Your success in Microsoft AZ-104 is our sole target and we develop all our AZ-104 braindumps in a way that facilitates the attainment of this target. Not only is our AZ-104 study material the best you can find, it is also the most detailed and the most updated. AZ-104 Practice Exams for Microsoft Microsoft Other Exam AZ-104 are written to the highest standards of technical accuracy.

Also have AZ-104 free dumps questions for you:

NEW QUESTION 1

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure subscription that contains the following resources:
AZ-104 dumps exhibit A virtual network that has a subnet named Subnet1
AZ-104 dumps exhibit Two network security groups (NSGs) named NSG-VM1 and NSG-Subnet1
AZ-104 dumps exhibit A virtual machine named VM1 that has the required Windows Server configurations to allow Remote Desktop connections
NSG-Subnet1 has the default inbound security rules only.
NSG-VM1 has the default inbound security rules and the following custom inbound security rule:
AZ-104 dumps exhibit Priority: 100
AZ-104 dumps exhibit Source: Any
AZ-104 dumps exhibit Source port range: *
AZ-104 dumps exhibit Destination: *
AZ-104 dumps exhibit Destination port range: 3389
AZ-104 dumps exhibit Protocol: UDP
AZ-104 dumps exhibit Action: Allow
VM1 connects to Subnet1. NSG1-VM1 is associated to the network interface of VM1. NSG-Subnet1 is associated to Subnet1.
You need to be able to establish Remote Desktop connections from the internet to VM1.
Solution: You add an inbound security rule to NSG-Subnet1 that allows connections from the Internet source to the VirtualNetwork destination for port range 3389 and uses the UDP protocol.
Does this meet the goal?

  • A. Yes
  • B. No

Answer: B

NEW QUESTION 2

You have an Azure subscription that contains a resource group named Test RG. You use TestRG to validate an Azure deployment.
TestRG contains the following resources:
AZ-104 dumps exhibit
You need to delete TestRG.
What should you do first?

  • A. Modify the backup configurations of VM1 and modify the resource lock type of VNET1.
  • B. Turn off VM1 and delete all data in Vault1.
  • C. Remove the resource lock from VNET1 and delete all data in Vault1.
  • D. Turn off VM1 and remove the resource lock from VNET1.

Answer: D

Explanation:
When you want to delete the resource, you first need to remove the lock. References:
https://docs.microsoft.com/sv-se/azure/azure-resource-manager/management/lock-resources

NEW QUESTION 3

You have an Azure policy as shown in the following exhibit.
AZ-104 dumps exhibit
What is the effect of the policy?
Which of the following statements are true?

  • A. You can create Azure SQL servers in ContosoRG1.
  • B. You are prevented from creating Azure SQL servers anywhere in Subscription 1.
  • C. You are prevented from creating Azure SQL Servers in ContosoRG1 only.
  • D. You can create Azure SQL servers in any resource group within Subscription 1.

Answer: A

Explanation:
You are prevented from creating Azure SQL servers anywhere in Subscription 1 with the exception of ContosoRG1

NEW QUESTION 4

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure Active Directory (Azure AD) tenant named Adatum and an Azure Subscription named Subscription1. Adatum contains a group named Developers. Subscription1 contains a resource group named Dev.
You need to provide the Developers group with the ability to create Azure logic apps in the Dev resource group.
Solution: On Dev, you assign the Contributor role to the Developers group. Does this meet the goal?

  • A. Yes
  • B. No

Answer: B

Explanation:
The Logic App Contributor role lets you manage logic app, but not access to them. It provides access to view, edit, and update a logic app.
References:
https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles https://docs.microsoft.com/en-us/azure/logic-apps/logic-apps-securing-a-logic-app

NEW QUESTION 5

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure subscription that contains the following resources:
AZ-104 dumps exhibit A virtual network that has a subnet named Subnet1
AZ-104 dumps exhibit Two network security groups (NSGs) named NSG-VM1 and NSG-Subnet1
AZ-104 dumps exhibit A virtual machine named VM1 that has the required Windows Server configurations to allow Remote Desktop connections
NSG-Subnet1 has the default inbound security rules only.
NSG-VM1 has the default inbound security rules and the following custom inbound security rule:
AZ-104 dumps exhibit Priority: 100
AZ-104 dumps exhibit Source: Any
AZ-104 dumps exhibit Source port range: *
AZ-104 dumps exhibit Destination: *
AZ-104 dumps exhibit Destination port range: 3389
AZ-104 dumps exhibit Protocol: UDP
AZ-104 dumps exhibit Action: Allow
VM1 connects to Subnet1. NSG1-VM1 is associated to the network interface of VM1. NSG-Subnet1 is associated to Subnet1.
You need to be able to establish Remote Desktop connections from the internet to VM1.
Solution: You add an inbound security rule to NSG-Subnet1 and NSG-VM1 that allows connections from the internet source to the VirtualNetwork destination for port range 3389 and uses the TCP protocol.
Does this meet the goal?

  • A. Yes
  • B. No

Answer: A

Explanation:
The default port for RDP is TCP port 3389. A rule to permit RDP traffic must be created automatically when you create your VM.
Note on NSG-Subnet1: Azure routes network traffic between all subnets in a virtual network, by default. References:
https://docs.microsoft.com/en-us/azure/virtual-machines/troubleshooting/troubleshoot-rdp-connection

NEW QUESTION 6

You have an Azure subscription named Subcription1 that contains a resource group named RG1. In RG1. you create an internal load balancer named LB1 and a public load balancer named 162.
You need to ensure that an administrator named Admin 1 can manage LB1 and LB2. The solution must follow the principle of least privilege.
Which role should you assign to Admin1 for each task? To answer, select the appropriate options in the answer area.
NOTE: Caen correct selection is worth one point.
AZ-104 dumps exhibit

  • A. Mastered
  • B. Not Mastered

Answer: A

Explanation:
AZ-104 dumps exhibit

NEW QUESTION 7

You have an Azure Active Directory tenant named Contoso.com that includes following users:
AZ-104 dumps exhibit
Contoso.com includes following Windows 10 devices:
AZ-104 dumps exhibit
You create following security groups in Contoso.com:
AZ-104 dumps exhibit
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
AZ-104 dumps exhibit

  • A. Mastered
  • B. Not Mastered

Answer: A

Explanation:
Box 1: Yes
User1 is a Cloud Device Administrator. Device2 is Azure AD joined.
Group1 has the assigned to join type. User1 is the owner of Group1.
Note: Assigned groups - Manually add users or devices into a static group.
Azure AD joined or hybrid Azure AD joined devices utilize an organizational account in Azure AD Box 2: No
User2 is a User Administrator. Device1 is Azure AD registered.
Group1 has the assigned join type, and the owner is User1.
Note: Azure AD registered devices utilize an account managed by the end user, this account is either a Microsoft account or another locally managed credential.
Box 3: Yes
User2 is a User Administrator. Device2 is Azure AD joined.
Group2 has the Dynamic Device join type, and the owner is User2. References:
https://docs.microsoft.com/en-us/azure/active-directory/devices/overview

NEW QUESTION 8

You have an Azure subscription that contains the following resources:
AZ-104 dumps exhibit 100 Azure virtual machines
AZ-104 dumps exhibit 20 Azure SQL databases
AZ-104 dumps exhibit 50 Azure file shares
You need to create a daily backup of all the resources by using Azure Backup. What is the minimum number of backup policies that you must create?

  • A. 1
  • B. 2
  • C. 3
  • D. 150
  • E. 170

Answer: C

Explanation:
There is a limit of 100 VMs that can be associated to the same backup policy from portal. We recommend that for more than 100 VMs, create multiple backup policies with same schedule or different schedule.
One policy for VMS, one for SQL databases, and one for the file shares. References:
https://docs.microsoft.com/en-us/azure/backup/backup-azure-vm-backup-faq

NEW QUESTION 9

This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure subscription named Subscription1 that contains the resources shown in the following table.
AZ-104 dumps exhibit
VM1 connects to a virtual network named VNET2 by using a network interface named NIC1. You need to create a new network interface named NIC2 for VM1.
Solution: You create NIC2 in RG1 and Central US. Does this meet the goal?

