Home
Microsoft
AZ-104: Microsoft Azure Administrator Exam Dumps

Free Microsoft AZ-104 Exam Dumps

Here you can find all the free questions related with Microsoft Azure Administrator Exam (AZ-104) exam. You can also find on this page links to recently updated premium files with which you can practice for actual Microsoft Azure Administrator Exam . These premium versions are provided as AZ-104 exam practice tests, both as desktop software and browser based application, you can use whatever suits your style. Feel free to try the Microsoft Azure Administrator Exam premium files for free, Good luck with your Microsoft Azure Administrator Exam .

Question No: 181

Hotspot

You have an Azure Migrate project that has the following assessment properties:

* Target location: East US

* Storage redundancy: Locally redundant

* Comfort factor: 2.0

* Performance history: 1 month

* Percentile utilization: 95th

* Pricing tier: Standard

* Offer: Pay as you go

You discover the following two virtual machines:

* A virtual machine named VM1 that runs Windows Server 2016 and has 10 CPU cores at 20 percent utilization

* A virtual machine named VM2 that runs Windows Server 2012 and has four CPU cores at 50 percent utilization

How many CPU cores will Azure Migrate recommend for each virtual machine? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Answer

Explanation

The equation is: 'core usage x comfort factor'. The comfort factor is 2.0.

So VM 1 is 10 cores at 20% utilization which equals 2 cores. Multiply that the comfort factor and you get 4 cores.

VM 2 is 4 cores at 50% utilization which equals 2 cores. Multiply that the comfort factor and you get 4 cores.

Question No: 182

Hotspot

You have an Azure subscription that contains an Azure Directory (Azure AD) tenant named contoso.com. The tenant is synced to the on-premises Active Directory domain. The domain contains the users shown in the following table.

You enable self-service password reset (SSPR) for all users and configure SSPR to have the following authentication methods:

* Number of methods required to reset: 2

* Methods available to users: Mobile phone, Security questions

* Number of questions required to register: 3

* Number of questions required to reset: 3

You select the following security questions:

* What is your favorite food?

* In what city was your first job?

* What was the name of your first pet?

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Answer

Explanation

Box 1: No

Administrator accounts are special accounts with elevated permissions. To secure them, the following restrictions apply to changing passwords of administrators:

On-premises enterprise administrators or domain administrators cannot reset their password through Self-service password reset (SSPR). They can only change their password in their on-premises environment. Thus, we recommend not syncing on-prem AD admin accounts to Azure AD.

An administrator cannot use secret Questions & Answers as a method to reset password.

Box 2: Yes

Self-service password reset (SSPR) is an Azure Active Directory feature that enables employees to reset their passwords without needing to contact IT staff.

Box 3: Yes

References:

https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-sspr-deployment

Question No: 183

MultipleChoice

You have an Azure subscription that contains the following resources:

* 100 Azure virtual machines

* 20 Azure SQL databases

* 50 Azure file shares

You need to create a daily backup of all the resources by using Azure Backup.

What is the minimum number of backup policies that you must create?

Options

D150

E170

Answer
CExplanation

There is a limit of 100 VMs that can be associated to the same backup policy from portal. We recommend that for more than 100 VMs, create multiple backup policies with same schedule or different schedule.

One policy for VMS, one for SQL databases, and one for the file shares.

References:

https://docs.microsoft.com/en-us/azure/backup/backup-azure-vm-backup-faq

Question No: 184

MultipleChoice

You have an Azure virtual machine named VM1.

You use Azure Backup to create a backup of VM1 named Backup1.

After creating Backup1, you perform the following changes to VM1:

* Modify the size of VM1.

* Copy a file named Budget.xls to a folder named Data.

* Reset the password for the built-in administrator account.

* Add a data disk to VM1.

An administrator uses the Replace existing option to restore VM1 from Backup1.

You need to ensure that all the changes to VM1 are restored.

Which change should you perform again?

