Practice Mode

AZ-104

Loading...

AZ-104 — 20 free practice questions

Preview the exam for free. Unlock all 579 questions →

Question 1

Your company has serval departments. Each department has a number of virtual machines (VMs). The company has an Azure subscription that contains a resource group named RG1. All VMs are located in RG1. You want to associate each VM with its respective department. What should you do? Options: A. Create Azure Management Groups for each department. B. Create a resource group for each department. C. Assign tags to the virtual machines. D. Modify the settings of the virtual machines.
  • A. Create Azure Management Groups for each department.
  • B. Create a resource group for each department.
  • C. Assign tags to the virtual machines. Correct
  • D. Modify the settings of the virtual machines.

Explanation

Assigning tags to the virtual machines allows each VM to be associated with its respective department without altering existing resource group structures or creating new management groups. This method provides a clear and efficient way to categorize resources within Azure.

Question 2

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. Your company has an Azure Active Directory (Azure AD) subscription. You want to implement an Azure AD conditional access policy. The policy must be configured to require members of the Global Administrators group to use Multi-Factor Authentication and an Azure AD-joined device when they connect to Azure AD from untrusted locations. Solution: You access the multi-factor authentication page to alter the user settings. Does the solution meet the goal? Options: A. Yes B. No
  • A. Yes
  • B. No Correct

Explanation

The solution does not meet the goal because it only mentions altering user settings for multi-factor authentication. To fulfill the requirements, a Conditional Access policy must be created that specifically targets the Global Administrators group and enforces both Multi-Factor Authentication and use of an Azure AD-joined device from untrusted locations.

Question 3

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. Your company has an Azure Active Directory (Azure AD) subscription. You want to implement an Azure AD conditional access policy. The policy must be configured to require members of the Global Administrators group to use Multi-Factor Authentication and an Azure AD-joined device when they connect to Azure AD from untrusted locations. Solution: You access the Azure portal to alter the session control of the Azure AD conditional access policy. Does the solution meet the goal? Options: A. Yes B. No
  • A. Yes
  • B. No Correct

Explanation

The solution does not meet the goal because altering session control alone in Azure AD conditional access policy cannot enforce Multi-Factor Authentication and require an Azure AD-joined device. Specific conditions and controls must be configured under Access Controls to achieve these requirements.

Question 4

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. Your company has an Azure Active Directory (Azure AD) subscription. You want to implement an Azure AD conditional access policy. The policy must be configured to require members of the Global Administrators group to use Multi-Factor Authentication and an Azure AD-joined device when they connect to Azure AD from untrusted locations. Solution: You access the Azure portal to alter the grant control of the Azure AD conditional access policy. Does the solution meet the goal? Options: A. Yes B. No
  • A. Yes Correct
  • B. No

Explanation

The solution meets the goal because accessing the Azure portal to modify the grant control of an Azure AD conditional access policy allows configuring requirements such as Multi-Factor Authentication and device compliance for specific user groups, like Global Administrators, from untrusted locations.

Question 5

You are planning to deploy an Ubuntu Server virtual machine to your company's Azure subscription. You are required to implement a custom deployment that includes adding a particular trusted root certification authority (CA). Which of the following should you use to create the virtual machine? Options: A. The New-AzureRmVm cmdlet. B. The New-AzVM cmdlet. C. The Create-AzVM cmdlet. D. The az vm create command.
  • A. The New-AzureRmVm cmdlet.
  • B. The New-AzVM cmdlet.
  • C. The Create-AzVM cmdlet.
  • D. The az vm create command. Correct

Explanation

The az vm create command is the correct choice for deploying an Ubuntu Server VM with custom configurations such as adding a trusted root CA, using Azure CLI which supports cloud-init scripts for Linux VMs.

Question 6

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. Your company makes use of Multi-Factor Authentication for when users are not in the office. The Per Authentication option has been configured as the usage model. After the acquisition of a smaller business and the addition of the new staff to Azure Active Directory (Azure AD) obtains a different company and adding the new employees to Azure Active Directory (Azure AD), you are informed that these employees should also make use of Multi-Factor Authentication. To achieve this, the Per Enabled User setting must be set for the usage model. Solution: You reconfigure the existing usage model via the Azure portal. Does the solution meet the goal? Options: A. Yes B. No
  • A. Yes
  • B. No Correct

Explanation

According to official Microsoft documentation, once a Multi-Factor Authentication provider is created, the usage model cannot be changed from Per Authentication to Per Enabled User. Therefore, reconfiguring the existing usage model via the Azure portal does not meet the goal.

