Microsoft Microsoft Certifications AZ-104 Questions & Answers

• Question 381:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You manage a virtual network named VNet1 that is hosted in the West US Azure region.

  VNet1 hosts two virtual machines named VM1 and VM2 that run Windows Server.

  You need to inspect all the network traffic from VM1 to VM2 for a period of three hours.

  Solution: From Azure Network Watcher, you create a connection monitor.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Network Watcher Connection Monitor enables you to configure and track connection reachability, latency, and network topology changes. It helps reduce the amount of time to detect connectivity problems. The returned results can provide

  insights into whether a connectivity problem is due to a platform or a user configuration problem. This is not used in cases where we need to inspect for all the network traffic from one vm to another vm. On the other hand Network Watcher

  packet capture allows you to create capture sessions to track traffic to and from a virtual machine. So in this scenario we need to use Network Watcher packet capture

  References:

  https://azure.microsoft.com/en-in/updates/general-availability-azure-network-watcher-connection-monitor-in-all-public-regions/#:~:text=Network%20Watcher%20Connection%20Monitor%20helps,or%20a%20user%20con figuration%

  20problem

  https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-packet-capture- manage-portal

• Question 382:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You manage a virtual network named VNet1 that is hosted in the West US Azure region.

  VNet1 hosts two virtual machines named VM1 and VM2 that run Windows Server.

  You need to inspect all the network traffic from VM1 to VM2 for a period of three hours.

  Solution: From Azure Network Watcher, you create a packet capture.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  Network Watcher variable packet capture allows you to create packet capture sessions to track traffic to and from a virtual machine. Packet capture helps to diagnose network anomalies both reactively and proactively. Other uses include

  gathering network statistics, gaining information on network intrusions, to debug client-server communications and much more.

  Reference:

  https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-packet-capture-overview

• Question 383:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You manage a virtual network named VNet1 that is hosted in the West US Azure region.

  VNet1 hosts two virtual machines named VM1 and VM2 that run Windows Server.

  You need to inspect all the network traffic from VM1 to VM2 for a period of three hours.

  Solution: From Performance Monitor, you create a Data Collector Set (DCS).

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Network performance monitor allows you to monitor connectivity and latencies across hybrid network architectures, Expressroute circuits, and service/application endpoints. With an data collector set we can count specified network traffic, but we cannot inspect it. For this we would need a network watcher Packet Capture.

  References: https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-monitoring-overview https://docs.microsoft.com/en-us/azure/azure-monitor/insights/network-performance-monitor References: https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-monitoring-overview

• Question 384:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have an Azure virtual machine named VM1. VM1 was deployed by using a custom Azure Resource Manager template named ARM1.json.

  You receive a notification that VM1 will be affected by maintenance.

  You need to move VM1 to a different host immediately.

  Solution: From the Update management blade, you click Enable.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  You would need to Redeploy the VM.

  References: https://docs.microsoft.com/en-us/azure/virtual-machines/windows/redeploy-to-new-node

• Question 385:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure virtual machine named VM1. VM1

  was deployed by using a custom Azure Resource Manager template named ARM1.json.

  You receive a notification that VM1 will be affected by maintenance.

  You need to move VM1 to a different host immediately.

  Solution: Solution: From the Overview blade, you move the virtual machine to a different subscription.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  You would need to Redeploy the VM.

  References:

  https://docs.microsoft.com/en-us/azure/virtual-machines/windows/redeploy-to-new-node

• Question 386:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have an Azure virtual machine named VM1. VM1 was deployed by using a custom Azure Resource Manager template named ARM1.json.

  You receive a notification that VM1 will be affected by maintenance.

  You need to move VM1 to a different host immediately.

  Solution: From the Overview blade, you move the virtual machine to a different subscription.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  You should redeploy the VM.

  References:

  https://docs.microsoft.com/en-us/azure/virtual-machines/windows/redeploy-to-new-node

• Question 387:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have an Azure virtual machine named VM1. VM1 was deployed by using a custom Azure Resource Manager template named ARM1.json.

  You receive a notification that VM1 will be affected by maintenance.

  You need to move VM1 to a different host immediately.

  Solution: From the Redeploy blade, you click Redeploy.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  When you redeploy a VM, it moves the VM to a new node within the Azure infrastructure and then powers it back on, retaining all your configuration options and associated resources.

  References:

  https://docs.microsoft.com/en-us/azure/virtual-machines/windows/redeploy-to-new-node

• Question 388:

  You have an Azure subscription that contains two resource groups named RG1 and RG2. RG2 does not contain any resources. RG1 contains the resources in the following table.

  

  Which resource can you move to RG2?

  A. W10_OsDisk

  B. VNet1

  C. VNet3

  D. W10

  Correct Answer: B

  When moving a virtual network, you must also move its dependent resources. For example, you must move gateways with the virtual network. VM W10, which is in Vnet1, is not a dependent resource. Incorrect Answers:

  A: Managed disks don't support move.

  C: Virtual networks (classic) can't be moved.

  D: Virtual machines with the managed disks cannot be moved.

  References:

  https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-move- resources#virtual-machines-limitations

• Question 389:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your company has 100 users located in an office in Paris.

  The on-premises network contains the servers shown in the following table.

  

  You create a new subscription. You need to move all the servers to Azure. Solution: You use the Data Migration Assistant tool.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  The Data Migration Assistant tool is used to assess on-premises SQL Server instance(s) migrating to Azure SQL database(s).

  Reference:

  https://docs.microsoft.com/en-us/sql/dma/dma-overview?view=sql-server-ver15

• Question 390:

  You create an Azure subscription that is associated to a basic Azure Active Directory (Azure AD) tenant. You need to receive an email notification when any user activates an administrative role. What should you do?

  A. Purchase Azure AD Premium 92 and configure Azure AD Privileged Identity Management,

  B. Purchase Enterprise Mobility + Security E3 and configure conditional access policies.

  C. Purchase Enterprise Mobility + Security E5 and create a custom alert rule in Azure Security Center.

  D. Purchase Azure AD Premium PI and enable Azure AD Identity Protection.

  Correct Answer: A

  When key events occur in Azure AD Privileged Identity Management (PIM), email notifications are sent. For example, PIM sends emails for the following events:

  1.

  When a privileged role activation is pending approval

  2.

  When a privileged role activation request is completed

  3.

  When a privileged role is activated

  4.

  When a privileged role is assigned

  5.

  When Azure AD PIM is enabled

  References:

  https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim- email-notifications