Options

AModify the size of VM1.

BAdd a data disk.

CReset the password for the built-in administrator account.

DCopy Budget.xls to Data.

Answer
DExplanation

The scenario mentioned in the question, we are using the replace option. So in this case we would lose the existing data written to the disk after the backup was taken. The file was copied to the disk after the backup was taken. Hence, we would need to copy the file once again.

References:

https://docs.microsoft.com/en-us/azure/backup/backup-azure-arm-restore-vms#replace-existing-disks

Question No: 185

MultipleChoice

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure subscription that contains the following resources:

* A virtual network that has a subnet named Subnet1

* Two network security groups (NSGs) named NSG-VM1 and NSG-Subnet1

* A virtual machine named VM1 that has the required Windows Server configurations to allow Remote Desktop connections

NSG-Subnet1 has the default inbound security rules only.

NSG-VM1 has the default inbound security rules and the following custom inbound security rule:

* Priority: 100

* Source: Any

* Source port range: *

* Destination: *

* Destination port range: 3389

* Protocol: UDP

* Action: Allow

VM1 connects to Subnet1. NSG1-VM1 is associated to the network interface of VM1. NSG-Subnet1 is associated to Subnet1.

You need to be able to establish Remote Desktop connections from the internet to VM1.

Solution: You modify the custom rule for NSG-VM1 to use the internet as a source and TCP as a protocol.

Does this meet the goal?

Options

AYes

BNo

Answer
BExplanation

NSGs deny all inbound traffic except from virtual network or load balancers. For inbound traffic, Azure processes the rules in a network security group associated to a subnet first, and then the rules in a network security group associated to the network interface.

By default NSG rule to allow traffic through RDP port 3389 is not created automatically during the creation of VM , unless you change the setting during creation. Subnets usually do not have any NSG associated unless you go out of the way to do so, which this scenario does. when you create that extra NSG, it won't have an RDP rule by default, thus blocking inbound connections.

Request first goes to NSG -subnet1 and as there is no allow rule for RDP so it will block the request by default.Since the Subnet NSG (the one with the default rules) is evaluated first, it blocks the inbound RDP connection.

References:

https://docs.microsoft.com/en-us/azure/virtual-machines/troubleshooting/troubleshoot-rdp-connection

https://docs.microsoft.com/en-us/azure/virtual-network/security-overview#default-security-rules

Question No: 186

MultipleChoice

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure subscription that contains the following resources:

* A virtual network that has a subnet named Subnet1

* Two network security groups (NSGs) named NSG-VM1 and NSG-Subnet1

* A virtual machine named VM1 that has the required Windows Server configurations to allow Remote Desktop connections

NSG-Subnet1 has the default inbound security rules only.

NSG-VM1 has the default inbound security rules and the following custom inbound security rule:

* Priority: 100

* Source: Any

* Source port range: *

* Destination: *

* Destination port range: 3389

* Protocol: UDP

* Action: Allow

VM1 connects to Subnet1. NSG1-VM1 is associated to the network interface of VM1. NSG-Subnet1 is associated to Subnet1.

You need to be able to establish Remote Desktop connections from the internet to VM1.

Solution: You add an inbound security rule to NSG-Subnet1 that allows connections from the Any source to the VirtualNetwork destination for port range 3389 and uses the TCP protocol. You remove NSG-VM1 from the network interface of VM1.

Does this meet the goal?

Options

AYes

BNo

Answer
BExplanation

The default port for RDP is TCP port 3389. A rule to permit RDP traffic must be created automatically when you create your VM.

Note on NSG-Subnet1: Azure routes network traffic between all subnets in a virtual network, by default.

References:

https://docs.microsoft.com/en-us/azure/virtual-machines/troubleshooting/troubleshoot-rdp-connection

Question No: 187

MultipleChoice

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure subscription that contains the following resources:

* A virtual network that has a subnet named Subnet1

* Two network security groups (NSGs) named NSG-VM1 and NSG-Subnet1

* A virtual machine named VM1 that has the required Windows Server configurations to allow Remote Desktop connections

NSG-Subnet1 has the default inbound security rules only.

