| Exam Code | AZ-104 |
| Exam Name | Microsoft Azure Administrator |
| Questions | 338 Questions Answers With Explanation |
| Update Date | November 10,2024 |
| Price |
Was : |
Welcome to Certsleader, your ultimate source for top-quality AZ-104 dumps tailored for Microsoft AZ-104 exam. Our comprehensive resources are designed to help you excel in your exam preparations and achieve your certification goals. Whether you are a beginner looking to start a career in Microsoft or an experienced professional seeking to advance your skills, Certsleader has the right tools to support your journey.
At Certsleader, we are committed to your success. Our practice questions answers are designed to improve your knowledge and help you pass your exams on the first attempt with high scores. In the rare event that you do not succeed, we offer a full refund, taking responsibility for your satisfaction.
Join thousands of satisfied learners who have successfully passed their certification exams with Certsleader. Explore our study materials, download your PDF files, and take the first step towards a rewarding IT career today.
You need to recommend an identify solution that meets the technical requirements.What should you recommend?
A. federated single-on (SSO) and Active Directory Federation Services (AD FS)
B. password hash synchronization and single sign-on (SSO)
C. cloud-only user accounts
D. Pass-through Authentication and single sign-on (SSO)
You need to prepare the environment to meet the authentication requirements.Which two actions should you perform? Each correct answer presents part of the solution.NOTEEach correct selection is worth one point.
A. Azure Active Directory (AD) Identity Protection and an Azure policy
B. a Recovery Services vault and a backup policy
C.an Azure Key Vault and an access policy
D. an Azure Storage account and an access policy
Which blade should you instruct the finance department auditors to use?
A. Partner information
B. Overview
C. Payment methods
D. Invoices
You need to ensure that VM1 can communicate with VM4. The solution must minimize administrative effort. What should you do?
A. Create a user-defined route from VNET1 to VNET3.
B. Assign VM4 an IP address of 10.0.1.5/24.
C. Establish peering between VNET1 and VNET3.
D. Create an NSG and associate the NSG to VMI and VM4.
You need to configure an Azure web app named contoso.azurewebsites.net to host www.contoso.com.What should you do first?
A. Create a CNAME record named asuid that contains the domain verification ID.
B. Create A records named www.contoso.com and asuid.contoso.com.
C. Create a TXT record named asuid that contains the domain verification ID.
D. Create a TXT record named www.contoso.com that has a value of contoso.azurewebsites.net.
You plan to deploy several Azure virtual machines that will run Windows Server 2022 in a virtual machinescale set by using an Azure Resource Manager template.You need to ensure that NGINX is available on all the virtual machines after they are deployed.What should you use?
A. Azure Application Insights
B. Azure Custom Script Extension
C. the Publish-ArVMDscConfiguration cmdlet
D. the New-AzConfigurationAssignment Cmdlet
You have an app named App1 that runs on two Azure virtual machines named VM1 and VM2.You plan to implement an Azure Availability Set for Appl. The solution must ensure that App1 is available during planned maintenance of the hardware hosting VM1 and VM2.What should you include in the Availability Set?
A. one update domain
B. two update domains
C. one fault domain
D. two fault domains
You have an Azure subscription that contains a resource group named RG1.You plan to create a storage account named storage1.You have a Bicep file named File1.You need to modify File1 so that it can be used to automate the deployment of storage1 to RG1.Which property should you modify?
A. scope
B. kind
C. sku
D. location
You have an Azure web app named webapp1.You have a virtual network named VNET1 and an Azure virtual machine named VM1 that hosts a MySQLdatabase. VM1 connects to VNET1.You need to ensure that webapp1 can access the data hosted on VM1.What should you do?
A. Connect webapp1 to VNET1.
B. Deploy an internal load balancer.
C. Deploy an Azure Application Gateway,
D. Peer VNET1 to another virtual network.
You have a Microsoft Entra tenant that contains 5,000 user accounts.You create a new user account named AdminUser1.You need to assign the User Administrator administrative role to AdminUser1.What should you do from the user account properties?
