Microsoft Microsoft Certifications AZ-104 Questions & Answers

• Question 521:

  HOTSPOT

  You have an Azure web app named WebApp1.

  You need to provide developers with a copy of WebApp1 that they can modify without affecting the production WebApp1.

  When the developers finish testing their changes, you must be able to switch the current line version of WebApp1 to the new version.

  Which command should you run prepare the environment? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: New-AzureRmWebAppSlot

  The New-AzureRmWebAppSlot cmdlet creates an Azure Web App Slot in a given a resource group that uses the specified App Service plan and data center.

  Box 2: -SourceWebApp

  References:

  https://docs.microsoft.com/en-us/powershell/module/azurerm.websites/new-azurermwebappslot

• Question 522:

  HOTSPOT

  You have an Azure subscription named Subscription1 that contains the resources in the following table.

  

  VM1 and VM2 run the websites in the following table.

  

  AppGW1 has the backend pools in the following table.

  

  DNS resolves site1.contoso.com, site2.contoso.com, and site3.contoso.com to the IP address of AppGW1. AppGW1 has the listeners in the following table.

  

  AppGW1 has the rules in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Vm1 is in Pool1. Rule2 applies to Pool1, Listener 2, and site2.contoso.com

• Question 523:

  HOTSPOT

  You have an Azure web app named App1 that has two deployment slots named Production and Staging. Each slot has the unique settings shown in the following table.

  

  You perform a slot swap.

  What are the configurations of the Production slot after the swap? To answer, select the appropriate options in the answer area.

  NOTE: Each correction is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Which settings are swapped? When you clone configuration from another deployment slot, the cloned configuration is editable. Some configuration elements follow the content across a swap (not slot specific), whereas other configuration elements stay in the same slot after a swap (slot specific). The following lists show the settings that change when you swap slots. Box 1 : On Settings that are swapped: General settings, such as framework version, 32/64-bit, web sockets App settings (can be configured to stick to a slot) Connection strings (can be configured to stick to a slot) Handler mappings Public certificates WebJobs content Hybrid connections * Virtual network integration * Service endpoints * Azure Content Delivery Network * Features marked with an asterisk (*) are planned to be unswapped. So web sockets settings will be swapped. So Production will have web sockets settings from "Off" to "On" after the swap slot. Box 2: App1-prod.contoso.com Settings that aren't swapped: Publishing endpoints Custom domain names Non-public certificates and TLS/SSL settings Scale settings WebJobs schedulers IP restrictions Always On Diagnostic settings Cross-origin resource sharing (CORS) So Custom domain names will not be swapped. So Production will have Custom domain names of its own after the swap slot.

  Reference: https://docs.microsoft.com/en-us/azure/app-service/deploy-staging-slots#what-happens-during-a- swap

• Question 524:

  HOTSPOT

  You create an Azure web app named WebApp1. WebApp1 has the autoscale settings shown in the following exhibit.

  

  

  The scale out and scale in rules are configured to have a duration of 10 minutes and a cool down time of five minutes.

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: one instance

  Refer to scaling condition provided in the question, August 8, 2018 is outside the schedule of the scale condition 1, and Default instance count is 1.

  Box 2: two instances

  The default instance count is important because autoscale scales your service to that count when metrics are not available. Therefore, select a default instance count that's safe for your workloads. The Default instance count of scale condition

  1 is 4, and the Scale in rule decreases the count with 1. So initial instance count before scale in condition met = 4 CPU utilization was at 15% for 60 mins so after first 10 mins ( The scale out and scale in rules are configured to have a duration

  of 10 minutes )instance count reduces by 1 hence after first 10 mins instance count is 4-1=3

  Now cool down period is 5 mins , after first 15 mins instance count is 3 .

  After next 15 mins , instance count will be 3-1=2.

  After next 15 mins , instance count will be =2 because minimum instance count must be 2 , it can't get reduced beyond 2.

  So after 60 mins instance count will be at 2.

  Reference:

  https://docs.microsoft.com/en-us/azure/azure-monitor/platform/autoscale-best-practices

• Question 525:

  HOTSPOT

  You have an Azure subscription that contains several virtual machines and an Azure Log Analytics workspace named Workspace1. You create a log search query as shown in the following exhibit.

  

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: 14 days

  Two weeks will be covered.

