Azure Associate: AZ-104 Microsoft Azure Administrator Renewal Exam Questions with 100% Verified Solutions Recent Update

Azure Associate: AZ-104 Microsoft Azure Administrator Renewal Exam Questions with 100% Verified Solutions Recent Update Authentication - ANSWER The process of establishing the identity of a person or service looking to access a resource. It involves the act of challenging a party for legitimate credentials, and provides the basis for creating a security principal for identity and access control use. It establishes if they are who they say they are. Authorization - ANSWER The process of establishing what level of access an authenticated person or service has. It specifies what data they're allowed to access and what they can do with it. Azure Active Directory - ANSWER A cloud-based identity service. It has built in support for synchronizing with your existing on-premises Active Directory or can be used as a standalone product. This means that all your applications, whether on-premises, in the cloud (including Office 365), or even mobile applications can share the same credentials. Administrators and developers can control access to internal and external data and applications using centralized rules and policies configured in Azure AD. Single Sign-On - ANSWER A service that enables users to remember only one ID and one password to access multiple applications. A single identity is tied to a user, simplifying the security model. As users change roles or leave an organization, access modifications are tied to that identity, greatly reducing the effort needed to change or disable accounts. Multi-Factor Authentication - ANSWER provides additional security for your identities by requiring two or more elements for full authentication. These elements usually fall into three categories: Something you know (password) Something you possess (phone) Something you are (fingerprint) Symmetric Encryption - ANSWER An encryption method in which the same key is used to encrypt and decrypt a message. Also known as private-key encryption. Asymmetric Encryption - ANSWER An encryption method that uses a public key and private key pair. Either key can encrypt but a single key can't decrypt its own encrypted data. To decrypt, you need the paired key. Asymmetric encryption is used for things like Transport Layer Security (TLS) (used in HTTPS) and data signing. Your company has a main office in London that contains 100 client computers. Three years ago, you migrated to Azure Active Directory (Azure AD).The company's security policy states that all personal devices and corporate-owned devices must be registered or joined to Azure AD.A remote user named User1 is unable to join a personal device to Azure AD from a home network.You verify that User1 was able to join devices to Azure AD in the past.You need to ensure that User1 can join the device to Azure AD.What should you do? A. Assign the User administrator role to User1. B. From the Device settings blade, modify the Maximum number of devices per user setting. C. Create a point-to-site VPN from the home network of User1 to Azure. D. From the Device settings blade, modify the Users may join devices to Azure AD setting. - ANSWER B. From the Device settings blade, modify the Maximum number of devices per user setting. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have an Azure subscription that contains the following users in an Azure Active Directory tenant named : User1 creates a new Azure Active Directory tenant named .You need to create new user accounts in .Solution: You instruct User1 to create the user accounts.Does that meet the goal? A. Yes B. No - ANSWER A. Yes You have an existing Azure subscription that contains 10 virtual machines.You need to monitor the latency between your on-premises network and the virtual machines.What should you use? A. Service Map B. Connection troubleshoot C. Network Performance Monitor D. Effective routes - ANSWER C. Network Performance Monitor DRAG DROP -You have an Azure Linux virtual machine that is protected by Azure Backup.One week ago, two files were deleted from the virtual machine.You need to restore the deleted files to an on-premises Windows Server 2016 computer as quickly as possible.Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.Select and Place: HOTSPOT -You purchase a new Azure subscription named Subscription1.You create a virtual machine named VM1 in Subscription1. VM1 is not protected by Azure Backup.You need to protect VM1 by using Azure Backup. Backups must be created at 01:00 and stored for 30 days.What should you do? