Step into a realm where boundaries blur and traditional learning paradigms are transcended, all with the support of the AZ-104 dumps. Tailored for the curious and the adventurous, the AZ-104 dumps present a treasure trove of practice questions, each ushering in newfound insights. Whether it\’s the concise elegance of PDFs or the dynamic realms of the VCE format that draw you in, the AZ-104 dumps serve as your guide in this exploration. A groundbreaking study guide, synchronized with the essence of the AZ-104 dumps, paints the bigger picture, ensuring every detail is illuminated. Anchored by our unwavering faith in these resources, we reiterate our 100% Pass Guarantee.
[Recently Introduced] Enhance your exam experience with the gratis AZ-104 PDF and Exam Questions, guaranteeing a pass
Question 1:
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while
others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your company has 100 users located in an office in Paris.
The on-premises network contains the servers shown in the following table.
You create a new subscription. You need to move all the servers to Azure.
Solution: You use Azure Site Recovery.
Does this meet the goal?
A. Yes
B. No
Correct Answer: A
As an organization you need to adopt a business continuity and disaster recovery (BCDR) strategy that keeps your data safe, and your apps and workloads online, when planned and unplanned outages occur.
Azure Recovery Services contributes to your BCDR strategy:
Site Recovery service: Site Recovery helps ensure business continuity by keeping business apps and workloads running during outages. Site Recovery replicates workloads running on physical and virtual machines (VMs) from a primary site
to a secondary location. When an outage occurs at your primary site, you fail over to secondary location, and access apps from there. After the primary location is running again, you can fail back to it.
Backup service: The Azure Backup service keeps your data safe and recoverable.
Site Recovery can manage replication for:
1.
Azure VMs replicating between Azure regions.
2.
On-premises VMs, Azure Stack VMs, and physical servers.
Reference:
https://docs.microsoft.com/en-us/azure/site-recovery/site-recovery-overview
Question 2:
DRAG DROP
You have an Azure subscription that is used by four departments in your company. The subscription contains 10 resource groups. Each department uses resources in several resource groups.
You need to send a report to the finance department. The report must detail the costs for each department.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Select and Place:
Correct Answer:
Box 1: Assign a tag to each resource.
You apply tags to your Azure resources giving metadata to logically organize them into a taxonomy. After you apply tags, you can retrieve all the resources in your subscription with that tag name and value. Each resource or resource group
can have a maximum of 15 tag name/value pairs. Tags applied to the resource group are not inherited by the resources in that resource group.
Box 2: From the Cost analysis blade, filter the view by tag
After you get your services running, regularly check how much they\’re costing you. You can see the current spend and burn rate in Azure portal.
1.
Visit the Subscriptions blade in Azure portal and select a subscription. You should see the cost breakdown and burn rate in the popup blade.
2.
Click Cost analysis in the list to the left to see the cost breakdown by resource. Wait 24 hours after you add a service for the data to populate.
3.
You can filter by different properties like tags, resource group, and timespan. Click Apply to confirm the filters and Download if you want to export the view to a Comma-Separated Values (.csv) file.
Box 3: Download the usage report
Reference: https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-using-tags https://docs.microsoft.com/en-us/azure/billing/billing-getting-started
Question 3:
You have an Azure subscription that contains a virtual network named VNet1.
VNet1 uses two ExpressRoute circuits that connect to two separate on-premises datacenters.
You need to create a dashboard to display detailed metrics and a visual representation of the network topology.
What should you use?
A. Azure Monitor Network Insights
B. a Data Collection Rule (DCR)
C. Azure Virtual Network Watcher
D. Log Analytics
Correct Answer: A
Through Network Insights, you can view topological maps and health dashboards containing important ExpressRoute information without needing to complete any extra setup.
Reference: https://learn.microsoft.com/en-us/azure/expressroute/expressroute-network-insights
Question 4:
You create an App Service plan named App1 and an Azure web app named webapp1.
You discover that the option to create a staging slot is unavailable. You need to create a staging slot for App1.
What should you do first?
A. From webapp1, modify the Application settings.
B. From webapp1, add a custom domain.
C. From App1, scale up the App Service plan.
D. From App1, scale out the App Service plan.
Correct Answer: C
The app must be running in the Standard, Premium, or Isolated tier in order for you to enable multiple deployment slots.
If the app isn\’t already in the Standard, Premium, or Isolated tier, you receive a message that indicates the supported tiers for enabling staged publishing. At this point, you have the option to select Upgrade and go to the Scale tab of your app
before continuing.
