Microsoft AZ-104 Dumps Questions Answers

Microsoft AZ-104 Dumps

Dumps4download providing 100% reliable Exam dumps that are verified by experts panel. Our Dumps4download AZ-104 study material are totally unique and exam questions are valid all over the world. By using our AZ-104 dumps we assure you that you will pass your exam on first attempt. You can easily score more than 97%.

100% exam passing Guarantee on your purchased exams.

100% money back guarantee if you will not clear your exam.

Microsoft AZ-104 Practice Test Helps You Turn Dreams To Reality!

IT Professionals from every sector are looking up certifications to boost their careers. Microsoft being the leader certification provider earns the most demand in the industry.

The Microsoft Certification is your short-cut to an ever-growing success. In the process, Dumps4download is your strongest coordinator, providing you with the best AZ-104 Dumps PDF as well as Online Test Engine. Let’s steer your career to a more stable future with interactive and effective AZ-104 Practice Exam Dumps.

Many of our customers are already excelling in their careers after achieving their goals with our help. You can too be a part of that specialized bunch with a little push in the right direction. Let us help you tread the heights of success.

Apply for the AZ-104 Exam right away so you can get certified by using our Microsoft Dumps.

Bulk Exams Package

Dumps4download Leads You To A 100% Success in First Attempt!

Our AZ-104 Dumps PDF is intended to meet the requirements of the most suitable method for exam preparation. We especially hired a team of experts to make sure you get the latest and compliant AZ-104 Practice Test Questions Answers. These questions are been selected according to the most relevance as well as the highest possibility of appearing in the exam. So, you can be sure of your success in the first attempt.

Interactive & Effective AZ-104 Dumps PDF + Online Test Engine

Aside from our Microsoft AZ-104 Dumps PDF, we invest in your best practice through Online Test Engine. They are designed to reflect the actual exam format covering each topic of your exam. Also, with our interactive interface focusing on the exam preparation is easier than ever. With an easy-to-understand, interactive and effective study material assisting you there is nothing that could go wrong. We are 100% sure that our AZ-104 Questions Answers Practice Exam is the best choice you can make to pass the exam with top score.

How Dumps4download Creates Better Opportunities for You!

Dumps4download knows how hard it is for you to beat this tough Microsoft Exam terms and concepts. That is why to ease your preparation we offer the best possible training tactics we know best. Online Test Engine provides you an exam-like environment and PDF helps you take your study guide wherever you are. Best of all, you can download AZ-104 Dumps PDF easily or better print it. For the purpose of getting concepts across as easily as possible, we have used simple language. Adding explanations at the end of the AZ-104 Questions and Answers Practice Test we ensure nothing slips your grasp.

The exam stimulation is 100 times better than any other test material you would encounter. Besides, if you are troubled with anything concerning Microsoft Azure Administrator Exam or the AZ-104 Dumps PDF, our 24/7 active team is quick to respond. So, leave us a message and your problem will be solved in a few minutes.

Get an Absolutely Free Demo Today!

Dumps4download offers an absolutely free demo version to test the product with sample features before actually buying it. This shows our concern for your best experience. Once you are thoroughly satisfied with the demo you can get the Microsoft Azure Administrator Practice Test Questions instantly.

24/7 Online Support – Anytime, Anywhere

Have a question? You can contact us anytime, anywhere. Our 24/7 Online Support makes sure you have absolutely no problem accessing or using Microsoft Azure Administrator Practice Exam Dumps. What’s more, Dumps4download is mobile compatible so you can access the site without having to log in to your Laptop or PC.

Features to use Dumps4download AZ-104 Dumps:

• Thousands of satisfied customers.
• Good grades are 100% guaranteed.
• 100% verified by Experts panel.
• Up to date exam data.
• Dumps4download data is 100% trustworthy.
• Passing ratio more than 99%
• 100% money back guarantee.

Microsoft AZ-104 Frequently Asked Questions

Microsoft AZ-104 Sample Questions

Question # 1

You need to recommend an identify solution that meets the technical requirements.What should you recommend?

