AZ-104Microsoft Azure Administratorpopular - Practice Questions - Post 5
1. You have an Azure subscription that contains a Recovery Services vault named Vault1. You need to enable multi-user authorization (MAU) for Vault1. Which resource should you create first?
Page: Page 31
Option A: an administrative unit
Option B: a managed identity
Option C: a resource guard
Option D: a custom Azure role
Answer(s):
Explanation:
SEO Keywords: SEO keywords not available
2. You create an Azure VM named VM1 that runs Windows Server 2019. VM1 is configured as shown in the exhibit. (Click the Exhibit tab.) You need to enable Desired State Configuration for VM1. What should you do first?
Page: Page 31
Option A: Connect to VM1.
Option B: Start VM1.
Option C: Capture a snapshot of VM1.
Option D: Configure a DNS name for VM1.
Answer(s):
Explanation:
SEO Keywords: SEO keywords not available
3. HOTSPOT (Drag and Drop is not supported) You have an Azure subscription that contains the virtual networks shown in the following table. The subnets have the IP address spaces shown in the following table. You plan to create a container app named contapp1 in the East US Azure region. You need to create a container app environment named con-env1 that meets the following requirements: •Uses its own virtual network. •Uses its own subnet. •Is connected to the smallest possible subnet. To which virtual networks can you connect con-env1, and which subnet mask should you use? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
Page: Page 31
Option A: See Explanation section for answer.
Answer(s):
Explanation:
SEO Keywords: SEO keywords not available
4. You have an Azure subscription that contains the virtual networks shown in the following table. All the virtual networks are peered. Each virtual network contains nine virtual machines. You need to configure secure RDP connections to the virtual machines by using Azure Bastion. What is the minimum number of Bastion hosts required?
Page: Page 31
Option A: 1
Option B: 3
Option C: 9
Option D: 10
Answer(s):
Explanation: Not available
SEO Keywords: SEO keywords not available
5. HOTSPOT (Drag and Drop is not supported) You have an Azure subscription that contains the virtual networks shown in the following table. The subscription contains the virtual machines shown in the following table. Each virtual machine contains only a private IP address. You create an Azure bastion for VNet1 as shown in the following exhibit. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.
Page: Page 32
Option A: See Explanation section for answer.
Answer(s):
Explanation:
SEO Keywords: SEO keywords not available
6. HOTSPOT (Drag and Drop is not supported) You have an Azure subscription that contains the virtual networks shown in the following table. The subscription contains the subnets shown in the following table. The subscription contains the storage accounts shown in the following table. You create a service endpoint policy named Policy1 in the South Central US Azure region to allow connectivity to all the storage accounts in the subscription. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.
Page: Page 32
Option A: See Explanation section for answer.
Answer(s):
Explanation:
SEO Keywords: SEO keywords not available
7. You have an Azure subscription that contains a resource group named RG1 and a virtual network named VNet1. You plan to create an Azure container instance named container1. You need to be able to configure DNS name label scope reuse for container1. What should you configure for container1?
Page: Page 32
Option A: the private networking type
Option B: the public networking type
Option C: a new subnet on VNet1
Option D: a confidential SKU
Answer(s):
Explanation:
SEO Keywords: SEO keywords not available
8. HOTSPOT (Drag and Drop is not supported) You have the Azure virtual machines shown in the following table. VNET1, VNET2, and VNET3 are peered. VM4 has a DNS server that is authoritative for a zone named contoso.com and contains the records shown in the following table. The virtual networks are configured to use the DNS servers shown in the following table. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.
Page: Page 32
Option A: See Explanation section for answer.
Answer(s):
Explanation:
SEO Keywords: SEO keywords not available
9. DRAG DROP (Drag and Drop is not supported) You have an Azure subscription that contains a resource group named RG1. You plan to create an Azure Resource Manager (ARM) template to deploy a new virtual machine named VM1. VM1 must support the capture of performance data. You need to specify resource dependencies for the ARM template. In which order should you deploy the resources? To answer, move all resources from the list of resources to the answer area and arrange them in the correct order.
Page: Page 33
Option A: See Explanation section for answer.
Answer(s):
Explanation:
SEO Keywords: SEO keywords not available
10. You have an Azure subscription that contains the virtual networks shown in the following table. The subscription contains the virtual machines shown in the following table. All the virtual machines have only private IP addresses. You deploy an Azure Bastion host named Bastion1 to VNet1. To which virtual machines can you connect through Bastion1?