NSG-VM1 has the default inbound security rules and the following custom inbound security rule:

* Priority: 100

* Source: Any

* Source port range: *

* Destination: *

* Destination port range: 3389

* Protocol: UDP

* Action: Allow

VM1 connects to Subnet1. NSG1-VM1 is associated to the network interface of VM1. NSG-Subnet1 is associated to Subnet1.

You need to be able to establish Remote Desktop connections from the internet to VM1.

Solution: You add an inbound security rule to NSG-Subnet1 and NSG-VM1 that allows connections from the internet source to the VirtualNetwork destination for port range 3389 and uses the TCP protocol.

Does this meet the goal?

Options

AYes

BNo

Answer
AExplanation

The default port for RDP is TCP port 3389. A rule to permit RDP traffic must be created automatically when you create your VM.

Note on NSG-Subnet1: Azure routes network traffic between all subnets in a virtual network, by default.

References:

https://docs.microsoft.com/en-us/azure/virtual-machines/troubleshooting/troubleshoot-rdp-connection

Question No: 188

Hotspot

You have an Azure subscription that contains the virtual machines shown in the following table.

VM1 and VM2 use public IP addresses. From Windows Server 2019 on VM1 and VM2, you allow inbound Remote Desktop connections.

Subnet1 and Subnet2 are in a virtual network named VNET1.

The subscription contains two network security groups (NSGs) named NSG1 and NSG2. NSG1 uses only the default rules.

NSG2 uses the default and the following custom incoming rule:

* Priority: 100

* Name: Rule1

* Port: 3389

* Protocol: TCP

* Source: Any

* Destination: Any

* Action: Allow

NSG1 connects to Subnet1. NSG2 connects to the network interface of VM2.

For each of the following statements, select Yes if the statement is true. Otherwise, select No..

Answer

Explanation

Box 1: No

The default port for RDP is TCP port 3389. A rule to permit RDP traffic must be created automatically when you create your VM.

Box 2: Yes

NSG2 will allow this.

Box 3: Yes

NSG2 will allow this.

Note on NSG-Subnet1: Azure routes network traffic between all subnets in a virtual network, by default.

References:

https://docs.microsoft.com/en-us/azure/virtual-machines/troubleshooting/troubleshoot-rdp-connection

Question No: 189

Hotspot

You manage two Azure subscriptions named Subscription1 and Subscription2.

Subscription1 has following virtual networks:

The virtual networks contain the following subnets:

Subscription2 contains the following virtual network:

* Name: VNETA

* Address space: 10.10.128.0/17

* Location: Canada Central

VNETA contains the following subnets:

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Answer

Explanation

Box 1: Yes

With VNet-to-VNet you can connect Virtual Networks in Azure across Different regions.

Box 2: Yes

Azure supports the following types of peering:

Virtual network peering: Connect virtual networks within the same Azure region.

Global virtual network peering: Connecting virtual networks across Azure regions.

Box 3: No

The virtual networks you peer must have non-overlapping IP address spaces.

References:

https://azure.microsoft.com/en-us/blog/vnet-to-vnet-connecting-virtual-networks-in-azure-across-different-regions/

https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-manage-peering#requirements-and-constraints

Question No: 190

Hotspot

You have an Azure virtual machine mat runs Windows Server 2019 and has the following configurations:

* Name:VM1

* Location: Welt US

* Connected to: VNfT1

* Private IP address: 10.1.0.4

* Public IP address: 52 18685.63

* DNS suffix m Windows Server.Adatum.com

You create the Azure DNS zones shown in the following table.

Answer

Limited Time Offer

25%

Off

Get Premium AZ-104 Questions as Interactive Web-Based Practice Test or PDF