AZ-104 practice questions 201–210

1. Question 201 · 570 in bank

   DRAG DROP - You have an Azure subscription that contains the storage accounts shown in the following table.

   

   You plan to use AzCopy to copy a blob from container1 directly to share1. You need to identify which authentication method to use when you use AzCopy. What should you identify for each account? To answer, drag the appropriate authentication methods to the correct accounts. Each method may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Box 1: A shared access signature (SAS) token. You can provide authorization credentials by using Azure Active Directory (AD), or by using a Shared Access Signature (SAS) token. For Blob storage you can use Azure AD & SAS. Note: In the current release, if you plan to copy blobs between storage accounts, you'll have to append a SAS token to each source URL. You can omit the SAS token only from the destination URL. Box 2: A shared access signature (SAS) token. For File storage you can only use SAS. Reference: https://docs.microsoft.com/en-us/azure/storage/common/storage-use-azcopy-v10

   Source: Adapted from community discussion — NaoVaz

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

2. Question 202 · 570 in bank

   You create an Azure Storage account. You plan to add 10 blob containers to the storage account. For one of the containers, you need to use a different key to encrypt data at rest. What should you do before you create the container?

   • AGenerate a shared access signature (SAS).
   • BModify the minimum TLS version.
   • CRotate the access keys.
   • DCreate an encryption scope.

   Show answer

   Answer: D

   Explanation

   D) Create an encryption scope Why? In Azure Storage, encryption of data at rest is done using Azure Storage Service Encryption (SSE). Azure Storage SSE uses Microsoft-managed encryption keys to encrypt the data in the storage account. In the scenario described, you need to use a different key to encrypt data at rest for one of the containers. To do this, you need to create an encryption scope, which is a named configuration that defines the default encryption settings for a container. By creating an encryption scope, you can use a customer-managed key, stored in Azure Key Vault, to encrypt the data in that specific container. Therefore, option D (Create an encryption scope) is the correct answer as it allows you to use a different key for data encryption for the specific container.

   Source: Adapted from community discussion — omgMerrick

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

3. Question 203 · 570 in bank

   HOTSPOT - You have an Azure subscription. The subscription contains a storage account named storage1 that has the lifecycle management rules shown in the following table.

   

   On June 1, you store two blobs in storage1 as shown in the following table.

   

   For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   N-N-N On June 6, File1 will be in archive because File1 is in container 1, and rule 1 applies 3 days after june 1. On June 1, File2 will still be in Hot tier because File2 is in container2, Rule3 and Rule4 havent hit yet. On June 16, File2 will be deleted because Rule3 applies 10 days after June 1.

   Source: Adapted from community discussion — buzzerboy

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

4. Question 204 · 570 in bank

   HOTSPOT - You need to create an Azure Storage account that meets the following requirements: ✑ Minimizes costs ✑ Supports hot, cool, and archive blob tiers ✑ Provides fault tolerance if a disaster affects the Azure region where the account resides How should you complete the command? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Box 1: StorageV2 - You may only tier your object storage data to hot, cool, or archive in Blob storage and General Purpose v2 (GPv2) accounts. General Purpose v1 (GPv1) accounts do not support tiering. General-purpose v2 accounts deliver the lowest per-gigabyte capacity prices for Azure Storage, as well as industry-competitive transaction prices. Box 2: Standard_GRS - Geo-redundant storage (GRS): Cross-regional replication to protect against region-wide unavailability. Incorrect Answers: Locally-redundant storage (LRS): A simple, low-cost replication strategy. Data is replicated within a single storage scale unit. Read-access geo-redundant storage (RA-GRS): Cross-regional replication with read access to the replica. RA-GRS provides read-only access to the data in the secondary location, in addition to geo-replication across two regions, but is more expensive compared to GRS. Reference: https://docs.microsoft.com/en-us/azure/storage/common/storage-redundancy-grs https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-storage-tiers

   Source: Adapted from community discussion — ihavespoken

   References

   • Microsoft Learn
   • Microsoft Learn
   • azure.microsoft.com documentation
   • azure.microsoft.com documentation
   • Microsoft Learn

   

   Next question

5. Question 205 · 570 in bank

   HOTSPOT - You have an Azure subscription. You plan to deploy a storage account named storage1 by using the following Azure Resource Manager (ARM) template.

