ExamGecko
Home Home / Microsoft / AZ-104

Microsoft AZ-104 Practice Test - Questions Answers, Page 61

Question list
Search
Search

List of questions

Search

Related questions











HOTSPOT

You have an Azure subscription that contains the virtual networks shown in the following table.

You have the peering options shown in the following exhibit.

You need to design a communication strategy for the resources on the virtual networks.

For each of the following statements, select Yes if the statement is true. Otherwise, select No


Question 601
Correct answer: Question 601

You have an Azure subscription that contains the virtual machines shown in the following table.

You deploy a load balancer that has the following configurations:

* Name: LB 1

* Type: Internal

* SKU: Standard

* Virtual network: VNET1

You need to ensure that you can add VM1 and VM2 to the backend pool of L81.

Solution: You create two Standard SKU public IP addresses and associate a Standard SKU public IP address to the network interface of each virtual machine.

Does this meet the goal?

A.
Yes
A.
Yes
Answers
B.
No
B.
No
Answers
Suggested answer: A

Entra tenants.

You have the virtual networks shown in the following table.

You have two Azure subscriptions named Sub1 and Sub2 that are linked to separate Microsoft Entra tenants.

You have the virtual networks shown in the following table.

Which virtual networks can you peer with VNet1?

A.
VNet2only
A.
VNet2only
Answers
B.
VNet2 and VNet3 only
B.
VNet2 and VNet3 only
Answers
C.
VNet2 and VNet4 only
C.
VNet2 and VNet4 only
Answers
D.
VNet2, VNet3, and VNet4 only
D.
VNet2, VNet3, and VNet4 only
Answers
Suggested answer: A

You have an Azure subscription that contains a storage account named storage 1.

You need to allow access to storage1 from selected networks and your home office. The solution must minimize administrative effort.

What should you do first for storage1?

A.
Add a private endpoint.
A.
Add a private endpoint.
Answers
B.
Modify the Public network access settings.
B.
Modify the Public network access settings.
Answers
C.
Select Internet routing
C.
Select Internet routing
Answers
D.
Modify the Access Control (1AM) settings.
D.
Modify the Access Control (1AM) settings.
Answers
Suggested answer: B

You have an Azure subscription.

You plan to deploy a container.

You need to recommend which Azure services can scale the container automatically.

What should you recommend?

A.
Azure Container Apps only
A.
Azure Container Apps only
Answers
B.
Azure Container Instances only
B.
Azure Container Instances only
Answers
C.
Azure Container Apps or Azure App Service only
C.
Azure Container Apps or Azure App Service only
Answers
D.
Azure Container Instances or Azure App Service only
D.
Azure Container Instances or Azure App Service only
Answers
E.
Azure Container Apps, Azure Container Instances, or Azure App Service
E.
Azure Container Apps, Azure Container Instances, or Azure App Service
Answers
Suggested answer: E

HOTSPOT

You have an Azure subscription that contains the storage accounts shown in the following exhibit.


Question 606
Correct answer: Question 606

You have an Azure subscription that contains 10 virtual networks. The virtual networks are hosted in separate resource groups.

Another administrator plans to create several network security groups (NSGs) in the subscription.

You need to ensure that when an NSG is created, it automatically blocks TCP port 8080 between the virtual networks.

Solution: You configure a custom policy definition, and then you assign the Azure policy to the subscription.

Does this meet the goal?

A.
Yes
A.
Yes
Answers
B.
No
B.
No
Answers
Suggested answer: A

HOTSPOT

You have an Azure subscription that has the Azure container registries shown in the following table.

You plan to use ACR Tasks and configure endpoint connections.


Question 608
Correct answer: Question 608

You plan to deploy several Azure virtual machines that will run Windows Server 2022 in a virtual machine scale set by using an Azure Resource Manager template.

You need to ensure that NGINX is available on all the virtual machines after they are deployed.

What should you use?

A.
A Microsoft intune device configuration profile
A.
A Microsoft intune device configuration profile
Answers
B.
Microsoft entra Application proxy
B.
Microsoft entra Application proxy
Answers
C.
Azure Custom Script Extension
C.
Azure Custom Script Extension
Answers
D.
Department Center in Azure App service
D.
Department Center in Azure App service
Answers
Suggested answer: C

Explanation:

https://docs.microsoft.com/en-us/azure/virtual-machines/extensions/dsc-overview

https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/tutorial-install-apps-template

https://docs.microsoft.com/en-us/samples/mspnp/samples/azure-well-architected-framework-sample-state-configuration

https://docs.microsoft.com/en-us/azure/architecture/framework/devops/automation-configuration

You have the Azure virtual machines shown in the following table.

VNET1 is linked to a private DNS zone and named contoso.com that contains the records shown in the following table.

You need to ping VM2 from VM1.

Which DNS names can you use to ping VM2.

A.
comp2 contoso.com only
A.
comp2 contoso.com only
Answers
B.
com1.contoso.com and comp2.contoso.com only
B.
com1.contoso.com and comp2.contoso.com only
Answers
C.
comp2.contoso.com and comp4.contoso.com only
C.
comp2.contoso.com and comp4.contoso.com only
Answers
D.
comp1.contoso.com, comp2.contoso.com and comp4.contoso.con only
D.
comp1.contoso.com, comp2.contoso.com and comp4.contoso.con only
Answers
E.
comp1.contoso.com comp2contoso.com.comp3.contoso.com and comp4.contoso.com
E.
comp1.contoso.com comp2contoso.com.comp3.contoso.com and comp4.contoso.com
Answers
Suggested answer: E
Total 644 questions
Go to page: of 65