AZ-104 Exam Answers PDF
Document Details
Uploaded by ClearedXenon
FPT University
Microsoft
Tags
Summary
This document is a collection of past Microsoft AZ-104 exam questions and answers focusing on Azure Storage, Disk Encryption, and shared access signatures. It covers key concepts, including storage account configurations and best practices for securing data in the cloud.
Full Transcript
6/18/24, 1:06 AM AZ-104 Exam - Free Actual Q&As, Page 1 | ExamTopics Question #77 Topic 3 HOTSPOT...
6/18/24, 1:06 AM AZ-104 Exam - Free Actual Q&As, Page 1 | ExamTopics Question #77 Topic 3 HOTSPOT - You have an Azure subscription that contains a virtual machine named VM1. To VM1, you plan to add a 1-TB data disk that meets the following requirements: Provides data resiliency in the event of a datacenter outage. Provides the lowest latency and the highest performance. Ensures that no data loss occurs if a host fails. You need to recommend which type of storage and host caching to configure for the new data disk. Correct Answer: https://www.examtopics.com/exams/microsoft/az-104/custom-view/ 191/555 6/18/24, 1:06 AM AZ-104 Exam - Free Actual Q&As, Page 1 | ExamTopics Question #78 Topic 3 You have an Azure virtual machine named VM1 and an Azure key vault named Vault1. On VM1, you plan to configure Azure Disk Encryption to use a key encryption key (KEK). You need to prepare Vault1 for Azure Disk Encryption. Which two actions should you perform on Vault1? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point. A. Select Azure Virtual machines for deployment. B. Create a new key. C. Create a new secret. D. Configure a key rotation policy. E. Select Azure Disk Encryption for volume encryption. Correct Answer: BE Community vote distribution BE (71%) BD (16%) 13% Question #79 Topic 3 You have an Azure subscription that contains a virtual machine named VM1 and an Azure key vault named KV1. You need to configure encryption for VM1. The solution must meet the following requirements: Store and use the encryption key in KV1. Maintain encryption if VM1 is downloaded from Azure. Encrypt both the operating system disk and the data disks. Which encryption method should you use? A. customer-managed keys B. Confidential disk encryption C. Azure Disk Encryption D. encryption at host Correct Answer: C Community vote distribution C (91%) 9% https://www.examtopics.com/exams/microsoft/az-104/custom-view/ 192/555 6/18/24, 1:06 AM AZ-104 Exam - Free Actual Q&As, Page 1 | ExamTopics Question #80 Topic 3 HOTSPOT - You have an Azure subscription that contains a storage account named storage1. You need to configure a shared access signature (SAS) to ensure that users can only download blobs securely by name. Which two settings should you configure? To answer, select the appropriate settings in the answer area. NOTE: Each correct answer is worth one point. Correct Answer: https://www.examtopics.com/exams/microsoft/az-104/custom-view/ 193/555 6/18/24, 1:06 AM AZ-104 Exam - Free Actual Q&As, Page 1 | ExamTopics Question #81 Topic 3 You have an Azure subscription that contains a storage account named storage1. The storage1 account contains a container named container1. You need to configure access to container1. The solution must meet the following requirements: Only allow read access. Allow both HTTP and HTTPS protocols. Apply access permissions to all the content in the container. What should you use? A. an access policy B. a shared access signature (SAS) C. Azure Content Delivery Network (CDN) D. access keys Correct Answer: B Community vote distribution B (100%) Question #82 Topic 3 You need to create an Azure Storage account named storage1. The solution must meet the following requirements: Support Azure Data Lake Storage. Minimize costs for infrequently accessed data. Automatically replicate data to a secondary Azure region. Which three options should you configure for storage1? Each correct answer presents part of the solution. NOTE: Each correct answer is worth one point. A. zone-redundant storage (ZRS) B. the Cool access tire C. geo-redundant storage (GRS) D. the Hot access tier E. hierarchical namespace Correct Answer: BCE Community vote distribution BCE (88%) 13% https://www.examtopics.com/exams/microsoft/az-104/custom-view/ 194/555 6/18/24, 1:06 AM AZ-104 Exam - Free Actual Q&As, Page 1 | ExamTopics Question #83 Topic 3 HOTSPOT - You have an Azure Storage account named storage1 that contains two containers named container1 and container2. Blob versioning is enabled for both containers. You periodically take blob snapshots of critical blobs. You create the following lifecycle management policy. For each of the following statements, select Yes if the statement is true. Otherwise, select No. https://www.examtopics.com/exams/microsoft/az-104/custom-view/ 195/555 6/18/24, 1:06 AM AZ-104 Exam - Free Actual Q&As, Page 1 | ExamTopics NOTE: Each correct selection is worth one point. Correct Answer: Question #84 Topic 3 You have an Azure subscription that contains the storage accounts shown in the following table. Which storage account can be converted to zone-redundant storage (ZRS) replication? A. storage1 B. storage2 C. storage3 D. storage4 Correct Answer: B Community vote distribution B (100%) https://www.examtopics.com/exams/microsoft/az-104/custom-view/ 196/555 6/18/24, 1:06 AM AZ-104 Exam - Free Actual Q&As, Page 1 | ExamTopics Question #85 Topic 3 You have an Azure subscription that contains the devices shown in the following table. On which devices can you install Azure Storage Explorer? A. Device1 only B. Device1 and Device2 only C. Device1 and Device3 only D. Device1, Device2, and Device3 only E. Device1, Device3, and Device4 only Correct Answer: D Community vote distribution D (100%) https://www.examtopics.com/exams/microsoft/az-104/custom-view/ 197/555 6/18/24, 1:06 AM AZ-104 Exam - Free Actual Q&As, Page 1 | ExamTopics Question #86 Topic 3 HOTSPOT - You have an Azure subscription. You plan to create the Azure Storage account as shown in the following exhibit. Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. https://www.examtopics.com/exams/microsoft/az-104/custom-view/ 198/555 6/18/24, 1:06 AM AZ-104 Exam - Free Actual Q&As, Page 1 | ExamTopics NOTE: Each correct selection is worth one point. Correct Answer: https://www.examtopics.com/exams/microsoft/az-104/custom-view/ 199/555 6/18/24, 1:06 AM AZ-104 Exam - Free Actual Q&As, Page 1 | ExamTopics Question #87 Topic 3 HOTSPOT - You have an Azure Storage account named storage1 that contains a container named container1. The container1 container stores thousands of image files. You plan to use an Azure Resource Manager (ARM) template to create a blob inventory rule named rule1. You need to ensure that only blobs whose names start with the word finance are stored daily as a CSV file in container1. How should you complete rule1? To answer, select the options in the answer area. NOTE: Each correct answer is worth one point. https://www.examtopics.com/exams/microsoft/az-104/custom-view/ 200/555 6/18/24, 1:06 AM AZ-104 Exam - Free Actual Q&As, Page 1 | ExamTopics Correct Answer: