Ace the Microsoft AZ-104 Exam with Up-to-Date Exam Questions

Question #1

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You deploy an Azure Kubernetes Service (AKS) cluster named AKS1.You need to depl

A. es

B. o

View answer

Correct Answer: B

Question #2

Note. This question is part of a series of questions that present the same scenario. Each question in theseries contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have a Microsoft Entra tenant named contoso.com.You have a CSV file that cont

A. es

B. o

.

View answer

Correct Answer: B

Question #3

DRAG DROP (Drag and Drop is not supported)You have an Azure subscription that contains a virtual machine named VM1.You need to back up VM1. The solution must ensure that backups are stored across three availability zones in the primary region.Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #4

HOTSPOT (Drag and Drop is not supported)You have a pay-as-you-go Azure subscription that contains the virtual machines shown in the following table.You create the budget shown in the following exhibit. The AG1 action group contains a user named admin@contoso.com only.Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.Hot Area:

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #5

You have an Azure Storage account that contains 5,000 blobs accessed by multiple users.You need to ensure that the users can view only specific blobs based on blob index tags.What should you include in the solution?

A. role assignment condition

B. stored access policy

C. ust-in-time (JIT) VM access

D. shared access signature (SAS)

View answer

Correct Answer: D

Question #6

You need to identify which storage account to use for the flow logging of IP traffic from VM5. The solution must meet the retention requirements.Which storage account should you identify?

A. torage1

B. torage2

C. torage3

D. torage4

View answer

Correct Answer: C

Question #7

You have an Azure subscription named Subscription1.You have 5 TB of data that you need to transfer to Subscription1.You plan to use an Azure Import/Export job.What can you use as the destination of the imported data?

A. n Azure Cosmos DB database

B. zure File Storage

C. zure SQL Database

D. virtual machine

View answer

Correct Answer: B

Question #8

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You need to ensure that an Azure Active Directory (Azure AD) user named Admin1 i

A. es

B. o

View answer

Correct Answer: A

Question #9

You create the following resources in an Azure subscription:-An Azure Container Registry instance named Registry1-An Azure Kubernetes Service (AKS) cluster named Cluster1You create a container image named App1 on your administrative workstation. You need to deploy App1 to Cluster1.What should you do first?

A. roximity2 only

B. roximity1, Proximity2, and Proximity3

C. roximity1 only

D. roximity1 and Proximity3 only

View answer

Correct Answer: C

Question #10

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have an Azure Directory (Azure AD) tenant named Adatum and an Azure Subscrip

A. es

B. o

View answer

Correct Answer: B

Question #11

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have an Azure subscription named Subscription1. Subscription1 contains a res

A. es

B. o

View answer

Correct Answer: B

Question #12

You have an Azure subscription.You have an on-premises virtual machine named VM1. The settings for VM1 are shown in the exhibit. (Click the Exhibit tab.)You need to ensure that you can use the disks attached to VM1 as a template for Azure virtual machines. What should you modify on VM1?

A. he memory

B. he network adapters

C. he hard drive

D. he processor

E. ntegration Services

View answer

Correct Answer: C

Question #13

HOTSPOT (Drag and Drop is not supported)You have an Azure subscription named Subscription1. Subscription1 contains two Azure virtual machines VM1 and VM2. VM1 and VM2 run Windows Server 2016.VM1 is backed up daily by Azure Backup without using the Azure Backup agent. VM1 is affected by ransomware that encrypts data.You need to restore the latest backup of VM1.To which location can you restore the backup? To answer, select the appropriate options in the answer area.Note: Each correct selection is worth one p

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #14

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.Your company has an Azure Active Directory (Azure AD) subscription. You want to implement an Azure AD conditional access policy.The policy must be configured to require members of the Global Administrators group to use Multi-Factor Authentication and an Azure AD-joined device when they connect to Azure AD from untrus

A. es

B. o

View answer

Correct Answer: A

Question #15

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You deploy an Azure Kubernetes Service (AKS) cluster named AKS1. You need to dep

A. es

B. o

View answer

Correct Answer: B

Question #16

Your company has an Azure subscription.You need to deploy a number of Azure virtual machines (VMs) using Azure Resource Manager (ARM) templates. You have been informed that the VMs will be included in a single availability set.You are required to make sure that the ARM template you configure allows for as many VMs as possible to remain accessible in the event of fabric failure or maintenance.Which of the following is the value that you should configure for the platformUpdateDomainCount property?

A. 0

B. 0

C. 0

D. 0

View answer

Correct Answer: B

Question #17

You have an Azure subscription that contains a web app named webapp1. You need to add a custom domain named www.contoso.com to webapp1. What should you do first?

