Black Friday / Cyber Monday Special Sales Coupon - 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: c4sdisc65

AZ-104 PDF

$49

$139.99

3 Months Free Update

  • Printable Format
  • Value of Money
  • 100% Pass Assurance
  • Verified Answers
  • Researched by Industry Experts
  • Based on Real Exams Scenarios
  • 100% Real Questions

AZ-104 PDF + Testing Engine

$66.5

$189.99

3 Months Free Update

  • Exam Name: Microsoft Azure Administrator
  • Last Update: Nov 27, 2022
  • Questions and Answers: 525
  • Free Real Questions Demo
  • Recommended by Industry Experts
  • Best Economical Package
  • Immediate Access

AZ-104 Engine

$56

$159.99

3 Months Free Update

  • Best Testing Engine
  • One Click installation
  • Recommended by Teachers
  • Easy to use
  • 3 Modes of Learning
  • State of Art Technology
  • 100% Real Questions included

AZ-104 Microsoft Azure Administrator Questions and Answers

Question # 6

You need to configure the Device settings to meet the technical requirements and the user requirements.

Which two settings should you modify? To answer, select the appropriate settings in the answer area.

AZ-104 question answer

Full Access
Question # 7

You need to recommend an identify solution that meets the technical requirements.

What should you recommend?

A.

federated single-on (SSO) and Active Directory Federation Services (AD FS)

B.

password hash synchronization and single sign-on (SSO)

C.

cloud-only user accounts

D.

Pass-through Authentication and single sign-on (SSO)

Full Access
Question # 8

You need to implement a backup solution for App1 after the application is moved.

What should you create first?

A.

a recovery plan

B.

an Azure Backup Server

C.

a backup policy

D.

a Recovery Services vault

Full Access
Question # 9

You need to prepare the environment to ensure that the web administrators can deploy the web apps as quickly as possible.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

AZ-104 question answer

Full Access
Question # 10

You need to implement Role1.

Which command should you run before you create Role1? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

AZ-104 question answer

Full Access
Question # 11

You discover that VM3 does NOT meet the technical requirements.

You need to verify whether the issue relates to the NSGs.

What should you use?

A.

Diagram in VNet1

B.

the security recommendations in Azure Advisor

C.

Diagnostic settings in Azure Monitor

D.

Diagnose and solve problems in Traffic Manager Profiles

E.

IP flow verify in Azure Network Watcher

Full Access
Question # 12

You are evaluating the name resolution for the virtual machines after the planned implementation of the Azure networking infrastructure.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

AZ-104 question answer

Full Access
Question # 13

You need to identify the storage requirements for Contoso.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

AZ-104 question answer

Full Access
Question # 14

Which blade should you instruct the finance department auditors to use?

A.

invoices

B.

partner information

C.

cost analysis

D.

External services

Full Access
Question # 15

You are evaluating the connectivity between the virtual machines after the planned implementation of the Azure networking infrastructure.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

AZ-104 question answer

Full Access
Question # 16

You need to recommend a solution to automate the configuration for the finance department users. The solution must meet the technical requirements.

What should you include in the recommended?

A.

Azure AP B2C

B.

Azure AD Identity Protection

C.

an Azure logic app and the Microsoft Identity Management (MIM) client

D.

dynamic groups and conditional access policies

Full Access
Question # 17

You need to meet the connection requirements for the New York office.

What should you do? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

AZ-104 question answer

Full Access
Question # 18

You have an Azure Active Directory tenant named Contoso.com that includes following users:

AZ-104 question answer

Contoso.com includes following Windows 10 devices:

AZ-104 question answer

You create following security groups in Contoso.com:

AZ-104 question answer

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

AZ-104 question answer

Full Access
Question # 19

You need to ensure that VM1 can communicate with VM4. The solution must minimize administrative effort.

What should you do?

A.

Create a user-defined route from VNET1 to VNET3.

B.

Assign VM4 an IP address of 10.0.1.5/24.

C.

Establish peering between VNET1 and VNET3.

D.

Create an NSG and associate the NSG to VMI and VM4.

Full Access
Question # 20

You need to the appropriate sizes for the Azure virtual for Server2.

What should you do? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

AZ-104 question answer

Full Access
Question # 21

You have an Azure policy as shown in the following exhibit.

