Microsoft Microsoft Certifications AZ-104 Questions & Answers

• Question 241:

  You have an Azure subscription that contains a storage account named storage1.

  You have the devices shown in the following table.

  

  From which devices can you use AzCopy to copy data to storage1?

  A. Device1 and Device2 only

  B. Device1, Device2 and Device3

  C. Device1 only

  D. Device1 and Device3 only

  Correct Answer: B

  AzCopy is supported in all three operating systems.

  First, download the AzCopy V10 executable file to any directory on your computer. AzCopy V10 is just an executable file, so there's nothing to install.

  Windows 64-bit (zip)

  Windows 32-bit (zip)

  Linux x86-64 (tar)

  Linux ARM64 Preview (tar)

  macOS (zip)

  Note: If you want to copy data to and from your Azure Table storage service, then install AzCopy version 7.3.

  https://docs.microsoft.com/en-us/azure/storage/common/storage-use-azcopy-v10

• Question 242:

  Your on-premises network contains a VPN gateway.

  You have an Azure subscription that contains the resources shown in the following table.

  

  You need to ensure that all the traffic from VM1 to storage1 travels across the Microsoft backbone network.

  What should you configure?

  A. Azure Application Gateway

  B. private endpoints

  C. a network security group (NSG)

  D. Azure Virtual WAN

  Correct Answer: B

  You can use private endpoints for your Azure Storage accounts to allow clients on a virtual network (VNet) to securely access data over a Private Link. The private endpoint uses a separate IP address from the VNet address space for each storage account service. Network traffic between the clients on the VNet and the storage account traverses over the VNet and a private link on the Microsoft backbone network, eliminating exposure from the public internet.

  Reference: https://learn.microsoft.com/en-us/azure/storage/common/storage-private-endpoints

• Question 243:

  You have an Azure subscription that contains the resources shown in the following table.

  

  You need to perform the tasks shown in the following table.

  

  Which tasks can you perform by using Azure Storage Explorer?

  A. Task1 and Task3 only

  B. Task1. Task2 and Task3 only

  C. Task1Task2 and Task3 only

  D. Task2, Task3, and Task4 only

  E. Take1,Take2, Take3, and Take4

  Correct Answer: D

  https://learn.microsoft.com/en-us/azure/vs-azure-tools-storage-explorer-files

• Question 244:

  You have an Azure subscription named Subscription' that contains an Azure Log Analytics workspace named Workspace', You need to view the error events from a table named Event.

  Which query should you run in Workspace1?

  A. Event | where EventType is "error"

  B. search in (Event) "error"

  C. select * from Event where EventType is "error"

  D. search in (Event) * | where EventType -eq "error"

  Correct Answer: B

• Question 245:

  You have a .NET Core application running in Azure App Services. You are expecting a huge influx of traffic to your application in the coming days. When your application experiences this spike in traffic, you want to detect any anomalies such as request errors or failed queries immediately. What service can you use to assure that you know about these types of errors related to your .NET application immediately?

  A. Application Insights Search

  B. Log analytics workspace

  C. Client-side monitoring

  D. Live Metrics Stream in Application Insights

  Correct Answer: D

  Live metrics stream includes such information as the number of incoming requests, the duration of those requests, and any failures that occur. You can also inspect critical performance metrics such as processor and memory.

• Question 246:

  You create an App Service plan named plan1 and an Azure web app named webapp1. You discover that the option to create a staging slot is unavailable. You need to create a staging slot for plan1. What should you do first?

  A. From webapp1, modify the Application settings.

  B. From webapp1, add a custom domain.

  C. From plan1, scale up the App Service plan.

  D. From plan1, scale out the App Service plan.

  Correct Answer: C

  Scale up: Get more CPU, memory, disk space, and extra features like dedicated virtual machines (VMs), custom domains and certificates, staging slots, autoscaling, and more. You scale up by changing the pricing tier of the App Service plan that your app belongs to.

  Reference: https://docs.microsoft.com/en-us/azure/app-service/manage-scale-up

• Question 247:

  You have the Azure virtual machines shown in the following table.

