Home
Microsoft
AZ-104: Microsoft Azure Administrator Exam Dumps

Free Microsoft AZ-104 Exam Dumps

Here you can find all the free questions related with Microsoft Azure Administrator Exam (AZ-104) exam. You can also find on this page links to recently updated premium files with which you can practice for actual Microsoft Azure Administrator Exam . These premium versions are provided as AZ-104 exam practice tests, both as desktop software and browser based application, you can use whatever suits your style. Feel free to try the Microsoft Azure Administrator Exam premium files for free, Good luck with your Microsoft Azure Administrator Exam .

Question No: 161

MultipleChoice

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an app named App1 that is installed on two Azure virtual machines named VM1 and VM2. Connections to App1 are managed by using an Azure Load Balancer.

The effective network security configurations for VM2 are shown in the following exhibit.

You discover that connections to App1 from 131.107.100.50 over TCP port 443 fail.

You verify that the Load Balancer rules are configured correctly.

Solution: You delete the BlockAllOther443 inbound security rule.

Does this meet the goal?

Options

AYes

BNo

Answer
AExplanation

From the RG1 blade, click Deployments. You see a history of deployment for the resource group.

https://fastreroute.com/azure-network-security-groups-explained/

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure subscription named Subscription1. Subscription1 contains a resource group named RG1. RG1 contains resources that were deployed by using templates.

You need to view the date and time when the resources were created in RG1.

Solution: From the Subscriptions blade, you select the subscription, and then click Programmatic deployment.

Does this meet the goal?

https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/template-tutorial-create-first-template?tabs=azure-powershell

Through activity logs, you can determine:

what operations were taken on the resources in your subscription

who started the operation

when the operation occurred

the status of the operation

the values of other properties that might help you research the operation

On the Azure portal menu, selectMonitor, or search for and selectMonitorfrom any page

2. SelectActivity Log.

3. You see a summary of recent operations. A default set of filters is applied to the operations. Notice the information on the summary includes who started the action and when it happened.

https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/view-activity-logs

Question No: 162

MultipleChoice

You have an on-premises server that contains a folder named D:\Folder1.

You need to copy the contents of D:\Folder1 to the public container in an Azure Storage account named contoso data.

Which command should you run?

D18912E1457D5D1DDCBD40AB3BF70D5D

Options

Ahttps://contosodata.blob.core.windows.net/public

Bazcopy sync D:\folder1 https://contosodata.blob.core.windows.net/public --snapshot

Cazcopy copy D:\folder1 https://contosodata.blob.core.windows.net/public --recursive

Daz storage blob copy start-batch D:\Folder1 https://
contosodata.blob.core.windows.net/public

Answer
CExplanation

The azcopy copy command copies a directory (and all of the files in that directory) to a blob container. The result is a directory in the container by the same name.

Incorrect Answers:

B: The azcopy sync command replicates the source location to the destination location. However, the file is skipped if the last modified time in the destination is more recent.

D: The az storage blob copy start-batch command copies multiple blobs to a blob container.

https://docs.microsoft.com/en-us/azure/storage/common/storage-use-azcopy-blobs

https://docs.microsoft.com/en-us/azure/storage/common/storage-ref-azcopy-copy

Question No: 163

Hotspot

You have an Azure subscription that contains the virtual machines shown in the following table:

VM1 and VM2 use public IP addresses. From Windows Server 2019 on VM1 and VM2, you allow inbound Remote Desktop connections.

Subnet1 and Subnet2 are in a virtual network named VNET1.

The subscription contains two network security groups (NSGs) named NSG1 and NSG2. NSG1 uses only the default rules.

NSG2 uses the default rules and the following custom incoming rule:

* Priority: 100

* Name: Rule1

* Port: 3389

* Protocol: TCP

* Source: Any

* Destination: Any

* Action: Allow

NSG1 is associated to Subnet1. NSG2 is associated to the network interface of VM2.

D18912E1457D5D1DDCBD40AB3BF70D5D

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Answer

Question No: 164

Hotspot

You have a virtual network named VNET1 that contains the subnets shown in the following table:

D18912E1457D5D1DDCBD40AB3BF70D5D

You have two Azure virtual machines that have the network configurations shown in the following table:

For NSG1, you create the inbound security rule shown in the following table:

For NSG2, you create the inbound security rule shown in the following table:

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Answer

Explanation

Box 1: Yes

The inbound security rule for NSG1 allows TCP port 1433 from 10.10.2.0/24 (or Subnet2 where VM2 and VM3

are located) to 10.10.1.0/24 (or Subnet1 where VM1 is located) while the inbound security rule for NSG2

blocks TCP port 1433 from 10.10.2.5 (or VM2) to 10.10.1.5 (or VM1). However, the NSG1 rule has a higher

priority (or lower value) than the NSG2 rule.

Box 2: Yes

No rule explicitly blocks communication from VM1. The default rules, which allow communication, are thus

applied.

Box 3: Yes

No rule explicitly blocks communication between VM2 and VM3 which are both on Subnet2. The default rules,

which allow communication, are thus applied.

https://docs.microsoft.com/en-us/azure/virtual-network/security-overview

Question No: 165

Hotspot

You have peering configured as shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

NOTE: Each correct selection is worth one point.

