Microsoft Microsoft Certifications AZ-104 Questions & Answers

• Question 71:

  You have an Azure virtual machine named VM1.

  You use Azure Backup to create a backup of VM1 named Backup1.

  After creating Backup1, you perform the following changes to VM1:

  1.

  Modify the size of VM1.

  2.

  Copy a file named Budget.xls to a folder named Data.

  3.

  Reset the password for the built-in administrator account.

  4.

  Add a data disk to VM1.

  An administrator uses the Replace existing option to restore VM1 from Backup1.

  You need to ensure that all the changes to VM1 are restored.

  Which change should you perform again?

  A. Modify the size of VM1.

  B. Reset the password for the built-in administrator account.

  C. Add a data disk.

  D. Copy Budget.xls to Data.

  Correct Answer: D

  Reference: https://docs.microsoft.com/en-us/azure/backup/about-azure-vm-restore

• Question 72:

  You have an Azure subscription that contains two virtual machines named VM1 and VM2.

  You create an Azure load balancer.

  You plan to create a load balancing rule that will load balance HTTPS traffic between VM1 and VM2.

  Which two additional load balancer resources should you create before you can create the load balancing rule? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. a frontend IP address

  B. an inbound NAT rule

  C. a virtual network

  D. a backend pool

  E. a health probe

  Correct Answer: DE

  Reference: https://docs.microsoft.com/en-us/azure/load-balancer/components

• Question 73:

  You have five Azure virtual machines that run Windows Server 2016. The virtual machines are configured as web servers.

  You have an Azure load balancer named LB1 that provides load balancing services for the virtual machines.

  You need to ensure that visitors are serviced by the same web server for each request.

  What should you configure?

  A. Session persistence to Client IP and protocol

  B. Protocol to UDP

  C. Session persistence to None

  D. Floating IP (direct server return) to Enabled

  Correct Answer: A

  Reference: https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-distribution-mode?tabs=azure-portal

• Question 74:

  You have an Azure subscription named Subscription1 that contains a virtual network named VNet1. VNet1 is in a resource group named RG1. Subscription1 has a user named User1. User1 has the following roles:

  1.

  Reader

  2.

  Security Admin

  3.

  Security Reader

  You need to ensure that User1 can assign the Reader role for VNet1 to other users.

  What should you do?

  A. Assign User1 the Network Contributor role for VNet1.

  B. Remove User1 from the Security Reader role for Subscription1. Assign User1 the Contributor role for RG1.

  C. Assign User1 the Owner role for VNet1.

  D. Assign User1 the Network Contributor role for RG1.

  Correct Answer: C

  https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles

• Question 75:

  You have an Azure subscription named Subscription1.

  You have 5 TB of data that you need to transfer to Subscription1.

  You plan to use an Azure Import/Export job.

  What can you use as the destination of the imported data?

  A. Azure File Storage

  B. an Azure Cosmos DB database

  C. Azure Data Factory

  D. Azure SQL Database

  Correct Answer: A

  Azure Import/Export service is used to securely import large amounts of data to Azure Blob storage and Azure Files by shipping disk drives to an Azure datacenter. This service can also be used to transfer data from Azure Blob storage to disk drives and ship to your on-premises sites. Data from one or more disk drives can be imported either to Azure Blob storage or Azure Files.

  Reference: https://docs.microsoft.com/en-us/azure/import-export/storage-import-export-service

• Question 76:

  You have web apps in the West US, Central US and East US Azure regions. You have the App Service plans shown in the following table.

  

  You plan to create an additional App Service plan named ASP5 that will use the Linux operating system.

  You need to identify in which of the currently used locations you can deploy ASP5.

  What should you recommend?

  A. West US, Central US, or East US

  B. Central US only

  C. East US only

  D. West US only

  Correct Answer: A

  This question is asking in which regional locations can a APP service plan be deployed to. It tells you it will be a Linux Plan to throw you off and make you wonder if it matters. Which is does not.

