ExamGecko
Home Home / Microsoft / AZ-104

Microsoft AZ-104 Practice Test - Questions Answers, Page 23

Question list
Search
Search

List of questions

Search

Related questions











Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an app named App1 that is installed on two Azure virtual machines named VM1 and VM2.

Connections to App1 are managed by using an Azure Load Balancer.

The effective network security configurations for VM2 are shown in the following exhibit.

You discover that connections to App1 from 131.107.100.50 over TCP port 443 fail. You verify that the Load Balancer rules are configured correctly.

You need to ensure that connections to App1 can be established successfully from 131.107.100.50 over TCP port 443.

Solution: You modify the priority of the Allow_131.107.100.50 inbound security rule.

Does this meet the goal?

A.
Yes
A.
Yes
Answers
B.
No
B.
No
Answers
Suggested answer: B

Explanation:

The rule currently has the highest priority.

Reference:

https://fastreroute.com/azure-network-security-groups-explained/

Allow_131.107.100.50 rule already has the highest priority.

https://docs.microsoft.com/en-us/azure/virtual-network/network-security-groups-overview

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an app named App1 that is installed on two Azure virtual machines named VM1 and VM2.

Connections to App1 are managed by using an Azure Load Balancer.

The effective network security configurations for VM2 are shown in the following exhibit.

You discover that connections to App1 from 131.107.100.50 over TCP port 443 fail. You verify that the Load Balancer rules are configured correctly.

You need to ensure that connections to App1 can be established successfully from 131.107.100.50 over TCP port 443.

Solution: You create an inbound security rule that allows any traffic from the AzureLoadBalancer source and has a cost of 150.

Does this meet the goal?

A.
Yes
A.
Yes
Answers
B.
No
B.
No
Answers
Suggested answer: A

Explanation:

Reference:

https://docs.microsoft.com/en-us/azure/virtual-network/network-security-groups-overview

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an app named App1 that is installed on two Azure virtual machines named VM1 and VM2.

Connections to App1 are managed by using an Azure Load Balancer.

The effective network security configurations for VM2 are shown in the following exhibit.

You discover that connections to App1 from 131.107.100.50 over TCP port 443 fail. You verify that the Load Balancer rules are configured correctly.

You need to ensure that connections to App1 can be established successfully from 131.107.100.50 over TCP port 443.

Solution: You create an inbound security rule that denies all traffic from the 131.107.100.50 source and has a cost of 64999.

Does this meet the goal?

A.
Yes
A.
Yes
Answers
B.
No
B.
No
Answers
Suggested answer: B

Explanation:

Reference:

https://fastreroute.com/azure-network-security-groups-explained/

HOTSPOT

You purchase a new Azure subscription named Subscription1.

You create a virtual machine named VM1 in Subscription1. VM1 is not protected by Azure Backup.

You need to protect VM1 by using Azure Backup. Backups must be created at 01:00 and stored for 30 days.

What should you do? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.


Question 224
Correct answer: Question 224

Explanation:

Box 1: A Recovery Services vault

A Recovery Services vault is an entity that stores all the backups and recovery points you create over time.

Box 2: A backup policy

What happens when I change my backup policy?

When a new policy is applied, schedule and retention of the new policy is followed.

Reference:

https://docs.microsoft.com/en-us/azure/backup/backup-configure-vault

https://docs.microsoft.com/en-us/azure/backup/backup-azure-backup-faq

A Recovery Services vault is a storage entity in Azure that houses dat a. The data is typically copies of data, or configuration information for virtual machines (VMs), workloads, servers, or workstations. You can use Recovery Services vaults to hold backup data for various Azure services such as IaaS VMs (Linux or Windows) and Azure SQL databases.

You can use backup policy to configure schedule.

https://docs.microsoft.com/en-us/azure/backup/backup-azure-recovery-services-vault-overview

https://docs.microsoft.com/en-us/azure/backup/backup-azure-vms-first-look-arm

You have an Azure subscription that contains the resources in the following table.

Store1 contains a Tile share named data. Data contains 5,000 files.

You need to synchronize the files in the file share named data to an on-premises server named Server1.

Which three actions should you perform? Each correct answer presents part of the solution.

A.
Download an automation script.
A.
Download an automation script.
Answers
B.
Create a container instance.
B.
Create a container instance.
Answers
C.
Create a sync group.
C.
Create a sync group.
Answers
D.
Register Server1.
D.
Register Server1.
Answers
E.
Install the Azure File Sync agent on Server1.
E.
Install the Azure File Sync agent on Server1.
Answers
Suggested answer: C, D, E

Explanation:

Step 1 (E): Install the Azure File Sync agent on Server1

The Azure File Sync agent is a downloadable package that enables Windows Server to be synced with an Azure file share

Step 2 (D): Register Server1.

