AZ-104: Microsoft Azure Administrator Practice Questions Part 1

You are a company’s Azure administrator. A custom role based on the Virtual Machine Contributor position must be created. The following PowerShell script must be completed.

Which of the following would come in SLOT 1?

A company has the following virtual networks defined in Azure.

The following virtual machines have been defined as well.

The appropriate peering connections between ips-network1 and ips-network2 have been established. The virtual machines’ firewalls have been adjusted to enable ICMP traffic. When a ping request is performed, however, no traffic seems to occur between the virtual computers.

Which of the following methods can be used to identify the problem?

A company has an Azure subscription that has the resources in the following table.

A file share named docs is part of the st-ips storage account. The document file sharing has a capacity of 1000 files.

The files in the file sharing must be synchronized with an on-premises server named ipsserver. To meet this demand, which of the following would you need to implement? Choose three responses from the list below.

A corporation intends to move data out of its Azure Storage account via the Azure Import/Export service. When defining the Azure Export job, which of the following services could be used?

Your company has set up a storage account in Azure, as shown below.

Only IP addresses in the range 51.107.2.0 to 51.107.2.255 should be allowed to connect to the storage account. To meet this criterion, which of the following sections of the storage account would you change?

An Azure Virtual Machine has been set up by a corporation. A member of the team is attempting to connect to the Virtual Machine but is unable to. The following is a sample from the Virtual Machine’s Networking section.

To ensure that the team member may connect to the Virtual Machine, which of the following must be done?

A point-to-site VPN connection has been established between a workstation named “WorkstationA” and an Azure Virtual Network by a team member. A point-to-site VPN connection between the same Azure Virtual Network and a PC called “WorkstationB” is required. The VPN client package was generated and installed on WorkstationB. You need to ensure that you can create a successful point-to-site VPN connection.
You make the decision to export the “Workstation A” client certificate and install it on “Workstation B”.
Would this solution fulfill the requirement?

As an IT administrator, you must create scripts to add data drives to an existing virtual system. The script is shown below. However, it is not complete.

Which of the following would go into Slot4?

A company has an Azure subscription that contains the following resource groups.

The resource group ips-rg1 contains the following resources.

Would you be able to move the resource ipsnetwork from the resource group ips-rg1 to ips-rg2?

A company has two applications, ipsappA, and ipsappB. Below are the details of each application.
ipsappA – This application is deployed to an Azure Web App. Managed Identity has been enabled for the web app.
ipsappB – This application is deployed to an Azure Container Instance. Managed Identity has been enabled on the container instance.
These programs necessitate the use of a storage account. The usage of secrets must be limited in the solution. In addition, ipsappB should be limited to 15 days of access to the storage account.
To grant ipsappA access to the storage account, which of the following must be used?

A company is planning to deploy two Azure Kubernetes clusters. Each cluster has different requirements, as given below.
clusterA – You must verify that the nodes in this cluster receive an IP address from the Azure virtual network subnet. Furthermore, the pods are assigned an IP address from a conceptually separate address space.
clusterB – You must guarantee that every pod on the subnet has an IP address and can be accessed directly.
Which of the following must be employed to meet the clusterB requirement?

A company currently has 2 Azure subscriptions: ips-staging and ips-production

ips-staging has the following virtual networks.

The virtual networks have the following subnets.

ips-production has the following virtual network.

This network contains the following subnets.

Can you establish a VNet-to-Vnet VPN connection between vnet-staging-01 and vnet-staging-02?

A company currently has 2 Azure subscriptions: ips-staging and ips-production

ips-staging has the following virtual networks.

The virtual networks have the following subnets.

ips-production has the following virtual network.

This network contains the following subnets.

Can you establish a peering connection between vnet-staging-01 and vnet-staging-02?

A company has the following resources defined as part of its Azure subscription.

The simulated machine ipsvm1 is a member of the ips-network2 virtual network. A network interface named ipssecnic is attached to the virtual machine. You must first build an ipssecnic network interface and then attach it to the virtual machine.
You choose the ips-rg2 resource group and the West US region for ipssecnic.
Would this suffice as a solution?

You want to set up a virtual network subnet with five virtual machines.
A public IP address and a private IP address will be assigned to each virtual machine.
Inbound and outbound security policies must be the same for each virtual machine.
What is the bare minimum of network interfaces you require?

You would want to set up an Azure storage account for your firm. The following requirements must be met by the storage account.
• Support for hot, cool, and archive blob levels should be possible.
• Should be able to provide fault tolerance if the Azure region with the storage account is hit by a disaster.
• Costs should be kept to a minimum.
To create the storage account, run the command listed below.