https://www.examtopics.com/exams/microsoft/az-104/custom-view/ 201/555 6/18/24, 1:06 AM AZ-104 Exam - Free Actual Q&As, Page 1 | ExamTopics Question #88 Topic 3 HOTSPOT - You have an Azure subscription that contains a storage account named storage1. The storage1 account contains blobs in a container named container1. You plan to share access to storage1. You need to generate a shared access signature (SAS). The solution must meet the following requirements: Ensure that the SAS can only be used to enumerate and download blobs stored in container1. Use the principle of least privilege. Which three settings should you enable? To answer, select the appropriate settings in the answer area. Correct Answer: https://www.examtopics.com/exams/microsoft/az-104/custom-view/ 202/555 6/18/24, 1:06 AM AZ-104 Exam - Free Actual Q&As, Page 1 | ExamTopics Question #89 Topic 3 HOTSPOT - You have an Azure subscription. The subscription contains a storage account named storage1 that has the lifecycle management rules shown in the following table. On June 1, you store two blobs in storage1 as shown in the following table. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Correct Answer: https://www.examtopics.com/exams/microsoft/az-104/custom-view/ 203/555 6/18/24, 1:06 AM AZ-104 Exam - Free Actual Q&As, Page 1 | ExamTopics Question #90 Topic 3 HOTSPOT - You have an Azure Storage account named contoso2024 that contains the resources shown in the following table. You have users that have permissions for contoso2024 as shown in the following table. The contoso2024 account is configured as shown in the following exhibit. For each of the following statements, select Yes if the statement is true. Otherwise, select No. https://www.examtopics.com/exams/microsoft/az-104/custom-view/ 204/555 6/18/24, 1:06 AM AZ-104 Exam - Free Actual Q&As, Page 1 | ExamTopics NOTE: Each correct selection is worth one point. Correct Answer: Topic 4 - Question Set 4 Question #1 Topic 4 Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You deploy an Azure Kubernetes Service (AKS) cluster named AKS1. You need to deploy a YAML file to AKS1. Solution: From Azure CLI, you run az aks. Does this meet the goal? A. Yes B. No Correct Answer: B Reference: https://docs.microsoft.com/en-us/azure/aks/kubernetes-walkthrough Community vote distribution B (100%) https://www.examtopics.com/exams/microsoft/az-104/custom-view/ 205/555 6/18/24, 1:06 AM AZ-104 Exam - Free Actual Q&As, Page 1 | ExamTopics Question #2 Topic 4 Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You deploy an Azure Kubernetes Service (AKS) cluster named AKS1. You need to deploy a YAML file to AKS1. Solution: From Azure CLI, you run the kubectl client. Does this meet the goal? A. Yes B. No Correct Answer: A Reference: https://docs.microsoft.com/en-us/azure/aks/kubernetes-walkthrough Community vote distribution A (100%) Question #3 Topic 4 Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You deploy an Azure Kubernetes Service (AKS) cluster named AKS1. You need to deploy a YAML file to AKS1. Solution: From Azure CLI, you run azcopy. Does this meet the goal? A. Yes B. No Correct Answer: B Reference: https://docs.microsoft.com/en-us/azure/aks/kubernetes-walkthrough Community vote distribution B (100%) https://www.examtopics.com/exams/microsoft/az-104/custom-view/ 206/555 6/18/24, 1:06 AM AZ-104 Exam - Free Actual Q&As, Page 1 | ExamTopics Question #4 Topic 4 Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure virtual machine named VM1 that runs Windows Server 2016. You need to create an alert in Azure when more than two error events are logged to the System event log on VM1 within an hour. Solution: You create an Azure storage account and configure shared access signatures (SASs). You install the Microsoft Monitoring Agent on VM1. You create an alert in Azure Monitor and specify the storage account as the source. Does that meet the goal? A. Yes B. No Correct Answer: B Instead: You create an Azure Log Analytics workspace and configure the data settings. You install the Microsoft Monitoring Agent on VM1. You create an alert in Azure Monitor and specify the Log Analytics workspace as the source. Reference: https://docs.microsoft.com/en-us/azure/azure-monitor/platform/agents-overview Community vote distribution B (100%) https://www.examtopics.com/exams/microsoft/az-104/custom-view/ 207/555 6/18/24, 1:06 AM AZ-104 Exam - Free Actual Q&As, Page 1 | ExamTopics Question #5 Topic 4 HOTSPOT - You have an Azure subscription named Subscription1. Subscription1 contains the resources in the following table. VNet1 is in RG1. VNet2 is in RG2. There is no connectivity between VNet1 and VNet2. An administrator named Admin1 creates an Azure virtual machine named VM1 in RG1. VM1 uses a disk named Disk1 and connects to VNet1. Admin1 then installs a custom application in VM1. You need to move the custom application to VNet2. The solution must minimize administrative effort. Which two actions should you perform? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area: Correct Answer: We cannot just move a virtual machine between networks. What we need to do is identify the disk used by the VM, delete the VM itself while retaining the disk, and recreate the VM in the target virtual network and then attach the original disk to it. Reference: https://blogs.technet.microsoft.com/canitpro/2014/06/16/step-by-step-move-a-vm-to-a-different-vnet-on-azure/ https://4sysops.com/archives/move-an-azure-vm-to-another-virtual-network-vnet/#migrate-an-azure-vm-between-vnets https://www.examtopics.com/exams/microsoft/az-104/custom-view/ 208/555 6/18/24, 1:06 AM AZ-104 Exam - Free Actual Q&As, Page 1 | ExamTopics Question #6 Topic 4 You download an Azure Resource Manager template based on an existing virtual machine. The template will be used to deploy 100 virtual machines. You need to modify the template to reference an administrative password. You must prevent the password from being stored in plain text. What should you create to store the password? A. an Azure Key Vault and an access policy B. an Azure Storage account and an access policy C. a Recovery Services vault and a backup policy D. Azure Active Directory (AD) Identity Protection and an Azure policy Correct Answer: A You can use a template that allows you to deploy a simple Windows VM by retrieving the password that is stored in a Key Vault. Therefore, the password is never put in plain text in the template parameter file. Reference: https://azure.microsoft.com/en-us/resources/templates/101-vm-secure-password/ Community vote distribution A (100%) https://www.examtopics.com/exams/microsoft/az-104/custom-view/ 209/555 6/18/24, 1:06 AM AZ-104 Exam - Free Actual Q&As, Page 1 | ExamTopics Question #7 Topic 4 HOTSPOT - You have the App Service plans shown in the following table. You plan to create the Azure web apps shown in the following table. You need to identify which App Service plans can be used for the web apps. What should you identify? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area: Correct Answer: Box 1: ASP1 ASP3 - Asp1, ASP3: ASP.NET Core apps can be hosted both on Windows or Linux. Not ASP2: The region in which your app runs is the region of the App Service plan it's in. Box 2: ASP1 - ASP.NET apps can be hosted on Windows only. Reference: https://docs.microsoft.com/en-us/azure/app-service/quickstart-dotnetcore?pivots=platform-linux https://docs.microsoft.com/en- us/azure/app-service/app-service-plan-manage# https://www.examtopics.com/exams/microsoft/az-104/custom-view/ 210/555 6/18/24, 1:06 AM AZ-104 Exam - Free Actual Q&As, Page 1 | ExamTopics Question #8 Topic 4 HOTSPOT - You create a virtual machine scale set named Scale1. Scale1 is configured as shown in the following exhibit. Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point. Hot Area: https://www.examtopics.com/exams/microsoft/az-104/custom-view/ 211/555 6/18/24, 1:06 AM AZ-104 Exam - Free Actual Q&As, Page 1 | ExamTopics Correct Answer: Box 1: 6 virtual machines - The Autoscale scale out rule increases the number of VMs by 2 if the CPU threshold is 80% or higher. The initial instance count is 4 and rises to 6 when the 2 extra instances of VMs are added. Box 2: 2 virtual machnes - The Autoscale scale in rule decreases the number of VMs by 4 if the CPU threshold is 30% or lower. The initial instance count is 4 and thus cannot be reduced to 0 as the minimum instances is set to 2. Instances are only added when the CPU threshold reaches 80%. Reference: https://docs.microsoft.com/en-us/azure/azure-monitor/platform/autoscale-overview https://docs.microsoft.com/en-us/azure/azure- monitor/platform/autoscale-best-practices https://docs.microsoft.com/en-us/azure/azure-monitor/platform/autoscale-common-scale-patterns Question #9 Topic 4 You plan to automate the deployment of a virtual machine scale set that uses the Windows Server 2016 Datacenter image. You need to ensure that when the scale set virtual machines are provisioned, they have web server components installed. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point. A. Upload a configuration script B. Create an automation account C. Create an Azure policy D. Modify the extensionProfile section of the Azure Resource Manager template E. Create a new virtual machine scale set in the Azure portal Correct Answer: DE Virtual Machine Scale Sets can be used with the Azure Desired State Configuration (DSC) extension handler. Virtual machine scale sets provide a way to deploy and manage large numbers of virtual machines, and can elastically scale in and out in response to load. DSC is used to configure the VMs as they come online so they are running the production software. Reference: https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-dsc Community vote distribution AD (84%) DE (16%) https://www.examtopics.com/exams/microsoft/az-104/custom-view/ 212/555 6/18/24, 1:06 AM AZ-104 Exam - Free Actual Q&As, Page 1 | ExamTopics Question #10 Topic 4 HOTSPOT - You have an Azure Kubernetes Service (AKS) cluster named AKS1 and a computer named Computer1 that runs Windows 10. Computer1 that has the Azure CLI installed. You need to install the kubectl client on Computer1. Which command should you run? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area: Correct Answer: To install kubectl locally, use the az aks install-cli command: az aks install-cli Reference: https://docs.microsoft.com/en-us/azure/aks/kubernetes-walkthrough https://www.examtopics.com/exams/microsoft/az-104/custom-view/ 213/555 6/18/24, 1:06 AM AZ-104 Exam - Free Actual Q&As, Page 1 | ExamTopics Question #11 Topic 4 DRAG DROP - You onboard 10 Azure virtual machines to Azure Automation State Configuration. You need to use Azure Automation State Configuration to manage the ongoing consistency of the virtual machine configurations. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. NOTE: More than one order of answer choices is correct. You will receive credit for any of the correct orders you select. Select and Place: Correct Answer: Step 1: Upload a configuration to Azure Automation State Configuration. Import the configuration into the Automation account. Step 2: Compile a configuration into a node configuration. A DSC configuration defining that state must be compiled into one or more node configurations (MOF document), and placed on the Automation DSC Pull Server. Step 3: Assign the node configuration Then: Check the compliance status of the node Each time Azure Automation State Configuration performs a consistency check on a managed node, the node sends a status report back to the pull server. You can view these reports on the page for that node. On the blade for an individual report, you can see the following status information for the corresponding consistency check: ג The report status €" whether the node is "Compliant", the configuration "Failed", or the node is "Not Compliant" Reference: https://docs.microsoft.com/en-us/azure/automation/automation-dsc-getting-started https://www.examtopics.com/exams/microsoft/az-104/custom-view/ 214/555 6/18/24, 1:06 AM AZ-104 Exam - Free Actual Q&As, Page 1 | ExamTopics Question #12 Topic 4 You have an Azure Resource Manager template named Template1 that is used to deploy an Azure virtual machine. Template1 contains the following text: The variables section in Template1 contains the following text: "location": "westeurope" The resources section in Template1 contains the following text: You need to deploy the virtual machine to the West US location by using Template1. What should you do? A. Modify the location in the resources section to westus B. Select West US during the deployment C. Modify the location in the variables section to westus Correct Answer: A Community vote distribution A (100%) https://www.examtopics.com/exams/microsoft/az-104/custom-view/ 215/555 6/18/24, 1:06 AM AZ-104 Exam - Free Actual Q&As, Page 1 | ExamTopics Question #13 Topic 4 You create an App Service plan named Plan1 and an Azure web app named webapp1. You discover that the option to create a staging slot is unavailable. You need to create a staging slot for Plan1. What should you do first? A. From Plan1, scale up the App Service plan B. From webapp1, modify the Application settings C. From webapp1, add a custom domain D. From Plan1, scale out the App Service plan Correct Answer: A The app must be running in the Standard, Premium, or Isolated tier in order for you to enable multiple deployment slots. If the app isn't already in the Standard, Premium, or Isolated tier, you receive a message that indicates the supported tiers for enabling staged publishing. At this point, you have the option to select Upgrade and go to the Scale tab of your app before continuing. Scale up: Get more CPU, memory, disk space, and extra features like dedicated virtual machines (VMs), custom domains and certificates, staging slots, autoscaling, and more. Incorrect: Scale out: Increase the number of VM instances that run your app. You can scale out to as many as 30 instances Reference: https://docs.microsoft.com/en-us/azure/app-service/deploy-staging-slots https://docs.microsoft.com/en-us/azure/app-service/manage-scale- up Community vote distribution A (100%) Question #14 