Boost Your Performance in the Microsoft Exam with AZ-104 Practice Tests

Question #1

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.Your company has an Azure Active Directory (Azure AD) tenant named weyland.com that is configured for hybrid coexistence with the on-premises ActiveDirectory domain.You have a server named DirSync1 that is configured as a DirSync server.You create a new user account in the on-premise Active Directory. You now need to

A. es

B. o

View answer

Correct Answer: B

Question #2

Your company has an Azure Active Directory (Azure AD) subscription.You need to deploy five virtual machines (VMs) to your company’s virtual network subnet.The VMs will each have both a public and private IP address. Inbound and outbound security rules for all of these virtual machines must be identical.Which of the following is the least amount of security groups needed for this configuration?

A.

B.

C.

D.

View answer

Correct Answer: D

Question #3

HOTSPOT (Drag and Drop is not supported)You have an Azure subscription that contains the hierarchy shown in the following exhibit.You create an Azure Policy definition named Policy1.To which Azure resources can you assign Policy1 and which Azure resources can you specify as exclusions from Policy1? To answer, select the appropriate options in the answer area.Note: Each correct selection is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #4

You have an Azure Active Directory (Azure AD) tenant that contains 5,000 user accounts. You create a new user account named AdminUser1.You need to assign the User administrator administrative role to AdminUser1. What should you do from the user account properties?

A. rom the Licenses blade, assign a new license

B. rom the Directory role blade, modify the directory role

C. rom the Groups blade, invite the user account to a new group

View answer

Correct Answer: B

Question #5

You have an Azure DNS zone named adatum.com.You need to delegate a subdomain named research.adatum.com to a different DNS server in Azure. What should you do?

A. reate an NS record named research in the adatum

B. reate an PTR record named research in the adatum

C. odify the SOA record of adatum

D. reate an A record named *

View answer

Correct Answer: A

Question #6

You have an Azure subscription that contains a virtual machine named VM1. VM1 hosts a line-of-business application that is available 24 hours a day. VM1 has one network interface and one managed disk. VM1 uses the D4s v3 size.You plan to make the following changes to VM1:-Change the size to D8s v3.-Add a 500-GB managed disk.-Add the Puppet Agent extension.-Enable Desired State Configuration Management.Which change will cause downtime for VM1?

A. nable Desired State Configuration Management

B. dd a 500-GB managed disk

C. hange the size to D8s v3

D. dd the Puppet Agent extension

View answer

Correct Answer: C

Question #7

Your company’s Azure subscription includes Azure virtual machines (VMs) that run Windows Server 2016. One of the VMs is backed up every day using Azure Backup Instant Restore.When the VM becomes infected with data encrypting ransomware, you decide to recover the VM’s files. Which of the following is TRUE in this scenario?

A. ou can only recover the files to the infected VM

B. ou can recover the files to any VM within the company’s subscription

C. ou can only recover the files to a new VM

D. ou will not be able to recover the files

View answer

Correct Answer: A

Question #8

Your company has several departments. Each department has a number of virtual machines (VMs). The company has an Azure subscription that contains a resource group named RG1.All VMs are located in RG1.You want to associate each VM with its respective department. What should you do?

A. reate Azure Management Groups for each depsartment

B. reate a resource group for each department

C. ssign tags to the virtual machines

D. odify the settings of the virtual machines

View answer

Correct Answer: C

Question #9

You have an Azure subscription that contains the resources shown in the following table.All virtual machines run Windows Server 2016.On VM1, you back up a folder named Folder1 as shown in the following exhibit.You plan to restore the backup to a different virtual machine. You need to restore the backup to VM2.What should you do first?

A. rom VM1, install the Windows Server Backup feature

B. rom VM2, install the Microsoft Azure Recovery Services Agent

C. rom VM1, install the Microsoft Azure Recovery Services Agent

D. rom VM2, install the Windows Server Backup feature

View answer

Correct Answer: B

Question #10

HOTSPOT (Drag and Drop is not supported)You have an Azure subscription named Sub1 that contains the blob containers shown in the following table.Sub1 contains two users named User1 and User2. Both users are assigned the Reader role at the Sub1 scope.You have a condition named Condition1 as shown in the following exhibit.You have a condition named Condition2 as shown in the following exhibit.You assign roles to User1 and User2 as shown in the following table.For each of the following statements, select Yes i

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #11

You have an Azure Active Directory (Azure AD) tenant.You plan to delete multiple users by using Bulk delete in the Azure Active Directory admin center. You need to create and upload a file for the bulk delete.Which user attributes should you include in the file?

