Microsoft (AZ-104) Exam Questions And Answers page 30
You have an Azure virtual machine named VM1 that connects to a virtual network named VNet1. VM1 has the following configurations:
• Subnet: 10.0.0.0/24
• Availability set: AVSet
• Network security group (NSG): None
• Private IP address: 10.0.0.4 (dynamic)
• Public IP address: 40.90.219.6 (dynamic)
You deploy a standard, Internet-facing load balancer named slb1.
You need to configure slb1 to allow connectivity to VM1.
Which changes should you apply to VM1 as you configure slb1? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
• Subnet: 10.0.0.0/24
• Availability set: AVSet
• Network security group (NSG): None
• Private IP address: 10.0.0.4 (dynamic)
• Public IP address: 40.90.219.6 (dynamic)
You deploy a standard, Internet-facing load balancer named slb1.
You need to configure slb1 to allow connectivity to VM1.
Which changes should you apply to VM1 as you configure slb1? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Deploy and manage virtual machines (VMs)
Configure and manage virtual networks in Azure
What is the impact of the Azure policy?
Single Choice
You have an Azure policy as shown in the following exhibit:
What is the effect of the policy?
What is the effect of the policy?
You can create Azure SQL servers in ContosoRG1 only.
You are prevented from creating Azure SQL Servers in ContosoRG1 only.
You can create Azure SQL servers in any resource group within Subscription 1.
Implement and manage storage
Configure and manage virtual networks in Azure
You have an Azure subscription.
You create the Azure Storage account shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
You create the Azure Storage account shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Implement and manage storage
Implement and manage storage in Azure
You have an Azure Storage account named storage1.
You have an Azure App Service app named App1 and an app named App2 that runs in an Azure container instance. Each app uses a managed identity.
You need to ensure that App1 and App2 can read blobs from storage1. The solution must meet the following requirements:
• Minimize the number of secrets used.
• Ensure that App2 can only read from storage1 for the next 30 days.
What should you configure in storage1 for each app? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
You have an Azure App Service app named App1 and an app named App2 that runs in an Azure container instance. Each app uses a managed identity.
You need to ensure that App1 and App2 can read blobs from storage1. The solution must meet the following requirements:
• Minimize the number of secrets used.
• Ensure that App2 can only read from storage1 for the next 30 days.
What should you configure in storage1 for each app? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Manage identities and governance in Azure
Implement and manage storage in Azure
You have an Azure virtual machine that runs Windows Server 2019 and has the following configurations:
• Name: VM1
• Location: West US
• Connected to: VNET1
• Private IP address: 10.1.0.4
• Public IP addresses: 52.186.85.63
• DNS suffix in Windows Server: Adatum.com
You create the Azure DNS zones shown in the following table.
You need to identify which DNS zones you can link to VNET1 and the DNS zones to which VM1 can automatically register.
Which zones should you identify? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
• Name: VM1
• Location: West US
• Connected to: VNET1
• Private IP address: 10.1.0.4
• Public IP addresses: 52.186.85.63
• DNS suffix in Windows Server: Adatum.com
You create the Azure DNS zones shown in the following table.
You need to identify which DNS zones you can link to VNET1 and the DNS zones to which VM1 can automatically register.
Which zones should you identify? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Configure and manage virtual networks
Deploy and manage virtual machines (VMs) in Azure
Your on-premises network contains an SMB share named Share1.
You have an Azure subscription that contains the following resources:
• A web app named webapp1
• A virtual network named VNET1
You need to ensure that webapp1 can connect to Share1.
What should you deploy?
You have an Azure subscription that contains the following resources:
• A web app named webapp1
• A virtual network named VNET1
You need to ensure that webapp1 can connect to Share1.
What should you deploy?
an Azure Application Gateway
an Azure Active Directory (Azure AD) Application Proxy
an Azure Virtual Network Gateway
Implement and manage storage
Configure and manage virtual networks in Azure
You have a pay-as-you-go Azure subscription that contains the virtual machines shown in the following table.
You create the budget shown in the following exhibit.
The AG1 action group contains a user named [email protected] only.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
You create the budget shown in the following exhibit.
The AG1 action group contains a user named [email protected] only.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
Monitor and back up Azure resources
Deploy and manage virtual machines (VMs) in Azure
You have an Azure subscription that contains the virtual networks shown in the following table.
You have the virtual machines shown in the following table.
You have the virtual network interfaces shown in the following table.
Server1 is a DNS server that contains the resources shown in the following table.
You have an Azure private DNS zone named contoso.com that has a virtual network link to VNET2 and the records shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
You have the virtual machines shown in the following table.
You have the virtual network interfaces shown in the following table.
Server1 is a DNS server that contains the resources shown in the following table.
You have an Azure private DNS zone named contoso.com that has a virtual network link to VNET2 and the records shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Manage identities and governance in Azure
Configure and manage virtual networks in Azure
You have an Azure subscription named Subscription1 that has a subscription ID of c276fc76-9cd4-44c9-99a7-4fd71546436e.
You need to create a custom RBAC role named CR1 that meets the following requirements:
• Can be assigned only to the resource groups in Subscription1
• Prevents the management of the access permissions for the resource groups
• Allows the viewing, creating, modifying, and deleting of resources within the resource groups
What should you specify in the assignable scopes and the permission elements of the definition of CR1? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
You need to create a custom RBAC role named CR1 that meets the following requirements:
• Can be assigned only to the resource groups in Subscription1
• Prevents the management of the access permissions for the resource groups
• Allows the viewing, creating, modifying, and deleting of resources within the resource groups
What should you specify in the assignable scopes and the permission elements of the definition of CR1? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Implement and manage storage
Manage identities and governance in Azure
You have Azure Storage accounts as shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Implement and manage storage
Comments