A. reate a DNS record

B. dd a connection string

C. pload a certificate

D. top webapp1

View answer

Correct Answer: A

Question #18

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You need to ensure that an Azure Active Directory (Azure AD) user named Admin1 i

A. es

B. o

View answer

Correct Answer: A

Question #19

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.Your company has an Azure Active Directory (Azure AD) subscription. You want to implement an Azure AD conditional access policy.The policy must be configured to require members of the Global Administrators group to use Multi-Factor Authentication and an Azure AD-joined device when they connect to Azure AD from untrus

A. es

B. o

View answer

Correct Answer: B

Question #20

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.Your company has an Azure Active Directory (Azure AD) tenant named weyland.com that is configured for hybrid coexistence with the on-premises ActiveDirectory domain.You have a server named DirSync1 that is configured as a DirSync server.You create a new user account in the on-premise Active Directory. You now need to

A. es

B. o

View answer

Correct Answer: A

Question #21

HOTSPOT (Drag and Drop is not supported)You have an Azure Active Directory (Azure AD) tenant named adatum.com. Adatum.com contains the groups in the following table.You create two user accounts that are configured as shown in the following table.To which groups do User1 and User2 belong? To answer, select the appropriate options in the answer area.Note: Each correct selection is worth one point.Hot Area:

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #22

HOTSPOT (Drag and Drop is not supported)You need to create container1 and share1.Which storage accounts should you use for each resource? To answer, select the appropriate options in the answer area.Note: Each correct selection is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #23

You have an Azure policy as shown in the following exhibit:What is the effect of the policy?

A. ou are prevented from creating Azure SQL servers anywhere in Subscription 1

B. ou can create Azure SQL servers in ContosoRG1 only

C. ou are prevented from creating Azure SQL Servers in ContosoRG1 only

D. ou can create Azure SQL servers in any resource group within Subscription 1

View answer

Correct Answer: B

Question #24

HOTSPOT (Drag and Drop is not supported)You have an Azure subscription that contains the file shares shown in the following table.You have the on-premises file shares shown in the following table.You create an Azure file sync group named Sync1 and perform the following actions:-Add share1 as the cloud endpoint for Sync1.-Add data1 as a server endpoint for Sync1.-Register Server1 and Server2 to Sync1.For each of the following statements, select Yes if the statement is true. Otherwise, select No.Note: Each co

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #25

HOTSPOT (Drag and Drop is not supported)You have the App Service plan shown in the following exhibit.The scale-in settings for the App Service plan are configured as shown in the following exhibit.The scale out rule is configured with the same duration and cool down tile as the scale in rule.Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.Note: Each correct selection is worth one point.Hot Area:

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #26

You have an Azure subscription named Subscription1.You have 5 TB of data that you need to transfer to Subscription1.You plan to use an Azure Import/Export job.What can you use as the destination of the imported data?

A. zure Data Factory

B. he Azure File Sync Storage Sync Service

C. zure File Storage

D. zure SQL Database

View answer

Correct Answer: C

Question #27

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You need to ensure that an Azure Active Directory (Azure AD) user named Admin1 i

A. Yes

B. No

View answer

Correct Answer: A

Question #28

You develop the following Azure Resource Manager (ARM) template to create a resource group and deploy an Azure Storage account to the resource group.Which cmdlet should you run to deploy the template?

A. ew-AzResource

B. ew-AzResourceGroupDeployment

C. ew-AzTenantDeployment

D. ew-AzDeployment

View answer

Correct Answer: B

Question #29

Your company has a Microsoft Azure subscription.The company has datacenters in Los Angeles and New York.You are configuring the two datacenters as geo-clustered sites for site resiliency. You need to recommend an Azure storage redundancy option.You have the following data storage requirements:-Data must be stored on multiple nodes.-Data must be stored on nodes in separate geographic locations.-Data can be read from the secondary location as well as from the primary location.Which of the following Azure stor

A. eo-redundant storage

B. ead-only geo-redundant storage

C. one-redundant storage

D. ocally redundant storage

View answer

Correct Answer: B

Question #30

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have an Azure subscription named Subscription1. Subscription1 contains a res

A. es

B. o

View answer

Correct Answer: B

Question #31

HOTSPOT (Drag and Drop is not supported)You need to create an Azure Storage account that meets the following requirements:-Minimizes costs-Supports hot, cool, and archive blob tiers-Provides fault tolerance if a disaster affects the Azure region where the account residesHow should you complete the command? To answer, select the appropriate options in the answer area.Note: Each correct selection is worth one point.Hot Area:

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #32

HOTSPOT (Drag and Drop is not supported)You have an Azure subscription that has offices in the East US and West US Azure regions.You plan to create the storage account shown in the following exhibit.Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.Note: Each correct selection is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #33

HOTSPOT (Drag and Drop is not supported)You have three Azure subscriptions named Sub1, Sub2, and Sub3 that are linked to an Azure AD tenant.The tenant contains a user named User1, a security group named Group1, and a management group named MG1. User is a member of Group1.Sub1 and Sub2 are members of MG1. Sub1 contains a resource group named RG1. RG1 contains five Azure functions.You create the following role assignments for MG1:-Group1: Reader-User1: User Access AdministratorYou assign User the Virtual Mach

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #34

You need to ensure that you can grant Group4 Azure RBAC read only permissions to all the Azure file shares. What should you do?

