Microsoft AZ-104 Practice Test - Questions Answers, Page 12

Box 1: No

The default port for RDP is TCP port 3389. A rule to permit RDP traffic must be created automatically when you create your VM.

Box 2: Yes

NSG2 will allow this.

Box 3: Yes

NSG2 will allow this.

Note on NSG-Subnet1: Azure routes network traffic between all subnets in a virtual network, by default.

Reference:

https://docs.microsoft.com/en-us/azure/virtual-machines/troubleshooting/troubleshoot-rdpconnection

Box 1: Yes

With VNet-to-VNet you can connect Virtual Networks in Azure across Different regions.

Box 2: Yes

Azure supports the following types of peering:

Virtual network peering: Connect virtual networks within the same Azure region.

Global virtual network peering: Connecting virtual networks across Azure regions.

Box 3: Yes

Reference:

https://azure.microsoft.com/en-us/blog/vnet-to-vnet-connecting-virtual-networks-in-azure-acrossdifferent-regions/

https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-managepeering# requirements-and-constraints

Status is Stopped (Deallocated).

The DSC extension for Windows requires that the target virtual machine is able to communicate with

Azure.

The VM needs to be started.

Reference:

https://docs.microsoft.com/en-us/azure/virtual-machines/extensions/dsc-windows

Load balancing provides a higher level of availability and scale by spreading incoming requests across virtual machines (VMs). You can use the Azure portal to create a Standard load balancer and balance internal traffic among VMs.

To load balance successfully between VM1 and VM2 you have to place the html file in the path mentioned in the Probe1 configuration.

Reference:

https://docs.microsoft.com/en-us/azure/load-balancer/tutorial-load-balancer-standard-internalportal

You can set expiration policy only for Office 365 groups in Azure Active Directory (Azure AD).

Note: With the increase in usage of Office 365 Groups, administrators and users need a way to clean up unused groups. Expiration policies can help remove inactive groups from the system and make things cleaner.

When a group expires, all of its associated services (the mailbox, Planner, SharePoint site, etc.) are also deleted.

You can set up a rule for dynamic membership on security groups or Office 365 groups.

Incorrect Answers:

A, D, E: You can set expiration policy only for Office 365 groups in Azure Active Directory (Azure AD).

Reference:

https://docs.microsoft.com/en-us/office365/admin/create-groups/office-365-groups-expirationpolicy?view=o365-worldwide

Enable remember Multi-Factor Authentication

Sign in to the Azure portal.

On the left, select Azure Active Directory > Users.

Select Multi-Factor Authentication.

Under Multi-Factor Authentication, select service settings.

On the Service Settings page, manage remember multi-factor authentication, select the Allow users to remember multi-factor authentication on devices they trust option.

Set the number of days to allow trusted devices to bypass two-step verification. The default is 14 days.

Select Save.

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-mfasettings

Ensure that "Enable an 'All Users' group in the directory" policy is set to "Yes" in your Azure Active

Directory (AD) settings in order to enable the "All Users" group for centralized access administration.

This group represents the entire collection of the Active Directory users, including guests and external users, that you can use to make the access permissions easier to manage within your directory.

Incorrect Answers:

A, B: User3 and User4 are guests already.

Note: By default, all users and guests in your directory can invite guests even if they're not assigned to an admin role. External collaboration settings let you turn guest invitations on or off for different types of users in your organization. You can also delegate invitations to individual users by assigning roles that allow them to invite guests.

Reference:

https://www.cloudconformity.com/knowledge-base/azure/ActiveDirectory/enable-all-usersgroup.html

Only a global administrator can add users to this tenant.

Reference:

https://docs.microsoft.com/en-us/azure/devops/organizations/accounts/add-users-to-azure-ad

Only a global administrator can add users to this tenant.

Reference:

https://docs.microsoft.com/en-us/azure/devops/organizations/accounts/add-users-to-azure-ad