ExamGecko
Home Home / Microsoft / AZ-104

Microsoft AZ-104 Practice Test - Questions Answers, Page 42

Question list
Search
Search

List of questions

Search

Related questions











Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an app named App1 that is installed on two Azure virtual machines named VM1 and VM2.

Connections to App1 are managed by using an Azure Load Balancer.

The effective network security configurations for VM2 are shown in the following exhibit.

You discover that connections to App1 from 131.107.100.50 over TCP port 443 fail.

You verify that the Load Balancer rules are configured correctly.

You need to ensure that connections to App1 can be established successfully from 131.107.100.50 over TCP port 443.

Solution: You delete the BlockAllOther443 inbound security rule.

Does this meet the goal?

A.
Yes
A.
Yes
Answers
B.
No
B.
No
Answers
Suggested answer: B

Explanation:

Reference:

https://fastreroute.com/azure-network-security-groups-explained/

We have a higher priority rule which allows the traffic.

https://docs.microsoft.com/en-us/azure/virtual-network/network-security-groups-overview

You have an Azure subscription. You need to transfer 34TB of data from an on-premise Windows 2016 server to your Azure storage account. You need to ensure that the data transfer has zero impact on the network, preserves your existing drives and is the fastest and most secure method. What should be your first step?

A.
Start an Import Job via the Azure Portal
A.
Start an Import Job via the Azure Portal
Answers
B.
Order an Azure Databox via the Azure Portal
B.
Order an Azure Databox via the Azure Portal
Answers
C.
Open a ticket with Microsoft Support
C.
Open a ticket with Microsoft Support
Answers
D.
Prepare your hard drives using the WAImportExport tool
D.
Prepare your hard drives using the WAImportExport tool
Answers
Suggested answer: B

Explanation:

The Microsoft Azure Data Box cloud solution lets you send terabytes of data into and out of Azure in a quick, inexpensive, and reliable way.

https://docs.microsoft.com/en-us/azure/databox/data-box-overview

You manage a virtual network named VNet1 that is hosted in the West US region. Two virtual machines named VM1 and VM2, both running Windows Server, are on VNet1. You need to monitor traffic between VM1 and VM2 for a period of five hours.

As a solution, you propose to create a connection monitor in Azure Network Watcher. Does this solution meet the goal?

A.
Yes
A.
Yes
Answers
B.
No
B.
No
Answers
Suggested answer: A

Explanation:

The connection monitor capability in Azure Network Watcher monitors communication at a regular interval and informs you of reachability, latency, and network topology changes between the VM and the endpoint.

You need to create an Azure virtual machine named VM1 that requires a static private IP address configured inside the IP address space for the VNet in which the VM resides. How do you configure a static IP address for this Azure VM?

A.
After the VM has been created, create a new network interface and configure a static IP address for that network interface
A.
After the VM has been created, create a new network interface and configure a static IP address for that network interface
Answers
B.
When creating a VM in the portal, select New next to private ip address and choose static after assigning the correct IP address
B.
When creating a VM in the portal, select New next to private ip address and choose static after assigning the correct IP address
Answers
C.
When creating the VM in the portal, change the setting from dynamic to static on the networking tab under private IP address
C.
When creating the VM in the portal, change the setting from dynamic to static on the networking tab under private IP address
Answers
D.
After the VM has been created, go to the network interface attached to the VM and change the IP configuration to static assignment
D.
After the VM has been created, go to the network interface attached to the VM and change the IP configuration to static assignment
Answers
Suggested answer: D

Explanation:

Changing the IP configuration on the network interface will achieve the requirement.

You create the following resources in an subscription:

• An Azure Container Registry instance named Registry1

• An Azure Kubernetes Service (AKS) cluster named Cluster1

You create a container image named App 1 on your administrative workstation.

You need to deploy App1 to cluster 1.

What should you do first?

A.
Run the aa aks create command.
A.
Run the aa aks create command.
Answers
B.
Create a host pool on Cluster1
B.
Create a host pool on Cluster1
Answers
C.
Upload App1 to Registry 1.
C.
Upload App1 to Registry 1.
Answers
D.
Run the kubect1 apply command.
D.
Run the kubect1 apply command.
Answers
Suggested answer: C

You have an Azure subscription that contains two virtual machines as shown in the following table.

