This page was exported from Top Exam Collection [ http://blog.topexamcollection.com ] Export date:Sun Feb 23 17:17:09 2025 / +0000 GMT ___________________________________________________ Title: Verified AZ-104 &As - Provide AZ-104 with Correct Answers [Q62-Q86] --------------------------------------------------- Verified AZ-104 Exam Dumps Q&As - Provide AZ-104 with Correct Answers Pass Your AZ-104 Dumps Free Latest Microsoft Practice Tests QUESTION 62You have a hybrid deployment of Azure AD that contains the users shown in the following table.You need to modify the JobTitle and UsageLocation attributes for the users.For which users can you modify the attributes from Azure AD? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point. ExplanationBox 1:User1 and User3 onlyYou must use Windows Server Active Directory to update the identity, contact info, or job info for users whose source of authority is Windows Server Active Directory.Box 2: User1, User2, and User3Usage location is an Azure property that can only be modified from Azure AD (for all users including Windows Server AD users synced via Azure AD Connect).Reference:https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-users-profile-azure-portalQUESTION 63You have Azure virtual machines that run Windows Server 2019 and are configured as shown in the following table.You create a public Azure DNS zone named adatum.com and a private Azure DNS zone named contoso.com.For contoso.com, you create a virtual network link named link1 as shown in the exhibit. (Click the Exhibit tab.)You discover that VM1 can resolve names in contoso.com but cannot resolve names in adatum.com. VM1 can resolve other hosts on the internet.You need to ensure that VM1 can resolve host names in adatum.com.What should you do?  Update the DNS suffix on VM1 to be adatum.com.  Create an SRV record in the contoso.com zone.  Configure the name servers for adatum.com at the domain registrar.  Modify the Access control (IAM) settings for link1. QUESTION 64You have an Azure subscription that contains the hierarchy shown in the following exhibit.You create an Azure Policy definition named Policy1.To which Azure resources can you assign Policy and which Azure resources can you specify as exclusions from Policy1? To answer, select the appropriate options in the answer NOTE Each correct selection is worth one point. QUESTION 65You have an Azure subscription named Subscription1.You plan to deploy an Ubuntu Server virtual machine named VM1 to Subscription1.You need to perform a custom deployment of the virtual machine. A specific trusted root certification authority (CA) must be added during the deployment.What should you do? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point. Reference:https://docs.microsoft.com/en-us/azure/virtual-machines/linux/tutorial-automate-vm-deploymentQUESTION 66You have an Azure subscription that contains the resources shown in the following tableIn Azure Cloud Shell, you need to create a virtual machine by using an Azure Resource Manager (ARM) template.How should you complete the command? To answer, select the appropriate options in the answer area, NOTE: Each correct selection is worth one point. Reference:https://docs.microsoft.com/en-us/powershell/module/az.resources/new-azresourcegroupdeployment?view=azps-6.6.0QUESTION 67You have Azure subscriptions named Subscription1 and Subscription2.Subscription1 has following resource groups:RG1 includes a web app named App1 in the West Europe location.Subscription2 contains the following resource groups:For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Each correct selection is worth one point. Reference:https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/move-limitations/app-service-move-limitationsQUESTION 68You have an Azure web app named WebApp1.You need to provide developers with a copy of WebApp1 that they can modify without affecting the production WebApp1. When the developers finish testing their changes, you must be able to switch the current line version of WebApp1 to the new version.Which command should you run prepare the environment? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point. ExplanationBox 1: New-AzureRmWebAppSlotThe New-AzureRmWebAppSlot cmdlet creates an Azure Web App Slot in a given a resource group that uses the specified App Service plan and data center.Box 2: -SourceWebAppReferences:https://docs.microsoft.com/en-us/powershell/module/azurerm.websites/new-azurermwebappslotQUESTION 69You have an Azure subscription named Subscription1.In Subscription1, you create an Azure file share named share1.You create a shared access signature (SAS) named SAS1 as shown in the following exhibit.To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point. References:https://docs.microsoft.com/en-us/azure/vs-azure-tools-storage-manage-with-storage-explorer?tabs=windowshttps://feedback.azure.com/forums/217298-storage/suggestions/14498352-allow-azure-files-shares-to-be-mounted-using-sas-shttps://docs.microsoft.com/en-us/azure/storage/common/storage-sas-overviewhttps://docs.microsoft.com/en-us/azure/storage/files/storage-how-to-use-files-windowshttp://www.rebeladmin.com/2018/03/step-step-guide-create-azure-file-share-map-windows-10/QUESTION 70You have an Azure subscription named Subscription1 that contains the resources shown in the following table.In storage1, you create a blob container named blob1 and a file share named share1.Which resources can be backed up to Vault1 and Vault2? