ExamGecko
Home Home / Microsoft / AZ-104

Microsoft AZ-104 Practice Test - Questions Answers, Page 26

Question list
Search
Search

List of questions

Search

Related questions











You have a computer named Computer! that has a point-to site VPN connection to an Azure virtual network named VNet1. The point-to-site connection uses a self-signed certificate.

From Azure, you download and install the VPN client configuration package on a computer named Computer2.

You need to ensure that you can establish a point-to-site VPN connection to VNet1 from Computer2.

Solution: You join Computer2 to Azure Active Directory (Azure AD).

Does this meet the goal?

A.
Yes
A.
Yes
Answers
B.
No
B.
No
Answers
Suggested answer: B

Explanation:

A client computer that connects to a VNet using Point-to-Site must have a client certificate installed.

Reference:

https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-certificates-point-to-site

You have an Azure subscription that contains the resources shown in the following table.

VM1 connects to VNET1.

You need to connect VM1 to VNET2.

Solution: You delete VM1. You recreate VM1, and then you create a new network interface for VM1 and connect it to VNET2.

Does this meet the goal?

A.
Yes
A.
Yes
Answers
B.
No
B.
No
Answers
Suggested answer: B

You have an Azure subscription that contains the resources shown in the following table.

VM1 connects to VNET1.

You need to connect VM1 to VNET2.

Solution: You turn off VM1, and then you add a new network interface to VM1. Does this meet the goal?

A.
Yes
A.
Yes
Answers
B.
No
B.
No
Answers
Suggested answer: B

Explanation:

Instead you should delete VM1. You recreate VM1, and then you add the network interface for VM1.

Note: When you create an Azure virtual machine (VM), you must create a virtual network (VNet) or use an existing VNet. You can change the subnet a VM is connected to after it's created, but you cannot change the VNet.

Reference:

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/network-overview

You have an Azure subscription that contains the resources shown in the following table.

VM1 connects to VNET1.

You need to connect VM1 to VNET2.

Solution: You create a new network interface, and then you add the network interface to VM1.

Does this meet the goal?

A.
Yes
A.
Yes
Answers
B.
No
B.
No
Answers
Suggested answer: B

Explanation:

Instead you should delete VM1. You recreate VM1, and then you add the network interface for VM1.

Note: When you create an Azure virtual machine (VM), you must create a virtual network (VNet) or use an existing VNet. You can change the subnet a VM is connected to after it's created, but you cannot change the VNet.

Reference:

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/network-overview

You have an Azure subscription named Subscription1. Subscription1 contains a virtual machine named VM1.

You have a computer named Computer1 that runs Windows 10. Computer1 is connected to the Internet.

You add a network interface named VM1173 to VM1 as shown in the exhibit. (Click the Exhibit tab.)

From Computer1, you attempt to connect to VM1 by using Remote Desktop, but the connection fails.

A.
Change the priority of the RDP rule.
A.
Change the priority of the RDP rule.
Answers
B.
Delete the DenyAlllnBound rule.
B.
Delete the DenyAlllnBound rule.
Answers
C.
Start VM1.
C.
Start VM1.
Answers
D.
Attach a network interface.
D.
Attach a network interface.
Answers
Suggested answer: C

Explanation:

Note: Rules are processed in priority order, with lower numbers processed before higher numbers, because lower numbers have higher priority. Once traffic matches a rule, processing stops. As a result, any rules that exist with lower priorities (higher numbers) that have the same attributes as rules with higher priorities are not processed.

Reference: https://docs.microsoft.com/en-us/azure/virtual-network/security-overview

You create the following resources in an Azure subscription:

• An Azure Container Registry instance named Registry1.

• An Azure Kubernetes Service (AKS) cluster named Cluster1.

You create a container image named App1 on your administrative workstation. You need to deploy

App1 to Cluster1. What should you do first?

A.
Create a host pool on Cluster1.
A.
Create a host pool on Cluster1.
Answers
B.
Run the az acr build command.
B.
Run the az acr build command.
Answers
C.
Run the docker build command.
C.
Run the docker build command.
Answers
D.
Run the docker push command.
D.
Run the docker push command.
Answers
Suggested answer: B

Explanation:

Run the az acr build command : Correct Choice

az acr build command queues a quick build, providing streaming logs for an Azure Container Registry az acr build --registry

[--agent-pool]

[--auth-mode {Default, None}]

[--build-arg]

[--file]

[--image]

[--no-format]

[--no-logs]

[--no-push]

[--no-wait]

[--platform]

[--resource-group]

[--secret-build-arg]

[--subscription]

[--target]

[--timeout]

[<SOURCE_LOCATION>]

Create a host pool on Cluster1 : Incorrect Choice

Host pools are a collection of one or more identical virtual machines (VMs) within Windows Virtual

Desktop environments. It won't deploy the app to the cluster.

Run the docker push command : Incorrect Choice

Use docker push to share your images to the Docker Hub registry or to a self-hosted one. It won't deploy the app to the cluster.

