Az-104 Azure Administrator Associate

 

Hey Everyone below is the AZ-104 Azure Administrator Associate renew assessment questions and answers.

 

Note: Please read carefull the questions and answers before selecting as most of time its different.

 

You have an Azure subscription that includes a virtual network named VNet1.

You plan to create a web app named WebApp1 and deploy it to VNet1.

You need to prepare the environment for the planned web app. The solution must minimize costs.

Which app service plan size should you use?

Select only one answer.

Dev / Test B1

Dev / Test F1

Isolated I1V2

Production P1V2

Production P3V3

 

———————————————————————————–

 

You have Azure web app named WebApp1.

You need to integrate GitHub as a source code repository for WebApp1.

What should you use?

Select only one answer.

Deployment Center

Deployment slots

Extensions

Service Connector

 

———————————————————————————–

You have an Azure web service named Contoso2022 that runs in the Standard App Service plan. Contoso2022 has five deployment slots in use.

A user named User1 has the Contributor role for Contoso2022.

You need to ensure that User1 can create additional deployment slots to Contoso2022.

What should you do?

Select only one answer.

Assign User1 the Owner role for Contoso2022.

Assign User1 the Website Contributor role for Contoso2022.

Scale out the Contoso2022 App Service plan.

Scale up the Contoso2022 App Service plan.

 

———————————————————————————–

You have an Azure subscription that includes the following web apps:

  • WebApp1, which runs code in a Windows operating system.
  • WebApp2, which runs code in a Linux operating system.
  • WebApp3, which runs in a Docker container on Windows.
  • WebApp4, which runs in a Docker container on Linux.

From which web apps can you use WebJobs?

Select only one answer.

WebApp1 and WebApp2 only

WebApp1 and Web3 only

WebApp1 only

WebApp1, WebApp2, WebApp3 and WebApp4

 

———————————————————————————–

You have Azure subscription that includes virtual network with following subnets:

  • Subnet1, which has connected virtual machine
  • Subnet2, which has connected web app
  • Subnet3, which has deployed container instance

You plan to deploy container instance named container1.

To which subnets can you deploy container1?

Select only one answer.

Subnet1 and Subnet3 only

Subnet1, Subnet2 and Subnet3

Subnet2 and Subnet3 only

Subnet3 only

 

———————————————————————————–

You have Azure subscription that includes virtual network named VNet1 in West US region.

You plan to deploy following container instances:

  • Instance1, running Windows container image in West US region
  • Instance2, running Linux container image in West US region
  • Instance3, running Windows container image in East US region

Which container instances can be deployed to VNet1?

Select only one answer.

Instance1 and Instance2 only

Instance1 and Instance3 only

Instance1, Instance2 and Instance3

Instance1 only

Instance2 only

 

———————————————————————————–

You have an Azure container registry that stores an image named Image1 and a Windows Server 2022 Azure virtual machine named VM1.

You need to ensure that you can run Image1 in VM1.

What should you install in VM1?

Select only one answer.

Azure Portal

Docker

Hyper-V role

.NET Framework 4.7

 

———————————————————————————–

You have an Azure subscription that contains the following storage accounts:

  • storage1, configured as StorageV2 kind
  • storage2, configured as BlobStorage kind
  • storage3, configured as FileStorage kind

Which storage account or storage accounts can you use Lifecycle management?

Select only one answer.

storage1 and storage2 only

storage1 and storage3 only

storage1 only

Storage1, storage2 and storage3

storage2 and storage3 only

 

———————————————————————————–

You have an Azure Storage account named storage1 that is configured to use the Hot access tier.

Storage1 has a container named container1 and the lifecycle management rule with following settings:

  • Move blob to cool storage: Selected
    • Days after last modification: 3
  • Move blob to archive storage: Selected
    • Days after last modification: 5

On December 1, you create a file named File1 in container1.

On December 10, you rehydrate File1 and move the file to the Hot access tier.

When will File1 be moved to archive storage?

