Optimize Your Microsoft AZ-104 Exam Preparation with Reliable Study Resources

Question #1

Your company has an Azure subscription that includes a Recovery Services vault.You want to use Azure Backup to schedule a backup of your company's virtual machines (VMs) to the Recovery Services vault.Which of the following VMs can you back up? Choose all that apply.

A. es

B. o

View answer

Correct Answer: ABCDE

Question #2

HOTSPOT (Drag and Drop is not supported)You have an Azure subscription.You plan to create a role definition to meet the following requirements:•Users must be able to view the configuration data of a storage account.•Users must be able to perform all actions on a virtual network.•The solution must use the principle of least privilege.What should you include in the role definition for each requirement? To answer, select the appropriate options in the answer area.Note: Each correct selection is worth one point

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #3

HOTSPOT (Drag and Drop is not supported)You have an Azure subscription named Subscription1 that contains the quotas shown in the following table.You deploy virtual machine to Subscription1 as shown in the following table.You plan to deploy the virtual machines shown in the following table.For each of the following statements, select Yes if the statement is true. Otherwise, select No.Note: Each correct selection is worth one point.Hot Area:

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #4

You have an Azure Kubernetes Service (AKS) cluster named AKS1. You need to configure cluster autoscaler for AKS1.Which two tools should you use? Each correct answer presents a complete solution.Note: Each correct selection is worth one point.

A. un the docker push command

B. reate an App Service plan

C. un the azacr build command

D. un the azaks create command

View answer

Correct Answer: AB

Question #5

You plan to deploy several Azure virtual machines that will run Windows Server 2019 in a virtual machine scale set by using an Azure Resource Manager template.You need to ensure that NGINX is available on all the virtual machines after they are deployed.What should you use?

A. he New-AzConfigurationAssignment cmdlet

B. Desired State Configuration (DSC) extension

C. zure Active Directory (Azure AD) Application Proxy

D. zure Application Insights

View answer

Correct Answer: B

Question #6

You have an Azure subscription that contains 10 virtual machines, a key vault named Vault1, and a network security group (NSG) named NSG1. All the resources are deployed to the East US Azure region.The virtual machines are protected by using NSG1. NSG1 is configured to block all outbound traffic to the internet.You need to ensure that the virtual machines can access Vault1. The solution must use the principle of least privilege and minimize administrative effortWhat should you configure as the destination o

A. n application security group

B. service tag

C. n IP address range

View answer

Correct Answer: B

Question #7

HOTSPOT (Drag and Drop is not supported)You have an Azure subscription that contains the users shown in the following table.The groups are configured as shown in the following table.You have a resource group named RG1 as shown in the following exhibit.For each of the following statements, select Yes if the statement is true. Otherwise, select No.Note: Each correct selection is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #8

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have an Azure subscription that contains the following users in an Azure Act

A. es

B. o

View answer

Correct Answer: B

Question #9

HOTSPOT (Drag and Drop is not supported)You have an Azure subscription that contains a storage account named storage1. The storage1 account contains a container named container1.You need to create a lifecycle management rule for storage1 that will automatically move the blobs in container1 to the lowest-cost tier after 90 days.How should you complete the rule? To answer, select the appropriate options in the answer area.Note: Each correct selection is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #10

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have an Azure virtual machine named VM1 that runs Windows Server 2016.You ne

A. es

B. o

View answer

Correct Answer: B

Question #11

Your company’s Azure subscription includes Azure virtual machines (VMs) that run Windows Server 2016. One of the VMs is backed up every day using Azure Backup Instant Restore.When the VM becomes infected with data encrypting ransomware, you are required to restore the VM. Which of the following actions should you take?

A. ou should restore the VM after deleting the infected VM

B. ou should restore the VM to any VM within the company’s subscription

C. ou should restore the VM to a new Azure VM

D. ou should restore the VM to an on-premise Windows device

View answer

Correct Answer: B

Question #12

You have an Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com.The User administrator role is assigned to a user named Admin1.An external partner has a Microsoft account that uses the user1@outlook.com sign in.Admin1 attempts to invite the external partner to sign in to the Azure AD tenant and receives the following error message: `Unable to invite user user1@outlook.com `" Generic authorization exception.`You need to ensure that Admin1 can invite the external partner to sign in to the A

A. From the Users settings blade, modify the External collaboration settings

B. From the Custom domain names blade, add a custom domain

C. From the Organizational relationships blade, add an identity provider

D. From the Roles and administrators blade, assign the Security administrator role to Admin1

View answer

Correct Answer: A

Question #13

You have an Azure subscription.In the Azure portal, you plan to create a storage account named storage1 that will have the following settings:-Performance: Standard-Replication: Zone-redundant storage (ZRS)-Access tier (default): Cool-Hierarchical namespace: DisabledYou need to ensure that you can set Account kind for storage1 to BlockBlobStorage. Which setting should you modify first?

