Microsoft Microsoft Certifications AZ-104 Questions & Answers

• Question 561:

  HOTSPOT

  You have an Azure Active Directory (Azure AD) tenant.

  You need to create a conditional access policy that requires all users to use multi-factor authentication when they access the Azure portal.

  Which three settings should you configure? To answer, select the appropriate settings in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Assignments, Users and Groups

  When you configure the sign-in risk policy, you need to set:

  The users and groups the policy applies to: Select Individuals and Groups

  

  Box 2:

  When you configure the sign-in risk policy, you need to set the type of access you want to be enforced.

  

  Box 3:

  When you configure the sign-in risk policy, you need to set:

  The type of access you want to be enforced when your sign-in risk level has been met:

  

  References: https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/howto-user-risk-policy

• Question 562:

  HOTSPOT

  You have an Azure subscription.

  You create the Azure Storage account shown in the following exhibit.

  

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: 3

  Locally Redundant Storage (LRS) provides highly durable and available storage within a single location (sub region). We maintain an equivalent of 3 copies (replicas) of your data within the primary location as described in our SOSP paper;

  this ensures that we can recover from common failures (disk, node, rack) without impacting your storage account's availability and durability.

  Box 2: Access tier

  Change the access tier from Hot to Cool.

  Note: Azure storage offers different access tiers, which allow you to store blob object data in the most cost-effective manner. The available access tiers include:

  Hot - Optimized for storing data that is accessed frequently.

  Cool - Optimized for storing data that is infrequently accessed and stored for at least 30 days.

  Archive - Optimized for storing data that is rarely accessed and stored for at least 180 days with flexible latency requirements (on the order of hours).

  Reference:

  https://azure.microsoft.com/en-us/blog/data-series-introducing-locally-redundant-storage-for-windows-azure-storage/

  https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-storage-tiers

• Question 563:

  HOTSPOT

  You have an Azure subscription that contains the Azure virtual machines shown in the following table.

  

  You add inbound security rules to a network security group (NSG) named NSG1 as shown in the following table.

  

  You run Azure Network Watcher as shown in the following exhibit.

  

  You run Network Watcher again as shown in the following exhibit.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: No

  It limits traffic to VM2, but not VM1 traffic.

  Box 2: Yes

  Yes, the destination is VM2.

  Box 3: No

  Reference:

  https://docs.microsoft.com/en-us/azure/virtual-network/network-security-group-how-it-works

• Question 564:

  HOTSPOT

  You have an Azure subscription that contains the resources shown in the following table.

  

  VMSS1 is set to VM (virtual machines) orchestration mode.

  You need to deploy a new Azure virtual machine named VM1, and then add VM1 to VMSS1.

  Which resource group and location should you use to deploy VM1? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: RG1, RG2, or RG3

  The resource group stores metadata about the resources. When you specify a location for the resource group, you're specifying where that metadata is stored.

  Box 2: West US only

  Note: Virtual machine scale sets will support 2 distinct orchestration modes:

  ScaleSetVM

• Question 565:

  HOTSPOT

  You have an Azure subscription named Subscription1 that contains the virtual networks in the following table.

  

  Subscripton1 contains the virtual machines in the following table.

  

  In Subscription1, you create a load balancer that has the following configurations:

  1.

  Name: LB1

  2.

  SKU: Basic

  3.

  Type: Internal

  4.

  Subnet: Subnet12

  5.

  Virtual network: VNET1

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Statement 1 : Basic load balancer supports Virtual machine in a single Availability set or virtual machine scale set (VMSS) only . Hence this statement is correct.

  Statement 2 : Basic load balancer supports Virtual machine in a single Availability set or virtual scale set only or one standalone VM. VM3 and VM4 are not part of any availability set or VMSS .Hence this statement is incorrect.

  Statement 3 : Basic load balancer supports Virtual machine in a single Availability set or virtual scale set only or one standalone VM. VM5 and VM6 are not part of any availability set or VMSS .Hence this statement is incorrect.

