AZ-104

Question 1

Your company has an Azure Storage account named TutorialsDojo1.

You have to copy your files hosted on your on-premises network to TutorialsDojo1 using AzCopy.

What Azure Storage services will you be able to copy your data into?

Table and Queue only
Blob, Table, and File only
Blob, File, Table, and Queue
Blob and File only

Answer 1

Blob and File only

Question 2

Your organization has deployed multiple Azure virtual machines configured to run as web servers and an Azure public load balancer named TD1.

There is a requirement that TD1 must consistently route your user’s request to the same web server every time they access it.

What should you configure?

Hash based
Session persistence: None
Session persistence: Client IP
Health probe

Answer 2

Session persistence: Client IP

Question 3

Your company has a Microsoft Entra ID tenant named tutorialsdojo.onmicrosoft.com and a public DNS zone for tutorialsdojo.com.

You added the custom domain name tutorialsdojo.com to Microsoft Entra ID. You need to verify that Azure can verify the domain name.

What DNS record type should you use?

A
CNAME
SOA
MX

Answer 3

Answer should be TXT but MX does just as well

Question 4

A company has two virtual networks named TDVnet1 and TDVnet2. A site-to-site VPN, using a VPN Gateway (TDGW1) with static routing, connects your on-premises network to TDVnet1. On your Windows 10 computer, TD1, you’ve set up a point-to-site VPN connection to TDVnet1.

You’ve recently established a virtual network peering between TDVnet1 and TDVnet2. Tests confirm connectivity to TDVnet2 from your on-premises network and to TDVnet1 from TD1. However, TD1 is currently unable to access TDVnet2.

What steps are necessary to enable a connection from TD1 to TDVnet2?

Enable transit gateway for TDVnet1.
Restart TDGW1 to re-establish the connection.
Download the VPN client configuration file and re-install it on TD1.
Enable transit gateway for TDVnet2.

Answer 4

Download the VPN client configuration file and re-install it on TD1.

Question 5

You have a file share in your Azure subscription named Manila-Subscription-01.

You plan to synchronize files from your on-premises file server named TDFileServer1 to Azure.

You created an Azure file share and a storage sync service.

Which four actions should you perform in sequence to synchronize files from TDFileServer1 to Azure?

Instructions: To answer, drag the appropriate item from the column on the left to its description on the right. Each correct match is worth one point.

get correct order
1. Create a server endpoint
2. Register TDFileServer1 with Storage Sync Service
3. Create a sync group and a cloud endpoint
4. Deploy the Azure File Sync agent to TDFileServer1

Answer 5

Deploy the Azure File Sync agent to TDFileServer1

Register TDFileServer1 with Storage Sync Service

Create a sync group and a cloud endpoint

Create a server endpoint

Question 6

True or False
There are numerous ways to manage who can access storage accounts. These include using the storage firewall and virtual network service endpoints, sharing access signatures (SAS) and combining them with access policies, as well as the name and key of the storage account. The public access level of the blob container can also be used to manage access to blob storage.

Answer 6

TRUE

Question 7

The resources shown in the following table are included in your Azure subscription. The resource kinds that are prohibited Azure policy with the following parameters is assigned to RG1: Virtual Networks and Microsoft.Network Computer/Virtual Machines / Microsoft You must first construct a new virtual machine in RG1 called V2, then connect it to VNET1. What ought to you do initially?

A. Remove Microsoft.Compute/virtualMachines from the policy.
B. Create an Azure Resource Manager template
C. Add a subnet to VNET1.
D. Remove Microsoft.Network/virtualNetworks from the policy.

Answer 7

Remove Microsoft.Compute/virtualMachines from the policy.

Question 8

True or False

The on-premises VPN equipment and network are represented in Azure by a local network connection, which is an Azure resource.

Answer 8

TRUE

Question 9

High availability is made possible by ________________________ with the use of site-to-site VPNs.

Answer 9

Active-active gateways and connections

BGP routing

Question 10

Yes or No

Subscription1 is the name of your Azure subscription. There is a resource group called RG1 in Subscription1. Resources that were delivered using templates can be found in RG1.You must see the time and date when the resources in RG1 were created.Resolution: After choosing the subscription from the Subscriptions blade, click Programmatic deployment.Does this accomplish the goal?

Answer 10

No

Question 11

Yes or No

Adatum is the tenant of your Azure Active Directory (Azure AD), and Subscription1 is your Azure subscription. There is an organization called Developers in Adatum. There is a resource group called Dev in Subscription1.The ability to construct Azure logic apps in the Dev resource group must be granted to the Developers group.Resolution: You give the Developers group the Contributor role on Dev.Does this accomplish the goal?

Answer 11

Yes

Question 12

True or False

Administrators may extract value from complex machine data by utilizing the many management tools offered by Azure Log Analytics. These solutions come with pre-made queries and visuals to aid in rapidly revealing insights.

Answer 12

TRUE

Question 13

True or False

Metric alerts (obtained from Azure Metrics) and Activity Log alerts, which can only be notified via an Azure Automation Runbook (and not via email), can both be configured as alert sources.

