Latest [Oct 28, 2021] Real Microsoft AZ-104 Exam Dumps Questions
AZ-104 Dumps To Pass Microsoft Azure Administrator Associate Exam in One Day (Updated 465 Questions)
Knowing the Exam Profile
Microsoft AZ-104 follows the same pattern as all Microsoft’s intermediate-level exams. Therefore, it contains nearly 40-60 questions and the total time duration given to answer them is 180 minutes. While the general passing score of about 70%, a certain number is not disclosed, and it is likely to get changed as per the total number of questions. The tasks are provided in the multiple-choice format but be ready to face the items of other types as well.
The results that you will gain come with lifetime validity. However, the vendor proposes various enhancement options for those who want to pump up their career. Interested candidates can choose to earn the higher-level accreditation of their liking. Also, other than bringing you the Azure Administrator Associate certificate, the exam score will lead to earning some ACE college credits.
When it comes to the cost, candidates will have to pay $165 as an exam fee. One must comprehend the amount is subject to change as per different countries. AZ-104 test can be taken in English, Simplified Chinese, Korean, and Japanese from anywhere in the world via a testing center and online proctored facility.
NEW QUESTION 93
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure subscription that contains the following users in an Azure Active Directory tenant named contoso.onmicrosoft.com:
User1 creates a new Azure Active Directory tenant named external.contoso.onmicrosoft.com.
You need to create new user accounts in external.contoso.onmicrosoft.com.
Solution: You instruct User4 to create the user accounts.
Does that meet the goal?
- A. No
- B. yes
Answer: A
Explanation:
Explanation
Only a global administrator can add users to this tenant.
Reference:
https://docs.microsoft.com/en-us/azure/devops/organizations/accounts/add-users-to-azure-ad
NEW QUESTION 94
Your network contains an on-premises Active Directory forest named contoso.com that contains two domains named contoso.com and east.contoso.com.
The forest contains the users shown in the following table.
You plan to sync east.contoso.com to an Azure Active Directory (Azure AD) tenant by using Azure AD Connect.
You need to select an account for Azure AD Connect to use to connect to the forest.
Which account should you select?
- A. User4
- B. User1
- C. User3
- D. User2
Answer: A
Explanation:
Explanation
It is no longer supported to use an enterprise admin or a domain admin account as the AD DS Connector account.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/reference-connect-accounts-permissions
NEW QUESTION 95
You have an Azure virtual machine named VM1.
The network interface for VM1 is configured as shown in the exhibit. (Click the Exhibit tab.) You deploy a web server on VM1, and then create a secure website that is accessible by using the HTTPS protocol. VM1 is used as a web server only.
You need to ensure that users can connect to the website from the internet.
What should you do?
- A. Modify the protocol of Rule4.
- B. Delete Rule1.
- C. Create a new inbound rule that allows TCP protocol 443 and configure the protocol to have a priority of
501. - D. For Rule5, change the Action to Allow and change the priority to 401.
Answer: D
Explanation:
Explanation
Rule 2 is blocking HTTPS access (port 443) and has a priority of 500.
Changing Rule 5 (ports 50-5000) and giving it a lower priority number will allow access on port 443.
Note: Rules are processed in priority order, with lower numbers processed before higher numbers, because lower numbers have higher priority. Once traffic matches a rule, processing stops.
References:
https://docs.microsoft.com/en-us/azure/virtual-network/security-overview
NEW QUESTION 96
You have an Azure Active Directory (Azure AD) tenant named adatum.com that contains the users shown in the following table.
Adatum.com has the following configurations:
* Users may join devices to Azure AD is set to User1.
* Additional local administrators on Azure AD joined devices is set to None.
You deploy Windows 10 to a computer named Computer1. User1 joins Computer1 to adatum.com.
You need to identify the local Administrator group membership on Computer1.
Which users are members of the local Administrators group?
- A. User1 and User2 only
- B. User2 only
- C. User1, User2, User3, and User4
- D. User1 only
- E. User1, User2, and User3 only
Answer: A
Explanation:
Section: [none]
Explanation:
Users may join devices to Azure AD - This setting enables you to select the users who can register their devices as Azure AD joined devices. The default is All.
Additional local administrators on Azure AD joined devices - You can select the users that are granted local administrator rights on a device. Users added here are added to the Device Administrators role in Azure AD.
Global administrators, here User2, in Azure AD and device owners are granted local administrator rights by default.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/devices/device-management-azure-portal
NEW QUESTION 97
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You deploy an Azure Kubernetes Service (AKS) cluster named AKS1.
You need to deploy a YAML file to AKS1.
Solution: From Azure CLI, you run azcopy.
Does this meet the goal?