A. n storage2, enable identity-based access for the file shares

B. ecreate storage2 and set Hierarchical namespace to Enabled

C. n storage1 and storage4, change the Account kind type to StorageV2 (general purpose v2)

D. reate a shared access signature (SAS) for storage1, storage2, and storage4

View answer

Correct Answer: A

Question #35

HOTSPOT (Drag and Drop is not supported)You have an Azure subscription.You create the following file named Deploy.json.You connect to the subscription and run the following commands.For each of the following statements, select Yes if the statement is true. Otherwise, select No.Note: Each correct selection is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #36

You have an Azure Storage account named storage1. You plan to use AzCopy to copy data to storage1.You need to identify the storage services in storage1 to which you can copy the data. What should you identify?

A. lob, file, table, and queue

B. lob and file only

C. ile and table only

D. ile only

E. lob, table, and queue only

View answer

Correct Answer: B

Question #37

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have an Azure subscription named Subscription1. Subscription1 contains a res

A. es

B. o

View answer

Correct Answer: B

Question #38

HOTSPOT (Drag and Drop is not supported)You have a hybrid deployment of Azure Active Directory (Azure AD) that contains the users shown in the following table.You need to modify the JobTitle and UsageLocation attributes for the users.For which users can you modify the attributes from Azure AD? To answer, select the appropriate options in the answer area.Note: Each correct selection is worth one point.Hot Area:

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #39

You have an Azure subscription named Subscription1 that contains virtual network named VNet1. VNet1 is in a resource group named RG1.User named User1 has the following roles for Subscription1:•Reader•Security Admin•Security ReaderYou need to ensure that User1 can assign the Reader role for VNet1 to other users.What should you do?

A. emove User1 from the Security Reader and Reader roles for Subscription1

B. emove User1 from the Security Reader role for Subscription1

C. ssign User1 the Network Contributor role for VNet1

D. ssign User1 the User Access Administrator role for VNet1

View answer

Correct Answer: D

Question #40

You have an Azure subscription that contains a resource group named TestRG. You use TestRG to validate an Azure deployment.TestRG contains the following resources:You need to delete TestRG. What should you do first?

A. odify the backup configurations of VM1 and modify the resource lock type of VNET1

B. emove the resource lock from VNET1 and delete all data in Vault1

C. urn off VM1 and remove the resource lock from VNET1

D. urn off VM1 and delete all data in Vault1

View answer

Correct Answer: C

Question #41

DRAG DROP (Drag and Drop is not supported)You have an Azure subscription named Subscription1.You create an Azure Storage account named contosostorage, and then you create a file share named data.Which UNC path should you include in a script that references files from the data file share? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once or not at all. You may need to drag the split bar between panes or scroll to view content.Note: Each correct selecti

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #42

You have an Azure subscription named Subscription1.You have 5 TB of data that you need to transfer to Subscription1.You plan to use an Azure Import/Export job.What can you use as the destination of the imported data?

A. zure Data Lake Store

B. zure File Storage

C. zure SQL Database

D. he Azure File Sync Storage Sync Service

View answer

Correct Answer: B

Question #43

HOTSPOT (Drag and Drop is not supported)You have an Azure subscription. The subscription contains a virtual machine that runs Windows 10.You need to join the virtual machine to an Active Directory domain.How should you complete the Azure Resource Manager (ARM) template? To answer, select the appropriate options in the answer area.Note: Each correct selection is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #44

DRAG DROP (Drag and Drop is not supported)You have downloaded an Azure Resource Manager (ARM) template to deploy numerous virtual machines (VMs). The ARM template is based on a current VM, but must be adapted to reference an administrative password.You need to make sure that the password cannot be stored in plain text. You are preparing to create the necessary components to achieve your goal.Which of the following should you create to achieve your goal? Answer by dragging the correct option from the list to

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #45

You have an app named App1 that runs on an Azure web app named webapp1.The developers at your company upload an update of App1 to a Git repository named Git1. Webapp1 has the deployment slots shown in the following table.You need to ensure that the App1 update is tested before the update is made available to users. Which two actions should you perform? Each correct answer presents part of the solution.

