AZ 104 Exam with verified
answers
You need to define a custom domain name for Azure AD to support the
x x x x x x x x x x x x x x
planned infrastructure. Which domain name should you use?
x x x x x x x x
A. ad.humongousinsurance.com
x x
B. humongousinsurance.onmicrosoft.com
x x
C. humongousinsurance.local
x x
D. humongousinsurance.com - correct answer ✔Answer: D
x x x x x x
Every Azure AD directory comes with an initial domain name in the form of
x x x x x x x x x x x x x x
domainname.onmicrosoft.com.
The initial domain name cannot be changed of deleted, but you can add your
x x x x x x x x x x x x x
xcorporate domain name to AAD as well. Adding custom domain names to
x x x x x x x x x x x x
Azure AD allows you to assign user names in the directory that are familiar
x x x x x x x x x x x x x x
to your users, such as '.' instead of 'alice@domain
x x x x x x x x x
name.onmicrosoft.com'.
You need to prepare the environment to meet the authentication
x x x x x x x x x x
requirements. Which two actions should you perform? Each correct answer
x x x x x x x x x x
presents part of the solution. NOTE: Each correct selection is worth one
x x x x x x x x x x x x
point. x
,A. Allow inbound TCP port 8080 to the domain controllers in the Miami
x x x x x x x x x x x x x
office. x
B. Add http://autogon.microsoftazuread-sso.com to the intranet zone of each
x x x x x x x x x
client computer in the Miami office.
x x x x x x
C. Join the client computers in the Miami office to Azure AD.
x x x x x x x x x x x x
D. Install the Active Directory Federation Services (AD FS) role on a domain
x x x x x x x x x x x x x
controller in the Miami Questions & Answers PDF P-16 www.dumpskey.com
x x x x x x x x x x
office. x
E. Install Azure AD Connect on a server in the Miami office and enable Pass-
x x x x x x x x x x x x x x
through Authentication. - correct answer ✔Answer: BE
x x x x x x
B: You can gradually roll out Seamless SSO to your users. You start by adding
x x x x x x x x x x x x x x x
the following Azure AD URL to all or selected users' Intranet zone settings by
x x x x x x x x x x x x x x
using Group Policy in Active Directory: https://autologon.microsoftazuread-
x x x x x x
sso.com x
E: Seamless SSO works with any method of cloud authentication - Password
x x x x x x x x x x x x
Hash Synchronization or Pass-through Authentication, and can be enabled via
x x x x x x x x x x
Azure AD Connect. x x
Scenario: Licensing Issue x x x
1. You attempt to assign a license in Azure to several users and receive the
x x x x x x x x x x x x x x x
following error message: "Licenses not assigned. License agreement failed for
x x x x x x x x x x
one user."x x
,2. You verify that the Azure subscription has the available licenses.
x x x x x x x x x x
You need to resolve the licensing issue before you attempt to assign the
x x x x x x x x x x x x x
license again. What should you do?
x x x x x x
A. From the Groups blade, invite the user accounts to a new group.
x x x x x x x x x x x x x
B. From the Profile blade, modify the usage location.
x x x x x x x x x
C. From the Directory role blade, modify the directory role. - correct answer
x x x x x x x x x x x x x
✔Answer: B x
Explanation: Some Microsoft services aren't available in all locations because
x x x x x x x x x x
of local laws and regulations. Before you can assign a license to a user, you
x x x x x x x x x x x x x x x
must specify the Usage location property for the user. You can specify the
x x x x x x x x x x x x x
location under the User > Profile > Settings section in the Azure portal.
x x x x x x x x x x x x
You have an azure subscription named Subscription that contains the
x x x x x x x x x x
resource groups shown in the following table.
x x x x x x x
RG1 - East Asia
x x x
RG2 - East US
x x x
In RG1, you create a virtual machine named VM1 in the East Asia location.
x x x x x x x x x x x x x x
You plan to create a virtual network named VNET1. You need to create VNET,
x x x x x x x x x x x x x
xand then connect VM1 to VNET1. What are two possible ways to achieve
x x x x x x x x x x x x x
this goal? Each correct answer presents a complete a solution. NOTE: Each
x x x x x x x x x x x x
correct selection is worth one point.
x x x x x x
A. Create VNET1 in RG2, and then set East Asia as the location.
x x x x x x x x x x x x x
, B. Create VNET1 in a new resource group in the West US location, and then
x x x x x x x x x x x x x x x
set West US as the location.