AZ-104 question answer

What is the effect of the policy?

Which of the following statements are true?

A.

You can create Azure SQL servers in ContosoRG1 only.

B.

You are prevented from creating Azure SQL servers anywhere in Subscription 1.

C.

You are prevented from creating Azure SQL Servers in ContosoRG1 only.

D.

You can create Azure SQL servers in any resource group within Subscription 1.

Full Access
Question # 22

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure subscription that contains the following users in an Azure Active Directory tenant named contoso.onmicrosoft.com:

AZ-104 question answer

User1 creates a new Azure Active Directory tenant named external.contoso.onmicrosoft.com.

You need to create new user accounts in external.contoso.onmicrosoft.com.

Solution: You instruct User4 to create the user accounts.

Does that meet the goal?

A.

yes

B.

No

Full Access
Question # 23

You implement the planned changes for NSG1 and NSG2.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

AZ-104 question answer

Full Access
Question # 24

You have Azure subscription that includes following Azure file shares:

AZ-104 question answer

You have the following on-premises servers:

AZ-104 question answer

You create a Storage Sync Service named Sync1 and an Azure File Sync group named Group1. Group1 uses share1 as a cloud endpoint.

You register Server1 and Server2 in Sync1. You add D:\Folder1 on Server1 as a server endpoint of Group1.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

AZ-104 question answer

Full Access
Question # 25

You create the following resources in an subscription:

• An Azure Container Registry instance named Registry1

• An Azure Kubernetes Service (AKS) cluster named Cluster1

You create a container image named App 1 on your administrative workstation.

You need to deploy App1 to cluster 1.

What should you do first?

A.

Run the aa aks create command.

B.

Create a host pool on Cluster1

C.

Upload App1 to Registry 1.

D.

Run the kubect1 apply command.

Full Access
Question # 26

You have an Azure subscription that contains the storage accounts shown in the following exhibit.

AZ-104 question answer

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

NOTE: Each correct selection is worth one point.

AZ-104 question answer

Full Access
Question # 27

You have an Azure Active Directory (Azure AD) tenant named adatum.com. Adatum.com contains the groups in the following table.

AZ-104 question answer

You create two user accounts that are configured as shown in the following table.

AZ-104 question answer

To which groups do User1 and User2 belong? To answer. select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

AZ-104 question answer

Full Access
Question # 28

You have an Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com.

The User administrator role is assigned to a user named Admin1.

An external partner has a Microsoft account that uses the user1@outlook.com sign in.

Admin1 attempts to invite the external partner to sign in to the Azure AD tenant and receives the following error

message: “Unable to invite user user1@outlook.com – Generic authorization exception.”

You need to ensure that Admin1 can invite the external partner to sign in to the Azure AD tenant.

What should you do?

A.

From the Roles and administrators blade, assign the Security administrator role to Admin1.

B.

From the Organizational relationships blade, add an identity provider.

C.

From the Custom domain names blade, add a custom domain.

D.

From the Users settings blade, modify the External collaboration settings.

Full Access
Question # 29

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure Active Directory (Azure AD) tenant named Adatum and an Azure Subscription named Subscription1. Adatum contains a group named Developers. Subscription1 contains a resource group named Dev.

You need to provide the Developers group with the ability to create Azure logic apps in the Dev resource group.

Solution: On Dev, you assign the Logic App Contributor role to the Developers group.

Does this meet the goal?

A.

Yes

B.

No

Full Access
Question # 30

You need to create a bar chart that shows the number of distinct computers that have sent heartbeats each week. How should you complete the Log Analytics query? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

AZ-104 question answer

Full Access
Question # 31

You create an Azure subscription that is associated to a basic Azure Active Directory (Azure AD) tenant. You need to receive an email notification when any user activates an administrative role.

What should you do?

A.

Purchase Azure AD Premium 92 and configure Azure AD Privileged Identity Management,

B.

Purchase Enterprise Mobility + Security E3 and configure conditional access policies.

C.

Purchase Enterprise Mobility + Security E5 and create a custom alert rule in Azure Security Center.

D.

Purchase Azure AD Premium PI and enable Azure AD Identity Protection.