  Then it asks what should you recommend to make you think you are supposed to choose. The fact is you can recommend any region.

  An APP service plan can be deployed in any region and multiple APP service plans can be deployed in a region.

  The Plan type you choose depends on the APP's your going to deploy and whether the programing language can be run on Linux or Windows.

  https://learn.microsoft.com/en-us/azure/app-service/overview-hosting-plans

• Question 77:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a computer named Computer1 that has a point-to-site VPN connection to an Azure virtual network named VNet1. The point-to-site connection uses a self-signed certificate.

  From Azure, you download and install the VPN client configuration package on a computer named Computer2.

  You need to ensure that you can establish a point-to-site VPN connection to VNet1 from Computer2.

  Solution: On Computer2, you set the Startup type for the IPSec Policy Agent service to Automatic.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Each client computer that connects to a VNet using Point-to-Site must have a client certificate installed. You generate a client certificate from the self-signed root certificate, and then export and install the client certificate. If the client certificate is not installed, authentication fails.

  Reference: https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-certificates-point-to-site

• Question 78:

  You have an Azure Active Directory (Azure AD) tenant.

  You plan to delete multiple users by using Bulk delete in the Azure Active Directory admin center.

  You need to create and upload a file for the bulk delete.

  Which user attributes should you include in the file?

  A. The user principal name and usage location of each user only

  B. The user principal name of each user only

  C. The display name of each user only

  D. The display name and usage location of each user only

  E. The display name and user principal name of each user only

  Correct Answer: B

  Reference: https://docs.microsoft.com/en-us/azure/active-directory/enterprise-users/users-bulk-delete

• Question 79:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You need to ensure that an Azure Active Directory (Azure AD) user named Admin1 is assigned the required role to enable Traffic Analytics for an Azure subscription.

  Solution: You assign the Traffic Manager Contributor role at the subscription level to Admin1.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  With Traffic Manager Contributor role you can manage Traffic Manager profiles, do traffic analysis but does not let you control who has access to them.

  Reference: https://docs.microsoft.com/en-us/azure/network-watcher/traffic-analytics https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles

• Question 80:

  You have the Azure virtual machines shown in the following table.

  

  VNET1 is linked to a private DNS zone named contoso.com that contains the records shown in the following table.

  

  You need to ping VM2 from VM1.

  Which DNS names can you use to ping VM2?

  A. comp2.contoso.com and comp4.contoso.com only

  B. comp1.contoso.com, comp2.contoso.com, comp3.contoso.com, and comp4.contoso.com

  C. comp2.contoso.com only

  D. comp1.contoso.com and comp2.contoso.com only

  E. comp1.contoso.com, comp2.contoso.com, and comp4.contoso.com only

  Correct Answer: C

  A record: Is used to map a DNS/domain name to an IP

  Ref:https://www.cloudflare.com/learning/dns/dns-records/dns-a-record/

  TXT records in a lot of cases get used to prove ownership of a domain, it has other purposes too.

  Reference:

  https://support.google.com/a/answer/2716800?hl=en#:~:text=TXT%20records%20are%20a%20type,and%20to%20ensure%20email%20security.

  PTR: A Reverse DNS lookup is used by remote hosts to determine who 'owns' an IP address.

  Reference:

  https://www.mailenable.com/kb/content/article.asp?ID=ME020206

  CNAME records get used to redirect a DNS name or subdomain name to another DNS name or domain name or subdomain name.

  reference: https://support.dnsimple.com/articles/cname-record/

  It would do good to read up on DNS record types and what they are used for, you will be lost if you don't have a basic understanding of it.

  https://ns1.com/resources/dns-types-records-servers-and-queries

  DNS is a key component In the IT field.

  Reference:

  https://medium.com/azure-architects/exploring-azure-private-dns-be65de08f780

  https://simpledns.plus/help/dns-record-types