A. erformance

B. eplication

C. ccess tier (default)

D. ierarchical namespace

View answer

Correct Answer: A

Question #14

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.Your company’s Azure subscription includes two Azure networks named VirtualNetworkA and VirtualNetworkB.VirtualNetworkA includes a VPN gateway that is configured to make use of static routing. Also, a site-to-site VPN connection exists between your company’s on-premises network and VirtualNetworkA.You have configured

A. es

B. o

View answer

Correct Answer: B

Question #15

You plan to deploy several Azure virtual machines that will run Windows Server 2019 in a virtual machine scale set by using an Azure Resource Manager template.You need to ensure that NGINX is available on all the virtual machines after they are deployed.What should you use?

A. zure Custom Script Extension

B. eployment Center in Azure App Service

C. he Publish-AzVMDscConfiguration cmdlet

D. he New-AzConfigurationAssignment cmdlet

View answer

Correct Answer: A

Question #16

You have an Azure subscription named Subscription1 that contains a virtual network named VNet1. VNet1 is in a resource group named RG1.Subscription1 has a user named User1. User1 has the following roles:-Reader-Security Admin-Security ReaderYou need to ensure that User1 can assign the Reader role for VNet1 to other users. What should you do?

A. emove User1 from the Security Reader role for Subscription1

B. ssign User1 the Owner role for VNet1

C. ssign User1 the Contributor role for VNet1

D. ssign User1 the Network Contributor role for VNet1

View answer

Correct Answer: B

Question #17

You have an Azure subscription.You have 100 Azure virtual machines.You need to quickly identify underutilized virtual machines that can have their service tier changed to a less expensive offering.Which blade should you use?

A. Monitor

B. Advisor

C. Metrics

D. Customer insights

View answer

Correct Answer: B

Question #18

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have an Azure Directory (Azure AD) tenant named Adatum and an Azure Subscrip

A. es

B. o

View answer

Correct Answer: A

Question #19

You have three offices and an Azure subscription that contains an Azure Active Directory (Azure AD) tenant. You need to grant user management permissions to a local administrator in each office.What should you use?

A. zure AD roles

B. dministrative units

C. ccess packages in Azure AD entitlement management

D. zure roles

View answer

Correct Answer: B

Question #20

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have an Azure virtual machine named VM1. VM1 was deployed by using a custom

A. es

B. o

View answer

Correct Answer: B

Question #21

HOTSPOT (Drag and Drop is not supported)You have an Azure Active Directory (Azure AD) tenant that contains three global administrators named Admin1, Admin2, and Admin3.The tenant is associated to an Azure subscription. Access control for the subscription is configured as shown in the Access control exhibit. (Click the Access Control tab.)You sign in to the Azure portal as Admin1 and configure the tenant as shown in the Tenant exhibit. (Click the Tenant tab.)For each of the following statements, select Yes i

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #22

You have an Azure subscription that contains the resources shown in the following table.You need to configure a proximity placement group for VMSS1.Which proximity placement groups should you use?

A. roximity2 only

B. roximity1, Proximity2, and Proximity3

C. roximity1 only

D. roximity1 and Proximity3 only

View answer

Correct Answer: C

Question #23

HOTSPOT (Drag and Drop is not supported)You have an Azure subscription named Subscription1 that contains the resources shown in the following table:You plan to configure Azure Backup reports for Vault1.You are configuring the Diagnostics settings for the AzureBackupReports log.Which storage accounts and which Log Analytics workspaces can you use for the Azure Backup reports of Vault1? To answer, select the appropriate options in the answer area.Note: Each correct selection is worth one point.Hot Area:

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #24

HOTSPOT (Drag and Drop is not supported)You have Azure Active Directory tenant named Contoso.com that includes following users:Contoso.com includes following Windows 10 devices:You create following security groups in Contoso.com:For each of the following statements, select Yes if the statement is true. Otherwise, select No.Note: Each correct selection is worth one point.Hot Area:

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #25

You have an Azure virtual machine named VM1 that runs Windows Server 2019.You save VM1 as a template named Template1 to the Azure Resource Manager library. You plan to deploy a virtual machine named VM2 from Template1.What can you configure during the deployment of VM2?

A. perating system

B. dministrator username

C. irtual machine size

D. esource group

View answer

Correct Answer: B

Question #26

HOTSPOT (Drag and Drop is not supported)You have the Azure resources shown on the following exhibit.You plan to track resource usage and prevent the deletion of resources.To which resources can you apply locks and tags? To answer, select the appropriate options in the answer area.Note: Each correct selection is worth one point.Hot Area:

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #27

HOTSPOT (Drag and Drop is not supported)You have an Azure subscription that contains the storage accounts shown in the following table.You need to identify which storage accounts support lifecycle management, and which storage accounts support moving data to the Archive access tier.Which storage accounts should you use? To answer, select the appropriate options in the answer area.Note: Each correct selection is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #28

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have an Azure subscription named Subscription1 that contains the resources s

A. es

B. o

View answer

Correct Answer: A

Question #29

HOTSPOT (Drag and Drop is not supported)You configure the custom role shown in the following exhibit.Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.Note: Each correct selection is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #30

You have an Azure Storage account named storage1 that contains a blob container named container1.You need to prevent new content added to container1 from being modified for one year.What should you configure?