Page: Page 33
Option A: VM1 only
Option B: VM1 and VM2 only
Option C: VM1 and VM3 only
Option D: VM1, VM2, and VM3
Answer(s):
Explanation:
SEO Keywords: SEO keywords not available
11. You have an Azure subscription. You plan to migrate 50 virtual machines from VMware vSphere to the subscription. You create a Recovery Services vault. What should you do next?
Page: Page 33
Option A: Configure an extended network.
Option B: Create a recovery plan.
Option C: Deploy an Open Virtualization Application (OVA) template to vSphere.
Option D: Configure a virtual network.
Answer(s):
Explanation:
SEO Keywords: SEO keywords not available
12. HOTSPOT (Drag and Drop is not supported) You have an Azure subscription that contains the virtual networks shown in the following table. Each virtual network has 50 connected virtual machines. You need to implement Azure Bastion. The solution must meet the fallowing requirements: •Support host scaling. •Support uploading and downloading files. •Support the virtual machines on both VNet1 and VNet2. •Minimize the number of addresses on the Azure Bastion subnet. How should you configure Azure Bastion? To answer, select the options in the answer area. NOTE: Each correct answer is worth one point.
Page: Page 33
Option A: See Explanation section for answer.
Answer(s):
Explanation:
SEO Keywords: SEO keywords not available
13. You have an Azure subscription that contains the virtual networks shown in the following table. You need to ensure that all the traffic between VNet1 and VNet2 traverses the Microsoft backbone network. What should you configure?
Page: Page 34
Option A: a private endpoint
Option B: peering
Option C: Express Route
Option D: a route table
Answer(s):
Explanation: Not available
SEO Keywords: SEO keywords not available
14. You have the Azure virtual networks shown in the following table. Which virtual networks can you peer with VNet1?
Page: Page 34
Option A: VNet2, VNet3, and VNet4
Option B: VNet2 only
Option C: VNet3 and VNet4 only
Option D: VNet2 and VNet3 only
Answer(s):
Explanation: Not available
SEO Keywords: SEO keywords not available
15. You have an Azure subscription. You are creating a new Azure container instance that will have the following settings: •Container name: cont1 •SKU: Standard •OS type: Windows •Networking type: Public •Memory (GiB): 2.5 •Number of CPU cores: 2 You discover that the Private setting for Networking type is unavailable. You need to ensure that cont1 can be configured to use private networking. Which setting should you change?
Page: Page 34
Option A: Memory (GiB)
Option B: Networking type
Option C: Number of CPU cores
Option D: OS type
Answer(s):
Explanation: Not available
SEO Keywords: SEO keywords not available
16. You have an Azure virtual network named VNet1 that contains the following settings: •IPv4 address space: 172.16.10.0/24 •Subnet name: Subnet1 •Subnet address range: 172.16.10.0/25 What is the maximum number of virtual machines that can connect to Subnet1?
Page: Page 34
Option A: 24
Option B: 25
Option C: 123
Option D: 128
Answer(s):
Explanation:
SEO Keywords: SEO keywords not available
17. You have an Azure subscription that contains the resources shown in the following table. You create a route table named RT1 in the East US Azure region. To which resources can you associate RT1?
Page: Page 35
Option A: VNet1 only
Option B: Subnet1 only
Option C: VNet1 and NIC1 only
Option D: Subnet1 and NIC1 only
Answer(s):
Explanation:
SEO Keywords: SEO keywords not available
18. You have an Azure subscription. You create a routing table named RT1. You need to add a route to RT1 that specifies the next hop IP address. Which next hop type should you select?
Page: Page 35
Option A: Internet
Option B: Virtual network gateway
Option C: Virtual network
Option D: Virtual appliance
Answer(s):
Explanation: Not available
SEO Keywords: SEO keywords not available
19. You have two Azure subscriptions named Sub1 and Sub2 that are linked to separate Microsoft Entra tenants. You have the virtual networks shown in the following table. Which virtual networks can you peer with VNet1?
Page: Page 35
Option A: VNet2 only
Option B: VNet2 and VNet3 only
Option C: VNet2 and VNet4 only
Option D: VNet2, VNet3, and VNet4 only
Answer(s):
Explanation:
SEO Keywords: SEO keywords not available
20. HOTSPOT (Drag and Drop is not supported) You have an Azure subscription that contains the virtual networks shown in the following table. You have the peering options shown in the following exhibit. You need to design a communication strategy for the resources on the virtual networks. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.
Page: Page 35
Option A: See Explanation section for answer.
Answer(s):
Explanation:
SEO Keywords: SEO keywords not available
21. You have an Azure subscription that contains a storage account named storage1. You need to allow access to storage1 from selected networks and your home office. The solution must minimize administrative effort. What should you do first for storage1?