  

  References: https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-overview

• Question 566:

  HOTSPOT

  You have an Azure subscription.

  You plan to use Azure Resource Manager templates to deploy 50 Azure virtual machines that will be part of the same availability set.

  You need to ensure that as many virtual machines as possible are available if the fabric fails or during servicing.

  How should you configure the template? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  as per https://docs.microsoft.com/en-us/rest/api/compute/availabilitysets/createorupdate you can only specify an integer, so 3 and 20 are the answers (not max, and for sure not 0) Request Body REQUEST BODY Name Required Type Description properties.platformFaultDomainCount integer Fault Domain count. properties.platformUpdateDomainCount integer Update Domain count. Use two fault domains. 2 or 3 is max value, depending on which region you are in. Use 20 for platformUpdateDomainCount Increasing the update domain (platformUpdateDomainCount) helps with capacity and availability planning when the platform reboots nodes. A higher number for the pool (20 is max) means that fewer of their nodes in any given availability set would be rebooted at once.

  References: https://www.itprotoday.com/microsoft-azure/check-if-azure-region-supports-2-or-3-fault-domains- managed-disks https://github.com/Azure/acs-engine/issues/1030

• Question 567:

  HOTSPOT

  You have an Azure subscription named Subscroption1.

  

  In Subscription1, you create an alert rule named Alert1. The Alert1 action group is configured as shown in the following exhibit.

  Alert1 alert criteria is triggered every minute.

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: 60 One alert per minute will trigger one email per minute. Box 2: 12 No more than 1 SMS every 5 minutes can be send, which equals 12 per hour. Note: Rate limiting is a suspension of notifications that occurs when too many are sent to a particular phone number, email address or device. Rate limiting ensures that alerts are manageable and actionable.

  The rate limit thresholds are:

  1.

  SMS: No more than 1 SMS every 5 minutes.

  2.

  Voice: No more than 1 Voice call every 5 minutes.

  3.

  Email: No more than 100 emails in an hour.

  4.

  Other actions are not rate limited.

  References:

  https://github.com/MicrosoftDocs/azure-docs/blob/master/articles/monitoring-and- diagnostics/monitoring-overview-alerts.md

• Question 568:

  HOTSPOT

  You have an Azure subscription named Subscription1 that contains the following resource group:

  1.

  Name: RG1

  2.

  Region: West US

  3.

  Tag: "tag1": "value1"

  You assign an Azure policy named Policy1 to Subscription1 by using the following configurations:

  1.

  Exclusions: None

  2.

  Policy definition: Append tag and its default value

  3.

  Assignment name: Policy1

  4.

  Parameters: -Tag name: Tag2 -Tag value: Value2

  After Policy1 is assigned, you create a storage account that has the following configurations:

  1.

  Name: storage1

  2.

  Location: West US

  3.

  Resource group: RG1

  4.

  Tags: "tag3": "value3"

  You need to identify which tags are assigned to each resource. What should you identify? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: "tag1": "value1" only

  Box 2: "tag2": "value2" and "tag3": "value3"

  Tags applied to the resource group are not inherited by the resources in that resource group.

  References:

  https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-using-tags

• Question 569:

  HOTSPOT

  You have an Azure subscription named Subscription1 that contains the quotas shown in the following table.

  

  You deploy virtual machine to Subscription1 as shown in the following table.

  

  You plan to deploy the virtual machines shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  The total regional vCPUs is 20 so that means a maximum total of 20 vCPUs across all the different VM sizes. The deallocated VM with 16 vCPUs counts towards the total. VM20 and VM1 are using 18 of the maximum 20 vCPUs leaving only two vCPUs available.

  Reference: https://docs.microsoft.com/en-us/azure/virtual-machines/windows/quotas

• Question 570:

  HOTSPOT

  You have an Azure subscription named Subscription1 that contains a virtual network named VNet1. You add the users in the following table.

  

  To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  References: https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles