Microsoft (AZ-104) Exam Questions And Answers page 1

Correct Answer:

• Create an NS record named research in the adatum.com zone.

Explanation:

References:

• https://docs.microsoft.com/en-us/azure/dns/delegate-subdomain

Correct Answers:

• Enable Azure Network Watcher in the East US Azure region.
• Register the Microsoft.Insights resource provider.
• Enable Azure Network Watcher flow logs.

Explanation:

References:

• https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-nsg-flow-logging-portal

Explanation:

Box 1: Create a virtual network gateway and a local network gateway.
Azure VPN gateway. The VPN gateway service enables you to connect the VNet to the on-premises network through a VPN appliance. For more information, see Connect an on-premises network to a Microsoft Azure virtual network. The VPN gateway includes the following elements:
• Virtual network gateway. A resource that provides a virtual VPN appliance for the VNet. It is responsible for routing traffic from the on-premises network to the VNet.
• Local network gateway. An abstraction of the on-premises VPN appliance. Network traffic from the cloud application to the on-premises network is routed through this gateway.
• Connection. The connection has properties that specify the connection type (IPSec) and the key shared with the on-premises VPN appliance to encrypt traffic.
• Gateway subnet. The virtual network gateway is held in its own subnet, which is subject to various requirements, described in the Recommendations section below.

Box 2: Configure a site-to-site VPN connection
On premises create a site-to-site connection for the virtual network gateway and the local network gateway.


Scenario: Connect the New York office to VNet1 over the Internet by using an encrypted connection.

Incorrect Answers:
Azure ExpressRoute: Established between your network and Azure, through an ExpressRoute partner. This connection is private. Traffic does not go over the internet.

References:

• https://wtmstorage.blob.core.windows.net/question-answers-images/microsoft/az-104-microsoft-azure-administrator/14012024-jkhsbb1vows/question_answer_1.jpg
• https://docs.microsoft.com/en-us/azure/architecture/reference-architectures/hybrid-networking/vpn

Correct Answer:

• No

Explanation:

References:

• https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-network-interface

Correct Answer:

• Max Value

Explanation:

References:

• https://docs.microsoft.com/en-us/azure/virtual-machines/windows/manage-availability

Correct Answer:

• Azure Custom Script Extension

Explanation:

Correct Answers:

• a PowerShell PS1 file
• a driveset CSV file

Explanation:

References:

• https://docs.microsoft.com/en-us/azure/storage/common/storage-import-export-data-to-files

Correct Answer:

• Assign the Owner role for the Azure subscription to User1, and then instruct User1 to configure access management for Azure resources.

Explanation:

The following chart shows the list of roles and the supported actions on management groups.

Note:
Each directory is given a single top-level management group called the "Root" management group. This root management group is built into the hierarchy to have all management groups and subscriptions fold up to it. This root management group allows for global policies and Azure role assignments to be applied at the directory level. The Azure AD Global Administrator needs to elevate themselves to the User Access Administrator role of this root group initially. After elevating access, the administrator can assign any Azure role to other directory users or groups to manage the hierarchy. As administrator, you can assign your own account as owner of the root management group.

References:

• https://docs.microsoft.com/en-us/azure/governance/management-groups/overview

Explanation:

References:

• https://docs.microsoft.com/en-us/azure/storage/common/storage-redundancy
• https://docs.microsoft.com/en-us/azure/storage/common/storage-redundancy-zrs