Scale up: Get more CPU, memory, disk space, and extra features like dedicated virtual machines (VMs), custom domains and certificates, staging slots, autoscaling, and more.
Incorrect:
Scale out: Increase the number of VM instances that run your app. You can scale out to as many as 30 instances
Reference:
https://docs.microsoft.com/en-us/azure/app-service/deploy-staging-slots
https://docs.microsoft.com/en-us/azure/app-service/manage-scale-up
Question 5:
You need to resolve the Active Directory issue. What should you do?
A. From Active Directory Users and Computers, select the user accounts, and then modify the User Principal Name value.
B. Run idfix.exe, and then use the Edit action.
C. From Active Directory Domains and Trusts, modify the list of UPN suffixes.
D. From Azure AD Connect, modify the outbound synchronization rule.
Correct Answer: B
IdFix is used to perform discovery and remediation of identity objects and their attributes in an on- premises Active Directory environment in preparation for migration to Azure Active Directory. IdFix is intended for the Active Directory
administrators responsible for directory synchronization with Azure Active Directory.
Scenario: Active Directory Issue
Several users in humongousinsurance.com have UPNs that contain special characters.
You suspect that some of the characters are unsupported in Azure AD.
References: https://www.microsoft.com/en-us/download/details.aspx?id=36832
Question 6:
HOTSPOT
You have an Azure subscription that is linked to an Azure AD tenant. The tenant contains the custom role-based access control (RBAC) roles shown in the following table.
From the Azure portal, you need to create two custom roles named Role3 and Role4. Role3 will be an Azure subscription role. Role4 will be an Azure AD role. Which roles can you clone to create the new roles? To answer, select the appropriate options in the answer area.
Hot Area:
Correct Answer:
Question 7:
Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.
Your company\’s Azure solution makes use of Multi-Factor Authentication for when users are not in the office. The Per Authentication option has been configured as the usage model. After the acquisition of a smaller business and the addition
of the new staff to Azure Active Directory (Azure AD) obtains a different company and adding the new employees to Azure Active Directory (Azure AD), you are informed that these employees should also make use of Multi-Factor
Authentication.
To achieve this, the Per Enabled User setting must be set for the usage model.
Solution: You reconfigure the existing usage model via the Azure CLI.
Does the solution meet the goal?
A. Yes
B. No
Correct Answer: B
Since it is not possible to change the usage model of an existing provider as it is right now, you have to create a new one and reactivate your existing server with activation credentials from the new provider.
Reference: https://365lab.net/2015/04/11/switch-usage-model-in-azure-multi-factor-authentication-server/
Question 8:
You have an Azure web app named App1 that streams video content to users. App1 is located in the East US Azure region.
Users in North America stream the video content without any interruption.
Users in Asia and Europe report that the video buffer often and do not play back smoothly.
You need to recommend a solution to improve video streaming to the European and Asian users.
What should you recommend?
A. Scale out the App Service plan.
B. Scale up the App Service plan.
C. Configure an Azure Content Delivery Network (CDN) endpoint.
D. Configure Azure File Sync.
Correct Answer: C
A content delivery network (CDN) is a distributed network of servers that can efficiently deliver web content to users. CDNs\’ store cached content on edge servers in point-of-presence (POP) locations that are close to end users, to minimize
latency.
Azure Content Delivery Network (CDN) offers developers a global solution for rapidly delivering high- bandwidth content to users by caching their content at strategically placed physical nodes across the world.
Reference: https://docs.microsoft.com/en-us/azure/cdn/cdn-overview
Question 9:
From the MFA Server blade, you open the Block/unblock users blade as shown in the exhibit.
What caused AlexW to be blocked?
A. The user account password expired.
B. The user entered an incorrect PIN four times within 10 minutes.
C. An administrator manually blocked the user.
D. The user reported a fraud alert when prompted for additional authentication.
Correct Answer: C
An Administrator can block a user:
1.
Sign in to the Azure portal as an administrator.
2.
Browse to Azure Active Directory > MFA > Block/unblock users.
3.
Select Add to block a user.
4.
Select the Replication Group. Enter the username for the blocked user as [email protected]. Enter a comment in the Reason field, for example: Lost phone.
5.
Select Add to finish blocking the user.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-mfasettings
Question 10:
You have an Azure subscription named Subscription1 that contains a virtual network named VNet1. VNet1 is in a resource group named RG1. Subscription1 has a user named User1. User1 has the following roles:
1.
Reader
2.
Security Admin
3.
