AZ-104 CERTIFICATION RENEWAL EXAM (COMPREHENSIVE VERSION) | NEWEST ACTUAL EXAM COMPREHENSIVE QUESTIONS AND VERIFIED ANSWERS GRADED A+ | 100% CORRECT | 2024 UPDATE!!

AZ-104 CERTIFICATION RENEWAL EXAM
(COMPREHENSIVE VERSION) | NEWEST
ACTUAL EXAM COMPREHENSIVE
QUESTIONS AND VERIFIED ANSWERS
GRADED A+ | 100% CORRECT | 2024
UPDATE!!

QUESTION 1
Note: This question is part of a series
You have an Azure subscription that contains 10 virtual networks. The
virtual networks are hosted in separate resource groups. Another
administrator plans to create several network security groups (NSGs) in
the subscription. You need to ensure that when an NSG is created, it
automatically blocks TCP port 8080 between
the virtual networks.
Solution: You configure a custom policy definition, and then you assign
the policy to the subscription.
Does this meet the goal?
A. Yes
B. No - ✔✔✔ Correct Answer > A


QUESTION 2

,You have an Azure Active Directory (Azure AD) tenant named
contosocloud.onmicrosoft.com.
Your company has a public DNS zone for contoso.com.
You add contoso.com as a custom domain name to Azure AD. You need
to ensure that Azure
can verify the domain name.
Which type of DNS record should you create?
A. RRSIG
B. PTR
C. DNSKEY
D. TXT - ✔✔✔ Correct Answer > D


QUESTION 3
Note: This question is part of a series
You have an Azure subscription that contains 10 virtual networks. The
virtual networks are hosted in separate resource groups. Another
administrator plans to create several network security groups (NSGs) in
the subscription. You need to ensure that when an NSG is created, it
automatically blocks TCP port 8080 between
the virtual networks.
Solution: From the Resource providers blade, you unregister the
Microsoft.ClassicNetwork
provider.
Does this meet the goal?

,A. Yes
B. No - ✔✔✔ Correct Answer > B


QUESTION 4
Note: This question is part of a series
You have an Azure subscription that contains 10 virtual networks. The
virtual networks are hosted in separate resource groups. Another
administrator plans to create several network security groups (NSGs) in
the subscription. You need to ensure that when an NSG is created, it
automatically blocks TCP port 8080 between
the virtual networks.
Solution: You create a resource lock, and then you assign the lock to the
subscription..
Does this meet the goal?
A. Yes
B. No - ✔✔✔ Correct Answer > B


QUESTION 5
You have an Azure Active Directory (Azure AD) domain that contains
5,000 user accounts.
You create a new user account named AdminUser1.
You need to assign the User administrator administrative role to
AdminUser1.
What should you do from the user account properties?

, A. From the Directory role blade, modify the directory role.
B. From the Groups blade, invite the user account to a new group.
C. From the Licenses blade, assign a new license. - ✔✔✔ Correct
Answer > A


QUESTION 6
You have an Active Directory forest named contoso.com.
You install and configure Azure AD Connect to use password hash
synchronization as the single sign-on (SSO) method. Staging mode is
enabled.
You review the synchronization results and discover that the
Synchronization Service Manager does not display any sync jobs.
You need to ensure that the synchronization completes successfully.
What should you do?
A. From Synchronization Service Manager, run a full import.
B. Run Azure AD Connect and set the SSO method to Pass-through
Authentication.
C. From Azure PowerShell, run Start-AdSyncSyncCycle -PolicyType
Initial.
D. Run Azure AD Connect and disable staging mode. - ✔✔✔ Correct
Answer > D


QUESTION 7