Professional Documents
Culture Documents
Azure Exam Latest 104
Azure Exam Latest 104
Contoso purchases a company named A. Datum Corporation. A. Datum has an Azure subscription that
contains an Azure AD tenant named adatum.com. Adatum.com contains the following virtual
networks:
Question 2 of 28
You have an Azure virtual machine named VM1 that connects to a virtual network named VNET1.
You create a private DNS zone named contoso.com and add an A record named host1 to the zone.
Q3. You have the following Azure virtual machines that run Windows Server 2019:
You create a private DNS zone named fabrikam.com and add the following virtual network links to
fabrikam.com:
Question 4 of 28
VM1- a virtual machine that runs Microsoft SQL Server and is deployed in the West US location
VM2- a virtual machine that runs Microsoft SQL Server and is deployed in the East US location
SQL1- an Azure SQL Server deployed to the West US location
Vault1- a Recovery Services vault deployed to the West US location
Question 5 of 28
You have a Recovery Services vault named Recovery1 that includes a backup policy named Policy1.
Question 6 of 28
You have an Azure virtual machine named Computer5 and a Recovery Services vault named Vault5.
Computer5 contains the following data disks:
Question 7 of 28
On January 1, you configure backups for VM1 by using the following backup policy:
Frequency: Daily
Time: 23:00
Timezone: (UTC) Coordinated Universal Time
Retain instant recovery snapshot(s) for: 2 Day(s)
Retention of daily backup point: 7 Day(s)
Azure Backup Resource Group: Backup1RG
How many restore point collections recovery points will be stored in Backup1RG on January 10?
Question 8 of 28
The subscription contains a virtual network named VirtualNet4 that has the following subnets:
Question 9 of 28
You have a Docker image named Image1 that contains a corporate app.
You need to deploy Image1 to Azure and make the app accessible to users.
Which two Azure services should you deploy? Each correct answer presents complete solution.
Question 11 of 28
You need to ensure that a user named Admin1 can create access reviews. The solution must use the
principle of least privilege.
Question 12 of 28
You have an Azure Active Directory (Azure AD) tenant that contains the following users:
You create a group named Group1 that has the following dynamic membership rule.
Question 13 of 28
You have an Azure Active Directory (Azure AD) tenant that contains a group named Group1 that has
the following users:
User1- Member
User2- Member
User3- Guest
The users provide the following responses to the Do you require membership in Group1? access
review question:
User1: No
User2: Yes
User3: did not answer
Question 15 of 28
You have an Azure Storage account named storage1 that contains a file share named share1.
You also have an on-premises Active Directory domain that contains a user named User1.
You need to ensure that User1 can access share1 by using the SMB protocol.
Question 16 of 28
Question 17 of 28
You have an Azure Storage account named storage1 that is configured to use the Hot access tier.
Storage1 has a container named container1 and the lifecycle management rule with following settings:
On December 10, you rehydrate File1 and move the file to the Hot access tier.
Question 18 of 28
You have an Azure virtual machine named VM1 that connects to a virtual network named VNET1.
A network security group (NSG) named NSG1 allows connections to VM1 from VNET1 only.
You need to add an inbound security rule to NSG1 that meets the following requirements:
Question 19 of 28
You have an Azure subscription that contains a storage account named storage1 and the following
virtual machines:
Storage1 has a firewall configured to allow access from the 13.68.158.0/24 IP address range only.
Question 20 of 28
You have an Azure virtual network named VNET1 has and a network security group (NSG) named
NSG1. NSG1 has the following inbound security rules:
Rule1 has a priority of 100 and allows port 3389 on TCP protocol from any source and to any
destination
Rule2 has a priority of 200 and allows ports 80 and 8080 on UDP protocol from any source and
to any destination
Rule3 has a priority of 300 and denies ports 1-2000 on TCP protocol from any source and to
any destination
Rule4 has a priority of 400 and allows ports 50-500 on TCP protocol from VirtualNetwork
source and to any destination
Rule5 has a priority of 500 and allows ports 80 and 443 on TCP protocol from any source and to
any destination
You need to allow http and https connections from the internet to VNET1.
Question 21 of 28
You have an Azure subscription that contains a virtual network named VNET1. VNET1 uses the
following address spaces:
10.10.1.0/24
10.10.2.0/28
To Subnet1, you deploy a virtual machine named VM1 that runs Windows Server 2019. VM1 has
Remote Desktop enabled.
You need to be able to deploy Azure Bastion, and then protect VM1.
Question 23 of 28
You have an Azure Kubernetes Service (AKS) cluster named AKS1 that runs Kubernetes version 1.16.10.
You need to ensure that you can run a Windows Server container in AKS1.
Question 24 of 28
You have an Azure subscription that contains an Azure container registry named Contoso2020.
You plan to create an Azure Kubernetes Service (AKS) cluster named AKS1 that has the following
settings:
You need to ensure that you can integrate AKS1 and Contoso2020.
Which AKS1 settings should you modify?
Question 25 of 28
You need to ensure that WebApp1 can access KeyVault1 by using Azure Active Directory (Azure AD)
authentication.
Which two settings can be used to configure WebApp1? Each correct answer presents a complete
solution.
Question 26 of 28
You plan to deploy an Azure web app that will have the following settings:
Name: WebApp1
Publish: Docker container
Operating system: Windows
Region: West US
Windows Plan (West US): ASP-RG1-8bcf
You need to ensure that WebApp1 uses the ASP.NET v4.7 runtime stack.
Question 27 of 28