Security Reader
You need to ensure that User1 can assign the Reader role for VNet1 to other users.
What should you do?
A. Remove User1 from the Security Reader role for Subscription1. Assign User1 the Contributor role for RG1.
B. Assign User1 the Access Administrator role for VNet1.
C. Remove User1 from the Security Reader and Reader roles for Subscription1. Assign User1 the Contributor role for Subscription1.
D. Assign User1 the Network Contributor role for RG1.
Correct Answer: B
Question 11:
You have an Azure subscription that contains a resource group named RG1. RG1 contains 100 virtual machines.
Your company has three cost centers named Manufacturing, Sales, and Finance.
You need to associate each virtual machine to a specific cost center.
What should you do?
A. Add an extension to the virtual machines.
B. Modify the inventory settings of the virtual machine.
C. Assign tags to the virtual machines.
D. Configure locks for the virtual machine.
Correct Answer: C
You apply tags to your Azure resources, resource groups, and subscriptions to logically organize them into a taxonomy. Each tag consists of a name and a value pair. For example, you can apply the name “Environment” and the value “Production” to all the resources in production
References: https://docs.microsoft.com/en-us/azure/billing/billing-getting-started https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-using-tags
Question 12:
HOTSPOT
You have an Azure Service Bus.
You create a queue named Queue1. Queue1 is configured as shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
Box 1: retained until manually deleted
Since by default PeekLock shall be enabled in Queue, so it will move to DeadLetter after 2hours and stays there until manually deleted. Messages in the dead letter queue should be deleted manually.
Box 2: deleted immediately
Once a message is pulled, it will be deleted immediately. It does not make sense to keep the message further 5 minutes “locked” in the queue. Locking the message makes sense, for the case, when processing the message from a receiver,
to lock the message, to avoid processing/receiving the message simultaneously by another receiver.
The receiving client initiates settlement of a received message with a positive acknowledgment when it calls Complete at the API level. This indicates to the broker that the message has been successfully processed and the message is
removed from the queue or subscription.
Reference:
https://docs.microsoft.com/en-us/azure/service-bus-messaging/message-expiration https://docs.microsoft.com/en-us/azure/service-bus-messaging/message-transfers-locks-settlement
Question 13:
HOTSPOT
You have an Azure subscription that contains the hierarchy shown in the following exhibit.
You create an Azure Policy definition named Policy1.
To which Azure resources can you assign Policy and which Azure resources can you specify as exclusions from Policy1? To answer, select the appropriate options in the answer
NOTE Each correct selection is worth one point.
Hot Area:
Correct Answer:
Question 14:
You have the Azure virtual machines shown in the following table.
VNET1 is linked to a private DNS zone named contoso.com that contains the records shown in the following table.
You need to ping VM2 from VM1.
Which DNS names can you use to ping VM2?
A. comp2.contoso.com and comp4.contoso.com only
B. comp1.contoso.com, comp2.contoso.com, comp3.contoso.com, and comp4.contoso.com
C. comp2.contoso.com only
D. comp1.contoso.com and comp2.contoso.com only
E. comp1.contoso.com, comp2.contoso.com, and comp4.contoso.com only
Correct Answer: C
A record: Is used to map a DNS/domain name to an IP
Ref:https://www.cloudflare.com/learning/dns/dns-records/dns-a-record/
TXT records in a lot of cases get used to prove ownership of a domain, it has other purposes too.
Reference:
https://support.google.com/a/answer/2716800?hl=en#:~:text=TXT%20records%20are%20a%20type,and%20to%20ensure%20email%20security.
PTR: A Reverse DNS lookup is used by remote hosts to determine who \’owns\’ an IP address.
Reference:
https://www.mailenable.com/kb/content/article.asp?ID=ME020206
CNAME records get used to redirect a DNS name or subdomain name to another DNS name or domain name or subdomain name.
reference: https://support.dnsimple.com/articles/cname-record/
It would do good to read up on DNS record types and what they are used for, you will be lost if you don\’t have a basic understanding of it.
https://ns1.com/resources/dns-types-records-servers-and-queries
DNS is a key component In the IT field.
Reference:
https://medium.com/azure-architects/exploring-azure-private-dns-be65de08f780
https://simpledns.plus/help/dns-record-types
Question 15:
You have an Azure subscription that contains a resource group named RG1.
You plan to create a storage account named storage1.
You have a Bicep file named File1.
You need to modify File1 so that it can be used to automate the deployment of storage1 to RG1.
Which property should you modify?
A. kind
B. scope
C. sku
D. location
Correct Answer: A