The latest Microsoft AZ-104 Azure Administrator certification actual real practice exam question and answer (Q&A) dumps are available free, which are helpful for you to pass the Microsoft AZ-104 Azure Administrator exam and earn Microsoft AZ-104 Azure Administrator certification.
Question 191
You have a Basic App Service plan named ASP1 that hosts an Azure App Service named App1.
You need to configure a custom domain and enable backups for App1.
What should you do first?
A. Configure a WebJob for App1.
*B. Scale up ASP1.
C. Scale out ASP1.
D. Configure the application settings for App1.
Explanation:
Scale up ASP1 : Correct
Basic App service plan does not support backup/restore.
The Backup and Restore feature requires the App Service plan to be in the Standard, Premium or Isolated tier.
Since in question it is mentioned as a Basic service plan app so at first you need to do it to Scale up the service plan so that backup can be enabled on App1.
Scale up: Get more CPU, memory, disk space, and extra features like dedicated virtual machines (VMs), custom domains and certificates, staging slots, autoscaling, and more. You scale up by changing the pricing tier of the App Service plan that your app belongs to.
Configure a WebJob for App1 : Incorrect
WebJobs is a feature of Azure App Service that enables you to run a program or script in the same instance as a web app, API app, or mobile app. There is no additional cost to use WebJobs
Scale out ASP1 : Incorrect
Scale out: Increase the number of VM instances that run your app. You can scale out to as many as 30 instances, depending on your pricing tier.
Configure the application settings for App1 : Incorrect
This is the 2nd step you need to perform once azure service plan upgraded to standard.
Most folks don’t realize how easy it is to configure a backup copy of your Azure App Service to ensure you have restorable archive copies of your app and database. In order to take advantage of this, you’ll need to log into your Azure account and go to your App Service that you created and look under Settings then you will see Backup
Question 192
You have an Azure subscription named Subscription1. Subscription1 contains the virtual networks in the following table.
| Name | Address space | Subnet name | Subnet address range |
|---|---|---|---|
| VNet1 | 10.1.0.0/16 | Subnet1 | 10.1.1.0/24 |
| VNet2 | 10.10.0.0/16 | Subnet2 | 10.10.1.0/24 |
| VNet3 | 172.16.0.0/16 | Subnet3 | 172.16.1.0/24 |
Subscription1 contains the virtual machines in the following table:
| Name | Network | Subnet | IP address |
|---|---|---|---|
| VM1 | VNet1 | Subnet1 | 10.1.1.4 |
| VM2 | VNet2 | Subnet2 | 10.10.1.4 |
| VM3 | VNet3 | Subnet3 | 172.16.1.4 |
The firewalls on all the virtual machines are configured to allow all ICMP traffic.
You add the peerings in the following table.
| Virtual network | Peering network |
|---|---|
| VNet1 | VNet3 |
| VNet2 | VNet3 |
| VNet3 | VNet1 |
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
- VM1 can ping VM3.
- VM2 can ping VM3.
- VM2 can ping VM1.
Answer:
VM1 can ping VM3: Yes
VM2 can ping VM3: No
VM2 can ping VM1: No
Explanation:
Statement 1: Yes
Vnet1 and Vnet3 are peers.
Statement 2: No
Statement 3: No
Peering connections are non-transitive.
Question 193
You have an Azure subscription that contains the virtual networks shown in the following table.
| Name | Location |
|---|---|
| VNET1 | West US |
| VNET2 | West US |
| VNET3 | East US |
The subscription contains the private DNS zones shown in the following table.
| Name | Location |
|---|---|
| Zone1.com | West US |
| Zone2.com | West US |
| Zone3.com | East US |
You add virtual network links to the private DNS zones as shown in the following table.
| Name | Private DNS zone | Virtual network | Enable auto registration |
|---|---|---|---|
| Link1 | Zone1.com | VNET1 | Yes |
| Link2 | Zone2.com | VNET2 | No |
| Link3 | Zone3.com | VNET3 | No |
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
- You can enable auto registration for Link2.
