Microsoft Microsoft Certifications AZ-104 Questions & Answers

• Question 641:

  DRAG DROP

  You have an Azure Active Directory (Azure AD) tenant that has the contoso.onmicrosoft.com domain name.

  You have a domain name of contoso.com registered at a third-party registrar.

  You need to ensure that you can create Azure AD users that have names containing a suffix of @contoso.com.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  The process is simple:

  1.

  Add the custom domain name to your directory

  2.

  Add a DNS entry for the domain name at the domain name registrar

  3.

  Verify the custom domain name in Azure AD

  References: https://docs.microsoft.com/en-us/azure/dns/dns-web-sites-custom-domain

• Question 642:

  DRAG DROP

  You create an Azure Migrate project named TestMig in a resource group named test-migration. You need to discover which on-premises virtual machines to assess for migration. Which three actions should you perform in sequence? To answer, select the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  Step 1: Download the OVA file for the collection appliance Azure Migrate uses an on-premises VM called the collector appliance, to discover information about your on-premises machines. To create the appliance, you download a setup file in

  Open Virtualization Appliance (.ova) format, and import it as a VM on your on-premises vCenter Server.

  Step 2: Create a migration group in the project

  For the purposes of assessment, you gather the discovered VMs into groups. For example, you might group VMs that run the same application. For more precise grouping, you can use dependency visualization to view dependencies of a

  specific machine, or for all machines in a group and refine the group.

  Step 3: Create an assessment in the project

  After a group is defined, you create an assessment for it.

  References:

  https://docs.microsoft.com/en-us/azure/migrate/migrate-overview

• Question 643:

  DRAG DROP

  You have an availability set named AS1 that contains three virtual machines named VM1, VM2, and VM3.

  You attempt to reconfigure VM1 to use a larger size. The operation fails and you receive an allocation failure message.

  You need to ensure that the resize operation succeeds. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  Action 1: Stop VM1, VM2 and VM3 If the VM you wish to resize is part of an availability set, then you must stop all VMs in the availability set before changing the size of any VM in the availability set. The reason all VMs in the availability set must be stopped before performing the resize operation to a size that requires different hardware is that all running VMs in the availability set must be using the same physical hardware cluster. Therefore, if a change of physical hardware cluster is required to change the VM size then all VMs must be first stopped and then restarted one-by-one to a different physical hardware clusters. Action 2: Resize VM1 Action 3: Start VM1, VM2, and VM3

  References: https://azure.microsoft.com/es-es/blog/resize-virtual-machines/

• Question 644:

  DRAG DROP

  You have two Azure virtual machines named VM1 and VM2. VM1 has a single data disk named Disk1. You need to attach Disk1 to VM2. The solution must minimize downtime for both virtual machines. Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  Step 1: Stop VM1.

  Step 2: Detach Disk1 from VM1.

  Step 3: Start VM1.

  Detach a data disk using the portal

  1.

  In the left menu, select Virtual Machines.

  2.

  Select the virtual machine that has the data disk you want to detach and click Stop to deallocate the VM.

  3.

  In the virtual machine pane, select Disks.

  4.

  At the top of the Disks pane, select Edit.

  5.

  In the Disks pane, to the far right of the data disk that you would like to detach, click the Detach button image detach button.

  6.

  After the disk has been removed, click Save on the top of the pane.

  7.

  In the virtual machine pane, click Overview and then click the Start button at the top of the pane to restart the VM.

  8.

  The disk stays in storage but is no longer attached to a virtual machine.

  Step 4: Attach Disk1 to VM2 Attach an existing disk Follow these steps to reattach an existing available data disk to a running VM.

  1.

  Select a running VM for which you want to reattach a data disk.

  2.

  From the menu on the left, select Disks.

  3.

  Select Attach existing to attach an available data disk to the VM.

  4.

  From the Attach existing disk pane, select OK.

  References:

  https://docs.microsoft.com/en-us/azure/virtual-machines/windows/detach-disk https://docs.microsoft.com/en-us/azure/lab-services/devtest-lab-attach-detach-data-disk

• Question 645:

  DRAG DROP

  You are developing an Azure web app named WebApp1. WebApp1 uses an Azure App Service plan named Plan1 that uses the B1 pricing tier.

