Microsoft Microsoft Certifications AZ-104 Questions & Answers

• Question 421:

  You create the following resources in an Azure subscription:

  1.

  An Azure Container Registry instance named Registry1.

  2.

  An Azure Kubernetes Service (AKS) cluster named Cluster1.

  You create a container image named App1 on your administrative workstation.

  You need to deploy App1 to Cluster1.

  What should you do first?

  A. Create a host pool on Cluster1.

  B. Run the az acr build command.

  C. Run the docker build command.

  D. Run the docker push command.

  Correct Answer: D

  To deploy the container image to the Azure Kubernetes Service (AKS) cluster, you need to perform the following steps:

  Run the docker push command: This option is the correct choice. Before deploying a container image to AKS, you need to push the image to a container registry (in this case, Registry1). The docker push command is used to upload the

  container image to the Azure Container Registry (ACR) so that it can be accessed by the AKS cluster.

  The correct sequence of steps would be:

  Build the container image for App1 on your administrative workstation.

  Tag the image with the ACR repository information (e.g., Registry1.azurecr.io/App1).

  Run docker push to upload the image to ACR.

  Configure AKS to use the image from the ACR repository.

  Create Kubernetes deployment and service definitions for App1 on AKS.

• Question 422:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result these questions will not appear in the review screen.

  You have an Azure subscription that contains the resources shown in the following table.

  

  VM1 connects to VNET1.

  You need to connect VM1 to VNET2.

  Solution: You delete VM1. You recreate VM1, and then you create a new network interface for VM1.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  Instead you should delete VM1. You recreate VM1, and then you add the network interface for VM1. Note: When you create an Azure virtual machine (VM), you must create a virtual network (VNet) or use an existing VNet. You can change

  the subnet a VM is connected to after it's created, but you cannot change the VNet.

  References:

  https://docs.microsoft.com/en-us/azure/virtual-machines/windows/network-overview

• Question 423:

  You have an Azure subscription named Subscription1. Subscription1 contains a virtual machine named VM1. You have a computer named Computer1 that runs Windows 10. Computer1 is connected to the Internet. You add a network interface named VM1173 to VM1 as shown in the exhibit. (Click the Exhibit tab.)

  

  From Computer1, you attempt to connect to VM1 by using Remote Desktop, but the connection fails.

  You need to establish a Remote Desktop connection to VM1. What should you do first?

  A. Change the priority of the RDP rule.

  B. Delete the DenyAlllnBound rule.

  C. Start VM1.

  D. Attach a network interface.

  Correct Answer: C

  Note: Rules are processed in priority order, with lower numbers processed before higher numbers, because lower numbers have higher priority. Once traffic matches a rule, processing stops. As a result, any rules that exist with lower

  priorities (higher numbers) that have the same attributes as rules with higher priorities are not processed.

  References:

  https://docs.microsoft.com/en-us/azure/virtual-network/security-overview

• Question 424:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have an Azure subscription that contains the resources shown in the following table.

  

  VM1 connects to VNET1.

  You need to connect VM1 to VNET2.

  Solution: You create a new network interface, and then you add the network interface to VM1.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Instead you should delete VM1. You recreate VM1, and then you add the network interface for VM1. Note: When you create an Azure virtual machine (VM), you must create a virtual network (VNet) or use an existing VNet. You can change

  the subnet a VM is connected to after it's created, but you cannot change the VNet.

  References:

  https://docs.microsoft.com/en-us/azure/virtual-machines/windows/network-overview

• Question 425:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have an Azure subscription that contains the resources shown in the following table.

  

  VM1 connects to VNET1.

  You need to connect VM1 to VNET2.

  Solution: You move VM1 to RG2, and then you add a new network interface to VM1.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Instead you should delete VM1. You recreate VM1, and then you add the network interface for VM1. Note: When you create an Azure virtual machine (VM), you must create a virtual network (VNet) or use an existing VNet. You can change

  the subnet a VM is connected to after it's created, but you cannot change the VNet.

  References:

  https://docs.microsoft.com/en-us/azure/virtual-machines/windows/network-overview

• Question 426:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have an Azure subscription that contains the resources shown in the following table.

  

  VM1 connects to VNET1.

  You need to connect VM1 to VNET2.

  Solution: You delete VM1. You recreate VM1, and then you create a new network interface for VM1 and connect it to VNET2.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  You should delete VM1. Then recreate VM1 and add the network interface for VM1.

  To migrate a VM from a VNET to another VNET. The only option is to delete the VM and redeploy it using a new NIC and NIC connected to VNET2.

  Note: When you create an Azure Virtual Machine (VM), you must create a Virtual Network (VNet) or use an existing VNet. You can change the subnet a VM is connected to after it's created, but you cannot change the VNet. You can also

  change the size of a VM.

  Reference:

  https://docs.microsoft.com/en-us/azure/virtual-machines/windows/network-overview

• Question 427:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a computer named Computer1 that has a point-to-site VPN connection to an Azure virtual network named VNet1. The point-to-site connection uses a self-signed certificate.

  From Azure, you download and install the VPN client configuration package on a computer named Computer2.

  You need to ensure that you can establish a point-to-site VPN connection to VNet1 from Computer2.

  Solution: You join Computer2 to Azure Active Directory (Azure AD)

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  A client computer that connects to a VNet using Point-to-Site must have a client certificate installed. References: https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-certificates-point-to-site

• Question 428:

  You have an Azure subscription named Subcription1 that contains the storage accounts shown in the following table.

  

  You plan 10 use the Azure Import/Export service to export data from Subscription1.

  A. storage1

  B. storage2

  C. storage3

  D. storage4

  Correct Answer: D

  Azure Import/Export service supports the following of storage accounts:

  1.

  Standard General Purpose v2 storage accounts (recommended for most scenarios)

  2.

  Blob Storage accounts

  3.

  General Purpose v1 storage accounts (both Classic or Azure Resource Manager deployments), Azure Import/Export service supports the following storage types

  4.

  Import supports Azure Blob storage and Azure File storage ?Export supports Azure Blob storage

  Reference: https://docs.microsoft.com/en-us/azure/storage/common/storage-import-export-requirements

• Question 429:

  You have an Azure subscription that contains a user account named User1. You need to ensure that User1 can assign a policy to the tenant root management group. What should you do?

  A. Assign the Global administrator role to User1, and then instruct User1 to configure access management for Azure resources.

  B. Assign the Global administrator role to User1, and then modify the default conditional access policies.

  C. Assign the Owner role to User1. and then modify the default conditional access policies.

  D. Assign the Owner role to User1. and then instruct User1 to configure access management for Azure resources.

  Correct Answer: D

• Question 430:

  You have an Azure subscription that contains the following storage account:

  

  You need 10 create a request to Microsoft Support to perform a live migration of storage1 to Zone Redundant Storage (ZRS) replication. How should you modify storage1 before the Live migration?

  A. Set the replication to Locally-redundant storage (IRS)

  B. Disable Advanced threat protection

  C. Remove the lock

  D. Set the access tier to Hot

  Correct Answer: A

  If you want to live migration from RA-GRS to ZRS, at first you have to Switch the storage tier to LRS and then only you can request a live migration.

  

  Reference: https://docs.microsoft.com/en-us/azure/storage/common/redundancy-migration?toc=%2Fazure%2Fstorage%2Fblobs%2Ftoc.jsonandtabs=portal