Latest Oct 23, 2021 Real AZ-104 Exam Dumps Questions Valid AZ-104 Dumps PDF
Microsoft AZ-104 Exam Dumps - PDF Questions and Testing Engine
What is the duration, language, and format of AZ-104:Microsoft Azure Administrator Exam
- language: English
- This is beta exam , would be available on or around March 31, 2020.
- Number of Questions: 40 to 60 questions(Since Microsoft does not publish this information, the number of exam questions may change without notice.)
- Type of Questions: This test format is multiple choice.
- Length of Examination: 50 mins
- Passing Score: 700 / 1000
NEW QUESTION 93
You need to create an Azure Storage account that meets the following requirements:
* Minimizes costs
* Supports hot, cool, and archive blob tiers
* Provides fault tolerance if a disaster affects the Azure region where the account resides How should you complete the command? To answer, select the appropriate options in the answer area. NOTE:
Each correct selection is worth one point
Answer:
Explanation:
Explanation
Box 1: StorageV2
You may only tier your object storage data to hot, cool, or archive in Blob storage and General Purpose v2 (GPv2) accounts. General Purpose v1 (GPv1) accounts do not support tiering.
General-purpose v2 accounts deliver the lowest per-gigabyte capacity prices for Azure Storage, as well as industry-competitive transaction prices.
Box 2: Standard_GRS
Geo-redundant storage (GRS): Cross-regional replication to protect against region-wide unavailability.
NEW QUESTION 94
You are configuring serverless computing in Azure.
You need to receive an email message whenever a resource is created in or deleted from a resource group.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation
References:
https://docs.microsoft.com/en-us/azure/event-grid/monitor-virtual-machine-changes-event-grid-logic-app Action 1: Create an Azure Logic App
Action 2: Create an Azure Event Grid Trigger
Action 3: Create conditions and actions
References:
https://docs.microsoft.com/en-us/azure/event-grid/monitor-virtual-machine-changes-event-grid-logic-app
NEW QUESTION 95
You have a deployment template named Template1 that is used to deploy 10 Azure web apps.
You need to identify what to deploy before you deploy Template1. The solution must minimize Azure costs.
What should you identify?
- A. one App Service plan
- B. five Azure Application Gateways
- C. one Azure Traffic Manager
- D. one Azure Application Gateway
You create Azure web apps in an App Service plan. - E. 10 App Service plans
Answer: A
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/app-service/overview-hosting-plans
NEW QUESTION 96
You are developing an Azure web app named WebApp1. WebApp1 uses an Azure App Service plan named Plan1 that uses the B1 pricing tier.
You need to configure WebApp1 to add additional instances of the app when CPU usage exceeds 70 percent for 10 minutes.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation
Box 1: From the Scale up (App Service Plan) settings blade, change the pricing tier The B1 pricing tier only allows for 1 core. We must choose another pricing tier.
Box 2: From the Scale out (App Service Plan) settings blade, enable autoscale
1.
Log in to the Azure portal at http://portal.azure.com
1. Navigate to the App Service you would like to autoscale.
2. Select Scale out (App Service plan) from the menu
3. Click on Enable autoscale. This activates the editor for scaling rules.
Box 3: From the Scale mode to Scale based on metric, add a rule, and set the instance limits.
Click on Add a rule. This shows a form where you can create a rule and specify details of the scaling.
References:
https://azure.microsoft.com/en-us/pricing/details/app-service/windows/
https://blogs.msdn.microsoft.com/hsirtl/2017/07/03/autoscaling-azure-web-apps/
NEW QUESTION 97
You need to meet the user requirement for Admin1.
What should you do?
- A. From the Azure Active Directory blade, modify the Groups.
- B. From the Azure Active Directory blade, modify the Properties.
- C. From the Subscriptions blade, select the subscription, and then modify the Properties.
- D. From the Subscriptions blade, select the subscription, and then modify the Access control (IAM) settings.
Answer: C
Explanation:
Change the Service administrator for an Azure subscription
* Sign in to Account Center as the Account administrator.