A. he access tier

B. n access policy

C. he Access control (IAM) settings

D. he access level

View answer

Correct Answer: C

Question #31

You have an Azure subscription named Subscription1. Subscription1 contains the resource groups in the following table.RG1 has a web app named WebApp1. WebApp1 is located in West Europe. You move WebApp1 to RG2.What is the effect of the move?

A. he App Service plan for WebApp1 remains in West Europe

B. he App Service plan for WebApp1 moves to North Europe

C. he App Service plan for WebApp1 remains in West Europe

D. he App Service plan for WebApp1 moves to North Europe

View answer

Correct Answer: A

Question #32

HOTSPOT (Drag and Drop is not supported)You have an Azure subscription that contains the resources shown in the following table. In Azure Cloud Shell, you need to create a virtual machine by using an Azure Resource Manager (ARM) template.How should you complete the command? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.Hot Area:

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #33

You need to implement a backup solution for App1 after the application is moved. What should you create first?

A. recovery plan

B. n Azure Backup Server

C. backup policy

D. Recovery Services vault

View answer

Correct Answer: D

Question #34

HOTSPOT (Drag and Drop is not supported)You have an Azure subscription that contains the resources shown in the following table:You assign a policy to RG6 as shown in the following table:To RG6, you apply the tag: RGroup: RG6.You deploy a virtual network named VNET2 to RG6.Which tags apply to VNET1 and VNET2? To answer, select the appropriate options in the answer area.Note: Each correct selection is worth one point.Hot Area:

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #35

HOTSPOT (Drag and Drop is not supported)You have an Azure subscription that contains a virtual machine scale set. The scale set contains four instances that have the following configurations:-Operating system: Windows Server 2016-Size: Standard_D1_v2You run the get-azvmsscmdlet as shown in the following exhibit:Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.Note: Each correct selection is worth one point.Hot Area:

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #36

You have Azure subscription that includes data in following locations:You plan to export data by using Azure import/export job named Export1.You need to identify the data that can be exported by using Export1.Which data should you identify?

A. B1

B. ontainer1

C. hare1

D. able1

View answer

Correct Answer: B

Question #37

You have an Azure subscription named Subscription1.You have 5 TB of data that you need to transfer to Subscription1.You plan to use an Azure Import/Export job.What can you use as the destination of the imported data?

A. zure Blob Storage

B. zure Data Lake Store

C. zure SQL Database

D. virtual machine

View answer

Correct Answer: A

Question #38

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.Your company has an azure subscription that includes a storage account, a resource group, a blob container and a file share.A colleague named Jon Ross makes use of a solitary Azure Resource Manager (ARM) template to deploy a virtual machine and an additional Azure Storage account.You want to review the ARM template t

A. es

B. o

View answer

Correct Answer: B

Question #39

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.Your company’s Azure subscription includes two Azure networks named VirtualNetworkA and VirtualNetworkB.VirtualNetworkA includes a VPN gateway that is configured to make use of static routing. Also, a site-to-site VPN connection exists between your company’s on-premises network and VirtualNetworkA.You have configured

A. es

B. o

View answer

Correct Answer: B

Question #40

You have two Azure subscriptions named Sub1 and Sub2.An administrator creates a custom role that has an assignable scope to a resource group named RG1 in Sub1.You need to ensure that you can apply the custom role to any resource group in Sub1 and Sub2. The solution must minimize administrative effort.What should you do?

A. elect the custom role and add Sub1 and Sub2 to the assignable scopes

B. reate a new custom role for Sub1

C. reate a new custom role for Sub1 and add Sub2 to the assignable scopes

D. elect the custom role and add Sub1 to the assignable scopes

View answer

Correct Answer: A

Question #41

HOTSPOT (Drag and Drop is not supported)You have an Azure subscription named Subscription1 that has a subscription ID of c276fc76-9cd4-44c9-99a7- 4fd71546436e.You need to create a custom RBAC role named CR1 that meets the following requirements:-Can be assigned only to the resource groups in Subscription1-Prevents the management of the access permissions for the resource groups-Allows the viewing, creating, modifying, and deleting of resources within the resource groupsWhat should you specify in the assigna

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #42

HOTSPOT (Drag and Drop is not supported)You deploy an Azure Kubernetes Service (AKS) cluster that has the network profile shown in the following exhibit.Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.Note: Each correct selection is worth one point.Hot Area:

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #43

HOTSPOT (Drag and Drop is not supported)You have the Azure management groups shown in the following table:You add Azure subscriptions to the management groups as shown in the following table:You create the Azure policies shown in the following table:For each of the following statements, select Yes if the statement is true. Otherwise, select No.Note: Each correct selection is worth one point.Hot Area:

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #44

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You deploy an Azure Kubernetes Service (AKS) cluster named AKS1.You need to depl

A. es

B. o

View answer

Correct Answer: A

Question #45

You have an Azure subscription named Subscription1 that contains a virtual network named VNet1. VNet1 is in a resource group named RG1.Subscription1 has a user named User1. User1 has the following roles:•Reader•Security Admin•Security ReaderYou need to ensure that User1 can assign the Reader role for VNet1 to other users.What should you do?

