Download AZ-104 RENEWAL EXAM 160 PRACTICE QUESTIONS AND 100% CORRECT ANSWERS UPDATE 2023-2025 and more Exams Computer Science in PDF only on Docsity!
AZ-104 RENEWAL EXAM 160 PRACTICE QUESTIONS AND
100% CORRECT ANSWERS UPDATE 2023-2024AZ- 104
RENEWAL EXAM 160 PRACTICE QUESTIONS AND 100%
CORRECT ANSWERS UPDATE 2023-2024.
QUESTION 1
You have an Azure subscription named Subscription1. You deploy a Linux virtual machine named VM1 to Subscription1. You need to monitor the metrics and the logs of VM1. What should you use? A. Azure HDInsight B. Linux Diagnostic Extension (LAD) 3. C. the Azure Performance Diagnostics extension D. Azure Analysis Services B QUESTION 2 You plan to deploy three Azure virtual machines named VM1, VM2, and VM3. The virtual machines will host a web app named App1. You need to ensure that at least two virtual machines are available if a single Azure datacenter becomes unavailable. What should you deploy? A. all three virtual machines in a single Availability Zone B. all virtual machines in a single Availability Set C. each virtual machine in a separate Availability Zone D. each virtual machine in a separate Availability Set B QUESTION 3 You have an Azure virtual machine named VM1 that runs Windows Server 2019. You save VM1 as a template named Template1 to the Azure Resource Manager library. You plan to deploy a virtual machine named VM2 from Template1. What can you configure during the deployment of VM2? A. operating system B. administrator username C. virtual machine size D. resource group B QUESTION 4 You have an Azure subscription that contains an Azure virtual machine named VM1. VM1 runs a
financial reporting app named App1 that does not support multiple active instances. At the end of each month, CPU usage for VM1 peaks when App1 runs. You need to create a scheduled runbook to increase the processor performance of VM1 at the end of each month. What task should you include in the runbook? A. Add the Azure Performance Diagnostics agent to VM1. B. Modify the VM size property of VM1. C. Add VM1 to a scale set. D. Increase the vCPU quota for the subscription. E. Add a Desired State Configuration (DSC) extension to VM1. E QUESTION 5 Note: This question is part of a series of questions You have an Azure subscription that contains 10 virtual networks. The virtual networks are hosted in separate resource groups. Another administrator plans to create several network security groups (NSGs) in the subscription. You need to ensure that when an NSG is created, it automatically blocks TCP port 8080 between the virtual networks. Solution: You configure a custom policy definition, and then you assign the policy to the subscription. Does this meet the goal? A. Yes B. No A QUESTION 6 You have two Azure virtual networks named VNet1 and VNet2. VNet1 contains an Azure virtual machine named VM1. VNet2 contains an Azure virtual machine named VM2. VM1 hosts a frontend application that connects to VM2 to retrieve data. Users report that the frontend application is slower than usual. You need to view the average round-trip time (RTT) of the packets from VM1 to VM2. Which Azure Network Watcher feature should you use? A. IP flow verify B. Connection troubleshoot C. Connection monitor D. NSG flow logs C QUESTION 7 You have an Azure subscription that has a Recovery Services vault named Vault1. The
QUESTION 10
Note: This question is part of a series of questions You have an Azure subscription that contains the following users in an Azure Active Directory tenant named contoso.onmicrosoft.com: NAME---Role---Scope User 1 ---Global Administrator---Azure Active Directory User2--Global Administrator---Azure Active Directory User3---User Administrator---Azure Active Directory User4---Owner---Azure Subscription User1 creates a new Azure Active Directory tenant named external.contoso.onmicrosoft.com. You need to create new user accounts in external.contoso.onmicrosoft.com. Solution: You instruct User4 to create the user accounts. Does that meet the goal? A. Yes B. No B QUESTION 11 Note: This question is part of a series of questions You have an Azure subscription that contains the following users in an Azure Active Directory tenant named contoso.onmicrosoft.com: NAME---Role---Scope User1---Global Administrator---Azure Active Directory User2--Global Administrator---Azure Active Directory User3---User Administrator---Azure Active Directory User4---Owner---Azure Subscription User1 creates a new Azure Active Directory tenant named external.contoso.onmicrosoft.com. You need to create new user accounts in external.contoso.onmicrosoft.com. Solution: You instruct User3 to create the user accounts. Does that meet the goal? A. Yes B. No B QUESTION 12 You have an Azure subscription that contains an Azure Active Directory (Azure AD) tenant named contoso.com and an Azure Kubernetes Service (AKS) cluster named AKS1. An administrator reports that she is unable to grant access to AKS1 to the users in contoso.com. You need to ensure that access to AKS1 can be granted to the contoso.com users. What should you do first?
