Microsoft Role-based AZ-104 Questions & Answers

• Question 331:

  You have an Azure Resource Manager template named Template1 that is used to deploy an Azure virtual machine. Template1 contains the following text:

  

  The variables section in Template1 contains the following text:

  "location": "westeurope"

  The resources section in Template1 contains the following text:

  

  You need to deploy the virtual machine to the West US location by using Template1. What should you do?

  A. Modify the location in the resource section to westus

  B. Select West US during the deployment

  C. Modify the location in the variables section to westus

  Correct Answer: A

  You can change the location in resources. Parameters used to define the value of some variables to be able to use in different places in the template resources. Resources are used only for complicated expressions. In any case, RM will only

  deploy from resources. In case the value is not mentioned directly, then it will check parameters if it is specified in the resources. Based on this question, the value of location is defined directly in resources. so you change the resources

  location value.

  Use location parameter. To allow flexibility when deploying your template, use a parameter to specify the location for resources. Set the default value of the parameter to resourceGroup().location.

  Reference:

  https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/resource-location?tabs=azure-powershell

  https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/template-syntax#resources

• Question 332:

  You have an Azure subscription that contains the resources shown in the following table.

  

  You need to deploy Application1 to Cluster1. Which command should you run?

  A. az acr build

  B. az aks create

  C. docker build

  D. kubectl apply

  Correct Answer: A

• Question 333:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have an Azure virtual machine named VM1 that runs Windows Server 2016.

  You need to create an alert in Azure when more than two error events are logged to the System event log on VM1 within an hour.

  Solution: You create an Azure storage account and configure shared access signatures (SASs). You install the Microsoft Monitoring Agent on VM1. You create an alert in Azure Monitor and specify the storage account as the source.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Instead: You create an Azure Log Analytics workspace and configure the data settings. You install the Microsoft Monitoring Agent on VM1. You create an alert in Azure Monitor and specify the Log Analytics workspace as the source.

  1.

  Creating an Azure storage account and configuring shared access signatures (SASs) is not necessary for monitoring events on a virtual machine. Azure Monitor can directly collect events from the VM's System event log using the Microsoft Monitoring Agent.

  2.

  The Microsoft Monitoring Agent can indeed collect logs and send them to Azure Monitor, but specifying a storage account as the source would not be the typical approach for monitoring System event logs. You would usually send the logs directly to a Log Analytics workspace.

  3.

  To monitor the System event log for specific events, you would set up a Log Analytics workspace, configure the Microsoft Monitoring Agent to send logs to that workspace, and then set up an alert based on a query that examines those logs.

  Reference: https://docs.microsoft.com/en-us/azure/azure-monitor/platform/agents-overview

• Question 334:

  Your company has a main office in Australia and several branch offices in Asia.

  The company's data center uses a VMware virtualization infrastructure to host several virtualized servers.

  You purchase an Azure subscription and plan to move all virtual machines to Azure to a resource group in the Australia Southeast location.

  You need to create an Azure Migrate migration project.

  Which geography should you select?

  A. Central India

  B. Australia Central

  C. Australia Southeast

  D. United States

  Correct Answer: C

  In Project Details, specify the project name, and geography in which you want to create the project. Review supported geographies for public and government clouds.

  

  References: https://docs.microsoft.com/en-us/azure/migrate/how-to-add-tool-first-time

• Question 335:

  You have an Azure subscription that contains a virtual network named VNet1. VNet 1 has two subnets named Subnet1 and Subnet2. VNet1 is in the West Europe Azure region. The subscription contains the virtual machines in the following table.

  

  You need to deploy an application gateway named AppGW1 to VNet1. What should you do first?

  A. Add a service endpoint.

  B. Add a virtual network.

  C. Move VM3 to Subnet1.

  D. Stop VM1 and VM2.

  Correct Answer: D

  If you have an existing virtual network, either select an existing empty subnet or create a new subnet in your existing virtual network solely for use by the application gateway. Verify that you have a working virtual network with a valid subnet. Make sure that no virtual machines or cloud deployments are using the subnet. The application gateway must be by itself in a virtual network subnet.

• Question 336:

  A web developer creates a web application that you plan to deploy as an Azure web app. Users must enter credentials to access the web application.

  You create a new web app named WebApp1 and deploy the web application to WebApp1.

  You need to disable anonymous access to WebApp1.

  What should you configure?

  A. Access control (IAM)

  B. Advanced Tools

  C. Deployment credentials

  D. Authentication/Authorization

  Correct Answer: D

  Anonymous access is an authentication method. It allows users to establish an anonymous connection.

