AZ-104 Microsoft Azure Administrator |
Practice Exam
Updated
Questions & Answers
A+ Grade Guaranteed
,QUESTION 1 B
You have an Azure subscription named Subscription1.
You deploy a Linux virtual machine named VM1 to
Subscription1.
You need to monitor the metrics and the logs of VM1.
What should you use?
A. Azure HDInsight
B. Linux Diagnostic Extension (LAD) 3.0
C. the AzurePerformanceDiagnostics extension
D. Azure Analysis Services
QUESTION 2 B
You plan to deploy three Azure virtual machines named
VM1, VM2, and VM3. The virtual
machines will host a web app named App1.
You need to ensure that at least two virtual machines are
available if a single Azure datacenter
becomes unavailable.
What should you deploy?
A. all three virtual machines in a single Availability Zone
B. all virtual machines in a single Availability Set
C. each virtual machine in a separate Availability Zone
D. each virtual machine in a separate Availability Set
QUESTION 3 B
You have an Azure virtual machine named VM1 that runs
Windows Server 2019.
You save VM1 as a template named Template1 to the
Azure Resource Manager library.
You plan to deploy a virtual machine named VM2 from
Template1.
What can you configure during the deployment of VM2?
A. operating system
B. administrator username
C. virtual machine size
D. resource group
QUESTION 4 E
You have an Azure subscription that contains an Azure
virtual machine named VM1. VM1 runs a
financial reporting app named App1 that does not support
multiple active instances.
At the end of each month, CPU usage for VM1 peaks
when App1 runs.
You need to create a scheduled runbook to increase the
processor performance of VM1 at the
end of each month.
What task should you include in the runbook?
A. Add the Azure Performance Diagnostics agent to VM1.
B. Modify the VM size property of VM1.
C. Add VM1 to a scale set.
D. Increase the vCPU quota for the subscription.
E. Add a Desired State Configuration (DSC) extension to
VM1.
QUESTION 5 A
Note: This question is part of a series of questions
You have an Azure subscription that contains 10 virtual
networks. The virtual networks are hosted
in separate resource groups.
Another administrator plans to create several network
security groups (NSGs) in the subscription.
You need to ensure that when an NSG is created, it
automatically blocks TCP port 8080 between the virtual
networks.
Solution: You configure a custom policy definition, and
then you assign the policy to the
subscription.
Does this meet the goal?
A. Yes
B. No
,QUESTION 6 C
You have two Azure virtual networks named VNet1 and
VNet2. VNet1 contains an Azure virtual
machine named VM1. VNet2 contains an Azure virtual
machine named VM2.
VM1 hosts a frontend application that connects to VM2 to
retrieve data.
Users report that the frontend application is slower than
usual.
You need to view the average round-trip time (RTT) of the
packets from VM1 to VM2.
Which Azure Network Watcher feature should you use?
A. IP flow verify
B. Connection troubleshoot
C. Connection monitor
D. NSG flow logs
QUESTION 7 B
You have an Azure subscription that has a Recovery
Services vault named Vault1. The
subscription contains the virtual machines shown in the
following table:
NAME---Operating System---Auto-Shutdown
VM1---WIndows Server 2012 R2---Off
VM2---WIndows Server 2016---19:00
VM3---Ubuntu Server 18.04LTS---Off
VM4---WIndows 10---19:00
You plan to schedule backups to occur every night at
23:00.
Which virtual machines can you back up by using Azure
Backup?
A. VM1 and VM3 only
B. VM1, VM2, VM3 and VM4
C. VM1 and VM2 only
D. VM1 only
QUESTION 8 A
You have the Azure virtual machines shown in the
following table:
NAME---Azure Region
VM1---West Europe
VM2---West Europe
VM3---North Europe
VM4---North Europe
You have a Recovery Services vault that protects VM1 and
VM2.
You need to protect VM3 and VM4 by using Recovery
Services.
What should you do first?
A. Create a new Recovery Services vault
B. Create a storage account
C. Configure the extensions for VM3 and VM4
D. Create a new backup policy
QUESTION 9 A
Note: This question is part of a series of questions
You have an Azure subscription that contains the following
users in an Azure Active Directory
tenant named contoso.onmicrosoft.com:
NAME---Role---Scope
User1---Global Administrator---Azure Active Directory
User2--Global Administrator---Azure Active Directory
User3---User Administrator---Azure Active Directory
User4---Owner---Azure Subscription
User1 creates a new Azure Active Directory tenant named
external.contoso.onmicrosoft.com.
