Azure administration and operations.

Your company has serval departments. Each department has a number of virtual machines (VMs). The company has an Azure subscription that contains a resource group named RG1. All VMs are located in RG1. You want to associate each VM with its respective department. What should you do?

Correct Answer: Assign tags to the virtual machines.

You have an Azure subscription that has a Recovery Services vault named Vault1. The subscription contains the virtual machines shown in the following table: You plan to schedule backups to occur every night at 23:00. Which virtual machines can you back up by using Azure Backup?

Correct Answer: VM1, VM2, VM3 and VM4

You need to implement a backup solution for App1 after the application is moved. What should you create first?

Correct Answer: a Recovery Services vault

You discover that VM3 does NOT meet the technical requirements. You need to verify whether the issue relates to the NSGs. What should you use?

Correct Answer: IP flow verify in Azure Network Watcher

You need to ensure that VM1 can communicate with VM4. The solution must minimize the administrative effort. What should you do?

Correct Answer: Establish peering between VNET1 and VNET3.

You have an Azure subscription that contains an Azure Active Directory (Azure AD) tenant named contoso.com and an Azure Kubernetes Service (AKS) cluster named AKS1. An administrator reports that she is unable to grant access to AKS1 to the users in contoso.com. You need to ensure that access to AKS1 can be granted to the contoso.com users. What should you do first?

Correct Answer: From contoso.com, create an OAuth 2.0 authorization endpoint.

Your company has three offices. The offices are located in Miami, Los Angeles, and New York. Each office contains datacenter. You have an Azure subscription that contains resources in the East US and West US Azure regions. Each region contains a virtual network. The virtual networks are peered. You need to connect the datacenters to the subscription. The solution must minimize network latency between the datacenters. What should you create?

Correct Answer: three virtual hubs and one virtual WAN

You have an Azure subscription that contains a virtual machine named VM1. You plan to deploy an Azure Monitor alert rule that will trigger an alert when CPU usage on VM1 exceeds 80 percent. You need to ensure that the alert rule sends an email message to two users named User1 and User2. What should you create for Azure Monitor?

Correct Answer: an action group

You need to meet the user requirement for Admin1. What should you do?

Correct Answer: From the Subscriptions blade, select the subscription, and then modify the Access control (IAM) settings

You need to ensure that you can grant Group4 Azure RBAC read only permissions to all the Azure file shares. What should you do?

Correct Answer: On storage2, enable identity-based access for the file shares.

You need to move the blueprint files to Azure. What should you do?

Correct Answer: Use Azure Storage Explorer to copy the files.

You are planning the move of App1 to Azure. You create a network security group (NSG). You need to recommend a solution to provide users with access to App1. What should you recommend?

Correct Answer: Create an incoming security rule for port 443 from the Internet. Associate the NSG to the subnet that contains the web servers.

You need to add VM1 and VM2 to the backend pool of LB1. What should you do first?

Correct Answer: Redeploy VM1 and VM2 to the same availability set.

You need to recommend a solution to automate the configuration for the finance department users. The solution must meet the technical requirements. What should you include in the recommendation?

Correct Answer: dynamic groups and conditional access policies

You have the Azure virtual machines shown in the following table: You have a Recovery Services vault that protects VM1 and VM2. You need to protect VM3 and VM4 by using Recovery Services. What should you do first?

Correct Answer: Create a new Recovery Services vault

You need to ensure that VM1 can communicate with VM4. The solution must minimize administrative effort. What should you do?

Correct Answer: Establish peering between VNET1 and VNET3.

You have an Azure subscription that contains the resources shown in the following table. LB1 is configured as shown in the following table. You plan to create new inbound NAT rules that meet the following requirements: ✑ Provide Remote Desktop access to VM1 from the internet by using port 3389. ✑ Provide Remote Desktop access to VM2 from the internet by using port 3389. What should you create on LB1 before you can create the new inbound NAT rules?

Correct Answer: a frontend IP address

You are planning to deploy an Ubuntu Server virtual machine to your company's Azure subscription. You are required to implement a custom deployment that includes adding a particular trusted root certification authority (CA). Which of the following should you use to create the virtual machine?

Correct Answer: The az vm create command.

You have an Azure policy as shown in the following exhibit: What is the effect of the policy?

Correct Answer: You can create Azure SQL servers in ContosoRG1 only.

You download an Azure Resource Manager template based on an existing virtual machine. The template will be used to deploy 100 virtual machines. You need to modify the template to reference an administrative password. You must prevent the password from being stored in plain text. What should you create to store the password?