A. he user principal name and usage location of each user only

B. he user principal name of each user only

C. he display name of each user only

D. he display name and usage location of each user only

E. he display name and user principal name of each user only

View answer

Correct Answer: B

Question #12

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.Your company’s Azure subscription includes two Azure networks named VirtualNetworkA and VirtualNetworkB.VirtualNetworkA includes a VPN gateway that is configured to make use of static routing. Also, a site-to-site VPN connection exists between your company’s on-premises network and VirtualNetworkA.You have configured

A. es

B. o

View answer

Correct Answer: A

Question #13

You create an Azure Storage account.You plan to add 10 blob containers to the storage account.For one of the containers, you need to use a different key to encrypt data at rest.What should you do before you create the container?

A. enerate a shared access signature (SAS)

B. odify the minimum TLS version

C. otate the access keys

D. reate an encryption scope

View answer

Correct Answer: D

Question #14

HOTSPOT (Drag and Drop is not supported)You plan to create an Azure Storage account in the Azure region of East US 2. You need to create a storage account that meets the following requirements:-Replicates synchronously.-Remains available if a single data center in the region fails.How should you configure the storage account? To answer, select the appropriate options in the answer area.Note: Each correct selection is worth one point.Hot Area:

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #15

You have a deployment template named Template1 that is used to deploy 10 Azure web apps.You need to identify what to deploy before you deploy Template1. The solution must minimize Azure costs. What should you identify?

A. ive Azure Application Gateways

B. ne App Service plan

C. 0 App Service plans

D. ne Azure Traffic Manager

E. ne Azure Application Gateway

View answer

Correct Answer: B

Question #16

HOTSPOT (Drag and Drop is not supported)You have an Azure subscription.You plan to deploy a storage account named storage1 by using the following Azure Resource Manager (ARM) template.For each of the following statements, select Yes if the statement is hue. Otherwise, select No.Note: Each correct selection is worth one point

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #17

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have an Azure subscription that contains the resources shown in the followin

A. es

B. o

View answer

Correct Answer: B

Question #18

HOTSPOT (Drag and Drop is not supported)You have an Azure subscription that contains a virtual machine named VM1.To VM1, you plan to add a 1-TB data disk that meets the following requirements:•Provides data resiliency in the event of a datacenter outage.•Provides the lowest latency and the highest performance.•Ensures that no data loss occurs if a host fails.You need to recommend which type of storage and host caching to configure for the new data disk.

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #19

You have an Azure subscription named AZPT1 that contains the resources shown in the following table:You create a new Azure subscription named AZPT2.You need to identify which resources can be moved to AZPT2. Which resources should you identify?

A. M1, storage1, VNET1, and VM1Managed only

B. M1 and VM1Managed only

C. M1, storage1, VNET1, VM1Managed, and RVAULT1

D. VAULT1 only

View answer

Correct Answer: C

Question #20

You have an Azure subscription named Subscription1 that contains a virtual network named VNet1. VNet1 is in a resource group named RG1.Subscription1 has a user named User1. User1 has the following roles:-Reader-Security Admin-Security ReaderYou need to ensure that User1 can assign the Reader role for VNet1 to other users.What should you do?

A. emove User1 from the Security Reader role for Subscription1

B. ssign User1 the Owner role for VNet1

C. emove User1 from the Security Reader and Reader roles for Subscription1

D. ssign User1 the Contributor role for VNet1

View answer

Correct Answer: B

Question #21

You have an Azure subscription named Subscription1.You have 5 TB of data that you need to transfer to Subscription1. You plan to use an Azure Import/Export job.What can you use as the destination of the imported data?

A. n Azure Cosmos DB database

B. zure Blob storage

C. zure Data Lake Store

D. he Azure File Sync Storage Sync Service

View answer

Correct Answer: B

Question #22

You have an Azure subscription.Users access the resources in the subscription from either home or from customer sites. From home, users must establish a point-to-site VPN to access the Azure resources. The users on the customer sites access the Azure resources by using site-to-site VPNs.You have a line-of-business-app named App1 that runs on several Azure virtual machine. The virtual machines run Windows Server 2016.You need to ensure that the connections to App1 are spread across all the virtual machines.W

A. onitor

B. dvisor

C. etrics

D. ustomer insights

View answer

Correct Answer: AE

Question #23

You plan to create the Azure web apps shown in the following table.What is the minimum number of App Service plans you should create for the web apps?

A.

B.

C.

D.

