Microsoft AZ-104 Exam Dumps

Note: The question is included in a number of questions that depicts the identicalset-up. However, every question has a distinctive result. Establish if the solutionsatisfies the requirements.Your company has an Azure Active Directory (Azure AD) subscription.You want to implement an Azure AD conditional access policy.The policy must be configured to require members of the Global Administrators group touse Multi-Factor Authentication and an Azure AD-joined device when they connect toAzure AD from untrusted locations.Solution: You access the Azure portal to alter the session control of the Azure ADconditional access policy.Does the solution meet the goal?

A. Yes 
B. No 

Answer: B

Note: The question is included in a number of questions that depicts the identicalset-up. However, every question has a distinctive result. Establish if the solutionsatisfies the requirements.Your company’s Azure solution makes use of Multi-Factor Authentication for when usersare not in the office. The Per Authentication option has been configured as the usagemodel.After the acquisition of a smaller business and the addition of the new staff to Azure ActiveDirectory (Azure AD) obtains a different company and adding the new employees to AzureActive Directory (Azure AD), you are informed that these employees should also make useof Multi-Factor Authentication.To achieve this, the Per Enabled User setting must be set for the usage model.Solution: You reconfigure the existing usage model via the Azure CLI.Does the solution meet the goal?

A. Yes 
B. No 

Answer: B

You have an Azure subscription that contains a storage account named account1.You plan to upload the disk files of a virtual machine to account1 from your on-premisesnetwork. The on-premises network uses a public IP address space of 131.107.1.0/24.You plan to use the disk files to provision an Azure virtual machine named VM1. VM1 willbe attached to a virtual network named VNet1. VNet1 uses an IP address space of192.168.0.0/24. You need to configure account1 to meet the following requirements:Ensure that you can upload the disk files to account1.Ensure that you can attach the disks to VM1.Prevent all other access to account1.Which two actions should you perform? Each correct selection presents part of thesolution.NOTE: Each correct selection is worth one point.

A. From the Service endpoints blade of VNet1, add a service endpoint 
B. From the Networking blade of account1, add the 131.107.1.0/24 IP address range. 
C. From the Networking blade of account1, add VNet1. 
D. From the Networking blade of account1, select Selected networks. 
E. From the Networking blade of account1, select Allow trusted Microsoft services toaccess this storage account 

Answer: B,D

You have an Azure subscription,You have an on-premises virtual machine named VM1, The settings for VM" are shown inthe exhibit. (Click the Exhibit tab.)You need to ensure that you can use the disks attached to VM’ as a template for Azurevirtual machines,What should you modify on VM1?

A. Integration Services 
B. the processor 
C. the hard drive 
D. the network adapters 
E. the memory 

Answer: C

You have two Azure virtual machines named VM1 and VM2. You have two RecoveryServices vaults named RSV1 and RSV2.VM2 is backed up to RSV1.You need to back up VM2 to RSV2.What should you do first?

A. From the RSV1 blade, click Backup items and stop the VM2 backup 
B. From the RSV2 blade, click Backup. From the Backup blade, select the backup for thevirtual machine, and then click Backup 
C. From the VM2 blade, click Disaster recovery, click Replication settings, and thenselect RSV2 as the Recovery Services vault 
D. From the RSV1 blade, click Backup Jobs and export the VM2 job 

Answer: C

You have a registered DNS domain named contoso.com.You create a public Azure DNS zone named contoso.com.You need to ensure that records created in the contoso.com zone are resolvable from theinternet.What should you do?

A. Create NS records in contoso.com. 
B. Modify the SOA record in the DNS domain registrar. 
C. Create the SOA record in contoso.com. 
D. Modify the NS records in the DNS domain registrar. 

Answer: D

Note: This question is part of a series of questions that present the same scenario. Eachquestion in the series contains a unique solution that might meet the stated goals. Somequestion sets might have more than one correct solution, while others might not have acorrect solution.After you answer a question in this section, you will NOT be able to return to it. As a result,these questions will not appear in the review screen.You need to ensure that an Azure Active Directory (Azure AD) user named Admin1 isassigned the required role to enable Traffic Analytics for an Azure subscription.Solution: You assign the Traffic Manager Contributor role at the subscription level toAdmin1.

A. Yes 
B. No

Answer: A

You have an Azure web app named webapp!You have a virtual network named VNET1 and an Azure virtual machine named VMI thathosts a MySQL database. VM1 connects to VNET1,You need to ensure that webapp! can access the data hosted on VMI.What should you do?

A, Deploy an intemal load balancer.
B. Connect webappt to VNET1.
C. Deploy an Azure Application Gateway.
D. Peer VNET1 to another virtual network.

Answer: C

You have an Azure subscription.You are deploying an Azure Kubemetes Service (AKS) cluster that will contain multiplepods. The pods will use kubermetes networking,You need to restrict network traffic between the pods.What should you configure on the AKS cluster?

A. pod security policies 
B. the Calico network policy 
C. an application security group 
D. the Azure network policy 

Answer: D

You have an Azure subscription named Subscription1 that contains an Azure Log Analyticsworkspace named Workspace1.You need to view the error event from a table named Event.Which query should you run in Workspace1?

A. Get-Event Event | where {$_.EventType == "error"} 
B. Event | search "error" 
C. select * from Event where EventType == "error" 
D. Event | where EventType is "error" 

Answer: B

You have a .NET Core application running in Azure App Services. You are expecting ahuge influx of traffic to your application in the coming days. When your applicationexperiences this spike in traffic, you want to detect any anomalies such as request errors orfailed queries immediately. What service can you use to assure that you know about thesetypes of errors related to your .NET application immediately?

A. Application Insights Search 
B. Log analytics workspace 
C. Client-side monitoring 
D. Live Metrics Stream in Application Insights 

Answer: D

You plan to back up an Azure virtual machine named VM1.You discover that the Backup Pre-Check status displays a status of Warning,What is a possible cause of the Warning status?

A. VM1 does not have the latest version of the Azure VM Agent (WaAppAgent.exe)installed. 
B. VM1 has an unmanaged disk 
C. VM1isstopped. 
D. A Recovery Services vault is unavailable. 

Answer: A

You manage a virtual network named VNet1 that is hosted in the West US region. Twovirtual machines named VM1 and VM2, both running Windows Server, are on VNet1. Youneed to monitor traffic between VM1 and VM2 for a period of five hours.As a solution, you propose to create a connection monitor in Azure Network Watcher. Doesthis solution meet the goal?

A. Yes 
B. No 

Answer: A

You have an Azure subscription that contains two virtual machines named VM1 and VM2You create an Azure load balancer.You plan to create a load balancing rule that will load balance HTTPS traffic between VM1and VM2.Which two additional load balance resources should you create before you can create theload balancing rule? Each correct answer presents part of the solutionMOTL Each correct selection 5 worth one point.

A. a frontend IP address 
B. a backend pool 
C. a health probe 
D. an inbound NAT rule 
E. a virtual network 

Answer: B,C

You create an Azure Storage account named contosostorage.You plan to create a file share named data.Users need to map a drive to the data file share from home computers that run Windows10.Which outbound port should be open between the home computers and the data fileshare?

A. 80 
B. 443 
C. 445 
D. 3389 

Answer: C

You have an Azure subscription named Subscription’ that contains an Azure Log Analyticsworkspace named Workspace’,You need to view the error events from a table named Event.Which query should you run in Workspace1?

A. Event | where EventType is “error” 
B. search in (Event) "error" 
C. select * from Event where EventType is “error” 
D. search in (Event) * | where EventType -eq “error” 

Answer: B