Microsoft Microsoft Certifications AZ-104 Questions & Answers

• Question 621:

  HOTSPOT

  You need to the appropriate sizes for the Azure virtual for Server2. What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Create a Recovery Services vault

  Create a Recovery Services vault on the Azure Portal.

  Box 2: Install the Azure Site Recovery Provider

  Azure Site Recovery can be used to manage migration of on-premises machines to Azure. Scenario: Migrate the virtual machines hosted on Server1 and Server2 to Azure.

  Server2 has the Hyper-V host role.

  References:

  https://docs.microsoft.com/en-us/azure/site-recovery/migrate-tutorial-on-premises-azure

• Question 622:

  DRAG DROP

  You have an Azure subscription named Sub1 that contains two users named User1 and User2.

  You need to assign role-based access control (RBAC) roles to User1 and User2. The users must be able to perform the following tasks in Sub1:

  User1 must view the data in any storage account.

  User2 must assign users the Contributor role for storage accounts.

  The solution must use the principle of least privilege.

  Which RBAC role should you assign to each user? To answer, drag the appropriate roles to the correct users. Each role may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view

  content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  Correct Answer:

  

  Explanation:

  Box 1: Reader and Data Access

  User1 must view the data in any storage account.

  RBAC Reader and Data Access

  Let's you view everything but will not let you delete or create a storage account or contained resource. It will also allow read/write access to all data contained in a storage account via access to storage account keys.

  Box 2: Owner

  User2 must assign users the Contributor role for storage accounts.

  Owner - Grants full access to manage all resources, including the ability to assign roles in Azure RBAC.

  Incorrect:

  *

  Contributor

  Grants full access to manage all resources, but does not allow you to assign roles in Azure RBAC, manage assignments in Azure Blueprints, or share image galleries.

  *

  Storage Account Contributor

  Permits management of storage accounts. Provides access to the account key, which can be used to access data via Shared Key authorization.

  Reference: https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#storage-account-contributor

• Question 623:

  DRAG DROP

  You have an Azure subscription that contains virtual machine named VM1.

  You need to back up VM. The solution must ensure that backups are stored across three availability zones in the primary region.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  https://learn.microsoft.com/en-us/azure/backup/backup-create-recovery-services-vault https://learn.microsoft.com/en-us/azure/backup/quick-backup-vm-portal

• Question 624:

  HOTSPOT

  You are evaluating the connectivity between the virtual machines after the planned implementation of the Azure networking infrastructure. For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  Hot Area:

  

  Correct Answer:

  

• Question 625:

  HOTSPOT

  You are evaluating the name resolution for the virtual machines after the planned implementation of the Azure networking infrastructure. For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  Hot Area:

  

  Correct Answer:

  

• Question 626:

  HOTSPOT

  You are evaluating the name resolution for the virtual machines after the planned implementation of the Azure networking infrastructure. For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  Hot Area:

  

  Correct Answer:

  

• Question 627:

  HOTSPOT

  You need to meet the connection requirements for the New York office. What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  Box 1: Create a virtual network gateway and a local network gateway. Azure VPN gateway. The VPN gateway service enables you to connect the VNet to the on-premises network through a VPN appliance. For more information, see Connect an on-premises network to a Microsoft Azure virtual network. The VPN gateway includes the following elements:

  *

  Virtual network gateway. A resource that provides a virtual VPN appliance for the VNet. It is responsible for routing traffic from the on-premises network to the VNet.

  *

  Local network gateway. An abstraction of the on-premises VPN appliance. Network traffic from the cloud application to the on-premises network is routed through this gateway.

  *

  Connection. The connection has properties that specify the connection type (IPSec) and the key shared with the on-premises VPN appliance to encrypt traffic.

  *

  Gateway subnet. The virtual network gateway is held in its own subnet, which is subject to various requirements, described in the Recommendations section below.

  Box 2: Configure a site-to-site VPN connection

  On premises create a site-to-site connection for the virtual network gateway and the local network gateway.

  

  Scenario: Connect the New York office to VNet1 over the Internet by using an encrypted connection.

  Incorrect Answers:

  Azure ExpressRoute: Established between your network and Azure, through an ExpressRoute partner. This connection is private. Traffic does not go over the internet.

  References:

  https://docs.microsoft.com/en-us/azure/architecture/reference-architectures/hybrid- networking/vpn

• Question 628:

  DRAG DROP

  You have an Azure subscription that contains two om-premises locations named site1 and site2.

  You need to connect site1 and site2 by using an Azure Virtual WAN.

  Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  Reference: https://docs.microsoft.com/en-us/azure/virtual-wan/virtual-wan-site-to-site-portal

• Question 629:

  DRAG DROP

  You have an Azure subscription that contains the storage accounts shown in in the following table.

  You plan to use AzCopy to copy a blob from container 1 directly to share1.

  You need to identity which authentication method to use when you use AzCopy.

  What should you identify for each account? To answer, drag the appropriate authentication methods to the correct accounts Each method may be used once, or not at all. You may need to drag the split bar between panes or scroll to view

  content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  Correct Answer:

  

• Question 630:

  DRAG DROP

  You have an Azure subscription that contains a virtual network named VNET1. VNET1 contains the subnets shown in the following table.

  

  VNET1 contains a virtual network gateway named VNG1 that uses policy-based routing and has a single Site-to-Site VPN connection to an on-premises datacenter.

  You need to Implement ExpressRoute, The solution must include a Site-to-Site VPN as a backup.

  Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer: