Microsoft Role-based AZ-104 Questions & Answers

• Question 41:

  You have an Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com that contains the users shown in the following table.

  

  You enable password reset for contoso.onmicrosoft.com as shown in the Password Reset exhibit. (Click the Password Reset tab.)

  You configure the authentication methods for password reset as shown in the Authentication Methods exhibit. (Click the Authentication Methods tab.: For each of the following statements, select Yes if the statement is true. Otherwise, select

  No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 42:

  You have an Azure subscription that is linked to an Azure AD tenant. The tenant contains two users named User1 and User2. The subscription contains the resources shown in the following table.

  

  The subscription contains the alert rules shown in the following table.

  

  The users perform the following actions:

  User1 creates a new virtual disk and attaches the disk to VM1.

  User2 creates a new resource tag and assigns the tag to RG1 and VM1.

  Which alert rules are triggered by each user? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one pint.

  Hot Area:

  

  Correct Answer:

  

• Question 43:

  You have an Azure AD tenant named adatum.com that contains the groups shown in the following table.

  

  Adatum.com contains the users shown in the following table.

  

  You assign an Azure Active Directory Premium P2 license to Group1 as shown in the following exhibit.

  

  Group2 is NOT directly assigned a license.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point

  Hot Area:

  

  Correct Answer:

  

• Question 44:

  HOTSPOT

  You have an Azure subscription.

  You create the following file named Deploy.json.

  

  You connect to the subscription and run the following commands. New..-ArResourceGroupDeployment - ResoureandGroupName RG1 -TemplateFlle "deploy .J son" For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 45:

  Your network contains an on-premises Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains the servers shown in the following table.

  

  You plan to migrate contoso.com to Azure.

  You create an Azure virtual network named VNET1 that has the following settings:

  Address space: 10.0.0.0/16

  Subnet:

  Name: Subnet1

  IPv4: 10.0.1.0/24

  You need to move DC1 to VNET1. The solution must ensure that the member servers in contoso.com can resolve AD DS DNS names.

  How should you configure DO? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 46:

  You have a Recovery Services vault named RSV1. RSV1 has a backup policy that retains instant snapshots for five days and daily backup for 14 days.

  RSV1 performs daily backups of VM1. VM1 hosts a static website that was updated eight days ago.

  You need to recover VM1 to a point eight days ago. The solution must minimize downtime.

  What should you do first?

  A. Deallocate VM1.

  B. Restore VM1 by using the Replace existing restore configuration option.

  C. Delete VM1.

  D. Restore VM1 by using the Create new restore configuration option.

  Correct Answer: B

  Deallocating VM1 (Option A) would stop the virtual machine, causing downtime, which is not aligned with the goal of minimizing downtime.

  Deleting VM1 (Option C) would permanently remove the virtual machine, and you would lose all your data and configurations. This is not a suitable option if you want to retain your VM with the data up to eight days ago.

  Restoring VM1 by using the "Create new restore configuration" (Option D) would create a new virtual machine, which may lead to additional downtime, and you might need to reconfigure it to match the original VM's settings.

• Question 47:

  You have an Azure subscription.

  You plan to migrate 50 virtual machines from VMware vSphere to the subscription.

  You create a Recovery Services vault.

  What should you do next?

  A. Configure an extended network.

  B. Create a recovery plan.

  C. Deploy an Open Virtualization Application (OVA) template to vSphere.

  D. Configure a virtual network.

  Correct Answer: D

• Question 48:

  You have an Azure subscription that contains a virtual machine named VM1.

  You plan to deploy an Azure Monitor alert rule that will trigger an alert when CPU usage on VM1 exceeds 80 percent.

  You need to ensure that the alert rule sends an email message to two users named User1 and User2.

  What should you create for Azure Monitor?

  A. an action group

  B. a mail-enabled security group

  C. a distribution group

  D. a Microsoft 365 group

  Correct Answer: A

  "Alerts consist of:

  -Action groups

  -Alert conditions

  -User response

  -Alert processing rules" https://learn.microsoft.com/en-us/azure/azure-monitor/alerts/alerts-overview

• Question 49:

  You have an Azure subscription that has the public IP addresses shown in the following table.

  

  You plan to deploy an Azure Bastion Basic SKU host named Bastion1. Which IP addresses can you use?

  A. IP1 only

  B. IP1 and IP2 only

  C. IP3, IP4, and IP5 only

  D. IP1, IP2, IP4, and IP5 only

  E. IP1, IP2, IP3, IP4, and IP5

  Correct Answer: A

  Azure Bastion deployments require a Public IP address, except Developer SKU deployments. The Public IP must have the following configuration:

  The Public IP address SKU must be Standard.

  The Public IP address assignment/allocation method must be Static.

  The Public IP address name is the resource name by which you want to refer to this public IP address.

  You can choose to use a public IP address that you already created, as long as it meets the criteria required by Azure Bastion and isn't already in use.

• Question 50:

  You plan to deploy several Azure virtual machines that will run Windows Server 2019 in a virtual machine scale set by using an Azure Resource Manager template.

  You need to ensure that NGINX is available on all the virtual machines after they are deployed.

  What should you use?

  A. Azure Custom Script Extension

  B. Deployment Center in Azure App Service

  C. the New-AzConfigurationAssignment cmdlet

  D. a Microsoft Endpoint Manager device configuration profile

  Correct Answer: A

  There are several versions of this question in the exam. The question has two correct answers:

  1.

  A Desired State Configuration (DSC) extension

  2.

  Azure Custom Script Extension

  The Custom Script Extension downloads and runs scripts on Azure virtual machines (VMs). This extension is useful for post-deployment configuration, software installation, or any other configuration or management task. You can download scripts from Azure Storage or GitHub, or provide them to the Azure portal at extension runtime. https://learn.microsoft.com/en-us/azure/virtual-machines/extensions/custom-script-windows