ExamGecko
Home Home / Microsoft / AZ-104

Microsoft AZ-104 Practice Test - Questions Answers, Page 46

Question list
Search
Search

List of questions

Search

Related questions











HOTSPOT

You have a network security group (NSG) named NSG1 that has the rules defined in the exhibit. (Click the Exhibit tab.)

NSG1 is associated to a subnet named Subnet1. Subnet1 contains the virtual machines shown in the following table.

You need to add a rule to NSG1 to ensure that VM1 can ping VM2. The solution must use the principle of least privilege.

How should you configure the rule? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.


Question 451
Correct answer: Question 451

Explanation:

Reference:

https://www.thomasmaurer.ch/2019/09/how-to-enable-ping-icmp-echo-on-an-azure-vm/

You have an Azure subscription that contains a storage account named account1.

You plan to upload the disk files of a virtual machine to account1 from your on-premises network.

The on-premises network uses a public IP address space of 131.107.1.0/24.

You plan to use the disk files to provision an Azure virtual machine named VM1. VM1 will be attached to a virtual network named VNet1. VNet1 uses an IP address space of 192.168.0.0/24.

You need to configure account1 to meet the following requirements:

Ensure that you can upload the disk files to account1.

Ensure that you can attach the disks to VM1.

Prevent all other access to account1.

Which two actions should you perform? Each correct selection presents part of the solution.

NOTE: Each correct selection is worth one point.

A.
From the Service endpoints blade of VNet1, add a service endpoint
A.
From the Service endpoints blade of VNet1, add a service endpoint
Answers
B.
From the Networking blade of account1, add the 131.107.1.0/24 IP address range.
B.
From the Networking blade of account1, add the 131.107.1.0/24 IP address range.
Answers
C.
From the Networking blade of account1, add VNet1.
C.
From the Networking blade of account1, add VNet1.
Answers
D.
From the Networking blade of account1, select Selected networks.
D.
From the Networking blade of account1, select Selected networks.
Answers
E.
From the Networking blade of account1, select Allow trusted Microsoft services to access this storage account
E.
From the Networking blade of account1, select Allow trusted Microsoft services to access this storage account
Answers
Suggested answer: B, D

HOTSPOT

You have the Azure resources shown on the following exhibit.

You plan to track resource usage and prevent the deletion of resources.

To which resources can you apply locks and tags? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.


Question 453
Correct answer: Question 453

Explanation:

Box 1: Sub1, RG1, and VM1 only

You can lock a subscription, resource group, or resource to prevent other users in your organization from accidentally deleting or modifying critical resources.

Box 2: Sub1, RG1, and VM1 only

You apply tags to your Azure resources, resource groups, and subscriptions.

Reference:

https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/lockresources?tabs=json

https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/tagresources?tabs=json

You have an Azure Active Directory (Azure AD) tenant.

You plan to delete multiple users by using Bulk delete in the Azure Active Directory admin center.

You need to create and upload a file for the bulk delete.

Which user attributes should you include in the file?

A.
The user principal name and usage location of each user only
A.
The user principal name and usage location of each user only
Answers
B.
The user principal name of each user only
B.
The user principal name of each user only
Answers
C.
The display name of each user only
C.
The display name of each user only
Answers
D.
The display name and usage location of each user only
D.
The display name and usage location of each user only
Answers
E.
The display name and user principal name of each user only
E.
The display name and user principal name of each user only
Answers
Suggested answer: B

Explanation:

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/enterprise-users/users-bulk-delete

HOTSPOT

You have an Azure subscription named Sub1 that contains the Azure resources shown in the following table.

You assign an Azure policy that has the following settings:

Scope: Sub1

Exclusions: Sub1/RG1/VNET1

Policy definition: Append a tag and its value to resources

Policy enforcement: Enabled

Tag name: Tag4

Tag value: value4

You assign tags to the resources as shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.


Question 455
Correct answer: Question 455

Explanation:

Box 1: No

The Azure Policy will add Tag4 to RG1.

Box 2: No

Tags applied to the resource group or subscription aren't inherited by the resources although you can enable inheritance with Azure Policy. Storage1 has Tag3: Value1 and the Azure Policy will add Tag4.

