az-104-test

You have an Azure subscription that contains the following users in an Azure Active Directory tenant named contoso.onmicrosoft.com: User1 creates a new Azure Active Directory tenant named external.contoso.onmicrosoft.com. You need to create new user accounts in external.contoso.onmicrosoft.com. Solution: You instruct User2 to create the user accounts. Does that meet the goal?. Yes. No.

You have an Azure subscription that contains the following users in an Azure Active Directory tenant named contoso.onmicrosoft.com: User1 creates a new Azure Active Directory tenant named external.contoso.onmicrosoft.com. You need to create new user accounts in external.contoso.onmicrosoft.com. Solution: You instruct User4 to create the user accounts. Does that meet the goal?. Yes. No.

You have an Azure subscription that contains the following users in an Azure Active Directory tenant named contoso.onmicrosoft.com: User1 creates a new Azure Active Directory tenant named external.contoso.onmicrosoft.com. You need to create new user accounts in external.contoso.onmicrosoft.com. Solution: You instruct User3 to create the user accounts. Does that meet the goal?. Yes. No.

You have an Azure subscription that contains an Azure Active Directory (Azure AD) tenant named contoso.com and an Azure Kubernetes Service (AKS) cluster named AKS1. An administrator reports that she is unable to grant access to AKS1 to the users in contoso.com. You need to ensure that access to AKS1 can be granted to the contoso.com users. What should you do first?. From contoso.com, modify the Organization relationships settings. From contoso.com, create an OAuth 2.0 authorization endpoint. Recreate AKS1. From AKS1, create a namespace.

You have an on-premises server that contains a folder named D:\Folder1. You need to copy the contents of D:\Folder1 to the public container in an Azure Storage account named contosodata. Wich command should you run?. https://contosodata.blob.core.windows.net/public. azcopy sync D:\folder1 https://contosodata.blob.core.windows.net/public --snapshot. azcopy copy D:\folder1 https://contosodata.blob.core.windows.net/public --recursive. az storage blob copy start-batch D:\Folder1 https://contosodata.blob.core.windows.net/public.

You have an Azure subscription named Subscription1 that contains the storage accounts shown in the table. You plan to use the Azure Import/Export service to export data from Subscription1. You need to identify which storage account can be used to export the data. What should you identify?. storage1. storage2. storage3. storage4.

You have Azure subscription that includes data in following locations: You plan to export data by using Azure import/export job named Export1. You need to identify the data that can be exported by using Export1. Which data should you identify?. DB1. container1. share1. Table1.

Scenario: There are three application tiers, each with five virtual machines. Move all the virtual machines for App1 to Azure. Ensure that all the virtual machines for App1 are protected by backups. You need to implement a backup solution for App1 after the application is moved. What should you create first?. a recovery plan. an Azure Backup Server. a backup policy. a Recovery Services vault.

Scenario: Planned Changes include: move the existing product blueprint files to Azure Blob storage. Technical Requirements include: Copy the blueprint files to Azure over the Internet. You need to move the blueprint files to Azure. What should you do?. Use Azure Storage Explorer to copy the files. Generate an access key. Map a drive, and then copy the files by using File Explorer. Use the Azure Import/Export service. Generate a shared access signature (SAS). Map a drive, and then copy the files by using File Explorer.

You have an Azure subscription named Subscription1 that is used by several departments at your company. Subscription1 contains the resources in the following table: Another administrator deploys a virtual machine named VM1 and an Azure Storage account named storage2 by using a single Azure Resource Manager template. You need to view the template used for the deployment. From which blade can you view the template that was used for the deployment?. VM1. RG1. storage2. container1.

You have an Azure web app named App1. App1 has the deployment slots shown in the following table: In webapp1-test, you test several changes to App1. You back up App1. You swap webapp1-test for webapp1-prod and discover that App1 is experiencing performance issues. You need to revert to the previous version of App1 as quickly as possible. What should you do?. Redeploy App1. Swap the slots. Clone App1. Restore the backup of App1.

You have an Azure virtual machine named VM1 that runs Windows Server 2016. You need to create an alert in Azure when more than two error events are logged to the System event log on VM1 within an hour. Solution: 1. You create an Azure Log Analytics workspace and configure the data settings. 2. You add the Microsoft Monitoring Agent VM extension to VM1. 3. You create an alert in Azure Monitor and specify the Log Analytics workspace as the source. Does this meet the goal?. Yes. No.

You discover that VM3 does NOT meet the technical requirements. You need to verify whether the issue relates to the NSGs. What should you use?. IP flow verify in Azure Network Watcher. The security recommendations in Azure Advisor. Diagnose and solve problems in Traffic Manager profiles. Diagnostic settings in Azure Monitor. Diagram in VNet1.

You have an Azure subscription that contains 10 virtual networks. The virtual networks are hosted in separate resource groups. Another administrator plans to create several network security groups (NSGs) in the subscription. You need to ensure that when an NSG is created, it automatically blocks TCP port 8080 between the virtual networks. Solution: You configure a custom policy definition, and then you assign the policy to the subscription. Does this meet the goal?. Yes. No.

You have two Azure virtual networks named VNet1 and VNet2. VNet1 contains an Azure virtual machine named VM1. VNet2 contains an Azure virtual machine named VM2. VM1 hosts a frontend application that connects to VM2 to retrieve data. Users report that the frontend application is slower than usual. You need to view the average round-trip time (RTT) of the packets from VM1 to VM2. Which Azure Network Watcher feature should you use?. Connection monitor. NSG flow logs. Connection troubleshoot. IP flow verify.

Scenario: You have a public-facing application named App1. App1 is comprised of the following three tiers: · A SQL database · A web front end · A processing middle tier Each tier is comprised of five virtual machines. Users access the web front end by using HTTPS only. You are planning the move of App1 to Azure. You create a network security group (NSG). You need to recommend a solution to provide users with access to App1. What should you recommend?. Create an incoming security rule for port 443 from the Internet. Associate the NSG to the subnet that contains the web servers. Create an outgoing security rule for port 443 from the Internet. Associate the NSG to the subnet that contains the web servers. Create an incoming security rule for port 443 from the Internet. Associate the NSG to all the subnets. Create an outgoing security rule for port 443 from the Internet. Associate the NSG to all the subnets.

You have an existing Azure subscription that contains 10 virtual machines. You need to monitor the latency between your on-premises network and the virtual machines. What should you use?. Network Performance Monitor. Service Map. Connection troubleshoot. Effective routes.

You have an Azure subscription that contains the following users in an Azure Active Directory tenant named contoso.onmicrosoft.com: User1 creates a new Azure Active Directory tenant named external.contoso.onmicrosoft.com. You need to create new user accounts in external.contoso.onmicrosoft.com. Solution: You instruct User1 to create the user accounts. Does that meet the goal?. Yes. No.

You have an Azure virtual machine named VM1. Azure collects events from VM1. You are creating an alert rule in Azure Monitor to notify an administrator when an error is logged in the System event log of VM1. Which target resource should you monitor in the alert rule?. Azure Log Analytics workspace. virtual machine extension. virtual machine. metric alert.

Scenario: Ensure Azure Multi-Factor Authentication (MFA) for the users in the finance department only. You need to recommend a solution to automate the configuration for the finance department users. The solution must meet the technical requirements. What should you include in the recommendation?. dynamic groups and conditional access policies. Azure AD B2C. Azure AD Identity Protection. an Azure logic app and the Microsoft Identity Management (MIM) client.