A. federated single-on (SSO) and Active Directory Federation Services (AD FS)
B. password hash synchronization and single sign-on (SSO)
C. cloud-only user accounts 
D. Pass-through Authentication and single sign-on (SSO)

Show Answer

---

Question # 2

You need to prepare the environment to meet the authentication requirements.Which two actions should you perform? Each correct answer presents part of the solution.NOTEEach correct selection is worth one point.

A. Azure Active Directory (AD) Identity Protection and an Azure policy
B. a Recovery Services vault and a backup policy
C.an Azure Key Vault and an access policy
D. an Azure Storage account and an access policy

Show Answer

---

Question # 3

Which blade should you instruct the finance department auditors to use? 

A. Partner information
B. Overview
C. Payment methods
D. Invoices

Show Answer

---

Question # 4

You need to ensure that VM1 can communicate with VM4. The solution must minimize administrative effort. What should you do? 

A. Create a user-defined route from VNET1 to VNET3.
B. Assign VM4 an IP address of 10.0.1.5/24.
C. Establish peering between VNET1 and VNET3.
D. Create an NSG and associate the NSG to VMI and VM4.

Show Answer

---

Question # 5

You need to configure an Azure web app named contoso.azurewebsites.net to host www.contoso.com.What should you do first?

A. Create a CNAME record named asuid that contains the domain verification ID.    
B. Create A records named www.contoso.com and asuid.contoso.com.   
C. Create a TXT record named asuid that contains the domain verification ID.   
D. Create a TXT record named www.contoso.com that has a value of contoso.azurewebsites.net.   

Show Answer

---

Question # 6

 You plan to deploy several Azure virtual machines that will run Windows Server 2022 in a virtual machinescale set by using an Azure Resource Manager template.You need to ensure that NGINX is available on all the virtual machines after they are deployed.What should you use?

A. Azure Application Insights   
B.  Azure Custom Script Extension   
C. the Publish-ArVMDscConfiguration cmdlet   
D. the New-AzConfigurationAssignment Cmdlet   

Show Answer

---

Question # 7

You have an app named App1 that runs on two Azure virtual machines named VM1 and VM2.You plan to implement an Azure Availability Set for Appl. The solution must ensure that App1 is available during planned maintenance of the hardware hosting VM1 and VM2.What should you include in the Availability Set?

A. one update domain   
B. two update domains   
C. one fault domain   
D. two fault domains   

Show Answer

---

Question # 8

You have an Azure subscription that contains a resource group named RG1.You plan to create a storage account named storage1.You have a Bicep file named File1.You need to modify File1 so that it can be used to automate the deployment of storage1 to RG1.Which property should you modify?

A. scope  
B. kind  
C. sku  
D. location  

Show Answer

---

Question # 9

You have an Azure web app named webapp1.You have a virtual network named VNET1 and an Azure virtual machine named VM1 that hosts a MySQLdatabase. VM1 connects to VNET1.You need to ensure that webapp1 can access the data hosted on VM1.What should you do?

A. Connect webapp1 to VNET1.   
B. Deploy an internal load balancer.   
C. Deploy an Azure Application Gateway,   
D. Peer VNET1 to another virtual network.   

Show Answer

---

Question # 10

You have a Microsoft Entra tenant that contains 5,000 user accounts.You create a new user account named AdminUser1.You need to assign the User Administrator administrative role to AdminUser1.What should you do from the user account properties?

A. From the Groups blade, invite the user account to a new group.
B. From the Directory role blade, modify the directory role.
C. From the Licenses blade, assign a new license.

Show Answer

---

Question # 11

You have an Azure subscription that contains a virtual network named VNet1. VNet1 contains four subnetsnamed Gateway, Perimeter. NVA and Production.The NVA subnet contains two network virtual appliances (NVAs) that will perform network traffic inspectionbetween the Perimeter subnet and the Production subnet.You need to implement an Azure load balancer for the NVAs. The solution must meet the followingrequirements:• The NVAs must run in an active-active configuration that uses automatic failover.• The toad balancer must load balance traffic to two services on the Production subnet. The services have different IP addresses. Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point

A. Add two load balancing rules that have HA Ports enabled and Floating IP disabled.   
B. Deploy a basic load balancer.   
C. Add a frontend IP configuration, a backend pool, and a health probe.   
D. Add two load balancing rules that have HA Ports and Floating IP enabled.   
E. Deploy a standard load balancer.   
F. Add a frontend IP configuration, two backend pools, and a health probe.   

