You have an Azure subscription that contains the resources shown in the following table. The Not allowed resource types Azure policy is assigned to RG1 and uses the following parameters:-Microsoft.Network/virtualNetwork- Microsoft.Compute/virtualMachinesIn RG1, you need to create a new virtual machine named VM2, and then connect VM2 to VNET1.What should you do first?

Remove Microsoft.Network/virtualNetworks from the policy

Create an Azure Resource Manager template

Remove Microsoft.Compute/virtualMachines from the policy

You have an Azure subscription that contains three virtual networks named VNet1, VNet2, VNet3.VNet2 contains a virtual appliance named VM2 that operates as a router.You are configuring the virtual networks in a hub and spoke topology that uses VNet2 as the hub network.You plan to configure peering between VNet1 and VNet2 and between VNet2 and VNet3.You need to provide connectivity between VNet1 and VNet3 through VNet2.Which two configurations should you perform? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.

On the peering connections, allow forwarded traffic.

Create route tables and assign the table to subnets.

On the peering connections, allow forwarded traffic.

On the peering connections, allow gateway transit.

Create route tables and assign the table to subnets.

On the peering connections, use remote gateways.

You are the global administrator for an Azure Active Directory (Azure AD) tenant named adatum.com.You need to enable two-step verification for Azure users.What should you do?

Create an Azure AD conditional access policy.

Configure a playbook in Azure AD conditional access policy.

Create an Azure AD conditional access policy.

Create and configure the Identify Hub.

Install and configure Azure AD Connect.

You have an Azure Service Bus.You need to implement a Service Bus queue that guarantees first in first-out (FIFO) delivery of messages.What should you do?

Set the Lock Duration setting to 10 seconds.

Set the Max Size setting of the queue to 5 GB.

You have an Azure subscription.You activate Enterprise Mobility + Security E5 licenses for all users.You need the users to request approval before they can create virtual machines.What should you configure first?

Azure Active Directory (Azure AD) Privileged Identity Management for the Azure resource roles

Azure Active Directory (Azure AD) conditional access policies

Azure Active Directory (Azure AD) Authentication methods

Azure Active Directory (Azure AD) Privileged Identity Management for the Azure resource roles

Azure Active Directory (Azure AD) Privileged Identity Management for the Azure AD directory roles

You have an on-premises network that contains a Hyper-V host named Host1. Host1 runs WindowsServer 2016 and hosts 10 virtual machines that run Windows Server 2016.You plan to replicate the virtual machines to Azure by using Azure Site Recovery.You create a Recovery Services vault named ASR1 and a Hyper-V site named Site1.You need to add Host1 to ASR1.What should you do?

Download the installation file for the Azure Site Recovery Provider.Download the vault registration key.Install the Azure Site Recovery Provider on Host1 and register the server.

Download the installation file for the Azure Site Recovery Provider.Download the storage account key.Install the Azure Site Recovery Provider on Host1 and register the server.

Download the installation file for the Azure Site Recovery Provider.Download the vault registration key.Install the Azure Site Recovery Provider on each virtual machine and register the virtual machines.

Download the installation file for the Azure Site Recovery Provider.Download the storage account key.Install the Azure Site Recovery Provider on each virtual machine and register the virtual machines.

You have an A2ure virtual machine named VMVThe network interface for VM1 is configured as shown in the exhibit(Click the Exhibit tab.) You deploy a web server on VM1. and then create a secure website that is accessible by using the HTTPS protocol. VM1 is used as a web server only.You need to ensure that users can connect to the website from the internet.What should you do?

Change the priority of Rute3 to 450

For Rule4. change the protocol from UDP to Any

Change the priority of Rute3 to 450

You have an Azure virtual machine named VM1.The network interface for VM1 is configured as shown in the exhibit. (Click the Exhibit tab.) You deploy a web server on VM1, and then create a secure website that is accessible by using the HTTPS protocol. VM1 is used as a web server only.You need to ensure that users can connect to the website from the internet.What should you do?

For Rule5, change the Action to Allow and change the priority to 401.

Create a new inbound rule that allows TCP protocol 443 and configure the protocol to have a priority of 501.

For Rule5, change the Action to Allow and change the priority to 401.

Your VMware vSphere on-premises infrastructure hosts 600 virtual machines (VMs).Your company is planning to move all of these VMs to Azure. You are asked to provide information about the resources that will be needed in Azure to host all of the VMs.All VMs hosted in your on-premise infrastructure are based on Windows Server 2012 R2 or newer and RedHat Enterprise Linux 7.0 or newer.You conduct the initial migration assessment and get a message that some virtual machines are conditionally ready for Azure.You need to find the cause of this message.What are two reasons why are you might get this message on some VMs? (Choose two)Each correct answer presents part of the solution.