Which of the following would go into Slot2?

As an IT admin, you have to develop scripts that need to be used to add data disks to an existing virtual machine. Below is the incomplete script.

Which of the following would go into Slot5?

You have an ipsstore storage account. Using the file service, you have built a file share called demo. Users must be able to connect to the file sharing from their personal computers. To offer connectivity, which of the following ports should be open?

In their Azure subscription, a corporation has built a storage account. ipsstore is the name of the storage account. They’ve also set up a demo file sharing system. They need to use a UNC path to access the files on the file share.
To ensure that the correct UNC path is provided, fill in the following blocks.

Which of the following needs to go into Slot1?

In their Azure subscription, a company has built a storage account. The ipsstore is the name of the storage account. They’ve also set up a demo file sharing system. They need to use a UNC path to access the files on the file share.
To ensure that the correct UNC path is provided, fill in the following blocks.

Which of the following needs to go into Slot1?

In their Azure subscription, a company has built a storage account. A ipsstore is the name of the storage account. They’ve also set up a demo file sharing system. They need to use a UNC path to access the files on the file share.
To ensure that the correct UNC path is provided, fill in the following blocks.

Which of the following needs to go into Slot1?

In Azure, a company has created a Virtual Machine. On the Virtual machine, a web server listening on port 80 and a DNS server has been set up. The virtual machine’s network interface has a network security group associated with it. The NSG’s rules are listed below.
Inbound Rules

Outbound Rules

Please select all server(s) that internet users will connect to on the Virtual machine if RuleB is deleted.

Your company has set up a storage account in Azure, as shown below.

The company needs to allow only connections to the storage account from an IP address range of 51.107.2.0 to 51.107.2.255. From which of the following section of the storage account would you modify to fulfill this requirement?

Your company has set up a storage account in Azure, as shown below.

There is a requirement to keep any blob data that might be destroyed by mistake. The erased data must be kept for a period of 14 days. To meet this criterion, which of the following sections of the storage account would you change?

A corporation wishes to use a Resource Manager template to install a virtual machine. The Azure CLI commands must be used to submit the template. The template is saved in the storage file.json.
You need to complete the below CLI command.

Which of the following would go into SLOT 1?

You need to complete the below CLI command.

Which of the following would go into SLOT 2?

A company has set up an Azure subscription and a tenant. They want to ensure that only Virtual Machines of a particular SKU size can be launched in their Azure account.
The implementation of Role-Based access control is decided.
Does this fulfill the requirement?

A company has set up an Azure subscription and a tenant. They want to ensure that only Virtual Machines of a particular SKU size can be launched in their Azure account.
The implementation of Azure locks is decided.
Does this fulfill the requirement?

A company has set up an Azure subscription and a tenant. They want to ensure that only Virtual Machines of a particular SKU size can be launched in their Azure account.
The implementation of Azure policies is decided.
Does this fulfill the requirement?

A company plans to use Azure Network watcher to perform the following tasks
• Find out if a network security rule prevents a network packet from reaching a virtual machine hosted in an Azure virtual network.
• Find out if there is outbound connectivity between an Azure virtual machine and an external host.
Which of the following Network watcher feature would you use for the following requirement?
“Find out if a network security rule is preventing a network packet from reaching a virtual machine hosted in an Azure virtual network”.

A company has set up an Azure subscription and a tenant. They want to ensure that only Virtual Machines of a particular SKU size can be launched in their Azure account.
The implementation of Azure locks is decided.
Does this fulfill the requirement?

A company plans to use Azure Network watcher to perform the following tasks
• Find out if a network security rule prevents a network packet from reaching a virtual machine hosted in an Azure virtual network.
• Find out if there is outbound connectivity between an Azure virtual machine and an external host.
Which of the following Network watcher feature would you use for the following requirement?
“Find out if there is outbound connectivity between an Azure virtual machine and an external host.”

A company is planning to deploy an application to a set of Virtual Machines in an Azure network. The company needs to have an SLA of 99.99% for the application hosted on the Virtual machines. Which of the following should be implemented to guarantee an SLA of 99.99% on the infrastructure level?

Your company wants to provision an Azure storage account. The storage account needs to meet the following requirements.
• Should be able to support hot, cool, and archive blob tiers.
• Should be able to provide fault tolerance if a disaster hits the Azure region, which has the storage account.
• Should minimize on costs.
You need to complete the below command to create the storage account.