x x x x x x
C. Create VNET1 in RG1, and then set East Asia as the location
x x x x x x x x x x x x x
D. Create VNET1 in RG1, and then set East US as the location.
x x x x x x x x x x x x x
E. Create VNET1 in RG2, and then set East US as the location. - correct
x x x x x x x x x x x x x x x
answer ✔Answer: AC x x
A network interface can exist in the same, or different resource group, than
x x x x x x x x x x x x x
the virtual machine you attach it to, or the virtual network you connect it to.
x x x x x x x x x x x x x x x
The virtual machine you attach a network interface to and the virtual
x x x x x x x x x x x x
network you connect it to must exist in the same location, also referred to as
x x x x x x x x x x x x x x
xa region. Note, Resource groups can span multiple Regions, but VNets only
x x x x x x x x x x x x
can hold resources (VMs, Network Adapters) that exists in the same region.
x x x x x x x x x x x x
So in this scenario, you need to create VNET1 in any RG and set location as
x x x x x x x x x x x x x x x x
East Asia. x
You have an Azure subscription that contains a storage account named
x x x x x x x x x x x
account1. You plan to upload the disk files of a virtual machine to account1
x x x x x x x x x x x x x x
from your on-premises network. The on-premises network uses a public IP
x x x x x x x x x x x
address space of 131.107.1.0/24. You plan to use the disk files to provision
x x x x x x x x x x x x x
an Azure virtual machine named VM1. VM1 will be attached to a virtual
x x x x x x x x x x x x x
network named VNet1. VNet1 uses an IP address space of 192.168.0.0/24.
x x x x x x x x x x x
You need to configure account1 to meet the following requirements: Ensure
x x x x x x x x x x x
that you can upload the disk files to account1. Ensure that you can attach the
x x x x x x x x x x x x x x
xdisks to VM1. Prevent all other access to account1. Which two actions
x x x x x x x x x x x x
should you perform? Each correct selection presents part of the solution.
x x x x x x x x x x x
NOTE: Each correct selection is worth one point.
x x x x x x x
A. From the Firewalls and virtual networks blade of account1, add the
x x x x x x x x x x x x
131.107.1.0/24 IP address range. x x x x
answers
You need to define a custom domain name for Azure AD to support the
x x x x x x x x x x x x x x
planned infrastructure. Which domain name should you use?
x x x x x x x x
A. ad.humongousinsurance.com
x x
B. humongousinsurance.onmicrosoft.com
x x
C. humongousinsurance.local
x x
D. humongousinsurance.com - correct answer ✔Answer: D
x x x x x x
Every Azure AD directory comes with an initial domain name in the form of
x x x x x x x x x x x x x x
domainname.onmicrosoft.com.
The initial domain name cannot be changed of deleted, but you can add your
x x x x x x x x x x x x x
xcorporate domain name to AAD as well. Adding custom domain names to
x x x x x x x x x x x x
Azure AD allows you to assign user names in the directory that are familiar
x x x x x x x x x x x x x x
to your users, such as '.' instead of 'alice@domain
x x x x x x x x x
name.onmicrosoft.com'.
You need to prepare the environment to meet the authentication
x x x x x x x x x x
requirements. Which two actions should you perform? Each correct answer
x x x x x x x x x x
presents part of the solution. NOTE: Each correct selection is worth one
x x x x x x x x x x x x
point. x
,A. Allow inbound TCP port 8080 to the domain controllers in the Miami
x x x x x x x x x x x x x
office. x
B. Add http://autogon.microsoftazuread-sso.com to the intranet zone of each
x x x x x x x x x
client computer in the Miami office.
x x x x x x
C. Join the client computers in the Miami office to Azure AD.
x x x x x x x x x x x x
D. Install the Active Directory Federation Services (AD FS) role on a domain
x x x x x x x x x x x x x
controller in the Miami Questions & Answers PDF P-16 www.dumpskey.com
x x x x x x x x x x
office. x
E. Install Azure AD Connect on a server in the Miami office and enable Pass-
x x x x x x x x x x x x x x
through Authentication. - correct answer ✔Answer: BE
x x x x x x
B: You can gradually roll out Seamless SSO to your users. You start by adding
x x x x x x x x x x x x x x x
the following Azure AD URL to all or selected users' Intranet zone settings by
x x x x x x x x x x x x x x
using Group Policy in Active Directory: https://autologon.microsoftazuread-
x x x x x x
sso.com x
E: Seamless SSO works with any method of cloud authentication - Password
x x x x x x x x x x x x
Hash Synchronization or Pass-through Authentication, and can be enabled via
x x x x x x x x x x
Azure AD Connect. x x
Scenario: Licensing Issue x x x
1. You attempt to assign a license in Azure to several users and receive the
x x x x x x x x x x x x x x x
following error message: "Licenses not assigned. License agreement failed for
x x x x x x x x x x
one user."x x
,2. You verify that the Azure subscription has the available licenses.