- You can add a virtual network link for VNET1 to Zone3.com.
- You can add a virtual network link for VNET2 to Zone1.com and enable auto registration.
Answer:
You can enable auto registration for Link2: No
You can add a virtual network link for VNET1 to Zone3.com: No
You can add a virtual network link for VNET2 to Zone1.com and enable auto registration: No
Question 194
You have an Azure tenant that contains two subscriptions named Subscription1 and Subscription2.
In Subscription1, you deploy a virtual machine named Server1 that runs Windows Server 2016. Server1 uses managed disks.
You need to move Server1 to Subscription2. The solution must minimize administration effort.
What should you do first?
A. In Subscription2, create a copy of the virtual disk.
*B. From Azure PowerShell, run the Move-AzureRmResource cmdlet.
C. Create a snapshot of the virtual disk.
D. Create a new virtual machine in Subscription2.
Explanation:
To move existing resources to another resource group or subscription, use the Move-AzureRmResource cmdlet.
Question 195
You manage a virtual network named VNetl1 that is hosted in the West US Azure region.
VNetl1 hosts two virtual machines named VM1 and VM2 that run Windows Server.
You need to inspect all the network traffic from VM1 to VM2 for a period of three hours.
Solution: From Azure Network Watcher, you create a packet capture.
Does this meet the goal?
A. Yes
*B. No
Explanation:
Azure Network Watcher provides tools to monitor, diagnose, view metrics, and enable or disable logs for resources in an Azure virtual network.
Capture packets to and from a VM
Advanced filtering options and fine-tuned controls, such as the ability to set time and size limitations, provide versatility. The capture can be stored in Azure Storage, on the VM’s disk, or both. You can then analyze the capture file using several standard network capture analysis tools.
Network Watcher variable packet capture allows you to create packet capture sessions to track traffic to and from a virtual machine. Packet capture helps to diagnose network anomalies both reactively and proactivity.
Question 196
You have an A2ure virtual machine named VMV
The network interface for VM1 is configured as shown in the exhibit(Click the Exhibit tab.)
You deploy a web server on VM1. and then create a secure website that is accessible by using the HTTPS protocol. VM1 is used as a web server only.
You need to ensure that users can connect to the website from the internet.
What should you do?
A. For Rule4. change the protocol from UDP to Any
B. Modify the protocol of Rule4.
C. Modify the action of Rule1.
*D. Change the priority of Rute3 to 450
Explanation:
Rule 2 is blocking HTTPS access (port 443) and has a priority of 500.
Changing Rule 3 (ports 60-500) and giving it a lower priority number will allow access on port 443.
Note: Rules are processed in priority order, with lower numbers processed before higher numbers, because lower numbers have higher priority. Once traffic matches a rule, processing stops.
Question 197
You create an Azure web app named WebApp1. WebApp1 has the autoscale settings shown in the following exhibit.
The scale out and scale in rules are configured to have a duration of 10 minutes and a cool down time of five minutes.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
If on August 8, 2018, WebApp1 is used at more than 85 percent for 15 minutes, WebApp1 will be running [answer choice].
- one instance
- two instances
- four instances
- six instances
- ten instances
If on July 8, 2018, WebApp1 is used at more than 15 percent for 60 minutes, WebApp1 will be running [answer choice].
- one instance
- two instances
- three instances
- four instances
- six instances
Answer:
If on August 8, 2018, WebApp1 is used at more than 85 percent for 15 minutes, WebApp1 will be running [one instance].
If on July 8, 2018, WebApp1 is used at more than 15 percent for 60 minutes, WebApp1 will be running [two instances].
Explanation:
Box 1: one instance
Refer to scaling condition provided in the question, August 8, 2018 is outside the schedule of the scale condition 1, and Default instance count is 1.
Box 2: two instances
The default instance count is important because autoscale scales your service to that count when metrics are not available. Therefore, select a default instance count that’s safe for your workloads.
The Default instance count of scale condition 1 is 4, and the Scale in rule decreases the count with 1.