  • A. Yes
  • B. No

Answer: B

Explanation:
The virtual machine you attach a network interface to and the virtual network you connect it to must exist in the same location, here West US, also referred to as a region.
References:
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-network-interface

NEW QUESTION 10

You manage two Azure subscriptions named Subscription1 and Subscription2. Subscription1 has the following virtual networks:
AZ-104 dumps exhibit
The virtual networks contain the following subnets:
AZ-104 dumps exhibit
Subscription2 contains the following virtual network:
AZ-104 dumps exhibit Name: VNETA
AZ-104 dumps exhibit Address space: 10.10.128.0/17
AZ-104 dumps exhibit Location: Canada Central
VNETA contains the following subnets:
AZ-104 dumps exhibit
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
AZ-104 dumps exhibit

  • A. Mastered
  • B. Not Mastered

Answer: A

Explanation:
Box 1: Yes
With VNet-to-VNet you can connect Virtual Networks in Azure across Different regions. Box 2: Yes
Azure supports the following types of peering:
Virtual network peering: Connect virtual networks within the same Azure region. Global virtual network peering: Connecting virtual networks across Azure regions. Box 3: No
The virtual networks you peer must have non-overlapping IP address spaces. References:
https://azure.microsoft.com/en-us/blog/vnet-to-vnet-connecting-virtual-networks-in-azure-across-different-regio https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-manage-peering#requirements-and-cons

NEW QUESTION 11

You have an Azure subscription that contains the following users in an Azure Active Directory tenant named contoso.onmicrosoft.com:
AZ-104 dumps exhibit
User1 creates a new Azure Active Directory tenant named external.contoso.onmicrosoft.com. You need to create new user accounts in external.contoso.com.onmicrosoft.com.
Solution: You instruct User1 to create the user accounts.

  • A. Yes
  • B. No

Answer: A

Explanation:
Only a global administrator can add users to this tenant. References:
https://docs.microsoft.com/en-us/azure/devops/organizations/accounts/add-users-to-azure-ad

NEW QUESTION 12

You have an Azure subscription that contains the resources in the following table.
AZ-104 dumps exhibit
VM1 and VM2 are deployed from the same template and host line-of-business applications accessed by using Remote Desktop. You configure the network security group (NSG) shown in the exhibit. (Click the Exhibit button.)
AZ-104 dumps exhibit
You need to prevent users of VM1 and VM2 from accessing websites on the Internet.
What should you do?

  • A. Associate the NSG to Subnet1.
  • B. Disassociate the NSG from a network interface.
  • C. Change the DenyWebSites outbound security rule.
  • D. Change the Port_80 inbound security rule.

Answer: A

Explanation:
You can associate or dissociate a network security group from a network interface or subnet.
The NSG has the appropriate rule to block users from accessing the Internet. We just need to associate it with Subnet1.
References: https://docs.microsoft.com/en-us/azure/virtual-network/manage-network-security-group

NEW QUESTION 13

You plan to deploy five virtual machines to a virtual network subnet.
Each virtual machine will have a public IP address and a private IP address. Each virtual machine requires the same inbound and outbound security rules.
What is the minimum number of network interfaces and network security groups that you require? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
AZ-104 dumps exhibit

  • A. Mastered
  • B. Not Mastered

Answer: A

Explanation:
Box 1: 10
One public and one private network interface for each of the five VMs. Box 2: 1
You can associate zero, or one, network security group to each virtual network subnet and network interface in a virtual machine. The same network security group can be associated to as many subnets and network interfaces as you choose.
References:
https://docs.microsoft.com/en-us/azure/virtual-network/security-overview

NEW QUESTION 14

You have Azure virtual machines that run Windows Server 2019 and are configured as shown in the following table.
AZ-104 dumps exhibit
You create a public Azure DNS zone named adatum.com and a private Azure DNS zone named contoso.com.
For contoso.com, you create a virtual network link named link1 as shown in the exhibit. (Click the Exhibit tab.)
AZ-104 dumps exhibit
You discover that VM1 can resolve names in contoso.com but cannot resolve names in adatum.com.
VM1 can resolve other hosts on the internet.
You need to ensure that VM1 can resolve host names in adatum.com. What should you do?