A. ssign User1 the Network Contributor role for VNet1

B. emove User1 from the Security Reader role for Subscription1

C. ssign User1 the Owner role for VNet1

D. ssign User1 the Network Contributor role for RG1

View answer

Correct Answer: C

Question #46

HOTSPOT (Drag and Drop is not supported)You have Azure subscription that includes following Azure file shares:You have the following on-premises servers:You create a Storage Sync Service named Sync1 and an Azure File Sync group named Group1. Group1 uses share1 as a cloud endpoint.You register Server1 and Server2 in Sync1. You add D:\Folder1 on Server1 as a server endpoint of Group1. For each of the following statements, select Yes if the statement is true. Otherwise, select No.Note: Each correct selection i

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #47

DRAG DROP (Drag and Drop is not supported)You have an Azure Active Directory (Azure AD) tenant that has the contoso.onmicrosoft.com domain name. You have a domain name of contoso.com registered at a third-party registrar.You need to ensure that you can create Azure AD users that have names containing a suffix of @contoso.com.Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.Select and

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #48

You have an Azure subscription named Subscription1 that contains the storage accounts shown in the following table:You plan to use the Azure Import/Export service to export data from Subscription1. You need to identify which storage account can be used to export the data.What should you identify?

A. torage1

B. torage2

C. torage3

D. torage4

View answer

Correct Answer: D

Question #49

You have an Azure subscription that contains an Azure virtual machine named VM1. VM1 runs a financial reporting app named App1 that does not support multiple active instances.At the end of each month, CPU usage for VM1 peaks when App1 runs.You need to create a scheduled runbook to increase the processor performance of VM1 at the end of each month.What task should you include in the runbook?

A. dd the Azure Performance Diagnostics agent to VM1

B. odify the VM size property of VM1

C. dd VM1 to a scale set

D. ncrease the vCPU quota for the subscription

E. dd a Desired State Configuration (DSC) extension to VM1

View answer

Correct Answer: B

Question #50

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.Your company has an Azure Active Directory (Azure AD) tenant named weyland.com that is configured for hybrid coexistence with the on-premises Active Directory domain.You have a server named DirSync1 that is configured as a DirSync server.You create a new user account in the on-premise Active Directory. You now need t

A. es

B. o

View answer

Correct Answer: A

Question #51

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You deploy an Azure Kubernetes Service (AKS) cluster named AKS1.You need to depl

A. es

B. o

View answer

Correct Answer: B

Question #52

HOTSPOT (Drag and Drop is not supported)You have an Azure subscription.You create the Azure Storage account shown in the following exhibit.Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.Note: Each correct selection is worth one point.Hot Area:

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #53

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have an Azure virtual machine named VM1. VM1 was deployed by using a custom

A. es

B. o

View answer

Correct Answer: B

Question #54

You have an Azure subscription named Subscription1. Subscription1 contains the resource groups in the following table.RG1 has a web app named WebApp1. WebApp1 is located in West Europe.You move WebApp1 to RG2.What is the effect of the move?

A. The App Service plan for WebApp1 remains in West Europe

B. The App Service plan for WebApp1 moves to North Europe

C. The App Service plan for WebApp1 remains in West Europe

D. The App Service plan for WebApp1 moves to North Europe

View answer

Correct Answer: A

Question #55

You have an on-premises server that contains a folder named D:\Folder1.You need to copy the contents of D:\Folder1 to the public container in an Azure Storage account named contosodata.Which command should you run?

A. z storage blob copy start D:\\Folder1 https://contosodata

B. zcopy sync D:\\folder1 https://contosodata

C. zcopy copy D:\\folder1 https://contosodata

D. z storage blob copy start-batch D:\\Folder1 https://contosodata

View answer

Correct Answer: C

Question #56

HOTSPOT (Drag and Drop is not supported)You have several Azure virtual machines on a virtual network named VNet1.You configure an Azure Storage account as shown in the following exhibit.Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.Note: Each correct selection is worth one point.Hot Area:

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #57

You have an Azure AD tenant named adatum.com that contains the groups shown in the following table.Adatum.com contains the users shown in the following table.You assign the Azure Active Directory Premium Plan 2 license to Group1 and User4.Which users are assigned the Azure Active Directory Premium Plan 2 license?

A. ser4 only

B. ser1 and User4 only

C. ser1, User2, and User4 only

D. ser1, User2, User3, and User4

View answer

Correct Answer: B

Question #58

You have an Azure subscription named Subscription1 that contains a virtual network named VNet1. VNet1 is in a resource group named RG1.Subscription1 has a user named User1. User1 has the following roles:-Reader-Security Admin-Security ReaderYou need to ensure that User1 can assign the Reader role for VNet1 to other users.What should you do?

A. emove User1 from the Security Reader role for Subscription1

B. ssign User1 the Access Administrator role for VNet1

C. emove User1 from the Security Reader and Reader roles for Subscription1

D. ssign User1 the Network Contributor role for RG1

View answer

Correct Answer: B

Question #59

You have an Azure subscription that contains an Azure Storage account.You plan to create an Azure container instance named container1 that will use a Docker image named Image1. Image1 contains a Microsoft SQL Server instance that requires persistent storage.You need to configure a storage service for Container1. What should you use?

