This page was exported from Top Exam Collection [ http://blog.topexamcollection.com ] Export date:Sun Jan 19 13:21:03 2025 / +0000 GMT ___________________________________________________ Title: [Q58-Q79] Top Microsoft AZ-104 Courses Online - Updated [Nov-2023] --------------------------------------------------- Top Microsoft AZ-104 Courses Online - Updated [Nov-2023] AZ-104 Practice Dumps - Verified By TopExamCollection Updated 257 Questions QUESTION 58You have the App Service plans shown in the following table.You plan to create the Azure web apps shown in the following table.You need to identify which App Service plans can be used for the web apps.What should you identify? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point. ExplanationBox 1: ASP1 ASP3Asp1, ASP3: ASP.NET Core apps can be hosted both on Windows or Linux.Not ASP2: The region in which your app runs is the region of the App Service plan it’s in.Box 2: ASP1ASP.NET apps can be hosted on Windows only.Reference:https://docs.microsoft.com/en-us/azure/app-service/quickstart-dotnetcore?pivots=platform-linuxhttps://docs.microsoft.com/en-us/azure/app-service/app-service-plan-manage#QUESTION 59Your on-premises network contains a VPN gateway.You have an Azure subscription that contains the resources shown in the following table.You need to ensure that all the traffic from VM1 to storage! travels across the Microsoft backbone network.What should you configure?  service endpoints  Azure Active Directory (Azure AD) Application Proxy  a network security group (NSG)  Azure Virtual WAN QUESTION 60You need to implement Role1.Which command should you run before you create Role1? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point. Explanationhttps://docs.microsoft.com/en-us/azure/role-based-access-control/tutorial-custom-role-powershell Get-AzRoleDefinition -Name “Reader” | ConvertTo-Jsonhttps://docs.microsoft.com/en-us/powershell/module/az.resources/get-azroledefinition?view=azps-5.9.0https://docs.microsoft.com/en-us/azure/role-based-access-control/tutorial-custom-role-powershellhttps://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.utility/convertto-json?view=powershehttps://docs.microsoft.com/en-us/powershell/module/azuread/get-azureaddirectoryrole?view=azureadps-2.0QUESTION 61Your network contains an on-premises Active Directory forest named contoso.com that contains two domains named contoso.com and east.contoso.com.The forest contains the users shown in the following table.You plan to sync east.contoso.com to an Azure Active Directory (Azure AD) tenant by using Azure AD Connect.You need to select an account for Azure AD Connect to use to connect to the forest.Which account should you select?  User1  User2  User3  User4 ExplanationIt is no longer supported to use an enterprise admin or a domain admin account as the AD DS Connector account.Reference:https://docs.microsoft.com/en-us/azure/active-directory/hybrid/reference-connect-accounts-permissionsQUESTION 62You have an Azure subscription that contains the users shown in the following table.The groups are configured as shown in the following table.For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. QUESTION 63Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You manage a virtual network named VNet1 that is hosted in the West US Azure region.VNet1 hosts two virtual machines named VM1 and VM2 that run Windows Server.You need to inspect all the network traffic from VM1 to VM2 for a period of three hours.Solution: From Azure Network Watcher, you create a packet capture.Does this meet the goal?  Yes  No Explanationhttps://azure.microsoft.com/en-us/updates/general-availability-azure-network-watcher-connection-monitor-inall-QUESTION 64You are configuring serverless computing in Azure.You need to receive an email message whenever a resource is created in or deleted from a resource group. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. Reference:https://docs.microsoft.com/en-us/azure/event-grid/monitor-virtual-machine-changes-event-grid-logic-apphttps://docs.microsoft.com/en-us/azure/event-grid/monitor-virtual-machine-changes-event-grid-logic-appQUESTION 65You have an Azure subscription named Subscription1 that contains the resources in the following table.VM1 and VM2 run the websites in the following table.AppGW1 has the backend pools in the following table.DNS resolves site1.contoso.com, site2.contoso.com, and site3.contoso.com to the IP address of AppGW1.AppGW1 has the listeners in the following table.AppGW1 has the rules in the following table.For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Each correct selection is worth one point. Explanation:Vm1 is in Pool1. Rule2 applies to Pool1, Listener 2, and site2.contoso.comQUESTION 66You have an Azure subscription that contains the container images shown in the following table.You plan to use the following services:* Azure Container Instances* Azure Container Apps* Azure App ServiceIn which services can you run the images? To answer, select the options in the answer area.NOTE: Each correct answer is worth one point. QUESTION 67You have two Azure subscriptions named Sub1 and Sub2.An administrator creates a custom role that has an assignable scope to a resource group named RG1 in Sub1.You need to ensure that you can apply the custom role to any resource group in Sub1 and Sub2. The solution must minimize administrative effort.What should you do?  