ExamGecko
Home Home / Microsoft / AZ-104

Microsoft AZ-104 Practice Test - Questions Answers, Page 27

Question list
Search
Search

List of questions

Search

Related questions











HOTSPOT

You have a hybrid deployment of Azure Active Directory (Azure AD) that contains the users shown in the following table.

You need to modify the JobTitle and UsageLocation attributes for the users.

For which users can you modify the- attributes from Azure AD? To answer, select the appropriate options in the answer area.


Question 261
Correct answer: Question 261

Explanation:

Box 1: User1 and User3 only

You must use Windows Server Active Directory to update the identity, contact info, or job info for users whose source of authority is Windows Server Active Directory.

Box 2: User1, User2, and User3

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-usersprofile-azure-portal

You have an Azure subscription that contains a user named User1.

You need to ensure that User1 can deploy virtual machines and manage virtual networks. The solution must use the principle of least privilege.

Which role-based access control (RBAC) role should you assign to User1?

A.
Owner
A.
Owner
Answers
B.
Virtual Machine Administrator Login
B.
Virtual Machine Administrator Login
Answers
C.
Contributor
C.
Contributor
Answers
D.
Virtual Machine Contributor
D.
Virtual Machine Contributor
Answers
Suggested answer: C

You have an Azure subscription that contains the resources shown in the following table.

You need to deploy Application1 to Cluster1. Which command should you run?

A.
az acr build
A.
az acr build
Answers
B.
az ales create
B.
az ales create
Answers
C.
kubect1 apply
C.
kubect1 apply
Answers
D.
docker build
D.
docker build
Answers
Suggested answer: B

HOTSPOT

You have an Azure subscription that contains the resource groups shown in the following table.

RG1 contains the resources shown in the following table.


Question 264
Correct answer: Question 264

You have an Azure Active Directory (Azure AD) tenant named contosocloud.onmicrosoft.com.

Your company has a public DNS zone for contoso.com.

You add contoso.com as a custom domain name to Azure AD.

You need to ensure that Azure can verify the domain name.

Which type of DNS record should you create?

A.
NSEC
A.
NSEC
Answers
B.
PTR
B.
PTR
Answers
C.
DNSKEY
C.
DNSKEY
Answers
D.
TXT
D.
TXT
Answers
Suggested answer: D

Explanation:

TXT : Correct Choice

You need to go to your hosting domain registrar and add in a TXT record.

NSEC3 : Incorrect Choice

This is Part of DNSSEC. This is used for explicit denial-of-existence of a DNS record. It is used to prove a name does not exist.

RRSIG : Incorrect Choice

This contains a cryptographic signature.

DNSKEY : Incorrect Choice

This will verify that the records are originating from an authorized sender.

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/add-custom-domain

https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/add-custom-domain#verifyyour-custom-domain-name

https://www.cloudflare.com/dns/dnssec/how-dnssecworks/#:~:text=DNSKEY%20%2D%20Contains%20a%20public%20signing,s)%20in%20the%20parent%20zone.

You have an Azure subscription that contains a resource group named RG26.

RG26 is sot to the West Europe location and is used to create temporary resources for a project.

RG26 contains the resources shown in the following table.

SQLD01 is backed up to RGV1.

When the project is complete, you attempt to delete RG26 from the Azure portal. The deletion fails.

You need to delete RG26.

What should you do first?

A.
Stop the backup of SQLDB01.
A.
Stop the backup of SQLDB01.
Answers
B.
Delete sa001.
B.
Delete sa001.
Answers
C.
Delete VM1.
C.
Delete VM1.
Answers
D.
StopVM1.
D.
StopVM1.
Answers
Suggested answer: A

Explanation:

You can't delete a vault that contains backup data. So in this case at first you have to delete the backup of 'SQLD01' before you attempt to delete the vault.

Reference:

https://docs.microsoft.com/en-us/azure/backup/backup-azure-delete-vault

You have an Azure subscription named Subscription1 that contains a virtual network named VNet1.

VNet1 is in a resource group named RG1.

Subscription1 has a user named User1. User1 has the following roles;

• Reader

• Security Admin

• Security Reader

You need to ensure that User1 can assign the Reader role for VNet1 to other users. What should you do?

A.
Assign User1 the Contributor role for VNet1.
A.
Assign User1 the Contributor role for VNet1.
Answers
B.
Remove User from the Security Reader and Reader roles tot Subscription1.
B.
Remove User from the Security Reader and Reader roles tot Subscription1.
Answers
C.
Assign User1 the Network Contributor role for VNet1.
C.
Assign User1 the Network Contributor role for VNet1.
Answers
D.
Assign User1 the User Access Administrator role for VNet1
D.
Assign User1 the User Access Administrator role for VNet1
Answers
Suggested answer: D

Explanation:

The User Access Administrator role allows you to manage user access to Azure resources.

Reference:

https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#user-accessadministrator

You deploy an Azure Kubernetes Service (AKS) cluster named Cluster1 that uses the IP addresses shown in the following table.

You need to provide internet users with access to the applications that run in Cluster1.

Which IP address should you include in the DNS record for Ousted?

A.
172.17.7.1
A.
172.17.7.1
Answers
B.
131.107.2.1
B.
131.107.2.1
Answers
C.
192.168.10.2
C.
192.168.10.2
Answers
D.
10.0.10.11
D.
10.0.10.11
Answers
Suggested answer: B

Explanation:

When any internet user will try to access the cluster which is behind a load balancer, traffic will first hit to load balancer front end IP. So in the DNS configuration you have to provide the IP address of the load balancer.

Reference:

https://stackoverflow.com/questions/43660490/giving-a-dns-name-to-azure-load-balancer

You need to deploy an Azure virtual machine scale set that contains five instances as quickly as possible. What should you do?

A.
Deploy five virtual machines. Modify the Size setting for each virtual machine.
A.
Deploy five virtual machines. Modify the Size setting for each virtual machine.
Answers
B.
Deploy live virtual machines. Modify the Availability Zones setting for each virtual machine.
B.
Deploy live virtual machines. Modify the Availability Zones setting for each virtual machine.
Answers
C.
Deploy one virtual machine scale set that is set to ScaleSetVM orchestration mode.
C.
Deploy one virtual machine scale set that is set to ScaleSetVM orchestration mode.
Answers
D.
Deploy one virtual machine scale set that is set to VM (virtual machines) orchestration mode.
D.
Deploy one virtual machine scale set that is set to VM (virtual machines) orchestration mode.
Answers
Suggested answer: B

Explanation:

Reference:

https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/orchestration-modes

HOTSPOT

You have an Azure subscription named Subscription1 that contains the quotas shown in the following table.

You deploy virtual machines to Subscription1 as shown in the following table.



Question 270
Correct answer: Question 270
Total 644 questions
Go to page: of 65