azure policy.
- B. Upload a configuration script.
- C. Create an automation account.
- D. Modify the extensionProfile section of the Azure Resource Manager template.
- E. Create a new virtual machine scale set in the Azure portal.
Answer: D,E
Explanation:
Virtual Machine Scale Sets can be used with the Azure Desired State Configuration (DSC) extension handler. Virtual machine scale sets provide a way to deploy and manage large numbers of virtual machines, and can elastically scale in and out in response to load. DSC is used to configure the VMs as they come online so they are running the production software.
Reference:
https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-dsc
NEW QUESTION # 101
You have an Azure subscription named Subcription1 that contains a resource group named RG1.
In RG1. you create an internal load balancer named LB1 and a public load balancer named 162.
You need to ensure that an administrator named Admin 1 can manage LB1 and LB2. The solution must follow the principle of least privilege.
Which role should you assign to Admin1 for each task? To answer, select the appropriate options in the answer area.
NOTE: Caen correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 102
You have an Azure subscription that contains the hierarchy shown in the following exhibit.
You create an Azure Policy definition named Policy1.
To which Azure resources can you assign Policy and which Azure resources can you specify as exclusions from Policy1? To answer, select the appropriate options in the answer NOTE Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 103
You have an Azure subscription that contains the virtual machines shown in the following table.
javascript:void(0)
You deploy a load balancer that has the following configurations:
* Name: LB1
* Type internal
* SKU: Standard
* Virtual network VNET1
You need to ensure that you can add VM1 and VM2 to the backend pool of LB1.
Solution: You create a Basic SKU public IP address, associate the address to the network interface of VM1, and then start VM1.
Does this meet the goal?
- A. No
- B. Yes
Answer: A
Explanation:
You can only attach virtual machines that are in the same location and on the same virtual network as the LB. Virtual machines must have a standard SKU public IP or no public IP.
The LB needs to be a standard SKU to accept individual VMs outside an availability set or vmss. VMs do not need to have public IPs but if they do have them they have to be standard SKU. Vms can only be from a single network. When they don't have a public IP they are assigned an ephemeral IP.
Also, when adding them to a backend pool, it doesn't matter in which status are the VMs.
Note: Load balancer and the public IP address SKU must match when you use them with public IP addresses.
NEW QUESTION # 104
You implement The planned changes for NSG1 and NSG2.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 105
You have an Azure subscription that contains an Azure Directory (Azure AD) tenant named contoso.com. The tenant is synced to the on-premises Active Directory domain. The domain contains the users shown in the following table.
You enable self-service password reset (SSPR) for all users and configure SSPR to have the following authentication methods:
Number of methods required to reset: 2
Methods available to users: Mobile phone, Security questions
Number of questions required to register: 3
Number of questions required to reset: 3
You select the following security questions:
What is your favorite food?
In what city was your first job?
What was the name of your first pet?
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
References:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-sspr-deployment
NEW QUESTION # 106
You need to recommend a solution to automate the configuration for the finance department users. The solution must meet the technical requirements.
What should you include in the recommended?
- A. an Azure logic app and the Microsoft Identity Management (MIM) client
- B. Azure AD Identity Protection
- C. dynamic groups and conditional access policies
- D. Azure AP B2C
Answer: C
Explanation:
Scenario: Ensure Azure Multi-Factor Authentication (MFA) for the users in the finance department only.
The recommendation is to use conditional access policies that can then be targeted to groups of users, specific applications, or other conditions.
References:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-userstates
NEW QUESTION # 107
You have an Azure tenant that contains two subscriptions named Subscription1 and Subscription2.
In Subscription1, you deploy a virtual machine named Server1 that runs Windows Server 2016.
Server1 uses managed disks.
You need to move Server1 to Subscription2. The solution must minimize administration effort.
What should you do first?
- A. From Azure PowerShell, run the Move-AzureRmResource cmdlet.
- B. Create a snapshot of the virtual disk.
- C. In Subscription2, create a copy of the virtual disk.
- D. Create a new virtual machine in Subscription2.
Answer: A
Explanation:
To move existing resources to another resource group or subscription, use the Move- AzureRmResource cmdlet.
https://docs.microsoft.com/en-in/azure/azure-resource-manager/resource-group-move- resources#move-resources
NEW QUESTION # 108
You have an Azure subscription that contains three virtual networks named VNET1, VNET2, and VNET3.
Peering for VNET1 is configured as shown in the following exhibit.
Peering for VNET2 is configured as shown in the following exhibit.
Peering for VNET3 is configured as shown in the following exhibit.
How can packets be routed between the virtual networks? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-peering-overview
NEW QUESTION # 109
......
AZ-104: Microsoft Azure Administrator Guide for IT Professionals
Microsoft Certified Solutions Associate (MCSA): Microsoft Azure Administrator is an exam that tests your knowledge of designing solutions with Microsoft Azure. Policy instruments are important for this exam. Worth knowing and understanding and a must read and a great resource for this exam. Reports and guidance and documents and manuals are all included in this practice exam. Troubleshooting and architecting and designing and best practices are all included in this practice exam. Domain specific knowledge is important for this exam. Space and time are both tested on this exam. Security and Training are both important for this exam. Troubleshooting and architecture and design and best practices are all included in this practice exam. Microsoft AZ-104 exam dumps include all the relevant information you need to know. Options and steps and practices and tips and tricks and tips and tricks all require you to know each of these different Azure services.
Import and export and migration and design and analysis and configuration and analysis and design are all included in this practice exam. Remember and understand are both important for this exam. Foundation and core and core and core and core and basic and intermediate and advanced are all included in this practice exam. Azcopy is an important tool when you are working with Azure. Explorer and library and panel and panel and panel and panel and command line are all included in this practice exam. Challenging questions require you to know each of these different Azure services.
Microsoft AZ-104 Real 2024 Braindumps Mock Exam Dumps: https://vcecollection.trainingdumps.com/AZ-104-valid-vce-dumps.html
