AZ-104: Microsoft Azure Administrator Practice Questions Part 5

You have an Azure Active Directory (Azure AD) tenant that has the initial domain name. You have a domain name of ips.com registered at a third-party registrar. You need to ensure that you can create Azure AD users that have names containing a suffix of aips.com.
Which of the following would need to be implemented to fulfill this requirement? Choose 3 answers from the options given below.

An Azure account and subscription are currently in use by a corporation. They want to use Virtual Machines and a load balancer to host an application. It is necessary to ensure that the application is available 99.99 percent of the time. Which of the following would have to be in place in order for this to work? You must also keep the solution’s costs to a minimum. Choose two responses from the list below.

A corporation has set up a load balancer that distributes traffic across three virtual servers on ports 80 and 443. You must direct all RDP traffic to a virtual machine called demovm. How would you go about accomplishing this?

A corporation has set up a load balancer that distributes traffic across three virtual servers on ports 80 and 443. For each request, you must ensure that all clients are served by the same web server. Which of the following would you set up to meet this need?

A business has begun to use Azure and has established a subscription. They want to see the costs associated with each resource type. Which of the following will assist you in obtaining these details?

In Azure, your firm already has a Virtual Network defined. A default subnet in the Virtual Network has two virtual machines named demovm and demovm1. For a period of three hours, all network traffic between the Virtual Machines must be examined. You provide a method for creating a Data Collector collection.
Does this solution fulfill the requirement?

In Azure, your firm already has a Virtual Network defined. A default subnet in the Virtual Network has two virtual machines named demovm and demovm1. For a period of three hours, all network traffic between the Virtual Machines must be examined. You suggest an Azure Network Watcher Packet Capture solution.
Does this solution fulfill the requirement?

In Azure, your firm already has a Virtual Network defined. A default subnet in the Virtual Network has two virtual machines named demovm and demovm1. For a period of three hours, all network traffic between the Virtual Machines must be examined. You offer a method for creating a network in and network out metric chart.
Does this solution fulfill the requirement?

You are the Azure administrator for a company. You have to create a custom role based on the Virtual Machine Reader role. You have to complete the following PowerShell script.

$ipsrole = SLOT 1 “Virtual Machine Reader”
$ ipsrole.id = $null
$ ipsrole.Name = “Virtual Machine Reader”
$ ipsrole.Description = “Read permissions for virtual machines”
$ ipsrole.Actions.Clear()
$ ipsrole.Actions.Add(“Microsoft.Storage/*/read”)
$ ipsrole.Actions.Add(“Microsoft.Network/*/read”)
$ ipsrole.Actions.Add(“Microsoft.Compute/*/read”)
$ ipsrole.AssignableScopes.Clear()
$ ipsrole.AssignableScopes.Add(“/subscriptions/000230400-0500-0440-0440-0055500000000”)
SLOT2-Role $ipsrole

Which of the following would come in Slot 1?

You are the Azure administrator for a company. You have to create a custom role based on the Virtual Machine Reader role. You have to complete the following PowerShell script.

$ipsrole = SLOT 1 “Virtual Machine Reader”
$ ipsrole.id = $null
$ ipsrole.Name = “Virtual Machine Reader”
$ ipsrole.Description = “Read permissions for virtual machines”
$ ipsrole.Actions.Clear()
$ ipsrole.Actions.Add(“Microsoft.Storage/*/read”)
$ ipsrole.Actions.Add(“Microsoft.Network/*/read”)
$ ipsrole.Actions.Add(“Microsoft.Compute/*/read”)
$ ipsrole.AssignableScopes.Clear()
$ ipsrole.AssignableScopes.Add(“/subscriptions/000230400-0500-0440-0440-0055500000000”)
SLOT2-Role $ipsrole

Which of the following would come in Slot 2?

An Azure account and subscription have just been set up for a corporation. It is required that IT administrators only be able to create virtual machines of a specific SKU size. Which of the following can assist you in achieving this goal?

