ExamGecko
Home / Microsoft / AZ-104 / List of questions
Ask Question

Microsoft AZ-104 Practice Test - Questions Answers, Page 42

List of questions

Question 411

Report
Export
Collapse

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an app named App1 that is installed on two Azure virtual machines named VM1 and VM2.

Connections to App1 are managed by using an Azure Load Balancer.

The effective network security configurations for VM2 are shown in the following exhibit.

Microsoft AZ-104 image Question 378 84903 09262024195642000000

You discover that connections to App1 from 131.107.100.50 over TCP port 443 fail.

You verify that the Load Balancer rules are configured correctly.

You need to ensure that connections to App1 can be established successfully from 131.107.100.50 over TCP port 443.

Solution: You delete the BlockAllOther443 inbound security rule.

Does this meet the goal?

Yes
Yes
No
No
Suggested answer: B

Explanation:

Reference:

https://fastreroute.com/azure-network-security-groups-explained/

We have a higher priority rule which allows the traffic.

https://docs.microsoft.com/en-us/azure/virtual-network/network-security-groups-overview

asked 26/09/2024
Charles Hagan
31 questions

Question 412

Report
Export
Collapse

You have an Azure subscription. You need to transfer 34TB of data from an on-premise Windows 2016 server to your Azure storage account. You need to ensure that the data transfer has zero impact on the network, preserves your existing drives and is the fastest and most secure method. What should be your first step?

Start an Import Job via the Azure Portal
Start an Import Job via the Azure Portal
Order an Azure Databox via the Azure Portal
Order an Azure Databox via the Azure Portal
Open a ticket with Microsoft Support
Open a ticket with Microsoft Support
Prepare your hard drives using the WAImportExport tool
Prepare your hard drives using the WAImportExport tool
Suggested answer: B

Explanation:

The Microsoft Azure Data Box cloud solution lets you send terabytes of data into and out of Azure in a quick, inexpensive, and reliable way.

https://docs.microsoft.com/en-us/azure/databox/data-box-overview

asked 26/09/2024
Jesserey Joseph
43 questions

Question 413

Report
Export
Collapse

You manage a virtual network named VNet1 that is hosted in the West US region. Two virtual machines named VM1 and VM2, both running Windows Server, are on VNet1. You need to monitor traffic between VM1 and VM2 for a period of five hours.

As a solution, you propose to create a connection monitor in Azure Network Watcher. Does this solution meet the goal?

Yes
Yes
No
No
Suggested answer: A

Explanation:

The connection monitor capability in Azure Network Watcher monitors communication at a regular interval and informs you of reachability, latency, and network topology changes between the VM and the endpoint.

asked 26/09/2024
giancarlo bagnetti srl
42 questions

Question 414

Report
Export
Collapse

You need to create an Azure virtual machine named VM1 that requires a static private IP address configured inside the IP address space for the VNet in which the VM resides. How do you configure a static IP address for this Azure VM?

After the VM has been created, create a new network interface and configure a static IP address for that network interface
After the VM has been created, create a new network interface and configure a static IP address for that network interface
When creating a VM in the portal, select New next to private ip address and choose static after assigning the correct IP address
When creating a VM in the portal, select New next to private ip address and choose static after assigning the correct IP address
When creating the VM in the portal, change the setting from dynamic to static on the networking tab under private IP address
When creating the VM in the portal, change the setting from dynamic to static on the networking tab under private IP address
After the VM has been created, go to the network interface attached to the VM and change the IP configuration to static assignment
After the VM has been created, go to the network interface attached to the VM and change the IP configuration to static assignment
Suggested answer: D

Explanation:

Changing the IP configuration on the network interface will achieve the requirement.

asked 26/09/2024
Andrew Dobie
34 questions

Question 415

Report
Export
Collapse

You create the following resources in an subscription:

• An Azure Container Registry instance named Registry1

• An Azure Kubernetes Service (AKS) cluster named Cluster1

You create a container image named App 1 on your administrative workstation.

You need to deploy App1 to cluster 1.

What should you do first?

Run the aa aks create command.
Run the aa aks create command.
Create a host pool on Cluster1
Create a host pool on Cluster1
Upload App1 to Registry 1.
Upload App1 to Registry 1.
Run the kubect1 apply command.
Run the kubect1 apply command.
Suggested answer: C
asked 26/09/2024
vinoth inigo
43 questions

Question 416

Report
Export
Collapse

You have an Azure subscription that contains two virtual machines as shown in the following table.

Microsoft AZ-104 image Question 383 84908 09262024195642000000

You perform a reverse DNS lookup for 10.0.0.4 from VM2.

