Microsoft Microsoft Certifications AZ-104 Questions & Answers

• Question 121:

  You have two Azure virtual networks named VNet1 and VNet2. VNet1 contains an Azure virtual machine named VM1. VNet2 contains an Azure virtual machine named VM2.

  VM1 hosts a frontend application that connects to VM2 to retrieve data.

  Users report that the frontend application is slower than usual.

  You need to view the average round-trip time (RTT) of the packets from VM1 to VM2.

  Which Azure Network Watcher feature should you use?

  A. NSG flow logs

  B. Connection troubleshoot

  C. IP flow verify

  D. Connection monitor

  Correct Answer: D

  The connection monitor capability monitors communication at a regular interval and informs you of reachability, latency, and network topology changes between the VM and the endpoint Incorrect Answers:

  A: The IP flow verify capability enables you to specify a source and destination IPv4 address, port, protocol (TCP or UDP), and traffic direction (inbound or outbound). IP flow verify then tests the communication and informs you if the

  connection succeeds or fails. If the connection fails, IP flow verify tells you which security rule allowed or denied the communication, so that you can resolve the problem.

  B: The connection troubleshoot capability enables you to test a connection between a VM and another VM, an FQDN, a URI, or an IPv4 address. The test returns similar information returned when using the connection monitor capability, but tests the connection at a point in time, rather than monitoring it over time, as connection monitor does.

  D: The NSG flow log capability allows you to log the source and destination IP address, port, protocol, and whether traffic was allowed or denied by an NSG.

  Reference: https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-monitoring-overview

• Question 122:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have an Azure subscription that contains 10 virtual networks. The virtual networks are hosted in separate resource groups.

  Another administrator plans to create several network security groups (NSGs) in the subscription.

  You need to ensure that when an NSG is created, it automatically blocks TCP port 8080 between the virtual networks.

  Solution: You assign a built-in policy definition to the subscription.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Resource policy definition used by Azure Policy enables you to establish conventions for resources in your organization by describing when the policy is enforced and what effect to take. However, there are no built-in policy definitions. Though there are sample policy defintions.

  Reference: https://docs.microsoft.com/en-us/azure/azure-policy/policy-definition

• Question 123:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have an Azure subscription that contains 10 virtual networks. The virtual networks are hosted in separate resource groups.

  Another administrator plans to create several network security groups (NSGs) in the subscription.

  You need to ensure that when an NSG is created, it automatically blocks TCP port 8080 between the virtual networks.

  Solution: You configure a custom policy definition, and then you assign the policy to the subscription.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  Resource policy definition used by Azure Policy enables you to establish conventions for resources in your organization by describing when the policy is enforced and what effect to take. By defining conventions, you can control costs and

  more easily manage your resources.

  References:

  https://docs.microsoft.com/en-us/azure/azure-policy/policy-definition

• Question 124:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have an Azure subscription that contains 10 virtual networks. The virtual networks are hosted in separate resource groups.

  Another administrator plans to create several network security groups (NSGs) in the subscription.

  You need to ensure that when an NSG is created, it automatically blocks TCP port 8080 between the virtual networks.

  Solution: From the Resource providers blade, you unregister the Microsoft.ClassicNetwork provider.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  You need to use a custom policy definition, because there is not a built-in policy.

  Resource policy definition used by Azure Policy enables you to establish conventions for resources in your organization by describing when the policy is enforced and what effect to take. By defining conventions, you can control costs and

  more easily manage your resources.

  Reference:

  https://docs.microsoft.com/en-us/azure/azure-policy/policy-definition

  https://docs.microsoft.com/en-us/azure/governance/policy/samples/built-in-policies

• Question 125:

  You have an Azure web app named App1. App1 has the deployment slots shown in the following table:

  

  In webapp1-test, you test several changes to App1.

  You back up App1.

  You swap webapp1-test for webapp1-prod and discover that App1 is experiencing performance issues.

  You need to revert to the previous version of App1 as quickly as possible.

  What should you do?

  A. Redeploy App1

  B. Swap the slots

  C. Clone App1

  D. Restore the backup of App1

  Correct Answer: B

  When you swap deployment slots, Azure swaps the Virtual IP addresses of the source and destination slots, thereby swapping the URLs of the slots. We can easily revert the deployment by swapping back. You can validate app changes in a staging deployment slot before swapping it with the production slot. Deploying an app to a slot first and swapping it into production makes sure that all instances of the slot are warmed up before being swapped into production. This eliminates downtime when you deploy your app. The traffic redirection is seamless, and no requests are dropped because of swap operations. You can automate this entire workflow by configuring auto swap when pre-swap validation isn't needed. After a swap, the slot with previously staged app now has the previous production app. If the changes swapped into the production slot aren't as you expect, you can perform the same swap immediately to get your "last known good site" back. Reference: https://docs.microsoft.com/en-us/azure/app-service/deploy-staging-slots

• Question 126:

  You have an Azure subscription named Subscription1 that is used be several departments at your company. Subscription1 contains the resources in the following table:

  

  Another administrator deploys a virtual machine named VM1 and an Azure Storage account named storage2 by using a single Azure Resource Manager template.

