Home
Microsoft
AZ-104: Microsoft Azure Administrator Exam Dumps

Free Microsoft AZ-104 Exam Dumps

Here you can find all the free questions related with Microsoft Azure Administrator Exam (AZ-104) exam. You can also find on this page links to recently updated premium files with which you can practice for actual Microsoft Azure Administrator Exam . These premium versions are provided as AZ-104 exam practice tests, both as desktop software and browser based application, you can use whatever suits your style. Feel free to try the Microsoft Azure Administrator Exam premium files for free, Good luck with your Microsoft Azure Administrator Exam .

Question No: 171

Hotspot

You have Azure subscriptions named Subscription1 and Subscription2.

Subscription1 has following resource groups:

RG1 includes a web app named App1 in the West Europe location.

Subscription2 contains the following resource groups:

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

App1 present in RG1 and in RG1 there is no lock available. So you can move App1 to other resource groups, RG2, RG3, RG4.

Note:

App Service resources can only be moved from the resource group in which they were originally created. If an App Service resource is no longer in its original resource group, move it back to its original resource group.

Answer

Explanation

https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/move-limitations/app-service-move-limitations

Question No: 172

MultipleChoice

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

You need to be able to establish Remote Desktop connections from the internet to VM1.

Solution: You add an inbound security rule to NSG-Subnet1 that allows connections from the Internet source to the VirtualNetwork destination for port range 3389 and uses the UDP protocol.

Does this meet the goal?

Options

AYes

BNo

Answer
BExplanation

The default port for RDP is TCP port 3389 not UDP.

NSGs deny all inbound traffic except from virtual network or load balancers. For inbound traffic, Azure processes the rules in a network security group associated to a subnet first, and then the rules in a network security group associated to the network interface.

By default NSG rule to allow traffic through RDP port 3389 is not created automatically during the creation of VM , unless you change the setting during creation.

Here in the solution UDP traffic is allowed at virtual network level which is not tcp/rdp protocol. So this will not work to achieve the goal.

References:

https://docs.microsoft.com/en-us/azure/virtual-machines/troubleshooting/troubleshoot-rdp-connection

https://docs.microsoft.com/en-us/azure/virtual-network/security-overview#default-security-rules

Question No: 173

Hotspot

You have an Azure subscription that contains the virtual machines shown in the following table:

VM1 and VM2 use public IP addresses. From Windows Server 2019 on VM1 and VM2, you allow inbound Remote Desktop connections.

Subnet1 and Subnet2 are in a virtual network named VNET1.

The subscription contains two network security groups (NSGs) named NSG1 and NSG2. NSG1 uses only the default rules.

NSG2 uses the default rules and the following custom incoming rule:

* Priority: 100

* Name: Rule1

* Port: 3389

* Protocol: TCP

* Source: Any

* Destination: Any

* Action: Allow

NSG1 is associated to Subnet1. NSG2 is associated to the network interface of VM2.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

References:

Answer

Question No: 174

Hotspot

You need to deploy two Azure web apps named WebApp1 and WebApp2. The web apps have the following requirements:

* WebApp1 must be able to use staging slots

* WebApp2 must be able to access the resources located on an Azure virtual network

What is the least costly plan that you can use to deploy each web app? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

References:

Answer

Question No: 175

DragDrop

You have an Azure subscription that contains two virtual networks named VNet1 and VNet2. Virtual machines connect to the virtual networks.

The virtual networks n on-premises server named Server1 th

configured as shown in the following table.

You need to add the address space of 10.33.0.0/16 to VNet1. The solution must ensure that the hosts on VNet1 and VNet2 can communicate.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer

Explanation

Step 1: Remove peering between Vnet1 and VNet2.

You can't add address ranges to, or delete address ranges from a virtual network's address space once a virtual network is peered with another virtual network. To add or remove address ranges, delete the peering, add or remove the address ranges, then re-create the peering.

Step 2: Add the 10.44.0.0/16 address space to VNet1.

Step 3: Recreate peering between VNet1 and VNet2

References:

https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-manage-peering

Question No: 176

MultipleChoice

You have an Azure subscription that contains a storage account named account1.

You plan to upload the disk files of a virtual machine to account1 from your on-premises network. The on-premises network uses a public IP address space of 131.107.1.0/24.

You plan to use the disk files to provision an Azure virtual machine named VM1. VM1 will be attached to a virtual network named VNet1. VNet1 uses an IP address space of 192.168.0.0/24.

You need to configure account1 to meet the following requirements:

* Ensure that you can upload the disk files to account1.

* Ensure that you can attach the disks to VM1.

* Prevent all other access to account1.

Which two actions should you perform? Each correct selection presents part of the solution.

NOTE: Each correct selection is worth one point.

Options

AFrom the Firewalls and virtual networks blade of account1, add the 131.107.1.0/24 IP address range.

BFrom the Firewalls and virtual networks blade of account1, select Selected networks.

CFrom the Firewalls and virtual networks blade of acount1, add VNet1.

DFrom the Firewalls and virtual networks blade of account1, select Allow trusted Microsoft services to access this storage account.

EFrom the Service endpoints blade of VNet1, add a service endpoint.

Answer
A, BExplanation

By default, storage accounts accept connections from clients on any network. To limit access to selected networks, you must first change the default action.