Box 1: vNET6 only

Peering status to both VNet1 and Vnet2 are disconnected.

Box 2: delete peering1

Peering to Vnet1 is Enabled but disconnected. We need to update or re-create the remote peering to get it back to Initiated state.

Answer

Explanation

https://blog.kloud.com.au/2018/10/19/address-space-maintenance-with-vnet-peering/

https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-manage-peering#requirements-andconstraints

Question No: 166

MultipleChoice

Your company has an Azure subscription named Subscription1.

The company also has two on-premises servers named Server1 and Server2 that run Windows Server 2016. Server1 is configured as a DNS server that has a primary DNS zone named adatum.com. Adatum.com contains 1,000 DNS records.

You manage Server1 and Subscription1 from Server2. Server2 has the following tools installed:

* The DNS Manager console

* Azure PowerShell

* Azure CLI 2.0

You need to move the adatum.com zone to Subscription1. The solution must minimize administrative effort.

What should you use?

Options

AAzure PowerShell

BAzure CLI

Cthe Azure portal

Dthe DNS Manager console

Answer
BExplanation

Azure DNS supports importing and exporting zone files by using the Azure command-line interface (CLI). Zone file import is not currently supported via Azure PowerShell or the Azure portal.

References: https://docs.microsoft.com/en-us/azure/dns/dns-import-export

Question No: 167

Hotspot

You have a pay-as-you-go Azure subscription that contains the virtual machines shown in the following table.

You create the budget shown in the following exhibit.

The AG1 action group contains a user named admin@contoso.com only.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

NOTE: Each correct selection is worth one point.

Box 1: VM1 and VM2 continues to run

Answer

Explanation

When the budget thresholds you've created are exceeded, only notifications are triggered. None of your resources are affected and your consumption isn't stopped. You can use budgets to compare and track spending as you analyze costs.

Box 2: one email notification will be sent each month

Budget alerts for Resource Group RG1, which include VM1, but not VM2.VM1 consumes 20 Euro/day. The 50% ,500 Euro limit, will be reached in 25 days, and an email will be sent.

The 70% and 100% alert conditions will not be reached within a month, and they don't trigger email actions anyway.

References:

https://docs.microsoft.com/en-gb/azure/cost-management-billing/costs/tutorial-acm-create-budgets

https://docs.microsoft.com/en-us/azure/cost-management-billing/costs/cost-mgt-alerts-monitor-usage-spending

Question No: 168

Hotspot

You have an Azure subscription that contains the virtual machines shown in the following table.

VM1 and VM2 use public IP addresses. From Windows Server 2019 on VM1 and VM2, you allow inbound Remote Desktop connections.

Subnet1 and Subnet2 are in a virtual network named VNET1.

The subscription contains two network security groups (NSGs) named NSG1 and NSG2. NSG1 uses only the default rules.

NSG2 uses the default and the following custom incoming rule:

* Priority: 100

* Name: Rule1

* Port: 3389

* Protocol: TCP

* Source: Any

* Destination: Any

* Action: Allow

NSG1 connects to Subnet1. NSG2 connects to the network interface of VM2.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

Answer

Explanation

Box 1: No

The default port for RDP is TCP port 3389. A rule to permit RDP traffic must be created automatically when you create your VM.

Box 2: Yes

NSG2 will allow this.

Box 3: Yes

NSG2 will allow this.

Note on NSG-Subnet1: Azure routes network traffic between all subnets in a virtual network, by default.

References:

https://docs.microsoft.com/en-us/azure/virtual-machines/troubleshooting/troubleshoot-rdp-connection

Question No: 169

Hotspot

You have an Azure subscription named Subcription1 that contains a resource group named RG1.

In RG1. you create an internal load balancer named LB1 and a public load balancer named 162.

You need to ensure that an administrator named Admin 1 can manage LB1 and LB2. The solution must follow the principle of least privilege.

Which role should you assign to Admin1 for each task? To answer, select the appropriate options in the answer area.

NOTE: Caen correct selection is worth one point.

Explanation

Answer

Explanation

Box 1: Network Contributor on RG1

To add to the backend pool, write permission is required on the Resource Group because it writes deployment information. To add a backend pool, you need network contributor role on the LB and on the VMs that will be part of the backend pool.

For this reason the network contributor role must be assigned to the RG where the LB and the VM resides. So the correct answer is Network Contributor on RG1 .

Box 2: Network Contributor on RG1

For Health Probe also, without having access to RG1, no health probe can be added. If only Network Contributor role is assigned to LB then the user would not be able to access the IP addresses of the member pools.

Owner/Contributor can give the user access for everything. So it will not fit into the the principle of least privilege. Hence Owner and contributor role is incorrect choices for the question.

https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles

Question No: 170

Hotspot

You have an Azure virtual machine that runs Windows Server 2019 and has the following configurations:

* Name: VM1

* Location: West US

* Connected to: VNET1

* Private IP address: 10.1.0.4

* Public IP addresses: 52.186.85.63

* DNS suffix in Windows Server: Adatum.com

You create the Azure DNS zones shown in the following table.