  Note: Startofweek returns the start of the week containing the date, shifted by an offset, if provided.

  Start of the week is considered to be a Sunday.

  Endofweek returns the end of the week containing the date, shifted by an offset, if provided.

  Last day of the week is considered to be a Saturday.

  Box 2:

  The render operator renders results in as graphical output. Timechart is a Line graph, where the first column is x-axis, and should be datetime. Other columns are y-axes. In this case the Y axis has avg(CounterValue) Values.

  References:

  https://docs.microsoft.com/en-us/azure/azure-monitor/log-query/log-query-overview

  https://docs-analytics-eus.azurewebsites.net/queryLanguage/query_language_renderoperator.html

• Question 526:

  HOTSPOT

  You have an Azure Storage account named storage1.

  You have an Azure App Service app named app1 and an app named App2 that runs in an Azure container instance. Each app uses a managed identity.

  You need to ensure that App1 and App2 can read blobs from storage1 for the next 30 days.

  What should you configure in storage1 for each app?

  Hot Area:

  

  Correct Answer:

  

  With Shared access signature you can limit the resources for access and at the same time can control the duration of the access.

  A shared access signature (SAS) provides secure delegated access to resources in your storage account without compromising the security of your data. With a SAS, you have granular control over how a client can access your data. You can

  control what resources the client may access, what permissions they have on those resources, and how long the SAS is valid, among other parameters.

  Reference:

  https://docs.microsoft.com/en-us/azure/storage/common/storage-sas-overview

• Question 527:

  HOTSPOT

  Your network contains an Active Directory domain named adatum.com and an Azure Active Directory (Azure AD) tenant named adatum.onmicrosoft.com. Adatum.com contains the user accounts in the following table.

  

  Adatum.onmicrosoft.com contains the user accounts in the following table.

  

  You need to implement Azure AD Connect. The solution must follow the principle of least privilege. Which user accounts should you use? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: User5

  In Express settings, the installation wizard asks for the following:

  AD DS Enterprise Administrator credentials

  Azure AD Global Administrator credentials

  The AD DS Enterprise Admin account is used to configure your on-premises Active Directory. These credentials are only used during the installation and are not used after the installation has completed. The Enterprise Admin, not the Domain

  Admin should make sure the permissions in Active Directory can be set in all domains.

  Box 2: UserA

  Azure AD Global Admin credentials credentials are only used during the installation and are not used after the installation has completed. It is used to create the Azure AD Connector account used for synchronizing changes to Azure AD. The

  account also enables sync as a feature in Azure AD.

  References:

  https://docs.microsoft.com/en-us/azure/active-directory/connect/active-directory-aadconnect- accounts-permissions

• Question 528:

  HOTSPOT

  Your network contains an Active Directory domain. The domain contains a user named User1. The domain is synced to Azure Active Directory (Azure AD) as shown in the following exhibit.

  

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: a computer joined in the Active Directory domain The Active Directory domain service stores passwords in the form of a hash value representation, of the actual user password.

  Box 2: Stored in both Azure AD and in the Active Director domain The Active Directory domain service stores passwords in the form of a hash value representation, of the actual user password.

  To synchronize your password, Azure AD Connect sync extracts your password hash from the on- premises Active Directory instance.

  References:

  https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-password-hash- synchronization

• Question 529:

  HOTSPOT

  From Azure Active Directory (AD) Privileged Identify Management, you configure the Role settings for the Owner role of an Azure subscription as shown in the following exhibit.

  

  From Azure AD Privileged Identify Management, you assign the Owner role for the subscription to a user named User1, and you set the Assignment type to Active and Permanently eligible. Use the drop-down menus to select the answer

  choice that completes each statement based on the information presented in the graphic.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-how-to-add-role-to-user?tabs=new

• Question 530:

  HOTSPOT

  You have an Azure subscription named Subscription1. Subscription1 contains the virtual networks in the following table.

  

  Subscription1 contains the virtual machines in the following table:

  

  The firewalls on all the virtual machines are configured to allow all ICMP traffic. You add the peerings in the following table.

  

  For each of the following statements, select Yest if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Statement 1: Yes

  Vnet1 and Vnet3 are peers.

  Statement 2: No

  Statement 3: No

  Peering connections are non-transitive.

  References:

  https://docs.microsoft.com/en-us/azure/architecture/reference-architectures/hybrid- networking/hub-spoke