  You need to view the template used for the deployment.

  From which blade can you view the template that was used for the deployment?

  A. RG1

  B. VM1

  C. Storage1

  D. Container1

  Correct Answer: A

  1.

  View template from deployment history

  Go to the resource group for your new resource group. Notice that the portal shows the result of the last deployment. Select this link.

  2.

  You see a history of deployments for the group. In your case, the portal probably lists only one deployment. Select this deployment.

  

  

  The portal displays a summary of the deployment. The summary includes the status of the deployment and its operations and the values that you provided for parameters. To see the template that you used for the deployment, select View template.

  

  References: https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-manager-export-template

• Question 127:

  You recently created a new Azure subscription that contains a user named Admin1.

  Admin1 attempts to deploy an Azure Marketplace resource by using an Azure Resource Manager template. Admin1 deploys the template by using Azure PowerShell and receives the following error message: "User failed validation to

  purchase resources. Error message: "Legal terms have not been accepted for this item on this subscription. To accept legal terms, please go to the Azure portal (http://go.microsoft.com/fwlink/?LinkId=534873) and configure programmatic

  deployment for the Marketplace item or create it there for the first time."

  You need to ensure that Admin1 can deploy the Marketplace resource successfully.

  What should you do?

  A. From Azure PowerShell, run the Set-AzApiManagementSubscription cmdlet

  B. From the Azure portal, register the Microsoft.Marketplace resource provider

  C. From Azure PowerShell, run the Set-AzMarketplaceTerms cmdlet

  D. From the Azure portal, assign the Billing administrator role to Admin1

  Correct Answer: C

  The Set-AzMarketplaceTerms cmdlet saves the terms object for given publisher id(Publisher), offer id(Product) and plan id(Name) tuple.

  Reference:

  https://docs.microsoft.com/en-us/powershell/module/az.marketplaceordering/set- azmarketplaceterms?view=azps-4.5.0

• Question 128:

  You have an Azure virtual machine named VM1 that runs Windows Server 2019. You sign in to VM1 as a user named User1 and perform the following actions:

  1.

  Create files on drive C.

  2.

  Create files on drive D.

  3.

  Modify the screen saver timeout.

  4.

  Change the desktop background.

  You plan to redeploy VM1.

  Which changes will be lost after you redeploy VM1?

  A. the modified screen saver timeout

  B. the new desktop background

  C. the new files on drive D

  D. The new files on drive C

  Correct Answer: C

  As D drive is temporary storage so new files on D drive will be lost. The screensaver, wall paper, new files on C drive are available after Redeploy.

  Reference:

  https://docs.microsoft.com/en-us/azure/virtual-machines/troubleshooting/redeploy-to-new-node- windows

• Question 129:

  You have an Azure subscription.

  You have an on-premises virtual machine named VM1. The settings for VM1 are shown in the exhibit. (Click the Exhibit tab.)

  

  You need to ensure that you can use the disks attached to VM1 as a template for Azure virtual machines.

  What should you modify on VM1?

  A. Integration Services

  B. the network adapters

  C. the memory

  D. the hard drive

  E. the processor

  Correct Answer: D

  From the exhibit we see that the disk is in the VHDX format. Before you upload a Windows virtual machines (VM) from on-premises to Microsoft Azure, you must prepare the virtual hard disk (VHD or VHDX). Azure supports only generation 1 VMs that are in the VHD file format and have a fixed sized disk. The maximum size allowed for the VHD is 1,023 GB. You can convert a generation 1 VM from the VHDX file system to VHD and from a dynamically expanding disk to fixed-sized. References: https://docs.microsoft.com/en-us/azure/virtual-machines/windows/prepare-for-upload-vhd-image?toc=%2fazure%2fvirtual-machines%2fwindows%2ftoc.json

• Question 130:

  You plan to deploy three Azure virtual machines named VM1, VM2, and VM3. The virtual machines will host a web app named App1.

  You need to ensure that at least two virtual machines are available if a single Azure datacenter becomes unavailable.

  What should you deploy?

  A. all three virtual machines in a single Availability Zone

  B. all virtual machines in a single Availability Set

  C. each virtual machine in a separate Availability Zone

  D. each virtual machine in a separate Availability Set

  Correct Answer: C

  Availability sets are a datacenter configuration to provide VM redundancy and availability. This configuration within a datacenter ensures that during either a planned or unplanned maintenance event, at least one virtual machine is available.

  Reference: https://docs.microsoft.com/en-us/azure/virtual-machines/windows/manage-availability https://docs.microsoft.com/en-us/azure/virtual-machines/windows/tutorial-availability-sets