  • A. Update the DNS suffix on VM1 to be adatum.com.
  • B. Create an SRV record in the contoso.com zone.
  • C. Configure the name servers for adatum.com at the domain registrar.
  • D. Modify the Access control (IAM) settings for link1.

Answer: D

NEW QUESTION 15

You create an Azure VM named VM1 that runs Windows Server 2019. VM1 is configured as shown in the exhibit. (Click the Exhibit button.)
AZ-104 dumps exhibit
You need to enable Desired State Configuration for VM1. What should you do first?

  • A. Configure a DNS name for VM1.
  • B. Start VM1.
  • C. Connect to VM1.
  • D. Capture a snapshot of VM1.

Answer: B

Explanation:
Status is Stopped (Deallocated).
The DSC extension for Windows requires that the target virtual machine is able to communicate with Azure. The VM needs to be started.
References:
https://docs.microsoft.com/en-us/azure/virtual-machines/extensions/dsc-windows

NEW QUESTION 16

You have an Azure Active Directory (Azure AD) tenant named contoso.com. Multi-factor authentication (MFA) is enabled for all users.
You need to provide users with the ability to bypass MFA for 10 days on devices to which they have successfully signed in by using MFA.
What should you do?

  • A. From the multi-factor authentication page, configure the users’ settings.
  • B. From Azure AD, create a conditional access policy.
  • C. From the multi-factor authentication page, configure the service settings.
  • D. From the MFA blade in Azure AD, configure the MFA Server settings.

Answer: C

Explanation:
Enable remember Multi-Factor Authentication
AZ-104 dumps exhibit Sign in to the Azure portal.
AZ-104 dumps exhibit On the left, select Azure Active Directory > Users.
AZ-104 dumps exhibit Select Multi-Factor Authentication.
AZ-104 dumps exhibit Under Multi-Factor Authentication, select service settings.
AZ-104 dumps exhibit On the Service Settings page, manage remember multi-factor authentication, select the Allow users to remember multi-factor authentication on devices they trust option.
AZ-104 dumps exhibitSelect Save.
References:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-mfasettings

NEW QUESTION 17

You have an Azure subscription that contains the public load balancers shown in the following table.
AZ-104 dumps exhibit
You plan to create six virtual machines and to load balancer requests to the virtual machines. Each load balancer will load balance three virtual machines.
You need to create the virtual machines for the planned solution.
How should you create the virtual machines? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
AZ-104 dumps exhibit

  • A. Mastered
  • B. Not Mastered

Answer: A

Explanation:
Box 1: be created in the same availability set or virtual machine scale set.
The Basic tier is quite restrictive. A load balancer is restricted to a single availability set, virtual machine scale set, or a single machine.
Box 2: be connected to the same virtual network
The Standard tier can span any virtual machine in a single virtual network, including blends of scale sets, availability sets, and machines.
References:
https://www.petri.com/comparing-basic-standard-azure-load-balancers

NEW QUESTION 18

You have an Azure subscription that contains the following users in an Azure Active Directory tenant named contoso.onmicrosoft.com:
AZ-104 dumps exhibit
User1 creates a new Azure Active Directory tenant named external.contoso.onmicrosoft.com. You need to create new user accounts in external.contoso.com.onmicrosoft.com.
Solution: You instruct User3 to create the user accounts.

  • A. Yes
  • B. No

Answer: B

Explanation:
Only a global administrator can add users to this tenant.
References:
https://docs.microsoft.com/en-us/azure/devops/organizations/accounts/add-users-to-azure-ad

NEW QUESTION 19

You have an Azure subscription that contains the resources shown in the following table.
AZ-104 dumps exhibit
All virtual machines run Windows Server 2016.
On VM1, you back up a folder named Folder1 as shown in the following exhibit.
AZ-104 dumps exhibit
You plan to restore the backup to a different virtual machine. You need to restore the backup to VM2.
What should you do first?

