Exam Logo

Microsoft (AZ-104) Exam Questions And Answers page 48

You have an Azure subscription named Subscription1 that contains the following resource group:

• Name: RG1
• Region: West US
• Tag: tag1 : value1

You assign an Azure policy named Policy1 to Subscription1 by using the following configurations:

• Exclusions: None
• Policy definition: Append a tag and its value to resources
• Assignment name: Policy1
• Parameters:
• Tag name: tag2
• Tag value: value2

After Policy1 is assigned, you create a storage account that has the following configuration:

• Name: storage1
• Location: West US
• Resource group: RG1
• Tags: tag3 : value3

You need to identify which tags are assigned to each resource.

What should you identify? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Monitor and back up Azure resources Manage identities and governance in Azure
You plan to deploy an Azure container instance by using the following Azure Resource Manager template.


Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the template.

Deploy and manage virtual machines (VMs) Deploy and manage virtual machines (VMs) in Azure
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You manage a virtual network named VNet1 that is hosted in the West US Azure region.

VNet1 hosts two virtual machines named VM1 and VM2 that run Windows Server.

You need to inspect all the network traffic from VM1 to VM2 for a period of three hours.

Solution: From Azure Network Watcher, you create a connection monitor.

Does this meet the goal?
Monitor and back up Azure resources Configure and manage virtual networks in Azure
You have an Azure subscription that contains an Azure file share.

You have an on-premises server named Server1 that runs Windows Server 2016.

You plan to set up Azure File Sync between Server1 and the Azure file share.

You need to prepare the subscription for the planned Azure File Sync.

Which two actions should you perform in the Azure subscription? To answer, drag the appropriate actions to the correct targets. Each action may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Manage identities and governance in Azure Implement and manage storage in Azure
You have an Azure subscription that contains the resources shown in the following table.


You need to create a network interface named NIC1.

In which location can you create NIC1?
Configure and manage virtual networks in Azure
You have an Azure subscription that contains three virtual networks named VNET1, VNET2, and VNET3.

Peering for VNET1 is configured as shown in the following exhibit.


Peering for VNET2 is configured as shown in the following exhibit.


Peering for VNET3 is configured as shown in the following exhibit.


How can packets be routed between the virtual networks? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Configure and manage virtual networks in Azure
You have an Azure subscription that contains 100 virtual machines.

You regularly create and delete virtual machines.

You need to identify unattached disks that can be deleted.

What should you do?
Implement and manage storage Deploy and manage virtual machines (VMs) in Azure
You onboard 10 Azure virtual machines to Azure Automation State Configuration.

You need to use Azure Automation State Configuration to manage the ongoing consistency of the virtual machine configurations.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

NOTE: More than one order of answer choices is correct. You will receive credit for any of the correct orders you select.

Monitor and back up Azure resources Deploy and manage virtual machines (VMs) in Azure
You have five Azure virtual machines that run Windows Server 2016. The virtual machines are configured as web servers.

You have an Azure load balancer named LB1 that provides load balancing services for the virtual machines.

You need to ensure that visitors are serviced by the same web server for each request.

What should you configure?
Deploy and manage virtual machines (VMs) in Azure Monitor and back up Azure resources
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure subscription that contains the following resources:

• A virtual network that has a subnet named Subnet1
• Two network security groups (NSGs) named NSG-VM1 and NSG-Subnet1
• A virtual machine named VM1 that has the required Windows Server configurations to allow Remote Desktop connections

NSG-Subnet1 has the default inbound security rules only.

NSG-VM1 has the default inbound security rules and the following custom inbound security rule:

• Priority: 100
• Source: Any
• Source port range: *
• Destination: *
• Destination port range: 3389
• Protocol: UDP
• Action: Allow

VM1 has a public IP address and is connected to Subnet1. NSG-VM1 is associated to the network interface of VM1. NSG-Subnet1 is associated to Subnet1.

You need to be able to establish Remote Desktop connections from the internet to VM1.

Solution: You add an inbound security rule to NSG-Subnet1 that allows connections from the Any source to the *destination for port range 3389 and uses the TCP protocol. You remove NSG-VM1 from the network interface of VM1.

Does this meet the goal?
Deploy and manage virtual machines (VMs) Configure and manage virtual networks in Azure