AZ-104 practice questions 191–200

1. Question 191 · 570 in bank

   You create an Azure Storage account named contosostorage. You plan to create a file share named data. Users need to map a drive to the data file share from home computers that run Windows 10. Which outbound port should you open between the home computers and the data file share?

   • A80
   • B443
   • C445
   • D3389

   Show answer

   Answer: C

   Explanation

   Correct answer is port 445, as this is port for SMB protocol to share files Incorrect: Port 80: HTTP, this is for web Port 443: HTTPS, for web too Port 3389: Remote desktop protocol (RDP)

   Source: Adapted from community discussion — sk1803

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

2. Question 192 · 570 in bank

   HOTSPOT - You have an Azure subscription that contains an Azure Storage account named storageaccount1. You export storageaccount1 as an Azure Resource Manager template. The template contains the following sections.

   

   For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://docs.microsoft.com/en-us/azure/templates/microsoft.storage/storageaccounts?tabs=json

   Source: Adapted from community discussion — MrMacro

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

3. Question 193 · 570 in bank

   HOTSPOT - You have an Azure Storage account named storage1. You have an Azure App Service app named App1 and an app named App2 that runs in an Azure container instance. Each app uses a managed identity. You need to ensure that App1 and App2 can read blobs from storage1. The solution must meet the following requirements: ✑ Minimize the number of secrets used. ✑ Ensure that App2 can only read from storage1 for the next 30 days. What should you configure in storage1 for each app? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   App1: Access keys - App2: Shared access signature (SAS) A shared access signature (SAS) provides secure delegated access to resources in your storage account without compromising the security of your data. With a SAS, you have granular control over how a client can access your data. You can control what resources the client may access, what permissions they have on those resources, and how long the SAS is valid, among other parameters. Reference: https://docs.microsoft.com/en-us/azure/storage/common/storage-sas-overview

   Source: Adapted from community discussion — mlantonis

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

4. Question 194 · 570 in bank

   You have an Azure subscription that contains a storage account named storage1. You have the devices shown in the following table.

   

   From which devices can you use AzCopy to copy data to storage1?

   • ADevice 1 only
   • BDevice1, Device2 and Device3
   • CDevice1 and Device2 only
   • DDevice1 and Device3 only

   Show answer

   Answer: B

   Explanation

   B) "Device1, Device2 and Device3" AzCopy is supported in all three operating systems. First, download the AzCopy V10 executable file to any directory on your computer. AzCopy V10 is just an executable file, so there's nothing to install. Windows 64-bit (zip) Windows 32-bit (zip) Linux x86-64 (tar) Linux ARM64 Preview (tar) macOS (zip) Note: If you want to copy data to and from your Azure Table storage service, then install AzCopy version 7.3. https://docs.microsoft.com/en-us/azure/storage/common/storage-use-azcopy-v10

   Source: Adapted from community discussion — JayLearn2022

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

5. Question 195 · 570 in bank

   You have an Azure Storage account named storage1 that contains a blob container named container1. You need to prevent new content added to container1 from being modified for one year. What should you configure?

   • Athe access tier
   • Ban access policy
   • Cthe Access control (IAM) settings
   • Dthe access level

   Show answer

   Answer: B

   Explanation

   Answer B Time-based retention policies: With a time-based retention policy, users can set policies to store data for a specified interval. When a time-based retention policy is set, objects can be created and read, but not modified or deleted. After the retention period has expired, objects can be deleted but not overwritten.

   Source: Adapted from community discussion — rrabeya

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

6. Question 196 · 570 in bank

   HOTSPOT - You have an Azure Storage account named storage1 that contains a blob container. The blob container has a default access tier of Hot. Storage1 contains a container named conainer1. You create lifecycle management rules in storage1 as shown in the following table.

   

   You perform the actions shown in the following table.

