Azure Administrator Associate (AZ-104) Exam Questions With Answers Verified 2024 (GRADED)

Azure Administrator Associate (AZ-104) Exam Questions With Answers Verified 2024 (GRADED) You have an Azure subscription that contains an Azure Active Directory (Azure AD) tenant named and an Azure Kubernetes Service (AKS) cluster named AKS1. An administrator reports that she is unable to grant access to AKS1 to the users in . You need to ensure that access to AKS1 can be granted to the users. What should you do first? A. From , modify the Organization relationships settings. B. From , create an OAuth 2.0 authorization endpoint. C. Recreate AKS1. D. From AKS1, create a namespace. Correct Answer: B. From , create an OAuth 2.0 authorization endpoint. You have a Microsoft 365 tenant and an Azure Active Directory (Azure AD) tenant named . You plan to grant three users named User1, User2, and User3 access to a temporary Microsoft SharePoint document library named Library1. You need to create groups for the users. The solution must ensure that the groups are deleted automatically after 180 days. Which two groups should you create? A. an Office 365 group that uses the Assigned membership type B. a Security group that uses the Assigned membership type C. an Office 365 group that uses the Dynamic User membership type D. a Security group that uses the Dynamic User membership type E. a Security group that uses the Dynamic Device membership type Correct Answer: A. an Office 365 group that uses the Assigned membership type C. an Office 365 group that uses the Dynamic User membership type You recently created a new Azure subscription that contains a user named Admin1. Admin1 attempts to deploy an Azure Marketplace resource by using an Azure Resource Manager template. Admin1 deploys the template by using AzurePowerShell and receives the following error message: "User failed validation to purchase resources. Error message: "Legal terms have not been accepted for this item on this subscription. To accept legal terms, please go to the Azure portal ( Marketplace item or create it there for the first time. "You need to ensure that Admin1 can deploy the Marketplace resource successfully." What should you do? A. From Azure PowerShell, run the Set-AzApiManagementSubscription cmdlet B. From the Azure portal, register the Microsoft.Marketplace resource provider C. From Azure PowerShell, run the Set-AzMarketplaceTerms cmdlet D. From the Azure portal, assign the Billing administrator role to Admin1 Correct Answer: C. From Azure PowerShell, run the Set-AzMarketplaceTerms cmdlet You have an Azure Active Directory (Azure AD) tenant that contains 5,000 user accounts. You create a new user account named AdminUser1. You need to assign the User administrator administrative role to AdminUser1. What should you do from the user account properties? A. From the Licenses blade, assign a new license B. From the Directory role blade, modify the directory role C. From the Groups blade, invite the user account to a new group Correct Answer: B. From the Directory role blade, modify the directory role You have an Azure Active Directory (Azure AD) tenant named that contains 100 user accounts. You purchase 10 Azure AD Premium P2 licenses for the tenant. You need to ensure that 10 users can use all the Azure AD Premium features. What should you do? A. From the Licenses blade of Azure AD, assign a license B. From the Groups blade of each user, invite the users to a group C. From the Azure AD domain, add an enterprise application D. From the Directory role blade of each user, modify the directory role Correct Answer: A. From the Licenses blade of Azure AD, assign a license You have an Azure subscription named Subscription1 and an on-premises deployment of Microsoft System Center Service Manager. Subscription1 contains a virtual machine named VM1. You need to ensure that an alert is set in Service Manager when the amount of available memory on VM1 is below 10 percent. What should you do first? A. Create an automation runbook B. Deploy a function app C. Deploy the IT Service Management Connector (ITSM) D. Create a notification Correct Answer: C. Deploy the IT Service Management Connector (ITSM) You sign up for Azure Active Directory (Azure AD) Premium. You need to add a user named as an administrator on all the computers that will be joined to the Azure AD domain. What should you configure in Azure AD? A. Device settings from the Devices blade B. Providers from the MFA Server blade C. User settings from the Users blade D. General settings from the Groups blade Correct Answer: A. Device settings from the Devices blade You have an Azure subscription named Subscription1 that contains a virtual network named VNet1. VNet1 is in a resource group named RG1.Subscription1 has a user named User1. User1 has the