* Select a subscription.
* On the right side, select Edit subscription details.
Scenario: Designate a new user named Admin1 as the service administrator of the Azure subscription.
References:
https://docs.microsoft.com/en-us/azure/billing/billing-add-change-azure-subscription-administrator
NEW QUESTION 98
VM1 is running and connects to NIC1 and Disk1. NIC1 connects to VNET1.
RG2 contains a public IP address named IP2 that is in the East US location. IP2 is not assigned to a virtual machine.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Reference:
https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/move-support-resources
https://docs.microsoft.com/en-us/azure/virtual-network/move-across-regions-publicip-powershell
NEW QUESTION 99
You have an Azure subscription named Subscription1. Subscription1 contains a virtual machine named VM1.
You install and configure a web server and a DNS server on VM1.
VM1 has the effective network security rules shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Box 1:
Rule2 blocks ports 50-60, which includes port 53, the DNS port. Internet users can reach the Web server, since it uses port 80.
Box 2:
If Rule2 is removed internet users can reach the DNS server as well.
Note: Rules are processed in priority order, with lower numbers processed before higher numbers, because lower numbers have higher priority. Once traffic matches a rule, processing stops. As a result, any rules that exist with lower priorities (higher numbers) that have the same attributes as rules with higher priorities are not processed.
References:
https://docs.microsoft.com/en-us/azure/virtual-network/security-overview
NEW QUESTION 100
You need to recommend a solution for App1. The solution must meet the technical requirements. What should you include in the recommendation? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
This reference architecture shows how to deploy VMs and a virtual network configured for an N-tier application, using SQL Server on Windows for the data tier.
Scenario: You have a public-facing application named App1. App1 is comprised of the following three tiers:
* A SQL database
* A web front end
* A processing middle tier
Each tier is comprised of five virtual machines. Users access the web front end by using HTTPS only.
* Technical requirements include:
* Move all the virtual machines for App1 to Azure.
* Minimize the number of open ports between the App1 tiers.
References: https://docs.microsoft.com/en-us/azure/architecture/reference-architectures/n-tier/n-tier-sql-server
NEW QUESTION 101
You plan to deploy five virtual machines to a virtual network subnet.
Each virtual machine will have a public IP address and a private IP address.
Each virtual machine requires the same inbound and outbound security rules.
What is the minimum number of network interfaces and network security groups that you require? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Box 1: 5
A public and a private IP address can be assigned to a single network interface.
Box 2: 1
You can associate zero, or one, network security group to each virtual network subnet and network interface in a virtual machine. The same network security group can be associated to as many subnets and network interfaces as you choose.
Reference:
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-network-interface-addresses
NEW QUESTION 102
You have an Azure Active Directory tenant named Contoso.com that includes following users:
Contoso.com includes following Windows 10 devices:
You create following security groups in Contoso.com:
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Box 1: Yes
User1 is a Cloud Device Administrator.
Device2 is Azure AD joined.
Group1 has the assigned to join type. User1 is the owner of Group1.
Note: Assigned groups - Manually add users or devices into a static group.
Azure AD joined or hybrid Azure AD joined devices utilize an organizational account in Azure AD
Box 2: No
User2 is a User Administrator.
Device1 is Azure AD registered.
Group1 has the assigned join type, and the owner is User1.
Note: Azure AD registered devices utilize an account managed by the end user, this account is either a Microsoft account or another locally managed credential.
Box 3: Yes
User2 is a User Administrator.
Device2 is Azure AD joined.
Group2 has the Dynamic Device join type, and the owner is User2.
References:
https://docs.microsoft.com/en-us/azure/active-directory/devices/overview
NEW QUESTION 103
You have an Azure subscription
You need to use an Azure Resource Manager (ARM) template to create a virtual machine that will have multiple data disks.
How should you complete the template? To answer select the appropriate options in the answer area NOTE: Each correct selection n worth one point.
