AZ-104 Premium Bundle

AZ-104 Premium Bundle

Microsoft Azure Administrator Certification Exam

4.5 
(53595 ratings)
454 QuestionsPractice Tests
454 PDFPrint version
September 28, 2024Last update

Microsoft AZ-104 Free Practice Questions

Want to know Testking AZ-104 Exam practice test features? Want to lear more about Microsoft Microsoft Azure Administrator certification experience? Study Accurate Microsoft AZ-104 answers to Renewal AZ-104 questions at Testking. Gat a success with an absolute guarantee to pass Microsoft AZ-104 (Microsoft Azure Administrator) test on your first attempt.

Microsoft AZ-104 Free Dumps Questions Online, Read and Test Now.

NEW QUESTION 1

Note: This question is part of a series of questions that present the same scenario goals. Some question sets might have more than one correct solution, while others
ion in the series contains a unique solution that might meet the stated not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure web app named Appl. App1 runs in an Azure App Service plan named Plan1. Plan1 is associated to the Free pricing tier.
You discover that App1 stops each day after running continuously for 60 minutes. You need to ensure that App1 can run continuously for the entire day.
Solution: You add a triggered WebJob to App1. Does this meet the goal?

  • A. Yes
  • B. No

Answer: B

Explanation:
You need to change to Basic pricing Tier.
Note: The Free Tier provides 60 CPU minutes / day. This explains why App1 is stops. The Basic tier has no such cap.
References:
https://azure.microsoft.com/en-us/pricing/details/app-service/windows/

NEW QUESTION 2

You have an Azure subscription that contains an Azure Storage account named storage1 and the users shown in the following table.
AZ-104 dumps exhibit
You plan to monitor storage1 and to configure email notifications for the signals shown in the following table.
AZ-104 dumps exhibit
You need to identify the minimum number of alert rules and action groups required for the planned monitoring.
How many alert rules and action groups should you identify? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
AZ-104 dumps exhibit


Solution:
Box 1 : 4
As there are 4 distinct set of resource types (Ingress, Egress, Delete storage account, Restore blob ranges), so you need 4 alert rules. In one alert rule you can't specify different type of resources to monitor. So you need 4 alert rules.
Box 2 : 3
There are 3 distinct set of "Users to notify" as (User 1 and User 3), (User1 only), and (User1, User2, and User3). You can't set the action group based on existing group (Group1 and Group2) as there is no specific group for User1 only. So you need to create 3 action group.
Reference:
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/action-groups

Does this meet the goal?
  • A. Yes
  • B. Not Mastered

Answer: A

NEW QUESTION 3

You have a deployment template named Template1 that is used to deploy 10 Azure web apps.
You need to identify what to deploy before you deploy Template1. The solution must minimize Azure costs. What should you identify?

  • A. 10 App Service plans
  • B. one Azure Traffic Manager
  • C. five Azure Application Gateways
  • D. one App Service plan
  • E. one Azure Application Gateway

Answer: D

Explanation:
You create Azure web apps in an App Service plan. Reference:
https://docs.microsoft.com/en-us/azure/app-service/overview-hosting-plans

NEW QUESTION 4

You have an Azure subscription named Subscription1 that has the following providers registered:
AZ-104 dumps exhibit Authorization
AZ-104 dumps exhibit Automation
AZ-104 dumps exhibit Resources
AZ-104 dumps exhibit Compute
AZ-104 dumps exhibit KeyVault
AZ-104 dumps exhibit Network
AZ-104 dumps exhibit Storage
AZ-104 dumps exhibit Billing
AZ-104 dumps exhibit Web
Subscription1 contains an Azure virtual machine named VM1 that has the following con figurations:
* Private IP address: 10.0.0.4 (dynamic)
* Network security group (NSG): NSG1
* Public IP address: None
* Availability set: AVSet
* Subnet: 10.0.0.0/24
* Managed disks: No
* Location: East US
You need to record all the successful and failed connection attempts to VM1.
Which three actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

  • A. Register the Microsoft.Insights resource provider
  • B. Add an Azure Network Watcher connection monitor
  • C. Register the Microsoft.LogAnalytics provider
  • D. Enable Azure Network Watcher in the East US Azure region
  • E. Create an Azure Storage account
  • F. Enable Azure Network Watcher flow logs

Answer: CDE

Explanation:
NSG flow log data is written to an Azure Storage account. You need to create an Azure Storage account, With an Azure Storage account NSG flow logs can be enabled.
Enable network watcher in the East US region.
NSG flow logging requires the Microsoft.Insights provider. References:
https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-nsg-flow-logging-portal

NEW QUESTION 5

You deploy a load balancer that has the following configurations:
• Name: LB1
• Type internal
• SKU: Standard
• Virtual network VNET1
You need to ensure that you can add VM1 and VM2 to the backend pool of LB1.
Solution: You create a Basic SKU public IP address, associate the address to the network interface of VM1, and then start VM1.
Does this meet the goal?