  

  A DNS service is install on VM1.

  You configure the DNS server settings for each virtual network as shown in the following exhibit.

  

  You need 10 ensure that all the virtual machines can resolve DNS names by using the DNS service on VM1. What should you do?

  A. Add service endpoints on VNET2 and VNET3.

  B. Configure peering between VNE11, VNETT2, and VNET3.

  C. Configure a conditional forwarder on VM1

  D. Add service endpoints on VNET1.

  Correct Answer: B

  An Azure AD DS DNS zone should only contain the zone and records for the managed domain itself.

  A conditional forwarder is a configuration option in a DNS server that lets you define a DNS domain, such as contoso.com, to forward queries to. Instead of the local DNS server trying to resolve queries for records in that domain, DNS queries

  are forwarded to the configured DNS for that domain. This configuration makes sure that the correct DNS records are returned, as you don't create a local a DNS zone with duplicate records in the managed domain to reflect those resources.

  To create a conditional forwarder in your managed domain, complete the following steps:

  1.

  Select your DNS zone, such as aaddscontoso.com.

  2.

  Select Conditional Forwarders, then right-select and choose New Conditional Forwarder...

  3.

  Enter your other DNS Domain, such as contoso.com, then enter the IP addresses of the DNS servers for that namespace, as shown in the following example:

  

  4. Check the box for Store this conditional forwarder in Active Directory, and replicate it as follows, then select the option for All DNS servers in this domain, as shown in the following example:

  

  5. To create the conditional forwarder, select OK. Name resolution of the resources in other namespaces from VMs connected to the managed domain should now resolve correctly. Queries for the DNS domain configured in the conditional forwarder are passed to the relevant DNS servers.

  Reference:

  https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-name-resolution-for-vms-and-role-instances https://docs.microsoft.com/en-us/azure/active-directory-domain-services/manage-dns

• Question 248:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your company has an Azure Active Directory (Azure AD) tenant that is configured for hybrid coexistence with the on-premises Active Directory domain.

  You have implemented Azure Backup to protect on-premises virtual machines (VMs).

  A user accidentally deletes a file from an on-premises VM named VM1.

  You need to recover the deleted file to an on-premises computer as quickly as possible.

  Solution: You use Instant Restore to recover the file.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  Instant restore is used to restore files and folders to the same machine from which the backup is taken or to alternative machines.

  Reference: https://docs.microsoft.com/en-us/azure/backup/backup-azure-restore-files-from-vm

  https://docs.microsoft.com/en-us/azure/backup/backup-azure-restore-windows-server

• Question 249:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have an Azure virtual machine named VM1 that runs Windows Server 2016.

  You need to create an alert in Azure when more than two error events are logged to the System event log on VM1 within an hour.

  Solution:

  1.

  You create an Azure Log Analytics workspace and configure the data settings.

  2.

  You install the Microsoft Monitoring Agent on VM1.

  3.

  You create an alert in Azure Monitor and specify the Log Analytics workspace as the source. Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  Alerts in Azure Monitor can identify important information in your Log Analytics repository.

  They are created by alert rules that automatically run log searches at regular intervals, and if results of the log search match particular criteria, then an alert record is created and it can be configured to perform an automated response. The

  Log Analytics agent collects monitoring data from the guest operating system and workloads of virtual machines in Azure, other cloud providers, and on-premises. It collects data into a Log Analytics workspace.

  References:

  https://docs.microsoft.com/en-us/azure/azure-monitor/learn/tutorial-response

  https://docs.microsoft.com/en-us/azure/azure-monitor/platform/agents-overview

• Question 250:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your company has an Azure Active Directory (Azure AD) tenant that is configured for hybrid coexistence with the on-premises Active Directory domain.

  You have implemented Azure Backup to protect on-premises virtual machines (VMs).

  A user accidentally deletes a file from an on-premises VM named VM1.

  You need to recover the deleted file to an on-premises computer as quickly as possible.

  Solution: You use Azure File Sync to recover the file.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/azure/storage/files/storage-sync-files-deployment-guide?tabs=azure- portal