  You need to configure WebApp1 to add additional instances of the app when CPU usage exceeds 70 percent for 10 minutes.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  Box 1: From the Scale up (App Service Plan) settings blade, change the pricing tier The B1 pricing tier only allows for 1 core. We must choose another pricing tier. Box 2: From the Scale out (App Service Plan) settings blade, enable autoscale

  1. Log in to the Azure portal at http://portal.azure.com

  1.

  Navigate to the App Service you would like to autoscale.

  2.

  Select Scale out (App Service plan) from the menu

  3.

  Click on Enable autoscale. This activates the editor for scaling rules.

  

  Box 3: From the Scale mode to Scale based on metric, add a rule, and set the instance limits. Click on Add a rule. This shows a form where you can create a rule and specify details of the scaling.

  References:

  https://azure.microsoft.com/en-us/pricing/details/app-service/windows/ https://blogs.msdn.microsoft.com/hsirtl/2017/07/03/autoscaling-azure-web-apps/

• Question 646:

  DRAG DROP

  Your network is configured as shown in the following exhibit.

  

  The firewalls are configured as shown in the following table.

  

  Prod1 contains a vCenter server.

  You install an Azure Migrate Collector on Test1.

  You need to discover the virtual machines.

  Which TCP port should be allowed on each firewall? To answer, drag the appropriate ports to the correct firewalls. Each port may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view

  content.

  NOTE: Each correct selection is worth one point.

  Select and Place:

  

  Correct Answer:

  

  References: https://docs.microsoft.com/en-us/azure/migrate/concepts-collector

  

  References: https://docs.microsoft.com/en-us/azure/migrate/migrate-appliance

• Question 647:

  DRAG DROP

  You have an on-premises network that includes a Microsoft SQL Server instance named SQL1.

  You create an Azure Logic App named App1.

  You need to ensure that App1 can query a database on SQL1.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  To access data sources on premises from your logic apps, you can create a data gateway resource in Azure so that your logic apps can use the on-premises connectors. Box 1: From an on-premises computer, install an on-premises data

  gateway. Before you can connect to on-premises data sources from Azure Logic Apps, download and install the on-premises data gateway on a local computer.

  Box 2: From the Azure portal, create an on-premises data gateway Create Azure resource for gateway

  After you install the gateway on a local computer, you can then create an Azure resource for your gateway. This step also associates your gateway resource with your Azure subscription.

  Sign in to the Azure portal. Make sure you use the same Azure work or school email address used to install the gateway.

  On the main Azure menu, select Create a resource > Integration > On-premises data gateway.

  

  On the Create connection gateway page, provide this information for your gateway resource. To add the gateway resource to your Azure dashboard, select Pin to dashboard. When you're done, choose Create.

  Box 3: From the Logic Apps Designer in the Azure portal, add a connector After you create your gateway resource and associate your Azure subscription with this resource, you can now create a connection between your logic app and your

  on-premises data source by using the gateway.

  In the Azure portal, create or open your logic app in the Logic App Designer. Add a connector that supports on-premises connections, for example, SQL Server.

  Set up your connection.

  References:

  https://docs.microsoft.com/en-us/azure/logic-apps/logic-apps-gateway-connection

• Question 648:

  DRAG DROP

  You have an Azure subscription that is used by four departments in your company. The subscription contains 10 resource groups. Each department uses resources in several resource groups.

  You need to send a report to the finance department. The report must detail the costs for each department.

  Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  Select and Place:

  

  Correct Answer:

  

  Box 1: Assign a tag to each resource.

  You apply tags to your Azure resources giving metadata to logically organize them into a taxonomy. After you apply tags, you can retrieve all the resources in your subscription with that tag name and value. Each resource or resource group

  can have a maximum of 15 tag name/value pairs. Tags applied to the resource group are not inherited by the resources in that resource group.

  Box 2: From the Cost analysis blade, filter the view by tag

  After you get your services running, regularly check how much they're costing you. You can see the current spend and burn rate in Azure portal.

  1.

  Visit the Subscriptions blade in Azure portal and select a subscription. You should see the cost breakdown and burn rate in the popup blade.

  2.

  Click Cost analysis in the list to the left to see the cost breakdown by resource. Wait 24 hours after you add a service for the data to populate.

  3.