  • A. Yes
  • B. No

Answer: B

Explanation:
A Backend Pool configured by IP address has the following limitations:
AZ-104 dumps exhibit Standard load balancer only
Reference:
https://docs.microsoft.com/en-us/azure/load-balancer/backend-pool-management

NEW QUESTION 6

You have an Azure subscription that contains the public load balancers shown in the following table.
AZ-104 dumps exhibit
You plan to create six virtual machines and to load balancer requests to the virtual machines. Each load balancer will load balance three virtual machines.
You need to create the virtual machines for the planned solution.
How should you create the virtual machines? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
AZ-104 dumps exhibit


Solution:
Box 1: be created in the same availability set or virtual machine scale set.
The Basic tier is quite restrictive. A load balancer is restricted to a single availability set, virtual machine scale set, or a single machine.
Box 2: be connected to the same virtual network
The Standard tier can span any virtual machine in a single virtual network, including blends of scale sets, availability sets, and machines.
References:
https://www.petri.com/comparing-basic-standard-azure-load-balancers

Does this meet the goal?
  • A. Yes
  • B. Not Mastered

Answer: A

NEW QUESTION 7

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure Active Directory (Azure AD) tenant named Adatum and an Azure Subscription named Subscription1. Adatum contains a group named Developers. Subscription1 contains a resource group named Dev.
You need to provide the Developers group with the ability to create Azure logic apps in the Dev resource group.
Solution: On Subscription1, you assign the Logic App Operator role to the Developers group. Does this meet the goal?

  • A. Yes
  • B. No

Answer: B

Explanation:
The Logic App Operator role only lets you read, enable and disable logic app. With it you can view the logic app and run history, and enable/disable. Cannot edit or update the definition.
You would need the Logic App Contributor role. References:
https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles https://docs.microsoft.com/en-us/azure/logic-apps/logic-apps-securing-a-logic-app

NEW QUESTION 8

You have an Azure subscription that contains an Azure file share.
You have an on-premises server named Server1 that runs Windows Server 2016. You plan to set up Azure File Sync between Server1 and the Azure file share. You need to prepare the subscription for the planned Azure File Sync.
Which two actions should you perform in the Azure subscription? To answer, drag the appropriate actions to the correct targets. Each action may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
AZ-104 dumps exhibit


Solution:
As per the official MS doc:
The recommended steps to onboard on Azure File Sync for the first with zero downtime while preserving full file fidelity and access control list (ACL) are as follows:
* 1. Deploy a Storage Sync Service. --> This needs to be done on Azure .
* 2. Create a sync group. --> This needs to be done on Azure
* 3. Install Azure File Sync agent on the server with the full data set. --> This needs to be done on server1.
* 4. Register that server and create a server endpoint on the share. --> This needs to be done on server1.
* 5. Let sync do the full upload to the Azure file share (cloud endpoint).
* 6. After the initial upload is complete, install Azure File Sync agent on each of the remaining servers.
* 7. Create new file shares on each of the remaining servers.
* 8. Create server endpoints on new file shares with cloud tiering policy, if desired. (This step requires additional storage to be available for the initial setup.)
* 9. Let Azure File Sync agent do a rapid restore of the full namespace without the actual data transfer. After the full namespace sync, sync engine will fill the local disk space based on the cloud tiering policy for the server endpoint.
* 10. Ensure sync completes and test your topology as desired.
* 11. Redirect users and applications to this new share.
* 12. You can optionally delete any duplicate shares on the servers.
First action: Create a Storage Sync Service
The deployment of Azure File Sync starts with placing a Storage Sync Service resource into a resource group of your selected subscription.
AZ-104 dumps exhibit
Second action: Create a sync group
A sync group defines the sync topology for a set of files. Endpoints within a sync group are kept in sync with each other. A sync group must contain one cloud endpoint, which represents an Azure file share and one or more server endpoints. A server endpoint represents a path on a registered server. A server can have server endpoints in multiple sync groups. You can create as many sync groups as you need to appropriately describe your desired sync topology.
AZ-104 dumps exhibit
Third action: Run Server Registration
Registering your Windows Server with a Storage Sync Service establishes a trust relationship between your server (or cluster) and the Storage Sync Service. A server can only be registered to one Storage Sync Service and can sync with other servers and Azure file shares associated with the same Storage Sync Service. )
Reference:
https://docs.microsoft.com/en-us/azure/storage/files/storage-sync-files-deployment-guide?tabs=azure-portal

