Home
Microsoft
AZ-104: Microsoft Azure Administrator Exam Dumps

Free Microsoft AZ-104 Exam Dumps

Here you can find all the free questions related with Microsoft Azure Administrator Exam (AZ-104) exam. You can also find on this page links to recently updated premium files with which you can practice for actual Microsoft Azure Administrator Exam . These premium versions are provided as AZ-104 exam practice tests, both as desktop software and browser based application, you can use whatever suits your style. Feel free to try the Microsoft Azure Administrator Exam premium files for free, Good luck with your Microsoft Azure Administrator Exam .

Question No: 191

MultipleChoice

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure subscription that contains the following resources:

* A virtual network that has a subnet named Subnet1

* Two network security groups (NSGs) named NSG-VM1 and NSG-Subnet1

* A virtual machine named VM1 that has the required Windows Server configurations to allow Remote Desktop connections

NSG-Subnet1 has the default inbound security rules only.

NSG-VM1 has the default inbound security rules and the following custom inbound security rule:

* Priority: 100

* Source: Any

* Source port range: *

* Destination: *

* Destination port range: 3389

* Protocol: UDP

* Action: Allow

VM1 connects to Subnet1. NSG1-VM1 is associated to the network interface of VM1. NSG-Subnet1 is associated to Subnet1.

You need to be able to establish Remote Desktop connections from the internet to VM1.

Solution: You add an inbound security rule to NSG-Subnet1 that allows connections from the Internet source to the VirtualNetwork destination for port range 3389 and uses the UDP protocol.

Does this meet the goal?

Options

AYes

BNo

Answer
BExplanation

The default port for RDP is TCP port 3389 not UDP.

NSGs deny all inbound traffic except from virtual network or load balancers. For inbound traffic, Azure processes the rules in a network security group associated to a subnet first, and then the rules in a network security group associated to the network interface.

By default NSG rule to allow traffic through RDP port 3389 is not created automatically during the creation of VM , unless you change the setting during creation.

Here in the solution UDP traffic is allowed at virtual network level which is not tcp/rdp protocol. So this will not work to achieve the goal.

References:

https://docs.microsoft.com/en-us/azure/virtual-machines/troubleshooting/troubleshoot-rdp-connection

https://docs.microsoft.com/en-us/azure/virtual-network/security-overview#default-security-rules

Question No: 192

Hotspot

You have an Azure virtual machine that runs Windows Server 2019 and has the following configurations:

* Name: VM1

* Location: West US

* Connected to: VNET1

* Private IP address: 10.1.0.4

* Public IP address: 52.186.85.63

* DNS suffix in Windows Server: Adatum.com

You create the Azure DNS zones shown in the following table.

You need to identify which DNS zones you can link to VNET1 and the DNS zones to which VM1 can automatically register.

Which zones should you identify? To answer, select the appropriate options in the answer area.

Answer

Explanation

https://docs.microsoft.com/en-us/azure/dns/private-dns-overview

Question No: 193

Hotspot

You plan to create an Azure Storage account in the Azure region of East US 2.

You need to create a storage account that meets the following requirements:

* Replicates synchronously

* Remains available if a single data center in the region fails

How should you configure the storage account? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Answer

Explanation

Box 1: Zone-redundant storage (ZRS)

Zone-redundant storage (ZRS) replicates your data synchronously across three storage clusters in a single region.

LRS would not remain available if a data center in the region fails

GRS and RA GRS use asynchronous replication.

Box 2: StorageV2 (general purpose V2)

ZRS only support GPv2.

References:

https://docs.microsoft.com/en-us/azure/storage/common/storage-redundancy

https://docs.microsoft.com/en-us/azure/storage/common/storage-redundancy-zrs

Question No: 194

Hotspot

You have an Azure subscription that contains a virtual machine scale set. The scale set contains four instances that have the following configurations:

* Operating system: Windows Server 2016

* Size: Standard_D1_v2

You run the get-azvmss cmdlet as shown in the following exhibit:

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

NOTE: Each correct selection is worth one point.

Answer

Explanation

he Get-AzVmssVM cmdlet gets the model view and instance view of a Virtual Machine Scale Set (VMSS) virtual machine.

Box 1: 0

The enableAutomaticUpdates parameter is set to false. To update existing VMs, you must do a manual upgrade of each existing VM.

Box 2: 1

Below is clearly mentioned in the official Website

'The upgrade orchestrator identifies the batch of VM instances to upgrade, with any one batch having a maximum of 20% of the total instance count, subject to a minimum batch size of one virtual machine.'

So, 20% from 4 ~1

https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-upgrade-scale-set

https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-automatic-upgrade

Question No: 195

Hotspot

You have an Azure subscription that contains the virtual machines shown in the following table:

VM1 and VM2 use public IP addresses. From Windows Server 2019 on VM1 and VM2, you allow inbound Remote Desktop connections.

Subnet1 and Subnet2 are in a virtual network named VNET1.

The subscription contains two network security groups (NSGs) named NSG1 and NSG2. NSG1 uses onlythe default rules.