Topic 4 You plan to move a distributed on-premises app named App1 to an Azure subscription. After the planned move, App1 will be hosted on several Azure virtual machines. You need to ensure that App1 always runs on at least eight virtual machines during planned Azure maintenance. What should you create? A. one virtual machine scale set that has 10 virtual machines instances B. one Availability Set that has three fault domains and one update domain C. one Availability Set that has 10 update domains and one fault domain D. one virtual machine scale set that has 12 virtual machines instances Correct Answer: C An update domain is a logical group of underlying hardware that can undergo maintenance or be rebooted at the same time. As you create VMs within an availability set, the Azure platform automatically distributes your VMs across these update domains. This approach ensures that at least one instance of your application always remains running as the Azure platform undergoes periodic maintenance. Reference: http://www.thatlazyadmin.com/azure-fault-update-domains/ Community vote distribution A (55%) C (43%) https://www.examtopics.com/exams/microsoft/az-104/custom-view/ 216/555 6/18/24, 1:06 AM AZ-104 Exam - Free Actual Q&As, Page 1 | ExamTopics Question #15 Topic 4 Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure virtual machine named VM1 that runs Windows Server 2016. You need to create an alert in Azure when more than two error events are logged to the System event log on VM1 within an hour. Solution: You create an event subscription on VM1. You create an alert in Azure Monitor and specify VM1 as the source Does this meet the goal? A. Yes B. No Correct Answer: B Instead: You create an Azure Log Analytics workspace and configure the data settings. You install the Microsoft Monitoring Agent on VM1. You create an alert in Azure Monitor and specify the Log Analytics workspace as the source. Reference: https://docs.microsoft.com/en-us/azure/azure-monitor/platform/agents-overview Community vote distribution B (100%) Question #16 Topic 4 Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure virtual machine named VM1. VM1 was deployed by using a custom Azure Resource Manager template named ARM1.json. You receive a notification that VM1 will be affected by maintenance. You need to move VM1 to a different host immediately. Solution: From the Overview blade, you move the virtual machine to a different subscription. Does this meet the goal? A. Yes B. No Correct Answer: B You would need to redeploy the VM. Reference: https://docs.microsoft.com/en-us/azure/virtual-machines/windows/redeploy-to-new-node Community vote distribution B (100%) https://www.examtopics.com/exams/microsoft/az-104/custom-view/ 217/555 6/18/24, 1:06 AM AZ-104 Exam - Free Actual Q&As, Page 1 | ExamTopics Question #17 Topic 4 Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure virtual machine named VM1. VM1 was deployed by using a custom Azure Resource Manager template named ARM1.json. You receive a notification that VM1 will be affected by maintenance. You need to move VM1 to a different host immediately. Solution: From the Redeploy blade, you click Redeploy. Does this meet the goal? A. Yes B. No Correct Answer: A When you redeploy a VM, it moves the VM to a new node within the Azure infrastructure and then powers it back on, retaining all your configuration options and associated resources. References: https://docs.microsoft.com/en-us/azure/virtual-machines/windows/redeploy-to-new-node Community vote distribution A (100%) Question #18 Topic 4 Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure virtual machine named VM1. VM1 was deployed by using a custom Azure Resource Manager template named ARM1.json. You receive a notification that VM1 will be affected by maintenance. You need to move VM1 to a different host immediately. Solution: From the Update management blade, you click Enable. Does this meet the goal? A. Yes B. No Correct Answer: B You would need to redeploy the VM. Reference: https://docs.microsoft.com/en-us/azure/virtual-machines/windows/redeploy-to-new-node Community vote distribution B (100%) https://www.examtopics.com/exams/microsoft/az-104/custom-view/ 218/555 6/18/24, 1:06 AM AZ-104 Exam - Free Actual Q&As, Page 1 | ExamTopics Question #19 Topic 4 You have an Azure subscription that contains a web app named webapp1. You need to add a custom domain named www.contoso.com to webapp1. What should you do first? A. Create a DNS record B. Add a connection string C. Upload a certificate. D. Stop webapp1. Correct Answer: A You can use either a CNAME record or an A record to map a custom DNS name to App Service. Reference: https://docs.microsoft.com/en-us/Azure/app-service/app-service-web-tutorial-custom-domain Community vote distribution A (100%) Question #20 Topic 4 Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure subscription that contains the resources shown in the following table. VM1 connects to VNET1. You need to connect VM1 to VNET2. Solution: You move VM1 to RG2, and then you add a new network interface to VM1. Does this meet the goal? A. Yes B. No Correct Answer: B Instead you should delete VM1. You recreate VM1, and then you add the network interface for VM1. Note: When you create an Azure virtual machine (VM), you must create a virtual network (VNet) or use an existing VNet. You can change the subnet a VM is connected to after it's created, but you cannot change the VNet. Reference: https://docs.microsoft.com/en-us/azure/virtual-machines/windows/network-overview Community vote distribution B (100%) https://www.examtopics.com/exams/microsoft/az-104/custom-view/ 219/555 6/18/24, 1:06 AM AZ-104 Exam - Free Actual Q&As, Page 1 | ExamTopics Question #21 Topic 4 Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure subscription that contains the resources shown in the following table. VM1 connects to VNET1. You need to connect VM1 to VNET2. Solution: You delete VM1. You recreate VM1, and then you create a new network interface for VM1 and connect it to VNET2. Does this meet the goal? A. Yes B. No Correct Answer: A You should delete VM1. You recreate VM1, and then you add the network interface for VM1. Note: When you create an Azure virtual machine (VM), you must create a virtual network (VNet) or use an existing VNet. You can change the subnet a VM is connected to after it's created, but you cannot change the VNet. Reference: https://docs.microsoft.com/en-us/azure/virtual-machines/windows/network-overview Community vote distribution A (100%) https://www.examtopics.com/exams/microsoft/az-104/custom-view/ 220/555 6/18/24, 1:06 AM AZ-104 Exam - Free Actual Q&As, Page 1 | ExamTopics Question #22 Topic 4 Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure subscription that contains the resources shown in the following table. VM1 connects to VNET1. You need to connect VM1 to VNET2. Solution: You turn off VM1, and then you add a new network interface to VM1. Does this meet the goal? A. Yes B. No Correct Answer: B Instead you should delete VM1. You recreate VM1, and then you add the network interface for VM1. Note: When you create an Azure virtual machine (VM), you must create a virtual network (VNet) or use an existing VNet. You can change the subnet a VM is connected to after it's created, but you cannot change the VNet. Reference: https://docs.microsoft.com/en-us/azure/virtual-machines/windows/network-overview Community vote distribution B (100%) https://www.examtopics.com/exams/microsoft/az-104/custom-view/ 221/555 6/18/24, 1:06 AM AZ-104 Exam - Free Actual Q&As, Page 1 | ExamTopics Question #23 Topic 4 HOTSPOT - You have an Azure subscription named Subscription1 that contains the quotas shown in the following table. You deploy virtual machines to Subscription1 as shown in the following table. You plan to deploy the virtual machines shown in the following table. