AZ-104 practice questions 251–260

1. Question 251 · 570 in bank

   Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You deploy an Azure Kubernetes Service (AKS) cluster named AKS1. You need to deploy a YAML file to AKS1. Solution: From Azure CLI, you run az aks. Does this meet the goal?

   • AYes
   • BNo

   Show answer

   Answer: B

   Explanation

   To deploy a YAML file to AKS1, you would typically use the `kubectl` command. The `az aks` command in Azure CLI is primarily used to manage AKS clusters, not to deploy resources into them. For example, to deploy a YAML file, you would use: ``` kubectl apply -f .yaml ``` Simply running `az aks` would not deploy a YAML file to AKS1. So, the answer is: B. No

   Source: Adapted from community discussion — iamchoy

   References

   • Microsoft Learn

   Next question

2. Question 252 · 570 in bank

   HOTSPOT - You have an Azure Kubernetes Service (AKS) cluster named AKS1 and a computer named Computer1 that runs Windows 10. Computer1 that has the Azure CLI installed. You need to install the kubectl client on Computer1. Which command should you run? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   To install kubectl locally, use the az aks install-cli command: az aks install-cli Reference: https://docs.microsoft.com/en-us/azure/aks/kubernetes-walkthrough

   Source: Adapted from community discussion — mlantonis

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

3. Question 253 · 570 in bank

   You have an Azure subscription. You create the following Azure Resource Manager (ARM) template named Template.json.

   

   You need to deploy Template.json. Which PowerShell cmdlet should you run from Azure Cloud Shell?

   • ANew-AzSubscriptionDeployment
   • BNew-AzManagementGroupDeployment
   • CNew-AzResourceGroupDeployment
   • DNew-AzTenantDeployment

   Show answer

   Answer: A

   Explanation

   Deploy across entire subscription: New-AzSubscriptionDeployment Deploy across subscriptions in a management group: New-AzManagementGroupDeployment Deploy within a specific resource group: New-AzResourceGroupDeployment Deploy across entire organization (rare): New-AzTenantDeployment

   Source: Adapted from community discussion — moadabdou

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

4. Question 254 · 570 in bank

   You have an Azure subscription that contains a resource group named RG1. You plan to create a storage account named storage1. You have a Bicep file named File1. You need to modify File1 so that it can be used to automate the deployment of storage1 to RG1. Which property should you modify?

   • Akind
   • Bscope
   • Csku
   • Dlocation

   Show answer

   Answer: B

   Explanation

   The correct answer is: B. scope. Here's why: kind: This property defines the type of resource within the storage account (e.g., BlobStorage, FileStorage, etc.). It's unlikely you need to modify this in your scenario as Bicep likely already has the correct type defined. scope: This property specifies the location where the resource will be deployed. In your case, you want to deploy it to the resource group "RG1", so modifying the scope property to reference "RG1" is necessary. sku: This property defines the performance tier of the storage account. While you might adjust this depending on your needs, it's not directly related to deployment location. location: This property can also define the deployment location, but it's generally recommended to use the scope property with resource groups for clarity and consistency. Bicep might already have the location set within the resource definition.

   Source: Adapted from community discussion — moadabdou

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

5. Question 255 · 570 in bank

   HOTSPOT - Your company purchases a new Azure subscription. You create a file named Deploy.json as shown in the following exhibit.

   

   You connect to the subscription and run the following cmdlet. New-AzDeployment -Location westus -TemplateFile “deploy.json” For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   YNY The deployment creates 3 RGs called RG0, RG1, RG2 as the index is 0-based. You can deploy to RG1 as the lock is delete. You can't deploy to RG2 as the lock is read-only, hence it can't be modified.

   Source: Adapted from community discussion — Asryi

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

6. Question 256 · 570 in bank

   You have an Azure subscription that contains the resources shown in the following table.

   

   You need to configure a proximity placement group for VMSS1. Which proximity placement groups should you use?