So initial instance count before scale in condition met = 4
CPU utilization was at 15% for 60 mins so after first 10 mins ( The scale out and scale in rules are configured to have a duration of 10 minutes )instance count reduces by 1 hence after first 10 mins instance count is 4-1=3 Now cool down period is 5 mins , after first 15 mins instance count is 3 .
After next 15 mins , instance count will be 3-1=2.
After next 15 mins , instance count will be =2 because minimum instance count must be 2 , it can’t get reduced beyond 2.
So after 60 mins instance count will be at 2.
Question 198
You have an Azure subscription named Subscription1. Subscription1 contains the resources in the following table.
| Name | Type |
|---|---|
| RG2 | Resource group |
| VNet1 | Virtual network |
| VNet2 | Virtual network |
| VM5 | Virtual machine connected to VNet1 |
| VM6 | Virtual machine connected to VNet2 |
In Azure, you create a private DNS zone named adatum.com. You set the registration virtual network to VNet2. The adatum.com zone is configured as shown in the following exhibit.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
- The A record for VMS will be registered automatically in the adatum.com zone.
- VMS can resolve VM9.adatum.com.
- VM6 can resolve VM9.adatum.com.
Answer:
The A record for VMS will be registered automatically in the adatum.com zone: No
VMS can resolve VM9.adatum.com: No
VM6 can resolve VM9.adatum.com: Yes
Explanation:
Box 1: No
Azure DNS provides automatic registration of virtual machines from a single virtual network that’s linked to a private zone as a registration virtual network. VM5 does not belong to the registration virtual network though.
Box 2: No
Forward DNS resolution is supported across virtual networks that are linked to the private zone as resolution virtual networks. VM5 does belong to a resolution virtual network.
Box 3: Yes
VM6 belongs to registration virtual network, and an A (Host) record exists for VM9 in the DNS zone.
By default, registration virtual networks also act as resolution virtual networks, in the sense that DNS resolution against the zone works from any of the virtual machines within the registration virtual network.
Question 199
You have an Azure subscription that is used by four departments in your company. The subscription contains
10 resource groups. Each department uses resources in several resource groups.
You need to send a report to the finance department. The report must detail the costs for each department.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Actions:
- Assign a tag to each resource group.
- Open the Resource costs blade of each resource group.
- Download the usage report.
- Assign a tag to each resource.
- From the Cost analysis blade, filter the view by tag.
Answer:
- Assign a tag to each resource group.
- From the Cost analysis blade, filter the view by tag.
- Download the usage report.
Explanation:
Box 1: Assign a tag to each resource.
You apply tags to your Azure resources giving metadata to logically organize them into a taxonomy. After you apply tags, you can retrieve all the resources in your subscription with that tag name and value. Each resource or resource group can have a maximum of 15 tag name/value pairs. Tags applied to the resource group are not inherited by the resources in that resource group.
Box 2: From the Cost analysis blade, filter the view by tag
After you get your services running, regularly check how much they’re costing you. You can see the current spend and burn rate in Azure portal.
- Visit the Subscriptions blade in Azure portal and select a subscription.
- You should see the cost breakdown and burn rate in the popup blade.
- Click Cost analysis in the list to the left to see the cost breakdown by resource. Wait 24 hours after you add a service for the data to populate.
- You can filter by different properties like tags, resource group, and timespan. Click Apply to confirm the filters and Download if you want to export the view to a Comma-Separated Values (.csv) file.
Box 3: Download the usage report
Question 200
You have an Azure subscription named Subscription1 that contains a virtual network named VNet1.
You add the users in the following table.
| User | Role |
|---|---|
| User1 | Owner |
| User2 | Security Admin |
| User3 | Network Contributor |
Which 2? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Add a subnet to VNet1:
- User1 only
- User3 only
- User1 and User3 only
- User2 and User3 only
- User1, User2, and User3
Assign a user the Reader role to VNet1:
- User1 only
- User2 only
- User3 only
- User1 and User2 only
- User2 and User3 only
- User1, User2, and User3
Answer:
Add a subnet to VNet1: User1 and User3 only
Assign a user the Reader role to VNet1: User1 only