Summer Certification Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = getmirror

Home
Microsoft
Azure Administrator Associate
AZ-104
Microsoft Azure Administrator Questions and Answers

Pass the Microsoft Azure Administrator Associate AZ-104 Questions and answers with ExamsMirror

Practice at least 50% of the questions to maximize your chances of passing.

Exam AZ-104 Premium Access

View all detail and faqs for the AZ-104 exam

Go to Exam

708 Students Passed

90% Average Score

92% Same Questions

Viewing page 7 out of 14 pages

Viewing questions 61-70 out of questions

Questions # 61:

You implement the planned changes for Scope1.

You need to ensure that Scope1 meets the technical requirements.

What can you encrypt by using Scope1?

Options:

containers and blobs in storage2 only

containers and blobs in storage1 and storage2

containers, blobs, and file shares in storage2 only

containers, blobs, and file shares in storage1 and storage2

containers, blobs, file shares, queues, and tables in storage2 only

Answer

Questions # 62:

You need to configure encryption for the virtual machines. The solution must meet the technical requirements.

Which virtual machines can you encrypt?

Options:

VM1 and VM3

VM2 and VM3

VM2 and VM4

VM4 and VM5

Answer

Questions # 63:

You need to configure Azure Backup to back up the file shares and virtual machines.

What is the minimum number of Recovery Services vaults and backup policies you should create? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Question # 63

Options:

Answer

Answer:

Explanation

https://learn.microsoft.com/en-us/azure/backup/backup-azure-files?tabs=backup-center

https://learn.microsoft.com/en-us/azure/backup/backup-azure-vms-first-look-arm#back-up-from-azure-vm-settings

Questions # 64:

You need to ensure that User1 can create initiative definitions, and User4 can assign initiatives to RG2. The solution must meet the technical requirements.

Which role should you assign to each user? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Question # 64

Options:

Answer

Answer:

Explanation

[Reference:, https://docs.microsoft.com/en-us/azure/governance/policy/overview, , , , ]

Questions # 65:

You need to meet the connection requirements for the New York office.

What should you do? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Question # 65

Options:

Answer

Answer:

Explanation

Box 1: Create a virtual network gateway and a local network gateway.

Azure VPN gateway. The VPN gateway service enables you to connect the VNet to the on-premises network through a VPN appliance. For more information, see Connect an on-premises network to a Microsoft Azure virtual network. The VPN gateway includes the following elements:

Virtual network gateway. A resource that provides a virtual VPN appliance for the VNet. It is responsible for routing traffic from the on-premises network to the VNet.

Local network gateway. An abstraction of the on-premises VPN appliance. Network traffic from the cloud application to the on-premises network is routed through this gateway.

Connection. The connection has properties that specify the connection type (IPSec) and the key shared with the on-premises VPN appliance to encrypt traffic.

Gateway subnet. The virtual network gateway is held in its own subnet, which is subject to various requirements, described in the Recommendations section below.

Box 2: Configure a site-to-site VPN connection

On premises create a site-to-site connection for the virtual network gateway and the local network gateway.

Scenario: Connect the New York office to VNet1 over the Internet by using an encrypted connection.

Questions # 66:

You need to ensure that VM1 can communicate with VM4. The solution must minimize administrative effort.

What should you do?

Options:

Create a user-defined route from VNET1 to VNET3.

Assign VM4 an IP address of 10.0.1.5/24.

Establish peering between VNET1 and VNET3.

Create an NSG and associate the NSG to VMI and VM4.

Answer

Explanation

[Reference:, https://docs.microsoft.com/en-us/azure/vpn-gateway/tutorial-site-to-site-portal, , , , ]

Questions # 67:

You need to the appropriate sizes for the Azure virtual for Server2.

What should you do? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Question # 67

Options:

Answer

Answer:

Explanation

Box 1: Create a Recovery Services vault

Create a Recovery Services vault on the Azure Portal.

Box 2: Install the Azure Site Recovery Provider

Azure Site Recovery can be used to manage migration of on-premises machines to Azure.

Scenario: Migrate the virtual machines hosted on Server1 and Server2 to Azure.

Server2 has the Hyper-V host role.

[References:, https://docs.microsoft.com/en-us/azure/site-recovery/migrate-tutorial-on-premises-azure, , , , ]

Questions # 68:

You discover that VM3 does NOT meet the technical requirements.

You need to verify whether the issue relates to the NSGs.

What should you use?

Options:

Diagram in VNet1

the security recommendations in Azure Advisor

Diagnostic settings in Azure Monitor

Diagnose and solve problems in Traffic Manager Profiles

IP flow verify in Azure Network Watcher

Answer

Explanation

Scenario: Litware must meet technical requirements including:

Ensure that VM3 can establish outbound connections over TCP port 8080 to the applications servers in the Montreal office.

IP flow verify checks if a packet is allowed or denied to or from a virtual machine. The information consists of direction, protocol, local IP, remote IP, local port, and remote port. If the packet is denied by a security group, the name of the rule that denied the packet is returned. While any source or destination IP can be chosen, IP flow verify helps administrators quickly diagnose connectivity issues from or to the internet and from or to the on-premises environment.

[References:, https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-ip-flow-verify-overview, , , ]

Questions # 69:

You implement the planned changes for NSG1 and NSG2.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Question # 69

Options:

Answer

Answer:

Questions # 70:

You need to recommend a solution to automate the configuration for the finance department users. The solution must meet the technical requirements.

What should you include in the recommended?

Options:

Azure AP B2C

Azure AD Identity Protection

an Azure logic app and the Microsoft Identity Management (MIM) client

dynamic groups and conditional access policies

Answer

Explanation

Technically, The finance department needs to migrate their users from AD to AAD using AADC based on the finance OU, and need to enforce MFA use. This is conditional access policy. Employees also often get promotions and/or join other departments and when that occurs, the user's OU attribute will change when the admin puts the user in a new OU, and the dynamic group conditional access exception (OU= [Department Name Value]) will move the user to the appropriate dynamic group on next AADC delta sync.

https://docs.microsoft.com/en-us/azure/active-directory/enterprise-users/groups-dynamic-membership

https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overview

https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-userstates

Viewing page 7 out of 14 pages

Viewing questions 61-70 out of questions

Modal title

Registered Required

In order to participate in the comments you need to be logged-in.
You can sign-up or login (it's free).

TOP CODES

Top selling exam codes in the certification world, popular, in demand and updated to help you pass on the first try.

2V0-11.25

ADM-201

Agentforce-Specialist

CMMC-CCP

Data-Cloud-Consultant

PDI

PSE-Strata-Pro-24

Secure-Software-Design

Sharing-and-Visibility-Architect

Workday-Pro-Integrations

ZDTA