Microsoft Microsoft Certifications AZ-104 Questions & Answers

• Question 171:

  You have an Azure subscription that contains the resources shown in the following table.

  

  You need to create a network interface named NIC1. In which location can you create NIC1?

  A. East US and North Europe only.

  B. East US and West Europe only.

  C. East US, West Europe, and North Europe.

  D. East US only.

  Correct Answer: D

  A virtual network is required when you create a NIC. Select the virtual network for the network interface. You can only assign a network interface to a virtual network that exists in the same subscription and location as the network interface.

  Once a network interface is created, you cannot change the virtual network it is assigned to. The virtual machine you add the network interface to must also exist in the same location and subscription as the network interface.

  References:

  https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-network-interface

• Question 172:

  You have an Azure virtual machine named VM1.

  You use Azure Backup to create a backup of VM1 named Backup1. After creating Backup1, you perform the following changes to VM1:

  1.

  Modify the size of VM1.

  2.

  Copy a file named Budget.xls to a folder named Data.

  3.

  Reset the password for the built-in administrator account.

  4.

  Add a data disk to VM1.

  An administrator uses the Replace existing option to restore VM1 from Backup1. You need to ensure that all the changes to VM1 are restored.

  Which change should you perform again?

  A. Modify the size of VM1.

  B. Add a data disk.

  C. Reset the password for the built-in administrator account.

  D. Copy Budget.xls to Data.

  Correct Answer: D

  The scenario mentioned in the question, we are using the replace option. So in this case we would lose the existing data written to the disk after the backup was taken. The file was copied to the disk after the backup was taken. Hence, we

  would need to copy the file once again.

  References:

  https://docs.microsoft.com/en-us/azure/backup/backup-azure-arm-restore-vms#replace-existing-disks

• Question 173:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have an Azure virtual machine named VM1 that runs Windows Server 2016.

  You need to create an alert in Azure when more than two error events are logged to the System event log on VM1 within an hour.

  Solution: You create an Azure Log Analytics workspace and configure the data settings. You install the Microsoft Monitoring Agent on VM1. You create an alert in Azure Monitor and specify the Log Analytics workspace as the source.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  Alerts in Azure Monitor can identify important information in your Log Analytics repository. They are created by alert rules that automatically run log searches at regular intervals, and if results of the log search match particular criteria, then an

  alert record is created and it can be configured to perform an automated response.

  The Log Analytics agent collects monitoring data from the guest operating system and workloads of virtual machines in Azure, other cloud providers, and on- premises. It collects data into a Log Analytics workspace.

  Reference:

  https://docs.microsoft.com/en-us/azure/azure-monitor/learn/tutorial-response

  https://docs.microsoft.com/en-us/azure/azure-monitor/platform/agents-overview

• Question 174:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have an Azure virtual machine named VM1 that runs Windows Server 2016.

  You need to create an alert in Azure when more than two error events are logged to the System event log on VM1 within an hour.

  Solution: You create an Azure Log Analytics workspace and configure the data settings. You add the Microsoft Monitoring Agent VM extension to VM1. You create an alert in Azure Monitor and specify the Log Analytics workspace as the source.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  You add the Microsoft Monitoring Agent VM extension to VM1 > This is WRONG You Install the Microsoft Monitoring Agent VM agent to VM1 > This is Correct

  1.

  Log analytics agent - Install in VM.

  2.

  Log analytics workspace - collect the log files from Log Analytics Agent.

  3.

  Azure Monitor - Create alert based on logs read from Log Analytics Workspace.

  Reference: https://docs.microsoft.com/en-us/azure/azure-monitor/platform/agents-overview

• Question 175:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have an Azure subscription named Subscription1 that contains the resources shown in the following table.

  

  VM1 connects to a virtual network named VNET2 by using a network interface named NIC1.

  You need to create a new network interface named NIC2 for VM1.

  Solution: You create NIC2 in RG1 and West US.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  The virtual machine you attach a network interface to and the virtual network you connect it to must exist in the same location, here West US, also referred to as a region.

  References:

  https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-network-interface

• Question 176:

  You have an Azure subscription that contains the following resources:

  1.

  100 Azure virtual machines

  2.

  20 Azure SQL databases

  3.

  50 Azure file shares

  You need to create a daily backup of all the resources by using Azure Backup.

  What is the minimum number of backup policies that you must create?

  A. 1

  B. 2

  C. 3

  D. 150

  E. 170

  Correct Answer: C

  There is a limit of 100 VMs that can be associated to the same backup policy from portal. We recommend that for more than 100 VMs, create multiple backup policies with same schedule or different schedule.

  One policy for VMS, one for SQL databases, and one for the file shares.

  References:

  https://docs.microsoft.com/en-us/azure/backup/backup-azure-vm-backup-faq

• Question 177:

  You have an Azure subscription that includes data in following locations:

  

  You plan to export data by using Azure import/export job named Export1. You need to identify the data that can be exported by using Export1. Which data should you identify?

  A. DB1

  B. Table1

  C. container1

  D. Share1

  Correct Answer: C

  Supported storage types for Export jobs: Block blobs, Page blobs, and Append blobs supported https://learn.microsoft.com/en-us/azure/import-export/storage-import-export-requirements

• Question 178:

  You have an Azure subscription that contains the storage accounts shown in the following table.

  

  You need to identify which storage account can be converted to zone-redundant storage (ZRS) replication by requesting a live migration from Azure support.

  What should you identify?

  A. Storage1

  B. Storage2

  C. Storage3

  D. Storage4

  Correct Answer: B

  ZRS currently supports standard general-purpose v2, FileStorage and BlockBlobStorage storage account types.

  Incorrect Answers:

  A, not C: Live migration is supported only for storage accounts that use LRS replication. If your account uses GRS or RA-GRS, then you need to first change your account's replication type to LRS before proceeding. This intermediary step

  removes the secondary endpoint provided by GRS/RA- GRS.

  Also, only standard storage account types support live migration. Premium storage accounts must be migrated manually.

  D: ZRS currently supports standard general-purpose v2, FileStorage and BlockBlobStorage storage account types.

  References: https://docs.microsoft.com/en-us/azure/storage/common/storage-redundancy-zrs

• Question 179:

  You plan to use the Azure Import/Export service to copy files to a storage account.

  Which two files should you create before you prepare the drives for the import job? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. an XML manifest file

  B. a driveset CSV file

  C. a dataset CSV file

  D. a PowerShell PS1 file

  E. a JSON configuration file

  Correct Answer: BC

  B: Modify the driveset.csv file in the root folder where the tool resides.

  C: Modify the dataset.csv file in the root folder where the tool resides. Depending on whether you want to import a file or folder or both, add entries in the dataset.csv file

  References: https://docs.microsoft.com/en-us/azure/storage/common/storage-import-export-data-to-files

• Question 180:

  You have an Azure Active Directory (Azure AD) tenant named contoso.com that is synced to an Active Directory domain. The tenant contains the users shown in the following table.

  

  The users have the attributes shown in the following table.

  

  You need to ensure that you can enable Azure Multi-Factor Authentication (MFA) for all four users.

  Solution: You add an office phone number for User2.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  User3 requires a user account in Azure AD.

  Note: Your Azure AD password is considered an authentication method. It is the one method that cannot be disabled.

  References:

  https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-authentication- methods