Register Windows Server with Storage Sync Service

Registering your Windows Server with a Storage Sync Service establishes a trust relationship between your server (or cluster) and the Storage Sync Service.

Step 3 (C): Create a sync group and a cloud endpoint.

A sync group defines the sync topology for a set of files. Endpoints within a sync group are kept in sync with each other. A sync group must contain one cloud endpoint, which represents an Azure file share and one or more server endpoints. A server endpoint represents a path on registered server.

Reference: https://docs.microsoft.com/en-us/azure/storage/files/storage-sync-files-deploymentguide

You have an Azure subscription named Subscription1.

You have 5 TB of data that you need to transfer to Subscription1.

You plan to use an Azure Import/Export job.

What can you use as the destination of the imported data?

A.
Azure SQL Database
A.
Azure SQL Database
Answers
B.
Azure File Storage
B.
Azure File Storage
Answers
C.
An Azure Cosmos DB database
C.
An Azure Cosmos DB database
Answers
D.
The Azure File Sync Storage Sync Service
D.
The Azure File Sync Storage Sync Service
Answers
E.
Azure Data Factory
E.
Azure Data Factory
Answers
F.
A virtual machine
F.
A virtual machine
Answers
Suggested answer: B

Explanation:

Azure Import/Export service is used to securely import large amounts of data to Azure Blob storage and Azure Files by shipping disk drives to an Azure datacenter.

Reference:

https://docs.microsoft.com/en-us/azure/storage/common/storage-import-export-service

You have an Azure subscription named Subscription1.

You have 5 TB of data that you need to transfer to Subscription1.

You plan to use an Azure Import/Export job.

What can you use as the destination of the imported data?

A.
an Azure Cosmos DB database
A.
an Azure Cosmos DB database
Answers
B.
Azure File Storage
B.
Azure File Storage
Answers
C.
the Azure File Sync Storage Sync Service
C.
the Azure File Sync Storage Sync Service
Answers
D.
Azure Data Factory
D.
Azure Data Factory
Answers
Suggested answer: B

Explanation:

Azure Import/Export service is used to securely import large amounts of data to Azure Blob storage and Azure Files by shipping disk drives to an Azure datacenter.

The maximum size of an Azure Files Resource of a file share is 5 TB.

Reference:

https://docs.microsoft.com/en-us/azure/storage/common/storage-import-export-service

HOTSPOT

You have the App Service plan shown in the following exhibit.

The scale-in settings for the App Service plan are configured as shown in the following exhibit.

The scale out rule is configured with the same duration and cool down tile as the scale in rule.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.


Question 228
Correct answer: Question 228

You plan to automate the deployment of a virtual machine scale set that uses the Windows Server 2016 Datacenter image.

You need to ensure that when the scale set virtual machines are provisioned, they have web server components installed.

Which two actions should you perform? Each correct answer presents part of the solution.

NOTE Each correct selection is worth one point.

A.
Modify the extensionProfile section of the Azure Resource Manager template.
A.
Modify the extensionProfile section of the Azure Resource Manager template.
Answers
B.
Create a new virtual machine scale set in the Azure portal.
B.
Create a new virtual machine scale set in the Azure portal.
Answers
C.
Create an Azure policy.
C.
Create an Azure policy.
Answers
D.
Create an automation account.
D.
Create an automation account.
Answers
E.
Upload a configuration script.
E.
Upload a configuration script.
Answers
Suggested answer: A, B

Explanation:

Virtual Machine Scale Sets can be used with the Azure Desired State Configuration (DSC) extension handler. Virtual machine scale sets provide a way to deploy and manage large numbers of virtual machines, and can elastically scale in and out in response to load. DSC is used to configure the VMs as they come online so they are running the production software.

Reference:

https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-dsc

Topic 7, Misc. Questions Set C

HOTSPOT

You have an Azure subscription that contains a virtual network named VNET1 in the East US 2 region.

You have the following resources in an Azure Resource Manager template.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.


Question 230
Correct answer: Question 230

Explanation:

Box 1: Yes

Box 2: Yes

VM1 is in Zone1, while VM2 is on Zone2.

Box 3: No

Reference:

https://docs.microsoft.com/en-us/azure/architecture/resiliency/recovery-loss-azure-region

Total 644 questions
Go to page: of 65