A. From the Groups blade, invite the user account to a new group.
B. From the Directory role blade, modify the directory role.
C. From the Licenses blade, assign a new license.
You have an Azure subscription that contains a virtual network named VNet1. VNet1 contains four subnetsnamed Gateway, Perimeter. NVA and Production.The NVA subnet contains two network virtual appliances (NVAs) that will perform network traffic inspectionbetween the Perimeter subnet and the Production subnet.You need to implement an Azure load balancer for the NVAs. The solution must meet the followingrequirements:• The NVAs must run in an active-active configuration that uses automatic failover.• The toad balancer must load balance traffic to two services on the Production subnet. The services have different IP addresses. Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point
A. Add two load balancing rules that have HA Ports enabled and Floating IP disabled.
B. Deploy a basic load balancer.
C. Add a frontend IP configuration, a backend pool, and a health probe.
D. Add two load balancing rules that have HA Ports and Floating IP enabled.
E. Deploy a standard load balancer.
F. Add a frontend IP configuration, two backend pools, and a health probe.
Note: This question is part of a series of questions that present the same scenario. Each question in the seriescontains a unique solution that might meet the stated goals. Some question sets might have more than onecorrect solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questionswill not appear in the review screen.You have an Azure virtual machine named VM1. VM1 was deployed by using a custom Azure ResourceManager template named ARM1.json.You receive a notification that VM1 will be affected by maintenance.You need to move VM1 to a different host immediately.Solution: From the Overview blade, you move the virtual machine to a different subscription.Does this meet the goal?
A. Yes
B. No
You have an Azure Active Directory (Azure AD) tenant named contoso.com.You have a CSV file that contains the names and email addresses of 500 external users.You need to create a quest user account in contoso.com for each of the 500 external users.Solution: from Azure AD in the Azure portal, you use the Bulk create user operation.Does this meet the goal?
A. Yes
B. No
You create an App Service plan named plan1 and an Azure web app named webapp1. You discover that theoption to create a staging slot is unavailable. You need to create a staging slot for plan1.What should you do first?
A. From webapp1, modify the Application settings.
B. From webapp1, add a custom domain.
C. From plan1, scale up the App Service plan.
D. From plan1, scale out the App Service plan.
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, thesequestions will not appear in the review screen.You manage a virtual network named VNet1 that is hosted in the West US Azure region.VNet1 hosts two virtual machines named VM1 and VM2 that run Windows Server.You need to inspect all the network traffic from VM1 to VM2 for a period of three hours.Solution: From Performance Monitor, you create a Data Collector Set (DCS).Does this meet the goal?
A. Yes
B. No
You have an Azure subscription That contains a Recovery Services vault named Vault1.You need to enable multi-user authorization (MAU) for Vaultl. Which resource should you create first?
A. a managed identity
B. a resource guard
C. an administrative unit
D. a custom Azure role
You have two subscriptions named Subscription1 and Subscription2. Each subscription is associated to adifferent Azure AD tenant.Subscription1 contains a virtual network named VNet1. VNet1 contains an Azure virtual machine named VM1and has an IP address space of 10.0.0.0/16.Subscription2 contains a virtual network named VNet2. VNet2 contains an Azure virtual machine named VM2and has an IP address space of 10.10.0.0/24. You need to connect VNet1 to VNet2. What should you do first?
A. Move VM1 to Subscription2.
B. Modify the IP address space of VNet2.
C. Provision virtual network gateways.
D. Move VNet1 to Subscription2.
You have an Azure subscription that contains 20 virtual machines, a network security group (NSG) named NSG1, and two virtual networks named VNET1 and VNET2 that are peered. You plan to deploy an Azure Bastion Basic SKU host named Bastion1 to VNET1. You need to configure NSG1 to allow inbound access from the internet to Bastion1. Which port should you configure for the inbound security rule?
A. 22
B. 443
C. 3389
D. 8080
You have an Azure subscription.Users access the resources in the subscription from either home or from customer sites. From home, usersmust establish a point-to-site VPN to access the Azure resources. The users on the customer sites access theAzure resources by using site-to-site VPNs.You have a line-of-business app named App1 that runs on several Azure virtual machine. The virtual machinesrun Windows Server 2016.You need to ensure that the connections to App1 are spread across all the virtual machines.What are two possible Azure services that you can use? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point.
A. a public load balancer
B. Traffic Manager
C. an Azure Content Delivery Network (CDN)
D. an internal load balancer
E. an Azure Application Gateway
You have an Azure subscription that contains a user named User1.You need to ensure that User1 can deploy virtual machines and manage virtual networks. The solution mustuse the principle of least privilege.Which role-based access control (RBAC) role should you assign to User1?
A. Owner
B. Virtual Machine Administrator Login
C. Contributor
D. Virtual Machine Contributor