NSG2 uses the default rules and the following custom incoming rule:

* Priority: 100

* Name: Rule1

* Port: 3389

* Protocol: TCP

* Source: Any

* Destination: Any

* Action: Allow

NSG1 is associated to Subnet1. NSG2 is associated to the network interface of VM2.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point

Answer

Explanation

References:

https://docs.microsoft.com/en-us/azure/virtual-machines/troubleshooting/troubleshoot-rdp-connection

Question No: 196

Hotspot

You have an Azure subscription named Subscription1 that contains the following resource group:

* Name: RG1

* Region: West US

* Tag: ''tag1'': ''value1''

You assign an Azure policy named Policy1 to Subscription1 by using the following configurations:

* Exclusions: None

* Policy definition: Append tag and its default value

* Assignment name: Policy1

* Parameters:

- Tag name: Tag2

- Tag value: Value2

After Policy1 is assigned, you create a storage account that has the following configurations:

* Name: storage1

* Location: West US

* Resource group: RG1

* Tags: ''tag3'': ''value3''

You need to identify which tags are assigned to each resource.

What should you identify? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Answer

Explanation

Box 1: 'tag1': 'value1' only

Box 2: 'tag2': 'value2' and 'tag3': 'value3'

Tags applied to the resource group are not inherited by the resources in that resource group.

References:

https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-using-tags

Question No: 197

MultipleChoice

You have an Azure subscription named Subscription1 that has the following providers registered:

* Authorization

* Automation

* Resources

* Compute

* KeyVault

* Network

* Storage

* Billing

* Web

Subscription1 contains an Azure virtual machine named VM1 that has the following con figurations:

* Private IP address: 10.0.0.4 (dynamic)

* Network security group (NSG): NSG1

* Public IP address: None

* Availability set: AVSet

* Subnet: 10.0.0.0/24

* Managed disks: No

* Location: East US

You need to record all the successful and failed connection attempts to VM1.

Which three actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

Options

ARegister the Microsoft.Insights resource provider

BAdd an Azure Network Watcher connection monitor

CRegister the Microsoft.LogAnalytics provider

DEnable Azure Network Watcher in the East US Azure region

ECreate an Azure Storage account

FEnable Azure Network Watcher flow logs

Answer
C, D, EExplanation

NSG flow log data is written to an Azure Storage account. You need to create an Azure Storage account, With an Azure Storage account NSG flow logs can be enabled.

Enable network watcher in the East US region.

NSG flow logging requires the Microsoft.Insights provider.

References:

https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-nsg-flow-logging-portal

Question No: 198

Hotspot

You have an Azure subscription that contains the resources shown in the following table.

VMSS1 is set to VM (virtual machines) orchestration mode.

You need to deploy a new Azure virtual machine named VM1, and then add VM1 to VMSS1.

Which resource group and location should you use to deploy VM1? To answer, select the appropriate options in the

NOTE: Each correct selection is worth one point.

Answer

Question No: 199

MultipleChoice

You have an Azure subscription that contains a virtual network named VNET1. VNET1 contains the subnets shown in the following table.

Each virtual machine uses a static IP address.

You need to create network security groups (NSGs) to meet following requirements:

* Allow web requests from the internet to VM3, VM4, VM5, and VM6.

* Allow all connections between VM1 and VM2.

* Allow Remote Desktop connections to VM1.

* Prevent all other network traffic to VNET1.

What is the minimum number of NSGs you should create?

Options

D12

Answer
AExplanation

Note: A network security group (NSG) contains a list of security rules that allow or deny network traffic to resources connected to Azure Virtual Networks (VNet). NSGs can be associated to subnets, individual VMs (classic), or individual network interfaces (NIC) attached to VMs (Resource Manager).

Each network security group also contains default security rules.

References:

https://docs.microsoft.com/en-us/azure/virtual-network/security-overview#default-security-rules

Question No: 200

Hotspot

You have an Azure subscription named Subscription1 that contains the virtual networks in the following table.

Subscripton1 contains the virtual machines in the following table.

In Subscription1, you create a load balancer that has the following configurations:

* Name: LB1

* SKU: Basic

* Type: Internal

* Subnet: Subnet12

* Virtual network: VNET1

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: each correct selection is worth one point.

Answer

Explanation

Statement 1 :Basic load balancer supports Virtual machine in a single Availability set or virtual machine scale set (VMSS) only . Hence this statement is correct.

Statement 2 :Basic load balancer supports Virtual machine in a single Availability set or virtual scale set only or one standalone VM. VM3 and VM4 are not part of any availability set or VMSS .Hence this statement is incorrect.

Statement 3 :Basic load balancer supports Virtual machine in a single Availability set or virtual scale set only or one standalone VM. VM5 and VM6 are not part of any availability set or VMSS .Hence this statement is incorrect.

References:

https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-overview

Limited Time Offer

25%

Off

Get Premium AZ-104 Questions as Interactive Web-Based Practice Test or PDF