Full Access
Question # 32

Your on-premises network contains an Active Directory domain named adatum.com that is synced to Azure Active Directory (Azure AD). Password writeback is disabled.

In adatum.com, you create the users shown in the following table.

AZ-104 question answer

Which users must sign in from a computer joined to adatum.com?

A.

User2 only

B.

User1 and User3 only

C.

User1, User2, and User3

D.

User2 and User3 only

E.

User1 only

Full Access
Question # 33

You have an Azure subscription named Sub1.

You plan to deploy a multi-tiered application that will contain the tiers shown in the following table.

AZ-104 question answer

You need to recommend a networking solution to meet the following requirements:

  • Ensure that communication between the web servers and the business logic tier spreads equally across the virtual machines.
  • Protect the web servers from SQL injection attacks.

Which Azure resource should you recommend for each requirement? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

AZ-104 question answer

Full Access
Question # 34

You have an Azure subscription.

You need to deploy a virtual machine by using an Azure Resource Manager (ARM) template.

How should you complete the template? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

AZ-104 question answer

Full Access
Question # 35

You have an Azure Active Directory (Azure AD) tenant.

All administrators must enter a verification code to access the Azure portal.

You need to ensure that the administrators can access the Azure portal only from your on-premises network.

What should you configure?

A.

an Azure AD Identity Protection user risk policy.

B.

the multi-factor authentication service settings.

C.

the default for all the roles in Azure AD Privileged Identity Management

D.

an Azure AD Identity Protection sign-in risk policy

Full Access
Question # 36

Your network contains an on-premises Active Directory domain named adatum.com. The domain contains an organizational unit (OU) named OU1. OU1 contains the objects shown in the following table.

AZ-104 question answer

You sync OU1 to Azure Active Directory (Azure AD) by using Azure AD Connect.

You need to identify which objects are synced to Azure AD.

Which objects should you identify?

A.

User1 and Group1 only

B.

User1, Group1, and Group2 only

C.

User1, Group1, Group2, and Computer1

D.

Computer1 only

Full Access
Question # 37

You have an Azure subscription.

Users access the resources in the subscription from either home or from customer sites. From home, users must establish a point-to-site VPN to access the Azure resources. The users on the customer sites access the Azure resources by using site-to-site VPNs.

You have a line-of-business app named App1 that runs on several Azure virtual machine. The virtual machines run Windows Server 2016.

You need to ensure that the connections to App1 are spread across all the virtual machines.

What are two possible Azure services that you can use? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

A.

a public load balancer

B.

Traffic Manager

C.

an Azure Content Delivery Network (CDN)

D.

an internal load balancer

E.

an Azure Application Gateway

Full Access
Question # 38

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have a computer named Computer1 that has a point-to-site VPN connection to an Azure virtual network named VNet1. The point-to-site connection uses a self-signed certificate.

From Azure, you download and install the VPN client configuration package on a computer named Computer2.

You need to ensure that you can establish a point-to-site VPN connection to VNet1 from Computer2.

Solution: You modify the Azure Active Directory (Azure AD) authentication policies.

Does this meet this goal?

A.

Yes

B.

No

Full Access
Question # 39

You need to create an Azure Storage account that meets the following requirements:

• Minimizes costs

• Supports hot, cool, and archive blob tiers

• Provides fault tolerance if a disaster affects the Azure region where the account resides

How should you complete the command? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point

AZ-104 question answer

Full Access
Question # 40

You have an Azure subscription that contains the resources in the following table.

AZ-104 question answer

You install the Web Server server role (IIS) on VM1 and VM2, and then and VM1 and VM2 to LB1.

LB1 is configured as shown in the LB1 exhibit. (Click the LB1 tab.)

AZ-104 question answer

Rule1 is configure as shown in the Rule1 exhibit. (Click the Rule tab.)

For each of the following statements, select Yes if the statements is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

AZ-104 question answer

Full Access
Question # 41

You plan to deploy 20 Azure virtual machines by using an Azure Resource Manager template. The virtual machines will run the latest version of Windows Server 2016 Datacenter by using an Azure Marketplace image.

You need to complete the storageProfile section of the template.

How should you complete the storageProfile section? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

AZ-104 question answer

Full Access
Question # 42

You have an Azure subscription named Subscription1. Subscription1 contains the resources in the following table.