View answer

Correct Answer: A

Question #24

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.Your company has an Azure Active Directory (Azure AD) subscription.You want to implement an Azure AD conditional access policy.The policy must be configured to require members of the Global Administrators group to use Multi-Factor Authentication and an Azure AD-joined device when they connect to Azure AD from untrust

A. es

B. o

View answer

Correct Answer: B

Question #25

HOTSPOT (Drag and Drop is not supported)You have an Azure subscription.You plan to use Azure Resource Manager templates to deploy 50 Azure virtual machines that will be part of the same availability set.You need to ensure that as many virtual machines as possible are available if the fabric fails or during servicing.How should you configure the template? To answer, select the appropriate options in the answer area.Note: Each correct selection is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #26

HOTSPOT (Drag and Drop is not supported)You have an Azure Storage account named storage1 that contains a blob container. The blob container has a default access tier of Hot. Storage1 contains a container named conainer1.You create lifecycle management rules in storage1 as shown in the following table.You perform the actions shown in the following table.For each of the following statements, select Yes if the statement is true. Otherwise, select No.Note: Each correct selection is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #27

HOTSPOT (Drag and Drop is not supported)You have an Azure subscription that contains a resource group named RG1.You plan to use an Azure Resource Manager (ARM) template named template1 to deploy resources. The solution must meet the following requirements:-Deploy new resources to RG1.-Remove all the existing resources from RG1 before deploying the new resources.How should you complete the command? To answer, select the appropriate options in the answer area.Note: Each correct selection is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #28

You have an Azure Storage account named storage1.For storage1, you create an encryption scope named Scope1.Which storage types can you encrypt by using Scope?

A. ile shares only

B. ontainers only

C. ile shares and containers only

D. ontainers and tables only

E. ile shares, containers, and tables only

View answer

Correct Answer: B

Question #29

You need to meet the user requirement for Admin1. What should you do?

A. rom the Azure Active Directory blade, modify the Groups

B. rom the Azure Active Directory blade, modify the Properties

C. rom the Subscriptions blade, select the subscription, and then modify the Access control (IAM) settings

D. rom the Subscriptions blade, select the subscription, and then modify the Properties

View answer

Correct Answer: D

Question #30

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.Your company has an Azure Active Directory (Azure AD) subscription. You want to implement an Azure AD conditional access policy.The policy must be configured to require members of the Global Administrators group to use Multi-Factor Authentication and an Azure AD-joined device when they connect to Azure AD from untrus

A. es

B. o

View answer

Correct Answer: B

Question #31

You create an App Service plan named Plan1 and an Azure web app named webapp1. You discover that the option to create a staging slot is unavailable.You need to create a staging slot for Plan1. What should you do first?

A. rom Plan1, scale up the App Service plan

B. rom webapp1, modify the Application settings

C. rom webapp1, add a custom domain

D. rom Plan1, scale out the App Service plan

View answer

Correct Answer: A

Question #32

You have an Azure subscription named Subscription1 that contains virtual network named VNet1. VNet1 is in a resource group named RG1.A user named User1 has the following roles for Subscription1:•Reader•Security Admin•Security ReaderYou need to ensure that User1 can assign the Reader role for VNet1 to other users.What should you do?

A. ssign User1 the Contributor role for VNet1

B. ssign User1 the Network Contributor role for VNet1

C. ssign User1 the User Access Administrator role for VNet1

D. emove User1 from the Security Reader and Reader roles for Subscription1

View answer

Correct Answer: C

Question #33

HOTSPOT (Drag and Drop is not supported)You have an Azure subscription.You plan to deploy a new storage account.You need to configure encryption for the account. The solution must meet the following requirements:•Use a customer-managed key stored in a key vault.•Use the maximum supported bit length.Which type of key and which bit length should you use? To answer, select the appropriate options in the answer area.Note: Each correct selection is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #34

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You need to ensure that an Azure Active Directory (Azure AD) user named Admin1 i

A. es

B. o

View answer

Correct Answer: B

Question #35

You have an Azure subscription named Subscription1 that contains an Azure virtual machine named VM1. VM1 is in a resource group named RG1.VM1 runs services that will be used to deploy resources to RG1.You need to ensure that a service running on VM1 can manage the resources in RG1 by using the identity of VM1.What should you do first?

A. rom the Azure portal, modify the Managed Identity settings of VM1

B. rom the Azure portal, modify the Access control (IAM) settings of RG1

C. rom the Azure portal, modify the Access control (IAM) settings of VM1

D. rom the Azure portal, modify the Policies settings of RG1

View answer

Correct Answer: A

Question #36

HOTSPOT (Drag and Drop is not supported) You have an Azure subscription named Subscription1 that contains a virtual network VNet1.You add the users in the following table.Which user can perform each configuration? To answer, select the appropriate options in the answer area.Note: Each correct selection is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #37

You have an Azure subscription that contains a virtual machine named VM1 and an Azure key vault named KV1.You need to configure encryption for VM1. The solution must meet the following requirements:•Store and use the encryption key in KV1.•Maintain encryption if VM1 is downloaded from Azure.•Encrypt both the operating system disk and the data disks.Which encryption method should you use?