A. From contoso.com, modify the Organization relationships settings. B. From contoso.com, create an OAuth 2.0 authorization endpoint. C. Recreate AKS1. D. From AKS1, create a namespace. B QUESTION 13 You have a Microsoft 365 tenant and an Azure Active Directory (Azure AD) tenant named contoso.com. You plan to grant three users named User1, User2, and User3 access to a temporary Microsoft SharePoint document library named Library1. You need to create groups for the users. The solution must ensure that the groups are deleted after 180 days. Which two groups should you create? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point. A. an Office 365 group that uses the Assigned membership type B. a Security group that uses the Assigned membership type C. an Office 365 group that uses the Dynamic User membership type D. a Security group that uses the Dynamic User membership type E. a Security group that uses the Dynamic Device membership type AC QUESTION 14 You have an Azure policy as shown in the following exhibit: (see pdf) What is the effect of the policy? A. You are prevented from creating Azure SQL servers anywhere in Subscription
B. You can create Azure SQL servers in ContosoRG1 only. C. You are prevented from creating Azure SQL Servers in ContosoRG1 only. D. You can create Azure SQL servers in any resource group within Subscription
B QUESTION 15 You have an Azure subscription named AZPT1 that contains the resources shown in the following table: NAME---TYPE storage1---Azure Storage Account VNET1---Virtual network VM1---Azure virtual machine VM1Managed---Managed disk for VM RVAULT1---Recovery Services vault for the site recovery of VM You create a new Azure subscription named AZPT2. You need to identify which resources can be moved to AZPT2.
B. Idle Time-out (minutes) to 20 C. Protocol to UDP D. Session persistence to Client IP and Protocol D QUESTION 19 Your on-premises network contains an SMB share named Share1. You have an Azure subscription that contains the following resources:
- A web app named webapp
- A virtual network named VNET You need to ensure that webapp1 can connect to Share1. What should you deploy? A. an Azure Application Gateway B. an Azure Active Directory (Azure AD) Application Proxy C. an Azure Virtual Network Gateway C QUESTION 20 You plan to deploy several Azure virtual machines that will run Windows Server 2019 in a virtual machine scale set by using an Azure Resource Manager template. You need to ensure that NGINX is available on all the virtual machines after they are deployed. What should you use? A. Azure Active Directory (Azure AD) Application Proxy B. Azure Application Insights C. Azure Custom Script Extension D. the New-AzConfigurationAssignement cmdlet C QUESTION 21 You have an Azure web app named webapp1. Users report that they often experience HTTP 500 errors when they connect to webapp1. You need to provide the developers of webapp1 with real-time access to the connection errors. The solution must provide all the connection error details. What should you do first? A. From webapp1, enable Web server logging B. From Azure Monitor, create a workbook C. From Azure Monitor, create a Service Health alert D. From webapp1, turn on Application Logging A QUESTION 22 You have an Azure Active Directory (Azure AD) tenant that contains 5,000 user accounts. You create a new user account named AdminUser1. You need to assign the User administrator administrative role to AdminUser1. What should you do from the user account properties?
A. From the Licenses blade, assign a new license B. From the Directory role blade, modify the directory role C. From the Groups blade, invite the user account to a new group B QUESTION 23 You have an Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com that contains 100 user accounts. You purchase 10 Azure AD Premium P2 licenses for the tenant. You need to ensure that 10 users can use all the Azure AD Premium features. What should you do? A. From the Licenses blade of Azure AD, assign a license B. From the Groups blade of each user, invite the users to a group C. From the Azure AD domain, add an enterprise application D. From the Directory role blade of each user, modify the directory role A QUESTION 24 You have an Azure subscription named Subscription1 and an on-premises deployment of Microsoft System Center Service Manager. Subscription1 contains a virtual machine named VM1. You need to ensure that an alert is set in Service Manager when the amount of available memory on VM1 is below 10 percent. What should you do first? A. Create an automation runbook B. Deploy a function app C. Deploy the IT Service Management Connector (ITSM) D. Create a notification C QUESTION 25 You have an on-premises server that contains a folder named D:\Folder1. You need to copy the contents of D:\Folder1 to the public container in an Azure Storage account named contosodata. Which command should you run? A. https://contosodata.blob.core.windows.net/public B. azcopy sync D:\folder1 https://contosodata.blob.core.windows.net/public -- snapshot C. azcopy copy D:\folder1 https://contosodata.blob.core.windows.net/public -- recursive D. az storage blob copy start-batch D:\Folder https://contosodata.blob.core.windows.net/public C QUESTION 26 You have an Azure subscription named Subscription1 that contains the storage accounts shown in the following table:
- Modify the screen saver timeout.
- Change the desktop background. You plan to redeploy VM1. Which changes will be lost after you redeploy VM1? A. the modified screen saver timeout B. the new desktop background C. the new files on drive D D. the new files on drive C A QUESTION 30 You have an Azure subscription. You have an on-premises virtual machine named VM1. The settings for VM1 are shown in the exhibit. (Click the Exhibit tab.) You need to ensure that you can use the disks attached to VM1 as a template for Azure virtual machines. What should you modify on VM1? A. the memory B. the network adapters C. the hard drive D. the processor E. Integration Services C QUESTION 31 You have an Azure subscription named Subscription1 that is used by several departments at your company. Subscription1 contains the resources in the following table: NAME---Type Storage1---storage account RG1---Resource group container1---Blob container share1---File share Another administrator deploys a virtual machine named VM1 and an Azure Storage account named storage2 by using a single Azure Resource Manager template. You need to view the template used for the deployment. From which blade can you view the template that was used for the deployment? A. VM B. RG C. storage D. container B
QUESTION 32
You have an Azure web app named App1. App1 has the deployment slots shown in the following table: NAME---Function webapp1-prod---Production webapp1-test---Staging In webapp1-test, you test several changes to App1. You back up App1. You swap webapp1-test for webapp1-prod and discover that App1 is experiencing performance issues. You need to revert to the previous version of App1 as quickly as possible. What should you do? A. Redeploy App B. Swap the slots C. Clone App D. Restore the backup of App B QUESTION 33 Note: This question is part of a series of questions You have an Azure subscription that contains 10 virtual networks. The virtual networks are hosted in separate resource groups. Another administrator plans to create several network security groups (NSGs) in the subscription. You need to ensure that when an NSG is created, it automatically blocks TCP port 8080 between the virtual networks. Solution: From the Resource providers blade, you unregister the Microsoft.ClassicNetwork provider. Does this meet the goal? A. Yes B. No B QUESTION 34 Note: This question is part of a series of questions You have an Azure subscription that contains 10 virtual networks. The virtual networks are hosted in separate resource groups. Another administrator plans to create several network security groups (NSGs) in the subscription. You need to ensure that when an NSG is created, it automatically blocks TCP port 8080 between the virtual networks. Solution: You assign a built-in policy definition to the subscription. Does this meet the goal? A. Yes B. No B
QUESTION 39
Hotspot Question You have an Azure subscription named Subscription1 that contains a resource group named RG1.In RG1, you create an internal load balancer named LB1 and a public load balancer named LB2.You need to ensure that an administrator named Admin1 can manage LB1 and LB2. The solution must follow the principle of least privilege. Which role should you assign to Admin1 for each task? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. To add a backend pool to LB A. Contributor on LB B. Network Contributor on LB C. Network Contributor on RG D. Owner on LB To add a health probe to LB2: A. Contributor on LB B. Network Contributor on LB C. Network Contributor on RG D. Owner on LB BB QUESTION 40 Hotspot Question You have an Azure Active Directory (Azure AD) tenant named contoso.com that contains the users shown in the following table: (see pdf) User3 is the owner of Group1. Group2 is a member of Group1. You configure an access review named Review1 as shown in the following exhibit: (see pdf) For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. STATEMENTS User3 can perform access review of User User3 can perform access review of UserA User3 can perform access review of UserB A. Yes to All B. Yes No Yes
C. No to all D. No Yes Yes A QUESTION 41 Hotspot Question You have the Azure management groups shown in the following table: (see pdf) You add Azure subscriptions to the management groups as shown in the following table: (see pdf) You create the Azure policies shown in the following table: (see pdf) For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. STATEMENTS You can create a virtual network in Subscription You can create a virtual machine in Subscription You can add Subscription1 to ManagementGroup A. Yes to All B. Yes No Yes C. No to all D. No Yes Yes D QUESTION 42 Hotspot Question You have an Azure subscription that contains the resources shown in the following table: (see pdf) You assign a policy to RG6 as shown in the following table: (see pdf) To RG6, you apply the tag: RGroup: RG6. You deploy a virtual network named VNET2 to RG6. Which tags apply to VNET1 and VNET2? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. VNET A. None B. Department: D1 only C. Department: d1 and Rgroup: RG6 only D. Department: d1 and Label: Value1 only E. Department: D1, RGroup: RG6, and Label: Value VNET
A. Yes to all B. Yes Yes No C. No to all D. No Yes Yes D QUESTION 45 Drag and Drop Question You have an Azure subscription named Subscription1. You create an Azure Storage account named contosostorage, and then you create a file share named data. Which UNC path should you include in a script that references files from the data file share? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point. (Select 3 in the correct order) A. blob B. contosostorage C. file D. portal.azure.com E. blob.core.windows.net F. data G. file.core.windows.net H. subscription BGF QUESTION 46 Drag and Drop Question You have an on-premises file server named Server1 that runs Windows Server
You have an Azure subscription that contains an Azure file share. You deploy an Azure File Sync Storage Sync Service, and you create a sync group. You need to synchronize files from Server1 to Azure. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. A. Install the Azure File Sync agent on Server 1 B. Create an Azure on-premises data gateway C. Create a Recovery Services vault D. Register Server 1 E. Add a server endpoint F. Install the DFS Replication server role on Server ADE Hotspot Question You plan to create an Azure Storage account in the Azure region of East US 2.