Show Answer

---

Question # 12

Note: This question is part of a series of questions that present the same scenario. Each question in the seriescontains a unique solution that might meet the stated goals. Some question sets might have more than onecorrect solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questionswill not appear in the review screen.You have an Azure virtual machine named VM1. VM1 was deployed by using a custom Azure ResourceManager template named ARM1.json.You receive a notification that VM1 will be affected by maintenance.You need to move VM1 to a different host immediately.Solution: From the Overview blade, you move the virtual machine to a different subscription.Does this meet the goal?

A. Yes
B. No 

Show Answer

---

Question # 13

You have an Azure Active Directory (Azure AD) tenant named contoso.com.You have a CSV file that contains the names and email addresses of 500 external users.You need to create a quest user account in contoso.com for each of the 500 external users.Solution: from Azure AD in the Azure portal, you use the Bulk create user operation.Does this meet the goal?

A. Yes
B. No

Show Answer

---

Question # 14

You create an App Service plan named plan1 and an Azure web app named webapp1. You discover that theoption to create a staging slot is unavailable. You need to create a staging slot for plan1.What should you do first?

A. From webapp1, modify the Application settings.
B. From webapp1, add a custom domain.
C. From plan1, scale up the App Service plan.
D. From plan1, scale out the App Service plan.

Show Answer

---

Question # 15

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, thesequestions will not appear in the review screen.You manage a virtual network named VNet1 that is hosted in the West US Azure region.VNet1 hosts two virtual machines named VM1 and VM2 that run Windows Server.You need to inspect all the network traffic from VM1 to VM2 for a period of three hours.Solution: From Performance Monitor, you create a Data Collector Set (DCS).Does this meet the goal?

A. Yes  
B. No  

Show Answer

---

Question # 16

You have an Azure subscription That contains a Recovery Services vault named Vault1.You need to enable multi-user authorization (MAU) for Vaultl. Which resource should you create first?

A. a managed identity   
B. a resource guard   
C. an administrative unit   
D. a custom Azure role   

Show Answer

---

Question # 17

You have two subscriptions named Subscription1 and Subscription2. Each subscription is associated to adifferent Azure AD tenant.Subscription1 contains a virtual network named VNet1. VNet1 contains an Azure virtual machine named VM1and has an IP address space of 10.0.0.0/16.Subscription2 contains a virtual network named VNet2. VNet2 contains an Azure virtual machine named VM2and has an IP address space of 10.10.0.0/24. You need to connect VNet1 to VNet2. What should you do first? 

A. Move VM1 to Subscription2.   
B. Modify the IP address space of VNet2.   
C. Provision virtual network gateways.   
D. Move VNet1 to Subscription2.   

Show Answer

---

Question # 18

You have an Azure subscription that contains 20 virtual machines, a network security group (NSG) named NSG1, and two virtual networks named VNET1 and VNET2 that are peered. You plan to deploy an Azure Bastion Basic SKU host named Bastion1 to VNET1. You need to configure NSG1 to allow inbound access from the internet to Bastion1. Which port should you configure for the inbound security rule?

A. 22  
B. 443  
C. 3389  
D. 8080  

Show Answer

---

Question # 19

You have an Azure subscription.Users access the resources in the subscription from either home or from customer sites. From home, usersmust establish a point-to-site VPN to access the Azure resources. The users on the customer sites access theAzure resources by using site-to-site VPNs.You have a line-of-business app named App1 that runs on several Azure virtual machine. The virtual machinesrun Windows Server 2016.You need to ensure that the connections to App1 are spread across all the virtual machines.What are two possible Azure services that you can use? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point.

A. a public load balancer   
B. Traffic Manager   
C. an Azure Content Delivery Network (CDN)   
D. an internal load balancer   
E. an Azure Application Gateway   

Show Answer

---

Question # 20

You have an Azure subscription that contains a user named User1.You need to ensure that User1 can deploy virtual machines and manage virtual networks. The solution mustuse the principle of least privilege.Which role-based access control (RBAC) role should you assign to User1?

