AZ-104 Dumps with Practice Exam Questions Answers
AZ-104 by Microsoft Azure Administrator Associate Actual Free Exam Practice Test
Microsoft AZ-104 Exam Syllabus Topics:
| Topic | Details |
|---|---|
Manage Azure identities and governance (15-20%) | |
| Manage Azure Active Directory (Azure AD) objects | -create users and groups -create administrative units -manage user and group properties -manage device settings -perform bulk user updates -manage guest accounts -configure Azure AD Join -configure self-service password reset |
| Manage role-based access control (RBAC) | -create a custom role - provide access to Azure resources by assigning roles at different scopes -interpret access assignments |
| Manage subscriptions and governance | -configure Azure policies -configure resource locks -apply and manage tags on resources - manage resource groups -manage subscriptions - manage costs -configure management groups |
Implement and manage storage (15-20%) | |
| Secure storage | -configure network access to storage accounts -create and configure storage accounts -generate shared access signature (SAS) tokens -manage access keys -configure Azure AD Authentication for a storage account - Configure access to Azure Files |
| Manage Storage | -export from Azure job -import into Azure job -install and use Azure Storage Explorer -copy data by using AZCopy - implement Azure Storage replication - configure blob object replication |
| Configure Azure files and Azure blob storage | - create an Azure file share -create and configure Azure File Sync service -configure Azure Blob Storage -configure storage tiers - configure blob lifecycle management |
Deploy and manage Azure compute resources (20-25%) | |
| Automate deployment of virtual machines (VMs) by using Azure Resource Manager templates | - modify an Azure Resource Manager template -configure a virtual hard disk (VHD) template - deploy from a template -save a deployment as an Azure Resource Manager template - deploy virtual machine extensions |
| Configure VMs | -configure Azure Disk Encryption -move VMs from one resource group to another -manage VM sizes -add data disks -configure networking -redeploy VMs - configure high availability - deploy and configure scale sets |
| Create and configure containers | - configure sizing and scaling for Azure Container Instances -configure container groups for Azure Container Instances -configure storage for Azure Kubernetes Service (AKS) - configure scaling for AKS - configure network connections for AKS - upgrade an AKS cluster |
| Create and configure Azure App Service | - create an App Service plan -configure scaling settings in an App Service plan - create an App Service - secure an App Service - configure custom domain names - configure backup for an App Service - configure networking settings - configure deployment settings |
Configure and manage virtual networking (25-30%) | |
| Implement and manage virtual networking | - create and configure virtual networks, including peering - configure private and public IP addresses - configure user-defined network routes - implement subnets - configure endpoints on subnets - configure private endpoints- configure Azure DNS, including custom DNS settings and private or public DNS zones |
| Secure access to virtual networks | -create security rules -associate a network security group (NSG) to a subnet or network interface -evaluate effective security rules -implement Azure Firewall -implement Azure Bastion |
| Configure load balancing | -configure Azure Application Gateway -configure an internal or public load balancer -troubleshoot load balancing |
| Monitor and troubleshoot virtual networking | -monitor on-premises connectivity - configure and useAzure Monitor for Networks -use Azure Network Watcher -troubleshoot external networking -troubleshoot virtual network connectivity |
| Integrate an on-premises network with an Azure virtual network | -create and configure Azure VPN Gateway - create and configure Azure ExpressRoute -configure Azure Virtual WAN |
Monitor and back up Azure resources (10-15%) | |
| Monitor resources by using Azure Monitor | -configure and interpret metrics -configure Azure Monitor Logs -query and analyze logs -set up alerts and actions - configure Application Insights |
| Implement backup and recovery | - create a Recovery Services Vault -create and configure backup policy - perform backup and restore operations by using Azure Backup -perform site-to-site recovery by using Azure Site Recovery - configure and review backup reports |
Difficulty in Writing AZ-104:Microsoft Azure Administrator Exam
AZ-104:Microsoft Azure Administrator is a privileged achievement one could be graced with. But adverse to general notion certifying with Microsoft is not that challenging if the candidates have proper preparation material to pass the AZ-104:Microsoft Azure Administrator exam with good grades. Questions answers and clarifications which are designed in form of DumpStillValid dumps make sure to cover entire course content. DumpStillValid have a brilliant AZ-104:Microsoft Azure Administrator dumps with most recent and important questions and answers in PDF files. DumpStillValid is sure about the exactness and legitimacy of AZ-104:Microsoft Azure Administrator dumps and in this manner. Candidates can easily pass the AZ-104:Microsoft Azure Administrator exam with genuine AZ-104:Microsoft Azure Administrator dumps and get MICROSOFT certification. These dumps are viewed as the best source to understand the AZ-104:Microsoft Azure Administrator well by simply pursuing examples questions and answers. If candidate completes practice the exam with certification AZ-104 Dumps along with self-assessment to get the proper idea on MICROSOFT accreditation and to ace the certification exam.