Question 7

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. Your company's Azure solution makes use of Multi-Factor Authentication for when users are not in the office. The Per Authentication option has been configured as the usage model. After the acquisition of a smaller business and the addition of the new staff to Azure Active Directory (Azure AD) obtains a different company and adding the new employees to Azure Active Directory (Azure AD), you are informed that these employees should also make use of Multi-Factor Authentication. To achieve this, the Per Enabled User setting must be set for the usage model. Solution: You reconfigure the existing usage model via the Azure CLI. Does the solution meet the goal? Options: A. Yes B. No
  • A. Yes
  • B. No Correct

Explanation

The solution does not meet the goal because once a Multi-Factor Authentication provider is created with a specific usage model (in this case, Per Authentication), it cannot be changed to another usage model (Per Enabled User) via reconfiguration. Changing the usage model requires creating a new MFA provider.

Question 8

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. Your company's Azure solution makes use of Multi-Factor Authentication for when users are not in the office. The Per Authentication option has been configured as the usage model. After the acquisition of a smaller business and the addition of the new staff to Azure Active Directory (Azure AD) obtains a different company and adding the new employees to Azure Active Directory (Azure AD), you are informed that these employees should also make use of Multi-Factor Authentication. To achieve this, the Per Enabled User setting must be set for the usage model. Solution: You create a new Multi-Factor Authentication provider with a backup from the existing Multi-Factor Authentication provider data. Does the solution meet the goal? Options: A. Yes B. No
  • A. Yes
  • B. No Correct

Explanation

Creating a new Multi-Factor Authentication provider is not possible since September 1st, 2018. Additionally, this action does not change the usage model from Per Authentication to Per Enabled User as required.

Question 9

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. Your company has an Azure Active Directory (Azure AD) tenant named weyland.com that is configured for hybrid coexistence with the on-premises Active Directory domain. You have a server named DirSync1 that is configured as a DirSync server. You create a new user account in the on-premise Active Directory. You now need to replicate the user information to Azure AD immediately. Solution: You run the Start-ADSyncSyncCycle -PolicyType Initial PowerShell cmdlet. Does the solution meet the goal? Options: A. Yes B. No
  • A. Yes
  • B. No Correct

Explanation

The Start-ADSyncSyncCycle -PolicyType Initial cmdlet initiates a full synchronization cycle which is not immediate and can take considerable time. For immediate replication of the user information to Azure AD, the Start-ADSyncSyncCycle -PolicyType Delta cmdlet should be used as it performs only the recent changes.

Question 10

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. Your company has an Azure Active Directory (Azure AD) tenant named weyland.com that is configured for hybrid coexistence with the on-premises Active Directory domain. You have a server named DirSync1 that is configured as a DirSync server. You create a new user account in the on-premise Active Directory. You now need to replicate the user information to Azure AD immediately. Solution: You use Active Directory Sites and Services to force replication of the Global Catalog on a domain controller. Does the solution meet the goal? Options: A. Yes B. No
  • A. Yes
  • B. No Correct

Explanation

Using Active Directory Sites and Services to force replication of the Global Catalog only updates other domain controllers within the on-premises environment. To replicate user information to Azure AD immediately, Azure AD Connect must be used to initiate a synchronization cycle.

Question 11

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. Your company has an Azure Active Directory (Azure AD) tenant named weyland.com that is configured for hybrid coexistence with the on-premises Active Directory domain. You have a server named DirSync1 that is configured as a DirSync server. You create a new user account in the on-premise Active Directory. You now need to replicate the user information to Azure AD immediately. Solution: You restart the NetLogon service on a domain controller. Does the solution meet the goal? Options: A. Yes B. No
  • A. Yes
  • B. No Correct

Explanation

Restarting the NetLogon service on a domain controller does not initiate synchronization between on-premises Active Directory and Azure AD. To replicate user information to Azure AD immediately, one should use PowerShell commands such as Start-ADSyncSyncCycle.

Question 12

Your company has a Microsoft Azure subscription. The company has datacenters in Los Angeles and New York. You are configuring the two datacenters as geo-clustered sites for site resiliency. You need to recommend an Azure storage redundancy option. You have the following data storage requirements: ✑ Data must be stored on multiple nodes. ✑ Data must be stored on nodes in separate geographic locations. ✑ Data can be read from the secondary location as well as from the primary location. Which of the following Azure stored redundancy options should you recommend? Options: A. Geo-redundant storage B. Read-only geo-redundant storage C. Zone-redundant storage D. Locally redundant storage
  • A. Geo-redundant storage
  • B. Read-only geo-redundant storage Correct
  • C. Zone-redundant storage
  • D. Locally redundant storage

Explanation

Read-access geo-redundant storage (RA-GRS) meets the requirement of storing data on multiple nodes in separate geographic locations and allows reading from both primary and secondary locations, which aligns with the given criteria.

Question 13

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. Your company has an azure subscription that includes a storage account, a resource group, a blob container and a file share. A colleague named Jon Ross makes use of a solitary Azure Resource Manager (ARM) template to deploy a virtual machine and an additional Azure Storage account. You want to review the ARM template that was used by Jon Ross. Solution: You access the Virtual Machine blade. Does the solution meet the goal? Options: A. Yes B. No
  • A. Yes
  • B. No Correct

Explanation

Accessing the Virtual Machine blade does not provide access to the ARM template used for deployment. To review the ARM template, one must navigate to the Deployments section within the resource group where the deployment occurred.