Answer 13

FALSE

Question 14

You have an Azure Storage account with your subscription to Azure. You intend to utilize a Docker image called Image1 to construct an Azure container instance called container1. A Microsoft SQL Server instance that needs persistent storage is present in Image 1. For Container1, a storage service needs to be configured. What kind of tool ought to you use?

Answer 14

Azure Table storage

Question 15

To keep an eye on the status of your storage accounts, let ________________.

Answer 15

Diagnostics
Alerts

Question 16

You test backups using a Recovery Service vault that you own. There are two protected virtual computers in the test backups. The Recovery Services vault must be deleted. What ought to you do initially?

Answer 16

From the Recovery Service vault, stop the backup of each backup item

Question 17

Tenant1 and Tenant2 are your two Azure Active Directory (Azure AD) tenants, and Subscription1 is your Azure subscription. Tenant1 is connected to Subscription1. In Tenant1, multi-factor authentication (MFA) is activated for every user. Tenant2 users’ MFA needs to be enabled. Tenant1’s MFA must be maintained by the solution. What ought to you do initially?

Answer 17

Create and link a subscription to Tenant2.

Question 18

Azure Active Directory (Azure AD) tenant contoso.onmicrosoft.com is what you have.You work with a contract vendor. The vendor logs in with user1@outlook.com to a Microsoft account.Make sure the vendor may use user1@outlook.com to authenticate to the tenant.How ought one to proceed?

Answer 18

From the Azure portal, add a new guest user, and then specify user1@outlook.com as the email address.

Question 19

App1 is your application, and it operates on VM1 and VM2 virtual machines in Azure. For App1, you intend to implement an Azure Availability Set. The solution needs to guarantee that App1 is accessible when the hardware supporting VMs 1 and 2 is undergoing scheduled repair. What ought to be a part of the availability set?

Answer 19

two update domains

Question 20

File transfers between storage accounts or from external, publicly accessible places to your Azure storage account are not supported by the async blob copy service.

Answer 20

FALSE

Question 21

Subscription1 is the name of your Azure subscription. There is a resource group called RG1 in Subscription1. Resources that were delivered using templates can be found in RG1.You must see the time and date when the resources in RG1 were created.Resolution: After choosing the subscription from the Subscriptions blade, click Resource providers.Does this accomplish the goal?

Answer 21

No

Question 22

Application security groups are another way to specify IP address ranges (ASGs). Network Security Groups rules can be set for groups of virtual machines (VMs) using ASGs, eliminating the need to divide the VMs into individual subnets.

Answer 22

TRUE

Question 23

VNet1, VNet2, and VNet3 are the three virtual networks that are included in your Azure subscription. A virtual appliance called VM2 that serves as a router is present in VNet2. Using VNet2 as the hub network, you are configuring the virtual networks in a hub and spoke structure. You intend to set up peering between VNets 2 and 3 as well as between VNets 1 and 2. You must establish connectivity via VNet2 between VNet1 and VNet3. Which two setups ought you to carry out? Part of the solution is presented in each accurate response.

Answer 23

Create a local site VPN gateway.

Question 24

VNet1, a virtual network hosted in the West US Azure region, is under your management.Two Windows Server-powered virtual machines, VM1 and VM2, are hosted by VNet1.For three hours, you must examine every network transaction from VM1 to VM2.Resolution: Create a connection monitor from Azure Network Watcher.Does this accomplish the goal?

Answer 24

No

Question 25

Subscription1 is the name of your Azure subscription. The resource groups in the following table are part of Subscription1. WebApp1 is the name of RG1’s web app. West Europe is where WebApp1 is situated. WebApp1 is relocated to RG2. What impact does the relocation have?

Answer 25

The App Service plan for WebApp1 remains in West Europe. Policy2 applies to WebApp1.

Question 26

You are a tenant of Azure Active Directory (Azure AD).To gain access to the Azure site, all administrators need to input a verification code.Make sure that the administrators can only use your on-premises network to access the Azure interface.What configuration should you make?

Answer 26

The multi-factor authentication service settings.

Question 27

Images and disks can be managed or unmanaged. Azure does this for you with both managed and unmanaged disks, which makes managing disks and images much easier.

Answer 27

FALSE

Question 28

You intend to use the Windows Server 2016 Datacenter image to automate the deployment of a virtual machine scale set. Make sure that web server components are installed on the scale set virtual machines when they are provisioned. Which two things ought you to do? Part of the solution is presented in each accurate response. NOTE: One point is awarded for each correct answer.

Answer 28

Modify the extension Profile section of the Azure Resource Manager template.

Create a new virtual machine scale set in the Azure portal.

Question 29

Using diagnostics similar to those used by Connection Troubleshoot, Connection Monitor allows for long-term connection monitoring.

Answer 29

TRUE

Question 30

Custom domains are supported by both CDNs and storage accounts. Only on custom domains is it possible to enable SSL while accessing the blob over a CDN.

Answer 30

TRUE

Question 31

Your business registers the contoso.com domain name. After creating an Azure DNS zone called contoso.com, you add an A record for a host called www with the IP address 131.107.1.10 to the zone. You see that www.contoso.com cannot be resolved by Internet hosts to the IP address 131.107.1.10. The issue of name resolution must be resolved. Resolution: At the domain registrar, you make changes to the name servers. Does this accomplish the goal

Answer 31

NO