The latest Microsoft AZ-104 Azure Administrator certification actual real practice exam question and answer (Q&A) dumps are available free, which are helpful for you to pass the Microsoft AZ-104 Azure Administrator exam and earn Microsoft AZ-104 Azure Administrator certification.
Question 181
You have two Azure virtual machines named VM1 and VM2. You have two Recovery Services vaults named RSV1 and RSV2.
VM2 is protected by RSV1.
You need to use RSV2 to protect VM2.
What should you do first?
A. From the RSV1 blade, click Backup items and stop the VM2 backup.
B. From the RSV1 blade, click Backup Jobs and export the VM2 backup.
C. From the RSV1 blade, click Backup. From the Backup blade, select the backup for the virtual machine, and then click Backup.
*D. From the VM2 blade, click Disaster recovery, click Replication settings, and then select RSV2 as the Recovery Services vault.
Explanation:
The Azure Site Recovery service contributes to your disaster recovery strategy by managing and orchestrating replication, failover, and failback of on-premises machines and Azure virtual machines (VMs).
Question 182
You have an Azure subscription that contains an Azure Service Bus named Bus1.
Your company plans to deploy two Azure web apps named App1 and App2. The web apps will create messages that have the following requirements:
- Each message created by App1 must be consumed by only a single consumer
- Each message created by App2 will be consumed by multiple consumers.
Which resource should you create for each web app? To answer, drag the appropriate resources to the correct web apps. Each resource may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
App1:
- A Service Bus queue
- A Service Bus topic
- An Azure Event Grid topic
- Azure Blob storage
App2:
- A Service Bus queue
- A Service Bus topic
- An Azure Event Grid topic
- Azure Blob storage
Answer:
App1: A Service Bus queue
App2: A Service Bus topic
Question 183
You have an Azure subscription that contains the resources shown in the following table.
| Name | Type |
|---|---|
| Cluster1 | Azure Kubernetes Service (AKS) |
| Registry1 | Axure Container Registry |
| Application1 | Container image |
You need to deploy Application1 to Cluster1.
Which command should you run?
A. az acr build
*B. az aks create
C. docker build
D. kubectl apply
Question 184
Your company has 100 users located in an office in Paris.
The on-premises network contains the servers shown in the following table.
| Name | Operating system | Configuration |
|---|---|---|
| Server1 | Windows Server 2012 R2 | Microsoft Exchange Server 2016 |
| Server2 | Windows Server 2016 | Microsoft SQL Server 2016 |
| Server3 | Windows Server 2016 | Domain controller |
| Server4 | Red Hat Enterprise Linux 7.5 | File server |
You create a new subscription. You need to move all the servers to Azure.
Solution: You use the Data Migration Assistant tool.
Does this meet the goal?
A. Yes
*B. No
Explanation:
The Data Migration Assistant tool is used to assess on-premises SQL Server instance(s) migrating to Azure SQL database(s).
Question 184
You need to the appropriate sizes for the Azure virtual for Server2.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
From the Azure portal:
- Create an Azure Migrate project.
- Create a Recovery Services vault.
- Upload a management certificate.
- Create an Azure Import/Export job.
On Server2:
- Enable Hyper-V Replica.
- Install the Azure File Sync agent.
- Create a collector virtual machine.
- Install the Azure Site REcovery Provider.
Answer:
From the Azure portal: Create a Recovery Services vault.
On Server2: Install the Azure Site REcovery Provider.
Explanation:
Box 1: Create a Recovery Services vault
Create a Recovery Services vault on the Azure Portal.
Box 2: Install the Azure Site Recovery Provider
Azure Site Recovery can be used to manage migration of on-premises machines to Azure.
Scenario: Migrate the virtual machines hosted on Server1 and Server2 to Azure.
Server2 has the Hyper-V host role.
Question 185
You have an Azure subscription named Subscroption1.
In Subscription1, you create an alert rule named Alert1.
The Alert1 action group is configured as shown in the following exhibit.
Alert1 alert criteria is triggered every minute.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
The number of email messages that Alert1 will send in an hour is [answer choice]:
- 0
- 4
- 6
- 12
- 60
The number of SMS messages that Alert1 will send in an hour is [answer choice]:
- 0
- 4
- 6
- 12
- 60
Answer:
The number of email messages that Alert1 will send in an hour is [answer choice]: 60
The number of SMS messages that Alert1 will send in an hour is [answer choice]: 12
Explanation:
Box 1: 60
One alert per minute will trigger one email per minute.
Box 2: 12
No more than 1 SMS every 5 minutes can be send, which equals 12 per hour.
Note: Rate limiting is a suspension of notifications that occurs when too many are sent to a particular phone number, email address or device. Rate limiting ensures that alerts are manageable and actionable.
The rate limit thresholds are:
- SMS: No more than 1 SMS every 5 minutes.
- Voice: No more than 1 Voice call every 5 minutes.
- Email: No more than 100 emails in an hour.
- Other actions are not rate limited.
Question 186
Note This question is part of a series of questions that present the same seer Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You manage a virtual network named VNet1 that is hosted in the West US Azure region.
VNet1 hosts two virtual machines named VM1 and VM2 that run Windows Server.