You need to create new user accounts in
external.contoso.onmicrosoft.com.
Solution: You instruct User2 to create the user accounts.
Does that meet the goal?
A. Yes
B. No
, QUESTION 10 B
Note: This question is part of a series of questions
You have an Azure subscription that contains the following
users in an Azure Active Directory
tenant named contoso.onmicrosoft.com:
NAME---Role---Scope
User1---Global Administrator---Azure Active Directory
User2--Global Administrator---Azure Active Directory
User3---User Administrator---Azure Active Directory
User4---Owner---Azure Subscription
User1 creates a new Azure Active Directory tenant named
external.contoso.onmicrosoft.com.
You need to create new user accounts in
external.contoso.onmicrosoft.com.
Solution: You instruct User4 to create the user accounts.
Does that meet the goal?
A. Yes
B. No
QUESTION 11 B
Note: This question is part of a series of questions
You have an Azure subscription that contains the following
users in an Azure Active Directory
tenant named contoso.onmicrosoft.com:
NAME---Role---Scope
User1---Global Administrator---Azure Active Directory
User2--Global Administrator---Azure Active Directory
User3---User Administrator---Azure Active Directory
User4---Owner---Azure Subscription
User1 creates a new Azure Active Directory tenant named
external.contoso.onmicrosoft.com.
You need to create new user accounts in
external.contoso.onmicrosoft.com.
Solution: You instruct User3 to create the user accounts.
Does that meet the goal?
A. Yes
B. No
QUESTION 12 B
You have an Azure subscription that contains an Azure
Active Directory (Azure AD) tenant
named contoso.com and an Azure Kubernetes Service
(AKS) cluster named AKS1.
An administrator reports that she is unable to grant access
to AKS1 to the users in contoso.com.
You need to ensure that access to AKS1 can be granted to
the contoso.com users.
What should you do first?
A. From contoso.com, modify the Organization
relationships settings.
B. From contoso.com, create an OAuth 2.0 authorization
endpoint.
C. Recreate AKS1.
D. From AKS1, create a namespace.
Practice Exam
Updated
Questions & Answers
A+ Grade Guaranteed
,QUESTION 1 B
You have an Azure subscription named Subscription1.
You deploy a Linux virtual machine named VM1 to
Subscription1.
You need to monitor the metrics and the logs of VM1.
What should you use?
A. Azure HDInsight
B. Linux Diagnostic Extension (LAD) 3.0
C. the AzurePerformanceDiagnostics extension
D. Azure Analysis Services
QUESTION 2 B
You plan to deploy three Azure virtual machines named
VM1, VM2, and VM3. The virtual
machines will host a web app named App1.
You need to ensure that at least two virtual machines are
available if a single Azure datacenter
becomes unavailable.
What should you deploy?
A. all three virtual machines in a single Availability Zone
B. all virtual machines in a single Availability Set
C. each virtual machine in a separate Availability Zone
D. each virtual machine in a separate Availability Set
QUESTION 3 B
You have an Azure virtual machine named VM1 that runs
Windows Server 2019.
You save VM1 as a template named Template1 to the
Azure Resource Manager library.
You plan to deploy a virtual machine named VM2 from
Template1.
What can you configure during the deployment of VM2?
A. operating system
B. administrator username
C. virtual machine size
D. resource group
QUESTION 4 E
You have an Azure subscription that contains an Azure
virtual machine named VM1. VM1 runs a
financial reporting app named App1 that does not support
multiple active instances.
At the end of each month, CPU usage for VM1 peaks
when App1 runs.
You need to create a scheduled runbook to increase the
processor performance of VM1 at the
end of each month.
What task should you include in the runbook?
A. Add the Azure Performance Diagnostics agent to VM1.
B. Modify the VM size property of VM1.
C. Add VM1 to a scale set.
D. Increase the vCPU quota for the subscription.
E. Add a Desired State Configuration (DSC) extension to
VM1.
QUESTION 5 A
Note: This question is part of a series of questions
You have an Azure subscription that contains 10 virtual
networks. The virtual networks are hosted
in separate resource groups.
Another administrator plans to create several network
security groups (NSGs) in the subscription.