following roles: Reader Security Admin Security Reader - You need to ensure that User1 can assign the Reader role for VNet1 to other users.What should you do? A. Remove User 1 from the Security Reader role for Subscription1. Assign User1 the Contributor role for RG1. B. Assign User1 the Owner role for VNet1. C. Remove User1 from the Security Reader and Reader roles for Subscription1. D. Assign User1 the Network Contributor role for RG1. Correct Answer: B. Assign User1 the Owner role for VNet1. You have an Azure Active Directory (Azure AD) tenant named . Your company has a public DNS zone for . You add as a custom domain name to Azure AD. You need to ensure that Azure can verify the domain name. Which type of DNS record should you create? A. MX B. NSEC C. SRV D. NSEC3 Correct Answer: A. MX You have an Azure Storage account named storage1. You plan to use AzCopy to copy data to storage1. You need to identify the storage services in storage1 to which you can copy the data. What should you identify? A. blob, file, table, and queue B. blob and file only C. file and table only D. file only E. blob, table, and queue only Correct Answer: B. blob and file only You have an Azure subscription that contains an Azure Storage account. You plan to create an Azure container instance named container1 that will use a Docker image named Image1. Image1 contains a Microsoft SQL Server instance that requires persistent storage. You need to configure a storage service for Container1. What should you use? A. Azure Files B. Azure Blob storage C. Azure Queue storage D. Azure Table storage Correct Answer: D. Azure Table storage You have an app named App1 that runs on two Azure virtual machines named VM1 and VM2. You plan to implement an Azure Availability Set for App1. The solution must ensure that App1 is available during planned maintenance of the hardware hostingVM1 and VM2. What should you include in the Availability Set? A. one update domain B. two fault domains C. one fault domain D. two update domains Correct Answer: D. two update domains You have an on-premises server that contains a folder named D:Folder1. You need to copy the contents of D:Folder1 to the public container in an Azure Storage account named contosodata. Which command should you run? A. B. azcopy sync D:folder1 C. azcopy copy D:folder1 D. az storage blob copy start-batch D:Folder1 Correct Answer: C. azcopy copy D:folder1 recursive You have an Azure subscription that contains a storage account named account1. You plan to upload the disk files of a virtual machine to account1 from your on-premises network. The on-premises network uses a public IP address space of131.107.1.0/24. You plan to use the disk files to provision an Azure virtual machine named VM1. VM1 will be attached to a virtual network named VNet1. VNet1 uses an IP address space of 192.168.0.0/24. You need to configure account1 to meet the following requirements: Ensure that you can upload the disk files to account1. Ensure that you can attach the disks to VM1. Prevent all other access to account1. Which two actions should you perform? A. From the Firewalls and virtual networks blade of account1, select Selected networks. B. From the Firewalls and virtual networks blade of account1, select Allow trusted Microsoft services to access this storage account. C. From the Firewalls and virtual networks blade of account1, add the 131.107.1.0/24 IP address range. D. From the Firewalls and virtual networks blade of account1, add VNet1. E. From the Service endpoints blade of VNet1, add a service endpoint. Correct Answer: A. From the Firewalls and virtual networks blade of account1, select Selected networks. E. From the Service endpoints blade of VNet1, add a service endpoint. You have an Azure subscription named Subscription1. Subscription1 contains a resource group named RG1. RG1 contains resources that were deployed by using templates. You need to view the date and time when the resources were created in RG1. Solution: From the Subscriptions blade, you select the subscription, and then click Programmatic deployment. Does this meet the goal? A. Yes B. No Correct Answer: B. No You have an Azure subscription named Subscription1. Subscription1 contains a resource group named RG1. RG1 contains resources that were deployed by using templates. You need to view the date and time when the resources were created in RG1. Solution: From the RG1 blade, you click Automation script. Does this meet the goal? A. Yes B. No Correct Answer: B. No You have an Azure subscription named Subscription1. Subscription1 contains a resource group named RG1. RG1 contains resources that were deployed by using templates. You need to view the date and time when the resources were created in RG1. Solution: From the RG1 blade, you click Deployments. Does this meet the goal?