A. Owner  
B. Virtual Machine Administrator Login   
C. Contributor  
D. Virtual Machine Contributor   

Show Answer

---

Question # 21

You have an Azure subscription.You have 100 Azure virtual machines.You need to quickly identify underutilized virtual machines that can have their service tier changed to a lessexpensive offering.Which blade should you use?

A. Metrics  
B. Customer insights   
C. Monitor  
D. Advisor  

Show Answer

---

Question # 22

You have an Azure subscription that contains two virtual machines named VM1 and VM2You create an Azure load balancer.You plan to create a load balancing rule that will load balance HTTPS traffic between VM1 and VM2.Which two additional load balance resources should you create before you can create the load balancing rule?Each correct answer presents part of the solutionMOTL Each correct selection 5 worth one point.

A. a frontend IP address   
B. a backend pool   
C. a health probe   
D. an inbound NAT rule   
E.  a virtual network  

Show Answer

---

Question # 23

Note: This question is part of a series of questions that present the same scenario. Each question in the seriescontains a unique solution that might meet the stated goals. Some question sets might have more than onecorrect solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questionswill not appear in the review screen.You need to ensure that an Azure Active Directory (Azure AD) user named Admin1 is assigned the requiredrole to enable Traffic Analytics for an Azure subscription.Solution: You assign the Traffic Manager Contributor role at the subscription level to Admin1

A. Yes  
B. NO  

Show Answer

---

Question # 24

Note: This question is part of a series of questions that present the same scenario. Each question in the seriescontains a unique solution that might meet the stated goals. Some question sets might have more than onecorrect solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, thesequestions will not appear in the review screen.You manage a virtual network named VNet1 that is hosted in the West US Azure region.VNet1 hosts two virtual machines named VM1 and VM2 that run Windows Server.You need to inspect all the network traffic from VM1 to VM2 for a period of three hours.Solution: From Azure Monitor, you create a metric on Network in and Network Out.Does this meet the goal?

A. Yes  
B. No  

Show Answer

---

Question # 25

You have an Azure virtual network named VNet1 that contains a subnet named Subnet1. Subnet1 contains three Azure virtual machines. Each virtual machine has a public IP address.The virtual machines host several applications that are accessible over port 443 to user on the Internet.Your on-premises network has a site-to-site VPN connection to VNet1.You discover that the virtual machines can be accessed by using the Remote Desktop Protocol (RDP) from theInternet and from the on-premises network.You need to prevent RDP access to the virtual machines from the Internet, unless the RDP connection isestablished from the on-premises network. The solution must ensure that all the applications can still beaccesses by the Internet users.What should you do?

A. Modify the address space of the local network gateway.   
B. Remove the public IP addresses from the virtual machines.   
C. Modify the address space of Subnet1.   
D. Create a deny rule in a network security group (NSG) that is linked to Subnet1.   

Show Answer

---

Question # 26

You have an Azure Kubernetes Service (AKS) cluster named AKS1.You need to configure cluster autoscaler for AKS1.Which two tools should you use? Each correct answer presents a complete solution,NOTE: Each correct selection is worth one point

A. the set-AzAKs cmdlet   
B. the Azure portal   
C. The az aks command   
D. the kubect1 command   
E. the set Azure cmdlet   

Show Answer

---

Question # 27

You have an Azure Storage account named storage1.You plan to use AzCopy to copy data to storage1.You need to identify the storage services in storage1 to which you can copy the data.What should you identify?

A. blob, file, table, and queue   
B. blob and file only   
C. file and table only   
D. file only   
E. blob, table, and queue only   

Show Answer

---

Question # 28

You have an Azur« subscription that contains a virtual machine named VM1 and an Azure key vault named KV1.You need to configure encryption for VM1. The solution must meet the following requirements:• Store and use the encryption key in KV1.• Maintain encryption if VM1 is downloaded from Azure.• Encrypt both the operating system disk and the data disks.Which encryption method should you use?

A. encryption at host
B. customer-managed keys   
C. Azure Disk Encryption   
D. Confidential disk encryption   

Show Answer

---

Question # 29

You have a Microsoft 365 tenant and an Azure Active Directory (Azure AD) tenant named contoso.com.You plan to grant three users named User1, User2, and User3 access to a temporary Microsoft SharePointdocument library named Library1.You need to create groups for the users. The solution must ensure that the groups are deleted automaticallyafter 180 days.Which two groups should you create? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point.