A company has the following set of Virtual Machines defined in the Azure account.

The company wants to move ips-vm1 to another subscription. Which of the following can be implemented to fulfill this requirement?

A team has a Virtual Machine defined in Azure. A new network interface named secondary has been created. The Network interface needs to be added to the Virtual machine. What must be done first in order to ensure that the network interface can be attached to the Virtual Machine?

A company has the following virtual networks defined in Azure.

The following virtual machines have been defined as well.

The necessary peering connections have been created between ips-network1 and ips-network2. The firewalls on the virtual machines have been modified to allow ICMP traffic. But traffic does not seem to flow between the virtual machines when the ping request is made.

Which of the following can be used to diagnose the issue?

A company has the following virtual networks defined in Azure.

The following virtual machines have been defined as well.

The necessary peering connections have been created between ips-network1 and ips-network2. The firewalls on the virtual machines have been modified to allow ICMP traffic. But traffic does not seem to flow between the virtual machines when the ping request is made.

If the security department wanted to check on any network intrusions into the virtual networks, which of the following tool could be used for this purpose?
Which of the following can be used to diagnose the issue?

Your company has an Azure account and subscription. The subscription contains a virtual machine named demovm. You have a computer named Computer1 that runs Windows 10. Computer1 is connected to the Internet. You add a network interface to the VM1 from Computer. You attempt to connect to demovm by using Remote Desktop, but the connection fails. You need to establish a Remote Desktop connection to demovm.
What should you do first?

Your company has an Azure account and subscription. The subscription contains a virtual machine named demovm. You have a computer named Computer1 that runs Windows 10. The computer is connected to the Internet. You add a network interface to the VM1 from Computer1 you want to be able to also access a web service running on port 80 after demovm is started.
Which of the following must be done for this to work?

Your company has an Azure account and subscription. The subscription contains the resources in the following table:

Using a single Azure Resource Manager template, your IT administrator created a virtual machine called demovm and a storage account called ips-temp. You should go over the template that was used for the deployment again. To access the template that was used for the deployment, which of the following resource blades should be used?

Your company has an Azure subscription. In the subscription. you go ahead and create an Azure file snare named share1. You also create a shared access signature (SAS) named SASdemo. If you use SASdemo to connect to the storage account and open Microsoft Azure Storage Explorer on a machine with an IP address of 193.77.134.1, then, you:

Your company has an Azure subscription. In the subscription. You go ahead and create an Azure file share named share1. You also create a shared access signature (SAS) named SASdemo. If you use the net use command on a computer that has an IP address of 193.77.134.50 and then use SASdemo to connect to share1. Then you……

You want to set up a virtual network subnet with five virtual machines. A public IP address and a private IP address will be assigned to each virtual machine. Inbound and outbound security policies must be the same for each virtual machine.
What is the bare minimum of network interfaces you need?

You want to set up a virtual network subnet with five virtual machines. A public IP address and a private IP address will be assigned to each virtual machine. Inbound and outbound security policies must be the same for each virtual machine.
What is the bare minimum of network security groups you need?

You have a virtual network named VNet2 that has the configuration.

Before a virtual machine on VNET2 can receive an IP address from 192 168.1.0/24 you must first.

You have a virtual network named VNet2 that has the configuration.

Before a virtual machine on VNET2 can receive an IP address from 10 2.1.0/24 you must first,

A company has an Azure subscription that contains the resources in the following table:

The ipsstore contains a file share named documents. The document file share contains 1000 files.

You need to synchronize the files in the file share with an on-premises server named ipsserver. Which of the following would you need to implement to fulfill this requirement? Choose 3 answers from the options given below.

A company needs to create a storage account that needs to conform to the following requirements
• Users should be able to add files such as images and videos
• Ability to store archive data
• File shares need to be in place which can be accessed across several VMs
• The data needs to be available even if a region goes down
• The solution needs to be cost-effective
Which of the following type of storage account would you create for this purpose?