Answer:
Explanation:
Explanation
NEW QUESTION 104
You have an Azure subscription named Subscription1 that contains the following resource group:
Name: RG1
Region: West US
Tag: "tag1": "value1"
You assign an Azure policy named Policy1 to Subscription1 by using the following configurations:
Exclusions: None
Policy definition: Append tag and its default value
Assignment name: Policy1
Parameters:
- Tag name: Tag2
- Tag value: Value2
After Policy1 is assigned, you create a storage account that has the following configurations:
Name: storage1
Location: West US
Resource group: RG1
Tags: "tag3": "value3"
You need to identify which tags are assigned to each resource.
What should you identify? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Box 1: "tag1": "value1" only
Box 2: "tag2": "value2" and "tag3": "value3"
Tags applied to the resource group are not inherited by the resources in that resource group.
References:
https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-using-tags
NEW QUESTION 105
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your company registers a domain name of contoso.com.
You create an Azure DNS zone named contoso.com, and then you add an A record to the zone for a host named www that has an IP address of 131.107.1.10.
You discover that Internet hosts are unable to resolve www.contoso.com to the 131.107.1.10 IP address.
You need to resolve the name resolution issue.
Solution: You modify the SOA record in the contoso.com zone.
- A. No
- B. Yes
Answer: A
Explanation:
Modify the NS record, not the SOA record.
Note: The SOA record stores information about the name of the server that supplied the data for the zone; the administrator of the zone; the current version of the data file; the number of seconds a secondary name server should wait before checking for updates; the number of seconds a secondary name server should wait before retrying a failed zone transfer; the maximum number of seconds that a secondary name server can use data before it must either be refreshed or expire; and a default number of seconds for the time-to live file on resource records.
References:
https://searchnetworking.techtarget.com/definition/start-of-authority-record
NEW QUESTION 106
You have the Azure virtual machines shown in the following table.
VNNET1 is linked to a private DNS zone named contoso.com that contains the records shown in the following table.
Which DNS names can you use to ping VM2?
- A. comp1.contoso.com, comp2.contoso.com, comp3.contoso.com, and comp4.contoso.com
- B. comp2.contoso.cam only
- C. comp1.contoso.com and comp2.contoso.com only
- D. comp1.contoso.com, comp2.contoso.com, and comp4.contoso.com only
- E. comp2.contoso.com and comp4.contoso.com only
Answer: A
Explanation:
Reference:
https://medium.com/azure-architects/exploring-azure-private-dns-be65de08f780
https://simpledns.plus/help/dns-record-types
NEW QUESTION 107
You have an Azure subscription named Subscription1 that contains the resources shown in the following table.
In storage1, you create a blob container named blob1 and a file share named share1.
Which resources can be backed up to Vault1 and Vault2? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Box 1: VM1 only
VM1 is in the same region as Vault1.
File1 is not in the same region as Vautl1.
SQL is not in the same region as Vault1.
Blobs cannot be backup up to service vaults.
Note: To create a vault to protect virtual machines, the vault must be in the same region as the virtual machines.
Box 2: Share1 only.
Storage1 is in the same region (West USA) as Vault2. Share1 is in Storage1.
Note: After you select Backup, the Backup pane opens and prompts you to select a storage account from a list of discovered supported storage accounts. They're either associated with this vault or present in the same region as the vault, but not yet associated to any Recovery Services vault.
References:
https://docs.microsoft.com/bs-cyrl-ba/azure/backup/backup-create-rs-vault
https://docs.microsoft.com/en-us/azure/backup/backup-afs
Topic 1, Litware, inc.
Overview
Litware, Ltd. is a consulting company that has a main office in Montreal and two branch offices in Seattle and New York.
The Montreal office has 2,000 employees. The Seattle office has 1,000 employees. The New York office has 200 employees.
All the resources used by Litware are hosted on-premises.
Litware creates a new Azure subscription. The Azure Active Directory (Azure AD) tenant uses a domain named Litware.onmicrosoft.com. The tenant uses the P1 pricing tier.