Does this meet the goal?
  • A. Yes
  • B. Not Mastered

Answer: A

NEW QUESTION 9

You have peering configured as shown in the following exhibit.
AZ-104 dumps exhibit
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
AZ-104 dumps exhibit


Solution:
Box 1: vNET6 only
Peering status to both VNet1 and Vnet2 are disconnected. Box 2: delete peering1
Peering to Vnet1 is Enabled but disconnected. We need to update or re-create the remote peering to get it back to Initiated state.
Reference:
https://blog.kloud.com.au/2018/10/19/address-space-maintenance-with-vnet-peering/ https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-manage-peering#requirements-andconst

Does this meet the goal?
  • A. Yes
  • B. Not Mastered

Answer: A

NEW QUESTION 10

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure subscription named Subscription1. Subscription1 contains a resource group named RG1. RG1 contains resources that were deployed by using templates.
You need to view the date and time when the resources were created in RG1. Solution: From the RG1 blade, you click Automation script.
Does this meet the goal?

  • A. Yes
  • B. No

Answer: B

Explanation:
From the RG1 blade, click Deployments. You see a history of deployment for the resource group. Reference:
https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/template-tutorial-create-first-template Through activity logs, you can determine:
§ what operations were taken on the resources in your subscription
§ who started the operation
§ when the operation occurred
§ the status of the operation
§ the values of other properties that might help you research the operation
* 1. On the Azure portal menu, select Monitor, or search for and select Monitor from any page
* 2. Select Activity Log.
* 3. You see a summary of recent operations. A default set of filters is applied to the operations. Notice the information on the summary includes who started the action and when it happened.
Reference:
https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/view-activity-logs

NEW QUESTION 11

You have an Azure subscription.
You have 100 Azure virtual machines.
You need to quickly identify underutilized virtual machines that can have their service tier changed to a less expensive offering.
Which blade should you use?

  • A. Metrics
  • B. Customer insights
  • C. Monitor
  • D. Advisor

Answer: D

Explanation:
References:
https://docs.microsoft.com/en-us/azure/advisor/advisor-cost-recommendations https://docs.microsoft.com/bs-latn-ba/azure/cost-management/tutorial-acm-opt-recommendations
Advisor helps you optimize and reduce your overall Azure spend by identifying idle and underutilized resources. You can get cost recommendations from the Cost tab on the Advisor dashboard.

NEW QUESTION 12

You have an Azure DNS zone named adatum.com. You need to delegate a subdomain named research.adatum.com to a different DNS server in Azure. What should you do?

  • A. Create an PTR record named research in the adatum.com zone.
  • B. Create an NS record named research in the adatum.com zone.
  • C. Modify the SOA record of adatum.com.
  • D. Create an A record named “.research in the adatum.com zone.

Answer: B

Explanation:
You need to create a name server (NS) record for the zone. References:
https://docs.microsoft.com/en-us/azure/dns/delegate-subdomain

NEW QUESTION 13

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your company registers a domain name of contoso.com.
You create an Azure DNS zone named contoso.com, and then you add an A record to the zone for a host named www that has an IP address of 131.107.1.10.
You discover that Internet hosts are unable to resolve www.contoso.com to the 131.107.1.10 IP address. You need to resolve the name resolution issue.
Solution: You modify the SOA record in the contoso.com zone.

  • A. Yes
  • B. No

Answer: B

Explanation:
Modify the NS record, not the SOA record.
Note: The SOA record stores information about the name of the server that supplied the data for the zone; the administrator of the zone; the current version of the data file; the number of seconds a secondary name server should wait before checking for updates; the number of seconds a secondary name server should wait before retrying a failed zone transfer; the maximum number of seconds that a secondary name server can use data before it must either be refreshed or expire; and a default number of seconds for the time-to live file on resource records.
References:
https://searchnetworking.techtarget.com/definition/start-of-authority-record

NEW QUESTION 14

You have an Azure Kubernetes Service (AKS) cluster named AKS1 and a computer named Computer1 that runs Windows 10. Computer1 that has the Azure CLI installed.
You need to install the kubectl client on Computer1.
Which command should you run? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
AZ-104 dumps exhibit