Which of the following would go into Slot1?

A team has set up Log Analytics for a virtual machine named demovm. They are running the following query in the Log Analytics Workspace.

If a query is run on Monday, then the query will return events from the last.

A team has set up Log Analytics for a virtual machine named demovm. They are running the following query in the Log Analytics Workspace.

In which of the below format will the data be displayed?

Your company currently has a Site-to-Site connection with an Azure Virtual Private network. The VPN device allocated on the on-premises side will undergo a change in its public IP address. You have to ensure the Site-to-Site VPN connection continues to work after the change. Which of the following steps would you need to carry out after the change in the public IP address on the on-premises VPN device, ensuring minimum connection downtime? Choose 3 answers from the options given below.

A company has an application deployed across a set of virtual machines. Users connect to the application either using point-to-site VPN or site-to-site VPN connections. You need to ensure that connections to the application are spread across all of the virtual machines. Which of the following could you set up for this requirement? Choose 2 answers from the options given below.

A company has set up an Azure subscription. They have provisioned a storage account and are currently using the BLOB service. They want to assign permissions to 3 user groups.
GroupA: This group should have access to the storage account management.
GroupB: This group should be able to control storage account containers.
GroupC: Full access to Azure Storage blob containers and data, including POSIX access control, should be granted to this group.
You need to assign the relevant Role-Based Access Control, ensuring the privilege of least access.
Which of the following would you assign to GroupA?

A company has set up an Azure subscription. They have provisioned a storage account and are currently using the BLOB service. They want to assign permissions to 3 user groups.
GroupA: This group should have access to the storage account management.
GroupB: This group should be able to control storage account containers.
GroupC: Full access to Azure Storage blob containers and data, including POSIX access control, should be granted to this group.
You need to assign the relevant Role-Based Access Control, ensuring the privilege of least access.
Which of the following would you assign to GroupB?

A company has set up an Azure subscription. They have provisioned a storage account and are currently using the BLOB service. They want to assign permissions to 3 user groups.
GroupA: This group should have access to the storage account management.
GroupB: This group should be able to control storage account containers.
GroupC: Full access to Azure Storage blob containers and data, including POSIX access control, should be granted to this group.
You need to assign the relevant Role-Based Access Control, ensuring the privilege of least access.
Which of the following would you assign to GroupC?

A company is planning to use the Azure Import/Export service to move data out of its Azure Storage account. Which of the following service could be used when defining the Azure Export job?

As an IT admin, you have to develop scripts that need to be used to add data disks to an existing virtual machine. Below is the incomplete script.

Which of the following would go into Slot1?

As an IT admin, you have to develop scripts that need to be used to add data disks to an existing virtual machine. Below is the incomplete script.

Which of the following would go into Slot2?

As an IT admin, you have to develop scripts that need to be used to add data disks to an existing virtual machine. Below is the incomplete script.

Which of the following would go into Slot3?

As an IT admin, you have to develop scripts that need to be used to add data disks to an existing virtual machine. Below is the incomplete script.

Which of the following would go into Slot4?

You have an Azure virtual machine based on the Windows Server 2016 image. You implement Azure backup for the virtual machine. You want to restore the virtual machine by using the Replace existing option. You need to go ahead and replace the virtual machine using the Azure Backup option. Which of the following needs to be done?

You have an Azure subscription named ipsstaging. Under the subscription, you create a resource group named ips-rg
Then you create an Azure policy based on the “Not allowed resources types” definition. Here you define the parameters as Microsoft.Network. Virtual networks the not allowed resource type. You assign this policy to the Tenant Root Group. A Virtual Network does not already exist in this subscription.
Would you be able to create a virtual machine in the ips-rg resource group?

A company currently has the following networks defined in Azure.

All virtual networks are hosting virtual machines with varying workloads. A virtual machine named ips-detect is hosted in ips-vnet2. This virtual machine will have intrusion detection software installed on it. All traffic on all virtual networks must be routed via this virtual machine.

You need to complete the required steps for implementing this requirement.

You are going to create the virtual network peering connection for all of the virtual networks. Which of the following is important to set for the virtual network peering connection?

A company currently has the following networks defined in Azure.

All virtual networks are hosting virtual machines with varying workloads. A virtual machine named ips-detect is hosted in ips-vnet2. This virtual machine will have intrusion detection software installed on it. All traffic on all virtual networks must be routed via this virtual machine.

You need to complete the required steps for implementing this requirement.

Which of the following would you need to create additional to ensure that traffic is sent via the virtual machine hosting the intrusion software?