Run the docker build command : Incorrect Choice

This command will build an image from a Dockerfile. But in the question it has been said that image file is already built and need to deploy. This command will not deploy the image.

Reference:

https://docs.microsoft.com/en-us/cli/azure/acr?view=azure-cli-latest#az-acr-build

https://docs.docker.com/engine/reference/commandline/push/

https://docs.microsoft.com/en-us/azure/virtual-desktop/create-host-pools-azure-marketplace

https://docs.docker.com/engine/reference/commandline/build/

DRAG DROP

You have an Azure subscription that contains a storage account.

You have an on-premises server named Server1 that runs Window Server 2016. Server1 has 2 TB of data.

You need to transfer the data to the storage account by using the Azure Import/Export service.

In which order should you perform the actions? To answer, move all actions from the list of actions to the answer area and arrange them in the correct order.

NOTE: More than one order of answer choices is correct. You will receive credit for any of the correct orders you select.

Answer:

Question 257
Correct answer: Question 257

Explanation:

At a high level, an import job involves the following steps:

Step 1: Attach an external disk to Server1 and then run waimportexport.exe

Determine data to be imported, number of drives you need, destination blob location for your data in Azure storage.

Use the WAImportExport tool to copy data to disk drives. Encrypt the disk drives with BitLocker.

Step 2: From the Azure portal, create an import job.

Create an import job in your target storage account in Azure portal. Upload the drive journal files.

Step 3: Detach the external disks from Server1 and ship the disks to an Azure data center.

Provide the return address and carrier account number for shipping the drives back to you.

Ship the disk drives to the shipping address provided during job creation.

Step 4: From the Azure portal, update the import job

Update the delivery tracking number in the import job details and submit the import job.

The drives are received and processed at the Azure data center.

The drives are shipped using your carrier account to the return address provided in the import job.

Reference:

https://docs.microsoft.com/en-us/azure/storage/common/storage-import-export-service

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result these questions will not appear in the review screen.

You have an Azure subscription that contains the resources shown in the following table.

VM1 connects to VNET1.

You need to connect VM1 to VNET2.

Solution: You delete VM1. You recreate VM1, and then you create a new network interface for VM1.

Does this meet the goal?

A.
Yes
A.
Yes
Answers
B.
No
B.
No
Answers
Suggested answer: A

Explanation:

Instead you should delete VM1. You recreate VM1, and then you add the network interface for VM1.

Note: When you create an Azure virtual machine (VM), you must create a virtual network (VNet) or use an existing VNet. You can change the subnet a VM is connected to after it's created, but you cannot change the VNet.

Reference:

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/network-overview

You have an Azure DNS zone named adatum.com. You need to delegate a subdomain named research.adatum.com to a different DNS server in Azure. What should you do?

A.
Create an PTR record named research in the adatum.com zone.
A.
Create an PTR record named research in the adatum.com zone.
Answers
B.
Create an NS record named research in the adatum.com zone.
B.
Create an NS record named research in the adatum.com zone.
Answers
C.
Modify the SOA record of adatum.com.
C.
Modify the SOA record of adatum.com.
Answers
D.
Create an A record named *.research in the adatum.com zone.
D.
Create an A record named *.research in the adatum.com zone.
Answers
Suggested answer: B

Explanation:

You need to create a name server (NS) record for the zone.

Reference:

https://docs.microsoft.com/en-us/azure/dns/delegate-subdomain

Your company has a main office in London that contains 100 client computers.

Three years ago, you migrated to Azure Active Directory (Azure AD).

The company's security policy states that all personal devices and corporate-owned devices must be registered or joined to Azure AD.

A remote user named User1 is unable to join a personal device to Azure AD from a home network.

You verify that other users can join their devices to Azure AD.

You need to ensure that User1 can join the device to Azure AD.

What should you do?

A.
From the Device settings blade, modify the Users may join devices to Azure AD setting.
A.
From the Device settings blade, modify the Users may join devices to Azure AD setting.
Answers
B.
From the Device settings blade, modify the Maximum number of devices per user setting.
B.
From the Device settings blade, modify the Maximum number of devices per user setting.
Answers
C.
Create a point-to-site VPN from the home network of User1 to Azure.
C.
Create a point-to-site VPN from the home network of User1 to Azure.
Answers
D.
Assign the User administrator role to User1.
D.
Assign the User administrator role to User1.
Answers
Suggested answer: B

Explanation:

The Maximum number of devices setting enables you to select the maximum number of devices that a user can have in Azure AD. If a user reaches this quota, they will not be able to add additional devices until one or more of the existing devices are removed.

Incorrect Answers:

A: The Users may join devices to Azure AD setting enables you to select the users who can join devices to Azure AD. Options are All, Selected and None. The default is All.

C: Azure AD Join enables users to join their devices to Active Directory from anywhere as long as they have connectivity with the Internet.

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/devices/device-management-azure-portal

http://techgenix.com/pros-and-cons-azure-ad-join/

Total 644 questions
Go to page: of 65