Necessitated Prerequisites
Any Microsoft AZ-104 aspirant must ensure that a minimum of six months of experience in Azure administration has been obtained before taking-up the test. A strong hold over Azure core services, security concepts, detailed governance, and workload management makes the exam journey a lot more simplified. As exam AZ-104 prepares the individual for a pivotal profession, knowing the basics of Azure Resource Manager template, Azure CLI, PowerShell, and Azure portal, is crucial too.
NEW QUESTION 169
You have an Azure web app named WebApp1.
You need to provide developers with a copy of WebApp1 that they can modify without affecting the production WebApp1. When the developers finish testing their changes, you must be able to switch the current line version of WebApp1 to the new version.
Which command should you run prepare the environment? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Box 1: New-AzureRmWebAppSlot
The New-AzureRmWebAppSlot cmdlet creates an Azure Web App Slot in a given a resource group that uses the specified App Service plan and data center.
Box 2: -SourceWebApp
References:
https://docs.microsoft.com/en-us/powershell/module/azurerm.websites/new-azurermwebappslot
NEW QUESTION 170
You have an Azure subscription that contains two virtual networks named VNET1 and VNET2 and the users shown in the following table:
Larger image
You need to identify which users can configure peering between VNET1 and VNET2.
Which users should you identify?
- A. User1 and User3 only
- B. User1 only
- C. User1, User2 and User3
Owner: An owner can configure peering.
A Global administrator can configure peering.
Network Contributor:
The accounts you use to work with virtual network peering must be assigned to the following roles:
* Network Contributor: For a virtual network deployed through Resource Manager.
* Classic Network Contributor: For a virtual network deployed through the classic deployment model. - D. User1 and User2 only
- E. User3 only
Answer: C
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/cloud-adoption-framework/govern/resource-consistency/governance-multiple-teams
NEW QUESTION 171
From Azure Active Directory (AD) Privileged Identify Management, you configure the Role settings for the Owner role of an Azure subscription as shown in the following exhibit.
From Azure AD Privileged Identify Management, you assign the Owner role for the subscription to a user named User1, and you set the Assignment type toActiveandPermanently eligible.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE:Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-how-to-add-role-to
NEW QUESTION 172
You have two Azure Active Directory (Azure AD) tenants named contoso.com and fabrikam.com.
You have a Microsoft account that you use to sign in to both tenants.
You need to configure the default sign-in tenant for the Azure portal.
What should you do?
- A. From the Azure portal, change the directory.
- B. From Azure Cloud Shell, run Set-AzureRmContext.
- C. From the Azure portal, configure the portal settings.
- D. From Azure Cloud Shell, run Set-AzureRmSubscription.
Answer: B
Explanation:
Explanation
The Set-AzureRmContext cmdlet sets authentication information for cmdlets that you run in the current session. The context includes tenant, subscription, and environment information.
References:
https://docs.microsoft.com/en-us/powershell/module/azurerm.profile/set-azurermcontext
NEW QUESTION 173
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure subscription named Subscription1 that contains the resources shown in the following table.
VM1 connects to a virtual network named VNET2 by using a network interface named NIC1.
You need to create a new network interface named NIC2 for VM1.
Solution: You create NIC2 in RG1 and West US.
Does this meet the goal?
- A. NO
- B. Yes
Answer: B
Explanation:
Explanation
The virtual machine you attach a network interface to and the virtual network you connect it to must exist in the same location, here West US, also referred to as a region.
References:
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-network-interface
NEW QUESTION 174
You have Azure subscriptions named Subscription1 and Subscription2.
Subscription1 has following resource groups:
RG1 includes a web app named App1 in the West Europe location.
Subscription2 contains the following resource groups:
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
App1 present in RG1 and in RG1 there is no lock available. So you can move App1 to other resource groups, RG2, RG3, RG4.
Note:
App Service resources can only be moved from the resource group in which they were originally created. If an App Service resource is no longer in its original resource group, move it back to its original resource group.