A company needs to create a storage account that needs to conform to the following requirements
• Users should be able to add files such as images and videos
• Ability to store archive data
• File shares need to be in place which can be accessed across several VMs
• The data needs to be available even if a region goes down
• The solution needs to be cost-effective
What is the type of replication that needs to be configured for the storage account?

You need to deploy two Azure virtual machines named VM1 and VM2 based on the Windows server 2016. The deployment must meet the following requirements:
• Provide a Service Level Agreement (SLA) of 99.95 percent availability.
• Use managed disks
• You propose a solution to create a scale set for the requirement.
Would the solution meet the goal?

You need to deploy two Azure virtual machines named VM1 and VM2 based on the Windows server 2016 image. The deployment must meet the following requirements:
• Provide a Service Level Agreement (SLA) of 99.95 percent availability.
• Use managed disks
• You propose a solution to create an availability set for the requirement.
Would the solution meet the goal?

You need to deploy two Azure virtual machines named VM1 and VM2 based on the Windows server 2016. The deployment must meet the following requirements:
• Provide a Service Level Agreement (SLA) of 99.95 percent availability.
• Use managed disks
• You propose a solution to create a Traffic Manager for the requirement.
Would the solution meet the goal?

Your company has an Azure account and an Azure subscription. They have

created a Virtual Network named ips-net. The following users have been set up.

Which of the following users would be able to add a subnet to the Virtual Network?

Your company has an Azure account and an Azure subscription. They have

created a Virtual Network named ips-net. The following users have been set up.

Which of the following users would be able to add the Reader role access for a user to the Virtual Network?

You work as an Azure Administrator for a company. You have the below JSON role definition.

You have to ensure that a role can be in place that would have the following requirements.
• View all the resources in the Azure subscription
• Issue support requests to Microsoft.
• Use the principle of least privilege.
• You have to complete the below JSON role definition
Which of the following would go into Slot1?

You work as an Azure Administrator for a company. You have the below JSON role definition.

You have to ensure that a role can be in place that would have the following requirements.
• View all the resources in the Azure subscription
• Issue support requests to Microsoft.
• Use the principle of least privilege
• You have to complete the below JSON role definition
Which of the following would go into Slot2?

You have the Azure virtual networks shown in the following table.

To which virtual networks can you establish a peering connection from VNet1?

Your company has an Azure account and a subscription. The subscription contains the virtual networks in the following table.

The virtual machines listed in the table are also included in the subscription.

All of the virtual machines’ firewalls are set to allow all ICMP traffic. The peerings are entered in the table below.

For each of the following statements. Select Yes if the statement is true

Is VM1 peered with VM3?

Your company has an Azure account and a subscription. The subscription contains the virtual networks in the following table.

The subscription also contains the virtual machines in the following table.

All of the virtual machines’ firewalls are set to allow all ICMP traffic. The peerings are entered in the table below.

For each of the following statements, select yes, if the statement is true.

Does VM2 peer with VM3?

Your company has an Azure account and a subscription. The subscription contains the virtual networks in the following table.

The subscription also contains the virtual machines in the following table.

All of the virtual machines’ firewalls are set to allow all ICMP traffic. The peerings are entered in the table below.

For each of the following statements. Select Yes, if the statement is true.

Is VM2 peered with VM1?

A company has the following storage accounts in place as part of its Azure subscription.

Which storage account(s) could be utilized to store things in the Archive tier?

A company needs to deploy the following architecture to Azure.
The architecture would consist of a load balancer that should only accept requests via private IP addresses and should not flow via the internet. The load balancer would direct requests to database servers hosted on Virtual machines.
For this architecture, which of the following load balancer types should be used?

