Microsoft Microsoft Certifications AZ-104 Questions & Answers

• Question 261:

  Your company has virtual machines (VMs) hosted in Microsoft Azure. The VMs are located in a single Azure virtual network named VNet1.

  The company has users that work remotely. The remote workers require access to the VMs on VNet1.

  You need to provide access for the remote workers.

  What should you do?

  A. Configure a Site-to-Site (S2S) VPN.

  B. Configure a VNet-toVNet VPN.

  C. Configure a Point-to-Site (P2S) VPN.

  D. Configure DirectAccess on a Windows Server 2012 server VM.

  E. Configure a Multi-Site VPN

  Correct Answer: C

  A Point-to-Site (P2S) VPN gateway connection lets you create a secure connection to your virtual network from an individual client computer.

  Reference: https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-vpngateways

• Question 262:

  Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.

  Your company's Azure subscription includes two Azure networks named VirtualNetworkA and VirtualNetworkB.

  VirtualNetworkA includes a VPN gateway that is configured to make use of static routing. Also, a site-to- site VPN connection exists between your company's on-premises network and VirtualNetworkA.

  You have configured a point-to-site VPN connection to VirtualNetworkA from a workstation running Windows 10. After configuring virtual network peering between VirtualNetworkA and VirtualNetworkB, you confirm that you are able to access

  VirtualNetworkB from the company's on-premises network. However, you find that you cannot establish a connection to VirtualNetworkB from the Windows 10 workstation.

  You have to make sure that a connection to VirtualNetworkB can be established from the Windows 10 workstation.

  Solution: You choose the Allow gateway transit setting on VirtualNetworkB.

  Does the solution meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-point-to-site-routing

• Question 263:

  Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.

  Your company's Azure subscription includes two Azure networks named VirtualNetworkA and VirtualNetworkB.

  VirtualNetworkA includes a VPN gateway that is configured to make use of static routing. Also, a site-to- site VPN connection exists between your company's on-premises network and VirtualNetworkA.

  You have configured a point-to-site VPN connection to VirtualNetworkA from a workstation running Windows 10. After configuring virtual network peering between VirtualNetworkA and VirtualNetworkB, you confirm that you are able to access

  VirtualNetworkB from the company's on-premises network. However, you find that you cannot establish a connection to VirtualNetworkB from the Windows 10 workstation.

  You have to make sure that a connection to VirtualNetworkB can be established from the Windows 10 workstation.

  Solution: You download and re-install the VPN client configuration package on the Windows 10 workstation.

  Does the solution meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-point-to-site-routing

• Question 264:

  Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.

  Your company's Azure subscription includes two Azure networks named VirtualNetworkA and VirtualNetworkB.

  VirtualNetworkA includes a VPN gateway that is configured to make use of static routing. Also, a site-to- site VPN connection exists between your company's on-premises network and VirtualNetworkA.

  You have configured a point-to-site VPN connection to VirtualNetworkA from a workstation running Windows 10. After configuring virtual network peering between VirtualNetworkA and VirtualNetworkB, you confirm that you are able to access

  VirtualNetworkB from the company's on-premises network. However, you find that you cannot establish a connection to VirtualNetworkB from the Windows 10 workstation.

  You have to make sure that a connection to VirtualNetworkB can be established from the Windows 10 workstation.

  Solution: You choose the Allow gateway transit setting on VirtualNetworkA.

  Does the solution meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-about-point-to-site-routing

• Question 265:

  Your company has an Azure Active Directory (Azure AD) tenant that is configured for hybrid coexistence with the on-premises Active Directory domain.

  You plan to deploy several new virtual machines (VMs) in Azure. The VMs will have the same operating system and custom software requirements.

  You configure a reference VM in the on-premise virtual environment. You then generalize the VM to create an image.

  You need to upload the image to Azure to ensure that it is available for selection when you create the new Azure VMs.

  Which PowerShell cmdlets should you use?

  A. Add-AzVM

  B. Add-AzVhd

  C. Add-AzImage

  D. Add-AzImageDataDisk

  Correct Answer: B

  The Add-AzVhd cmdlet uploads on-premises virtual hard disks, in .vhd file format, to a blob storage account as fixed virtual hard disks.

  Reference: https://docs.microsoft.com/en-us/azure/virtual-machines/windows/upload-generalized-managed

• Question 266:

  Your company has an Azure Active Directory (Azure AD) tenant that is configured for hybrid coexistence with the on-premises Active Directory domain.