A. eploy five virtual machines

B. eploy five virtual machines

C. eploy one virtual machine scale set that is set to VM (virtual machines) orchestration mode

D. eploy one virtual machine scale set that is set to ScaleSetVM orchestration mode

View answer

Correct Answer: AD

Question #46

You have an Azure subscription.You plan to deploy the Azure container instances shown in the following table.Which instances can you deploy to a container group?

A. nstance1 only

B. nstance2 only

C. nstance1 and Instance2 only

D. nstance3 and Instance4 only

View answer

Correct Answer: D

Question #47

Your company has virtual machines (VMs) hosted in Microsoft Azure. The VMs are located in a single Azure virtual network named VNet1.The company has users that work remotely. The remote workers require access to the VMs on VNet1. You need to provide access for the remote workers.What should you do?

A. onfigure a Site-to-Site (S2S) VPN

B. onfigure a VNet-toVNet VPN

C. onfigure a Point-to-Site (P2S) VPN

D. onfigure DirectAccess on a Windows Server 2012 server VM

E. onfigure a Multi-Site VPN

View answer

Correct Answer: C

Question #48

You have an Azure Resource Manager template named Template1 that is used to deploy an Azure virtual machine.Template1 contains the following text:The variables section in Template1 contains the following text:"location": "westeurope"The resources section in Template1 contains the following text:You need to deploy the virtual machine to the West US location by using Template1. What should you do?

A. odify the location in the resource section to westus

B. elect West US during the deployment

C. odify the location in the variables section to westus

View answer

Correct Answer: A

Question #49

You have an Azure subscription.You have 100 Azure virtual machines.You need to quickly identify underutilized virtual machines that can have their service tier changed to a less expensive offering.Which blade should you use?

A. ee Explanation section for answer

View answer

Correct Answer: B

Question #50

HOTSPOT (Drag and Drop is not supported)You have an Azure AD tenant that contains a user named External User.External User authenticates to the tenant by using external195@gmail.com.You need to ensure that External User authenticates to the tenant by using contractor@gmail.com.Which two settings should you configure from the Overview blade? To answer, select the appropriate settings in the answer area.Note: Each correct answer is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #51

You have an Azure subscription named Subscription1 that contains a virtual network named VNet1. VNet1 is in a resource group named RG1.Subscription1 has a user named User1. User1 has the following roles:-Reader-Security Admin-Security ReaderYou need to ensure that User1 can assign the Reader role for VNet1 to other users.What should you do?

A. emove User1 from the Security Reader role for Subscription1

B. ssign User1 the User Access Administrator role for VNet1

C. emove User1 from the Security Reader and Reader roles for Subscription1

D. ssign User1 the Contributor role for VNet1

View answer

Correct Answer: B

Question #52

Your on-premises network contains a VPN gateway.You have an Azure subscription that contains the resources shown in the following table.You need to ensure that all the traffic from VM1 to storage1 travels across the Microsoft backbone network. What should you configure?

A. zure Application Gateway

B. rivate endpoints

C. network security group (NSG)

D. zure Virtual WAN

View answer

Correct Answer: B

Question #53

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You need to ensure that an Azure Active Directory (Azure AD) user named Admin1 i

A. Yes

B. No

View answer

Correct Answer: A

Question #54

HOTSPOT (Drag and Drop is not supported)You create a virtual machine scale set named Scale1. Scale1 is configured as shown in the following exhibit.Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.Note: Each correct selection is worth one point.Hot Area:

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #55

HOTSPOT (Drag and Drop is not supported)You have an Azure subscription that contains an Azure Storage account.You plan to copy an on-premises virtual machine image to a container named vmimages.You need to create the container for the planned image.Which command should you run? To answer, select the appropriate options in the answer area.Note: Each correct selection is worth one point.Hot Area:

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #56

HOTSPOT (Drag and Drop is not supported)You purchase a new Azure subscription.You create an Azure Resource Manager (ARM) template named deploy.json as shown in the following exhibit.You connect to the subscription and run the following command.New-AzDeployment –Location westus –TemplateFile “deploy.json”For each of the following statements, select Yes if the statement is true. Otherwise, select No.Note: Each correct selection is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #57

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.Your company has an azure subscription that includes a storage account, a resource group, a blob container and a file share.A colleague named Jon Ross makes use of a solitary Azure Resource Manager (ARM) template to deploy a virtual machine and an additional Azure Storage account.You want to review the ARM template t

A. es

B. o

View answer

Correct Answer: A

Question #58

You have an Azure subscription named Subscription1.You have 5 TB of data that you need to transfer to Subscription1.You plan to use an Azure Import/Export job.What can you use as the destination of the imported data?