Existing Environment
The network contains an Active Directory forest named Litware.com. All domain controllers are configured as DNS servers and host the Litware.com DNS zone.
Litware has finance, human resources, sales, research, and information technology departments. Each department has an organizational unit (OU) that contains all the accounts of that respective department. All the user accounts have the department attribute set to their respective department. New users are added frequently.
Litware.com contains a user named User1.
All the offices connect by using private links.
Litware has data centers in the Montreal and Seattle offices. Each data center has a firewall that can be configured as a VPN device.
All infrastructure servers are virtualized. The virtualization environment contains the servers in the following table.
Litware uses two web applications named App1 and App2. Each instance on each web application requires 1GB of memory.
The Azure subscription contains the resources in the following table.
The network security team implements several network security groups (NSGs).
Planned Changes
Litware plans to implement the following changes:
* Deploy Azure ExpressRoute to the Montreal office.
* Migrate the virtual machines hosted on Server1 and Server2 to Azure.
* Synchronize on-premises Active Directory to Azure Active Directory (Azure AD).
* Migrate App1 and App2 to two Azure web apps named webApp1 and WebApp2.
Technical Requirements
Litware must meet the following technical requirements:
* Ensure that WebApp1 can adjust the number of instances automatically based on the load and can scale up to five instance*.
* Ensure that VM3 can establish outbound connections over TCP port 8080 to the applications servers in the Montreal office.
* Ensure that routing information is exchanged automatically between Azure and the routers in the Montreal office.
* Enable Azure Multi-Factor Authentication (MFA) for the users in the finance department only.
* Ensure that webapp2.azurewebsites.net can be accessed by using the name app2.Litware.com.
* Connect the New Your office to VNet1 over the Internet by using an encrypted connection.
* Create a workflow to send an email message when the settings of VM4 are modified.
* Create a custom Azure role named Role1 that is based on the Reader role.
* Minimize costs whenever possible.
NEW QUESTION 108
You need to configure the Device settings to meet the technical requirements and the user requirements.
Which two settings should you modify? To answer, select the appropriate settings in the answer area.
Answer:
Explanation:
Explanation
Box 1: Selected
Only selected users should be able to join devices
Box 2: Yes
Require Multi-Factor Auth to join devices.
From scenario:
* Ensure that only users who are part of a group named Pilot can join devices to Azure AD
* Ensure that when users join devices to Azure Active Directory (Azure AD), the users use a mobile phone to verify their identity.
NEW QUESTION 109
You have 100 Azure subscriptions. All the subscriptions are associated to the same Azure Active Directory (Azure AD) tenant named contoso.com.
You are a global administrator.
You plan to create a report that lists all the resources across all the subscriptions.
You need to ensure that you can view all the resources in all the subscriptions.
What should you do?
- A. From the Azure portal, modify the properties of the Azure AD tenant.
- B. From Windows PowerShell, run the New-AzureADUserAppRoleAssignment cmdlet.
- C. From the Azure portal, modify the profile settings of your account.
- D. From Windows PowerShell, run the Add-AzureADAdministrativeUnitMember cmdlet.
Answer: B
Explanation:
Explanation
The New-AzureADUserAppRoleAssignment cmdlet assigns a user to an application role in Azure Active Directory (AD). Use it for the application report.
References:
https://docs.microsoft.com/en-us/powershell/module/azuread/new-azureaduserapproleassignment?view=azuread
NEW QUESTION 110
......
Topics of AZ-104:Microsoft Azure Administrator Exam
Candidates should apprehend the examination topics before they begin of preparation. because it’ll extremely facilitate them in touch the core. Our AZ-104 dumps will include the following topics:
1. Manage Azure Identities and Governance (15-20%)
Manage Azure AD objects
- Perform bulk user updates
- Configure self-service password reset
- Manage user and group properties
- Manage device settings
- NOT: Azure AD Connect; PIM
- Create users and groups
- Manage guest accounts
- Configure Azure AD Join
Manage role-based access control (RBAC)
- Manage multiple directories
- Resources (VM, disk, etc.)