Correct Answer: an Azure Key Vault and an access policy

You have the Azure virtual networks shown in the following table. To which virtual networks can you establish a peering connection from VNet1?

Correct Answer: VNet3 and VNet4 only

You have an Azure subscription named AZPT1 that contains the resources shown in the following table: You create a new Azure subscription named AZPT2. You need to identify which resources can be moved to AZPT2. Which resources should you identify?

Correct Answer: VM1, storage1, VNET1, VM1Managed, and RVAULT1

You have an Azure virtual machine named VM1. You use Azure Backup to create a backup of VM1 named Backup1. After creating Backup1, you perform the following changes to VM1: ✑ Modify the size of VM1. ✑ Copy a file named Budget.xls to a folder named Data. ✑ Reset the password for the built-in administrator account. ✑ Add a data disk to VM1. An administrator uses the Replace existing option to restore VM1 from Backup1. You need to ensure that all the changes to VM1 are restored. Which change should you perform again?

Correct Answer: Copy Budget.xls to Data.

You recently created a new Azure subscription that contains a user named Admin1. Admin1 attempts to deploy an Azure Marketplace resource by using an Azure Resource Manager template. Admin1 deploys the template by using Azure PowerShell and receives the following error message: `User failed validation to purchase resources. Error message: `Legal terms have not been accepted for this item on this subscription. To accept legal terms, please go to the Azure portal (http://go.microsoft.com/fwlink/?LinkId=534873) and configure programmatic deployment for the Marketplace item or create it there for the first time.` You need to ensure that Admin1 can deploy the Marketplace resource successfully. What should you do?

Correct Answer: From Azure PowerShell, run the Set-AzMarketplaceTerms cmdlet

You have an Azure subscription named Subscription1 that contains two Azure virtual networks named VNet1 and VNet2. VNet1 contains a VPN gateway named VPNGW1 that uses static routing. There is a site-to-site VPN connection between your on-premises network and VNet1. On a computer named Client1 that runs Windows 10, you configure a point-to-site VPN connection to VNet1. You configure virtual network peering between VNet1 and VNet2. You verify that you can connect to VNet2 from the on-premises network. Client1 is unable to connect to VNet2. You need to ensure that you can connect Client1 to VNet2. What should you do?

Correct Answer: Select Allow gateway transit on VNet2.

You have an Azure Active Directory (Azure AD) tenant that contains 5,000 user accounts. You create a new user account named AdminUser1. You need to assign the User administrator administrative role to AdminUser1. What should you do from the user account properties?

Correct Answer: From the Directory role blade, modify the directory role

Your company has a main office in London that contains 100 client computers. Three years ago, you migrated to Azure Active Directory (Azure AD). The company's security policy states that all personal devices and corporate-owned devices must be registered or joined to Azure AD. A remote user named User1 is unable to join a personal device to Azure AD from a home network. You verify that User1 was able to join devices to Azure AD in the past. You need to ensure that User1 can join the device to Azure AD. What should you do?

Correct Answer: From the Device settings blade, modify the Users may join devices to Azure AD setting.

You have an Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com that contains 100 user accounts. You purchase 10 Azure AD Premium P2 licenses for the tenant. You need to ensure that 10 users can use all the Azure AD Premium features. What should you do?

Correct Answer: From the Licenses blade of Azure AD, assign a license

You have an Azure subscription that contains the resources in the following table. To which subnets can you apply NSG1?

Correct Answer: the subnets on VNet3 only

Welcome to awslagi.com – Sharing AWS, Google Cloud, Microsoft Azure IT Exams. It's free for all!

Microsoft Azure Administrator

Administer Azure with practical cloud operations expertise.

4.8★★★★★(327 ratings)

12,863 studentsIntermediate

Gain modern Azure administration skills covering identities, storage, compute, networking, and monitoring. The exam is designed for professionals who manage cloud infrastructure and keep services running reliably in production environments. This certification is one of the strongest paths for cloud administrators today. It supports career growth by proving you can operate Azure efficiently and securely at enterprise scale.

What you'll learn

Manage identities- Configure storage- Deploy compute resources- Operate virtual networks- Monitor and back up resources

AZ-104

Lectures4

Quizzes0

Duration30 week

Students12,863

$20.00

📢 Unlock Full Access to Success!

"The content displayed here is a promotional preview and contains only 50% of the actual exam database. To access the complete set of updated questions, please upgrade to the Full Version."

👉 Click the button and follow the instructions to secure your full access immediately!