You perform a reverse DNS lookup for 10.0.0.4 from VM2.

Which FQDN will be returned?

A.
vm1.core.windows.net
A.
vm1.core.windows.net
Answers
B.
vm1.internal.cloudapp.net
B.
vm1.internal.cloudapp.net
Answers
C.
vm1.westeurope.cloudapp.azure.com
C.
vm1.westeurope.cloudapp.azure.com
Answers
D.
vm1.azure.com
D.
vm1.azure.com
Answers
Suggested answer: B

Explanation:

This is an excerpt from the official documentation in the section "Reverse DNS Considerations" Form :

https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-name-resolution-for-vmsand-role-instances#dns-client-configuration [..." - All PTR queries for IP addresses of virtual machines will return FQDNs of form [vmname].internal.cloudapp.net - Forward lookup on FQDNs of form [vmname].internal.cloudapp.net will resolve to IP address assigned to the virtual machine. - If the virtual network is linked to an Azure DNS private zones as a registration virtual network, the reverse DNS queries will return two records. One record will be of the form [vmname].[privatednszonename] and the other will be of the form [vmname].internal.cloudapp.net "...]

https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-name-resolution-for-vmsand-role-instances

HOTSPOT

You have an Azure subscription that contains three virtual networks named VNET1, VNET2, and VNET3.

Peering for VNET1 is configured as shown in the following exhibit.

Peering for VNET2 is configured as shown in the following exhibit.

Peering for VNET3 is configured as shown in the following exhibit.

How can packets be routed between the virtual networks? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.


Question 417
Correct answer: Question 417

Explanation:

Box 1. VNET2 and VNET3

Box 2: VNET1

Gateway transit is disabled.

Reference:

https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-peering-overview

HOTSPOT

You have an Azure subscription that contains the storage accounts shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

NOTE: Each correct selection is worth one point.


Question 418
Correct answer: Question 418

Explanation:

Box 1: contoso104 only

Premium file shares are hosted in a special purpose storage account kind, called a FileStorage account.

Box 2: contoso101, contoso102, and contos103 only

Reference:

https://docs.microsoft.com/en-us/azure/storage/files/storage-how-to-create-premiumfileshare?tabs=azure-portal

https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-storage-tiers

You have a .NET Core application running in Azure App Services. You are expecting a huge influx of traffic to your application in the coming days. When your application experiences this spike in traffic, you want to detect any anomalies such as request errors or failed queries immediately. What service can you use to assure that you know about these types of errors related to your .NET application immediately?

A.
Application Insights Search
A.
Application Insights Search
Answers
B.
Log analytics workspace
B.
Log analytics workspace
Answers
C.
Client-side monitoring
C.
Client-side monitoring
Answers
D.
Live Metrics Stream in Application Insights
D.
Live Metrics Stream in Application Insights
Answers
Suggested answer: D

Explanation:

Live metrics stream includes such information as the number of incoming requests, the duration of those requests, and any failures that occur. You can also inspect critical performance metrics such as processor and memory.

You have a general purpose v1 storage account named storageaccount1 that has a private container named container1. You need to allow read access to the data inside container1, but only within a 14 day window. How do you accomplish this?

A.
Create a stored access policy
A.
Create a stored access policy
Answers
B.
Create a service SAS
B.
Create a service SAS
Answers
C.
Create a shared access signatures
C.
Create a shared access signatures
Answers
D.
Upgrade the storage account to general purpose v2
D.
Upgrade the storage account to general purpose v2
Answers
Suggested answer: A, C

Explanation:

A Stored Access Policy allows granular control over a single storage container using a Shared Access Signature (SAS).

A Shared Access Signature (SAS) allows you to have granular control over your storage account, including access to only certain services (i.e. Azure Blobs) and permitting only read, write, delete, list, add, or create access.

Total 644 questions
Go to page: of 65