You need to recommend a solution to automate the configuration for the finance department users.The solution must meet the technical requirements.What should you include in the recommended?

dynamic groups and conditional access policies

an Azure logic app and the Microsoft Identity Management (MIM) client

dynamic groups and conditional access policies

You need to ensure that VM1 can communicate with VM4. The solution must minimize administrative effort.What should you do?

Assign VM4 an IP address of 10.0.1.5/24.

Create a user-defined route from VNET1 to VNET3.

Assign VM4 an IP address of 10.0.1.5/24.

Establish peering between VNET1 and VNET3.

Create an NSG and associate the NSG to VMI and VM4.

You need to prepare the environment to meet the authentication requirements.Which two actions should you perform? Each correct answer presents part of the solution.NOTE Each correct selection is worth one point.

an Azure Key Vault and an access policy

Azure Active Directory (AD) Identity Protection and an Azure policy

a Recovery Services vault and a backup policy

an Azure Key Vault and an access policy

an Azure Storage account and an access policy

You need to define a custom domain name for Azure AD to support the planned infrastructure.Which domain name should you use?

Add http://autologon.microsoftazuread-sso.com to the intranet zone of each client computer in the Miami office.

Install Azure AD Connect on a server in the Miami office and enable Pass-through Authentication

Join the client computers in the Miami office to Azure AD.

Add http://autologon.microsoftazuread-sso.com to the intranet zone of each client computer in the Miami office.

Allow inbound TCP port 8080 to the domain controllers in the Miami office.

Install Azure AD Connect on a server in the Miami office and enable Pass-through Authentication

Install the Active Directory Federation Services (AD FS) role on a domain controller in the Miami office.

You need to resolve the Active Directory issue.What should you do?

Run idfix.exe, and then use the Edit action.

From Active Directory Users and Computers, select the user accounts, and then modify the User Principal Name value.

Run idfix.exe, and then use the Edit action.

From Active Directory Domains and Trusts, modify the list of UPN suffixes.

From Azure AD Connect, modify the outbound synchronization rule.

You need to define a custom domain name for Azure AD to support the planned infrastructure.Which domain name should you use?

humongousinsurance.onmicrosoft.com

You need to prepare the environment to meet the authentication requirements.Which two actions should you perform? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.

Add http://autogon.microsoftazuread-sso.com to the intranet zone of each client computer in the Miami office.

Install Azure AD Connect on a server in the Miami office and enable Pass-through Authentication.

Allow inbound TCP port 8080 to the domain controllers in the Miami office.

Add http://autogon.microsoftazuread-sso.com to the intranet zone of each client computer in the Miami office.

Join the client computers in the Miami office to Azure AD.

Install the Active Directory Federation Services (AD FS) role on a domain controller in the Miami office.

Install Azure AD Connect on a server in the Miami office and enable Pass-through Authentication.

You need to resolve the licensing issue before you attempt to assign the license again.What should you do?

From the Profile blade, modify the usage location.

From the Groups blade, invite the user accounts to a new group.

From the Profile blade, modify the usage location.

From the Directory role blade, modify the directory role.

You need to meet the user requirement for Admin1.What should you do?

From the Subscriptions blade, select the subscription, and then modify the Properties.

From the Subscriptions blade, select the subscription, and then modify the Access control (IAM) settings.

From the Azure Active Directory blade, modify the Properties.

From the Azure Active Directory blade, modify the Groups.

You need to move the blueprint files to Azure.What should you do?

Use Azure Storage Explorer to copy the files.

Generate a shared access signature (SAS). Map a drive, and then copy the files by using File Explorer.

Use the Azure Import/Export service.

Generate an access key. Map a drive, and then copy the files by using File Explorer.

Use Azure Storage Explorer to copy the files.

You need to recommend an identify solution that meets the technical requirements.What should you recommend?

federated single-on (SSO) and Active Directory Federation Services (AD FS)

password hash synchronization and single sign-on (SSO)

Pass-through Authentication and single sign-on (SSO)

You are planning the move of App1 to Azure.You create a network security group (NSG).You need to recommend a solution to provide users with access to App1.What should you recommend?

Create an incoming security rule for port 443 from the Internet. Associate the NSG to the subnet that contains the web servers.

Create an outgoing security rule for port 443 from the Internet. Associate the NSG to all the subnets.

Create an incoming security rule for port 443 from the Internet. Associate the NSG to all the subnets.

Create an incoming security rule for port 443 from the Internet. Associate the NSG to the subnet that contains the web servers.

Create an outgoing security rule for port 443 from the Internet. Associate the NSG to the subnet that contains the web servers.

You need to ensure that you can grant Group4 Azure RBAC read-only permissions to all the A2ure file shares. What should you do?

On storagel and storage4, change the Account kind type to StorageV2 (general purpose v2).

Recreate storage2 and set Hierarchical namespace to Enabled.

On storage2, enable identity-based access for the file shares.

Create a shared access signature (SAS) for storagel, storage2, and storage4.

You need to add VM1 and VM2 to the backend pool of LB1. What should you do first?

Create a new NSG and associate the NSG to VNET1/Subnet1.

Redeploy VM1 and VM2 to the same availability zone.

Redeploy VM1 and VM2 to the same availability set.

Microsoft AZ-104 Practice Test 1 - Free Online Exam Questions 1-40

You discover that VM3 does NOT meet the technical requirements.

You need to verify whether the issue relates to the NSGs.

What should you use?

A.

Diagram in VNet1

B.

the security recommendations in Azure Advisor

C.

Diagnostic settings in Azure Monitor

D.

Diagnose and solve problems in Traffic Manager Profiles

E.

IP flow verify in Azure Network Watcher

Microsoft AZ-104 Practice Test 1

Question

Microsoft AZ-104 Practice Tests

Practice Tests