Microsoft Microsoft Certifications AZ-104 Questions & Answers

• Question 691:

  You have an Azure subscription that contains multiple virtual machines in the West US Azure region.

  You need to use Traffic Analytics in Azure Network Watcher to monitor virtual machine traffic.

  Which two resources should you create? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. a Log Analytics workspace

  B. an Azure Monitor workbook

  C. a storage account

  D. a Microsoft Sentinel workspace

  E. a Data Collection Rule (DCR) in Azure Monitor

  Correct Answer: AE

  To use Traffic Analytics in Azure Network Watcher to monitor virtual machine traffic, you need to create the following resources:

  A Log Analytics workspace - Traffic Analytics requires a Log Analytics workspace to store and analyze network traffic data.

  A Data Collection Rule (DCR) in Azure Monitor - You need to create a Data Collection Rule within Azure Monitor to specify what data should be collected and sent to the Log Analytics workspace, including the network traffic data for Traffic

  Analytics.

• Question 692:

  You have an Azure subscription that contains the storage accounts shown in the following table.

  

  You deploy a web app named App1 to the West US Azure region. You need to back up App1. The solution must minimize costs. Which storage account should you use as the target for the backup?

  A. storage1

  B. storage2

  C. storage3

  D. storage4

  Correct Answer: B

  In a general scenario like this, not depending on specific requirements and trade-offs, it's best to use a storage account LOCA

  TED IN THE SAME REGION AS THE WEB APP to minimize data transfer costs and reduce latency, which can result in cost savings. Therefore, in this case, using Stor-age2, which is a Blob Storage account located in the West US region,

  would be the better choice to minimize costs (B).

  By using a storage account in the same region as the web app, you can reduce data transfer costs as data transfers between storage accounts within the same region are usually cheaper than transfers between different regions. Additionally,

  using a storage account in the same region can reduce latency, making the backup process faster and more efficient.

• Question 693:

  You have an Azure App Service web app named App1.

  You need to collect performance traces for App1.

  What should you use?

  A. Azure Application Insights Profiler

  B. the Activity log

  C. the Deployment center

  D. the Diagnose and solve problems settings

  Correct Answer: A

  With Application Insights Profiler, you can capture and view performance traces for your application in all these dynamic situations, automatically at-scale, without negatively affecting your end users. https://learn.microsoft.com/en-us/azure/azure-monitor/profiler/profiler-overview

• Question 694:

  You have an Azure subscription.

  You create the following Azure Resource Manager (ARM) template named Template.json.

  

  You need to deploy Template.json.

  Which PowerShell cmdlet should you run from Azure Cloud Shell?

  A. New-AzSubscriptionDeployment

  B. New-AzManagementGroupDeployment

  C. New-AzResourceGroupDeployment

  D. New-AzTenantDeployment

  Correct Answer: C

• Question 695:

  You have an Azure subscription that contains a resource group named RG1.

  You plan to create a storage account named storage1.

  You have a Bicep file named File1.

  You need to modify File1 so that it can be used to automate the deployment of storage1 to RG1.

  Which property should you modify?

  A. kind

  B. scope

  C. sku

  D. location

  Correct Answer: A

• Question 696:

  You have an Azure subscription named Subscription1.

  You have 5 TB of data that you need to transfer to Subscription1.

  You plan to use an Azure Import/Export job.

  What can you use as the destination of the imported data?

  A. an Azure Cosmos DB database

  B. Azure Blob Storage

  C. Azure SQL Database

  D. the Azure File Sync Storage Sync Service

  Correct Answer: B

  Azure Import/Export service is used to securely import large amounts of data to Azure Blob storage and Azure Files by shipping disk drives to an Azure datacenter. This service can also be used to transfer data from Azure Blob storage to disk drives and ship to your on-premises sites. Data from one or more disk drives can be imported either to Azure Blob storage or Azure Files.

  https://learn.microsoft.com/en-us/azure/import-export/storage-import-export-service

• Question 697:

  You have an Azure Storage account named storage1.

  For storage1, you create an encryption scope named Scope1.

  Which storage types can you encrypt by using Scope?

  A. file shares only

  B. containers only

  C. file shares and containers only

  D. containers and tables only

  E. file shares, containers, and tables only

  F. file shares, containers, tables, and queues

  Correct Answer: B

  Encryption scopes enable you to manage encryption with a key that is scoped to a container or an individual blob. There is no blob in the answer choices. https://learn.microsoft.com/en-us/azure/storage/blobs/encryption-scope-overview#how-encryption-scopes-work

• Question 698:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You deploy an Azure Kubernetes Service (AKS) cluster named AKS1.

  You need to deploy a YAML file to AKS1.

  Solution: From Azure CLI, you run az aks.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  https://docs.microsoft.com/en-us/azure/aks/kubernetes-walkthrough

• Question 699:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You deploy an Azure Kubernetes Service (AKS) cluster named AKS1.

  You need to deploy a YAML file to AKS1.

  Solution: From Azure CLI, you run the kubectl client.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/azure/aks/kubernetes-walkthrough

• Question 700:

  You have an Azure subscription named Subscription1 that contains a virtual network named VNet1. VNet1 is in a resource group named RG1. Subscription1 has a user named User1. User1 has the following roles:

  1.

  Reader

  2.

  Security Admin

  3.

  Security Reader

  You need to ensure that User1 can assign the Reader role for VNet1 to other users.

  What should you do?

  A. Remove User1 from the Security Reader role for Subscription1. Assign User1 the Contributor role for RG1.

  B. Assign User1 the Access Administrator role for VNet1.

  C. Remove User1 from the Security Reader and Reader roles for Subscription1. Assign User1 the Contributor role for Subscription1.

  D. Assign User1 the Network Contributor role for RG1.

  Correct Answer: B