You need to inspect all the network traffic from VM1 to VM2 for a period of three hours.
Solution: From Performance Monitor, you create a Data Collector Set (DCS) Does this meet the goal?
A. Yes
*B. No
Explanation:
Network performance monitor allows you to monitor connectivity and latencies across hybrid network architectures, Expressroute circuits, and service/application endpoints.
With an data collector set we can count specified network traffic, but we cannot inspect it.
For this we would need a network watcher Packet Capture.
Question 187
You have an availability set named AS1 that contains three virtual machines named VM1, VM2, and VM3.
You attempt to reconfigure VM1 to use a larger size. The operation fails and you receive an allocation failure message.
You need to ensure that the resize operation succeeds.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Actions:
- Start VM1, VM2, and VM3.
- Stop VM1, VM2, and VM3.
- Start VM2 and VM3.
- Resize VM1.
- Stop VM2 and VM3.
- Start VM1.
Answer:
Action 1: Stop VM1, VM2 and VM3
Action 2: Resize VM1
Action 3: Start VM1, VM2, and VM3
Explanation:
Action 1: Stop VM1, VM2 and VM3
If the VM you wish to resize is part of an availability set, then you must stop all VMs in the availability set before changing the size of any VM in the availability set. The reason all VMs in the availability set must be stopped before performing the resize operation to a size that requires different hardware is that all running VMs in the availability set must be using the same physical hardware cluster. Therefore, if a change of physical hardware cluster is required to change the VM size then all VMs must be first stopped and then restarted one-by-one to a different physical hardware clusters.
Action 2: Resize VM1
Action 3: Start VM1, VM2, and VM3
Question 188
You have an Azure subscription named Subscription1 that contains the resources shown in the following table.
| Name | Type | Location | Resource group |
|---|---|---|---|
| RG1 | Resource group | East US | Not applicable |
| RG2 | Resource group | West Europe | Not applicable |
| RG3 | Resource group | North Europe | Not applicable |
| VNET1 | Virtual network | Central US | RG1 |
| VM1 | Virtual machine | West US | RG2 |
VM1 connects to a virtual network named VNET2 by using a network interface named NIC1.
You need to create a new network interface named NIC2 for VM1.
Solution: You create NIC2 in RG1 and West US.
Does this meet the goal?
*A. Yes
B. No
Explanation:
The virtual machine you attach a network interface to and the virtual network you connect it to must exist in the same location, here West US, also referred to as a region.
Question 189
You have an Azure web app named App1. App1 runs in an Azure App Service plan named Plan1. Plan1 is associated to the Free pricing tier.
You discover that App1 stops each day after running continuously for 60 minutes.
You need to ensure that App1 can run continuously for the entire day.
Solution: You add a continuous WebJob to App1.
Does this meet the goal?
A. Yes
*B. No
Explanation:
A web app can time out after 20 minutes of inactivity. Only requests to the actual web app reset the timer.
Viewing the app’s configuration in the Azure portal or making requests to the advanced tools site (https://<app_name>.scm.azurewebsites.net) don’t reset the timer. If your app runs continuous or scheduled (Timer trigger) WebJobs, enable Always On to ensure that the WebJobs run reliably. This feature is available only in the Basic, Standard, and Premium pricing tiers.
The app service plan mentioned in the question is associated to the free tier , so addition of a continuous WebJob to App1 is not possible. So the proposed solution won’t meet the goal.
Question 190
You have an Azure subscription that contains an Azure Directory (Azure AD) tenant named contoso.com. The tenant is synced to the on-premises Active Directory domain. The domain contains the users shown in the following table.
| Name | Role |
|---|---|
| SecAdmin1 | Security administrator |
| BillAdmin1 | Billing Administrator |
| User1 | Reports reader |
You enable self-service password reset (SSPR) for all users and configure SSPR to have the following authentication methods:
- Number of methods required to reset: 2
- Methods available to users: Mobile phone, Security questions
- Number of questions required to register: 3
- Number of questions required to reset: 3
You select the following security questions:
- What is your favorite food?
- In what city was your first job?
- What was the name of your first pet?
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
SecAdmin1 must answer the following question if he wants to reset his password: In what city was your first job?
BillAdmin1 must answer the following question if he wants to reset his password: What is your favorite food?
User1 must answer the following question if he wants to reset his password: What was the name of your first pet?
Answer:
SecAdmin1 must answer the following question if he wants to reset his password: In what city was your first job?: No
BillAdmin1 must answer the following question if he wants to reset his password: What is your favorite food?: Yes
User1 must answer the following question if he wants to reset his password: What was the name of your first pet?: Yes
Explanation:
Box 1: No
Administrator accounts are special accounts with elevated permissions. To secure them, the following restrictions apply to changing passwords of administrators:
On-premises enterprise administrators or domain administrators cannot reset their password through Self-service password reset (SSPR). They can only change their password in their on-premises environment.
Thus, we recommend not syncing on-prem AD admin accounts to Azure AD.
An administrator cannot use secret Questions & Answers as a method to reset password.
Box 2: Yes
Self-service password reset (SSPR) is an Azure Active Directory feature that enables employees to reset their passwords without needing to contact IT staff.
Box 3: Yes