A. n Azure Cosmos DB database

B. zure Blob Storage

C. zure SQL Database

D. he Azure File Sync Storage Sync Service

View answer

Correct Answer: B

Question #59

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have an Azure subscription named Subscription1 that contains the resources s

A. es

B. o

View answer

Correct Answer: B

Question #60

HOTSPOT (Drag and Drop is not supported)You have an Azure subscription that is linked to an Azure AD tenant. The tenant contains the custom role-based access control (RBAC) roles shown in the following table.From the Azure portal, you need to create two custom roles named Role3 and Role4. Role3 will be an Azure subscription role. Role4 will be an Azure AD role.Which roles can you clone to create the new roles? To answer, select the appropriate options in the answer area.Note: Each correct selection is worth

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #61

You have an Azure subscription that contains the storage accounts shown in the following table.You plan to manage the data stored in the accounts by using lifecycle management rules. To which storage accounts can you apply lifecycle management rules?

A. torage1 only

B. torage1 and storage2 only

C. torage3 and storage4 only

D. torage1, storage2, and storage3 only

E. torage1, storage2, storage3, and storage4

View answer

Correct Answer: D

Question #62

HOTSPOT (Drag and Drop is not supported)You have an Azure AD user named User1 and a read-access geo-redundant storage (RA-GRS) account named contoso2023.You need to meet the following requirements:-User1 must be able to write blob data to contoso2023.-The contoso2023 account must fail over to its secondary endpoint.Which two settings should you configure? To answer, select the appropriate settings in the answer area.Note: Each correct selection is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #63

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have an Azure Active Directory (Azure AD) tenant named contoso.com.You have

A. es

B. o

View answer

Correct Answer: B

Question #64

You plan to deploy several Azure virtual machines that will run Windows Server 2019 in a virtual machine scale set by using an Azure Resource Manager template.You need to ensure that NGINX is available on all the virtual machines after they are deployed. What should you use?

A. eployment Center in Azure App Service

B. Desired State Configuration (DSC) extension

C. he New-AzConfigurationAssignmentcmdlet

D. Microsoft Intune device configuration profile

View answer

Correct Answer: B

Question #65

You are configuring Azure Active Directory (Azure AD) authentication for an Azure Storage account named storage1.You need to ensure that the members of a group named Group1 can upload files by using the Azure portal. The solution must use the principle of least privilege.Which two roles should you configure for storage1? Each correct answer presents part of the solution.Note: Each correct selection is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: BC

Question #66

You have an Azure virtual machine (VM) that has a single data disk. You have been tasked with attaching this data disk to another Azure VM.You need to make sure that your strategy allows for the virtual machines to be offline for the least amount of time possible.Which of the following is the action you should take FIRST?

A. top the VM that includes the data disk

B. top the VM that the data disk must be attached to

C. etach the data disk

D. elete the VM that includes the data disk

View answer

Correct Answer: A

Question #67

HOTSPOT (Drag and Drop is not supported)You have an Azure App Service app named WebApp1 that contains two folders named Folder1 and Folder2.You need to configure a daily backup of WebApp1. The solution must ensure that Folder2 is excluded from the backup.What should you create first, and what should you use to exclude Folder2? To answer, select the appropriate options in the answer area.Note: Each correct selection is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #68

You have a registered DNS domain named contoso.com.You create a public Azure DNS zone named contoso.com.You need to ensure that records created in the contoso.com zone are resolvable from the internet.What should you do?

A. reate NS records in contoso

B. odify the SOA record in the DNS domain registrar

C. reate the SOA record in contoso

D. odify the NS records in the DNS domain registrar

View answer

Correct Answer: D

Question #69

You have an Azure subscription named Subscription1 that contains an Azure Log Analytics workspace named Workspace1.You need to view the error event from a table named Event. Which query should you run in Workspace1?

A. et-Event Event | where {$_

B. vent | search "error"

C. elect * from Event where EventType == "error"

D. vent | where EventType is "error"

View answer

Correct Answer: B

Question #70

HOTSPOT (Drag and Drop is not supported)You have an Azure subscription that contains an Azure Storage account named storageaccount1.You export storageaccount1 as an Azure Resource Manager template. The template contains the following sections. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one pointHot Area:

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #71

HOTSPOT (Drag and Drop is not supported)You have an Azure subscription that contains a storage account named storage1. The storage1 account contains a container named container1.You create a blob lifecycle rule named rule1.You need to configure rule1 to automatically move blobs that were NOT updated for 45 days from contained to the Cool access tier.How should you complete the rule? To answer, select the appropriate options in the answer area.Note: Each correct selection is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #72

You have an Azure Storage account named storage1.You have an Azure Service app named App1 and an app named App2 that runs in an Azure container instance. Each app uses a managed identity.You need to ensure that App1 and App2 can read blobs from storage1. The solution must meet the following requirements:-Minimize the number of secrets used.-Ensure that App2 can only read from storage1 for the next 30 days.What should you configure in storage1 for each app? To answer, select the appropriate options in the an

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #73

HOTSPOT (Drag and Drop is not supported)You have an Azure subscription that contains a storage account named storage1.You need to configure a shared access signature (SAS) to ensure that users can only download blobs securely by name.Which two settings should you configure? To answer, select the appropriate settings in the answer area.Note: Each correct answer is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #74

You have an Azure subscription that contains a storage account named storage1.You plan to create a blob container named container1.You need to use customer-managed key encryption for container1.Which key should you use?