A. ustomer-managed keys

B. onfidential disk encryption

C. zure Disk Encryption

D. ncryption at host

View answer

Correct Answer: C

Question #38

HOTSPOT (Drag and Drop is not supported)You have an Azure subscription that contains an Azure Kubernetes Service (AKS) cluster named Cluster1. Cluster1 hosts a node pool named Pool1 that has four nodes.You need to perform a coordinated upgrade of Cluster1. The solution must meet the following requirements:-Deploy two new nodes to perform the upgrade.-Minimize costs.How should you complete the command? To answer, select the appropriate options in the answer area.Note: Each correct selection is worth one poin

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #39

You have an Azure subscription named Subscription1 that contains a virtual network named VNet1. VNet1 is in a resource group named RG1.Subscription1 has a user named User1. User1 has the following roles:-Reader-Security Admin-Security ReaderYou need to ensure that User1 can assign the Reader role for VNet1 to other users. What should you do?

A. emove User 1 from the Security Reader role for Subscription1

B. ssign User1 the User Access Administrator role for VNet1

C. ssign User1 the Network Contributor role for VNet1

D. ssign User1 the Network Contributor role for RG1

View answer

Correct Answer: B

Question #40

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have an Azure Directory (Azure AD) tenant named Adatum and an Azure Subscrip

A. es

B. o

View answer

Correct Answer: B

Question #41

HOTSPOT (Drag and Drop is not supported)You plan to deploy an Azure container instance by using the following Azure Resource Manager template.based on the information presented in the template.Hot Area:

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #42

You recently created a new Azure subscription that contains a user named Admin1.Admin1 attempts to deploy an Azure Marketplace resource by using an Azure Resource Manager template. Admin1 deploys the template by using Azure PowerShell and receives the following error message: “User failed validation to purchase resources. Error message: “Legal terms have not been accepted for this item on this subscription. To accept legal terms, please go to the Azure portal (http://go.microsoft.com/fwlink/?LinkId=534873)

A. rom Azure PowerShell, run the Set-AzApiManagementSubscriptioncmdlet

B. rom the Azure portal, register the Microsoft

C. rom Azure PowerShell, run the Set-AzMarketplaceTermscmdlet

D. rom the Azure portal, assign the Billing administrator role to Admin1

View answer

Correct Answer: C

Question #43

You are planning to deploy an Ubuntu Server virtual machine to your company's Azure subscription.You are required to implement a custom deployment that includes adding a particular trusted root certification authority (CA).Which of the following should you use to create the virtual machine?

A. he New-AzureRmVm cmdlet

B. he New-AzVM cmdlet

C. he Create-AzVM cmdlet

D. he az vm create command

View answer

Correct Answer: C

Question #44

You plan to deploy several Azure virtual machines that will run Windows Server 2019 in a virtual machine scale set by using an Azure Resource Manager template.You need to ensure that NGINX is available on all the virtual machines after they are deployed.What should you use?

A. he Publish-AzVMDscConfiguration cmdlet

B. zure Application Insights

C. zure Custom Script Extension

D. Microsoft Endpoint Manager device configuration profile

View answer

Correct Answer: C

Question #45

You have an Azure subscription that contains the resources shown in the following table.You need to assign Workspace1 a role to allow read, write, and delete operations for the data stored in the containers of storage1.Which role should you assign?

A. torage Account Contributor

B. ontributor

C. torage Blob Data Contributor

D. eader and Data Access

View answer

Correct Answer: C

Question #46

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have an Azure virtual machine named VM1 that runs Windows Server 2016.You ne

A. es

B. o

View answer

Correct Answer: A

Question #47

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.Your company has an Azure Active Directory (Azure AD) tenant named weyland.com that is configured for hybrid coexistence with the on-premises Active Directory domain.You have a server named DirSync1 that is configured as a DirSync server.You create a new user account in the on-premise Active Directory. You now need t

A. es

B. o

View answer

Correct Answer: B

Question #48

HOTSPOT (Drag and Drop is not supported)You have an Azure subscription. The subscription contains a storage account named storage1 that has the lifecycle management rules shown in the following table. On June 1, you store two blobs in storage1 as shown in the following table. For each of the following statements, select Yes if the statement is true. Otherwise, select No.Note: Each correct selection is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #49

You have an app named App1 that runs on two Azure virtual machines named VM1 and VM2.You plan to implement an Azure Availability Set for App1. The solution must ensure that App1 is available during planned maintenance of the hardware hosting VM1 and VM2.What should you include in the Availability Set?

