Microsoft AZ-104 Real Exam Questions
The questions for AZ-104 were last updated at Jul 24,2024.
- Exam Code: AZ-104
- Exam Name: Microsoft Azure Administrator
- Certification Provider: Microsoft
- Latest update: Jul 24,2024
HOTSPOT
Your company purchases a new Azure subscription.
You create a file named Deploy json as shown in the following exhibit
You connect to the subscription and run the following cmdlet:
New-AzDeployment -Location westus -TemplateFile “deploy.json”"
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
You are planning the move of App1 to Azure.
You create a network security group (NSG).
You need to recommend a solution to provide users with access to App1.
What should you recommend?
- A . Create an outgoing security rule for port 443 from the Internet. Associate the NSG to all the subnets.
- B . Create an incoming security rule for port 443 from the Internet. Associate the NSG to all the subnets.
- C . Create an incoming security rule for port 443 from the Internet. Associate the NSG to the subnet that contains the web servers.
- D . Create an outgoing security rule for port 443 from the Internet. Associate the NSG to the subnet that contains the web servers.
You are planning the move of App1 to Azure.
You create a network security group (NSG).
You need to recommend a solution to provide users with access to App1.
What should you recommend?
- A . Create an outgoing security rule for port 443 from the Internet. Associate the NSG to all the subnets.
- B . Create an incoming security rule for port 443 from the Internet. Associate the NSG to all the subnets.
- C . Create an incoming security rule for port 443 from the Internet. Associate the NSG to the subnet that contains the web servers.
- D . Create an outgoing security rule for port 443 from the Internet. Associate the NSG to the subnet that contains the web servers.
HOTSPOT
You have the App Service plan shown in the following exhibit.
The scale-in settings for the App Service plan are configured as shown in the following exhibit.
The scale out rule is configured with the same duration and cool down tile as the scale in rule.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
Your company has an Azure subscription named Subscription1.
The company also has two on-premises servers named Server1 and Server2 that run Windows Server 2016. Server1 is configured as a DNS server that has a primary DNS zone named adatum.com. Adatum.com contains 1,000 DNS records.
You manage Server1 and Subscription1 from Server2.
Server2 has the following tools installed:
– The DNS Manager console
– Azure PowerShell
– Azure CLI 2.0
You need to move the adatum.com zone to Subscription1. The solution must minimize administrative effort.
What should you use?
- A . Azure PowerShell
- B . Azure CLI
- C . the Azure portal
- D . the DNS Manager console
You have an Azure subscription that contains two virtual machines named VM1 and VM2. You create an Azure load balancer.
You plan to create a load balancing rule that will load balance HTTPS traffic between VM1 and VM2.
Which two additional load balance resources should you create before you can create the load balancing rule? Each correct answer presents part of the solution. MOTL Each correct selection 5 worth one point.
- A . a frontend IP address
- B . a backend pool
- C . a health probe
- D . an inbound NAT rule
- E . a virtual network
HOTSPOT
You need to create storage5. The solution must support the planned changes.
Which type of storage account should you use, and which account should you configure as the destination storage account? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
You have an Azure subscription named Subscription1 that contains a virtual network named VNet1.
VNet1 is in a resource group named RG1.
Subscription1 has a user named User1.
User1 has the following roles;
• Reader
• Security Admin
• Security Reader
You need to ensure that User1 can assign the Reader role for VNet1 to other users.
What should you do?
- A . Assign User1 the Contributor role for VNet1.
- B . Remove User from the Security Reader and Reader roles tot Subscription1.
- C . Assign User1 the Network Contributor role for VNet1.
- D . Assign User1 the User Access Administrator role for VNet1
You plan to deploy three Azure virtual machines named VM1, VM2, and VM3. The virtual machines will host a web app named App1.
You need to ensure that at least two virtual machines are available if a single Azure datacenter becomes unavailable.
What should you deploy?
- A . all three virtual machines in a single Availability Zone
- B . all virtual machines in a single Availability Set
- C . each virtual machine in a separate Availability Zone
- D . each virtual machine in a separate Availability Set
HOTSPOT
You have an Azure subscription that contains the hierarchy shown in the following exhibit.
You create an Azure Policy definition named Policy1.
To which Azure resources can you assign Policy and which Azure resources can you specify as exclusions from Policy1? To answer, select the appropriate options in the answer
NOTE Each correct selection is worth one point.