  References: https://docs.microsoft.com/en-us/biztalk/core/guidelines-for-resolving-iis-permissions-problems

• Question 337:

  You have an Azure App Service plan named AdatumASP1 that hosts several Azure web apps.

  You discover that the web apps respond slowly.

  You need to provide additional memory and CPU resources to each instance of the web apps.

  What should you do?

  A. Add continues WebJob that use the multi-instance scale

  B. Scale out AdatumASP1

  C. Add a virtual machine scale set

  D. Scale up AdatumASP1

  Correct Answer: D

  References:

  https://github.com/MicrosoftDocs/azure-docs/blob/master/articles/app-service/web-sites-scale.md Scale up : Correct Choice

  Scale up: Get more CPU, memory, disk space, and extra features like dedicated virtual machines (VMs), custom domains and certificates, staging slots, autoscaling, and more. You scale up by changing the pricing tier of the App Service plan

  that your app belongs to.

  Scale out : Incorrect Choice

  Scale out: Increase the number of VM instances that run your app. You can scale out to as many as 30 instances, depending on your pricing tier. App Service Environments in Isolated tier further increases your scale-out count to 100

  instances. For more information about scaling out, see Scale instance count manually or automatically.

  Add continuous WebJobs : Incorrect Choice

  WebJobs is a feature of Azure App Service that enables you to run a program or script in the same instance as a web app, API app, or mobile app. Add continuous WebJobs will Starts immediately when the WebJob is created. To keep the

  job from ending, the program or script typically does its work inside an endless loop. If the job does end, you can restart it.Starts only when triggered manually or on a schedule.

  Add a virtual machine scale set : Incorrect Choice

  A virtual machine scale set allows you to deploy and manage a set of identical, autoscaling virtual machines. You can scale the number of VMs in the scale set manually. You can also define rules to autoscale based on resource usage such

  as CPU, memory demand, or network traffic. It will not increase the slowness of the apps.

  References:

  https://docs.microsoft.com/en-us/azure/app-service/manage-scale-up https://docs.microsoft.com/en-us/azure/app-service/webjobs-create#webjob-types

• Question 338:

  You are configuring Azure Active Directory (AD) Privileged Identity Management.

  You need to provide a user named Admm1 with read access to a resource group named RG1 for only one month.

  The user role must be assigned immediately.

  What should you do?

  A. Assign an active role.

  B. Assign an eligible role.

  C. Assign a permanently active role.

  D. Create a custom role and a conditional access policy.

  Correct Answer: B

  Azure AD Privileged Identity Management introduces the concept of an eligible admin. Eligible admins should be users that need privileged access now and then, but not all-day, every day. The role is inactive until the user needs access, then

  they complete an activation process and become an active admin for a predetermined amount of time.

  References:

  https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure

• Question 339:

  You have an Azure web app named App1 that streams video content to users. App1 is located in the East US Azure region.

  Users in North America stream the video content without any interruption.

  Users in Asia and Europe report that the video buffer often and do not play back smoothly.

  You need to recommend a solution to improve video streaming to the European and Asian users.

  What should you recommend?

  A. Scale out the App Service plan.

  B. Scale up the App Service plan.

  C. Configure an Azure Content Delivery Network (CDN) endpoint.

  D. Configure Azure File Sync.

  Correct Answer: C

  A content delivery network (CDN) is a distributed network of servers that can efficiently deliver web content to users. CDNs' store cached content on edge servers in point-of-presence (POP) locations that are close to end users, to minimize

  latency.

  Azure Content Delivery Network (CDN) offers developers a global solution for rapidly delivering high- bandwidth content to users by caching their content at strategically placed physical nodes across the world.

  

  Reference: https://docs.microsoft.com/en-us/azure/cdn/cdn-overview

• Question 340:

  You are building a custom Azure function app to connect to Azure Event Grid.

  You need to ensure that resources are allocated dynamically to the function app. Billing must be based on the executions of the app.

  What should you configure when you create the function app?

  A. the Windows operating system and the Consumption plan hosting plan

  B. the Windows operating system and the App Service plan hosting plan

  C. the Docker container and an App Service plan that uses the Bl1 pricing tier

  D. the Docker container and an App Service plan that uses the SI pricing

  Correct Answer: A

  Azure Functions runs in two different modes: Consumption plan and Azure App Service plan. The Consumption plan automatically allocates compute power when your code is running. Your app is scaled out when needed to handle load, and

  scaled down when code is not running.

  Incorrect Answers:

  B: When you run in an App Service plan, you must manage the scaling of your function app. References: https://docs.microsoft.com/en-us/azure/azure-functions/functions-create-first-azure-function