A. zure Files

B. zure Blob storage

C. zure Queue storage

D. zure Table storage

View answer

Correct Answer: A

Question #60

HOTSPOT (Drag and Drop is not supported)You have an Azure subscription that contains the storage accounts shown in the following exhibit.Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.Note: Each correct selection is worth one point.Hot Area:

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #61

You plan to automate the deployment of a virtual machine scale set that uses the Windows Server 2016 Datacenter image.You need to ensure that when the scale set virtual machines are provisioned, they have web server components installed.Which two actions should you perform? Each correct answer presents part of the solution.Note: Each correct selection is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: DE

Question #62

HOTSPOT (Drag and Drop is not supported)You have an Azure Kubernetes Service (AKS) cluster named AKS1 and a computer named Computer1 that runs Windows 10. Computer1 that has the Azure CLI installed.You need to install the kubectl client on Computer1.Which command should you run? To answer, select the appropriate options in the answer area.Note: Each correct selection is worth one point.Hot Area:

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #63

You have an Azure subscription named Subscription1 that contains virtual network named VNet1. VNet1 is in a resource group named RG1.A user named User1 has the following roles for Subscription1:•Reader•Security Admin•Security ReaderYou need to ensure that User1 can assign the Reader role for VNet1 to other users.What should you do?

A. emove User1 from the Security Reader and Reader roles for Subscription1

B. ssign User1 the Contributor role for VNet1

C. ssign User1 the Owner role for VNet1

D. ssign User1 the Network Contributor role for RG1

View answer

Correct Answer: C

Question #64

You sign up for Azure Active Directory (Azure AD) Premium.You need to add a user named admin1@contoso.com as an administrator on all the computers that will be joined to the Azure AD domain.What should you configure in Azure AD?

A. evice settings from the Devices blade

B. roviders from the MFA Server blade

C. ser settings from the Users blade

D. eneral settings from the Groups blade

View answer

Correct Answer: A

Question #65

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have an Azure Directory (Azure AD) tenant named Adatum and an Azure Subscrip

A. es

B. o

View answer

Correct Answer: A

Question #66

You have an Azure subscription that contains the resources shown in the following table.You need to perform the tasks shown in the following table. Which tasks can you perform by using Azure Storage Explorer?

A. ask1 and Task3 only

B. ask1, Task2, and Task3 only

C. ask1, Task3, and Task4 only

D. ask2, Task3, and Task4 only

E. ask1, Task2, Task3, and Task4

View answer

Correct Answer: D

Question #67

You have an Azure subscription named Subscription1 that contains an Azure Log Analytics workspace named Workspace1.You need to view the error from a table named Event. Which query should you run in Workspace1?

A. et-Event Event | where {$_

B. vent | search "error"

C. elect * from Event where EnventType == "error"

D. vent | where EventType is "error"

View answer

Correct Answer: B

Question #68

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have an Azure virtual machine named VM1 that runs Windows Server 2016.You ne

A. es

B. o

View answer

Correct Answer: A

Question #69

You have an Azure subscription that contains a user account named User1.You need to ensure that User1 can assign a policy to the tenant root management group. What should you do?

A. ssign the Owner role for the Azure Subscription to User1, and then modify the default conditional access policies

B. ssign the Owner role for the Azure subscription to User1, and then instruct User1 to configure access management for Azure resources

C. ssign the Global administrator role to User1, and then instruct User1 to configure access management for Azure resources

D. reate a new management group and delegate User1 as the owner of the new management group

View answer

Correct Answer: B

Question #70

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have an Azure Active Directory (Azure AD) tenant named contoso.com.You have

A. es

B. o

View answer

Correct Answer: B

Question #71

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have an Azure Active Directory (Azure AD) tenant named contoso.com.You have

A. es

B. o

View answer

Correct Answer: B

Question #72

HOTSPOT (Drag and Drop is not supported)You need to create storage5. The solution must support the planned changes.Which type of storage account should you use, and which account should you configure as the destination storage account? To answer, select the appropriate options in the answer area.Note: Each correct selection is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #73

You plan to deploy several Azure virtual machines that will run Windows Server 2019 in a virtual machine scale set by using an Azure Resource Manager template.You need to ensure that NGINX is available on all the virtual machines after they are deployed.What should you use?

A. zure Custom Script Extension

B. eployment Center in Azure App Service

C. he New-AzConfigurationAssignment cmdlet

D. zure AD Application Proxy

View answer

Correct Answer: A

Question #74

Your company has an Azure Active Directory (Azure AD) subscription.You need to deploy five virtual machines (VMs) to your company’s virtual network subnet.The VMs will each have both a public and private IP address. Inbound and outbound security rules for all of these virtual machines must be identical.Which of the following is the least amount of network interfaces needed for this configuration?

A.

B. 0

C. 0

D. 0

View answer

Correct Answer: A

Question #75

You have an Azure subscription that contains a user named User1.You need to ensure that User1 can deploy virtual machines and manage virtual networks. The solution must use the principle of least privilege.Which role-based access control (RBAC) role should you assign to User1?