Page: Page 36
Option A: Add a private endpoint.
Option B: Modify the Public network access settings.
Option C: Select Internet routing.
Option D: Modify the Access Control (IAM) settings.
Answer(s):
Explanation: Not available
SEO Keywords: SEO keywords not available
22. You have an Azure subscription that contains the resources shown in the following table. You create a public IP address named IP1. Which two resources can you associate to IP1? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.
Page: Page 36
Option A: VM1
Option B: LB1
Option C: NIC1
Option D: VPN1
Answer(s):
Explanation:
SEO Keywords: SEO keywords not available
23. HOTSPOT (Drag and Drop is not supported) You have an Azure subscription that contains the virtual machines shown in the following table. The subscription contains a storage account named contoso2024 as shown in the following exhibit. For each of the following statements, select Yes if the statement is true. Otherwise, select No.
Page: Page 36
Option A: See Explanation section for answer.
Answer(s):
Explanation:
SEO Keywords: SEO keywords not available
24. You have an Azure subscription that contains two peered virtual networks named VNet1 and VNet2. VNet1 has a VPN gateway that uses static routing, The on-premises network has a VPN connection that uses the VPN gateway of VNet1. You need to configure access for users on the on-premises network to connect to a virtual machine on VNet2. The solution must minimize costs. Which type of connectivity should you use?
Page: Page 36
Option A: Azure Firewall with a private IP address
Option B: service chaining and user-defined routes (UDRs)
Option C: Azure Application Gateway
Option D: ExpressRoute circuits to VNet2
Answer(s):
Explanation:
SEO Keywords: SEO keywords not available
25. You have an Azure subscription that contains two peered virtual networks named VNet1 and VNet2. You have a Network Virtual Appliance (NVA) named NetVA1. You need to ensure that the traffic from VNet1 to VNet2 is inspected by using NetVA1. What should you use?
Page: Page 37
Option A: a local network gateway
Option B: a route table that has custom routes
Option C: a service endpoint
Option D: IP address reservations
Answer(s):
Explanation:
SEO Keywords: SEO keywords not available
26. HOTSPOT (Drag and Drop is not supported) You have an Azure subscription. You plan to deploy the following file named File1.bicep. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.
Page: Page 37
Option A: See Explanation section for answer.
Answer(s):
Explanation:
SEO Keywords: SEO keywords not available
27. HOTSPOT (Drag and Drop is not supported) You have an Azure subscription that contains a resource group named RG1. You have a file named File1.bicep as shown in the File1.bicep exhibit. (Click the File1.bicep tab.) You create a file named File2.bicep as shown in the File2.bicep exhibit. (Click the File2.bicep tab.) You run the following PowerShell commands. New-AzResourceGroupDeployment -ResourceGroupName RG1 -TemplateFile Filel.bicep New-AzResourceGroupDeployment -Whatif -ResourceGroupName RG1 -TemplateFile File2.bicep For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.
Page: Page 37
Option A: See Explanation section for answer.
Answer(s):
Explanation:
SEO Keywords: SEO keywords not available
28. DRAG DROP (Drag and Drop is not supported) You have an Azure subscription that contains a virtual network named VNet1. VNet1 contains virtual machines that have Remote Desktop enabled. Several users plan to work remotely and connect to the virtual machines from a home office. You need to configure connectivity to the virtual machines to support a Point-to-Site (P2S) VPN connection for each user. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Page: Page 37
Option A: See Explanation section for answer.
Answer(s):
Explanation:
SEO Keywords: SEO keywords not available
29. You deploy Azure virtual machines to three Azure regions. Each region contains a virtual network. Each virtual network contains multiple subnets peered in a full mesh topology. Each subnet contains a network security group (NSG) that has defined rules. A user reports that he cannot use port 33000 to connect from a virtual machine in one region to a virtual machine in another region. Which two options can you use to diagnose the issue? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.
Page: Page 38
Option A: effective security rules
Option B: Azure Monitor Network Insights
Option C: IP flow verify
Option D: Azure Virtual Network Manager
Answer(s):
Explanation:
SEO Keywords: SEO keywords not available
30. You have two Azure subscriptions named Sub1 and Sub2 that contain the virtual networks shown in the following table. You need to ensure that VM1 and VM2 can communicate. The solution must minimize costs and administrative effort. What should you use?
Page: Page 38
Option A: a user-defined route (UDR)
Option B: network peering
Option C: Azure Route Server
Option D: an Azure VPN gateway
Answer(s):
Explanation:
SEO Keywords: SEO keywords not available
Post a Comment