Microsoft Microsoft Certifications AZ-104 Questions & Answers

• Question 571:

  HOTSPOT

  You have an Azure subscription named Subscription1. Subscription1 contains two Azure virtual machines VM1 and VM2. VM1 and VM2 run Windows Server 2016.

  VM1 is backed up daily by Azure Backup without using the Azure Backup agent.

  VM1 is affected by ransomware that encrypts data.

  You need to restore the latest backup of VM1.

  To which location can you restore the backup? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1 : VM1 and VM2 only When recovering files, you can't restore files to a previous or future operating system version.You can restore files from a VM to the same server operating system, or to the compatible client operating system. Therefore "VM1 and VM2 only" is the best answer since both run on Windows Server 2016. "A new Azure virtual machine only" ,this will also work but why to create unnecessary new VM in Azure if existing VM will do the task. So this option is incorrect.

  Box 2 : VM1 or A new Azure virtual machine only When restoring a VM, you can't use the replace existing VM option for encrypted VMs. This option is only supported for unencrypted managed disks. And also You can restore files from a VM to the same server operating system, or to the compatible client operating system only. Hence "VM1 or A new Azure virtual machine only" is correct answer.

  References: https://docs.microsoft.com/en-us/azure/backup/backup-azure-arm-restore-vms https://docs.microsoft.com/en-us/azure/backup/backup-azure-restore-files-from-vm#system- requirements

• Question 572:

  HOTSPOT

  You have an Azure subscription that contains the resource groups shown in the following table.

  

  RG1 contains the resources shown in the following table.

  

  VM1 is running and connects to NIC1 and Disk1. NIC1 connects to VNET1.

  RG2 contains a public IP address named IP2 that is in the East US location. IP2 is not assigned to a virtual machine.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Yes

  You can move storage

  Box 2: No

  You can't move to a new resource group a NIC that is attached to a virtual machine.

  Box 3: No

  Azure Public IPs are region specific and can't be moved from one region to another.

  Reference:

  https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/move-support-resources

  https://docs.microsoft.com/en-us/azure/virtual-network/move-across-regions-publicip-powershell

• Question 573:

  HOTSPOT

  You have an Azure subscription. The subscription contains virtual machines that run Windows Server 2016 and are configured as shown in the following table.

  

  You create a public Azure DNS zone named adatum.com and a private Azure DNS zone named contoso.com. You create a virtual network link for contoso.com as shown in the following exhibit.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  Hot Area:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-name-resolution-for-vms-and-role-instances https://docs.microsoft.com/en-us/azure/dns/private-dns-autoregistration

• Question 574:

  HOTSPOT

  You have an Azure virtual machine that runs Windows Server 2019 and has the following configurations:

  1.

  Name: VM1

  2.

  Location: West US

  3.

  Connected to: VNET1

  4.

  Private IP address: 10.1.0.4

  5.

  Public IP address: 52.186.85.63

  6.

  DNS suffix in Windows Server: Adatum.com

  You create the Azure DNS zones shown in the following table.

  You need to identify which DNS zones you can link to VNET1 and the DNS zones to which VM1 can automatically register. Which zones should you identify? To answer, select the appropriate options in the answer area.

  Hot Area:

  

  Correct Answer:

  

  

  Reference: https://docs.microsoft.com/en-us/azure/dns/private-dns-overview

• Question 575:

  HOTSPOT

  You create a private Azure DNS zone named adatum.com. You configure the adatum.com zone to allow auto registration from VNET1.

  Which A records will be added to the adatum.com zone for each virtual machine? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  Hot Area:

  

  Correct Answer:

  You have Azure virtual machines that run Windows Server 2019 and are configured as shown in the following table.

  

  The virtual machines are registered (added) to the private zone as A records pointing to their private IP addresses.

  Reference:

  https://docs.microsoft.com/en-us/azure/dns/private-dns-overview

  https://docs.microsoft.com/en-us/azure/dns/private-dns-scenarios

• Question 576:

  HOTSPOT

  You manage two Azure subscriptions named Subscription1 and Subscription2. Subscription1 has the following virtual networks:

  

  The virtual networks contain the following subnets:

  

  Subscription2 contains the following virtual network:

  *

  Name: VNETA

  *

  Address space: 10.10.128.0/17

  *

  Location: Canada Central VNETA contains the following subnets:

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Yes

  With VNet-to-VNet you can connect Virtual Networks in Azure across Different regions.

  Box 2: Yes

  Azure supports the following types of peering:

  1.

  Virtual network peering: Connect virtual networks within the same Azure region.

  2.

  Global virtual network peering: Connecting virtual networks across Azure regions.

  Box 3: Yes

  References: https://azure.microsoft.com/en-us/blog/vnet-to-vnet-connecting-virtual-networks-in-azure-across-different-regions/ https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-manage-peering#requirements-and-constraints

• Question 577:

  HOTSPOT

  You have an Azure subscription named Subscription1 that contains the resources in the following table.

  

  You install the Web Server server role (IIS) on WM1 and VM2, and then add VM1 and VM2 to LB1. LB1 is configured as shown in the LB1 exhibit. (Click the Exhibit button.)

  

  Rule1 is configured as shown in the Rule1 exhibit. (Click the Exhibit button.)

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  To load balance with basic load balancer backend pool virtual machines has to be in a single availability set or virtual machine scale set.

  A health probe is used to determine the health status of the instances in the backend pool. During load balancer creation, configure a health probe for the load balancer to use. This health probe will determine if an instance is healthy and can

  receive traffic. A Load Balancer rule is used to define how incoming traffic is distributed to the all the instances within the Backend Pool. So if you delete the rule, load balancing won't happen.

  

  Reference: https://docs.microsoft.com/en-us/azure/load-balancer/skus

• Question 578:

  HOTSPOT

  You plan to deploy five virtual machines to a virtual network subnet.

  Each virtual machine will have a public IP address and a private IP address.

  Each virtual machine requires the same inbound and outbound security rules.

  What is the minimum number of network interfaces and network security groups that you require? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: 5

  A public and a private IP address can be assigned to a single network interface.

  Box 2: 1

  You can associate zero, or one, network security group to each virtual network subnet and network interface in a virtual machine. The same network security group can be associated to as many subnets and network interfaces as you choose.

  Reference:

  https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-network-interface-addresses

• Question 579:

  HOTSPOT

  You have a virtual network named VNet1 that has the configuration shown in the following exhibit.

  

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: add an address space Your IaaS virtual machines (VMs) and PaaS role instances in a virtual network automatically receive a private IP address from a range that you specify, based on the address space of the subnet they are connected to. We need to add the 192.168.1.0/24 address space.

  Box 2: add a subnet

  References: https://docs.microsoft.com/en-us/microsoft-365/solutions/cloud-architecture-models?view=o365-worldwide https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-static-private-ip-arm-pportal

• Question 580:

  HOTSPOT

  You create a Recovery Services vault backup policy named Policy1 as shown in the following exhibit:

  

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: 10 years

  The yearly backup point occurs to 1 March and its retention period is 10 years.

  Box 2: 10 weeks