You need to create a storage account that meets the following requirements:
- Replicates synchronously.
- Remains available if a single data center in the region fails. How should you configure the storage account? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Replication A. Geo-redundant storage (GRS) B. Locally-redundant storage (LRS) C. Read-access geo-redundant storage (RA GRS) D. Zone-redundant storage (ZRS) Account type: A. Blob storage B. Storage (general purpose v1) C. StorageV2 (general purpose v2) DC QUESTION 48 Hotspot Question You have an Azure Storage account named storage1 that uses Azure Blob storage and Azure File storage. You need to use AzCopy to copy data to the blob storage and file storage in storage1. Which authentication method should you use for each type of storage? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Blob storage: A. Azure Active Directory (Azure AD) only B. Shared access signatures (SAS) only C. Access keys and shared access signatures (SAS) only D. Azure AD and SAS only E. Azure AD, access keys, and SAS File storage: A. Azure Active Directory (Azure AD) only B. Shared access signatures (SAS) only C. Access keys and shared access signatures (SAS) only D. Azure AD and SAS only E. Azure AD, access keys, and SAS DB QUESTION 49 Hotspot Question You have an Azure subscription named Subscription1 that contains the
QUESTION 51
Hotspot Question You have an Azure subscription that contains a virtual machine scale set. The scale set contains four instances that have the following configurations:
- Operating system: Windows Server 2 016
- Size: Standard_D1_v You run the get-azvmss cmdlet as shown in the following exhibit: (see pdf) Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point. When an administrator changes the virtual machine size, the size will be changed on up to [answer choice] virtual machines simultaneously. A. 0 B. 1 C. 2 D. 4 When a new build of the Windows Server 2016 image is released, the new build will be deployed up to [answer choice] virtual machines simultaneously. A. 0 B. 1 C. 2 D. 4 AD QUESTION 52 Hotspot Question You have an Azure subscription that contains the resources in the following table: (see pdf) In Azure, you create a private DNS zone named adatum.com. You set the registration virtual network to VNet2. The adatum.com zone is configured as shown in the following exhibit: (see pdf) For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Statements The A record fo VM5 will be registered automatically in the adatum.com zone. VM5 can resolve VM9.adadum.com VM6 can resolve VM9.adatum.com A. No No Yes B. No to all
C. Yes to all D. Yes No Yes A QUESTION 53 Hotspot Question You have an Azure subscription that contains a virtual network named VNet1. VNet1 uses an IP address space of 10.0.0.0/16 and contains the subnets in the following table: (see table) Subnet1 contains a virtual appliance named VM1 that operates as a router. You create a routing table named RT1. You need to route all inbound traffic from the VPN gateway to VNet1 through VM1. How should you configure RT1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Address prefix: A. 10.0.0.0/ B. 10.0.1.0/ C. 10.0.254.0/ Next hop type: A. Virtual appliance B. Virtual network C. Virtual network gateway Assigned to: A. GatewaySubnet B. Subnet C. Subnet1 and Subnet AAA QUESTION 54 Hotspot Question You have an Azure subscription that contains the virtual machines shown in the following table: (see pdf) VM1 and VM2 use public IP addresses. From Windows Server 2019 on VM1 and VM2, you allow inbound Remote Desktop connections. Subnet1 and Subnet2 are in a virtual network named VNET1. The subscription contains two network security groups (NSGs) named NSG1 and NSG2. NSG uses only the default rules. NSG2 uses the default rules and the following custom incoming rule:
- Priority: 100
- Name: Rule
- Port: 3389
