Summer Certification Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = getmirror

Home
Microsoft
Azure Administrator Associate
AZ-104
Microsoft Azure Administrator Questions and Answers

Pass the Microsoft Azure Administrator Associate AZ-104 Questions and answers with ExamsMirror

Practice at least 50% of the questions to maximize your chances of passing.

Exam AZ-104 Premium Access

View all detail and faqs for the AZ-104 exam

Go to Exam

708 Students Passed

90% Average Score

92% Same Questions

Viewing page 6 out of 14 pages

Viewing questions 51-60 out of questions

Questions # 51:

You need to define a custom domain name for Azure AD to support the planned infrastructure.

Which domain name should you use?

Options:

Join the client computers in the Miami office to Azure AD.

Add http://autologon.microsoftazuread-sso.com to the intranet zone of each client computer in the Miami office.

Allow inbound TCP port 8080 to the domain controllers in the Miami office.

Install Azure AD Connect on a server in the Miami office and enable Pass-through Authentication

Install the Active Directory Federation Services (AD FS) role on a domain controller in the Miami office.

Answer

B, D

Explanation

Every Azure AD directory comes with an initial domain name in the form of domainname.onmicrosoft.com. The initial domain name cannot be changed or deleted, but you can add your corporate domain name to Azure AD as well. For example, your organization probably has other domain names used to do business and users who sign in using your corporate domain name. Adding custom domain names to Azure AD allows you to assign user names in the directory that are familiar to your users, such as ‘alice@contoso.com.’ instead of 'alice@domain name.onmicrosoft.com'.

Scenario:

Network Infrastructure: Each office has a local data center that contains all the servers for that office. Each office has a dedicated connection to the Internet.

Humongous Insurance has a single-domain Active Directory forest named humongousinsurance.com

Planned Azure AD Infrastructure: The on-premises Active Directory domain will be synchronized to Azure AD.

[References: https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/add-custom-domain, , , , ]

Questions # 52:

You are evaluating the connectivity between the virtual machines after the planned implementation of the Azure networking infrastructure.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

Question # 52

Options:

Answer

Answer:

Explanation

Once the VNets are peered, all resources on one VNet can communicate with resources on the other peered VNets. You plan to enable peering between Paris-VNet and AllOffices-VNet. Therefore VMs on Subnet1, which is on Paris-VNet and VMs on Subnet3, which is on AllOffices-VNet will be able to connect to each other.

All Azure resources connected to a VNet have outbound connectivity to the Internet by default. Therefore VMs on ClientSubnet, which is on ClientResources-VNet will have access to the Internet; and VMs on Subnet3 and Subnet4, which are on AllOffices-VNet will have access to the Internet.

[Reference:, https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-peering-overview, https://docs.microsoft.com/en-us/azure/networking/networking-overview#internet-connectivity, , , ]

Questions # 53:

You need to prepare the environment to meet the authentication requirements.

Which two actions should you perform? Each correct answer presents part of the solution.

NOTE Each correct selection is worth one point.

Options:

Azure Active Directory (AD) Identity Protection and an Azure policy

a Recovery Services vault and a backup policy

an Azure Key Vault and an access policy

an Azure Storage account and an access policy

Answer

Explanation

D: Seamless SSO works with any method of cloud authentication - Password Hash Synchronization or Pass-through Authentication, and can be enabled via Azure AD Connect.

B: You can gradually roll out Seamless SSO to your users. You start by adding the following Azure AD URL to all or selected users' Intranet zone settings by using Group Policy in Active Directory: https://autologon.microsoftazuread-sso.com

Questions # 54:

You need to implement the planned changes for User1.

Which roles should you assign to User1, and for which resources? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Question # 54