A. n EC key that uses the P-384 curve only

B. n EC key that uses the P-521 curve only

C. n EC key that uses the P-384 curve or P-521 curve only

D. n RSA key with a key size of 4096 only

E. n RSA key type with a key size of 2048, 3072, or 4096 only

View answer

Correct Answer: E

Question #75

HOTSPOT (Drag and Drop is not supported)You have Azure subscriptions named Subscription1 and Subscription2. Subscription1 has following resource groups:RG1 includes a web app named App1 in the West Europe location.Subscription2 contains the following resource groups:For each of the following statements, select Yes if the statement is true. Otherwise, select No.Note: Each correct selection is worth one point.Hot Area:

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #76

HOTSPOT (Drag and Drop is not supported)You have an Azure AD tenant named contoso.com.You have two external partner organizations named fabrikam.com and litwareinc.com. Fabrikam.com is configured as a connected organization.You create an access package as shown in the Access package exhibit. (Click the Access package tab.)You configure the external user lifecycle settings as shown in the Lifecycle exhibit. (Click the Lifecycle tab.)For each of the following statements, select Yes if the statement is true. O

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #77

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have an Azure subscription that contains the resources shown in the followin

A. es

B. o

View answer

Correct Answer: B

Question #78

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have an Azure subscription that contains the following users in an Azure Act

A. es

B. o

View answer

Correct Answer: B

Question #79

You have an Azure subscription that contains a storage account named storage1. The storage1 account contains a file share named share1.The subscription is linked to a hybrid Azure Active Directory (Azure AD) tenant that contains a security group named Group1.You need to grant Group1 the Storage File Data SMB Share Elevated Contributor role for share1.What should you do first?

A. nable Active Directory Domain Service (AD DS) authentication for storage1

B. rant share-level permissions by using File Explorer

C. ount share1 by using File Explorer

D. reate a private endpoint

View answer

Correct Answer: A

Question #80

HOTSPOT (Drag and Drop is not supported)You have an Azure subscription named Subscription1. Subscription1 contains a virtual machine named VM1. You install and configure a web server and a DNS server on VM1.VM1 has the effective network security rules shown in the following exhibit:Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.Note: Each correct selection is worth one point.Hot Area:

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #81

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have an Azure Active Directory (Azure AD) tenant named contoso.com.You have

A. es

B. o

View answer

Correct Answer: B

Question #82

Your company has an Azure Active Directory (Azure AD) tenant that is configured for hybrid coexistence with the on-premises Active Directory domain.You plan to deploy several new virtual machines (VMs) in Azure. The VMs will have the same operating system and custom software requirements.You configure a reference VM in the on-premise virtual environment. You then generalize the VM to create an image.You need to upload the image to Azure to ensure that it is available for selection when you create the new Az

A. dd-AzVM

B. dd-AzVhd

C. dd-AzImage

D. dd-AzImageDataDisk

View answer

Correct Answer: B

Question #83

HOTSPOT (Drag and Drop is not supported)You have an Azure subscription that contains the storage account shown in the following exhibit.Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.Note: Each correct selection is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #84

You have an Azure subscription that contains a storage account named storage1. The storage1 account contains a container named container1.You need to configure access to container1. The solution must meet the following requirements:•Only allow read access.•Allow both HTTP and HTTPS protocols.•Apply access permissions to all the content in the container.What should you use?

A. n access policy

B. shared access signature (SAS)

C. zure Content Delivery Network (CDN)

D. ccess keys

View answer

Correct Answer: B

Question #85

HOTSPOT (Drag and Drop is not supported)You have an Azure subscription named Subscription1 that contains the resources shown in the following table.In storage1, you create a blob container named blob1 and a file share named share1.Which resources can be backed up to Vault1 and Vault2? To answer, select the appropriate options in the answer area.Note: Each correct selection is worth one point.Hot Area:

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #86

HOTSPOT (Drag and Drop is not supported)You have an Azure subscription named Subscription1 that contains a resource group named RG1. In RG1, you create an internal load balancer named LB1 and a public load balancer named LB2.You need to ensure that an administrator named Admin1 can manage LB1 and LB2. The solution must follow the principle of least privilege.Which role should you assign to Admin1 for each task? To answer, select the appropriate options in the answer area.Note: Each correct selection is wort

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #87

You have a general-purpose v1 Azure Storage account named storage1 that uses locally-redundant storage (LRS).You need to ensure that the data in the storage account is protected if a zone fails. The solution must minimize costs and administrative effort.What should you do first?