A. wner

B. irtual Machine Contributor

C. ontributor

D. irtual Machine Administrator Login

View answer

Correct Answer: C

Question #76

HOTSPOT (Drag and Drop is not supported)You have an Azure subscription named Subscription1. Subscription1 contains the resources in the following table.VNet1 is in RG1. VNet2 is in RG2. There is no connectivity between VNet1 and VNet2.An administrator named Admin1 creates an Azure virtual machine named VM1 in RG1. VM1 uses a disk named Disk1 and connects to VNet1. Admin1 then installs a custom application in VM1.You need to move the custom application to VNet2. The solution must minimize administrative effo

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #77

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have an Azure subscription named Subscription1. Subscription1 contains a res

A. es

B. o

View answer

Correct Answer: A

Question #78

HOTSPOT (Drag and Drop is not supported)You need to ensure that User1 can create initiative definitions, and User4 can assign initiatives to RG2. The solution must meet the technical requirements.Which role should you assign to each user? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.Hot Area:

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #79

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.Your company’s Azure solution makes use of Multi-Factor Authentication for when users are not in the office. The Per Authentication option has been configured as the usage model.After the acquisition of a smaller business and the addition of the new staff to Azure Active Directory (Azure AD) obtains a different compa

A. es

B. o

View answer

Correct Answer: A

Question #80

You have an Azure subscription that contains a resource group named RG26.RG26 is set to the West Europe location and is used to create temporary resources for a project. RG26 contains the resources shown in the following table.SQLDB01 is backed up to RGV1.When the project is complete, you attempt to delete RG26 from the Azure portal. The deletion fails. You need to delete RG26.What should you do first?

A. elete VM1

B. top VM1

C. top the backup of SQLDB01

D. elete sa001

View answer

Correct Answer: C

Question #81

You have an on-premises server that contains a folder named D:\Folder1.You need to copy the contents of D:\Folder1 to the public container in an Azure Storage account named contosodata.Which command should you run?

A. ttps://contosodata

B. zcopy sync D:\\folder1 https://contosodata

C. zcopy copy D:\\folder1 https://contosodata

D. z storage blob copy start-batch D:\\Folder1 https:// contosodata

View answer

Correct Answer: C

Question #82

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have an Azure subscription named Subscription1 that contains the resources s

A. es

B. o

View answer

Correct Answer: A

Question #83

Your company has three virtual machines (VMs) that are included in an availability set.You try to resize one of the VMs, which returns an allocation failure message. It is imperative that the VM is resized.Which of the following actions should you take?

A. ou should only stop one of the VMs

B. ou should stop two of the VMs

C. ou should stop all three VMs

D. ou should remove the necessary VM from the availability set

View answer

Correct Answer: C

Question #84

You plan to move a distributed on-premises app named App1 to an Azure subscription. After the planned move, App1 will be hosted on several Azure virtual machines.You need to ensure that App1 always runs on at least eight virtual machines during planned Azure maintenance.What should you create?

A. ne virtual machine scale set that has 10 virtual machines instances

B. ne Availability Set that has three fault domains and one update domain

C. ne Availability Set that has 10 update domains and one fault domain

D. ne virtual machine scale set that has 12 virtual machines instances

View answer

Correct Answer: C

Question #85

HOTSPOT (Drag and Drop is not supported)You have Azure Storage accounts as shown in the following exhibit.Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.Note: Each correct selection is worth one point.Hot Area:

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #86

HOTSPOT (Drag and Drop is not supported)You have a hybrid deployment of Azure Active Directory (Azure AD) that contains the users shown in the following table.You need to modify the JobTitle and UsageLocation attributes for the users.For which users can you modify the attributes from Azure AD? To answer, select the appropriate options in the answer area.Note: Each correct selection is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #87

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.Your company has a Microsoft SQL Server Always On availability group configured on their Azure virtual machines (VMs).You need to configure an Azure internal load balancer as a listener for the availability group.Solution: You create an HTTP health probe on port 1433.Does the solution meet the goal?

A. es

B. o

View answer

Correct Answer: B

Question #88

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.Your company has a Microsoft SQL Server Always On availability group configured on their Azure virtual machines (VMs).You need to configure an Azure internal load balancer as a listener for the availability group.Solution: You enable Floating IP.Does the solution meet the goal?

A. es

B. o

View answer

Correct Answer: A

Question #89

You have an Azure subscription named Subscription1.You deploy a Linux virtual machine named VM1 to Subscription1. You need to monitor the metrics and the logs of VM1.What should you use?

A. zure HDInsight

B. inux Diagnostic Extension (LAD) 3

C. he AzurePerformanceDiagnostics extension

D. zure Analysis Services

View answer

Correct Answer: B

Question #90

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.Your company's Azure solution makes use of Multi-Factor Authentication for when users are not in the office. The Per Authentication option has been configured as the usage model.After the acquisition of a smaller business and the addition of the new staff to Azure Active Directory (Azure AD) obtains a different compa

A. es

B. o

View answer

Correct Answer: B

Question #91

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You need to ensure that an Azure Active Directory (Azure AD) user named Admin1 i

A. Yes

B. No

View answer

Correct Answer: A

Question #92

You have an Azure web app named App1. App1 has the deployment slots shown in the following table:In webapp1-test, you test several changes to App1. You back up App1.You swap webapp1-test for webapp1-prod and discover that App1 is experiencing performance issues. You need to revert to the previous version of App1 as quickly as possible.What should you do?