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point. ExplanationBox 1: VM1 onlyVM1 is in the same region as Vault1.File1 is not in the same region as Vautl1.SQL is not in the same region as Vault1.Blobs cannot be backup up to service vaults.Note: To create a vault to protect virtual machines, the vault must be in the same region as the virtual machines.Box 2: Share1 only.Storage1 is in the same region (West USA) as Vault2. Share1 is in Storage1.Note: After you select Backup, the Backup pane opens and prompts you to select a storage account from a list of discovered supported storage accounts. They’re either associated with this vault or present in the same region as the vault, but not yet associated to any Recovery Services vault.References:https://docs.microsoft.com/bs-cyrl-ba/azure/backup/backup-create-rs-vaulthttps://docs.microsoft.com/en-us/azure/backup/backup-afsQUESTION 71You have an Azure subscription named Subscription1. Subscription1 contains the virtual networks in the following table.Subscription1 contains the virtual machines in the following table:The firewalls on all the virtual machines are configured to allow all ICMP traffic.You add the peerings in the following table.For each of the following statements, select Yest if the statement is true. Otherwise, select No.NOTE: Each correct selection is worth one point. ExplanationStatement 1: YesVnet1 and Vnet3 are peers.Statement 2: NoStatement 3: NoPeering connections are non-transitive.References:https://docs.microsoft.com/en-us/azure/architecture/reference-architectures/hybrid-networking/hub-spokeQUESTION 72You have an Azure subscription named Subcription1 that contains a resource group named RG1.In RG1. you create an internal load balancer named LB1 and a public load balancer named 162.You need to ensure that an administrator named Admin 1 can manage LB1 and LB2. The solution must follow the principle of least privilege.Which role should you assign to Admin1 for each task? To answer, select the appropriate options in the answer area.NOTE: Caen correct selection is worth one point. ExplanationQUESTION 73You need to configure an Azure web app named contoso.azurewebsites.net to host www.contoso.com.What should you do first?  Create a CNAME record named asuid that contains the domain verification ID.  Create A records named www.contoso.com and asuid.contoso.com.  Create a TXT record named asuid that contains the domain verification ID.  Create a TXT record named www.contoso.com that has a value of contoso.azurewebsites.net. QUESTION 74You purchase a new Azure subscription named Subscription1.You create a virtual machine named VM1 in Subscription1. VM1 is not protected by Azure Backup.You need to protect VM1 by using Azure Backup. Backups must be created at 01:00 and stored for 30 days.What should you do? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point. ExplanationBox 1: A Recovery Services vaultA Recovery Services vault is an entity that stores all the backups and recovery points you create over time.Box 2: A backup policyWhat happens when I change my backup policy?When a new policy is applied, schedule and retention of the new policy is followed.References:https://docs.microsoft.com/en-us/azure/backup/backup-configure-vaulthttps://docs.microsoft.com/en-us/azure/backup/backup-azure-backup-faqA Recovery Services vault is a storage entity in Azure that houses data. The data is typically copies of data, or configuration information for virtual machines (VMs), workloads, servers, or workstations. You can use Recovery Services vaults to hold backup data for various Azure services such as IaaS VMs (Linux or Windows) and Azure SQL databases.You can use backup policy to configure schedule.https://docs.microsoft.com/en-us/azure/backup/backup-azure-recovery-services-vault-overviewhttps://docs.microQUESTION 75Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have an Azure subscription that contains the following resources:* A virtual network that has a subnet named Subnet1* Two network security groups (NSGs) named NSG-VM1 and NSG-Subnet1* A virtual machine named VM1 that has the required Windows Server configurations to allow Remote Desktop connections NSG-Subnet1 has the default inbound security rules only.NSG-VM1 has the default inbound security rules and the following custom inbound security rule:* Priority: 100* Source: Any* Source port range: ** Destination: ** Destination port range: 3389* Protocol: UDP* Action: AllowVM1 connects to Subnet1. NSG1-VM1 is associated to the network interface of VM1. NSG-Subnet1 is associated to Subnet1.You need to be able to establish Remote Desktop connections from the internet to VM1.Solution: You add an inbound security rule to NSG-Subnet1 that allows connections from the Internet source to the VirtualNetwork destination for port range 3389 and uses the UDP protocol.Does this meet the goal?  