A. ne update domain

B. wo fault domains

C. ne fault domain

D. wo update domains

View answer

Correct Answer: D

Question #50

You are planning to deploy an Ubuntu Server virtual machine to your company’s Azure subscription.You are required to implement a custom deployment that includes adding a particular trusted root certification authority (CA).Which of the following should you use to create the virtual machine?

A. he New-AzureRmVmcmdlet

B. he New-AzVMcmdlet

C. he Create-AzVMcmdlet

D. he azvm create command

View answer

Correct Answer: C

Question #51

You have an Azure subscription that contains the resources in the following table.Store1 contains a file share named data. Data contains 5,000 files.You need to synchronize the files in the file share named data to an on-premises server named Server1. Which three actions should you perform? Each correct answer presents part of the solution.Note: Each correct selection is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: BCE

Question #52

You have an Azure virtual machine named VM1 that runs Windows Server 2019. The VM was deployed using default drive settings.You sign in to VM1 as a user named User1 and perform the following actions:-Create files on drive C.-Create files on drive D.-Modify the screen saver timeout.-Change the desktop background.You plan to redeploy VM1.Which changes will be lost after you redeploy VM1?

A. he modified screen saver timeout

B. he new desktop background

C. he new files on drive D

D. he new files on drive C

View answer

Correct Answer: C

Question #53

HOTSPOT (Drag and Drop is not supported)You have an Azure subscription named Sub1 that contains the Azure resources shown in the following table.You assign an Azure policy that has the following settings:Scope: Sub1Exclusions: Sub1/RG1/VNET1Policy definition: Append a tag and its value to resourcesPolicy enforcement: EnabledTag name: Tag4Tag value: value4You assign tags to the resources as shown in the following table. For each of the following statements, select Yes if the statement is true. Otherwise, sel

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #54

Note. This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, those questions will not appear in the review screen.You have a Microsoft Entra tenant named contoso.com.You have a CSV file that con

A. es

B. o

.

View answer

Correct Answer: B

Question #55

You have an Azure subscription named Subscription1 that contains the resources shown in the following table.You create virtual machines in Subscription1 as shown in the following table.You plan to use Vault1 for the backup of as many virtual machines as possible. Which virtual machines can be backed up to Vault1?

A. M1 only

B. M3 and VMC only

C. M1, VM2, VM3, VMA, VMB, and VMC

D. M1, VM3, VMA, and VMC only

E. M1 and VM3 only

View answer

Correct Answer: D

Question #56

HOTSPOT (Drag and Drop is not supported)You are creating an Azure Kubernetes Services (AKS) cluster as shown in the following exhibit.Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.Note: Each correct selection is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #57

You have an Azure subscription that contains the storage accounts shown in the following table.You need to identify which storage account can be converted to zone-redundant storage (ZRS) replication by requesting a live migration from Azure support.What should you identify?

A. torage1

B. torage2

C. torage3

D. torage4

View answer

Correct Answer: B

Question #58

You have an Azure subscription that contains an Azure Active Directory (Azure AD) tenant named contoso.com and an Azure Kubernetes Service (AKS) cluster named AKS1.An administrator reports that she is unable to grant access to AKS1 to the users in contoso.com. You need to ensure that access to AKS1 can be granted to the contoso.com users.What should you do first?

A. rom contoso

B. rom contoso

C. ecreate AKS1

D. rom AKS1, create a namespace

View answer

Correct Answer: B

Question #59

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have an Azure Active Directory (Azure AD) tenant named contoso.com.You have

A. es

B. o

View answer

Correct Answer: B

Question #60

You have an Azure subscription named Subscription1 and an on-premises deployment of Microsoft System Center Service Manager.Subscription1 contains a virtual machine named VM1.You need to ensure that an alert is set in Service Manager when the amount of available memory on VM1 is below 10 percent.What should you do first?

A. reate an automation runbook

B. eploy a function app

C. eploy the IT Service Management Connector (ITSM)

D. reate a notification

View answer

Correct Answer: C

Question #61

You need to move the blueprint files to Azure.What should you do?

A. enerate an access key

B. se Azure Storage Explorer to copy the files

C. se the Azure Import/Export service

D. enerate a shared access signature (SAS)

View answer

Correct Answer: B

Question #62

HOTSPOT (Drag and Drop is not supported)You have an Azure subscription that contains a storage account named storage1. The subscription is linked to an Azure Active Directory (Azure AD) tenant named contoso.com that syncs to an on-premises Active Directory domain.The domain contains the security principals shown in the following table.In Azure AD, you create a user named User2.The storage1 account contains a file share named share1 and has the following configurations.For each of the following statements, s

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #63

You have an Azure subscription. The subscription contains a storage account named storage1 that has the lifecycle management rules shown in the following table. On June 1, you store a blob named File1 in the Hot access tier of storage1.What is the state of File1 on June 7?

