Microsoft AZ-104 Practice Test - Questions Answers, Page 29

Reference:

https://docs.microsoft.com/en-us/azure/advisor/advisor-cost-recommendations

https://docs.microsoft.com/bs-latn-ba/azure/cost-management/tutorial-acm-opt-recommendations

Advisor helps you optimize and reduce your overall Azure spend by identifying idle and underutilized resources. You can get cost recommendations from the Cost tab on the Advisor dashboard.

Box 1: "Microsoft.Resources/subscriptions/resourceGroups"

To create a new resource group in a subscription, account have at least the this permission.

Box 2: "Append"

Append adds fields to the resource when the if condition of the policy rule is met. If the append effect would override a value in the original request with a different value, then it acts as a deny effect and rejects the request. To append a new value to an existing array, use the [*] version of the alias

Reference:

https://docs.microsoft.com/en-us/azure/governance/policy/concepts/definition-structure

https://docs.microsoft.com/en-us/azure/role-based-access-control/custom-roles

https://docs.microsoft.com/en-us/azure/governance/policy/concepts/effects

Box 1: "*/read",

*/read lets you view everything, but not make any changes.

Box 2: " Microsoft.Support/*"

The action Microsoft.Support/* enables creating and management of support tickets.

Reference:

https://docs.microsoft.com/en-us/azure/role-based-access-control/tutorial-custom-role-powershell

https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles

... "

storageProfile": {

"imageReference": {

"publisher": "MicrosoftWindowsServer",

"offer": "WindowsServer",

"sku": "2016-Datacenter",

"version": "latest"

},

...

Reference:

https://docs.microsoft.com/en-us/rest/api/compute/virtualmachines/createorupdate

Reference:

https://azure.microsoft.com/en-au/pricing/details/app-service/windows/

https://azure.microsoft.com/en-gb/pricing/details/app-service/plans/

Not VM1 because it has BitLocker enabled.

Not VM2 because the OS disk is larger than 2TB.

Not VMC because the Data disk is larger than 4TB.

Reference:

https://docs.microsoft.com/en-us/azure/site-recovery/hyper-v-azure-support-matrix#azure-vmrequirements

Box 1: B1

B1 (Basic) would minimize cost compared P1v2 (premium) and S1 (standard).

Box 2: Cross Origin Resource Sharing (CORS)

Once you set the CORS rules for the service, then a properly authenticated request made against the service from a different domain will be evaluated to determine whether it is allowed according to the rules you have specified.

Note: CORS (Cross Origin Resource Sharing) is an HTTP feature that enables a web application running under one domain to access resources in another domain. In order to reduce the possibility of cross-site scripting attacks, all modern web browsers implement a security restriction known as same-origin policy. This prevents a web page from calling APIs in a different domain. CORS provides a secure way to allow one origin (the origin domain) to call APIs in another origin.

Reference:

https://azure.microsoft.com/en-us/pricing/details/app-service/windows/

https://docs.microsoft.com/en-us/azure/cdn/cdn-cors

To access data sources on premises from your logic apps, you can create a data gateway resource in

Azure so that your logic apps can use the on-premises connectors.

Box 1: From an on-premises computer, install an on-premises data gateway.

Before you can connect to on-premises data sources from Azure Logic Apps, download and install the on-premises data gateway on a local computer.

Box 2: From the Azure portal, create an on-premises data gateway

Create Azure resource for gateway

After you install the gateway on a local computer, you can then create an Azure resource for your gateway. This step also associates your gateway resource with your Azure subscription.

Sign in to the Azure portal. Make sure you use the same Azure work or school email address used to install the gateway.

On the main Azure menu, select Create a resource > Integration > On-premises data gateway.

On the Create connection gateway page, provide this information for your gateway resource.

To add the gateway resource to your Azure dashboard, select Pin to dashboard. When you're done, choose Create.

Box 3: From the Logic Apps Designer in the Azure portal, add a connector

After you create your gateway resource and associate your Azure subscription with this resource, you can now create a connection between your logic app and your on-premises data source by using the gateway.

In the Azure portal, create or open your logic app in the Logic App Designer.

Add a connector that supports on-premises connections, for example, SQL Server.

Set up your connection.

Reference:

https://docs.microsoft.com/en-us/azure/logic-apps/logic-apps-gateway-connection

Identity Protection analyzes signals from each sign-in, both real-time and offline, and calculates a risk score based on the probability that the sign-in wasn't performed by the user. Administrators can make a decision based on this risk score signal to enforce organizational requirements.

Administrators can choose to block access, allow access, or allow access but require multi-factor authentication.

If risk is detected, users can perform multi-factor authentication to self-remediate and close the risky sign-in event to prevent unnecessary noise for administrators.

With Azure Active Directory Identity Protection, you can:

require users to register for multi-factor authentication handle risky sign-ins and compromised users

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/flows