Microsoft Microsoft Certifications AZ-104 Questions & Answers

• Question 141:

  You have an Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com that contains 100 user accounts.

  You purchase 10 Azure AD Premium P2 licenses for the tenant.

  You need to ensure that 10 users can use all the Azure AD Premium features.

  What should you do?

  A. From the Groups blade of each user, invite the users to a group.

  B. From the Licenses blade of Azure AD, assign a license.

  C. From the Directory role blade of each user, modify the directory role.

  D. From the Azure AD domain, add an enterprise application.

  Correct Answer: B

  Many Azure Active Directory (Azure AD) services require you to license each of your users or groups (and associated members) for that service. Only users with active licenses will be able to access and use the licensed Azure AD services

  for which that's true. Licenses are applied per tenant and do not transfer to other tenants.

  Not all Microsoft services are available in all locations. Before a license can be assigned to a group, you must specify the Usage location for all members. You can set this value in the Azure Active Directory > Users > Profile > Settings area in

  Azure AD. Any user whose usage location is not specified inherits the location of the Azure AD organization.

  You can add the licensing rights to users or to an entire group. Check the reference link for the steps.

  References:

  https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/license-users-groups

• Question 142:

  You have an Azure subscription named Subscription1 and an on-premises deployment of Microsoft System Center Service Manager.

  Subscription1 contains a virtual machine named VM1.

  You need to ensure that an alert is set in Service Manager when the amount of available memory on VM1 is below 10 percent.

  What should you do first?

  A. Create a notification.

  B. Create an automation runbook.

  C. Deploy the IT Service Management Connector (ITSM).

  D. Deploy a function app.

  Correct Answer: C

  The IT Service Management Connector (ITSMC) allows you to connect Azure and a supported IT Service Management (ITSM) product/service, such as the Microsoft System Center Service Manager. With ITSMC, you can create work items in ITSM tool, based on your Azure alerts (metric alerts, Activity Log alerts and Log Analytics alerts).

  References: https://docs.microsoft.com/en-us/azure/azure-monitor/platform/itsmc-overview

• Question 143:

  You have an Azure Active Directory (Azure AD) tenant that contains 5,000 user accounts.

  You create a new user account named AdminUser1.

  You need to assign the User administrator administrative role to AdminUser1.

  What should you do from the user account properties?

  A. From the Directory role blade, modify the directory role.

  B. From the Groups blade, invite the user account to a new group.

  C. From the Licenses blade, assign a new license.

  Correct Answer: A

  Assign a role to a user

  1.

  Sign in to the Azure portal with an account that's a global admin or privileged role admin for the directory.

  2.

  Select Azure Active Directory, select Users, and then select a specific user from the list.

  3.

  For the selected user, select Directory role, select Add role, and then pick the appropriate admin roles from the Directory roles list, such as Conditional access administrator.

  4.

  Press Select to save.

  References:

  https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-users- assign-role-azure-portal

• Question 144:

  You have an Azure subscription that has a Recovery Services vault named Vault1. The subscription contains the virtual machines shown in the following table.

  

  You plan to schedule backups to occur every night at 23:00. Which virtual machines can you back up by using Azure Backup?

  A. VM1 only

  B. VM1 and VM3 only

  C. VM1. VM2, VM3andVM4

  D. VM1 and VM2 only

  Correct Answer: C

  Azure Backup supports backup of 64-bit Windows server operating system from Windows Server 2008.

  Azure Backup supports backup of 64-bit Windows 10 operating system.

  Azure Backup supports backup of 64-bit Ubuntu Server operating system from Ubuntu 12.04.

  Azure Backup supports backup of VM that are shutdown or offline.

  Reference:

  https://docs.microsoft.com/en-us/azure/backup/backup-support-matrix-iaas

  https://docs.microsoft.com/en-us/azure/virtual-machines/linux/endorsed-distros

• Question 145:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have an Azure virtual machine named VM1 that runs Windows Server 2016.

  You need to create an alert in Azure when more than two error events are logged to the System log on VM1 within an hour.

  Solution: You create an Azure Log Analytics workspace and configure the data settings. You add an extension to VM1. You create an alert in Azure Monitor and specify the Log Analytics workspace as the source.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Instead: You create an Azure Log Analytics workspace and configure the data settings.