You need to ensure that when an NSG is created, it
automatically blocks TCP port 8080 between the virtual
networks.
Solution: You configure a custom policy definition, and
then you assign the policy to the
subscription.
Does this meet the goal?
A. Yes
B. No
,QUESTION 6 C
You have two Azure virtual networks named VNet1 and
VNet2. VNet1 contains an Azure virtual
machine named VM1. VNet2 contains an Azure virtual
machine named VM2.
VM1 hosts a frontend application that connects to VM2 to
retrieve data.
Users report that the frontend application is slower than
usual.
You need to view the average round-trip time (RTT) of the
packets from VM1 to VM2.
Which Azure Network Watcher feature should you use?
A. IP flow verify
B. Connection troubleshoot
C. Connection monitor
D. NSG flow logs
QUESTION 7 B
You have an Azure subscription that has a Recovery
Services vault named Vault1. The
subscription contains the virtual machines shown in the
following table:
NAME---Operating System---Auto-Shutdown
VM1---WIndows Server 2012 R2---Off
VM2---WIndows Server 2016---19:00
VM3---Ubuntu Server 18.04LTS---Off
VM4---WIndows 10---19:00
You plan to schedule backups to occur every night at
23:00.
Which virtual machines can you back up by using Azure
Backup?
A. VM1 and VM3 only
B. VM1, VM2, VM3 and VM4
C. VM1 and VM2 only
D. VM1 only
QUESTION 8 A
You have the Azure virtual machines shown in the
following table:
NAME---Azure Region
VM1---West Europe
VM2---West Europe
VM3---North Europe
VM4---North Europe
You have a Recovery Services vault that protects VM1 and
VM2.
You need to protect VM3 and VM4 by using Recovery
Services.
What should you do first?
A. Create a new Recovery Services vault
B. Create a storage account
C. Configure the extensions for VM3 and VM4
D. Create a new backup policy
QUESTION 9 A
Note: This question is part of a series of questions
You have an Azure subscription that contains the following
users in an Azure Active Directory
tenant named contoso.onmicrosoft.com:
NAME---Role---Scope
User1---Global Administrator---Azure Active Directory
User2--Global Administrator---Azure Active Directory
User3---User Administrator---Azure Active Directory
User4---Owner---Azure Subscription
User1 creates a new Azure Active Directory tenant named
external.contoso.onmicrosoft.com.
You need to create new user accounts in
external.contoso.onmicrosoft.com.
Solution: You instruct User2 to create the user accounts.
Does that meet the goal?
A. Yes
B. No
, QUESTION 10 B
Note: This question is part of a series of questions
You have an Azure subscription that contains the following
users in an Azure Active Directory
tenant named contoso.onmicrosoft.com:
NAME---Role---Scope
User1---Global Administrator---Azure Active Directory
User2--Global Administrator---Azure Active Directory
User3---User Administrator---Azure Active Directory
User4---Owner---Azure Subscription
User1 creates a new Azure Active Directory tenant named
external.contoso.onmicrosoft.com.
You need to create new user accounts in
external.contoso.onmicrosoft.com.
Solution: You instruct User4 to create the user accounts.
Does that meet the goal?
A. Yes
B. No
QUESTION 11 B
Note: This question is part of a series of questions
You have an Azure subscription that contains the following
users in an Azure Active Directory
tenant named contoso.onmicrosoft.com:
NAME---Role---Scope
User1---Global Administrator---Azure Active Directory
User2--Global Administrator---Azure Active Directory
User3---User Administrator---Azure Active Directory
User4---Owner---Azure Subscription
User1 creates a new Azure Active Directory tenant named
external.contoso.onmicrosoft.com.
You need to create new user accounts in
external.contoso.onmicrosoft.com.
Solution: You instruct User3 to create the user accounts.
Does that meet the goal?
A. Yes
B. No
QUESTION 12 B
You have an Azure subscription that contains an Azure
Active Directory (Azure AD) tenant
named contoso.com and an Azure Kubernetes Service
(AKS) cluster named AKS1.
An administrator reports that she is unable to grant access
to AKS1 to the users in contoso.com.
You need to ensure that access to AKS1 can be granted to
the contoso.com users.
What should you do first?
A. From contoso.com, modify the Organization
relationships settings.
B. From contoso.com, create an OAuth 2.0 authorization
endpoint.
C. Recreate AKS1.
D. From AKS1, create a namespace.
