AZ-104 QUESTIONS WITH 100% CORRECT ANSWERS

ESTUDY




AZ-104 QUESTIONS WITH 100%
CORRECT ANSWERS
QUESTION 1
You have an Azure subscription called Subscription1 and a Linux virtual machine called VM1
deployed to it. You need to monitor VM1’s metrics and logs. Which tool should you use?

 A. Azure HDInsight
 B. Linux Diagnostic Extension (LAD) 3.0
 C. AzurePerformanceDiagnostics extension
 D. Azure Analysis Services

✔ Answer: B



QUESTION 2
You’re planning to deploy three Azure virtual machines named VM1, VM2, and VM3 to host a web
app. You need to ensure at least two virtual machines remain available if an Azure datacenter goes
offline. How should you set up these virtual machines?

 A. All in one Availability Zone
 B. All in one Availability Set
 C. Each in a separate Availability Zone
 D. Each in a separate Availability Set

✔ Answer: B



QUESTION 3
You have a Windows Server 2019 virtual machine named VM1 saved as a template called Template1
in the Azure Resource Manager library. When you deploy a new VM named VM2 from Template1,
which option can you configure during the setup?

 A. Operating System
 B. Administrator Username
 C. Virtual Machine Size
 D. Resource Group

✔ Answer: B

,ESTUDY




QUESTION 4
VM1 is running a financial app, App1, which uses high CPU at month-end. To boost VM1’s processor
performance monthly, what should you include in a scheduled runbook?

 A. Add the Azure Performance Diagnostics agent to VM1
 B. Modify VM1's size property
 C. Add VM1 to a scale set
 D. Increase the vCPU quota
 E. Add a Desired State Configuration (DSC) extension to VM1

✔ Answer: E



QUESTION 5
You need to automatically block TCP port 8080 between virtual networks when a Network Security
Group (NSG) is created. Will configuring a custom policy and assigning it to the subscription meet
this requirement?

 A. Yes
 B. No

✔ Answer: A



QUESTION 6
In Azure, you need to check the average round-trip time (RTT) for packets from VM1 to VM2. Which
Azure Network Watcher feature should you use?

 A. IP Flow Verify
 B. Connection Troubleshoot
 C. Connection Monitor
 D. NSG Flow Logs

✔ Answer: C



QUESTION 7
You plan to back up virtual machines nightly at 11:00 PM using Azure Backup. Which of the
following VMs can be backed up?

VM Name OS Auto-Shutdown Time
VM1 Windows Server 2012 R2 Off

,ESTUDY


VM Name OS Auto-Shutdown Time
VM2 Windows Server 2016 19:00
VM3 Ubuntu Server 18.04 LTS Off
VM4 Windows 10 19:00

 A. VM1 and VM3 only
 B. All VMs: VM1, VM2, VM3, and VM4
 C. VM1 and VM2 only
 D. VM1 only

✔ Answer: B



QUESTION 8
You have a Recovery Services vault protecting VM1 and VM2. You need to add VM3 and VM4 to this
protection. What should you do first?

 A. Create a new Recovery Services vault
 B. Create a storage account
 C. Configure the extensions for VM3 and VM4
 D. Create a new backup policy

✔ Answer: A



QUESTION 9
User1 created a new Azure AD tenant, external.contoso.onmicrosoft.com. Can User2 create user
accounts in this new tenant?

 A. Yes
 B. No

✔ Answer: A



QUESTION 10
Given the same scenario in Question 9, will instructing User4 to create the user accounts meet the
goal?

 A. Yes
 B. No

✔ Answer: B

, ESTUDY




QUESTION 11
Will instructing User3 to create user accounts in external.contoso.onmicrosoft.com meet the goal?

 A. Yes
 B. No

✔ Answer: B



QUESTION 12
An administrator is unable to grant users in contoso.com access to an Azure Kubernetes Service
(AKS) cluster named AKS1. What should you do first?

 A. Modify Organization relationships settings in contoso.com
 B. Create an OAuth 2.0 authorization endpoint in contoso.com
 C. Recreate AKS1
 D. Create a namespace in AKS1

✔ Answer: B



QUESTION 13
You need to create groups for three users to access a temporary SharePoint library and ensure the
groups are deleted after 180 days. Which two group types should you create? (Select two)

 A. Office 365 group with Assigned membership
 B. Security group with Assigned membership
 C. Office 365 group with Dynamic User membership
 D. Security group with Dynamic User membership
 E. Security group with Dynamic Device membership

✔ Answer: A, C



QUESTION 14
Given the Azure policy below, what is its effect?

 A. No Azure SQL servers can be created in Subscription 1.
 B. Azure SQL servers can only be created in ContosoRG1.
 C. Azure SQL servers cannot be created in ContosoRG1 only.
 D. Azure SQL servers can be created in any resource group within Subscription 1.

✔ Answer: B