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area: Correct Answer: The total regional vCPUs is 20 so that means a maximum total of 20 vCPUs across all the different VM sizes. The deallocated VM with 16 vCPUs counts towards the total. VM20 and VM1 are using 18 of the maximum 20 vCPUs leaving only two vCPUs available. Reference: https://docs.microsoft.com/en-us/azure/virtual-machines/windows/quotas https://www.examtopics.com/exams/microsoft/az-104/custom-view/ 222/555 6/18/24, 1:06 AM AZ-104 Exam - Free Actual Q&As, Page 1 | ExamTopics Question #24 Topic 4 HOTSPOT - You have an Azure subscription that contains an Azure Availability Set named WEBPROD-AS-USE2 as shown in the following exhibit. You add 14 virtual machines to WEBPROD-AS-USE2. Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point. Hot Area: https://www.examtopics.com/exams/microsoft/az-104/custom-view/ 223/555 6/18/24, 1:06 AM AZ-104 Exam - Free Actual Q&As, Page 1 | ExamTopics Correct Answer: Box 1: 2 - There are 10 update domains. The 14 VMs are shared across the 10 update domains so four update domains will have two VMs and six update domains will have one VM. Only one update domain is rebooted at a time. Therefore, a maximum of two VMs will be offline. Box 2: 7 - There are 2 fault domains. The 14 VMs are shared across the 2 fault domains, so 7 VMs in each fault domain. A rack failure will affect one fault domain so 7 VMs will be offline. Reference: https://docs.microsoft.com/en-us/azure/virtual-machines/windows/manage-availability Question #25 Topic 4 You deploy an Azure Kubernetes Service (AKS) cluster named Cluster1 that uses the IP addresses shown in the following table. You need to provide internet users with access to the applications that run in Cluster1. Which IP address should you include in the DNS record for Cluster1? A. 131.107.2.1 B. 10.0.10.11 C. 172.17.7.1 D. 192.168.10.2 Correct Answer: A Community vote distribution A (100%) https://www.examtopics.com/exams/microsoft/az-104/custom-view/ 224/555 6/18/24, 1:06 AM AZ-104 Exam - Free Actual Q&As, Page 1 | ExamTopics Question #26 Topic 4 You have a deployment template named Template1 that is used to deploy 10 Azure web apps. You need to identify what to deploy before you deploy Template1. The solution must minimize Azure costs. What should you identify? A. five Azure Application Gateways B. one App Service plan C. 10 App Service plans D. one Azure Traffic Manager E. one Azure Application Gateway Correct Answer: B You create Azure web apps in an App Service plan. Reference: https://docs.microsoft.com/en-us/azure/app-service/overview-hosting-plans Community vote distribution B (100%) https://www.examtopics.com/exams/microsoft/az-104/custom-view/ 225/555 6/18/24, 1:06 AM AZ-104 Exam - Free Actual Q&As, Page 1 | ExamTopics Question #27 Topic 4 HOTSPOT - You plan to deploy an Azure container instance by using the following Azure Resource Manager template. Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the template. NOTE: Each correct selection is worth one point. Hot Area: https://www.examtopics.com/exams/microsoft/az-104/custom-view/ 226/555 6/18/24, 1:06 AM AZ-104 Exam - Free Actual Q&As, Page 1 | ExamTopics Correct Answer: Question #28 Topic 4 You have an Azure subscription that contains a virtual machine named VM1. VM1 hosts a line-of-business application that is available 24 hours a day. VM1 has one network interface and one managed disk. VM1 uses the D4s v3 size. You plan to make the following changes to VM1: ✑ Change the size to D8s v3. ✑ Add a 500-GB managed disk. ✑ Add the Puppet Agent extension. ✑ Enable Desired State Configuration Management. Which change will cause downtime for VM1? A. Enable Desired State Configuration Management B. Add a 500-GB managed disk C. Change the size to D8s v3 D. Add the Puppet Agent extension Correct Answer: C While resizing the VM it must be in a stopped state. Reference: https://azure.microsoft.com/en-us/blog/resize-virtual-machines/ Community vote distribution C (100%) https://www.examtopics.com/exams/microsoft/az-104/custom-view/ 227/555 6/18/24, 1:06 AM AZ-104 Exam - Free Actual Q&As, Page 1 | ExamTopics Question #29 Topic 4 You have an app named App1 that runs on an Azure web app named webapp1. The developers at your company upload an update of App1 to a Git repository named Git1. Webapp1 has the deployment slots shown in the following table. You need to ensure that the App1 update is tested before the update is made available to users. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point. A. Swap the slots B. Deploy the App1 update to webapp1-prod, and then test the update C. Stop webapp1-prod D. Deploy the App1 update to webapp1-test, and then test the update E. Stop webapp1-test Correct Answer: AD Community vote distribution AD (100%) https://www.examtopics.com/exams/microsoft/az-104/custom-view/ 228/555 6/18/24, 1:06 AM AZ-104 Exam - Free Actual Q&As, Page 1 | ExamTopics Question #30 Topic 4 You have an Azure subscription named Subscription1 that has the following providers registered: ✑ Authorization ✑ Automation ✑ Resources ✑ Compute ✑ KeyVault ✑ Network ✑ Storage ✑ Billing ✑ Web Subscription1 contains an Azure virtual machine named VM1 that has the following configurations: ✑ Private IP address: 10.0.0.4 (dynamic) ✑ Network security group (NSG): NSG1 ✑ Public IP address: None ✑ Availability set: AVSet ✑ Subnet: 10.0.0.0/24 ✑ Managed disks: No ✑ Location: East US You need to record all the successful and failed connection attempts to VM1. Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point. A. Enable Azure Network Watcher in the East US Azure region. B. Add an Azure Network Watcher connection monitor. C. Register the MicrosoftLogAnalytics provider. D. Create an Azure Storage account. E. Register the Microsoft.Insights resource provider. F. Enable Azure Network Watcher flow logs. Correct Answer: AEF You can log network traffic that flows through an NSG with Network Watcher's NSG flow log capability. ✑ In the Azure portal, enable Network Watcher ✑ Register Insights provider. NSG flow logging requires the Microsoft.Insights provider. ✑ Enable NSG flow log. NSG flow log data is written to an Azure Storage account, Subscription1 has storage. Reference: https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-nsg-flow-logging-portal Community vote distribution DEF (59%) AEF (33%) 8% https://www.examtopics.com/exams/microsoft/az-104/custom-view/ 229/555 6/18/24, 1:06 AM AZ-104 Exam - Free Actual Q&As, Page 1 | ExamTopics Question #31 Topic 4 You need to deploy an Azure virtual machine scale set that contains five instances as quickly as possible. What should you do? A. Deploy five virtual machines. Modify the Availability Zones settings for each virtual machine. B. Deploy five virtual machines. Modify the Size setting for each virtual machine. C. Deploy one virtual machine scale set that is set to VM (virtual machines) orchestration mode. D. Deploy one virtual machine scale set that is set to ScaleSetVM orchestration mode. Correct Answer: D Reference: https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/orchestration-modes Community vote distribution D (96%) 4% Question #32 Topic 4 You plan to create the Azure web apps shown in the following table. What is the minimum number of App Service plans you should create for the web apps? A. 1 B. 2 C. 3 D. 4 Correct Answer: A Community vote distribution B (96%) 4% https://www.examtopics.com/exams/microsoft/az-104/custom-view/ 230/555 6/18/24, 1:06 AM AZ-104 Exam - Free Actual Q&As, Page 1 | ExamTopics Question #33 Topic 4 HOTSPOT - You have a pay-as-you-go Azure subscription that contains the virtual machines shown in the following table. You create the budget shown in the following exhibit. The AG1 action group contains a user named [email protected] only. Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. Hot Area: https://www.examtopics.com/exams/microsoft/az-104/custom-view/ 231/555 6/18/24, 1:06 AM AZ-104 Exam - Free Actual Q&As, Page 1 | ExamTopics Correct Answer: Box 1: VM1 and VM2 continue to run The budget alerts are for Resource Group RG1, which include VM1, but not VM2. However, when the budget thresholds you've created are exceeded, only notifications are triggered. None of your resources are affected and your consumption isn't stopped. Box 2: one email notification will be sent each month. Budget alerts for Resource Group RG1, which include VM1, but not VM2.VM1 consumes 20 Euro/day. The 50%, 500 Euro limit, will be reached in 25 days, and an email will be sent. The 70% and 100% alert conditions will not be reached within a month, and they don't trigger email actions anyway. Credit alerts: Credit alerts are generated automatically at 90% and at 100% of your Azure credit balance. Whenever an alert is generated, it's reflected in cost alerts and in the email sent to the account owners. 90% and 100% will not be reached though. Reference: https://docs.microsoft.com/en-us/azure/cost-management-billing/costs/cost-mgt-alerts-monitor-usage-spending https://docs.microsoft.com/en-gb/azure/cost-management-billing/costs/tutorial-acm-create-budgets Question #34 Topic 4 Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure subscription named Subscription1. Subscription1 contains a resource group named RG1. RG1 contains resources that were deployed by using templates. You need to view the date and time when the resources were created in RG1. Solution: From the Subscriptions blade, you select the subscription, and then click Programmatic deployment. Does this meet the goal? A. Yes B. No Correct Answer: B From the RG1 blade, click Deployments. You see a history of deployment for the resource group. Reference: https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/template-tutorial-create-first-template?tabs=azure-powershell Community vote distribution B (100%) https://www.examtopics.com/exams/microsoft/az-104/custom-view/ 232/555 6/18/24, 1:06 AM AZ-104 Exam - Free Actual Q&As, Page 1 | ExamTopics Question #35 Topic 4 Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure subscription that contains the resources shown in the following table. VM1 connects to VNET1. You need to connect VM1 to VNET2. Solution: You create a new network interface, and then you add the network interface to VM1. Does this meet the goal? A. Yes B. No Correct Answer: B You should delete VM1. You recreate VM1, and then you add the network interface for VM1. Note: When you create an Azure virtual machine (VM), you must create a virtual network (VNet) or use an existing VNet. You can change the subnet a VM is connected to after it's created, but you cannot change the VNet. Reference: https://docs.microsoft.com/en-us/azure/virtual-machines/windows/network-overview Community vote distribution B (100%) https://www.examtopics.com/exams/microsoft/az-104/custom-view/ 233/555 6/18/24, 1:06 AM AZ-104 Exam - Free Actual Q&As, Page 1 | ExamTopics Question #36 Topic 4 You have an Azure Active Directory (Azure AD) tenant named adatum.com that contains the users shown in the following table. Adatum.com has the following configurations: ✑ Users may join devices to Azure AD is set to User1. ✑ Additional local administrators on Azure AD joined devices is set to None. You deploy Windows 10 to a computer named Computer1. User1 joins Computer1 to adatum.com. You need to identify the local Administrator group membership on Computer1. Which users are members of the local Administrators group? A. User1 only B. User2 only C. User1 and User2 only D. User1, User2, and User3 only E. User1, User2, User3, and User4 Correct Answer: C Users may join devices to Azure AD - This setting enables you to select the users who can register their devices as Azure AD joined devices. The default is All. Additional local administrators on Azure AD joined devices - You can select the users that are granted local administrator rights on a device. Users added here are added to the Device Administrators role in Azure AD. Global administrators, here User2, in Azure AD and device owners are granted local administrator rights by default. Reference: https://docs.microsoft.com/en-us/azure/active-directory/devices/device-management-azure-portal Community vote distribution C (100%) https://www.examtopics.com/exams/microsoft/az-104/custom-view/ 234/555 6/18/24, 1:06 AM AZ-104 Exam - Free Actual Q&As, Page 1 | ExamTopics Question #37 Topic 4 HOTSPOT - You have Azure subscriptions named Subscription1 and Subscription2. Subscription1 has following resource groups: RG1 includes a web app named App1 in the West Europe location. Subscription2 contains the following resource groups: For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area: Correct Answer: Box 1: No - RG2 is read only. ReadOnly means authorized users can read a resource, but they cannot delete or update the resource. Box 2: Yes - Box 3: Yes - Note: App Service resources are region-specific and cannot be moved directly across regions. You can move the App Service resource by creating a copy of your existing App Service resource in the target region, then move your content over to the new app. You can then delete the source app and App Service plan. To make copying your app easier, you can clone an individual App Service app into an App Service plan in another region. Reference: https://docs.microsoft.com/en-us/azure/app-service/manage-move-across-regions https://docs.microsoft.com/en-us/azure/azure-resource- manager/management/move-limitations/app-service-move-limitations https://www.examtopics.com/exams/microsoft/az-104/custom-view/ 235/555 6/18/24, 1:06 AM AZ-104 Exam - Free Actual Q&As, Page 1 | ExamTopics Question #38 Topic 4 HOTSPOT - You have an Azure subscription named Subscription1 that contains the following resource group: ✑ Name: RG1 ✑ Region: West US ✑ Tag: `tag1`: `value1` You assign an Azure policy named Policy1 to Subscription1 by using the following configurations: ✑ Exclusions: None ✑ Policy definition: Append a tag and its value to resources ✑ Assignment name: Policy1 ✑ Parameters: ✑ Tag name: tag2 Tag value: value2 - After Policy1 is assigned, you create a storage account that has the following configuration: ✑ Name: storage1 ✑ Location: West US ✑ Resource group: RG1 ✑ Tags: `tag3`: `value3` You need to identify which tags are assigned to each resource. What should you identify? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area: Correct Answer: Box 1: "tag1": "value1" only - Box 2: "tag2": "value2" and "tag3": "value3" only https://www.examtopics.com/exams/microsoft/az-104/custom-view/ 236/555 6/18/24, 1:06 AM AZ-104 Exam - Free Actual Q&As, Page 1 | ExamTopics Tags applied to the resource group are not inherited by the resources in that resource group. Reference: https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-using-tags https://www.examtopics.com/exams/microsoft/az-104/custom-view/ 237/555 6/18/24, 1:06 AM AZ-104 Exam - Free Actual Q&As, Page 1 | ExamTopics Question #39 Topic 4 HOTSPOT - You have an Azure subscription named Subscription1. In Subscription1, you create an alert rule named Alert1. The Alert1 action group is configured as shown in the following exhibit. Alert1 alert criteria triggered every minute. Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point. Hot Area: Correct Answer: Box 1: 60 - One alert per minute will trigger one email per minute. Box 2: 12 - No more than 1 SMS every 5 minutes can be send, which equals 12 per hour. Note: Rate limiting is a suspension of notifications that occurs when too many are sent to a particular phone number, email address or device. Rate limiting ensures that alerts are manageable and actionable. The rate limit thresholds are: ✑ SMS: No more than 1 SMS every 5 minutes. https://www.examtopics.com/exams/microsoft/az-104/custom-view/ 238/555 6/18/24, 1:06 AM AZ-104 Exam - Free Actual Q&As, Page 1 | ExamTopics ✑ Voice: No more than 1 Voice call every 5 minutes. ✑ Email: No more than 100 emails in an hour. ✑ Other actions are not rate limited. Reference: https://docs.microsoft.com/en-us/azure/azure-monitor/platform/alerts-rate-limiting Question #40 Topic 4 You have an Azure subscription named Subscription1 that contains the resources shown in the following table. You create virtual machines in Subscription1 as shown in the following table. You plan to use Vault1 for the backup of as many virtual machines as possible. Which virtual machines can be backed up to Vault1? A. VM1 only B. VM3 and VMC only C. VM1, VM2, VM3, VMA, VMB, and VMC D. VM1, VM3, VMA, and VMC only E. VM1 and VM3 only Correct Answer: D To create a vault to protect virtual machines, the vault must be in the same region as the virtual machines. If you have virtual machines in several regions, create a Recovery Services vault in each region. Reference: https://docs.microsoft.com/bs-cyrl-ba/azure/backup/backup-create-rs-vault Community vote distribution D (100%) https://www.examtopics.com/exams/microsoft/az-104/custom-view/ 239/555 6/18/24, 1:06 AM AZ-104 Exam - Free Actual Q&As, Page 1 | ExamTopics Question #41 Topic 4 You have an Azure Kubernetes Service (AKS) cluster named AKS1. You need to configure cluster autoscaler for AKS1. Which two tools should you use? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point. A. the kubectl command B. the az aks command C. the Set-AzVm cmdlet D. the Azure portal E. the Set-AzAks cmdlet Correct Answer: AB A: The following example uses the kubectl autoscale command to autoscale the number of pods in the azure-vote-front deployment. If average CPU utilization across all pods exceeds 50% of their requested usage, the autoscaler increases the pods up to a maximum of 10 instances. A minimum of 3 instances is then defined for the deployment: kubectl autoscale deployment azure-vote-front --cpu-percent=50 --min=3 --max=10 B: Use the az aks update command to enable and configure the cluster autoscaler on the node pool for the existing cluster. Reference: https://docs.microsoft.com/en-us/azure/aks/tutorial-kubernetes-scale https://docs.microsoft.com/en-us/azure/aks/cluster-autoscaler Community vote distribution BD (69%) AB (28%) Question #42 Topic 4 You create the following resources in an Azure subscription: ✑ An Azure Container Registry instance named Registry1 ✑ An Azure Kubernetes Service (AKS) cluster named Cluster1 You create a container image named App1 on your administrative workstation. You need to deploy App1 to Cluster1. What should you do first? A. Run the docker push command. B. Create an App Service plan. C. Run the az acr build command. D. Run the az aks create command. Correct Answer: C You should sign in and push a container image to Container Registry. Run the az acr build command to build and push the container image. az acr build \ --image contoso-website \ --registry $ACR_NAME \ --file Dockerfile. Reference: https://docs.microsoft.com/en-us/learn/modules/aks-deploy-container-app/5-exercise-deploy-app Community vote distribution A (77%) C (23%) https://www.examtopics.com/exams/microsoft/az-104/custom-view/ 240/555 6/18/24, 1:06 AM AZ-104 Exam - Free Actual Q&As, Page 1 | ExamTopics Question #43 Topic 4 You have an Azure subscription that contains the resources shown in the following table. You need to configure a proximity placement group for VMSS1. Which proximity placement groups should you use? A. Proximity2 only B. Proximity1, Proximity2, and Proximity3 C. Proximity1 only D. Proximity1 and Proximity3 only Correct Answer: A Resource Group location of VMSS1 is the RG2 location, which is West US. Only Proximity2, which also in RG2, is location in West US Reference: https://azure.microsoft.com/en-us/blog/introducing-proximity-placement-groups/ Community vote distribution A (88%) 13% Question #44 Topic 4 Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure subscription named Subscription1. Subscription1 contains a resource group named RG1. RG1 contains resources that were deployed by using templates. You need to view the date and time when the resources were created in RG1. Solution: From the Subscriptions blade, you select the subscription, and then click Resource providers. Does this meet the goal? A. Yes B. No Correct Answer: B Community vote distribution B (100%) https://www.examtopics.com/exams/microsoft/az-104/custom-view/ 241/555 6/18/24, 1:06 AM AZ-104 Exam - Free Actual Q&As, Page 1 | ExamTopics Question #45 Topic 4 Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure subscription named Subscription1. Subscription1 contains a resource group named RG1. RG1 contains resources that were