Create a new custom role for Sub1 and add Sub2 to the assignable scopes. Remove the role from RG1.  Select the custom role and add Sub1 and Sub2 to the assignable scopes. Remove RG1 from the assignable scopes.  Select the custom role and add Sub1 to the assignable scopes. Remove RGi from the assignable scopes. Create a new custom role for Sub2.  Create a new custom role for Sub1. Create a new custom role for Sub2. Remove the role from RG1. QUESTION 68You need to implement Role1.Which command should you run before you create Role1? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point. ExplanationQUESTION 69You need to recommend a solution to automate the configuration for the finance department users. The solution must meet the technical requirements.What should you include in the recommended?  Azure AP B2C  Azure AD Identity Protection  an Azure logic app and the Microsoft Identity Management (MIM) client  dynamic groups and conditional access policies Technically, The finance department needs to migrate their users from AD to AAD using AADC based on the finance OU, and need to enforce MFA use. This is conditional access policy. Employees also often get promotions and/or join other departments and when that occurs, the user’s OU attribute will change when the admin puts the user in a new OU, and the dynamic group conditional access exception (OU= [Department Name Value]) will move the user to the appropriate dynamic group on next AADC delta sync.https://docs.microsoft.com/en-us/azure/active-directory/enterprise-users/groups-dynamic-membershiphttps://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overviewhttps://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-userstatesQUESTION 70Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have an Azure web app named App1. App1 runs in an Azure App Service plan named Plan1. Plan1 is associated to the Free pricing tier.You discover that App1 stops each day after running continuously for 60 minutes.You need to ensure that App1 can run continuously for the entire day.Solution: You add a continuous WebJob to App1.Does this meet the goal?  Yes  No ExplanationA web app can time out after 20 minutes of inactivity. Only requests to the actual web app reset the timer.Viewing the app’s configuration in the Azure portal or making requests to the advanced tools site (https://<app_name>.scm.azurewebsites.net) don’t reset the timer. If your app runs continuous or scheduled (Timer trigger) WebJobs, enable Always On to ensure that the WebJobs run reliably. This feature is available only in the Basic, Standard, and Premium pricing tiers.The app service plan mentioned in the question is associated to the free tier , so addition of a continuous WebJob to App1 is not possible. So the proposed solution won’t meet the goal.Reference :https://docs.microsoft.com/en-us/azure/app-service/webjobs-createQUESTION 71You create a Recovery Services vault backup policy named Policy1 as shown in the following exhibit:Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.NOTE: Each correct selection is worth one point. QUESTION 72You have an Azure subscription that contains an Azure Storage account named storage1 and the users shown in the following table.You plan to monitor storage1 and to configure email notifications for the signals shown in the following table.You need to identify the minimum number of alert rules and action groups required for the planned monitoring.How many alert rules and action groups should you identify? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point. Reference:https://docs.microsoft.com/en-us/azure/azure-monitor/platform/action-groupsQUESTION 73You have an availability set named AS1 that contains three virtual machines named VM1, VM2, and VM3.You attempt to reconfigure VM1 to use a larger size. The operation fails and you receive an allocation failure message.You need to ensure that the resize operation succeeds.Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. ExplanationAction 1: Stop VM1, VM2 and VM3If the VM you wish to resize is part of an availability set, then you must stop all VMs in the availability set before changing the size of any VM in the availability set. The reason all VMs in the availability set must be stopped before performing the resize operation to a size that requires different hardware is that all running VMs in the availability set must be using the same physical hardware cluster. Therefore, if a change of physical hardware cluster is required to change the VM size then all VMs must be first stopped and then restarted one-by-one to a different physical hardware clusters.Action 2: Resize VM1Action 3: Start VM1, VM2, and VM3References:https://azure.microsoft.com/es-es/blog/resize-virtual-machines/QUESTION 