Skip to Content

Exam AZ-104 Microsoft Azure Administrator Questions and Answers – Page 1 Part 2

The latest Microsoft AZ-104 Azure Administrator certification actual real practice exam question and answer (Q&A) dumps are available free, which are helpful for you to pass the Microsoft AZ-104 Azure Administrator exam and earn Microsoft AZ-104 Azure Administrator certification.

Question 71

You have an Azure subscription that contains a virtual machine named VM1. VM1 hosts a line-of-business application that is available 24 hours a day. VM1 has one network interface and one managed disk. VM1 uses the D4s v3 size.
You plan to make the following changes to VM1:

  • Change the size to D8s v3.
  • Add a 500-GB managed disk.
  • Add the Puppet Agent extension.
  • Enable Desired State Configuration Management.

Which change will cause downtime for VM1?

A. Enable Desired State Configuration Management
B. Add a 500-GB managed disk
*C. Change the size to D8s v3
D. Add the Puppet Agent extension

Explanation:

While resizing the VM it must be in a stopped state.

Question 72

You have an app named App1 that runs on an Azure web app named webapp1.
The developers at your company upload an update of App1 to a Git repository named Git1.
Webapp1 has the deployment slots shown in the following table.

Name Type
webapp1-prod Production
webapp1-test Staging
Webapp1 has the deployment slots shown in the following table.

You need to ensure that the App1 update is tested before the update is made available to users.
Which two actions should you perform? Each correct answer presents part of the solution.

*A. Swap the slots
B. Deploy the App1 update to webapp1-prod, and then test the update
C. Stop webapp1-prod
*D. Deploy the App1 update to webapp1-test, and then test the update
E. Stop webapp1-test

Question 73

You have an Azure subscription named Subscription1 that has the following providers registered:

  • Authorization
  • Automation
  • Resources
  • Compute
  • KeyVault
  • Network
  • Storage
  • Billing
  • Web

Subscription1 contains an Azure virtual machine named VM1 that has the following configurations:

  • Private IP address: 10.0.0.4 (dynamic)
  • Network security group (NSG): NSG1
  • Public IP address: None
  • Availability set: AVSet
  • Subnet: 10.0.0.0/24
  • Managed disks: No
  • Location: East US

You need to record all the successful and failed connection attempts to VM1.
Which three actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

*A. Enable Azure Network Watcher in the East US Azure region.
B. Add an Azure Network Watcher connection monitor.
*C. Register the MicrosoftLogAnalytics provider.
*D. Create an Azure Storage account.
E. Register the Microsoft.Insights resource provider.
F. Enable Azure Network Watcher flow logs.

Explanation:

D: NSG flow log data is written to an Azure Storage account. You need to create an Azure Storage account, With an Azure Storage account NSG flow logs can be enabled.
A: Enable network watcher in the East US region.
C: NSG flow logging requires the Microsoft.Insights provider.

Question 74

You need to deploy an Azure virtual machine scale set that contains five instances as quickly as possible.
What should you do?

A. Deploy five virtual machines. Modify the Availability Zones settings for each virtual machine.
B. Deploy five virtual machines. Modify the Size setting for each virtual machine.
C. Deploy one virtual machine scale set that is set to VM (virtual machines) orchestration mode.
*D. Deploy one virtual machine scale set that is set to ScaleSetVM orchestration mode.

Question 75

You plan to create the Azure web apps shown in the following table.

Name Runtime stack
WebApp1 .NET Core 3.0
WebApp2 ASP.NET V4.7
WebApp3 PHP 7.3
WebApp4 Ruby 2.6
You plan to create the Azure web apps shown in the following table.

What is the minimum number of App Service plans you should create for the web apps?

*A. 1
B. 2
C. 3
D. 4

Question 76

You have an Azure subscription named Subscription1. Subscription1 contains a resource group named RG1. RG1 contains resources that were deployed by using templates.
You need to view the date and time when the resources were created in RG1.
Solution: From the Subscriptions blade, you select the subscription, and then click Programmatic deployment.
Does this meet the goal?

A. Yes
*B. No

Explanation:

From the RG1 blade, click Deployments. You see a history of deployment for the resource group.