A. tored in the Cool access tier

B. tored in the Archive access tier

C. tored in the Hot access tier

D. eleted

View answer

Correct Answer: D

Question #64

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.Your company has an Azure Active Directory (Azure AD) subscription.You want to implement an Azure AD conditional access policy.The policy must be configured to require members of the Global Administrators group to use Multi-Factor Authentication and an Azure AD-joined device when they connect to Azure AD from untrust

A. es

B. o

View answer

Correct Answer: B

Question #65

HOTSPOT (Drag and Drop is not supported)You have an Azure subscription named Subscription1.In Subscription1, you create an alert rule named Alert1.The Alert1 action group is configured as shown in the following exhibit.Alert1 alert criteria triggered every minute.Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.Note: Each correct selection is worth one point.Hot Area:

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #66

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.Your company has an azure subscription that includes a storage account, a resource group, a blob container and a file share.A colleague named Jon Ross makes use of a solitary Azure Resource Manager (ARM) template to deploy a virtual machine and an additional Azure Storage account.You want to review the ARM template t

A. es

B. o

View answer

Correct Answer: B

Question #67

You have an Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com that contains 100 user accounts.You purchase 10 Azure AD Premium P2 licenses for the tenant.You need to ensure that 10 users can use all the Azure AD Premium features. What should you do?

A. rom the Licenses blade of Azure AD, assign a license

B. rom the Groups blade of each user, invite the users to a group

C. rom the Azure AD domain, add an enterprise application

D. rom the Directory role blade of each user, modify the directory role

View answer

Correct Answer: A

Question #68

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.Your company makes use of Multi-Factor Authentication for when users are not in the office. The Per Authentication option has been configured as the usage model.After the acquisition of a smaller business and the addition of the new staff to Azure Active Directory (Azure AD) obtains a different company and adding the

A. es

B. o

View answer

Correct Answer: B

Question #69

DRAG DROP (Drag and Drop is not supported)You have an on-premises file server named Server1 that runs Windows Server 2016. You have an Azure subscription that contains an Azure file share.You deploy an Azure File Sync Storage Sync Service, and you create a sync group. You need to synchronize files from Server1 to Azure.Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.Select and Place:

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #70

You have an Azure Subscription that contains a storage account named storageacct1234 and two users named User1 and User2.You assign User1 the roles shown in the following exhibit.Which two actions can User1 perform? Each correct answer presents a complete solution.Note: Each correct selection is worth one point.

A. elect * from Event where EventType == "error"

B. vent | search "error"

C. vent | where EventType is "error"

D. et-Event Event | where {$_

View answer

Correct Answer: BD

Question #71

You have an Azure subscription named Subscription1 that contains an Azure Log Analytics workspace named Workspace1.You need to view the error events from a table named Event.Which query should you run in Workspace1?

A. Get-Event Event | where {$_

B. search in (Event) "error"

C. select * from Event where EventType == "error"

D. search in (Event) * | where EventType -eq "error"

View answer

Correct Answer: B

Question #72

HOTSPOT (Drag and Drop is not supported)You have an Azure subscription named Subscription1 that contains the following resource group:-Name: RG1-Region: West US-Tag: “tag1”: “value1”You assign an Azure policy named Policy1 to Subscription1 by using the following configurations:-Exclusions: None-Policy definition: Append a tag and its value to resources-Assignment name: Policy1-Parameters:-Tag name: Tag2-Tag value: Value2After Policy1 is assigned, you create a storage account that has the following configura

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #73

You have an Azure subscription named Subscription1.You have 5 TB of data that you need to transfer to Subscription1.You plan to use an Azure Import/Export job.What can you use as the destination of the imported data?

A. n Azure Cosmos DB database

B. zure Data Lake Store

C. zure Blob storage

D. zure Data Factory

View answer

Correct Answer: C

Question #74

HOTSPOT (Drag and Drop is not supported)You have an Azure App Service web app named app1.You configure autoscaling as shown in following exhibit.You configure the autoscale rule criteria as shown in the following exhibit.Use the drop-down menus to select the answer choice that answers each question based on the information presented in the graphic.Note: Each correct selection is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #75

You create an Azure Storage account named contosostorage.You plan to create a file share named data.Users need to map a drive to the data file share from home computers that run Windows 10.Which outbound port should you open between the home computers and the data file share?

A. 0

B. 43

C. 45

D. 389

View answer

Correct Answer: C

Question #76

You plan to use the Azure Import/Export service to copy files to a storage account.Which two files should you create before you prepare the drives for the import job? Each correct answer presents part of the solution.Note: Each correct selection is worth one point.