deployed by using templates. You need to view the date and time when the resources were created in RG1. Solution: From the RG1 blade, you click Automation script. Does this meet the goal? A. Yes B. No Correct Answer: B From the RG1 blade, click Deployments. You see a history of deployment for the resource group. Reference: https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/template-tutorial-create-first-template?tabs=azure-powershell Community vote distribution B (100%) Question #46 Topic 4 Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure subscription named Subscription1. Subscription1 contains a resource group named RG1. RG1 contains resources that were deployed by using templates. You need to view the date and time when the resources were created in RG1. Solution: From the RG1 blade, you click Deployments. Does this meet the goal? A. Yes B. No Correct Answer: A From the RG1 blade, click Deployments. You see a history of deployment for the resource group. Reference: https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/template-tutorial-create-first-template?tabs=azure-powershell Community vote distribution A (100%) https://www.examtopics.com/exams/microsoft/az-104/custom-view/ 242/555 6/18/24, 1:06 AM AZ-104 Exam - Free Actual Q&As, Page 1 | ExamTopics Question #47 Topic 4 You have an Azure subscription named Subscription1. You deploy a Linux virtual machine named VM1 to Subscription1. You need to monitor the metrics and the logs of VM1. What should you use? A. Azure HDInsight B. Linux Diagnostic Extension (LAD) 3.0 C. the AzurePerformanceDiagnostics extension D. Azure Analysis Services Correct Answer: B The Linux Diagnostic Extension should be used which downloads the Diagnostic Extension (LAD) agent on Linux server. Reference: https://docs.microsoft.com/en-us/azure/virtual-machines/extensions/diagnostics-linux Community vote distribution B (89%) 11% https://www.examtopics.com/exams/microsoft/az-104/custom-view/ 243/555 6/18/24, 1:06 AM AZ-104 Exam - Free Actual Q&As, Page 1 | ExamTopics Question #48 Topic 4 HOTSPOT - You have an Azure subscription named Subscription1. Subscription1 contains a virtual machine named VM1. You install and configure a web server and a DNS server on VM1. VM1 has the effective network security rules shown in the following exhibit: Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point. Hot Area: Correct Answer: Box 1: Rule2 blocks ports 50-60, which includes port 53, the DNS port. Internet users can reach to the Web server, since it uses port 80. Box 2: If Rule2 is removed internet users can reach the DNS server as well. Note: Rules are processed in priority order, with lower numbers processed before higher numbers, because lower numbers have higher priority. https://www.examtopics.com/exams/microsoft/az-104/custom-view/ 244/555 6/18/24, 1:06 AM AZ-104 Exam - Free Actual Q&As, Page 1 | ExamTopics Once traffic matches a rule, processing stops. As a result, any rules that exist with lower priorities (higher numbers) that have the same attributes as rules with higher priorities are not processed. Reference: https://docs.microsoft.com/en-us/azure/virtual-network/security-overview Question #49 Topic 4 You plan to deploy three Azure virtual machines named VM1, VM2, and VM3. The virtual machines will host a web app named App1. You need to ensure that at least two virtual machines are available if a single Azure datacenter becomes unavailable. What should you deploy? A. all three virtual machines in a single Availability Zone B. all virtual machines in a single Availability Set C. each virtual machine in a separate Availability Zone D. each virtual machine in a separate Availability Set Correct Answer: C Use availability zones to protect from datacenter level failures. Reference: https://docs.microsoft.com/en-us/azure/virtual-machines/windows/manage-availability https://docs.microsoft.com/en-us/azure/virtual- machines/windows/tutorial-availability-sets Community vote distribution C (83%) A (17%) Question #50 Topic 4 You have an Azure virtual machine named VM1 that runs Windows Server 2019. You save VM1 as a template named Template1 to the Azure Resource Manager library. You plan to deploy a virtual machine named VM2 from Template1. What can you configure during the deployment of VM2? A. operating system B. administrator username C. virtual machine size D. resource group Correct Answer: B When deploying a virtual machine from a template, you must specify: ✑ the Resource Group name and location for the VM ✑ the administrator username and password ✑ an unique DNS name for the public IP Reference: https://docs.microsoft.com/en-us/azure/virtual-machines/windows/ps-template Community vote distribution D (81%) Other https://www.examtopics.com/exams/microsoft/az-104/custom-view/ 245/555 6/18/24, 1:06 AM AZ-104 Exam - Free Actual Q&As, Page 1 | ExamTopics Question #51 Topic 4 You have an Azure subscription that contains an Azure virtual machine named VM1. VM1 runs a financial reporting app named App1 that does not support multiple active instances. At the end of each month, CPU usage for VM1 peaks when App1 runs. You need to create a scheduled runbook to increase the processor performance of VM1 at the end of each month. What task should you include in the runbook? A. Add the Azure Performance Diagnostics agent to VM1. B. Modify the VM size property of VM1. C. Add VM1 to a scale set. D. Increase the vCPU quota for the subscription. E. Add a Desired State Configuration (DSC) extension to VM1. Correct Answer: E Reference: https://docs.microsoft.com/en-us/azure/automation/automation-quickstart-dsc-configuration Community vote distribution B (92%) 4% Question #52 Topic 4 You plan to deploy several Azure virtual machines that will run Windows Server 2019 in a virtual machine scale set by using an Azure Resource Manager template. You need to ensure that NGINX is available on all the virtual machines after they are deployed. What should you use? A. Deployment Center in Azure App Service B. A Desired State Configuration (DSC) extension C. the New-AzConfigurationAssignment cmdlet D. a Microsoft Intune device configuration profile Correct Answer: B Azure virtual machine extensions are small packages that run post-deployment configuration and automation on Azure virtual machines. In the following example, the Azure CLI is used to deploy a custom script extension to an existing virtual machine, which installs a Nginx webserver. az vm extension set \ --resource-group myResourceGroup \ --vm-name myVM --name customScript \ --publisher Microsoft.Azure.Extensions \ --settings '{"commandToExecute": "apt-get install -y nginx"} Note: There are several versions of this question in the exam. The question has two correct answers: 1. a Desired State Configuration (DSC) extension 2. Azure Custom Script Extension The question can have other incorrect answer options, including the following: ✑ the Publish-AzVMDscConfiguration cmdlet ✑ Azure Application Insights Reference: https://docs.microsoft.com/en-us/azure/architecture/framework/devops/automation-configuration Community vote distribution