Question 77

You have an Azure subscription that contains the resources shown in the following table.

Name Type Region
RG1 Resource group West US
RG2 Resource group East Asia
storage1 Storage account West US
storage2 Storage account East Asia
VM1 Virtual machine West US
VNET1 Virtual network West US
VNET2 Virtual network East Asia
You have an Azure subscription that contains the resources shown in the following table.

VM1 connects to VNET1.
You need to connect VM1 to VNET2.
Solution: You create a new network interface, and then you add the network interface to VM1.
Does this meet the goal?

A. Yes
*B. No

Explanation:

You should delete VM1. You recreate VM1, and then you add the network interface for VM1.
Note: When you create an Azure virtual machine (VM), you must create a virtual network (VNet) or use an existing VNet. You can change the subnet a VM is connected to after it’s created, but you cannot change the VNet.

Question 78

You have an Azure Active Directory (Azure AD) tenant named adatum.com that contains the users shown in the following table.

Name Role
User1 None
User2 Global administrator
User3 Cloud device administrator
User4 Intune administrator
You have an Azure Active Directory (Azure AD) tenant named adatum.com that contains the users shown in the following table.

Adatum.com has the following configurations:

  • Users may join devices to Azure AD is set to User1.
  • Additional local administrators on Azure AD joined devices is set to None.

You deploy Windows 10 to a computer named Computer1. User1 joins Computer1 to adatum.com.
You need to identify the local Administrator group membership on Computer1.
Which users are members of the local Administrators group?

A. User1 only
B. User2 only
*C. User1 and User2 only
D. User1, User2, and User3 only
E. User1, User2, User3, and User4

Explanation:

Users may join devices to Azure AD – This setting enables you to select the users who can register their devices as Azure AD joined devices. The default is All.
Additional local administrators on Azure AD joined devices – You can select the users that are granted local administrator rights on a device. Users added here are added to the Device Administrators role in Azure AD. Global administrators, here User2, in Azure AD and device owners are granted local administrator rights by default.

Question 79

You have an Azure subscription named Subscription1 that contains the resources shown in the following table.

Name Type Region Resource group
RG1 Resource group West Europe Not applicable
RG2 Resource group North Europe Not applicable
Vault1 Recovery Services vault West Europe RG1
You have an Azure subscription named Subscription1 that contains the resources shown in the following table.

You create virtual machines in Subscription1 as shown in the following table.

Name Resource group Region Operating system
VM1 RG1 West Europe Windows Server 2016
VM2 RG1 North Europe Windows Server 2016
VM3 RG2 West Europe Windows Server 2016
VMA RG1 West Europe Ubuntu Server 18.04
VMB RG1 North Europe Ubuntu Server 18.04
VMC RG2 West Europe Ubuntu Server 18.04
You create virtual machines in Subscription1 as shown in the following table.

You plan to use Vault1 for the backup of as many virtual machines as possible.
Which virtual machines can be backed up to Vault1?

A. VM1 only
B. VM3 and VMC only
C. VM1, VM2, VM3, VMA, VMB, and VMC
*D. VM1, VM3, VMA, and VMC only
E. VM1 and VM3 only

Explanation:

To create a vault to protect virtual machines, the vault must be in the same region as the virtual machines.
If you have virtual machines in several regions, create a Recovery Services vault in each region.

Question 80

You have an Azure Kubernetes Service (AKS) cluster named AKS1.
You need to configure cluster autoscaler for AKS1.
Which two tools should you use? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.

*A. the kubectl command
*B. the az aks command
C. the Set-AzVm cmdlet
D. the Azure portal
E. the Set-AzAks cmdlet

Explanation:

A: The following example uses the kubectl autoscale command to autoscale the number of pods in the azure-vote-front deployment. If average CPU utilization across all pods exceeds 50% of their requested usage, the autoscaler increases the pods up to a maximum of 10 instances. A minimum of 3 instances is then defined for the deployment:
kubectl autoscale deployment azure-vote-front –cpu-percent=50 –min=3 –max=10
B: Use the az aks update command to enable and configure the cluster autoscaler on the node pool for the existing cluster.