A. edeploy App1

B. wap the slots

C. lone App1

D. estore the backup of App1

View answer

Correct Answer: B

Question #93

You have an Azure Active Directory (Azure AD) tenant named adatum.com that contains the users shown in the following table.Adatum.com has the following configurations:-Users may join devices to Azure AD is set to User1.-Additional local administrators on Azure AD joined devices is set to None.You deploy Windows 10 to a computer named Computer1. User1 joins Computer1 to adatum.com. You need to identify the local Administrator group membership on Computer1.Which users are members of the local Administrators g

A. ser1 only

B. ser2 only

C. ser1 and User2 only

D. ser1, User2, and User3 only

E. ser1, User2, User3, and User4

View answer

Correct Answer: C

Question #94

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.Your company's Azure solution makes use of Multi-Factor Authentication for when users are not in the office. The Per Authentication option has been configured as the usage model.After the acquisition of a smaller business and the addition of the new staff to Azure Active Directory (Azure AD) obtains a different compa

A. es

B. o

View answer

Correct Answer: A

Question #95

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have an Azure Active Directory (Azure AD) tenant named contoso.com.You have

A. es

B. o

View answer

Correct Answer: B

Question #96

HOTSPOT (Drag and Drop is not supported)You have an Azure File sync group that has the endpoints shown in the following table.Cloud tiering is enabled for Endpoint3.You add a file named File1 to Endpoint1 and a file named File2 to Endpoint2.On which endpoints will File1 and File2 be available within 24 hours of adding the files? To answer, select the appropriate options in the answer area.Note: Each correct selection is worth one point.Hot Area:

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #97

HOTSPOT (Drag and Drop is not supported)You need to configure the Device settings to meet the technical requirements and the user requirements. Which two settings should you modify? To answer, select the appropriate settings in the answer area.Hot Area:

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #98

You download an Azure Resource Manager template based on an existing virtual machine. The template will be used to deploy 100 virtual machines.You need to modify the template to reference an administrative password. You must prevent the password from being stored in plain text.What should you create to store the password?

A. n Azure Key Vault and an access policy

B. n Azure Storage account and an access policy

C. Recovery Services vault and a backup policy

D. zure Active Directory (AD) Identity Protection and an Azure policy

View answer

Correct Answer: A

Question #99

HOTSPOT (Drag and Drop is not supported)You have an Azure subscription named Subscription1.In Subscription1, you create an Azure file share named share1.You create a shared access signature (SAS) named SAS1 as shown in the following exhibit:To answer, select the appropriate options in the answer area.Note: Each correct selection is worth one point.Hot Area:

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #100

You have an Azure AD tenant that contains the groups shown in the following table.You purchase Azure Active Directory Premium P2 licenses.To which groups can you assign a license?

A. roup1 only

B. roup1 and Group3 only

C. roup3 and Group4 only

D. roup1, Group2, and Group3 only

E. roup1, Group2, Group3, and Group4

View answer

Correct Answer: B

Question #101

Your company has two on-premises servers named SRV01 and SRV02. Developers have created an application that runs on SRV01. The application calls a service on SRV02 by IP address.You plan to migrate the application on Azure virtual machines (VMs). You have configured two VMs on a single subnet in an Azure virtual network.You need to configure the two VMs with static internal IP addresses. What should you do?

A. un the New-AzureRMVMConfig PowerShell cmdlet

B. un the Set-AzureSubnet PowerShell cmdlet

C. odify the VM properties in the Azure Management Portal

D. odify the IP properties in Windows Network and Sharing Center

E. un the Set-AzureStaticVNetIP PowerShell cmdlet

View answer

Correct Answer: E

Question #102

DRAG DROP (Drag and Drop is not supported)Your company has an Azure subscription that includes a number of Azure virtual machines (VMs), which are all part of the same virtual network.Your company also has an on-premises Hyper-V server that hosts a VM, named VM1, which must be replicated to Azure.Which of the following objects that must be created to achieve this goal? Answer by dragging the correct option from the list to the answer area.Select and Place:

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #103

You have a Microsoft 365 tenant and an Azure Active Directory (Azure AD) tenant named contoso.com.You plan to grant three users named User1, User2, and User3 access to a temporary Microsoft SharePoint document library named Library1.You need to create groups for the users. The solution must ensure that the groups are deleted automatically after 180 days.Which two groups should you create? Each correct answer presents a complete solution.Note: Each correct selection is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: AC

Question #104

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have an Azure virtual machine named VM1 that runs Windows Server 2016.You ne

A. es

B. o

View answer

Correct Answer: B

Question #105

DRAG DROP (Drag and Drop is not supported)You have an Azure subscription named Sub1 that contains two users named User1 and User2.You need to assign role-based access control (RBAC) roles to User1 and User2. The users must be able to perform the following tasks in Sub1:•User1 must view the data in any storage account.•User2 must assign users the Contributor role for storage accounts.The solution must use the principle of least privilege.Which RBAC role should you assign to each user? To answer, drag the app

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #106

HOTSPOT (Drag and Drop is not supported)You have an Azure AD tenant named adatum.com that contains the groups shown in the following table.Adatum.com contains the users shown in the following table.You assign an Azure Active Directory Premium P2 license to Group1 as shown in the following exhibit.Group2 is NOT directly assigned a license.For each of the following statements, select Yes if the statement is true. Otherwise, select No.Note: Each correct selection is worth one point.