Reference:
https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/move-limitations/app-service-move
NEW QUESTION 175
You have an Azure Kubernetes Service (AKS) cluster named AKS1 and a computer named Computer1 that runs Windows 10. Computer1 that has the Azure CLI installed.
You need to install the kubectl client on Computer1.
Which command should you run? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
To install kubectl locally, use the az aks install-cli command:
az aks install-cli
Reference:
https://docs.microsoft.com/en-us/azure/aks/kubernetes-walkthrough
NEW QUESTION 176
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an app named App1 that is installed on two Azure virtual machines named VM1 and VM2.
Connections to App1 are managed by using an Azure Load Balancer.
The effective network security configurations for VM2 are shown in the following exhibit.
You discover that connections to App1 from 131.107.100.50 over TCP port 443 fail. You verify that the Load Balancer rules are configured correctly.
You need to ensure that connections to App1 can be established successfully from 131.107.100.50 over TCP port 443.
Solution: You create an inbound security rule that allows any traffic from the AzuteLoadBalancer source and has a cost of 150.
Does this meet the goal?
- A. No
- B. Yes
Answer: A
NEW QUESTION 177
You have an Azure subscription that contains the resources shown in the following table.
You need to create a network interface named NIC1.
In which location can you create NIC1?
- A. East US, West Europe, and North Europe.
- B. East US and West Europe only.
- C. East US and North Europe only.
- D. East US only.
Answer: D
Explanation:
Explanation
A virtual network is required when you create a NIC. Select the virtual network for the network interface. You can only assign a network interface to a virtual network that exists in the same subscription and location as the network interface. Once a network interface is created, you cannot change the virtual network it is assigned to.
The virtual machine you add the network interface to must also exist in the same location and subscription as the network interface.
References:
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-network-interface
NEW QUESTION 178
You need to resolve the Active Directory issue.
What should you do?
- A. From Active Directory Users and Computers, select the user accounts, and then modify the User Principal Name value.
- B. Run idfix.exe, and then use the Edit action.
- C. From Active Directory Domains and Trusts, modify the list of UPN suffixes.
- D. From Azure AD Connect, modify the outbound synchronization rule.
Answer: B
Explanation:
IdFix is used to perform discovery and remediation of identity objects and their attributes in an on-premises Active Directory environment in preparation for migration to Azure Active Directory. IdFix is intended for the Active Directory administrators responsible for directory synchronization with Azure Active Directory.
Scenario: Active Directory Issue
Several users in humongousinsurance.com have UPNs that contain special characters.
You suspect that some of the characters are unsupported in Azure AD.
References:
https://www.microsoft.com/en-us/download/details.aspx?id=36832
Topic 3, Contoso Ltd
Overview
Contoso, Ltd. is a manufacturing company that has offices worldwide. Contoso works with partner organizations to bring products to market.
Contoso products are manufactured by using blueprint files that the company authors and maintains.
Existing Environment
Currently, Contoso uses multiple types of servers for business operations, including the following:
* File servers
* Domain controllers
* Microsoft SQL Server servers
Your network contains an Active Directory forest named contoso.com. All servers and client computers are joined to Active Directory.
You have a public-facing application named App1. App1 is comprised of the following three tiers:
* A SQL database
* A web front end
* A processing middle tier
Each tier is comprised of five virtual machines. Users access the web front end by using HTTPS only.
Requirements
Planned Changes
Contoso plans to implement the following changes to the infrastructure:
Move all the tiers of App1 to Azure.
Move the existing product blueprint files to Azure Blob storage.
Create a hybrid directory to support an upcoming Microsoft Office 365 migration project.
Technical Requirements
Contoso must meet the following technical requirements:
* Move all the virtual machines for App1 to Azure.
* Minimize the number of open ports between the App1 tiers.
* Ensure that all the virtual machines for App1 are protected by backups.
* Copy the blueprint files to Azure over the Internet.
* Ensure that the blueprint files are stored in the archive storage tier.
* Ensure that partner access to the blueprint files is secured and temporary.
* Prevent user passwords or hashes of passwords from being stored in Azure.
* Use unmanaged standard storage for the hard disks of the virtual machines.
* Ensure that when users join devices to Azure Active Directory (Azure AD), the users use a mobile phone to verify their identity.
Minimize administrative effort whenever possible.
User Requirements
Contoso identifies the following requirements for users:
* Ensure that only users who are part of a group named Pilot can join devices to Azure AD.
* Designate a new user named Admin1 as the service administrator of the Azure subscription.
* Admin1 must receive email alerts regarding service outages.
* Ensure that a new user named User3 can create network objects for the Azure subscription.