  You install the Microsoft Monitoring Agent on VM1.

  You create an alert in Azure Monitor and specify the Log Analytics workspace as the source.

  Reference:

  https://docs.microsoft.com/en-us/azure/azure-monitor/platform/agents-overview

• Question 146:

  You have an Azure subscription named AZPT1 that contains the resources shown in the following table:

  

  You create a new Azure subscription named AZPT2.

  You need to identify which resources can be moved to AZPT2.

  Which resources should you identify?

  A. VM1, storage1, VNET1, and VM1Managed only

  B. VM1 and VM1Managed only

  C. VM1, storage1, VNET1, VM1Managed, and RVAULT1

  D. RVAULT1 only

  Correct Answer: C

  You can move a VM and its associated resources to a different subscription by using the Azure portal. You can now move an Azure Recovery Service (ASR) Vault to either a new resource group within the current subscription or to a new subscription. Reference: https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/move-resource-group-and-subscription https://docs.microsoft.com/en-us/azure/key-vault/general/keyvault-move-subscription

• Question 147:

  Your network contains an on-premises Active Directory forest named contoso.com that contains two domains named contoso.com and east.contoso.com. The forest contains the users shown in the following table.

  

  You plan to sync east.contoso.com to an Azure Active Directory (Azure AD) tenant by using Azure AD Connect.

  You need to select an account for Azure AD Connect to use to connect to the forest.

  Which account should you select?

  A. User1

  B. User2

  C. User3

  D. User4

  Correct Answer: D

  It is no longer supported to use an enterprise admin or a domain admin account as the AD DS Connector account.

  Reference:

  https://docs.microsoft.com/en-us/azure/active-directory/hybrid/reference-connect-accounts- permissions

• Question 148:

  You have an Azure subscription named Subscription1 that contains an Azure Log Analytics workspace named Workspace1.

  You need to view the error from a table named Event.

  Which query should you run in Workspace1?

  A. Event | where EventType is "error"

  B. Event | search "error"

  C. select * from Event where EventType == "error"

  D. Get-Event Event | where {$_.EventType -eq "error"}

  Correct Answer: B

  The search operator provides a multi-table/multi-column search experience.

  The syntax is:

  Table_name | search "search term"

  Note:

  There are several versions of this question in the exam. The question has three possible correct answers:

  search in (Event) "error"

  Event | search "error"

  Event | where EventType == "error"

  Other incorrect answer options you may see on the exam include the following:

  Get-Event Event | where {$_.EventTye -eq "error"}

  select * from Event where EventType is "error"

  search in (Event) * | where EventType -eq "error"

  Reference:

  https://docs.microsoft.com/en-us/azure/azure-monitor/log-query/search-queries

  https://docs.microsoft.com/en-us/azure/azure-monitor/log-query/get-started-portal

  https://docs.microsoft.com/en-us/azure/data-explorer/kusto/query/searchoperator?pivots=azuredataexplorer

• Question 149:

  You have an Azure virtual machine named VM1 that runs Windows Server 2019.

  You save VM1 as a template named Template1 to the Azure Resource Manager library.

  You plan to deploy a virtual machine named VM2 from Template1.

  What can you configure during the deployment of VM2?

  A. virtual machine size

  B. operating system

  C. administrator username

  D. resource group

  Correct Answer: D

  When deploying a virtual machine from a template, you must specify:

  1.

  the Resource Group name and location for the VM

  2.

  the administrator username and password

  3.

  an unique DNS name for the public IP

  Reference: https://docs.microsoft.com/en-us/azure/virtual-machines/windows/ps-template

• Question 150:

  Your network contains an on-premises Active Directory domain named adatum.com. The domain contains an organizational unit (OU) named OU1. OU1 contains the objects shown in the following table.

  

  You sync OU1 to Azure Active Directory (Azure AD) by using Azure AD Connect.

  You need to identify which objects are synced to Azure AD.

  Which objects should you identify?

  A. User1 and Group1 only

  B. User1, Group1, and Group2 only

  C. User1, Group1, Group2, and Computer1

  D. Computer1 only

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/azure/active-directory-domain-services/synchronization