Azure portal

1.Navigate to the storage account you want to secure.

2.Click on the settings menu called Firewalls and virtual networks.

3.To deny access by default, choose to allow access from 'Selected networks'. To allow traffic from all networks, choose to allow access from 'All networks'.

4.Click Save to apply your changes.

Grant access from a Virtual Network

Storage accounts can be configured to allow access only from specific Azure Virtual Networks.

By enabling a Service Endpoint for Azure Storage within the Virtual Network, traffic is ensured an optimal route to the Azure Storage service. The identities of the virtual network and the subnet are also transmitted with each request.

https://docs.microsoft.com/en-us/azure/storage/common/storage-network-security

Question No: 177

MultipleChoice

You have an azure subscription that contain a virtual named VNet1. VNet1. contains four subnets named Gatesway, perimeter, NVA, and production.

The NVA contain two network virtual appliance (NVAs) that will network traffic inspection between the perimeter subnet and the production subnet.

You need to implement an Azure load balancer for the NVAs. The solution must meet the following requirements:

* The NVAs must run in an active-active configuration that uses automatic failover.

* The NVA must load balance traffic to two services on the Production subnet. The services have different IP addresses

Which three actions should you perform? Each correct answer presents parts of the solution.

NOTE: Each correct selection is worth one point.

Options

AAdd two load balancing rules that have HA Ports enabled and Floating IP disabled.

BDeploy a standard load balancer.

CAdd a frontend IP configuration, two backend pools, and a health prob.

DAdd a frontend IP configuration, a backend pool, and a health probe.

EAdd two load balancing rules that have HA Ports and Floating IP enabled.

FDeploy a basic load balancer.

Answer
B, C, EExplanation

A standard load balancer is required for the HA ports.

-Two backend pools are needed as there are two services with different IP addresses.

-Floating IP rule is used where backend ports are reused.

Incorrect Answers:

F: HA Ports are not available for the basic load balancer.

References:

https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-standard-overview

https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-multivip-overview

The following diagram presents a hub-and-spoke virtual network deployment. The spokes force-tunnel their traffic to the hub virtual network and through the NVA, before leaving the trusted space. The NVAs are behind an internal Standard Load Balancer with an HA ports configuration. All traffic can be processed and forwarded accordingly. When configured as show in the following diagram, an HA Ports load-balancing rule additionally provides flow symmetry for ingress and egress traffic.

https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-overview

https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-multivip-overview

https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-ha-ports-overview#a-single-floating-ip-direct-server-return-ha-ports-configuration-on-an-internal-standard-load-balancer

Question No: 178

Hotspot

You have an Azure subscription that contains the resource groups shown in the following table.

RG1 contains the resources shown in the following table.

RG2 contains the resources shown in the following table.

You need to identify which resources you can move from RG1 to RG2, and which resources you can move from RG2 to RG1.

Which resources should you identify? To answer, select the appropriate options in the answer area.

Read only and Delete lock won't prevent you from moving resources in different resource groups. It will prevent you to do the operations in the resource group where the resources are there.

So the correct answer should be

RG1 --> RG2 = IP1, vnet1 and storage1

RG2 --> RG1 = IP2, vnet2 and storage2

Answer

Explanation

https://docs.microsoft.com/en-us/azure/governance/blueprints/concepts/resource-locking

Question No: 179

DragDrop

You have an Azure Linux virtual machine that is protected by Azure Backup.

One week ago, two files were deleted from the virtual machine.

You need to restore the deleted files to an on-premises computer as quickly as possible.

Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Answer

Explanation

To restore files or folders from the recovery point, go to the virtual machine and choose the desired recovery point.

Step 0. In the virtual machine's menu, click Backup to open the Backup dashboard.

Step 1. In the Backup dashboard menu, click File Recovery.

Step 2. From the Select recovery point drop-down menu, select the recovery point that holds the files you want. By default, the latest recovery point is already selected.

Step 3: To download the software used to copy files from the recovery point, click Download Executable (for Windows Azure VM) or Download Script (for Linux Azure VM, a python script is generated).

Step 4: Copy the files by using AzCopy

AzCopy is a command-line utility designed for copying data to/from Microsoft Azure Blob, File, and Table storage, using simple commands designed for optimal performance. You can copy data between a file system and a storage account, or between storage accounts.

References:

https://docs.microsoft.com/en-us/azure/backup/backup-azure-restore-files-from-vm

https://docs.microsoft.com/en-us/azure/storage/common/storage-use-azcopy

Question No: 180

MultipleChoice

You create an App Service plan named App1 and an Azure web app named webapp1. You discover that the option to create a staging slot is unavailable. You need to create a staging slot for App1.

What should you do first?

Options

AFrom webapp1, modify the Application settings.

BFrom webapp1, add a custom domain.

CFrom App1, scale up the App Service plan.

DFrom App1, scale out the App Service plan.

Answer
CExplanation

Scale up:Get more CPU, memory, disk space, and extra features like dedicated virtual machines (VMs), custom domains and certificates, staging slots, autoscaling, and more.

You scale up by changing the pricing tier of the App Service plan that your app belongs to.

https://docs.microsoft.com/en-us/azure/app-service/manage-scale-up

Limited Time Offer

25%

Off

Get Premium AZ-104 Questions as Interactive Web-Based Practice Test or PDF