A. rom the Recovery Service vault, delete the backup data

B. odify the disaster recovery properties of each virtual machine

C. odify the locks of each virtual machine

D. rom the Recovery Service vault, stop the backup of each backup item

View answer

Correct Answer: BE

Question #77

HOTSPOT (Drag and Drop is not supported)You have an Azure subscription that contains a user named User1 and the resources shown in the following table.NSG1 is associated to networkinterface1.User1 has role assignments for NSG1 as shown in the following table.For each of the following statements, select Yes if the statement is true. Otherwise, select No.Note: Each correct selection is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #78

You have an Azure subscription linked to an Azure Active Directory tenant. The tenant includes a user account named User1.You need to ensure that User1 can assign a policy to the tenant root management group.What should you do?

A. Assign the Owner role for the Azure Subscription to User1, and then modify the default conditional access policies

B. Assign the Owner role for the Azure subscription to User1, and then instruct User1 to configure access management for Azure resources

C. Assign the Global administrator role to User1, and then instruct User1 to configure access management for Azure resources

D. Create a new management group and delegate User1 as the owner of the new management group

View answer

Correct Answer: B

Question #79

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have an Azure subscription that contains the following users in an Azure Act

A. es

B. o

View answer

Correct Answer: B

Question #80

You have an Azure subscription.Users access the resources in the subscription from either home or from customer sites. From home, users must establish a point-to-site VPN to access the Azure resources. The users on the customer sites access the Azure resources by using site-to-site VPNs.You have a line-of-business-app named App1 that runs on several Azure virtual machine. The virtual machines run Windows Server 2016.You need to ensure that the connections to App1 are spread across all the virtual machines.W

A. an internal load balancer

B. a public load balancer

C. an Azure Content Delivery Network (CDN)

D. Traffic Manager

E. an Azure Application Gateway

View answer

Correct Answer: AE

Question #81

You have an Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com. The User administrator role is assigned to a user named Admin1.An external partner has a Microsoft account that uses the user1@outlook.com sign in.Admin1 attempts to invite the external partner to sign in to the Azure AD tenant and receives the following error message: “Unable to invite user user1@outlook.com – Generic authorization exception.”You need to ensure that Admin1 can invite the external partner to sign in to the A

A. rom the Users blade, modify the External collaboration settings

B. rom the Custom domain names blade, add a custom domain

C. rom the Organizational relationships blade, add an identity provider

D. rom the Roles and administrators blade, assign the Security administrator role to Admin1

View answer

Correct Answer: A

Question #82

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have an Azure virtual machine named VM1. VM1 was deployed by using a custom

A. es

B. o

View answer

Correct Answer: B

Question #83

You administer a solution in Azure that is currently having performance issues.You need to find the cause of the performance issues pertaining to metrics on the Azure infrastructure. Which of the following is the tool you should use?

A. zure Traffic Analytics

B. zure Monitor

C. zure Activity Log

D. zure Advisor

View answer

Correct Answer: B

Question #84

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You need to ensure that an Azure Active Directory (Azure AD) user named Admin1 i

A. es

B. o

View answer

Correct Answer: A

Question #85

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have an Azure virtual machine named VM1 that runs Windows Server 2016.You ne

A. es

B. o

View answer

Correct Answer: B

Question #86

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.Your company has an Azure Active Directory (Azure AD) subscription.You want to implement an Azure AD conditional access policy.The policy must be configured to require members of the Global Administrators group to use Multi-Factor Authentication and an Azure AD-joined device when they connect to Azure AD from untrust

A. es

B. o

View answer

Correct Answer: A

Question #87

You have web apps in the West US, Central US and East US Azure regions. You have the App Service plans shown in the following table. You plan to create an additional App Service plan named ASP5 that will use the Linux operating system. You need to identify in which of the currently used locations you can deploy ASP5.What should you recommend?

A. est US, Central US, or East US

B. entral US only

C. ast US only

D. est US only

View answer

Correct Answer: A

Question #88

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have an Azure subscription that contains the resources shown in the followin

A. es

B. o

View answer

Correct Answer: A

Question #89

You plan to create an Azure Storage account named storage1 that will contain a file share named share1.You need to ensure that share1 can support SMB Multichannel. The solution must minimize costs.How should you configure storage?