Case Study.
Overview: IPS is an online training provider.
Existing Environment: The existing environment for IPS currently consists of the following:
• A set of Virtual machines that host web-based application workloads
• A set of Virtual machines that host database workloads
• An Active directory setup using Windows Server 2012 R2
Proposed Environment
• IPS has setup an Azure Active Directory (Azure AD) tenant recently
• They want to migrate their web and database workloads to the cloud
• They also want to setup a document store where users will be able to upload and download files
Infrastructure changes
• There is a need to setup Azure AD and ensure users from their on-premises Active directory is synced up to Azure AD
• A custom domain of ips.com also needs to be setup in Azure
• The web-based Virtual Machines in Azure should only allow HTTPS traffic for the Internet-based users
• Non-Functional requirements
• An SLA of 99.5% needs to be guaranteed for the availability of the Virtual Machines
• Storage replication needs to be in place to ensure that data is available even in the case of a datacenter failure
• Wherever possible costs should be minimized.
Which of the following should be used to ensure an SLA of 99.5% for the availability of the Virtual Machines? Choose 2 answers from the options given below.

Case Study
Overview: IPS is an online training provider.
Existing Environment: The existing environment for IPS currently consists of the following:
• A set of Virtual machines that host web-based application workloads
• A set of Virtual machines that host database workloads
• An Active directory setup using Windows Server 2012 R2
Proposed Environment
• IPS has setup an Azure Active Directory (Azure AD) tenant recently
• They want to migrate their web and database workloads to the cloud
• They also want to setup a document store where users will be able to upload and download files
Infrastructure changes
• There is a need to setup Azure AD and ensure users from their on-premises Active directory is synced up to Azure AD
• A custom domain of ips.com also needs to be setup in Azure
• The web-based Virtual Machines in Azure should only allow HTTPS traffic for the Internet-based users
Non-Functional requirements
• An SLA of 99.5% needs to be guaranteed for the availability of the Virtual Machines
• Storage replication needs to be in place to ensure that data is available even in the case of a datacenter failure
Wherever possible costs should be minimized when adding custom domain names. Which of the following record needs to be added to your custom domain registrar?

Case Study
Overview: IPS is an online training provider.
Existing Environment: The existing environment for IPS currently consists of the following:
• A set of Virtual machines that host web-based application workloads
• A set of Virtual machines that host database workloads
• An Active directory setup using Windows Server 2012 R2
Proposed Environment
• IPS has setup an Azure Active Directory (Azure AD) tenant recently
• They want to migrate their web and database workloads to the cloud
• They also want to setup a document store where users will be able to upload and download files
Infrastructure changes
• There is a need to setup Azure AD and ensure users from their on-premises Active Directory is synced up to Azure AD
• A custom domain of ips.com also needs to be setup in Azure
• The web-based Virtual Machines in Azure should only allow HTTPS traffic for the Internet-based users
Non-Functional requirements
• An SLA of 99.5% needs to be guaranteed for the availability of the Virtual Machines
• Storage replication needs to be in place to ensure that data is available even in the case of a datacenter failure
• Wherever possible costs should be minimized.
Which of the following rule would you apply to the Network Security Group for the Network interface attached to the webserver?

A team member has created a point-to-site VPN connection between a computer named “WorkstationA” and an Azure Virtual Network. Another point-to-site VPN connection needs to be created between the same Azure Virtual Network and a computer named “WorkstationB”. The VPN client package was generated and installed on “WorkstationB”. You need to ensure you can create a successful point-to-site VPN connection. You make the decision to join “WorkstationB” with the Azure AD tenant.
Would this solution fulfill the requirement?

A team member has established a point-to-site VPN connection between an Azure Virtual Network and a PC named “WorkstationA.” A point-to-site VPN connection between the same Azure Virtual Network and a PC named “WorkstationB” must be established. On “WorkstationB,” a VPN client package was created and installed. You need to ensure you can create a successful point-to-site VPN connection. You make the decision to create a local VPN gateway.
Would this solution fulfill the requirement?