  You can filter by different properties like tags, resource group, and timespan. Click Apply to confirm the filters and Download if you want to export the view to a Comma-Separated Values (.csv) file.

  Box 3: Download the usage report

  Reference: https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-using-tags https://docs.microsoft.com/en-us/azure/billing/billing-getting-started

• Question 649:

  DRAG DROP

  You have an Azure subscription that contains a storage account.

  You have an on-premises server named Server1 that runs Windows Server 2016. Server1 has 2 TB of data.

  You need to transfer the data to the storage account by using the Azure Import/Export service.

  In which order should you perform the actions? To answer, move all actions from the list of actions to the answer area and arrange them in the correct order.

  NOTE: More than one order of answer choices is correct. You will receive credit for any of the correct orders you select.

  Select and Place:

  

  Correct Answer:

  

  At a high level, an import job involves the following steps:

  Step 1: Attach an external disk to Server1 and then run waimportexport.exe

  Determine data to be imported, number of drives you need, destination blob location for your data in Azure storage.

  Use the WAImportExport tool to copy data to disk drives. Encrypt the disk drives with BitLocker.

  Step 2: From the Azure portal, create an import job.

  Create an import job in your target storage account in Azure portal. Upload the drive journal files.

  Step 3: Detach the external disks from Server1 and ship the disks to an Azure data center.

  Provide the return address and carrier account number for shipping the drives back to you.

  Ship the disk drives to the shipping address provided during job creation.

  Step 4: From the Azure portal, update the import job

  Update the delivery tracking number in the import job details and submit the import job.

  The drives are received and processed at the Azure data center.

  The drives are shipped using your carrier account to the return address provided in the import job.

  Reference:

  https://docs.microsoft.com/en-us/azure/storage/common/storage-import-export-service

• Question 650:

  DRAG DROP

  You have an on-premises network that you plan to connect to Azure by using a site-so-site VPN.

  In Azure, you have an Azure virtual network named VNet1 that uses an address space of 10.0.0.0/16 VNet1 contains a subnet named Subnet1 that uses an address space of 10.0.0.0/24.

  You need to create a site-to-site VPN to Azure.

  Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  NOTE: More than one order of answer choice is correct. You will receive credit for any of the correct orders you select.

  Select and Place:

  

  Correct Answer:

  

  A Site-to-Site VPN gateway connection is used to connect your on-premises network to an Azure virtual network over an IPsec/IKE (IKEv1 or IKEv2) VPN tunnel. This type of connection requires a VPN device located on-premises that has an externally facing public IP address assigned to it. For more information about VPN gateways, see About VPN gateway.

  

  1.

  Create a virtual network

  You can create a VNet with the Resource Manager deployment model and the Azure portal

  2.

  Create the gateway subnet :

  The virtual network gateway uses specific subnet called the gateway subnet. The gateway subnet is part of the virtual network IP address range that you specify when configuring your virtual network. It contains the IP addresses that the

  virtual network gateway resources and services use.

  3.

  Create the VPN gateway :

  You create the virtual network gateway for your VNet. Creating a gateway can often take 45 minutes or more, depending on the selected gateway SKU.

  4.

  Create the local network gateway:

  The local network gateway typically refers to your on-premises location. You give the site a name by which Azure can refer to it, then specify the IP address of the on-premises VPN device to which you will create a connection. You also

  specify the IP address prefixes that will be routed through the VPN gateway to the VPN device. The address prefixes you specify are the prefixes located on your on- premises network. If your on-premises network changes or you need to

  change the public IP address for the VPN device, you can easily update the values later.

  5.

  Configure your VPN device:

  Site-to-Site connections to an on-premises network require a VPN device. In this step, you configure your VPN device. When configuring your VPN device, you need the following:

  A shared key. This is the same shared key that you specify when creating your Site-to-Site VPN connection. In our examples, we use a basic shared key. We recommend that you generate a more complex key to use.

  The Public IP address of your virtual network gateway. You can view the public IP address by using the Azure portal, PowerShell, or CLI. To find the Public IP address of your VPN gateway using the Azure portal, navigate to Virtual network

  gateways, then click the name of your gateway.

  6.

  Create the VPN connection:

  Create the Site-to-Site VPN connection between your virtual network gateway and your on-premises VPN device.

  Reference:

  https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource- manager-portal