x x x x x x x x x x
You need to resolve the licensing issue before you attempt to assign the
x x x x x x x x x x x x x
license again. What should you do?
x x x x x x
A. From the Groups blade, invite the user accounts to a new group.
x x x x x x x x x x x x x
B. From the Profile blade, modify the usage location.
x x x x x x x x x
C. From the Directory role blade, modify the directory role. - correct answer
x x x x x x x x x x x x x
✔Answer: B x
Explanation: Some Microsoft services aren't available in all locations because
x x x x x x x x x x
of local laws and regulations. Before you can assign a license to a user, you
x x x x x x x x x x x x x x x
must specify the Usage location property for the user. You can specify the
x x x x x x x x x x x x x
location under the User > Profile > Settings section in the Azure portal.
x x x x x x x x x x x x
You have an azure subscription named Subscription that contains the
x x x x x x x x x x
resource groups shown in the following table.
x x x x x x x
RG1 - East Asia
x x x
RG2 - East US
x x x
In RG1, you create a virtual machine named VM1 in the East Asia location.
x x x x x x x x x x x x x x
You plan to create a virtual network named VNET1. You need to create VNET,
x x x x x x x x x x x x x
xand then connect VM1 to VNET1. What are two possible ways to achieve
x x x x x x x x x x x x x
this goal? Each correct answer presents a complete a solution. NOTE: Each
x x x x x x x x x x x x
correct selection is worth one point.
x x x x x x
A. Create VNET1 in RG2, and then set East Asia as the location.
x x x x x x x x x x x x x
, B. Create VNET1 in a new resource group in the West US location, and then
x x x x x x x x x x x x x x x
set West US as the location.
x x x x x x
C. Create VNET1 in RG1, and then set East Asia as the location
x x x x x x x x x x x x x
D. Create VNET1 in RG1, and then set East US as the location.
x x x x x x x x x x x x x
E. Create VNET1 in RG2, and then set East US as the location. - correct
x x x x x x x x x x x x x x x
answer ✔Answer: AC x x
A network interface can exist in the same, or different resource group, than
x x x x x x x x x x x x x
the virtual machine you attach it to, or the virtual network you connect it to.
x x x x x x x x x x x x x x x
The virtual machine you attach a network interface to and the virtual
x x x x x x x x x x x x
network you connect it to must exist in the same location, also referred to as
x x x x x x x x x x x x x x
xa region. Note, Resource groups can span multiple Regions, but VNets only
x x x x x x x x x x x x
can hold resources (VMs, Network Adapters) that exists in the same region.
x x x x x x x x x x x x
So in this scenario, you need to create VNET1 in any RG and set location as
x x x x x x x x x x x x x x x x
East Asia. x
You have an Azure subscription that contains a storage account named
x x x x x x x x x x x
account1. You plan to upload the disk files of a virtual machine to account1
x x x x x x x x x x x x x x
from your on-premises network. The on-premises network uses a public IP
x x x x x x x x x x x
address space of 131.107.1.0/24. You plan to use the disk files to provision
x x x x x x x x x x x x x
an Azure virtual machine named VM1. VM1 will be attached to a virtual
x x x x x x x x x x x x x
network named VNet1. VNet1 uses an IP address space of 192.168.0.0/24.
x x x x x x x x x x x
You need to configure account1 to meet the following requirements: Ensure
x x x x x x x x x x x
that you can upload the disk files to account1. Ensure that you can attach the
x x x x x x x x x x x x x x
xdisks to VM1. Prevent all other access to account1. Which two actions
x x x x x x x x x x x x
should you perform? Each correct selection presents part of the solution.
x x x x x x x x x x x
NOTE: Each correct selection is worth one point.
x x x x x x x
A. From the Firewalls and virtual networks blade of account1, add the
x x x x x x x x x x x x
131.107.1.0/24 IP address range. x x x x