Solution:
To install kubectl locally, use the az aks install-cli command: az aks install-cli
Reference:
https://docs.microsoft.com/en-us/azure/aks/kubernetes-walkthrough

Does this meet the goal?
  • A. Yes
  • B. Not Mastered

Answer: A

NEW QUESTION 15

You have an on-premises file server named Server1 that runs Windows Server 2016. You have an Azure subscription that contains an Azure file share.
You deploy an Azure File Sync Storage Sync Service, and you create a sync group. You need to synchronize files from Server1 to Azure.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
AZ-104 dumps exhibit


Solution:
Step 1: Install the Azure File Sync agent on Server1
The Azure File Sync agent is a downloadable package that enables Windows Server to be synced with an Azure file share
Step 2: Register Server1.
Register Windows Server with Storage Sync Service
Registering your Windows Server with a Storage Sync Service establishes a trust relationship between your server (or cluster) and the Storage Sync Service.
Step 3: Add a server endpoint
Create a sync group and a cloud endpoint.
A sync group defines the sync topology for a set of files. Endpoints within a sync group are kept in sync with each other. A sync group must contain one cloud endpoint, which represents an Azure file share and one or more server endpoints. A server endpoint represents a path on registered server.
References: https://docs.microsoft.com/en-us/azure/storage/files/storage-sync-files-deployment-guide

Does this meet the goal?
  • A. Yes
  • B. Not Mastered

Answer: A

NEW QUESTION 16

You have an Azure subscription named Subscription1 that contains a virtual network named VNet1. VNet1 is in a resource group named RG1.
Subscription1 has a user named User1. User1 has the following roles;
• Reader
• Security Admin
• Security Reader
You need to ensure that User1 can assign the Reader role for VNet1 to other users. What should you do?

  • A. Assign User1 the Contributor role for VNet1.
  • B. Remove User from the Security Reader and Reader roles tot Subscription1.
  • C. Assign User1 the Network Contributor role for VNet1.
  • D. Assign User1 the User Access Administrator role for VNet1

Answer: D

Explanation:
The User Access Administrator role allows you to manage user access to Azure resources. Reference:
https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#user-access-administrator

NEW QUESTION 17

You have an Azure subscription that contains a virtual network named VNet1. VNet1 uses an IP address space of 10.0.0.0/16 and contains the subnets in the following table.
AZ-104 dumps exhibit
Subnet1 contains a virtual appliance named VM1 that operates as a router. You create a routing table named RT1.
You need to route all inbound traffic to VNet1 through VM1.
How should you configure RT1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
AZ-104 dumps exhibit


Solution:
Box1 : 10.0.0.0/16
Address prefix in networking refer to the destination IP address range. In this scenario, destination is Vnet1 , hence Address prefix will be the address space of Vnet1.
Box 2 : Virtual appliance
Next hop gets the next hop type and IP address of a packet from a specific VM and NIC. Knowing the next hop helps you determine if traffic is being directed to the intended destination, or whether the traffic is being sent nowhere
Next Hop --> VM1 --> Virtual Appliance (You can specify IP address of VM 1 when configuring next hop as virtual appliance)
Box 3 : GatewaySubnet
In the scenario it is asked for all the inbound traffic to Vnet1. Inbound traffic is flowing through SubnetGW. You need to route all inbound traffic from the VPN gateway to VNet1 through VM1.So its traffic from Gateway subnet only.
Reference:
https://docs.microsoft.com/en-us/azure/virtual-network/manage-route-table#create-a-route-table https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-next-hop-overview

Does this meet the goal?
  • A. Yes
  • B. Not Mastered

Answer: A

NEW QUESTION 18

You have an Azure subscription named Subscription1 that contains an Azure Log Analytics workspace named Workspace1.
You need to view the error events from a table named Event. Which query should you run in Workspace1?

  • A. Event | where EventType is "error"
  • B. Event | search "error"
  • C. select * from Event where EventType == "error"
  • D. Get-Event Event | where {$_.EventType -eq "error"}

Answer: B

Explanation:
To search a term in a specific table, add in (table-name) just after the search operator Reference:
https://docs.microsoft.com/en-us/azure/azure-monitor/log-query/get-started-queries

NEW QUESTION 19
......

100% Valid and Newest Version AZ-104 Questions & Answers shared by Dumps-files.com, Get Full Dumps HERE: https://www.dumps-files.com/files/AZ-104/ (New 454 Q&As)


START AZ-104 EXAM