Question 14

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. Your company has an azure subscription that includes a storage account, a resource group, a blob container and a file share. A colleague named Jon Ross makes use of a solitary Azure Resource Manager (ARM) template to deploy a virtual machine and an additional Azure Storage account. You want to review the ARM template that was used by Jon Ross. Solution: You access the Resource Group blade. Does the solution meet the goal? Options: A. Yes B. No
  • A. Yes Correct
  • B. No

Explanation

The correct answer is A (Yes). According to Azure documentation, accessing the Resource Group blade allows you to view all resources within that group, including ARM templates used for deployment. From there, one can navigate to the deployments section to review specific ARM templates like the one Jon Ross used.

Question 15

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements. Your company has an azure subscription that includes a storage account, a resource group, a blob container and a file share. A colleague named Jon Ross makes use of a solitary Azure Resource Manager (ARM) template to deploy a virtual machine and an additional Azure Storage account. You want to review the ARM template that was used by Jon Ross. Solution: You access the Container blade. Does the solution meet the goal? Options: A. Yes B. No
  • A. Yes
  • B. No Correct

Explanation

Accessing the Container blade does not provide access to ARM templates used for deployment. To review Jon Ross's ARM template, one must navigate to the Resource Group page and export the previously done deployments.

Question 16

Your company has three virtual machines (VMs) that are included in an availability set. You try to resize one of the VMs, which returns an allocation failure message. It is imperative that the VM is resized. Which of the following actions should you take? Options: A. You should only stop one of the VMs. B. You should stop two of the VMs. C. You should stop all three VMs. D. You should remove the necessary VM from the availability set.
  • A. You should only stop one of the VMs.
  • B. You should stop two of the VMs.
  • C. You should stop all three VMs. Correct
  • D. You should remove the necessary VM from the availability set.

Explanation

Stopping all VMs in the availability set allows for resizing without encountering allocation failures due to insufficient capacity. Once resized, the VMs can be restarted.

Question 17

You have an Azure virtual machine (VM) that has a single data disk. You have been tasked with attaching this data disk to another Azure VM. You need to make sure that your strategy allows for the virtual machines to be offline for the least amount of time possible. Which of the following is the action you should take FIRST? Options: A. Stop the VM that includes the data disk. B. Stop the VM that the data disk must be attached to. C. Detach the data disk. D. Delete the VM that includes the data disk.
  • A. Stop the VM that includes the data disk.
  • B. Stop the VM that the data disk must be attached to.
  • C. Detach the data disk. Correct
  • D. Delete the VM that includes the data disk.

Explanation

Detaching a data disk from one VM and attaching it to another can be done without stopping either VM, provided the disk is not in use. This minimizes downtime as per the requirement.

Question 18

Your company has an Azure subscription. You need to deploy a number of Azure virtual machines (VMs) using Azure Resource Manager (ARM) templates. You have been informed that the VMs will be included in a single availability set. You are required to make sure that the ARM template you configure allows for as many VMs as possible to remain accessible in the event of fabric failure or maintenance. Which of the following is the value that you should configure for the platformFaultDomainCount property? Options: A. 10 B. 30 C. Min Value D. Max Value
  • A. 10
  • B. 30
  • C. Min Value
  • D. Max Value Correct

Explanation

The platformFaultDomainCount property should be set to the maximum value allowed by Azure for an availability set, which is 3. This maximizes the number of VMs that can remain accessible during a fabric failure or maintenance event.

Question 19

Your company has an Azure subscription. You need to deploy a number of Azure virtual machines (VMs) using Azure Resource Manager (ARM) templates. You have been informed that the VMs will be included in a single availability set. You are required to make sure that the ARM template you configure allows for as many VMs as possible to remain accessible in the event of fabric failure or maintenance. Which of the following is the value that you should configure for the platformUpdateDomainCount property? Options: A. 10 B. 20 C. 30 D. 40
  • A. 10
  • B. 20 Correct
  • C. 30
  • D. 40

Explanation

The platformUpdateDomainCount property should be set to 20 because Azure availability sets can be configured with up to twenty update domains, which helps ensure that as many VMs as possible remain accessible during maintenance events.

Question 20

You have downloaded an Azure Resource Manager (ARM) template to deploy numerous virtual machines (VMs). The ARM template is based on a current VM, but must be adapted to reference an administrative password. You need to make sure that the password cannot be stored in plain text. You are preparing to create the necessary components to achieve your goal. Which of the following should you create to achieve your goal? Answer by dragging the correct option from the list to the answer area.

Explanation

Azure Key Vault provides secure storage for secrets like administrative passwords. An access policy is required to control who can access the stored password, ensuring it remains securely managed and not in plain text.

Verifying access...