Microsoft Microsoft Certifications AZ-104 Questions & Answers

• Question 391:

  You have an Azure subscription that contains 10 virtual machines.

  You need to ensure that you receive an email message when any virtual machines are powered off, restarted, or deallocated.

  What is the minimum number of rules and action groups that you require?

  A. three rules and three action groups

  B. one rule and one action group

  C. three rules and one action group

  D. one rule and three action groups

  Correct Answer: C

  An action group is a collection of notification preferences defined by the user. Azure Monitor and Service

  Health alerts are configured to use a specific action group when the alert is triggered. Various alerts may use the same action group or different action groups depending on the user's requirements.

  References:

  https://docs.microsoft.com/en-us/azure/monitoring-and-diagnostics/monitoring-action-groups

• Question 392:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your company has 100 users located in an office in Paris.

  The on-premises network contains the servers shown in the following table.

  

  You create a new subscription. You need to move all the servers to Azure.

  Solution: You use Azure Site Recovery.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  As an organization you need to adopt a business continuity and disaster recovery (BCDR) strategy that keeps your data safe, and your apps and workloads online, when planned and unplanned outages occur.

  Azure Recovery Services contributes to your BCDR strategy:

  Site Recovery service: Site Recovery helps ensure business continuity by keeping business apps and workloads running during outages. Site Recovery replicates workloads running on physical and virtual machines (VMs) from a primary site

  to a secondary location. When an outage occurs at your primary site, you fail over to secondary location, and access apps from there. After the primary location is running again, you can fail back to it.

  Backup service: The Azure Backup service keeps your data safe and recoverable.

  Site Recovery can manage replication for:

  1.

  Azure VMs replicating between Azure regions.

  2.

  On-premises VMs, Azure Stack VMs, and physical servers.

  Reference:

  https://docs.microsoft.com/en-us/azure/site-recovery/site-recovery-overview

• Question 393:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  Your company has 100 users located in an office in Paris.

  The on-premises network contains the servers shown in the following table.

  

  You create a new subscription. You need to move all the servers to Azure.

  Solution: You run azcopy.exe.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

• Question 394:

  You have an Azure App Service plan that hosts an Azure App Service named App1.

  You configure one production slot and four staging slots for App1.

  You need to allocate 10 percent of the traffic to each staging slot and 60 percent of the traffic to the production slot.

  What should you add to Appl1?

  A. slots to the Testing in production blade

  B. a performance test

  C. a WebJob

  D. templates to the Automation script blade

  Correct Answer: A

  Besides swapping, deployment slots offer another killer feature: testing in production. Just like the name suggests, using this, you can actually test in production. This means that you can route a specific percentage of user traffic to one or

  more of your deployment slots.

  Example:

  

  References: https://stackify.com/azure-deployment-slots/

• Question 395:

  You have an Azure Active Directory (Azure AD) tenant that has Azure AD Privileged Identity Management configured.

  You have 10 users who are assigned the Security Administrator role for the tenant. You need the users to verify whether they still require the Security Administrator role.

  What should you do?

  A. From Azure AD Identity Protection, configure a user risk policy.

  B. From Azure AD Privileged Identity Management, create an access review.

  C. From Azure AD Identity Protection, configure the Weekly Digest.

  D. From Azure AD Privileged Identity Management, create a conditional access policy.

  Correct Answer: B

  References:

  https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim- how-to-start-security-review

  To reduce the risk associated with stale role assignments, you should regularly review access. You can use Azure AD Privileged Identity Management (PIM) to create access reviews for privileged Azure AD roles. You can also configure

  recurring access reviews that occur automatically.

  Steps:

  1.

  Sign in to Azure portal with a user that is a member of the Privileged role administrator role.

  2.

  Open Azure AD Privileged Identity Management.

  3.

  Select Azure AD roles.

  4.

  Under Manage, select Access reviews, and then select New.