   

   For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   I don't think this is correct Rule1 archives blobs(aka files) after 2 days of inactivity and deletes after 9 Rule2 moves to cool tier after 3 days and archive tier after 9 Of the three files, Rule1 only applies to Dep1File1.docx, while the other files have Rule2 applied. The question asks if you can read the files on the 10th, not if they still exist. Files in the archive tier CANNOT be read as documented by Microsoft: "While a blob is in archive storage, the blob data is offline and can't be read or modified. To read or download a blob in archive, you must first rehydrate it to an online tier." https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-storage-tiers Dep1File1.docx was last updated 8 days ago, and would be in archive tier File2.docx was last updated 5 days ago, and would be in cool tier File3.docx was last updated 8 days ago and would be in cool tier Dep1File1 > No cannot be read File2 > Yes cannot be read File3 > Yes can be read

   Source: Adapted from community discussion — NZure

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

7. Question 197 · 570 in bank

   Select 2

   You are configuring Azure Active Directory (Azure AD) authentication for an Azure Storage account named storage1. You need to ensure that the members of a group named Group1 can upload files by using the Azure portal. The solution must use the principle of least privilege. Which two roles should you configure for storage1? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

   • AStorage Account Contributor
   • BStorage Blob Data Contributor
   • CReader
   • DContributor
   • EStorage Blob Data Reader

   Show answer

   Answer: BC

   Explanation

   B) "Storage Blob Data Contributor" & C) "Reader" The following line says it all: "The Reader role is an Azure Resource Manager role that permits users to view storage account resources, but not modify them. It does not provide read permissions to data in Azure Storage, but only to account management resources. The Reader role is necessary so that users can navigate to blob containers in the Azure portal. For example, if you assign the Storage Blob Data Contributor role to user Mary at the level of a container named sample-container, then Mary is granted read, write, and delete access to all of the blobs in that container. However, if Mary wants to view a blob in the Azure portal, then the Storage Blob Data Contributor role by itself will not provide sufficient permissions to navigate through the portal to the blob in order to view it. The additional permissions are required to navigate through the portal and view the other resources that are visible there." - https://docs.microsoft.com/en-us/azure/storage/blobs/assign-azure-role-data-access?tabs=portal

   Source: Adapted from community discussion — NaoVaz

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

8. Question 198 · 570 in bank

   HOTSPOT - You have an Azure Storage account named storage1 that stores images. You need to create a new storage account and replicate the images in storage1 to the new account by using object replication. How should you configure the new account? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://docs.microsoft.com/en-us/azure/storage/blobs/object-replication-overview

   Source: Adapted from community discussion — Ewong

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

9. Question 199 · 570 in bank

   You have an on-premises server that contains a folder named D:\Folder1. You need to copy the contents of D:\Folder1 to the public container in an Azure Storage account named contosodata. Which command should you run?

   • Ahttps://contosodata.blob.core.windows.net/public
   • Bazcopy sync D:\folder1 https://contosodata.blob.core.windows.net/public --snapshot
   • Cazcopy copy D:\folder1 https://contosodata.blob.core.windows.net/public --recursive
   • Daz storage blob copy start-batch D:\Folder1 https://contosodata.blob.core.windows.net/public

   Show answer

   Answer: C

   Explanation

   Correct Answer: C A: URL of the Storage Account. B: The azcopy sync command replicates the source location to the destination location. However, the file is skipped if the last modified time in the destination is more recent. C: The azcopy copy command copies a directory (and all the files in that directory) to a blob container. The result is a directory in the container by the same name. D: The az storage blob copy start-batch command copies multiple blobs to a blob container. Reference: https://docs.microsoft.com/en-us/azure/storage/common/storage-use-azcopy-blobs https://docs.microsoft.com/en-us/azure/storage/common/storage-ref-azcopy-copy

   Source: Adapted from community discussion — mlantonis

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

10. Question 200 · 570 in bank

    You have an Azure subscription. In the Azure portal, you plan to create a storage account named storage1 that will have the following settings: ✑ Performance: Standard ✑ Replication: Zone-redundant storage (ZRS) ✑ Access tier (default): Cool ✑ Hierarchical namespace: Disabled You need to ensure that you can set Account kind for storage1 to BlockBlobStorage. Which setting should you modify first?

    • APerformance
    • BReplication
    • CAccess tier (default)
    • DHierarchical namespace

    Show answer

    Answer: A

    Explanation

    Answer is correct https://docs.microsoft.com/en-us/azure/storage/common/storage-account-create?tabs=azure-portal Select Standard performance for general-purpose v2 storage accounts (default). This type of account is recommended by Microsoft for most scenarios. For more information, see Types of storage accounts. Select Premium for scenarios requiring low latency. After selecting Premium, select the type of premium storage account to create. The following types of premium storage accounts are available: Block blobs File shares Page blobs

    Source: Adapted from community discussion — sk1803

    References

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

AZ-104 practice, question 191. 570 questions available.