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #107

HOTSPOT (Drag and Drop is not supported)You need to identify the storage requirements for Contoso.For each of the following statements, select Yes if the statement is true. Otherwise, select No.Note: Each correct selection is worth one point.Hot Area:

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #108

Your company has serval departments. Each department has a number of virtual machines (VMs).The company has an Azure subscription that contains a resource group named RG1.All VMs are located in RG1.You want to associate each VM with its respective department.What should you do?

A. reate Azure Management Groups for each department

B. reate a resource group for each department

C. ssign tags to the virtual machines

D. odify the settings of the virtual machines

View answer

Correct Answer: C

Question #109

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.Your company’s Azure solution makes use of Multi-Factor Authentication for when users are not in the office. The Per Authentication option has been configured as the usage model.After the acquisition of a smaller business and the addition of the new staff to Azure Active Directory (Azure AD) obtains a different compa

A. es

B. o

View answer

Correct Answer: B

Question #110

Your company has an Azure Active Directory (Azure AD) tenant that is configured for hybrid coexistence with the on-premises Active Directory domain.The on-premise virtual environment consists of virtual machines (VMs) running on Windows Server 2012 R2 Hyper-V host servers.You have created some PowerShell scripts to automate the configuration of newly created VMs. You plan to create several new VMs.You need a solution that ensures the scripts are run on the new VMs. Which of the following is the best solutio

A. onfigure a SetupComplete

B. onfigure a Group Policy Object (GPO) to run the scripts as logon scripts

C. onfigure a Group Policy Object (GPO) to run the scripts as startup scripts

D. lace the scripts in a new virtual hard disk (VHD)

View answer

Correct Answer: A

Question #111

You have an Azure Active Directory (Azure AD) tenant named contosocloud.onmicrosoft.com. Your company has a public DNS zone for contoso.com.You add contoso.com as a custom domain name to Azure AD. You need to ensure that Azure can verify the domain name. Which type of DNS record should you create?

A. X

B. SEC

C. RV

D. SEC3

View answer

Correct Answer: A

Question #112

You have an Azure subscription named Subscription1 that is used by several departments at your company. Subscription1 contains the resources in the following table:Another administrator deploys a virtual machine named VM1 and an Azure Storage account named storage2 by using a single Azure Resource Manager template.You need to view the template used for the deployment.From which blade can you view the template that was used for the deployment?

A. M1

B. G1

C. torage2

D. ontainer1

View answer

Correct Answer: B

Question #113

HOTSPOT (Drag and Drop is not supported)You have an Azure subscription that contains an Azure Availability Set named WEBPROD-AS-USE2 as shown in the following exhibit.You add 14 virtual machines to WEBPROD-AS-USE2.Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.Note: Each correct selection is worth one point.Hot Area:

A. ee Explanation section for answer

View answer

Correct Answer: A

Question #114

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.Your company has an Azure Active Directory (Azure AD) tenant named weyland.com that is configured for hybrid coexistence with the on-premises Active Directory domain.You have a server named DirSync1 that is configured as a DirSync server.You create a new user account in the on-premise Active Directory. You now need t

A. es

B. o

View answer

Correct Answer: B

Question #115

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.Your company has a Microsoft SQL Server Always On availability group configured on their Azure virtual machines (VMs).You need to configure an Azure internal load balancer as a listener for the availability group.Solution: You set Session persistence to Client IP.Does the solution meet the goal?

A. es

B. o

View answer

Correct Answer: B

Question #116

You have an Azure subscription that has the public IP addresses shown in the following table.You plan to deploy an Instance of Azure Firewall Premium named FW1.Which IP addresses can you use?

A. P2 only

B. P1 and IP2 only

C. P1, IP2, and IP5 only

D. P1, IP2, IP4, and IP5 only

View answer

Correct Answer: B

DON'T WANT TO MISS A THING?

100% Pass Cisco, PMP, CISA, CISM, AWS Practice test on SALE!
Get Now

Optimize Your Microsoft AZ-104 Exam Preparation with Reliable Study Resources

View The Updated AZ-104 Exam Questions

View The Updated Microsoft Exam Questions

View Answers after Submission

DON'T WANT TO MISS A THING?

100% Pass Cisco, PMP, CISA, CISM, AWS Practice test on SALE! Get Now

Optimize Your Microsoft AZ-104 Exam Preparation with Reliable Study Resources

View The Updated AZ-104 Exam Questions

View The Updated Microsoft Exam Questions

View Answers after Submission

100% Pass Cisco, PMP, CISA, CISM, AWS Practice test on SALE!
Get Now