AZ-104 question answer

VNet1 is in RG1. VNet2 is in RG2. There is no connectivity between VNet1 and Vnet2.

An administrator named Admin1 creates an Azure virtual machine named VM1 in RG1. VM1 uses a disk named Disk1 and connects to VNet1. Admin1 then installs a custom application in VM1.

You need to move the custom application to Vnet2. The solution must minimize administrative effort.

Which two actions should you perform? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

AZ-104 question answer

Full Access
Question # 43

You have an Azure subscription that contains a storage account named storage1. The subscription is linked to an Azure Active Directory (Azure AD) tenant named contoso.com that syncs to an on-premises Active Directory domain.

The domain contains the security principals shown in the following table.

AZ-104 question answer

In Azure AD, you create a user named User2.

The storage1 account contains a file share named share1 and has the following configurations.

AZ-104 question answer

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

AZ-104 question answer

Full Access
Question # 44

You have an Azure Resource Manager hat is used to deploy an Azure virtual machine.

Template1 contains the following text:

AZ-104 question answer

The variables section in Template1 contains the following text:

"location": "westeurope"

The resources section in Template1 contains the following text:

AZ-104 question answer

You need to deploy the virtual machine to the West US location by using Template1.

What should you do?

A.

Modify the location in the resource section to westus

B.

Select West US during the deployment

C.

Modify the location in the variables section to westus

Full Access
Question # 45

You need to define a custom domain name for Azure AD to support the planned infrastructure.

Which domain name should you use?

A.

Join the client computers in the Miami office to Azure AD.

B.

Add http://autologon.microsoftazuread-sso.com to the intranet zone of each client computer in the Miami office.

C.

Allow inbound TCP port 8080 to the domain controllers in the Miami office.

D.

Install Azure AD Connect on a server in the Miami office and enable Pass-through Authentication

E.

Install the Active Directory Federation Services (AD FS) role on a domain controller in the Miami office.

Full Access
Question # 46

You have an Azure subscription that contains the resource groups shown in the following table.

AZ-104 question answer

RG1 contains the resources shown in the following table.

AZ-104 question answer

AZ-104 question answer

Full Access
Question # 47

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Your company registers a domain name of contoso.com.

You create an Azure DNS zone named contoso.com, and then you add an A record to the zone for a host named www that has an IP address of 131.107.1.10.

You discover that Internet hosts are unable to resolve www.contoso.com to the 131.107.1.10 IP address.

You need to resolve the name resolution issue.

Solution: You modify the SOA record in the contoso.com zone.

A.

Yes

B.

No

Full Access
Question # 48

You have an Azure subscription that contains the resources shown in the following table.

AZ-104 question answer

VMSS1 is set to VM (virtual machines) orchestration mode.

You need to deploy a new Azure virtual machine named VM1, and then add VM1 to VMSS1.

Which resource group and location should you use to deploy VM1? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

AZ-104 question answer

Full Access
Question # 49

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You deploy an Azure Kubernetes Service (AKS) cluster named AKS1.

You need to deploy a YAML file to AKS1.

Solution: From Azure Cloud Shell, you run az aks.

Does this meet the goal?

A.

Yes

B.

No

Full Access
Question # 50

You have an Azure subscription that contains the virtual machines shown in the following table:

AZ-104 question answer

VM1 and VM2 use public IP addresses. From Windows Server 2019 on VM1 and VM2, you allow inbound Remote Desktop connections.

Subnet1 and Subnet2 are in a virtual network named VNET1.

The subscription contains two network security groups (NSGs) named NSG1 and NSG2. NSG1 uses only the default rules.

NSG2 uses the default rules and the following custom incoming rule:

  • Priority: 100
  • Name: Rule1
  • Port: 3389
  • Protocol: TCP
  • Source: Any
  • Destination: Any
  • Action: Allow

NSG1 is associated to Subnet1. NSG2 is associated to the network interface of VM2.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

AZ-104 question answer

Full Access
Question # 51

You have an Azure subscription.

You have an on-premises virtual machine named VM1. The settings for VM1 are shown in the exhibit. (Click the Exhibit button.)

AZ-104 question answer

You need to ensure that you can use the disks attached to VM1 as a template for Azure virtual machines.

