Home / Microsoft / AZ-104

Question list

List of questions

Question 1

(0)

You discover that VM3 does NOT meet the technical requirements. You need to verify whether the issue relates to the NSGs. What should you use?

Question 2

(0)

You need to meet the technical requirement for VM4. What should you create and configure?

Question 3

(0)

You need to recommend a solution to automate the configuration for the finance department users. The solution must meet the technical requirements. What should you include in the recommended?

Question 4

(0)

HOTSPOT You need to the appropriate sizes for the Azure virtual for Server2. What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is wort

Question 5

(0)

HOTSPOT You need to implement Role1. Which command should you run before you create Role1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one

Question 6

(0)

HOTSPOT You need to meet the connection requirements for the New York office. What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is wor

Question 7

(0)

You need to ensure that VM1 can communicate with VM4. The solution must minimize administrative effort. What should you do?

Question 8

(0)

HOTSPOT You implement the planned changes for NSG1 and NSG2. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth

Question 9

(0)

DRAG DROP You need to prepare the environment to ensure that the web administrators can deploy the web apps as quickly as possible. Which three actions should you perform in sequence? To answer, m

Question 10

(0)

Which blade should you instruct the finance department auditors to use?

Related questions

HOTSPOT You need to the appropriate sizes for the Azure virtual for Server2. What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

DRAG DROP You need to prepare the environment to ensure that the web administrators can deploy the web apps as quickly as possible. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. Answer:

HOTSPOT You need to implement Role1. Which command should you run before you create Role1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure Active Directory (Azure AD) tenant named Adatum and an Azure Subscription named Subscription1. Adatum contains a group named Developers. Subscription1 contains a resource group named Dev. You need to provide the Developers group with the ability to create Azure logic apps in the Dev resource group. Solution: On Dev, you assign the Contributor role to the Developers group. Does this meet the goal?

You discover that VM3 does NOT meet the technical requirements. You need to verify whether the issue relates to the NSGs. What should you use?

Note: This question is part of a series of questions that present the same scenario. Each question in theseries contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a Microsoft Entra tenant named contoso.com. You have a CSV file that contains the names and email addresses of 500 external users. You need to create a guest user account in contoso.com for each of the 500 external users. Solution; From Microsoft Entra ID in the Azure portal, you use the Bulk invite users' operation. Does this meet the goal?

You need to identify which storage account to use for the flow logging of IP traffic from VM5. The solution must meet the retention requirements. Which storage account should you identify?

HOTSPOT You need to create storage5. The solution must support the planned changes. Which type of storage account should you use, and which account should you configure as the destination storage account? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

HOTSPOT You need to identify the storage requirements for Contoso. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Which blade should you instruct the finance department auditors to use?

Question 79 - AZ-104 discussion

You create an Azure subscription named Subscription1 and an associated Azure Active Directory (Azure AD) tenant named Tenant1. Tenant1 contains the users in the following table.

You need to add an Azure AD Privileged Identity Management application to Tenant1.

Which account can you use?

[email protected]

Suggested answer: B

Explanation:

For Azure AD roles in Privileged Identity Management, only a user who is in the Privileged role administrator or Global administrator role can manage assignments for other administrators. You can grant access to other administrators to manage Privileged Identity Management. Global

Administrators, Security Administrators, Global readers, and Security Readers can also view assignments to Azure AD roles in Privileged Identity Management.

Only owner can create an subscription and only global administrator can perform Privileged Identity

Management changes. So you can create subscription with external user and then promote him to global administrator to get things done.

As it is mentioned as it is associated with azure tenant so that tenant has an AD domain. So in azure

AD the default domain ends with onmicrosoft.com. So you can't have Hotmail IDs there. Moreover always remember the principle of least privileges, when you can get your job done with Global

Administrator then you should not look for owner for security purpose.

[email protected] : Correct Choice

As Admin1 is Global Administrator and part of default AD domain so Admin1 can add an Azure AD

Privileged Identity Management application to Tenant1

[email protected] : Incorrect Choice

As per the above explanation Admin3 is not Global Administrator, so this option is incorrect.

[email protected] : Incorrect Choice

As per the above explanation Admin2 is not Global Administrator, so this option is incorrect.

[email protected] : Incorrect Choice

Although this user is Global Administrator but referring to the least privileges principal and default domain consideration this option is incorrect.

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pimgetting-started

https://docs.microsoft.com/en-us/azure/active-directory-domain-services/tutorial-create-instance

Show Answer

asked 26/09/2024

Heng Tan

30 questions

Your answer: A B C D

0 comments

Sorted by