   • AProximity2 only
   • BProximity1, Proximity2, and Proximity3
   • CProximity1 only
   • DProximity1 and Proximity3 only

   Show answer

   Answer: C

   Explanation

   To get VMs as close as possible, achieving the lowest possible latency, you should deploy them within a proximity placement group. A proximity placement group is a logical grouping used to make sure that Azure compute resources are physically located close to each other. Proximity placement groups are useful for workloads where low latency is a requirement.

   Source: Adapted from community discussion — amsioso

   References

   • Microsoft Learn

   Next question

7. Question 257 · 570 in bank

   HOTSPOT - You have an Azure subscription that contains the virtual networks shown in the following table.

   

   The subscription contains the virtual machines shown in the following table.

   

   The subscription contains the Azure App Service web apps shown in the following table.

   

   For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   YNN Point 1: Yes: Using virtual network integration enables your app to access: Resources in the virtual network you're integrated with. Resources in virtual networks peered to the virtual network your app is integrated with including global peering connections. Point 2: NO: Virtual network integration is used only to make outbound calls from your app into your virtual network Point 3: NO: There are some limitations with using virtual network integration: The feature isn't available for Isolated plan apps in an App Service Environment Reference: https://learn.microsoft.com/en-us/azure/app-service/overview-vnet-integration

   Source: Adapted from community discussion — arr73

   References

   • Microsoft Learn
   • Microsoft Learn
   • azure.microsoft.com documentation
   • Microsoft Learn

   

   Next question

8. Question 258 · 570 in bank

   You have an Azure subscription named Subscription1 that contains the resources shown in the following table.

   

   You create virtual machines in Subscription1 as shown in the following table.

   

   You plan to use Vault1 for the backup of as many virtual machines as possible. Which virtual machines can be backed up to Vault1?

   • AVM1 only
   • BVM3 and VMC only
   • CVM1, VM2, VM3, VMA, VMB, and VMC
   • DVM1, VM3, VMA, and VMC only
   • EVM1 and VM3 only

   Show answer

   Answer: D

   Explanation

   D: VM1, VM3, VMA, and VMC only Explanation: only the West Europe VMs: You need a vault in every Azure region that contains VMs you want to back up. You can't back up to a different region. Azure Backup supports application-consistent backups for both Windows and Linux VMs There is no restriction that prevents backups from being performed on a Recovery Services Vault located in another resource Group Reference: https://learn.microsoft.com/en-us/azure/virtual-machines/backup-recovery

   Source: Adapted from community discussion — arr73

   References

   • Microsoft Learn

   Next question

9. Question 259 · 570 in bank

   You have an Azure subscription that contains an Azure container registry named ContReg1. You enable the Admin user for ContReg1. Which username can you use to sign in to ContReg1?

   • Aroot
   • Badmin
   • Cadministrator
   • DContReg1

   Show answer

   Answer: D

   Explanation

   tested in LAB when you go to this Option in the Portal - next to the "Mark" is a Explanation Field and when you hover over it, it say -> the admin user is identical to the Name of the Container Registry. The Name of the Container Registry is ContReg1 therefore is the admin user ContReg1 and that means D

   Source: Adapted from community discussion — Andreas_Czech

   References

   • Microsoft Learn

   Next question

10. Question 260 · 570 in bank

    You have an Azure subscription. You plan to create an Azure container registry named ContReg1. You need to ensure that you can push and pull signed images for ContReg1. What should you do for ContReg1?

    • AEnable encryption by using a customer-managed key.
    • BCreate a connected registry.
    • CAdd a token.
    • DEnable content trust.

    Show answer

    Answer: D

    Explanation

    To ensure that you can push and pull signed images for your container registry, you need to follow these steps: Sign Your Images: Use Docker Content Trust (DCT) to sign your images before pushing them to the registry. Push Signed Images: Push the signed images to your container registry. Pull Signed Images: Pull the signed images from your container registry.

    Source: Adapted from community discussion — thekrushka

    References

    • Microsoft Learn
    • Microsoft Learn

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

AZ-104 practice, question 251. 570 questions available.