Summer Certification Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = getmirror

Home
Microsoft
Azure Administrator Associate
AZ-104
Microsoft Azure Administrator Questions and Answers

Pass the Microsoft Azure Administrator Associate AZ-104 Questions and answers with ExamsMirror

Practice at least 50% of the questions to maximize your chances of passing.

Exam AZ-104 Premium Access

View all detail and faqs for the AZ-104 exam

Go to Exam

708 Students Passed

90% Average Score

92% Same Questions

Viewing page 14 out of 15 pages

Viewing questions 131-140 out of questions

Questions # 131:

You have an Azure subscription that contains the virtual networks shown in the following table.

You need to ensure that all the traffic between VNet1 and VNet2 traverses the Microsoft backbone network. What should you configure?

Options:

ExpressRoute

a private endpoint

peering

a route table

Answer

Questions # 132:

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an app named App1 that is installed on two Azure virtual machines named VM1 and VM2. Connections to App1 are managed by using an Azure Load Balancer.

The effective network security configurations for VM2 are shown in the following exhibit.

Question # 132

You discover that connections to App1 from 131.107.100.50 over TCP port 443 fail. You verify that the Load Balancer rules are configured correctly.

You need to ensure that connections to App1 can be established successfully from 131.107.100.50 over TCP port 443.

Solution: You modify the priority of the Allow_131.107.100.50 inbound security rule.

Does this meet the goal?

Options:

Yes

Answer

Questions # 133:

You have an Azure subscription that contains a storage account named storage 1.

You need to ensure that the access keys for storage! rotate automatically.

What should you configure?

Options:

a backup vault

redundancy for storage1

lifecycle management for storage1

an Azure key vault

a Recovery Services vault

Answer

Questions # 134:

You have an Azure subscription that contains the virtual networks shown in the following table.

Question # 134

The subscription contains the virtual machines shown in the following table.

Question # 134

All The virtual machines have only private IP addresses.

You deploy an Azure Bastion host named Bastion1 to VNet1.

To which virtual machines can you connect through Bastion1 ?

Options:

VM1 only

VM1 and VM2 only

VM1 and VM3 only

VM1, VM2, and VM3

Answer

Explanation

Azure Bastion is a service that provides secure and seamless RDP and SSH access to virtual machines directly from the Azure portal, without exposing them to the public internet1. To use Azure Bastion, you need to deploy it in the same virtual network as the virtual machines you want to connect to2.

According to the tables, you deployed an Azure Bastion host named Bastion1 to VNet1. Therefore, you can connect through Bastion1 to any virtual machine that is in VNet1 or a virtual network that is peered with VNet1. VM1 and VM3 are both in VNet1, so you can connect to them through Bastion1. VM2 is in VNet2, which is not peered with VNet1, so you cannot connect to it through Bastion1.

Questions # 135:

You need to configure the Device settings to meet the technical requirements and the user requirements.

Which two settings should you modify? To answer, select the appropriate settings in the answer area.

Question # 135

Options:

Answer

Answer:

Explanation

135

Box 1: Selected

Only selected users should be able to join devices

Box 2: Yes

Require Multi-Factor Auth to join devices.

From scenario:

Ensure that only users who are part of a group named Pilot can join devices to Azure AD

Ensure that when users join devices to Azure Active Directory (Azure AD), the users use a mobile phone to verify their identity.

Questions # 136:

You need to recommend an identify solution that meets the technical requirements.

What should you recommend?

Options:

federated single-on (SSO) and Active Directory Federation Services (AD FS)

password hash synchronization and single sign-on (SSO)

cloud-only user accounts

Pass-through Authentication and single sign-on (SSO)

Answer

Explanation

Active Directory Federation Services is a feature and web service in the Windows Server Operating System that allows sharing of identity information outside a company’s network.

Scenario: Technical Requirements include:

Prevent user passwords or hashes of passwords from being stored in Azure.

[References: https://www.sherweb.com/blog/active-directory-federation-services/, , , ]

Questions # 137:

You need to meet the user requirement for Admin1.

What should you do?

Options:

From the Subscriptions blade, select the subscription, and then modify the Properties.

From the Subscriptions blade, select the subscription, and then modify the Access control (IAM) settings.

From the Azure Active Directory blade, modify the Properties.

From the Azure Active Directory blade, modify the Groups.

Answer

Explanation

Change the Service administrator for an Azure subscription

Select a subscription.

On the right side, select Edit subscription details.

Scenario: Designate a new user named Admin1 as the service administrator of the Azure subscription.

[References: https://docs.microsoft.com/en-us/azure/billing/billing-add-change-azure-subscription-administrator, , , ]

Questions # 138:

You are planning the move of App1 to Azure.

You create a network security group (NSG).

You need to recommend a solution to provide users with access to App1.

What should you recommend?

Options:

Create an outgoing security rule for port 443 from the Internet. Associate the NSG to all the subnets.

Create an incoming security rule for port 443 from the Internet. Associate the NSG to all the subnets.

Create an incoming security rule for port 443 from the Internet. Associate the NSG to the subnet that contains the web servers.

Create an outgoing security rule for port 443 from the Internet. Associate the NSG to the subnet that contains the web servers.

Answer

Explanation

As App1 is public-facing we need an incoming security rule, related to the access of the web servers.

Scenario: You have a public-facing application named App1. App1 is comprised of the following three tiers: a SQL database, a web front end, and a processing middle tier.

Each tier is comprised of five virtual machines. Users access the web front end by using HTTPS only.

Questions # 139:

You need to recommend a solution for App1. The solution must meet the technical requirements. What should you include in the recommendation? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Question # 139

Options:

Answer

Answer:

Explanation

139

This reference architecture shows how to deploy VMs and a virtual network configured for an N-tier application, using SQL Server on Windows for the data tier.

139

Scenario: You have a public-facing application named App1. App1 is comprised of the following three tiers:

A SQL database

A web front end

A processing middle tier

Each tier is comprised of five virtual machines. Users access the web front end by using HTTPS only.

Technical requirements include:

Move all the virtual machines for App1 to Azure.

Minimize the number of open ports between the App1 tiers.

[References: https://docs.microsoft.com/en-us/azure/architecture/reference-architectures/n-tier/n-tier-sql-server, , , ]

Questions # 140:

You need to move the blueprint files to Azure.

What should you do?

Options:

Generate a shared access signature (SAS). Map a drive, and then copy the files by using File Explorer.

Use the Azure Import/Export service.

Generate an access key. Map a drive, and then copy the files by using File Explorer.

Use Azure Storage Explorer to copy the files.

Answer

Explanation

Azure Storage Explorer is a free tool from Microsoft that allows you to work with Azure Storage data on Windows, macOS, and Linux. You can use it to upload and download data from Azure blob storage.

Scenario:

Planned Changes include: move the existing product blueprint files to Azure Blob storage.

Technical Requirements include: Copy the blueprint files to Azure over the Internet.

[References: https://docs.microsoft.com/en-us/azure/machine-learning/team-data-science-process/move-data-to-azure-blob-using-azure-storage-explorer, , , , ]

Viewing page 14 out of 15 pages

Viewing questions 131-140 out of questions