A. a Security group that uses the Assigned membership type   
B.an Office 365 group that uses the Assigned membership type   
C. an Office 365 group that uses the Dynamic User membership type  
D. a Security group that uses the Dynamic User membership type   
E. a Security group that uses the Dynamic Device membership type   

Show Answer

---

Question # 30

Note: This question is part of a series of questions that present the same scenario. Each question in the seriescontains a unique solution that might meet the stated goals. Some question sets might have more than onecorrect solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questionswill not appear in the review screen.You have an Azure Active Directory (Azure AD) tenant named Adatum and an Azure Subscription namedSubscription1. Adatum contains a group named Developers. Subscription1 contains a resource group namedDev.You need to provide the Developers group with the ability to create Azure logic apps in the Dev resourcegroup.Solution: On Subscription1, you assign the Logic App Operator role to the Developers group.Does this meet the goal?

A. Yes  
B. No  

Show Answer

---

Question # 31

You deploy Azure virtual machines to three Azure regions.Each region contains a virtual network. Each virtual network contains multiple subnets peered in a full meshtopology.Each subnet contains a network security group (NSG) that has defined rules.A user reports that he cannot use port 33000 to connect from a virtual machine in one region to a virtualmachine in another region.Which two options can you use to diagnose the issue? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point.

A. Azure Virtual Network Manager   
B. IP flow verify   
C. Azure Monitor Network Insights   
D. Connection troubleshoot   
E. elective security rules   

Show Answer

---

Question # 32

You have an Azure subscription that contains an Azure Stream Analytics job named Job1.You need to monitor input events for Job1 to identify the number of events that were NOT processed.Which metric should you use?

A. Output Events
B. Backlogged Input Events
C. Out-of-Order Events
D. Late Input Events

Show Answer

---

Question # 33

You have an Azure subscription. The subscription contains virtual machines that connect to a virtual networknamed VNet1.You plan to configure Azure Monitor for VM Insights.You need to ensure that all the virtual machines only communicate with Azure Monitor through VNet1.What should you create first?

A. an Azure Monitor Private Link Scope (AMPIS)
B. a private endpoint
C. a Log Analytics workspace
D. a data collection rule (DCR)

Show Answer

---

Question # 34

You have an Azure DNS zone named adatum.com. You need to delegate a subdomain named research.adatum.com to a different DNS server in Azure. What should you do? 

A. Create an PTR record named research in the adatum.com zone.
B. Create an NS record named research in the adatum.com zone.
C. Modify the SOA record of adatum.com.
D. Create an A record named *. research in the adatum.com zone

Show Answer

---

Question # 35

You have an Azure subscription that contains a web app named webapp1. You need to add a custom domainnamed www.contoso.com to webapp1. What should you do first?

A. Upload a certificate.
B. Add a connection string.
C. Stop webapp1.
D. Create a DNS record.

Show Answer

---

Question # 36

You have an Azure virtual machine named VM1 and an Azure key vault named Vault1.On VM1, you plan to configure Azure Disk Encryption to use a key encryption key (KEK)You need to prepare Vault! for Azure Disk Encryption.Which two actions should you perform on Vault1? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.

A. Create a new key.
B. Select Azure Virtual machines for deployment
C. Configure a key rotation policy.
D. Create a new secret.
E. Select Azure Disk Encryption for volume encryption

Show Answer

---

Question # 37

You have an Azure Active Directory (Azure AD) tenant named contoso.com.You have a CSV file that contains the names and email addresses of 500 external users.You need to create a guest user account in contoso.com for each of the 500 external users.Solution: You create a Power Shell script that runs the New-MgUser cmdlet for each user.Does this meet the goal?

A. Yes
B. No

Show Answer

---

Question # 38

You have an Azure subscription that contains a storage account named account1.You plan to upload the disk files of a virtual machine to account! from your on-premises network. Theon-premises network uses a public IP address space of 131.107.1.0/24.You plan to use the disk files to provision an Azure virtual machine named VM1. VM1 will be attached to avirtual network named VNet1. VNet1 uses an IP address space of 192.168.0.0/24.You need to configure account1 to meet the following requirements:• Ensure that you can upload the disk files to account1.• Ensure that you can attach the disks to VM1.• Prevent all other access to account1.Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Eachcorrect selection is worth one point.