Select only one answer.

on December 15

on December 18

on January 1

within 24 hours

 

———————————————————————————–

You have an Azure Storage account named storage1.

You create the following encryption scopes for storage1:

  • Scope1 that has an encryption type of Microsoft-managed keys
  • Scope2 that has an encryption type of Customer-managed keys

Which storage services can be used with Scope2?

Select only one answer.

blob and file only

blob, file, table, and queue

blob only

file only

table and queue only

 

———————————————————————————–

You have an Azure storage account that contains a blob container named container1.

You need to configure access to container1.

Which authorization types can you use?

Select only one answer.

Microsoft Entra ID only

Microsoft Entra ID, shared access signature or certificate only

Microsoft Entra ID, storage key or shared access signature only

Microsoft Entra ID, storage key, shared access signature or certificate

Storage key or shared access signature only

 

———————————————————————————–

You have an Azure virtual network named VNET1 that is connected to a network security group (NSG) named NSG1. NSG1 has the following inbound security rules:

  • Rule1 has a priority of 100 and allows port 3389 on TCP protocol from any source and to any destination
  • Rule2 has a priority of 200 and allows ports 80 and 8080 on UDP protocol from any source and to any destination
  • Rule3 has a priority of 300 and denies ports 1-2000 on TCP protocol from any source and to any destination
  • Rule4 has a priority of 400 and allows ports 50-500 on TCP protocol from VirtualNetwork source and to any destination
  • Rule5 has a priority of 500 and allows ports 80 and 443 on TCP protocol from any source and to any destination

You need to allow http and https connections from the internet to VNET1.

What should you change for NSG1?

Select only one answer.

Priority for Rule3 to 450

Priority for Rule4 to 250

Priority for Rule5 to 250

Protocol for Rule2 to TCP

 

———————————————————————————–

You have an Azure subscription that contains a storage account named storage1 and the following virtual machines:

  • VM1 has a public IP address of 13.68.158.24 and is connected to VNET1/Subnet1
  • VM2 has a public IP address of 52.255.145.76 and is connected to VNET1/Subnet1
  • VM3 has a public IP address of 13.68.158.50 and is connected to VNET1/Subnet2

The subnets have the following service endpoints:

  • Subnet1 has a Microsoft.Storage service endpoint
  • Subnet2 does NOT have any service endpoint

Storage1 has a firewall configured to allow access from the 13.68.158.0/24 IP address range only.

Which virtual machines can access storage1.

Select only one answer.

VM1 and VM2 only

VM1 and VM3 only

VM1 only

VM1, VM2, and VM3

VM3 only

 

———————————————————————————–

You have an Azure subscription that contains a virtual machine named VM1 and a storage account named storage1.

You need to ensure that VM1 can access storage1 by using the Azure backbone.

What should you configure?

Select only one answer.

a routing table

a service endpoint

a VPN gateway

Peering

 

———————————————————————————–

 

Top of Form

You have an Azure subscription that includes following resources:

  • VNet1, a virtual network
  • Subnet1, a subnet in VNet1
  • VM1, a virtual machine
  • NIC1, a network interface of VM1
  • LB1, a load balancer

You create a network security group named NSG1.

To which two Azure resources can you associate NSG1?

Select all answers that apply.

LB1

NIC1

Subnet1

VM1

VNet1

 

———————————————————————————–

 

You have an Azure subscription that includes a virtual machine named VM1.

You need to protect VM1 by using Azure Backup.

Which Azure resource should you create first?

Select only one answer.

a backup policy

a backup vault

a recovery services vault

a storage account

 

———————————————————————————–

You have an Azure subscription that contains an Azure disk named Disk1.

You plan to use an Azure Backup to backup Disk1.

What should you deploy first?

Select only one answer.

a Backup vault

a Storage account

a Recovery Services vault

an Azure Backup Server

 

———————————————————————————–

You have a Windows Server Azure virtual machine named VM1.

