Summer Certification Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = getmirror

Home
Microsoft
Azure Administrator Associate
AZ-104
Microsoft Azure Administrator Questions and Answers

Pass the Microsoft Azure Administrator Associate AZ-104 Questions and answers with ExamsMirror

Practice at least 50% of the questions to maximize your chances of passing.

Exam AZ-104 Premium Access

View all detail and faqs for the AZ-104 exam

Go to Exam

708 Students Passed

90% Average Score

92% Same Questions

Viewing page 4 out of 15 pages

Viewing questions 31-40 out of questions

Questions # 31:

You need to recommend a solution for App1. The solution must meet the technical requirements. What should you include in the recommendation? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Question # 31

Options:

Answer

Answer:

Explanation

This reference architecture shows how to deploy VMs and a virtual network configured for an N-tier application, using SQL Server on Windows for the data tier.

Scenario: You have a public-facing application named App1. App1 is comprised of the following three tiers:

A SQL database

A web front end

A processing middle tier

Each tier is comprised of five virtual machines. Users access the web front end by using HTTPS only.

Technical requirements include:

Move all the virtual machines for App1 to Azure.

Minimize the number of open ports between the App1 tiers.

[References: https://docs.microsoft.com/en-us/azure/architecture/reference-architectures/n-tier/n-tier-sql-server, , , ]

Questions # 32:

You need to configure the Device settings to meet the technical requirements and the user requirements.

Which two settings should you modify? To answer, select the appropriate settings in the answer area.

Question # 32

Options:

Answer

Answer:

Explanation

Box 1: Selected

Only selected users should be able to join devices

Box 2: Yes

Require Multi-Factor Auth to join devices.

From scenario:

Ensure that only users who are part of a group named Pilot can join devices to Azure AD

Ensure that when users join devices to Azure Active Directory (Azure AD), the users use a mobile phone to verify their identity.

Questions # 33:

You need to implement a backup solution for App1 after the application is moved.

What should you create first?

Options:

a recovery plan

an Azure Backup Server

a backup policy

a Recovery Services vault

Answer

Explanation

A Recovery Services vault is a logical container that stores the backup data for each protected resource, such as Azure VMs. When the backup job for a protected resource runs, it creates a recovery point inside the Recovery Services vault.

Scenario:

There are three application tiers, each with five virtual machines.

Move all the virtual machines for App1 to Azure.

Ensure that all the virtual machines for App1 are protected by backups.

[References: https://docs.microsoft.com/en-us/azure/backup/quick-backup-vm-portal, , , ]

Questions # 34:

You are planning the move of App1 to Azure.

You create a network security group (NSG).

You need to recommend a solution to provide users with access to App1.

What should you recommend?

Options:

Create an outgoing security rule for port 443 from the Internet. Associate the NSG to all the subnets.

Create an incoming security rule for port 443 from the Internet. Associate the NSG to all the subnets.

Create an incoming security rule for port 443 from the Internet. Associate the NSG to the subnet that contains the web servers.

Create an outgoing security rule for port 443 from the Internet. Associate the NSG to the subnet that contains the web servers.

Answer

Explanation

As App1 is public-facing we need an incoming security rule, related to the access of the web servers.

Scenario: You have a public-facing application named App1. App1 is comprised of the following three tiers: a SQL database, a web front end, and a processing middle tier.

Each tier is comprised of five virtual machines. Users access the web front end by using HTTPS only.

Questions # 35:

You need to meet the user requirement for Admin1.

What should you do?

Options:

From the Subscriptions blade, select the subscription, and then modify the Properties.

From the Subscriptions blade, select the subscription, and then modify the Access control (IAM) settings.

From the Azure Active Directory blade, modify the Properties.

From the Azure Active Directory blade, modify the Groups.

Answer

Explanation

Change the Service administrator for an Azure subscription

Select a subscription.

On the right side, select Edit subscription details.

Scenario: Designate a new user named Admin1 as the service administrator of the Azure subscription.

[References: https://docs.microsoft.com/en-us/azure/billing/billing-add-change-azure-subscription-administrator, , , ]

Questions # 36:

You need to recommend an identify solution that meets the technical requirements.

What should you recommend?

Options:

federated single-on (SSO) and Active Directory Federation Services (AD FS)

password hash synchronization and single sign-on (SSO)

cloud-only user accounts

Pass-through Authentication and single sign-on (SSO)

Answer

Explanation

Active Directory Federation Services is a feature and web service in the Windows Server Operating System that allows sharing of identity information outside a company’s network.

Scenario: Technical Requirements include:

Prevent user passwords or hashes of passwords from being stored in Azure.

[References: https://www.sherweb.com/blog/active-directory-federation-services/, , , ]

Questions # 37:

You need to move the blueprint files to Azure.

What should you do?

Options:

Generate a shared access signature (SAS). Map a drive, and then copy the files by using File Explorer.

Use the Azure Import/Export service.

Generate an access key. Map a drive, and then copy the files by using File Explorer.

Use Azure Storage Explorer to copy the files.

Answer

Explanation

Azure Storage Explorer is a free tool from Microsoft that allows you to work with Azure Storage data on Windows, macOS, and Linux. You can use it to upload and download data from Azure blob storage.

Scenario:

Planned Changes include: move the existing product blueprint files to Azure Blob storage.

Technical Requirements include: Copy the blueprint files to Azure over the Internet.

[References: https://docs.microsoft.com/en-us/azure/machine-learning/team-data-science-process/move-data-to-azure-blob-using-azure-storage-explorer, , , , ]

Questions # 38:

You need to configure encryption for the virtual machines. The solution must meet the technical requirements.

Which virtual machines can you encrypt?