- A. No
- B. Yes
Answer: A
Explanation:
Section: [none]
Explanation/Reference:
https://docs.microsoft.com/en-us/azure/aks/kubernetes-walkthrough
NEW QUESTION 98
You need to deploy two Azure web apps named WebApp1 and WebApp2. The web apps have the following requirements:
* WebApp1 must be able to use staging slots
* WebApp2 must be able to access the resources located on an Azure virtual network What is the least costly plan that you can use to deploy each web app? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
References:
https://azure.microsoft.com/en-au/pricing/details/app-service/windows/
https://azure.microsoft.com/en-gb/pricing/details/app-service/plans/
NEW QUESTION 99
Your company has a main office in London that contains 100 client computers.
Three years ago, you migrated to Azure Active Directory (Azure AD).
The company's security policy states that all personal devices and corporate-owned devices must be registered or joined to Azure AD.
A remote user named User1 is unable to join a personal device to Azure AD from a home network.
You verify that other users can join their devices to Azure AD.
You need to ensure that User1 can join the device to Azure AD.
What should you do?
- A. Create a point-to-site VPN from the home network of User1 to Azure.
- B. From the Device settings blade, modify the Maximum number of devices per user setting.
- C. Assign the User administrator role to User1.
- D. From the Device settings blade, modify the Users may join devices to Azure AD setting.
Answer: B
Explanation:
The Maximum number of devices setting enables you to select the maximum number of devices that a user can have in Azure AD. If a user reaches this quota, they will not be able to add additional devices until one or more of the existing devices are removed.
Incorrect Answers:
A: The Users may join devices to Azure AD setting enables you to select the users who can join devices to Azure AD. Options are All, Selected and None. The default is All.
C: Azure AD Join enables users to join their devices to Active Directory from anywhere as long as they have connectivity with the Internet.
References:
https://docs.microsoft.com/en-us/azure/active-directory/devices/device-management-azure-portal
http://techgenix.com/pros-and-cons-azure-ad-join/
NEW QUESTION 100
You have an Azure subscription that contains an Azure virtual machine named VM1. VM1 runs Windows Server 2016 and is part of an availability set.
VM1 has virtual machine-level backup enabled.
VM1 is deleted.
You need to restore VM1 from the backup. VM1 must be part of the availability set.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation
NEW QUESTION 101
You have an Azure virtual machine named VM1.
The network interface for VM1 is configured as shown in the exhibit. (Click the Exhibit tab.) You deploy a web server on VM1, and then created a secure website that is accessible by using the HTTPS protocol. VM1 is used as a web server only.
You need to ensure that users can connect to the website from the internet.
What should you do?
- A. Change the priority of Rule6 to 100.
- B. / For Rule5, change the Action to Allow and change the priority to 401.
- C. Modify the action of Rule1.
- D. For Rule4, change the protocol from UDP to Any.
Answer: B
NEW QUESTION 102
You need to resolve the licensing issue before you attempt to assign the license again.
What should you do?
- A. From the Groups blade, invite the user accounts to a new group.
- B. From the Directory role blade, modify the directory role.
- C. From the Profile blade, modify the usage location.
Answer: A
Explanation:
License cannot be assigned to a user without a usage location specified.
Scenario: Licensing Issue
You attempt to assign a license in Azure to several users and receive the following error message: "Licenses
not assigned. License agreement failed for one user."
You verify that the Azure subscription has the available licenses.
NEW QUESTION 103
You have the App Service plans shown in the following table.
You plan to create the Azure web apps shown in the following table.
You need to identify which App Service plans can be used for the web apps.
What should you identify? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Box 1: ASP1 ASP3
Asp1, ASP3: ASP.NET Core apps can be hosted both on Windows or Linux.
Not ASP2: The region in which your app runs is the region of the App Service plan it's in.
Box 2: ASP1
ASP.NET apps can be hosted on Windows only.
Reference:
https://docs.microsoft.com/en-us/azure/app-service/quickstart-dotnetcore?pivots=platform-linux
https://docs.microsoft.com/en-us/azure/app-service/app-service-plan-manage#
NEW QUESTION 104
You have an Azure subscription that contains an Azure Storage account.
You plan to create an Azure container instance named container1 that will use a Docker image namedImage1. Image1 contains a Microsoft SQL Server instance that requires persistent storage.
You need to configure a storage service for Container1.
What should you use?
- A. Azure Blob storage
- B. Azure Queue storage
- C. Azure Files
- D. Azure Table storage
Answer: C
NEW QUESTION 105
You have an A2ure virtual machine named VMV
The network interface for VM1 is configured as shown in the exhibit(Click the Exhibit tab.)
You deploy a web server on VM1. and then create a secure website that is accessible by using the HTTPS protocol. VM1 is used as a web server only.
You need to ensure that users can connect to the website from the internet.
What should you do?
- A. Modify the protocol of Rule4.
- B. Change the priority of Rute3 to 450
- C. Modify the action of Rule1.
- D. For Rule4. change the protocol from UDP to Any
Answer: B
Explanation:
Explanation
Rule 2 is blocking HTTPS access (port 443) and has a priority of 500.
Changing Rule 3 (ports 60-500) and giving it a lower priority number will allow access on port 443.
Note: Rules are processed in priority order, with lower numbers processed before higher numbers, because lower numbers have higher priority. Once traffic matches a rule, processing stops.