  • A. From VM2, install the Microsoft Azure Recovery Services Agent
  • B. From VM1, install the Windows Server Backup feature
  • C. From VM2, install the Windows Server Backup feature
  • D. From VM1, install the Microsoft Azure Recovery Services Agent

Answer: A

Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/backup/backup-azure-restore-windows-server

NEW QUESTION 20

You have an Azure Active Directory (Azure AD) tenant named contoso.com that is synced to an Active Directory domain. The tenant contains the users shown in the following table.
AZ-104 dumps exhibit
The users have the attributes shown in the following table.
AZ-104 dumps exhibit
You need to ensure that you can enable Azure Multi-Factor Authentication (MFA) for all four users. Solution: You add an office phone number for User2.
Does this meet the goal?

  • A. Yes
  • B. No

Answer: B

Explanation:
User3 requires a user account in Azure AD.
Note: Your Azure AD password is considered an authentication method. It is the one method that cannot be disabled.
References:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-authentication-methods

NEW QUESTION 21

You have an Azure subscription that contains an Azure Storage account.
You plan to copy an on-premises virtual machine image to a container named vmimages. You need to create the container for the planned image.
Which command should you run? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
AZ-104 dumps exhibit

  • A. Mastered
  • B. Not Mastered

Answer: A

Explanation:
azcopy make 'https://<storage-account-name>.file.core.windows.net/<file-share-name><SAS-token>'

NEW QUESTION 22

You create an App Service plan named App1 and an Azure web app named webapp1. You discover that the option to create a staging slot is unavailable. You need to create a staging slot for App1.
What should you do first?

  • A. From webapp1, modify the Application settings.
  • B. From webapp1, add a custom domain.
  • C. From App1, scale up the App Service plan.
  • D. From App1, scale out the App Service plan.

Answer: C

Explanation:
https://docs.microsoft.com/en-us/azure/app-service/manage-scale-up

NEW QUESTION 23

You have an Azure Active Directory (Azure AD) tenant named adatum.com that contains the users shown in the following table.
AZ-104 dumps exhibit
Adatum.com has the following configurations: Users may join devices to Azure AD is set to User1.
Additional local administrators on Azure AD joined devices is set to None.
You deploy Windows 10 to a computer named Computer. User1 joins Computer1 to adatum.com. You need to identify which users are added to the local Administrators group on Computer1.

  • A. User1 only
  • B. User1, User2, and User3 only
  • C. User1 and User2 only
  • D. User1, User2, User3, and User4
  • E. User2 only

Answer: C

Explanation:
Users may join devices to Azure AD - This setting enables you to select the users who can register their devices as Azure AD joined devices. The default is All.
Additional local administrators on Azure AD joined devices - You can select the users that are granted local administrator rights on a device. Users added here are added to the Device Administrators role in Azure AD. Global administrators, here User2, in Azure AD and device owners are granted local administrator rights by default.
References:
https://docs.microsoft.com/en-us/azure/active-directory/devices/device-management-azure-portal

NEW QUESTION 24

You need to resolve the licensing issue before you attempt to assign the license again. What should you do?

  • A. From the Groups blade, invite the user accounts to a new group.
  • B. From the Profile blade, modify the usage location.
  • C. From the Directory role blade, modify the directory role.

Answer: A

Explanation:
License cannot be assigned to a user without a usage location specified. Scenario: Licensing Issue
You attempt to assign a license in Azure to several users and receive the following error message: "Licenses not assigned. License agreement failed for one user."
You verify that the Azure subscription has the available licenses.

NEW QUESTION 25
......

Thanks for reading the newest AZ-104 exam dumps! We recommend you to try the PREMIUM Certstest AZ-104 dumps in VCE and PDF here: https://www.certstest.com/dumps/AZ-104/ (0 Q&As Dumps)