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.Hot Area: You have an Azure virtual machine named VM1.Azure collects events from VM1.You are creating an alert rule in Azure Monitor to notify an administrator when an error is logged in the System event log of VM1.Which target resource should you monitor in the alert rule? A. virtual machine extension B. virtual machine C. metric alert D. Azure Log Analytics workspace - ANSWER D. Azure Log Analytics workspace Azure Key Vault - ANSWER a centralized cloud service for storing your application secrets. It can help you control your applications' secrets by keeping them in a single, central location and by providing secure access, permissions control, and access logging capabilities. Microsoft Azure Information Protection - ANSWER A cloud-based solution that helps organizations classify and optionally protect documents and emails by applying labels. Azure Advanced Threat Protection - ANSWER A cloud-based security solution that identifies, detects, and helps you investigate advanced threats, compromised identities, and malicious insider actions directed at your organization. Azure Security Center - ANSWER A monitoring service that provides threat protection across all of your services both in Azure, and on-premises. Azure Portal - ANSWER The login portal for the Azure cloud platform. You can use the UI interface to create, update and delete Azure Resources. You can also create an Azure support ticket from within the UI (based upon your subscription agreement). Azure Cloud Shell - ANSWER A browser based environment accessed via Azure Portal that can be used to script or send commands that allow you to create, update or delete specific Azure Resources. Your company has an Azure Active Directory (Azure AD) tenant that is configured for hybrid coexistence with the on-premises Active Directory domain.The on-premise virtual environment consists of virtual machines (VMs) running on Windows Server 2012 R2 Hyper-V host servers.You have created some PowerShell scripts to automate the configuration of newly created VMs. You plan to create several new VMs.You need a solution that ensures the scripts are run on the new VMs.Which of the following is the best solution? A. Configure a SetupC batch file in the %windir%setupscripts directory. B. Configure a Group Policy Object (GPO) to run the scripts as logon scripts. C. Configure a Group Policy Object (GPO) to run the scripts as startup scripts. D. Place the scripts in a new virtual hard disk (VHD). - ANSWER A. Configure a SetupC batch file in the %windir%setupscripts directory. Your company has an Azure Active Directory (Azure AD) tenant that is configured for hybrid coexistence with the on-premises Active Directory domain.You plan to deploy several new virtual machines (VMs) in Azure. The VMs will have the same operating system and custom software requirements.You configure a reference VM in the on-premise virtual environment. You then generalize the VM to create an image.You need to upload the image to Azure to ensure that it is available for selection when you create the new Azure VMs.Which PowerShell cmdlets should you use? A. Add-AzVM B. Add-AzVhd C. Add-AzImage D. Add-AzImageDataDisk - ANSWER B. Add-AzVhd DRAG DROP -Your company has an Azure subscription that includes a number of Azure virtual machines (VMs), which are all part of the same virtual network.Your company also has an on-premises Hyper-V server that hosts a VM, named VM1, which must be replicated to Azure.Which of the following objects that must be created to achieve this goal? Answer by dragging the correct option from the list to the answer area.Select and Place: - ANSWER Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.Your company's Azure subscription includes two Azure networks named VirtualNetworkA and VirtualNetworkB.VirtualNetworkA includes a VPN gateway that is configured to make use of static routing. Also, a site-to-site VPN connection exists between your company's on- premises network and VirtualNetworkA.You have configured a point-to-site VPN connection to VirtualNetworkA from a workstation running Windows 10. After configuring virtual network peering betweenVirtualNetworkA and VirtualNetworkB, you confirm that you are able to access VirtualNetworkB from the company's on premises network. However, you find that you cannot establish a connection to VirtualNetworkB from the Windows 10 workstation.You have to make sure that a connecti - ANSWER B. No Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.Your company's Azure subscription includes two Azure networks named VirtualNetworkA and VirtualNetworkB.VirtualNetworkA includes a VPN gateway that is configured to make use of static routing. Also, a site-to-site VPN connection exists between your company's on- premises network and VirtualNetworkA.You have configured a point-to-site VPN connection to VirtualNetworkA from a workstation running Windows 10. After configuring virtual network peering betweenVirtualNetworkA and VirtualNetworkB, you confirm that you are able to access VirtualNetworkB from the company's on premises network. However, you find that you cannot establish a connection to VirtualNetworkB from the Windows 10 workstation.You have to make sure that a connecti - ANSWER B. No