Reference:
https://docs.microsoft.com/en-us/azure/virtual-network/security-overview
NEW QUESTION 106
You have an Azure subscription that contains 10 virtual machines.
You need to ensure that you receive an email message when any virtual machines are powered off, restarted, or deallocated.
What is the minimum number of rules and action groups that you require?
- A. one rule and one action group
- B. three rules and one action group
- C. one rule and three action groups
- D. three rules and three action groups
Answer: B
Explanation:
An action group is a collection of notification preferences defined by the user. Azure Monitor and Service Health alerts are configured to use a specific action group when the alert is triggered. Various alerts may use the same action group or different action groups depending on the user's requirements.
References:
https://docs.microsoft.com/en-us/azure/monitoring-and-diagnostics/monitoring-action-groups
NEW QUESTION 107
You have an Azure subscription.
You create the Azure Storage account shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
Box1: LRS will keep minimum three copies.
Box2: Changing the access tier from hot to cool will reduce the cost. In performance, standard is cheap.
In the Account kind, GPV2 is giving best price. Can be checked yourself using the pricing calculator on below link.
Reference:
https://azure.microsoft.com/en-in/pricing/calculator/?service=storage
NEW QUESTION 108
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure subscription that contains the following users in an Azure Active Directory tenant named contoso.onmicrosoft.com:
User1 creates a new Azure Active Directory tenant named external.contoso.onmicrosoft.com.
You need to create new user accounts in external.contoso.onmicrosoft.com.
Solution: You instruct User4 to create the user accounts.
Does that meet the goal?
- A. No
- B. Yes
Answer: A
Explanation:
Only a global administrator can add users to this tenant.
Reference:
https://docs.microsoft.com/en-us/azure/devops/organizations/accounts/add-users-to-azure-ad
NEW QUESTION 109
You have an Azure subscription named Subscription1. Subscription1 contains a virtual machine named VM1.
You have a computer named Computer1 that runs Windows 10. Computer1 is connected to the Internet.
You add a network interface named Interface1 to VM1 as shown in the exhibit (Click the Exhibit button.)
From Computer1, you attempt to connect to VM1 by using Remote Desktop, but the connection fails.
You need to establish a Remote Desktop connection to VM1.
What should you do first?
- A. Delete the DenyAllInBound inbound port rule.
- B. Delete the DenyAllOutBound outbound port rule.
- C. Start VM1.
- D. Attach a network interface.
Answer: C
Explanation:
Incorrect Answers:
B: The network interface has already been added to VM.
C: The Outbound rules are fine.
D: The inbound rules are fine. Port 3389 is used for Remote Desktop. Note: Rules are processed in priority order, with lower numbers processed before higher numbers, because lower numbers have higher priority. Once traffic matches a rule, processing stops. As a result, any rules that exist with lower priorities (higher numbers) that have the same attributes as rules with higher priorities are not processed.
References: https://docs.microsoft.com/en-us/azure/virtual-network/security-overview
NEW QUESTION 110
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an app named App1 that is installed on two Azure virtual machines named VM1 and VM2.
Connections to App1 are managed by using an Azure Load Balancer.
The effective network security configurations for VM2 are shown in the following exhibit.
You discover that connections to App1 from 131.107.100.50 over TCP port 443 fail.
You verify that the Load Balancer rules are configured correctly.
You need to ensure that connections to App1 can be established successfully from 131.107.100.50 over TCP port 443.
Solution: You delete the BlockAllOther443 inbound security rule.
Does this meet the goal?
- A. No
- B. Yes
Answer: A
Explanation:
Reference:
https://fastreroute.com/azure-network-security-groups-explained/
We have a higher priority rule which allows the traffic.
https://docs.microsoft.com/en-us/azure/virtual-network/network-security-groups-overview
NEW QUESTION 111
You have an Azure subscription that contains the resources shown in the following table.
The Not allowed resource types Azure policy is assigned to RG1 and uses the following parameters:
* Microsoft.Network/virtualNetwork
* Microsoft.Compute/virtualMachines
In RG1, you need to create a new virtual machine named VM2, and then connect VM2 to VNET1.
What should you do first?
- A. Remove Microsoft.Network/virtualNetworks from the policy
- B. Create an Azure Resource Manager template
- C. Remove Microsoft.Compute/virtualMachines from the policy
- D. Add a subnet to VNET1
Answer: C
Explanation:
The Not allowed resource types Azure policy prohibits the deployment of specified resource types. You specify an array of the resource types to block.
Virtual Networks and Virtual Machines are prohibited.
Reference:
https://docs.microsoft.com/en-us/azure/governance/policy/samples/
NEW QUESTION 112
......
AZ-104 Exam Brain Dumps - Study Notes and Theory: https://www.test4engine.com/AZ-104_exam-latest-braindumps.html
100% Guaranteed Results AZ-104 Unlimited 465 Questions: https://drive.google.com/open?id=1nFMjQ9wSKY25vmDSfepaHHhCQEFjzwe3