Box 3: No

Tags applied to the resource group or subscription aren't inherited by the resources so VNET1 does not have Tag2.

VNET1 has Tag3:value2. VNET1 is excluded from the Azure Policy so Tag4 will not be added to VNET1.

Reference:

https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/tagresources?tabs=json

You have three offices and an Azure subscription that contains an Azure Active Directory (Azure AD) tenant.

You need to grant user management permissions to a local administrator in each office.

What should you use?

A.
Azure AD roles
A.
Azure AD roles
Answers
B.
administrative units
B.
administrative units
Answers
C.
access packages in Azure AD entitlement management
C.
access packages in Azure AD entitlement management
Answers
D.
Azure roles
D.
Azure roles
Answers
Suggested answer: B

Explanation:

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/roles/administrative-units

HOTSPOT

You have an Azure subscription.

You deploy a virtual machine scale set that is configured as shown in the following exhibit.

Use the drop-down menus to select the answer choice that answers each question based on the information presented in the graphic

NOTE: Each correct selection is worth one point.


Question 457
Correct answer: Question 457

Explanation:

Reference:

https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/virtual-machine-scale-setsautoscale-portal

HOTSPOT

You have an Azure subscription. The subscription contains a virtual machine that runs Windows 10.

You need to join the virtual machine to an Active Directory domain.

How should you complete the Azure Resource Manager (ARM) template? To answer, select the appropriate options in the answer area.

NOTE: Bach correct selection is worth one point.


Question 458
Correct answer: Question 458

Explanation:

Azure Resource Manager template overview

Resource Manager templates let you define Azure infrastructure in code. The required resources, network connections, or configuration of VMs can all be defined in a template. These templates create consistent, reproducible deployments each time, and can be versioned as you make changes.

For more information, see Azure Resource Manager templates overview.

Each resource is defined in a template using JavaScript Object Notation (JSON). The following JSON example uses the Microsoft.Compute/virtualMachines/extensions resource type to install the Active

Directory domain join extension. Parameters are used that you specify at deployment time. When the extension is deployed, the VM is joined to the specified managed domain.

JSON

{

"apiVersion": "2015-06-15",

"type": "Microsoft.Compute/virtualMachines/extensions",

"name": "[concat(parameters('dnsLabelPrefix'),'/joindomain')]",

"location": "[parameters('location')]",

"dependsOn": [

"[concat('Microsoft.Compute/virtualMachines/', parameters('dnsLabelPrefix'))]"

],

"properties": {

"publisher": "Microsoft.Compute",

"type": "JsonADDomainExtension",

"typeHandlerVersion": "1.3",

"autoUpgradeMinorVersion": true,

"settings": {

"Name": "[parameters('domainToJoin')]",

"OUPath": "[parameters('ouPath')]",

"User": "[concat(parameters('domainToJoin'), '\\', parameters('domainUsername'))]",

"Restart": "true",

"Options": "[parameters('domainJoinOptions')]"

},

"protectedSettings": {

"Password": "[parameters('domainPassword')]"

}

}

}

This VM extension can be deployed even if you don't create a VM in the same template. The examples in this article show both of the following approaches:

Create a Windows Server VM and join to a managed domain

Join an existing Windows Server VM to a managed domain

You are configuring Azure Active Directory (Azure AD) authentication for an Azure Storage account named storage1.

You need to ensure that the members of a group named Group1 can upload files by using the Azure portal. The solution must use the principle of least privilege.

Which two roles should you configure for storage!? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point

A.
Reader
A.
Reader
Answers
B.
Storage Blob Data Contributor
B.
Storage Blob Data Contributor
Answers
C.
Storage Account Contributor
C.
Storage Account Contributor
Answers
D.
Storage Blob Data Reader
D.
Storage Blob Data Reader
Answers
E.
Contributor
E.
Contributor
Answers
Suggested answer: A, C

HOTSPOT

You have two Azure virtual machines as shown in the following table.

You create the Azure DNS zones shown in the following table.

You perform the following actions:

To fabrikam.com, you add a virtual network link to vnet1 and enable auto registration.

For contoso.com, you assign vm1 and vm2 the Owner role.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worm one point.


Question 460
Correct answer: Question 460
Total 644 questions
Go to page: of 65