Which FQDN will be returned?

vm1.core.windows.net
vm1.core.windows.net
vm1.internal.cloudapp.net
vm1.internal.cloudapp.net
vm1.westeurope.cloudapp.azure.com
vm1.westeurope.cloudapp.azure.com
vm1.azure.com
vm1.azure.com
Suggested answer: B

Explanation:

This is an excerpt from the official documentation in the section "Reverse DNS Considerations" Form :

https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-name-resolution-for-vmsand-role-instances#dns-client-configuration [..." - All PTR queries for IP addresses of virtual machines will return FQDNs of form [vmname].internal.cloudapp.net - Forward lookup on FQDNs of form [vmname].internal.cloudapp.net will resolve to IP address assigned to the virtual machine. - If the virtual network is linked to an Azure DNS private zones as a registration virtual network, the reverse DNS queries will return two records. One record will be of the form [vmname].[privatednszonename] and the other will be of the form [vmname].internal.cloudapp.net "...]

https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-name-resolution-for-vmsand-role-instances

asked 26/09/2024
gokulakrishna S B
37 questions

Question 417

Report
Export
Collapse

HOTSPOT

You have an Azure subscription that contains three virtual networks named VNET1, VNET2, and VNET3.

Peering for VNET1 is configured as shown in the following exhibit.

Microsoft AZ-104 image Question 384 84909 09262024195642000000

Peering for VNET2 is configured as shown in the following exhibit.

Microsoft AZ-104 image Question 384 84909 09262024195642000000

Peering for VNET3 is configured as shown in the following exhibit.

Microsoft AZ-104 image Question 384 84909 09262024195642000000

How can packets be routed between the virtual networks? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.


Microsoft AZ-104 image Question 417 84909 09262024075642000
Correct answer: Microsoft AZ-104 image answer Question 417 84909 09262024075642000

Explanation:

Box 1. VNET2 and VNET3

Box 2: VNET1

Gateway transit is disabled.

Reference:

https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-peering-overview

asked 26/09/2024
PATRICK KOUOBOU
29 questions

Question 418

Report
Export
Collapse

HOTSPOT

You have an Azure subscription that contains the storage accounts shown in the following exhibit.

Microsoft AZ-104 image Question 385 84910 09262024195642000000

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

NOTE: Each correct selection is worth one point.


Microsoft AZ-104 image Question 418 84910 09262024075642000
Correct answer: Microsoft AZ-104 image answer Question 418 84910 09262024075642000

Explanation:

Box 1: contoso104 only

Premium file shares are hosted in a special purpose storage account kind, called a FileStorage account.

Box 2: contoso101, contoso102, and contos103 only

Reference:

https://docs.microsoft.com/en-us/azure/storage/files/storage-how-to-create-premiumfileshare?tabs=azure-portal

https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-storage-tiers

asked 26/09/2024
Andrea DG
35 questions

Question 419

Report
Export
Collapse

You have a .NET Core application running in Azure App Services. You are expecting a huge influx of traffic to your application in the coming days. When your application experiences this spike in traffic, you want to detect any anomalies such as request errors or failed queries immediately. What service can you use to assure that you know about these types of errors related to your .NET application immediately?

Application Insights Search
Application Insights Search
Log analytics workspace
Log analytics workspace
Client-side monitoring
Client-side monitoring
Live Metrics Stream in Application Insights
Live Metrics Stream in Application Insights
Suggested answer: D

Explanation:

Live metrics stream includes such information as the number of incoming requests, the duration of those requests, and any failures that occur. You can also inspect critical performance metrics such as processor and memory.

asked 26/09/2024
Adrian Chirtoc
42 questions

Question 420

Report
Export
Collapse

You have a general purpose v1 storage account named storageaccount1 that has a private container named container1. You need to allow read access to the data inside container1, but only within a 14 day window. How do you accomplish this?

Create a stored access policy
Create a stored access policy
Create a service SAS
Create a service SAS
Create a shared access signatures
Create a shared access signatures
Upgrade the storage account to general purpose v2
Upgrade the storage account to general purpose v2
Suggested answer: A, C

Explanation:

A Stored Access Policy allows granular control over a single storage container using a Shared Access Signature (SAS).

A Shared Access Signature (SAS) allows you to have granular control over your storage account, including access to only certain services (i.e. Azure Blobs) and permitting only read, write, delete, list, add, or create access.

asked 26/09/2024
Bob Tole
46 questions
Total 659 questions
Go to page: of 66
Search

Related questions