A. reate a new storage account

B. onfigure object replication rules

C. pgrade the account to general-purpose v2

D. odify the Replication setting of storage1

View answer

Correct Answer: C

Question #88

You have an Azure subscription named Subscription1.You have 5 TB of data that you need to transfer to Subscription1.You plan to use an Azure Import/Export job.What can you use as the destination of the imported data?

A. virtual machine

B. n Azure Cosmos DB database

C. zure File Storage

D. he Azure File Sync Storage Sync Service

View answer

Correct Answer: C

Question #89

Your company has an Azure subscription.You need to deploy a number of Azure virtual machines (VMs) using Azure Resource Manager (ARM) templates. You have been informed that the VMs will be included in a single availability set.You are required to make sure that the ARM template you configure allows for as many VMs as possible to remain accessible in the event of fabric failure or maintenance.Which of the following is the value that you should configure for the platformFaultDomainCount property?

A. 0

B. 0

C. in Value

D. ax Value

View answer

Correct Answer: D

Question #90

HOTSPOT (Drag and Drop is not supported)You have an Azure subscription that contains a user named User1 and a storage account named storage1. The storage1 account contains the resources shown in the following table. User1 is assigned the following roles for storage1:-Storage Blob Data Reader-Storage Table Data Contributor-Storage File Data SMB Share ContributorFor storage1, you create a shared access signature (SAS) named SAS1 that has the settings shown in the following exhibit. (Click the Exhibit tab.) To

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #91

HOTSPOT (Drag and Drop is not supported)You have an Azure AD tenant.You need to modify the Default user role permissions settings for the tenant. The solution must meet the following requirements:•Standard users must be prevented from creating new service principals.•Standard users must only be able to use PowerShell or Microsoft Graph to manage their own Azure resources.Which two settings should you modify? To answer, select the appropriate settings in the answer area.Note: Each correct answer is worth one

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #92

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have an Azure subscription that contains the resources shown in the followin

A. es

B. o

View answer

Correct Answer: B

Question #93

You have an Azure subscription named Subscription1.You have 5 TB of data that you need to transfer to Subscription1.You plan to use an Azure Import/Export job.What can you use as the destination of the imported data?

A. zure File Storage

B. n Azure Cosmos DB database

C. zure Data Factory

D. zure SQL Database

View answer

Correct Answer: A

Question #94

You plan to back up an Azure virtual machine named VM1.You discover that the Backup Pre-Check status displays a status of Warning.What is a possible cause of the Warning status?

A. M1 is stopped

B. M1 does not have the latest version of the Azure VM Agent (WaAppAgent

C. M1 has an unmanaged disk

D. Recovery Services vault is unavailable

View answer

Correct Answer: B

Question #95

You plan to deploy three Azure virtual machines named VM1, VM2, and VM3. The virtual machines will host a web app named App1.You need to ensure that at least two virtual machines are available if a single Azure datacenter becomes unavailable. What should you deploy?

A. ll three virtual machines in a single Availability Zone

B. ll virtual machines in a single Availability Set

C. ach virtual machine in a separate Availability Zone

D. ach virtual machine in a separate Availability Set

View answer

Correct Answer: C

Question #96

HOTSPOT (Drag and Drop is not supported)You have an Azure AD tenant.You need to create a Microsoft 365 group that contains only members of a marketing department in France.How should you complete the dynamic membership rule? To answer, select the appropriate options in the answer area.Note: Each correct answer is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #97

HOTSPOT (Drag and Drop is not supported)You have the App Service plans shown in the following table.You plan to create the Azure web apps shown in the following table.You need to identify which App Service plans can be used for the web apps.What should you identify? To answer, select the appropriate options in the answer area.Note: Each correct selection is worth one point.Hot Area:

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #98

HOTSPOT (Drag and Drop is not supported)You have a sync group named Sync1 that has a cloud endpoint. The cloud endpoint includes a file named File1.txt.Your on-premises network contains servers that run Windows Server 2016. The servers are configured as shown in the following table.You add Share1 as an endpoint for Sync1. One hour later, you add Share2 as an endpoint for Sync1. For each of the following statements, select Yes if the statement is true. Otherwise, select No.Note: Each correct selection is wor

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #99

You plan to create an Azure Storage account named storage1 that will contain a file share named share1.You need to ensure that share! can support SMB Multichannel. The solution must minimize costs.How should you configure storage1?

