Microsoft Microsoft Certifications AZ-104 Questions & Answers

• Question 441:

  You have an Azure subscription named Subscription1.

  You have 5 TB of data that you need to transfer to Subscription1.

  You plan to use an Azure Import/Export job.

  What can you use as the destination of the imported data?

  A. Azure SQL Database

  B. Azure File Storage

  C. An Azure Cosmos DB database

  D. The Azure File Sync Storage Sync Service

  E. Azure Data Factory

  F. A virtual machine

  Correct Answer: B

  Azure Import/Export service is used to securely import large amounts of data to Azure Blob storage and Azure Files by shipping disk drives to an Azure datacenter.

  References:

  https://docs.microsoft.com/en-us/azure/storage/common/storage-import-export-service

• Question 442:

  You plan to automate the deployment of a virtual machine scale set that uses the Windows Server 2016 Datacenter image.

  You need to ensure that when the scale set virtual machines are provisioned, they have web server components installed.

  Which two actions should you perform? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Modify the extensionProfile section of the Azure Resource Manager template.

  B. Create a new virtual machine scale set in the Azure portal.

  C. Create an Azure policy.

  D. Create an automation account.

  E. Upload a configuration script.

  Correct Answer: AE

  The Custom Script Extension downloads and executes scripts on Azure VMs. This extension is useful for post deployment configuration, software installation, or any other configuration / management task. Scripts can be downloaded from Azure storage or GitHub, or provided to the Azure portal at extension run-time.

  The Custom Script extension integrates with Azure Resource Manager templates, and can also be used with the Azure CLI, Azure PowerShell, Azure portal, or the REST API The following Custom Script Extension definition downloads a sample script from GitHub, installs the required packages, then writes the VM instance hostname to a basic HTML page.

  Reference: https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/tutorial-install-apps-template

• Question 443:

  You have an Azure subscription that contains the resources in the following table.

  

  Store1 contains a file share named data. Data contains 5,000 files.

  You need to synchronize the files in the file share named data to an on-premises server named Server1.

  Which three actions should you perform? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Download an automation script.

  B. Create a container instance.

  C. Create a sync group.

  D. Register Server1.

  E. Install the Azure File Sync agent on Server1.

  Correct Answer: CDE

  Step 1 (E): Install the Azure File Sync agent on Server1 The Azure File Sync agent is a downloadable package that enables Windows Server to be synced with an Azure file share

  Step 2 (D): Register Server1.

  Register Windows Server with Storage Sync Service

  Registering your Windows Server with a Storage Sync Service establishes a trust relationship between your server (or cluster) and the Storage Sync Service.

  Step 3 (C): Create a sync group and a cloud endpoint.

  A sync group defines the sync topology for a set of files. Endpoints within a sync group are kept in sync with each other. A sync group must contain one cloud endpoint, which represents an Azure file share and one or more server endpoints.A

  server endpoint represents a path on registered server.

  References:

  https://docs.microsoft.com/en-us/azure/storage/files/storage-sync-files-deployment-guide

• Question 444:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an app named App1 that is installed on two Azure virtual machines named VM1 and VM2. Connections to App1 are managed by using an Azure Load Balancer. The effective network security configurations for VM2 are shown in the following exhibit.

  

  You discover that connections to App1 from 131.107.100.50 over TCP port 443 fail. You verify that the Load Balancer rules are configured correctly.

  You need to ensure that connections to App1 can be established successfully from 131.107.100.50 over TCP port 443.

  Solution: You create an inbound security rule that denies all traffic from the 131.107.100.50 source and has a cost of 64999.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

• Question 445:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have an app named App1 that is installed on two Azure virtual machines named VM1 and VM2. Connections to App1 are managed by using an Azure Load Balancer. The effective network security configurations for VM2 are shown in the following exhibit.

  

  You discover that connections to App1 from 131.107.100.50 over TCP port 443 fail. You verify that the Load Balancer rules are configured correctly.

  You need to ensure that connections to App1 can be established successfully from 131.107.100.50 over TCP port 443.

  Solution: You modify the priority of the Allow_131.107.100.50 inbound security rule.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Allow_131.107.100.50 rule has a higher priority (100). The issue is not related with the priority of the rule.

• Question 446:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have an app named App1 that is installed on two Azure virtual machines named VM1 and VM2. Connections to App1 are managed by using an Azure Load Balancer.

  The effective network security configurations for VM2 are shown in the following exhibit.

  

  You discover that connections to App1 from 131.107.100.50 over TCP port 443 fail.

  You verify that the Load Balancer rules are configured correctly.

  You need to ensure that connections to App1 can be established successfully from 131.107.100.50 over TCP port 443.

  Solution: You create an inbound security rule that allows any traffic from the AzureLoadBalancer source and has a cost of 150.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

• Question 447:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You deploy an Azure Kubernetes Service (AKS) cluster named AKS1.

  You need to deploy a YAML file to AKS1.

  Solution: From the Azure CLI, you run azcopy.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Kubectl is not installed by installing AZ ClI. As stated Azure CLI is already available but installing Azure CLI doesn't mean that Azure Kubernates client is also installed. So before running any aks command, we have to install kubectl, the Kubernetes command-line client. az aks install-cli Reference: https://docs.microsoft.com/en-us/azure/aks/kubernetes-walkthrough#connect-to-the-cluster

• Question 448:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some questions sets might have more than one correct solution, while others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You deploy an Azure Kubernetes Service (AKS) cluster named AKS1.

  You need to deploy a YAML file to AKS1.

  Solution: From Azure Cloud Shell, you run az aks.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Deployments are typically created and managed with kubectl create or kubectl apply. Create a deployment by defining a manifest file in the YAML format. https://learn.microsoft.com/en-us/azure/aks/concepts-clusters-workloads#deployments-and-yaml-manifests

• Question 449:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You deploy an Azure Kubernetes Service (AKS) cluster named AKS1.

  You need to deploy a YAML file to AKS1.

  Solution: From the Azure CLI, you run the kubectl client.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Installing Azure CLI doesn't mean that Azure Kubernates client is installed. So before running kubectl client command, you have install kubectl, the Kubernetes command-line client. First need to run az aks install-cli to install Kubernetes CLI,

  which is kubectl Reference:

  https://docs.microsoft.com/en-us/cli/azure/aks?view=azure-cli-latest

• Question 450:

  You have an Azure subscription that contains a virtual network named VNET1. VNET1 contains the subnets shown in the following table.

  

  Each virtual machine uses a static IP address.

  You need to create network security groups (NSGs) to meet following requirements:

  1.

  Allow web requests from the internet to VM3, VM4, VM5, and VM6.

  2.

  Allow all connections between VM1 and VM2.

  3.

  Allow Remote Desktop connections to VM1.

  4.

  Prevent all other network traffic to VNET1.

  What is the minimum number of NSGs you should create?

  A. 1

  B. 3

  C. 4

  D. 12

  Correct Answer: A