  The on-premise virtual environment consists of virtual machines (VMs) running on Windows Server 2012 R2 Hyper-V host servers.

  You have created some PowerShell scripts to automate the configuration of newly created VMs. You plan to create several new VMs.

  You need a solution that ensures the scripts are run on the new VMs.

  Which of the following is the best solution?

  A. Configure a SetupComplete.cmd batch file in the %windir%\setup\scripts directory.

  B. Configure a Group Policy Object (GPO) to run the scripts as logon scripts.

  C. Configure a Group Policy Object (GPO) to run the scripts as startup scripts.

  D. Place the scripts in a new virtual hard disk (VHD).

  Correct Answer: A

  After you deploy a Virtual Machine you typically need to make some changes before it's ready to use. This is something you can do manually or you could use Remote PowerShell to automate the configuration of your VM after deployment for example.

  But now there's a third alternative available allowing you customize your VM: the CustomScriptextension.

  This CustomScript extension is executed by the VM Agent and it's very straightforward: you specify which files it needs to download from your storage account and which file it needs to execute. You can even specify arguments that need to

  be passed to the script. The only requirement is that you execute a .ps1 file.

  Reference:

  https://docs.microsoft.com/en-us/windows-hardware/manufacture/desktop/add-a-custom-script-to- windows-setup

  https://azure.microsoft.com/en-us/blog/automating-vm-customization-tasks-using-custom-script-extension/

• Question 267:

  Your company has an Azure subscription.

  You need to deploy a number of Azure virtual machines (VMs) using Azure Resource Manager (ARM) templates. You have been informed that the VMs will be included in a single availability set.

  You are required to make sure that the ARM template you configure allows for as many VMs as possible to remain accessible in the event of fabric failure or maintenance.

  Which of the following is the value that you should configure for the platformFaultDomainCount property?

  A. 10

  B. 30

  C. Min Value

  D. Max Value

  Correct Answer: D

  The number of fault domains for managed availability sets varies by region - either two or three per region.

  Reference: https://docs.microsoft.com/en-us/azure/virtual-machines/windows/manage-availability

• Question 268:

  Your company has an Azure subscription.

  You need to deploy a number of Azure virtual machines (VMs) using Azure Resource Manager (ARM) templates. You have been informed that the VMs will be included in a single availability set.

  You are required to make sure that the ARM template you configure allows for as many VMs as possible to remain accessible in the event of fabric failure or maintenance.

  Which of the following is the value that you should configure for the platformUpdateDomainCount property?

  A. 10

  B. 20

  C. 30

  D. 40

  Correct Answer: B

  Each availability set can be configured with up to three fault domains and twenty update domains. https://docs.microsoft.com/en-us/azure/virtual-machines/availability-set-overview

• Question 269:

  You have an Azure virtual machine (VM) that has a single data disk. You have been tasked with attaching this data disk to another Azure VM.

  You need to make sure that your strategy allows for the virtual machines to be offline for the least amount of time possible.

  Which of the following is the action you should take FIRST?

  A. Stop the VM that includes the data disk.

  B. Stop the VM that the data disk must be attached to.

  C. Detach the data disk.

  D. Delete the VM that includes the data disk.

  Correct Answer: C

  You can simply detach a data disk from one VM and attach it to the other VM without stopping either of the VMs.

• Question 270:

  Your company has three virtual machines (VMs) that are included in an availability set.

  You try to resize one of the VMs, which returns an allocation failure message.

  It is imperative that the VM is resized.

  Which of the following actions should you take?

  A. You should only stop one of the VMs.

  B. You should stop two of the VMs.

  C. You should stop all three VMs.

  D. You should remove the necessary VM from the availability set.

  Correct Answer: C

  If the VM you wish to resize is part of an availability set, then you must stop all VMs in the availability set before changing the size of any VM in the availability set. The reason all VMs in the availability set must be stopped before performing the resize operation to a size that requires different hardware is that all running VMs in the availability set must be using the same physical hardware cluster. Therefore, if a change of physical hardware cluster is required to change the VM size then all VMs must be first stopped and then restarted one-by-one to a different physical hardware clusters.

  Reference: https://azure.microsoft.com/es-es/blog/resize-virtual-machines/