   

   For each of the following statements, select Yes if the statement is hue. Otherwise, select No. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   N-N-Y deleteRetentionPolicy is 7 days, so can not be restored after 7 days. Means, backup is deleted after 7 days. allowBlobPublicAccess is true, so anyone can access the blob, not just on Azure. kind is Standard_LRS, so 3 local copies are stored.

   Source: Adapted from community discussion — buzzerboy

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

6. Question 206 · 570 in bank

   HOTSPOT - You have an Azure subscription that contains a storage account named storage1. The storage1 account contains a container named container1. You need to create a lifecycle management rule for storage1 that will automatically move the blobs in container1 to the lowest-cost tier after 90 days. How should you complete the rule? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   tierToArchive and prefixMatch - tierToArchive because it's the lowest cost tier, and doesnt say anyhting about needing to read data after 90 days. However, rehydration costs will occur if they did need to read it. - prefixMatch because we only want the blob in the container1.

   Source: Adapted from community discussion — buzzerboy

   References

   • Microsoft Learn

   

   Next question

7. Question 207 · 570 in bank

   DRAG DROP - You have an Azure subscription that contains a virtual machine named VM1. You need to back up VM1. The solution must ensure that backups are stored across three availability zones in the primary region. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   1. Create Recovery Services Vault, 2. Set Replication Policy to ZRS (because of the requirement for having in three separate zones) 3. For VM1, create a backup policy

   Source: Adapted from community discussion — buzzerboy

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

8. Question 208 · 570 in bank

   You have an Azure subscription that contains the resources shown in the following table.

   

   You need to perform the tasks shown in the following table.

   

   Which tasks can you perform by using Azure Storage Explorer?

   • ATask1 and Task3 only
   • BTask1, Task2, and Task3 only
   • CTask1, Task3, and Task4 only
   • DTask2, Task3, and Task4 only
   • ETask1, Task2, Task3, and Task4

   Show answer

   Answer: D

   Explanation

   Azure Storage Explorer does not have the ability to create a new storage account directly. Instead, you can use Azure Storage Explorer to connect to and manage existing storage accounts in Azure.

   Source: Adapted from community discussion — khaled_razouk

   References

   • Microsoft Learn

   Next question

9. Question 209 · 570 in bank

   HOTSPOT - You have an Azure AD user named User1 and a read-access geo-redundant storage (RA-GRS) account named contoso2023. You need to meet the following requirements: • User1 must be able to write blob data to contoso2023. • The contoso2023 account must fail over to its secondary endpoint. Which two settings should you configure? To answer, select the appropriate settings in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Access Control (IAM): Assign User1 the "Storage Blob Data Contributor" role or a custom role with equivalent permissions to grant them write access to blob data in the storage account. Redundancy: To enable failover, you need to set up Geo-Redundant Storage (GRS) rather than Read-Access Geo-Redundant Storage (RA-GRS). GRS provides both redundancy and the ability to fail over to the secondary endpoint.

   Source: Adapted from community discussion — SachinBisht009

   References

   • Microsoft Learn

   

   Next question

10. Question 210 · 570 in bank

    You have an Azure subscription that contains a storage account named storage1. You plan to create a blob container named container1. You need to use customer-managed key encryption for container1. Which key should you use?

    • Aan EC key that uses the P-384 curve only
    • Ban EC key that uses the P-521 curve only
    • Can EC key that uses the P-384 curve or P-521 curve only
    • Dan RSA key with a key size of 4096 only
    • Ean RSA key type with a key size of 2048, 3072, or 4096 only

    Show answer

    Answer: E

    Explanation

    Provided answer E is correct. "Azure storage encryption supports RSA and RSA-HSM keys of sizes 2048, 3072 and 4096" https://learn.microsoft.com/en-us/azure/storage/common/customer-managed-keys-overview#enable-customer-managed-keys-for-a-storage-account

    Source: Adapted from community discussion — Muffay

    References

    • Microsoft Learn
    • Microsoft Learn

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

AZ-104 practice, question 201. 570 questions available.