Yes  No The default port for RDP is TCP port 3389 not UDP.NSGs deny all inbound traffic except from virtual network or load balancers. For inbound traffic, Azure processes the rules in a network security group associated to a subnet first, and then the rules in a network security group associated to the network interface.By default NSG rule to allow traffic through RDP port 3389 is not created automatically during the creation of VM , unless you change the setting during creation.Here in the solution UDP traffic is allowed at virtual network level which is not tcp/rdp protocol. So this will not work to achieve the goal.References:https://docs.microsoft.com/en-us/azure/virtual-machines/troubleshooting/troubleshoot-rdp-connectionhttps://docs.microsoft.com/en-us/azure/virtual-network/security-overview#default-security-rulesQUESTION 76You have an Azure subscription that contains several virtual machines and an Azure Log Analytics workspace named Workspace1. You create a log search query as shown in the following exhibit.Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.NOTE: Each correct selection is worth one point. Reference:https://docs.microsoft.com/en-us/azure/azure-monitor/log-query/log-query-overviewhttps://docs-analytics-eus.azurewebsites.net/queryLanguage/query_language_renderoperator.htmlQUESTION 77You have an Azure subscription named Subscription1 that is used be several departments at your company.Subscription1 contains the resources in the following table:Another administrator deploys a virtual machine named VM1 and an Azure Storage account named Storage2 by using a single Azure Resource Manager template.You need to view the template used for the deployment.From which blade can you view the template that was used for the deployment?  RG1  VM1  Storage1  Container1 Explanation1. View template from deployment historyGo to the resource group for your new resource group. Notice that the portal shows the result of the last deployment. Select this link.2. You see a history of deployments for the group. In your case, the portal probably lists only one deployment.Select this deployment.The portal displays a summary of the deployment. The summary includes the status of the deployment and its operations and the values that you provided for parameters. To see the template that you used for the deployment, select View template.References:https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-manager-export-templateQUESTION 78You have an Azure subscription named Subscription1 that contains the resources shown in the following table.In storage1, you create a blob container named blob1 and a file share named share1.Which resources can be backed up to Vault1 and Vault2? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point. Reference:https://docs.microsoft.com/bs-cyrl-ba/azure/backup/backup-create-rs-vaulthttps://docs.microsoft.com/en-us/azure/backup/backup-afsQUESTION 79You have an Azure subscription named Subscription1. Subscription1 contains the resource groups in the following table.RG1 has a web app named WebApp1. WebApp1 is located in West Europe.You move WebApp1 to RG2.What is the effect of the move?  The App Service plan for WebApp1 moves to North Europe. Po1icy2 applies to WebApp1.  The App Service plan for WebApp1 remains in West Europe. Policy2 applies to WebApp1.  The App Service plan for WebApp1 moves to North Europe. Policy1 applies to WebApp1.  The App Service plan for WebApp1 remains in West Europe. Policy1 applies to WebApp1. QUESTION 80You have an Azure subscription that contains the resources shown in the following table.You plan to create a data collection rule named DCRI in Azure Monitor.Which resources can you set as data sources in DCRI, and which resources can you set as destinations in DCRI? To answer, select the appropriate options in the answer are a.NOTE: Each correct selection is worth one point. QUESTION 81You have an Azure subscription that contains a policy-based virtual network gateway named GW1 and a virtual network named VNet1.You need to ensure that you can configure a point-to-site connection from an on-premises computer to VNet1.Which two actions should you perform? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.  Add a service endpoint to VNet1  Reset GW1  Create a route-based virtual network gateway  Add a connection to GW1  Delete GW1  Add a public IP address space to VNet1 C: A VPN gateway is used when creating a VPN connection to your on-premises network.Route-based VPN devices use any-to-any (wildcard) traffic selectors, and let routing/forwarding tables direct traffic to different IPsec tunnels. It is typically built on router platforms where each IPsec tunnel is modeled as a network interface or VTI (virtual tunnel interface).E: Policy-based VPN devices use the combinations of prefixes from both networks to define how traffic is encrypted/decrypted through IPsec tunnels. It is typically built on firewall devices that perform packet filtering.IPsec tunnel encryption and decryption are added to the packet filtering and processing engine.Reference:https://docs.microsoft.com/en-us/azure/vpn-gateway/create-routebased-vpn-gateway-portalhttps://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-connect-multiple-policybased-rm-psQUESTION 82You have an Azure subscription that contains an Azure Storage account.You plan to copy an on-premises virtual machine image to a container named vmimages.You need to create the container for the planned image.Which command should you run? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point. Reference:https://adamtheautomator.com/azcopy-copy-files/QUESTION 83You have an Azure subscription.You need to implement a custom policy that meet the following requirements:*Ensures that each new resource group in the subscription has a tag named organization set to a value of Contoso.*Ensures that resource group can be created from the Azure portal.*Ensures that compliance reports in the Azure portal are accurate.How should you complete the policy? To answer, select the appropriate options in the answers area. Reference:https://docs.microsoft.com/en-us/azure/governance/policy/concepts/definition-structurehttps://docs.microsoft.com/en-us/azure/role-based-access-control/custom-roleshttps://docs.microsoft.com/en-us/azure/governance/policy/concepts/effectsQUESTION 84You need to meet the user requirement for Admin1.What should you do?  From the Subscriptions blade, select the subscription, and then modify the Properties.  From the Subscriptions blade, select the subscription, and then modify the Access control (IAM) settings.  From the Azure Active Directory blade, modify the Properties.  From the Azure Active Directory blade, modify the Groups. ExplanationChange the Service administrator for an Azure subscription* Sign in to Account Center as the Account administrator.* Select a subscription.* On the right side, select Edit subscription details.Scenario: Designate a new user named Admin1 as the service administrator of the Azure subscription.References:https://docs.microsoft.com/en-us/azure/billing/billing-add-change-azure-subscription-administratorQUESTION 85You have an Azure subscription that contains a resource group named RG1. RG1 contains 100 virtual machines.Your company has three cost centers named Manufacturing, Sales, and Finance.You need to associate each virtual machine to a specific cost center.What should you do?  Add an extension to the virtual machines.  Modify the inventory settings of the virtual machine.  Assign tags to the virtual machines.  Configure locks for the virtual machine. You apply tags to your Azure resources, resource groups, and subscriptions to logically organize them into a taxonomy. Each tag consists of a name and a value pair. For example, you can apply the name “Environment” and the value “Production” to all the resources in production References:https://docs.microsoft.com/en-us/azure/billing/billing-getting-startedhttps://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-using-tagsQUESTION 86You need to identify the storage requirements for Contoso.For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE:Each correct selection is worth one point. ExplanationStatement 1: YesContoso is moving the existing product blueprint files to Azure Blob storage which will ensure that the blueprint files are stored in the archive storage tier.Use unmanaged standard storage for the hard disks of the virtual machines. We use Page Blobs for these.Statement 2: NoAzure Table storage stores large amounts of structured data. The service is a NoSQL datastore which accepts authenticated calls from inside and outside the Azure cloud. Azure tables are ideal for storing structured, non-relational data. Common uses of Table storage include:1. Storing TBs of structured data capable of serving web scale applications2. Storing datasets that don’t require complex joins, foreign keys, or stored procedures and can be denormalized for fast access3. Quickly querying data using a clustered index4. Accessing data using the OData protocol and LINQ queries with WCF Data Service .NET Libraries Statement 3: No File Storage can be used if your business use case needs to deal mostly with standard File extensions like*.docx, *.png and *.bak then you should probably go with this storage option.Reference:https://docs.microsoft.com/en-us/azure/machine-learning/team-data-science-process/move-data-to-azure-blob-ushttps://docs.microsoft.com/en-us/azure/storage/tables/table-storage-overviewhttps://www.serverless360.com/blog/azure-blob-storage-vs-file-storage Loading … Get Top-Rated Microsoft AZ-104 Exam Dumps Now: https://www.topexamcollection.com/AZ-104-vce-collection.html --------------------------------------------------- Images: https://blog.topexamcollection.com/wp-content/plugins/watu/loading.gif https://blog.topexamcollection.com/wp-content/plugins/watu/loading.gif --------------------------------------------------- --------------------------------------------------- Post date: 2024-04-03 14:21:25 Post date GMT: 2024-04-03 14:21:25 Post modified date: 2024-04-03 14:21:25 Post modified date GMT: 2024-04-03 14:21:25