Microsoft Microsoft Certifications AZ-104 Questions & Answers

• Question 481:

  HOTSPOT

  You have an Azure Resource Manager template for a virtual machine named Template1. Template1 has the following parameters section.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 482:

  HOTSPOT

  You plan to deploy Azure Databricks to support a machine learning application.

  Data engineers will mount an Azure Data Lake Storage account to the Databricks file system. Permissions to folders are granted directly to the data engineers.

  You need to recommend a design for the planned Databrick deployment. The solution must meet the following requirements:

  Ensure that the data engineers can only access folders to which they have permissions.

  Minimize development effort.

  Minimize costs.

  What should you include in the recommendation? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 483:

  HOTSPOT

  You have an Azure subscription that contains a virtual network named VNET1 in the East US 2 region. A network interface named VM1-NI is connected to VNET1.

  You successfully deploy the following Azure Resource Manager template.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE:Eachcorrectselectionisworthonepoint.

  Hot Area:

  

  Correct Answer:

  

• Question 484:

  HOTSPOT

  You plan to deploy an Azure virtual machine named VM1 by using an Azure Resource Manager template.

  You need to complete the template.

  What should you include in the template? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 485:

  CORRECT TEXT

  You need to configure Azure Backup to back up the file shares and virtual machines.

  What is the minimum number of Recovery Services vaults and backup policies you should create? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 486:

  HOTSPOT

  You have two Azure virtual machines as shown in the following table.

  

  You create the Azure DNS zones shown in the following table.

  

  You perform the following actions:

  1.

  To fabrikam.com, you add a virtual network link to vnet1 and enable auto registration.

  2.

  For contoso.com, you assign vm1 and vm2 the Owner role.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worm one point.

  Hot Area:

  

  Correct Answer:

  

• Question 487:

  HOTSPOT

  You have an Azure subscription. The subscription contains a virtual machine that runs Windows 10.

  You need to join the virtual machine to an Active Directory domain.

  How should you complete the Azure Resource Manager (ARM) template? To answer, select the appropriate options in the answer area.

  NOTE: Bach correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Azure Resource Manager template overview

  Resource Manager templates let you define Azure infrastructure in code. The required resources, network connections, or configuration of VMs can all be defined in a template. These templates create consistent, reproducible deployments

  each time, and can be versioned as you make changes. For more information, see Azure Resource Manager templates overview.

  Each resource is defined in a template using JavaScript Object Notation (JSON). The following JSON example uses the Microsoft.Compute/virtualMachines/extensions resource type to install the Active Directory domain join extension.

  Parameters are used that you specify at deployment time. When the extension is deployed, the VM is joined to the specified managed domain.

  JSON

  {

  "apiVersion": "2015-06-15",

  "type": "Microsoft.Compute/virtualMachines/extensions", "name": "[concat(parameters('dnsLabelPrefix'),'/joindomain')]", "location": "[parameters('location')]",

  "dependsOn": [

  "[concat('Microsoft.Compute/virtualMachines/', parameters('dnsLabelPrefix'))]" ],

  "properties": {

  "publisher": "Microsoft.Compute",

  "type": "JsonADDomainExtension",

  "typeHandlerVersion": "1.3",

  "autoUpgradeMinorVersion": true,

  "settings": {

  "Name": "[parameters('domainToJoin')]",

  "OUPath": "[parameters('ouPath')]",

  "User": "[concat(parameters('domainToJoin'), '\\', parameters('domainUsername'))]", "Restart": "true",

  "Options": "[parameters('domainJoinOptions')]"

  },

  "protectedSettings": {

  "Password": "[parameters('domainPassword')]"

  }

  }

  }

  This VM extension can be deployed even if you don't create a VM in the same template. The examples in this article show both of the following approaches:

  Create a Windows Server VM and join to a managed domain Join an existing Windows Server VM to a managed domain

• Question 488:

  HOTSPOT

  You have the Azure virtual machines shown in the following table.

  

  VNET1, VNET2, and VNET3 are peered.

  VM4 has a DNS server that is authoritative for a zone named Contoso.com and contains the records shown in the following table.

  

  VNET1 and VNET2 are linked to an Azure private DNS zone named Contoso.com that contains the records shown in the following table.

  

  The virtual networks are configured to use the DNS servers shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 489:

  HOTSPOT

  You have an Azure subscription that contains an Azure Active Directory (Azure AD) tenant named contoso.com. The tenant is synced to the on-premises Active Directory domain. The domain contains the users shows in the following table.

  

  You enable self-service password reset (SSPR) for all users and configure SSPR to have the following authentication methods:

  1.

  Number of methods required to reset: 2

  2.

  Methods available to users: Mobile phone, Security questions

  3.

  Number of questions required to register: 3

  4.

  Number of questions required to reset: 3

  You select the following security questions:

  1.

  What is your favorite food?

  2.

  In what city was your first job?

  3.

  What was the name of your first pet?

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: No

  Administrator accounts are special accounts with elevated permissions. To secure them, the following restrictions apply to changing passwords of administrators:

  On-premises enterprise administrators or domain administrators cannot reset their password through Self-service password reset (SSPR). They can only change their password in their on-premises environment. Thus, we recommend not

  syncing on-prem AD admin accounts to Azure AD. An administrator cannot use secret Questions and Answers as a method to reset password.

  Box 2: Yes

  Self-service password reset (SSPR) is an Azure Active Directory feature that enables employees to reset their passwords without needing to contact IT staff.

  Box 3: Yes

  Reference:

  https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-sspr-deployment

• Question 490:

  HOTSPOT

  You have the web apps shown in the following table.

  

  You need to monitor the performance and usage of the apps by using Azure Application Insights. The solution must minimize modifications to the application code.

  What should you do on each app? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/azure/azure-monitor/app/azure-web-apps