A. From the Networking blade of account1, select Selected networks
B. From the Service endpoints blade of VNet1, add a service endpoint.
C. From the Networking blade of account11, add the 131.107.1.0/24 IP address range.
D. From the Networking blade of account1. select Allow trusted Microsoft services to access this storage account
E. From the Networking blade of account1, add VNet1. 

Show Answer

---

Question # 39

You have an Azure Active Directory (Azure AD) tenant named contoso.com.You have a CSV file that contains the names and email addresses of 500 external users.You need to create a guest user account in contoso.com for each of the 500 external users.Solution: You create a Power Shell script that runs the New-MgUser cmdlet for each user.Does this meet the goal?

A. Yes
B. No

Show Answer

---

Question # 40

Your company has an Azure subscription named Subscription1.The company also has two on-premises servers named Server1 and Server2 that run Windows Server 2016.Server1 is configured as a DNS server that has a primary DNS zone named adatum.com. Adatum.comcontains 1,000 DNS records.You manage Server1 and Subscription1 from Server2. Server2 has the following tools installed:The DNS Manager consoleAzure PowerShell Azure CLI 2.0 You need to move the adatum.com zone to Subscription1. The solution must minimize administrative effort. What should you use?  

A. Azure PowerShell
B. Azure CLI
C. the Azure portal
D. the DNS Manager console

Show Answer

---

Question # 41

You have an Azure subscription that contains a storage account named storage1. The storage 1 accountcontains a container named container! You need to configure access to container 1. The solution must meet thefollowing requirements:• Only allow read access• Allow both HTTP and HTTPS protocols.• Apply access permissions to all the content in the containerWhat should you use?

A. an access policy
B. a shared access signature (SAS)
C. Azure Content Delivery Network (CDN)
D. access keys

Show Answer

---

Question # 42

You have an Azure AD tenant that is linked to 10 Azure subscriptions.You need to centrally monitor user activity across all the subscriptions.What should you use?

A. Activity log filters
B. Log Analytics workspace
C. access reviews
D. Azure Application Insights Profiler

Show Answer

---

Question # 43

Note: This question is part of a series of questions that present the same scenario. Each question in the seriescontains a unique solution that might meet the stated goals. Some question sets might have more than onecorrect solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questionswill not appear in the review screen.You have an Azure subscription that contains the virtual machines shown in the following table.You deploy a load balancer that has the following configurations:•Name: LB1•Type: Internal•SKU: Standard•Virtual network: VNET1You need to ensure that you can add VM1 and VM2 to the backend pool of LB1.Solution: You create a Standard SKU public IP address, associate the address to the network interface of VM1,and then stop VM2.Does this meet the goal?

A. Yes
B. No

Show Answer

---

Question # 44

You create an Azure Storage account.You plan to add 10 blob containers to the storage account.For one of the containers, you need to use a different key to encrypt data at rest.What should you do before you create the container?

A. Modify the minimum TLS version.
B. Create an encryption scope.
C. Generate a shared access signature (SAS).
D. Rotate the access keys.

Show Answer

---

Question # 45

You have an Azure subscription that contains a storage account named storage1.You plan to use conditions when assigning role-based access control (RABC) roles to storage1Which storage1 services support conditions when assigning roles?

A. containers only
B. file shares only
C. tables only
D. queues only
E. containers and queues only
F. files shares and tables only

Show Answer

---

Question # 46

You have an on-premises server that contains a folder named D:\Folder1.You need to copy the contents of D:\Folder1 to the public container in an Azure Storage account namedcontoso data.Which command should you run?

A. https://contosodata.blob.core.windows.net/public
B. azcopy sync D:\folder1 https://contosodata.blob.core.windows.net/public --snapshot
C. azcopy copy D:\folder1 https://contosodata.blob.core.windows.net/public --recursive
D. az storage blob copy start-batch D:\Folder1 https:// contosodata.blob.core.windows.net/public

Show Answer

---

Question # 47

You sign up for Azure Active Directory (Azure AD) Premium. You need to add a user named [email protected] as an administrator on all the computers that will be joined to the Azure AD domain.  What should you configure in Azure AD? A. Device settings from the Devices blade.   