NEW QUESTION 179
You have an Azure subscription named AZPT1 that contains the resources shown in the following table:
You create a new Azure subscription named AZPT2.
You need to identify which resources can be moved to AZPT2.
Which resources should you identify?
- A. RVAULT1 only
- B. VM1, storage1, VNET1, VM1Managed, and RVAULT1
- C. VM1, storage1, VNET1, and VM1Managed only
- D. VM1 and VM1Managed only
Answer: B
Explanation:
Explanation
You can move a VM and its associated resources to a different subscription by using the Azure portal.
You can now move an Azure Recovery Service (ASR) Vault to either a new resource group within the current subscription or to a new subscription.
Reference:
https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/move-resource-group-and-subscrip
https://docs.microsoft.com/en-us/azure/key-vault/general/keyvault-move-subscription
NEW QUESTION 180
You have an Azure subscription named Subcription1 that contains a resource group named RG1.
In RG1. you create an internal load balancer named LB1 and a public load balancer named 162.
You need to ensure that an administrator named Admin 1 can manage LB1 and LB2. The solution must follow the principle of least privilege.
Which role should you assign to Admin1 for each task? To answer, select the appropriate options in the answer area.
NOTE: Caen correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION 181
You have an Azure Active Directory tenant named Contoso.com that includes following users:
Contoso.com includes following Windows 10 devices:
You create following security groups in Contoso.com:
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
References:
https://docs.microsoft.com/en-us/azure/active-directory/devices/overview
NEW QUESTION 182
Drag and Drop Question
You have an Azure Linux virtual machine that is protected by Azure Backup.
One week ago, two files were deleted from the virtual machine.
You need to restore the deleted files to an on-premises computer as quickly as possible.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation:
To restore files or folders from the recovery point, go to the virtual machine and choose the desired recovery point.
Step 0. In the virtual machine's menu, click Backup to open the Backup dashboard. Step 1. In the Backup dashboard menu, click File Recovery.
Step 2. From the Select recovery point drop-down menu, select the recovery point that holds the files you want. By default, the latest recovery point is already selected.
Step 3: To download the software used to copy files from the recovery point, click Download Executable (for Windows Azure VM) or Download Script (for Linux Azure VM, a python script is generated).
Step 4: Copy the files by using AzCopy
AzCopy is a command-line utility designed for copying data to/from Microsoft Azure Blob, File, and Table storage, using simple commands designed for optimal performance.
You can copy data between a file system and a storage account, or between storage accounts.
References:
https://docs.microsoft.com/en-us/azure/backup/backup-azure-restore-files-from-vm
https://docs.microsoft.com/en-us/azure/storage/common/storage-use-azcopy
NEW QUESTION 183
You need to deploy an Azure virtual machine scale set that contains five instances as quickly as possible.
What should you do?
- A. Deploy five virtual machines. Modify the Availability Zones settings for each virtual machine.
- B. Deploy five virtual machines. Modify the Size setting for each virtual machine.
- C. Deploy one virtual machine scale set that is set to ScaleSetVM orchestration mode.
- D. Deploy one virtual machine scale set that is set to VM (virtual machines) orchestration mode.
Answer: C
Explanation:
Explanation/Reference:
https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/orchestration-modes
NEW QUESTION 184
HOTSPOT
You have an Azure subscription.
You create the Azure Storage account shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Hot Area:
Answer:
Explanation:
Section: [none]
Explanation:
Box 1: 3
Locally Redundant Storage (LRS) provides highly durable and available storage within a single location (sub region). We maintain an equivalent of 3 copies (replicas) of your data within the primary location as described in our SOSP paper; this ensures that we can recover from common failures (disk, node, rack) without impacting your storage account's availability and durability.
Box 2: Access tier
Change the access tier from Hot to Cool.
Note: Azure storage offers different access tiers, which allow you to store blob object data in the most cost- effective manner. The available access tiers include:
Hot - Optimized for storing data that is accessed frequently.
Cool - Optimized for storing data that is infrequently accessed and stored for at least 30 days.
Archive - Optimized for storing data that is rarely accessed and stored for at least 180 days with flexible latency requirements (on the order of hours).
Reference:
https://azure.microsoft.com/en-us/blog/data-series-introducing-locally-redundant-storage-for-windows-azure- storage/
https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-storage-tiers
NEW QUESTION 185
You have an Azure subscription named Subscription1. Subscription1 contains the resource groups in the following table.