A. remium performance with locally-redundant storage (LRS)

B. tandard performance with zone-redundant storage (ZRS)

C. remium performance with geo-redundant storage (GRS)

D. tandard performance with locally-redundant storage (LRS)

View answer

Correct Answer: A

Question #90

HOTSPOT (Drag and Drop is not supported)You have an Azure subscription.You need to use an Azure Resource Manager (ARM) template to create a virtual machine that will have multiple data disks.How should you complete the template? To answer, select the appropriate options in the answer area.Note: Each correct selection is worth one point.Hot Area:

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #91

You plan to deploy several Azure virtual machines that will run Windows Server 2019 in a virtual machine scale set by using an Azure Resource Manager template.You need to ensure that NGINX is available on all the virtual machines after they are deployed.What should you use?

A. he Publish-AzVMDscConfiguration cmdlet

B. zure Application Insights

C. Desired State Configuration (DSC) extension

D. zure AD Application Proxy

View answer

Correct Answer: C

Question #92

You deploy an Azure Kubernetes Service (AKS) cluster named Cluster1 that uses the IP addresses shown in the following table.You need to provide internet users with access to the applications that run in Cluster1. Which IP address should you include in the DNS record for Cluster1?

A. 31

B. 0

C. 72

D. 92

View answer

Correct Answer: A

Question #93

You have an Azure subscription that contains a storage account named storage1.You have the devices shown in the following table.From which devices can you use AzCopy to copy data to storage1?

A. evice 1 only

B. evice1, Device2 and Device3

C. evice1 and Device2 only

D. evice1 and Device3 only

View answer

Correct Answer: B

Question #94

You have two Azure virtual machines named VM1 and VM2. You have two Recovery Services vaults named RSV1 and RSV2.VM2 is backed up to RSV1.You need to back up VM2 to RSV2.What should you do first?

A. rom the RSV1 blade, click Backup items and stop the VM2 backup

B. rom the RSV2 blade, click Backup

C. rom the VM2 blade, click Disaster recovery, click Replication settings, and then select RSV2 as the Recovery Services vault

D. rom the RSV1 blade, click Backup Jobs and export the VM2 job

View answer

Correct Answer: C

Question #95

You have an Azure subscription named Subscription1 that contains an Azure Log Analytics workspace named Workspace1.You need to view the error events from a table named Event.Which query should you run in Workspace1?

A. ssign the Owner role to the developers

B. onfigure app-level credentials for FTPS

C. ssign the Website Contributor role to the developers

D. onfigure user-level credentials for FTPS

View answer

Correct Answer: B

Question #96

HOTSPOT (Drag and Drop is not supported)You have an Azure subscription.You deploy a virtual machine scale set that is configured as shown in the following exhibit. Use the drop-down menus to select the answer choice that answers each question based on the information presented in the graphicNote: Each correct selection is worth one point.Hot Area:

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #97

DRAG DROP (Drag and Drop is not supported)You have an Azure subscription that contains the storage accounts shown in the following table.You plan to use AzCopy to copy a blob from container1 directly to share1.You need to identify which authentication method to use when you use AzCopy.What should you identify for each account? To answer, drag the appropriate authentication methods to the correct accounts. Each method may be used once, more than once, or not at all. You may need to drag the split bar between

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #98

You have 15 Azure subscriptions.You have an Azure Active Directory (Azure AD) tenant that contains a security group named Group1.You plan to purchase additional Azure subscription.You need to ensure that Group1 can manage role assignments for the existing subscriptions and the planned subscriptions. The solution must meet the following requirements:-Use the principle of least privilege.-Minimize administrative effort.What should you do?

A. ssign Group1 the Owner role for the root management group

B. ssign Group1 the User Access Administrator role for the root management group

C. reate a new management group and assign Group1 the User Access Administrator role for the group

D. reate a new management group and assign Group1 the Owner role for the group

View answer

Correct Answer: B

Question #99

You have an Azure Storage account that contains 5,000 blobs accessed by multiple users.You need to ensure that the users can view only specific blobs based on blob index tags.What should you include in the solution?

A. ust-in-time (JIT) VM access

B. shared access signature (SAS)

C. stored access policy

D. role assignment condition

View answer

Correct Answer: B

Question #100

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have an Azure virtual machine named VM1. VM1 was deployed by using a custom

A. es

B. o

View answer

Correct Answer: A

DON'T WANT TO MISS A THING?

100% Pass Cisco, PMP, CISA, CISM, AWS Practice test on SALE!
Get Now

Boost Your Performance in the Microsoft Exam with AZ-104 Practice Tests

View Answers after Submission

DON'T WANT TO MISS A THING?

100% Pass Cisco, PMP, CISA, CISM, AWS Practice test on SALE! Get Now

Boost Your Performance in the Microsoft Exam with AZ-104 Practice Tests

View Answers after Submission

100% Pass Cisco, PMP, CISA, CISM, AWS Practice test on SALE!
Get Now