- Interpret access assignments
- Subscriptions
- Create a custom role
- Resource groups
- Provide access to Azure resources by assigning roles
Manage subscriptions and governance
- Configure resource locks
- Configure Azure policies
- Apply tags
- Configure Cost Management
- Create and manage resource groups
- Configure management groups
- Manage subscriptions
2. Implement and Manage Storage (10-15%)
Manage storage accounts
- Create and configure storage accounts
- Manage access keys
- Configure Azure AD Authentication for a storage account
- Configure network access to storage accounts
- Implement Azure storage replication
- Generate shared access signature
Manage data in Azure Storage
- Install and use Azure Storage Explorer
- Import into Azure job
- Export from Azure job
- Copy data by using AZCopy
Configure Azure files and Azure blob storage
- Create and configure Azure File Sync service
- Create an Azure file share
- Configure Azure blob storage
- Configure storage tiers for Azure blobs
3. Deploy and Manage Azure Compute Resources (25-30%)
Configure VMs for high availability and scalability
- Deploy and configure scale sets
- Configure high availability
Automate deployment and configuration of VMs
- Configure VHD template
- Deploy from template
- Automate configuration management by using custom script extensions
- Modify Azure Resource Manager (ARM) template
- Save a deployment as an ARM template
Create and configure VMs
- Add data discs
- Redeploy VMs
- Manage VM sizes
- Configure networking
- Configure Azure Disk Encryption
- Move VMs from one resource group to another
Create and configure containers
- NOT: selecting an container solution architecture or product; container registry settings
- Create and configure Azure Container Instances (ACI)
- Create and configure Azure Kubernetes Service (AKS)
Create and configure Web Apps
- Create and configure App Service
- Create and configure App Service Plans
- NOT: Azure Functions; Logic Apps; Event Grid
4. Configure and Manage Virtual Networking (30-35%)
Implement and manage virtual networking
- Configure private and public IP addresses, network routes, network interface, subnets, and virtual network
- Create and configure VNET peering
Configure name resolution
- Configure a private or public DNS zone
- Configure custom DNS settings
- Configure Azure DNS
Secure access to virtual networks
- Evaluate effective security rules
- Deploy and configure Azure Bastion Service
- NOT: Implement Application Security Groups; DDoS
- Deploy and configure Azure Firewall
- Associate an NSG to a subnet or network interface
- Create security rules
Configure load balancing
- Configure Application Gateway
- Configure an internal load balancer
- Configure load balancing rules
- NOT: Traffic Manager and FrontDoor and PrivateLink
- Troubleshoot load balancing
- Configure a public load balancer
Monitor and troubleshoot virtual networking
- Use Network resource monitoring
- Use Network Watcher
- Troubleshoot virtual network connectivity
- Troubleshoot external networking
- Monitor on-premises connectivity
Integrate an on-premises network with an Azure virtual network
- Configure Azure Virtual WAN
- Create and configure VPNs
- Verify on premises connectivity
- Configure ExpressRoute
- Create and configure Azure VPN Gateway
5. Monitor and back up Azure resources (10-15%)
Monitor resources by using Azure Monitor
- Configure Application Insights
- Configure and interpret metrics
- Set up alerts and actions
- Configure Log Analytics
- Query and analyze logs
Implement backup and recovery
- Perform backup and restore operations by using Azure Backup Service
- Create and configure backup policy
- Configure and review backup reports
- Perform site-to-site recovery by using Azure Site Recovery
- Create a Recovery Services Vault use soft delete to recover Azure VMs
Reliable Microsoft Azure Administrator Associate AZ-104 Dumps PDF Oct 23, 2021 Recently Updated Questions: https://www.actual4test.com/AZ-104_examcollection.html
Latest AZ-104 Exam Dumps for Pass Guaranteed: https://drive.google.com/open?id=1YqFqHBYcI9xxVBsOuh85DVCuWqPk9-Bc