AZ-104 Online Practice Questions and Answers

Correct Answer:

Box 1: never For Subnet 10.2.9.0/24, endpoint (Refer to first endpoint) is not enabled into the storage account shown in the exhibit. Hence there would not be any connectivity to the file shares in storage account. To establish this connection you must have to enable the endpoint. Box 2: never After you configure firewall and virtual network settings for your storage account, select Allow trusted Microsoft services to access this storage account as an exception to enable Azure Backup service to access the network restricted storage account. As this required setting is missing , so Azure backup will not be able to take backup of unmanaged disks.

Reference:

https://docs.microsoft.com/en-us/azure/storage/files/storage-how-to-use-files-windows https://azure.microsoft.com/en-us/blog/azure-backup-now-supports-storage-accounts-secured- with-azure-storage-firewalls-and-virtual-networks/

Correct Answer:

Box 1: 10.244.0.0/16

The Pod CIDR.

Note: The --pod-cidr should be a large address space that isn't in use elsewhere in your network environment. This range includes any on-premises network ranges if you connect, or plan to connect, your Azure virtual networks using Express

Route or a Site-to-Site VPN connection.

This address range must be large enough to accommodate the number of nodes that you expect to scale up to. You can't change this address range once the cluster is deployed if you need more addresses for additional nodes.

Box 2: 10.0.0.0/16

The --service-cidr is used to assign internal services in the AKS cluster an IP address.

Reference:

https://docs.microsoft.com/en-us/azure/aks/configure-kubenet

Correct Answer:

Box 1: User5

In Express settings, the installation wizard asks for the following:

AD DS Enterprise Administrator credentials

Azure AD Global Administrator credentials

The AD DS Enterprise Admin account is used to configure your on-premises Active Directory. These credentials are only used during the installation and are not used after the installation has completed. The Enterprise Admin, not the Domain

Admin should make sure the permissions in Active Directory can be set in all domains.

Box 2: UserA

Azure AD Global Admin credentials credentials are only used during the installation and are not used after the installation has completed. It is used to create the Azure AD Connector account used for synchronizing changes to Azure AD. The

account also enables sync as a feature in Azure AD.

References:

https://docs.microsoft.com/en-us/azure/active-directory/connect/active-directory-aadconnect- accounts-permissions

Correct Answer: B

This is an excerpt from the official documentation in the section "Reverse DNS Considerations" Form : https://docs.microsoft.com/en-us/azure/virtual-network/virtual- networks-name-resolution-for-vms-and-role-instances#dns-clientconfiguration [..." - All PTR queries for IP addresses of virtual machines will return FQDNs of form [vmname].internal.cloudapp.net - Forward lookup on FQDNs of form

[vmname].internal.cloudapp.net will resolve to IP address assigned to the virtual machine. - If the virtual network is linked to an Azure DNS private zones as a registration virtual network, the reverse DNS queries will return two records. One record will be of the form [vmname].[privatednszonename] and the other will be of the form [vmname].internal.cloudapp.net "...] https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-name-resolution- for-vms-and-roleinstances

Correct Answer: D

https://learn.microsoft.com/en-us/azure/vs-azure-tools-storage-explorer-files

Correct Answer: A

The Logic App Contributor role lets you manage logic app, but not access to them. It provides access to view, edit, and update a logic app.

References:

https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles

https://docs.microsoft.com/en-us/azure/logic-apps/logic-apps-securing-a-logic-app

Correct Answer: A

The primary use case for the Azure Desired State Configuration (DSC) extension is to bootstrap a VM to the Azure Automation State Configuration (DSC) service. The service provides benefits that include ongoing management of the VM

configuration and integration with other operational tools, such as Azure Monitoring. Using the extension to register VM's to the service provides a flexible solution that even works across Azure subscriptions.

You can use the DSC extension independently of the Automation DSC service.

In the following example, the Azure CLI is used to deploy a custom script extension to an existing virtual machine, which installs a Nginx webserver.

az vm extension set \

--resource-group myResourceGroup \

--vm-name myVM --name customScript \

--publisher Microsoft.Azure.Extensions \

--settings '{"commandToExecute": "apt-get install -y nginx"}

Reference:

https://docs.microsoft.com/en-us/azure/virtual-machines/extensions/dsc-overview

Correct Answer: A

This question is asking in which regional locations can a APP service plan be deployed to. It tells you it will be a Linux Plan to throw you off and make you wonder if it matters. Which is does not.

Then it asks what should you recommend to make you think you are supposed to choose. The fact is you can recommend any region.

An APP service plan can be deployed in any region and multiple APP service plans can be deployed in a region.

The Plan type you choose depends on the APP's your going to deploy and whether the programing language can be run on Linux or Windows.

https://learn.microsoft.com/en-us/azure/app-service/overview-hosting-plans