Az-104-Garrett

Question 1

Select all true statements that apply to the use of Azure Disk Encryption (ADE) for azure VM disk protection

Answer 1

• Uses BitLocker for Windows VM-Controlled disks
• integrated with Azure Key Vault
• Uses DM-Crypt for linux based VM’s

Question 2

organizes data collection points, such as performance counters and event trace data, into a single collection

Answer 2

Data Collector Set

Question 3

tool used to meet the Requirement to inspect all network traffic between virtual machines for a duration of 3 hours

Answer 3

Network Watcher

Question 4

You need to Synchronize files with the DemoServer and azure using azure file sync service - what three actions will you perform next

Answer 4

Install file Sync Agent
Register
Add a Server endpoint

Question 5

Session Persistence

Answer 5

Same Web Server Serves all the clients

Question 6

what needs to be done to add a network interface to a virtual Machine

Answer 6

the machine needs to be stopped first

Question 7

Checks if a packet is allowed or denied

Answer 7

IP Flow Verify

Question 8

used to monitor network connectivity between an azure virtual machine and an IP address

Answer 8

azure connection monitor

Question 9

what tool can you create work items in ITSM tool, based on your Azure alerts (metric alerts, Activity Log alerts and Log Analytics alerts).

Answer 9

IT Service Management Connector (ITSM)

Question 10

seamlessly connect two or more Virtual Networks in Azure

Answer 10

Azure virtual network peering

Question 11

web traffic load balancer that enables you to manage traffic to your web applications.

Answer 11

Azure Application Gateway

Question 12

used to send encrypted traffic between an Azure virtual network and an on-premises location over the public Internet

Answer 12

Site-to-Site VPN gateway

Question 13

CPU usage for (server) peaks when the application runs.

what task should you include in the runbook

Answer 13

Modify the VM size property of (Server)

Question 14

you need to synchronize the files in the file share with an on-prem server. which of the following would you need to implement to fulfill this requirement? Choose 3 answers

Answer 14

install File sync agent
Register
Create Sync Group

Question 15

4 actions to connect your on-prem network to azure by using a site to site VPN

Answer 15

Deploy gateway subnet
Deploy a VPN gateway
Deploy Local network
Deploy VPN connection

Question 16

four actions to synchronize files from your on-prem file server

Answer 16

Deploy azure file sync agent
register server with storage sync service
Create sync group
create endpoint

Question 17

what do you need to establish a point-to-site VPN connection to the same Virtual network

Answer 17

export the client certificate

Question 18

Network Watcher was created - you have to record all of the successful and failed connection attempts to the VMs - (3 actioins)

Answer 18

Ensure to register Microsoft.insights
create storage account
network watcher flow logs

Question 19

how to configure Routing Table (RT)

Answer 19

assign the IP in the question
next hop virtual appliance
assign to - Gateway subnet

Question 20

four Requirement to transfer 20TB of Data to using import/export

Answer 20

Prepare the external disks
Create an import job
ship the external disks
update the import job

Question 21

you have a domain registered at a 3rd party registrar - what are 3 things needed to ensure that you can create azure ad users that have names containing the domain name

Answer 21

verify domain
add a customer domain name
add a record to the public whizlabs.com DNS zone

Question 22

the security department wants to check on any network intrusions into the virtual networks. which of the following tool could be used for this purpose

Answer 22

packet Capture

Question 23

what goes into “slot 1”

“Microsoft.Resources/subscriptions/resourceGroups/read”

Answer 23

“Microsoft.Authorization/*/read”