A. tandard performance with locally-redundant storage (IRS)

B. remium performance with locally-redundant storage (LRS)

C. tandard performance with zone-redundant storage (ZRS)

.

View answer

Correct Answer: A

Question #100

HOTSPOT (Drag and Drop is not supported)You have an Azure Load Balancer named LB1.You assign a user named User1 the roles shown in the following exhibit.Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.Note: Each correct selection is worth one point.Hot Area:

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #101

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.Your company makes use of Multi-Factor Authentication for when users are not in the office. The Per Authentication option has been configured as the usage model.After the acquisition of a smaller business and the addition of the new staff to Azure Active Directory (Azure AD) obtains a different company and adding the

A. es

B. o

View answer

Correct Answer: B

Question #102

HOTSPOT (Drag and Drop is not supported)You have an Azure Storage account named storage1 that uses Azure Blob storage and Azure File storage.You need to use AzCopy to copy data to the blob storage and file storage in storage1.Which authentication method should you use for each type of storage? To answer, select the appropriate options in the answer area.Note: Each correct selection is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #103

HOTSPOT (Drag and Drop is not supported)You have an Azure subscription that contains the resources shown in the following table.The status of VM1 is Running.You assign an Azure policy as shown in the exhibit. (Click the Exhibit tab.)You assign the policy by using the following parameters:-Microsoft.ClassicNetwork/virtualNetworks-Microsoft.Network/virtualNetworks-Microsoft.Compute/virtualMachinesFor each of the following statements, select Yes if the statement is true. Otherwise, select No.Note: Each correct

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #104

HOTSPOT (Drag and Drop is not supported)You have an Azure Storage account named storage1 that uses Azure Blob storage and Azure File storage. You need to use AzCopy to copy data to the blob storage and file storage in storage1.Which authentication method should you use for each type of storage? To answer, select the appropriate options in the answer area.Note: Each correct selection is worth one point.Hot Area:

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #105

DRAG DROP (Drag and Drop is not supported)You have an Azure subscription that is used by four departments in your company. The subscription contains 10 resource groups. Each department uses resources in several resource groups.You need to send a report to the finance department. The report must detail the costs for each department.Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.Selec

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #106

DRAG DROP (Drag and Drop is not supported)You have an Azure subscription that contains an Azure file share.You have an on-premises server named Server1 that runs Windows Server 2016. You plan to set up Azure File Sync between Server1 and the Azure file share.You need to prepare the subscription for the planned Azure File Sync.Which two actions should you perform in the Azure subscription? To answer, drag the appropriate actions to the correct targets. Each action may be used once, more than once, or not at

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #107

You have an Azure subscription that contains the resources shown in the following table. You need to assign User1 the Storage File Data SMB Share Contributor role for share1.What should you do first?

A. nable identity-based data access for the file shares in storage1

B. odify the security profile for the file shares in storage1

C. elect Default to Azure Active Directory authorization in the Azure portal for storage1

D. onfigure Access control (IAM) for share1

View answer

Correct Answer: D

Question #108

You have an Azure subscription that contains a storage account named storage1.You plan to use conditions when assigning role-based access control (RBAC) roles to storage1.Which storage1 services support conditions when assigning roles?

A. ontainers only

B. ile shares only

C. ables only

D. ueues only

E. ontainers and queues only

View answer

Correct Answer: E

Question #109

HOTSPOT (Drag and Drop is not supported)You have an Azure subscription that contains a virtual network named VNET1 in the East US 2 region. You have the following resources in an Azure Resource Manager template.For each of the following statements, select Yes if the statement is true. Otherwise, select No.Note: Each correct selection is worth one point.Hot Area:

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #110

You have an Azure policy as shown in the following exhibit.What is the effect of the policy?

A. ou are prevented from creating Azure SQL servers anywhere in Subscnption1

B. ou can create Azure SQL servers in ContosoRG1 only

C. ou can create Azure SQL servers in any resource group within Subscnption1

D. ou are prevented from creating Azure SQL Servers in ContosoRG1 only

View answer

Correct Answer: B

DON'T WANT TO MISS A THING?

100% Pass Cisco, PMP, CISA, CISM, AWS Practice test on SALE!
Get Now

Ace the Microsoft AZ-104 Exam with Up-to-Date Exam Questions

View Answers after Submission

DON'T WANT TO MISS A THING?

100% Pass Cisco, PMP, CISA, CISM, AWS Practice test on SALE! Get Now

Ace the Microsoft AZ-104 Exam with Up-to-Date Exam Questions

View Answers after Submission

100% Pass Cisco, PMP, CISA, CISM, AWS Practice test on SALE!
Get Now