B. General settings from the Groups blade.   
C. User settings from the Users blade.   
D.   Providers from the MFA Server blade.

Show Answer

---

Question # 48

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure subscription that contains 10 virtual networks. The virtual networks are hosted in separate resource groups. Another administrator plans to create several network security groups (NSGs) in the subscription You need to ensure that when an NSG is created, it automatically blocks TCP port 8080 between the virtual networks. Solution: You assign a built-in policy definition to the subscription. Does this meet the goal?

A. Yes  
B. No  

Show Answer

---

Question # 49

You have an Azure subscription that contains a storage account. The account stores website data. You need to ensure that inbound user traffic uses the Microsoft point-of-presence (POP) closest to the user's location. What should you configure?

A. load balancing  
B. private endpoints   
C. Azure Firewall rules   
D. Routing preference   

Show Answer

---

Question # 50

You have an Azure virtual machine named VM1 that runs Windows Server 2019. You save VM1 as a template named Template1 to the Azure Resource Manager library. You plan to deploy a virtual machine named VM2 from Template1. What can you configure during the deployment of VM2?

A. virtual machine size   
B. operating system   
C. administrator username   
D. resource group   

Show Answer

---

Question # 51

You create an Azure Storage account named Contoso storage. You plan to create a file share named data. Users need to map a drive to the data file share from home computers that run Windows 10. Which outbound port should be open between the home computers and the data file share?

A. 80  
B. 443  
C. 445
D. 3389  

Show Answer

---

Question # 52

You have an Azure subscription that contains an Azure Storage account. You plan to create an Azure container instance named container1 that will use a Docker image namedImage1. Image1 contains a Microsoft SQL Server instance that requires persistent storage.  You need to configure a storage service for Container1. What should you use?

A. Azure Files   
B. Azure Blob storage   
C. Azure Queue storage   
D. Azure Table storage   

Show Answer

---

Question # 53

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You manage a virtual network named VNet1 that is hosted in the West US Azure region. VNet1 hosts two virtual machines named VM1 and VM2 that run Windows Server. You need to inspect all the network traffic from VM1 to VM2 for a period of three hours. Solution: From Azure Network Watcher, you create a connection monitor. Does this meet the goal? 

A. Yes  
B. No  

Show Answer

---

Question # 54

You have an Azure virtual machine named VM1. You use Azure Backup to create a backup of VM1 named Backup1. After creating Backup1, you perform the following changes to VM1: Modify the size of VM1. Copy a file named Budget.xls to a folder named Data. Reset the password for the built-in administrator account. Add a data disk to VM1. An administrator uses the Replace existing option to restore VM1 from Backup1. You need to ensure that all the changes to VM1 are restored. Which change should you perform again?

A. Modify the size of VM1.   
B. Add a data disk.   
C. Reset the password for the built-in administrator account.   
D. Copy Budget.xls to Data.   

Show Answer

---

Question # 55

You have an Azure Active Directory (Azure AD) tenant named contoso.com. You have a CSV file that contains the names and email addresses of 500 external users. You need to create a quest user account in contoso.com for each of the 500 external users. Solution: from Azure AD in the Azure portal, you use the Bulk create user operation. Does this meet the goal?

A. Yes  
B. No  

Show Answer

---

Question # 56

You have an Azure subscription named Subscription1. You have 5 TB of data that you need to transfer to Subscription1. You plan to use an Azure Import/Export job.What can you use as the destination of the imported data? 

A. Azure Data Lake Store   
B. a virtual machine   
C. the Azure File Sync Storage Sync Service   
D. Azure Blob storage   

Show Answer

---

Question # 57

You have an Azure subscription that contains an Azure SQL database named DB1. You plan to use Azure Monitor to monitor the performance of DB1. You must be able to run queries to analyze log data. Which destination should you configure in the Diagnostic settings of DB 1?

A. Send to a Log Analytics workspace.   
B. Archive to a storage account.   
C. Stream to an Azure event hub.   

Show Answer

---

Testimonials