What should you modify on VM1?

A.

Integration Services

B.

the network adapters

C.

the memory

D.

the hard drive

E.

the processor

Full Access
Question # 52

Your network contains an on-premises Active Directory forest named contoso.com that contains two domains named contoso.com and east.contoso.com.

The forest contains the users shown in the following table.

AZ-104 question answer

You plan to sync east.contoso.com to an Azure Active Directory (Azure AD) tenant by using Azure AD Connect.

You need to select an account for Azure AD Connect to use to connect to the forest.

Which account should you select?

A.

User1

B.

User2

C.

User3

D.

User4

Full Access
Question # 53

You have an Azure virtual network named VNet1 that contains a subnet named Subnet1. Subnet1 contains three Azure virtual machines. Each virtual machine has a public IP address.

The virtual machines host several applications that are accessible over port 443 to user on the Internet.

Your on-premises network has a site-to-site VPN connection to VNet1.

You discover that the virtual machines can be accessed by using the Remote Desktop Protocol (RDP) from the Internet and from the on-premises network.

You need to prevent RDP access to the virtual machines from the Internet, unless the RDP connection is established from the on-premises network. The solution must ensure that all the applications can still be accesses by the Internet users.

What should you do?

A.

Modify the address space of the local network gateway.

B.

Remove the public IP addresses from the virtual machines.

C.

Modify the address space of Subnet1.

D.

Create a deny rule in a network security group (NSG) that is linked to Subnet1.

Full Access
Question # 54

You have an Azure subscription named Subscription1. Subscription1 contains a virtual machine named VM1.

You install and configure a web server and a DNS server on VM1.

VM1 has the effective network security rules shown in the following exhibit.

AZ-104 question answer

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

NOTE: Each correct selection is worth one point.

AZ-104 question answer

Full Access
Question # 55

You have an Azure subscription named Subscription1 that contains the storage accounts shown in the following table:

AZ-104 question answer

You plan to use the Azure Import/Export service to export data from Subscription1.

You need to identify which storage account can be used to export the data.

What should you identify?

A.

storage1

B.

storage2

C.

storage3

D.

storage4

Full Access
Question # 56

You plan to create an Azure Storage account in the Azure region of East US 2.

You need to create a storage account that meets the following requirements:

  • Replicates synchronously
  • Remains available if a single data center in the region fails

How should you configure the storage account? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

AZ-104 question answer

Full Access
Question # 57

You have an on-premises server that contains a folder named D:\Folder1.

You need to copy the contents of D:\Folder1 to the public container in an Azure Storage account named contoso data.

Which command should you run?

A.

https://contosodata.blob.core.windows.net/public

B.

azcopy sync D:\folder1 https://contosodata.blob.core.windows.net/public --snapshot

C.

azcopy copy D:\folder1 https://contosodata.blob.core.windows.net/public --recursive

D.

az storage blob copy start-batch D:\Folder1 https://

contosodata.blob.core.windows.net/public

Full Access
Question # 58

You have an Azure subscription that contains a virtual network named VNet1. VNet1 uses an IP address space of 10.0.0.0/16 and contains the subnets in the following table.

AZ-104 question answer

Subnet1 contains a virtual appliance named VM1 that operates as a router.

You create a routing table named RT1.

You need to route all inbound traffic to VNet1 through VM1.

How should you configure RT1? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

AZ-104 question answer

Full Access
Question # 59

You have an Azure subscription named Subscription1.

You deploy a Linux virtual machine named VM1 to Subscription1.

You need to monitor the metrics and the logs of VM1.

What should you use?

A.

Linux Diagnostic Extension (LAD) 3.0

B.

Azure Analysis Services

C.

the AzurePerformanceDiagnostics extension

D.

Azure HDInsight

Full Access
Question # 60

You have an Azure virtual machine named VM1 that runs Windows Server 2019. You sign in to VM1 as a user named User 1 and perform the following actions:

* Create files on drive C.

* Create files on drive D.

* Modify the screen saver timeout.

* Change the desktop background.

You plan to redeploy VM1.

Which changes will be lost after you redeploy VM1?

A.

the modified screen saver timeout

B.

the new desktop background

C.

the new files on drive D

D.

The new files on drive C

Full Access