  

  References:

  https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim- how-to-start-security-review

• Question 396:

  You plan to migrate an on-premises Hyper-V environment to Azure by using Azure Site Recovery. The Hyper-V environment is managed by using Microsoft System Center Virtual Machine Manager (VMM).

  The Hyper-V environment contains the virtual machines in the following table.

  

  Which virtual machine can be migrated by using Azure Site Recovery?

  A. DC1

  B. FS1

  C. CA1

  D. SQL1

  Correct Answer: D

  DC1 : Not supported as it is Gen2 and OS disk size is greater than 300 GB FS1 : Not supported as it is Gen2 and Linux VM. Linux Generation 2 VMs aren't supported. CA1 : Not supported as bitlocker is enabled. BitLocker must be disabled before you enable replication for a VM. SQL1: Supported Reference: https://docs.microsoft.com/en-us/azure/site-recovery/hyper-v-azure-support-matrix#azure-vm-requirements

• Question 397:

  You have an Azure Active Directory (Azure AD) tenant named Tenant1 and an Azure subscription named You enable Azure AD Privileged Identity Management. You need to secure the members of the Lab Creator role. The solution must

  ensure that the lab creators request access when they create labs.

  What should you do first?

  A. From Azure AD Privileged Identity Management, edit the role settings for Lab Creator.

  B. From Subscription1 edit the members of the Lab Creator role.

  C. From Azure AD Identity Protection, creates a user risk policy.

  D. From Azure AD Privileged Identity Management, discover the Azure resources of Conscription.

  Correct Answer: A

  As a Privileged Role Administrator you can:

  Enable approval for specific roles

  Specify approver users and/or groups to approve requests View request and approval history for all privileged roles References:

  https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim- configure

• Question 398:

  You have an Azure tenant that contains two subscriptions named Subscription1 and Subscription2.

  In Subscription1, you deploy a virtual machine named Server1 that runs Windows Server 2016. Server1 uses managed disks.

  You need to move Server1 to Subscription2. The solution must minimize administration effort.

  What should you do first?

  A. In Subscription2, create a copy of the virtual disk.

  B. From Azure PowerShell, run the Move-AzureRmResource cmdlet.

  C. Create a snapshot of the virtual disk.

  D. Create a new virtual machine in Subscription2.

  Correct Answer: B

  To move existing resources to another resource group or subscription, use the Move- AzureRmResource cmdlet.

  References:

  https://docs.microsoft.com/en-in/azure/azure-resource-manager/resource-group-move- resources#moveresources

• Question 399:

  You create an Azure Storage account named contosostorage.

  You plan to create a file share named data.

  Users need to map a drive to the data file share from home computers that run Windows 10. Which port should be open between the home computers and the data file share?

  A. 80

  B. 443

  C. 445

  D. 3389

  Correct Answer: C

  Ensure port 445 is open: The SMB protocol requires TCP port 445 to be open; connections will fail if port 445 is blocked.

  References:

  https://docs.microsoft.com/en-us/azure/storage/files/storage-how-to-use-files-windows

• Question 400:

  You have an Azure virtual machine named VM1 that you use for testing. VM1 is protected by Azure Backup.

  You delete VM1.

  You need to remove the backup data stored for VM1.

  What should you do first?

  A. Modify the backup policy.

  B. Delete the Recovery Services vault.

  C. Stop the backup.

  D. Delete the storage account.

  Correct Answer: C

  Azure Backup provides backup for virtual machines -- created through both the classic deployment model and the Azure Resource Manager deployment model -- by using custom-defined backup policies in a Recovery Services vault. With the

  release of backup policy management, customers can manage backup policies and model them to meet their changing requirements from a single window. Customers can edit a policy, associate more virtual machines to a policy, and delete

  unnecessary policies to meet their compliance requirements.

  Incorrect Answers:

  You can't delete a Recovery Services vault if it is registered to a server and holds backup data. If you try to delete a vault, but can't, the vault is still configured to receive backup data.

  References:

  https://azure.microsoft.com/en-in/updates/azure-vm-backup-policy-management/