You need to back up two folders in VM1 by using Azure Backup. The solution should minimize administrative effort.

What should you deploy first?

Select only one answer.

Azure Backup Server

Recovery Services agent

Microsoft Monitoring agent

Windows Server Backup role

 

———————————————————————————–

You have a Recovery Services vault named Vault1 that has soft delete enabled.

Vault1 stores backups for the following Azure resources:

  • an Azure virtual machine named VM1
  • an Azure file share named share1
  • a SQL Server on Azure virtual machine named SQL1

Which backups are protected by soft delete?

Select only one answer.

share1 only

VM1 and SQL1 only

VM1 only

VM1, share1, and SQL1

 

———————————————————————————–

You have an Azure virtual machine named VM1.

VM1 contains the following:

  • a File named File1 that is stored on volume C:\
  • a File named File2 that is stored on volume D:\
  • an App named App1 that is in a running state
  • a user named User1 that is connected to VM1

You plan to resize VM1.

What is preserved after the resize?

Select only one answer.

File1 and File2 only

File1 and the state of App1 only

File1, File2 and the state of App1 only

File1, File2, the state of App1 and the connection of User1

File1 only

 

———————————————————————————–

You have an Azure subscription that contains the following resources:

  • A resource group named RG1 in the West US region
  • A resource group named RG2 in the Central US region
  • A virtual network named VNet1 that is deployed to the West US region in RG1
  • A virtual network named VNet2 that is deployed to the Central US region in RG1
  • A virtual network named VNet3 that is deployed to the West US region in RG2

You need to deploy a virtual machine named VM1 to RG1 in the West US region.

To which virtual network or virtual networks can you connect VM1?

Select only one answer.

VNet1 only

VNet1 or VNet2 only

VNet1 or VNet3 only

VNet1, VNet2 or VNet3

 

———————————————————————————–

You have an Azure subscription.

You plan to run a data warehouse in an Azure virtual machine named VM1.

You need to ensure that VM1 is optimized for running a data warehouse.

Which VM type should you use for VM1?

Select only one answer.

Compute optimized (F-Series)

General purpose (D-Series)

High performance computing (H-Series)

Memory optimized (M-Series)

Storage optimized (Ls-Series)

 

———————————————————————————–

 

You have an Azure subscription named Sub1.

You plan to deploy a virtual machine scale set named VMSS1 in East US region. VMSS1 will have 8 instances.

What is the maximum number of availability zones that VMSS1 can use?

Select only one answer.

1

2

3

4

———————————————————————————–

You have a Microsoft Entra tenant that contains the following users:

  • User1 has a Department set to Sales and a Country set to USA
  • User2 has a Department set to Marketing and a Country set to USA
  • User3 has a Department set to Sales and a Country set to DE
  • User4 has a Department set to Marketing and a Country set to DE

You create a group named Group1 that has the following dynamic membership rule.

user.country -eq “USA” -and user.department -eq “Marketing” -or user.department -eq “Sales”

Which users are members of Group1?

Select only one answer.

User1 and User2 only

User1 and User3 only

User2 and User3 only

User1, User2, and User3 only

User1, User2, User3 and User4

 

———————————————————————————–

You have an Azure subscription that contains a user named User1, a resource group named RG1, and a virtual machine named VM1.

You enable a system-assigned managed identity for VM1.

To which identities can you assign the Reports Reader role?

Select only one answer.

User1 and RG1 only

User1 and VM1 only

User1 only

User1, RG1, and VM1

 

———————————————————————————–

Your company has multiple departments and one Azure subscription. The user accounts for all employees are in the same Microsoft Entra tenant.

You need to delegate permissions for the users in a single department only.

What should you use to organize the user accounts?

Select only one answer.

administrative unit

security group

resource group

workspace

 

 

!!! THANKS FOR READING !!!

Regards,
HARISH KUMAR

Knowledge is not a finite resource to hoard; it’s a boundless treasure that grows when shared.