The operating system is configured as Windows Server 2003 in vCenter Server.

The VMs are configured with the UEFI boot type.

The vCenter user does not have enough permissions on affected VMs.

The operating system is configured as Windows Server 2003 in vCenter Server.

The operating system is configured as Others in vCenter Server.

The VMs are configured with the BIOS boot type.

The VMs are configured with the UEFI boot type.

You have an Azure Active Directory (Azure AD) tenant.All administrators must enter a verification code to access the Azure portal.You need to ensure that the administrators can access the Azure portal only from your on-premises network.What should you configure?

the multi-factor authentication service settings.

an Azure AD Identity Protection user risk policy.

the multi-factor authentication service settings.

the default for all the roles in Azure AD Privileged Identity Management

an Azure AD Identity Protection sign-in risk policy

You have an Azure subscription.You enable multi-factor authentication for all users.Some users report that the email applications on their mobile device cannot connect to their MicrosoftExchange Online mailbox. The users can access Exchange Online by using a web browser and fromMicrosoft Outlook 2016 on their computer.You need to ensure that the users can use the email applications on their mobile device.What should you instruct the users to do?

Reset the Azure Active Directory (Azure AD) password

Enable self-service password reset

Reinstall the Microsoft Authenticator app

You have an Active Directory forest named contoso.com.You install and configure Azure AD Connect to use password hash synchronization as the single signon (SSO) method. Staging mode is enabled.You review the synchronization results and discover that the Synchronization Service Manager does not display any sync jobs.You need to ensure that the synchronization completes successfully.What should you do?

Run Azure AD Connect and disable staging mode.

From Synchronization Service Manager, run a full import.

Run Azure AD Connect and set the SSO method to Pass-through Authentication.

From Azure PowerShell, run Start-AdSyncSyncCycle -PolicyType Initial.

Run Azure AD Connect and disable staging mode.

You sign up for Azure Active Directory (Azure AD) Premium.You need to add a user named admin1@contoso.com as an administrator on all the computers that will be joined to the Azure AD domain.What should you configure in Azure AD?

Device settings from the Devices blade.

General settings from the Groups blade.

User settings from the Users blade.

Providers from the MFA Server blade.

You have an Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com.You hire a temporary vendor. The vendor uses a Microsoft account that has a sign-in of user1@outlook.com.You need to ensure that the vendor can authenticate to the tenant by using user1@outlook.com.What should you do?

From the Azure portal, add a new guest user, and then specify user1@outlook.com as the email address.

From Windows PowerShell, run the New-AzureADUser cmdlet and specify the -UserPrincipalName user1@outlook.com parameter.

From the Azure portal, add a custom domain name, create a new Azure AD user, and then specify user1@outlook.com as the username.

From Azure Cloud Shell, run the New-AzureADUser cmdlet and specify the - UserPrincipalName user1@outlook.com parameter.

From the Azure portal, add a new guest user, and then specify user1@outlook.com as the email address.

You configure Azure AD Connect for Azure Active Directory Seamless Single Sign-On (Azure AD Seamless SSO) for an on-premises network. Users report that when they attempt to access myapps.microsoft.com, they are prompted multiple times to sign in and are forced to use an account name that ends with onmicrosoft.com.You discover that there is a UPN mismatch between Azure AD and the on-premises Active Directory.You need to ensure that the users can use single-sign on (SSO) to access Azure resources.What should you do first?

From Azure AD, add and verify a custom domain name.

From the on-premises network, deploy Active Directory Federation Services (AD FS).

From Azure AD, add and verify a custom domain name.

From the on-premises network, request a new certificate that contains the Active Directory domain name.

From the server that runs Azure AD Connect, modify the filtering options.

You have an Azure subscription that contains the following storage account: You need 10 create a request to Microsoft Support to perform a live migration of storage1 to ZoneRedundant Storage (ZRS) replication. How should you modify storage1 before the Live migration?

Set the replication to Locally-redundant storage (IRS)

Disable Advanced threat protection

Microsoft AZ-104 Practice Test 9 - Free Online Exam Questions 321-360

Question 1 / 40

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You manage a virtual network named VNet1 that is hosted in the West US Azure region.

VNet1 hosts two virtual machines named VM1 and VM2 that run Windows Server.

You need to inspect all the network traffic from VM1 to VM2 for a period of three hours.

Solution: From Azure Monitor, you create a metric on Network in and Network Out.

Does this meet the goal?

Become a Premium Member for full access

Unlock Premium Member

Microsoft AZ-104 Practice Test 9

Question

Microsoft AZ-104 Practice Tests

Practice Tests