74You have an Azure subscription that contains an Azure Service Bus named Bus1.Your company plans to deploy two Azure web apps named App1 and App2. The web apps will create messages that have the following requirements:* Each message created by App1 must be consumed by only a single consumer* Each message created by App2 will be consumed by multiple consumers.Which resource should you create for each web app? To answer, drag the appropriate resources to the correct web apps. Each resource may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.NOTE: Each correct selection is worth one point. Reference:https://docs.microsoft.com/en-us/azure/service-bus-messaging/service-bus-queues-topics-subscriptionsQUESTION 75You have an Azure subscription named Subscription1. Subscription1 contains the virtual networks in the following table.Subscription1 contains the virtual machines in the following table:The firewalls on all the virtual machines are configured to allow all ICMP traffic.You add the peerings in the following table.For each of the following statements, select Yest if the statement is true. Otherwise, select No.NOTE: Each correct selection is worth one point. ExplanationStatement 1: YesVnet1 and Vnet3 are peers.Statement 2: NoStatement 3: NoPeering connections are non-transitive.References:https://docs.microsoft.com/en-us/azure/architecture/reference-architectures/hybrid-networking/hub-spokeQUESTION 76You need to implement Role1.Which command should you run before you create Role1? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point. QUESTION 77You have an on-premises file server named Server1 that runs Windows Server 2016.You have an Azure subscription that contains an Azure file share.You deploy an Azure File Sync Storage Sync Service, and you create a sync group.You need to synchronize files from Server1 to Azure.Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. ExplanationStep 1: Install the Azure File Sync agent on Server1The Azure File Sync agent is a downloadable package that enables Windows Server to be synced with an Azure file share Step 2: Register Server1.Register Windows Server with Storage Sync ServiceRegistering your Windows Server with a Storage Sync Service establishes a trust relationship between your server (or cluster) and the Storage Sync Service.Step 3: Add a server endpointCreate a sync group and a cloud endpoint.A sync group defines the sync topology for a set of files. Endpoints within a sync group are kept in sync with each other. A sync group must contain one cloud endpoint, which represents an Azure file share and one or more server endpoints. A server endpoint represents a path on registered server.References: https://docs.microsoft.com/en-us/azure/storage/files/storage-sync-files-deployment-guideQUESTION 78You have an Azure subscription named Subscription1. Subscription1 contains a virtual machine named VM1.You install and configure a web server and a DNS server on VM1.VM1 has the effective network security rules shown in the following exhibit.Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.NOTE: Each correct selection is worth one point. QUESTION 79Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.Your company has 100 users located in an office in Paris.The on-premises network contains the servers shown in the following table.You create a new subscription. You need to move all the servers to Azure.Solution: You use Azure Site Recovery.Does this meet the goal?  Yes  NoAs an organization you need to adopt a business continuity and disaster recovery (BCDR) strategy that keeps your data safe, and your apps and workloads online, when planned and unplanned outages occur.Azure Recovery Services contributes to your BCDR strategy:* Site Recovery service: Site Recovery helps ensure business continuity by keeping business apps and workloads running during outages. Site Recovery replicates workloads running on physical and virtual machines (VMs) from a primary site to a secondary location. When an outage occurs at your primary site, you fail over to secondary location, and access apps from there. After the primary location is running again, you can fail back to it.* Backup service: The Azure Backup service keeps your data safe and recoverable.Site Recovery can manage replication for:* Azure VMs replicating between Azure regions.* On-premises VMs, Azure Stack VMs, and physical servers. Reference:https://docs.microsoft.com/en-us/azure/site-recovery/site-recovery-overview Loading … New (2023) Microsoft AZ-104 Exam Dumps: https://www.topexamcollection.com/AZ-104-vce-collection.html --------------------------------------------------- Images: https://blog.topexamcollection.com/wp-content/plugins/watu/loading.gif https://blog.topexamcollection.com/wp-content/plugins/watu/loading.gif --------------------------------------------------- --------------------------------------------------- Post date: 2023-11-30 09:11:24 Post date GMT: 2023-11-30 09:11:24 Post modified date: 2023-11-30 09:11:24 Post modified date GMT: 2023-11-30 09:11:24