RG1 has a web app named WebApp1. WebApp1 is located in West Europe.
You move WebApp1 to RG2. What is the effect of the move?
- A. The App Service plan to WebApp1 remains to West Europe. Policy1 applies to WebApp1.
- B. The App Service plan to WebApp1 moves to North Europe. Policy1 applies to WebApp1.
- C. The App Service plan to WebApp1 remains to West Europe. Policy2 applies to WebApp1.
- D. The App Service plan to WebApp1 moves to North Europe. Policy2 applies to WebApp1.
Answer: C
Explanation:
Explanation
You can move an app to another App Service plan, as long as the source plan and the target plan are in the same resource group and geographical region.
The region in which your app runs is the region of the App Service plan it's in. However, you cannot change an App Service plan's region.
References: https://docs.microsoft.com/en-us/azure/app-service/app-service-plan-manage
NEW QUESTION 186
You have an Azure web app named webapp1.
Users report that they often experience HTTP 500 errors when they connect to webapp1.
You need to provide the developers of webapp1 with real-time access to the connection errors. The solution must provide all the connection error details.
What should you do first?
- A. From Azure Monitor, create a workbook
- B. From webapp1, turn on Application Logging
- C. From webapp1, enable Web server logging
- D. From Azure Monitor, create a Service Health alert
Answer: C
Explanation:
Section: [none]
NEW QUESTION 187
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure subscription that contains the virtual machines shown in the following table.
You deploy a load balancer that has the following configurations:
* Name: LB1
* Type: Internal
* SKU: Standard
* Virtual network: VNET1
You need to ensure that you can add VM1 and VM2 to the backend pool of LB1.
Solution: You create a Standard SKU public IP address, associate the address to the network interface of VM1, and then stop VM2.
Does this meet the goal?
- A. No
- B. Yes
Answer: A
Explanation:
Explanation
A Backend Pool configured by IP address has the following limitations:
* Standard load balancer only
Reference:
https://docs.microsoft.com/en-us/azure/load-balancer/backend-pool-management
NEW QUESTION 188
You have an Azure web app named WebApp1.
You need to provide developers with a copy of WebApp1 that they can modify without affecting the production WebApp1. When the developers finish testing their changes, you must be able to switch the current line version of WebApp1 to the new version.
Which command should you run prepare the environment? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Box 1: New-AzureRmWebAppSlot
The New-AzureRmWebAppSlot cmdlet creates an Azure Web App Slot in a given a resource group that uses the specified App Service plan and data center.
Box 2: -SourceWebApp
References:
https://docs.microsoft.com/en-us/powershell/module/azurerm.websites/new-azurermwebappslot
NEW QUESTION 189
You have an Azure virtual machine named VM1 and a Recovery Services vault named Vault1.
You create a backup Policy1 as shown in the exhibit. (Click the Exhibit tab.)
You configure the backup of VM1 to use Policy1 on Thursday, January 1.
You need to identify the number of available recovery points for VM1.
How many recovery points are available on January 8 and on January 15? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Box 1: 6
4 daily + 1 weekly + monthly
Box 2: 8
4 daily + 2 weekly + monthly + yearly
NEW QUESTION 190
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure virtual machine named VM1 that runs Windows Server 2016.
You need to create an alert in Azure when more than two error events are logged to the System log on VM1 within an hour.
Solution: You create an Azure Log Analytics workspace and configure the data settings. You install the Microsoft Monitoring Agent on VM1. You create an alert in Azure Monitor and specify the Log Analytics workspace as the source.
Does this meet the goal?
- A. No
- B. Yes
Answer: B
Explanation:
Explanation
Alerts in Azure Monitor can identify important information in your Log Analytics repository. They are created by alert rules that automatically run log searches at regular intervals, and if results of the log search match particular criteria, then an alert record is created and it can be configured to perform an automated response.
The Log Analytics agent collects monitoring data from the guest operating system and workloads of virtual machines in Azure, other cloud providers, and on-premises. It collects data into a Log Analytics workspace.
References:
https://docs.microsoft.com/en-us/azure/azure-monitor/learn/tutorial-response
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/agents-overview
NEW QUESTION 191
......
Free Microsoft Azure Administrator Associate AZ-104 Exam Question: https://www.dumpstillvalid.com/AZ-104-prep4sure-review.html
AZ-104 dumps & Microsoft Azure Administrator Associate sure practice dumps: https://drive.google.com/open?id=1EYSK5MvKxCv_AK_W8tXJNjOjn3g-Xz1W
