AZ-104 practice questions 351–360

1. Question 351 · 570 in bank

   HOTSPOT - You are creating an Azure Kubernetes Services (AKS) cluster as shown in the following exhibit.

   

   Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   1) Modify the Network configuration setting "To run an AKS cluster that supports node pools for Windows Server containers, your cluster needs to use a network policy that uses Azure CNI (advanced) network plugin." Ref: https://learn.microsoft.com/en-us/azure/aks/learn/quick-windows-container-deploy-cli 2) AKS-Managed Azure Active Directory Ref: https://learn.microsoft.com/en-us/azure/aks/cluster-container-registry-integration?tabs=azure-cli

   Source: Adapted from community discussion — Alex2022_31

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

2. Question 352 · 570 in bank

   HOTSPOT - You have an Azure subscription that contains an Azure Kubernetes Service (AKS) cluster named Cluster1. Cluster1 hosts a node pool named Pool1 that has four nodes. You need to perform a coordinated upgrade of Cluster1. The solution must meet the following requirements: • Deploy two new nodes to perform the upgrade. • Minimize costs. How should you complete the command? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Answer is WRONG. I assume there is a typo, where it says "updates" it should be "update". az aks nodepool **update** -n pool1 -g RG1 --cluster-name cluster1 **max-surge 2** https://learn.microsoft.com/en-us/cli/azure/aks/nodepool?view=azure-cli-latest We want to edit an existing node pool, so we cannot use "add": "Add a node pool to the managed Kubernetes cluster." We want to update the properties of the node pool, so we need to use: az aks nodepool update "Update a node pool properties." We want to set it up to use more nodes during an update, so this one is right: --max-surge "Extra nodes used to speed upgrade. When specified, it represents the number or percent used, eg. 5 or 33%."

   Source: Adapted from community discussion — Muffay

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

3. Question 353 · 570 in bank

   HOTSPOT - You have an Azure subscription. You create the following file named Deploy.json.

   

   You connect to the subscription and run the following commands.

   

   For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Answers: Yes / No / Yes Y: The 4 resources created are the RG1 resource group + the 3 storage accounts N: the location of the storage accounts is defined by the parameter "location" in the "resources" item that has the value of the Resource Group (stated by the "resourceGroup().location" function that returns the location of the resource group RG1 which is in Central US) Y: the names of the storages account have the prefix given by the copyIndex() function in "name": "[concat(copyIndex(),'storage',uniqueString(resourceGroup().id))]", which starts at the position 0

   Source: Adapted from community discussion — Alex2022_31

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

4. Question 354 · 570 in bank

   Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure container registry named Registry1 that contains an image named image1. You receive an error message when you attempt to deploy a container instance by using image1. You need to be able to deploy a container instance by using image1. Solution: You set Admin user to Enable for Registry1. Does this meet the goal?

   • AYes
   • BNo

   Show answer

   Answer: A

   Explanation

   Enabling the Admin user for the Azure Container Registry (Registry1) provides credentials that can be used to authenticate when pulling images from the registry. If authentication was the issue preventing the deployment, then enabling the Admin user and using its credentials should resolve the problem, allowing you to successfully deploy the container instance using image1. Therefore, this solution would meet the goal.

   Source: Adapted from community discussion — Elite4Life

   References

   • Microsoft Learn

   Next question

5. Question 355 · 570 in bank

   HOTSPOT - You have an Azure subscription that contains a resource group named RG1. You plan to use an Azure Resource Manager (ARM) template named template1 to deploy resources. The solution must meet the following requirements: • Deploy new resources to RG1. • Remove all the existing resources from RG1 before deploying the new resources. How should you complete the command? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   correct answer -Mode Specifies the deployment mode. The acceptable values for this parameter are: Complete: In complete mode, Resource Manager deletes resources that exist in the resource group but are not specified in the template. Incremental: In incremental mode, Resource Manager leaves unchanged resources that exist in the resource group but are not specified in the template. https://learn.microsoft.com/en-us/powershell/module/az.resources/new-azresourcegroupdeployment?view=azps-9.2.0 There is no such mode called "All"

   Source: Adapted from community discussion — sss123412

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

6. Question 356 · 570 in bank

   HOTSPOT - You have an Azure App Service web app named app1. You configure autoscaling as shown in following exhibit.

   

   You configure the autoscale rule criteria as shown in the following exhibit.

   

   Use the drop-down menus to select the answer choice that answers each question based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   2, 15 Initial instance is 1 as specified in first figure. 80% for 15 minutes reaches 10 minutes duration, but haven't reached second turn of scale out, so only one new instance is created. Since cool down time is 5 minutes, which means after one scale happens, it will count 5 minutes before counting a new 10 minutes, so 15 minutes total.

   Source: Adapted from community discussion — sss123412

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

7. Question 357 · 570 in bank

   You have an Azure subscription. You plan to deploy the Azure container instances shown in the following table.

   

   Which instances can you deploy to a container group?

   • AInstance1 only
   • BInstance2 only
   • CInstance1 and Instance2 only
   • DInstance3 and Instance4 only

   Show answer

   Answer: D

   Explanation

   Answer is D. https://learn.microsoft.com/en-us/azure/container-instances/container-instances-container-groups Multi-container groups currently support only Linux containers. For Windows containers, Azure Container Instances only supports deployment of a single container instance. While we are working to bring all features to Windows containers, you can find current platform differences in the service

   Source: Adapted from community discussion — Notteb

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

8. Question 358 · 570 in bank

   HOTSPOT - You have an Azure container registry named contoso2023 as shown in the following exhibit.

   

   You need to enable contoso2023 to use a dedicated data endpoint. Which two settings should you configure for contoso2023? To answer, select the appropriate settings in the answer area. NOTE: Each correct answer is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   I think the answer are properties and networking. In properties, you change the plan to Premium and then in networking, you disable public access and create private endpoint.

   Source: Adapted from community discussion — FatFatSam

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

9. Question 359 · 570 in bank

   Select 2

   You plan to automate the deployment of a virtual machine scale set that uses the Windows Server 2016 Datacenter image. You need to ensure that when the scale set virtual machines are provisioned, they have web server components installed. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

   • AUpload a configuration script
   • BCreate an automation account
   • CCreate an Azure policy
   • DModify the extensionProfile section of the Azure Resource Manager template
   • ECreate a new virtual machine scale set in the Azure portal

   Show answer

   Answer: AD

   Explanation

   Correct Answer: A and D The Custom Script Extension downloads and executes scripts on Azure VMs. This extension is useful for post deployment configuration, software installation, or any other configuration / management task. Scripts can be downloaded from Azure storage or GitHub, or provided to the Azure portal at extension run-time. The Custom Script extension integrates with Azure Resource Manager templates, and can also be used with the Azure CLI, Azure PowerShell, Azure portal, or the REST API The following Custom Script Extension definition downloads a sample script from GitHub, installs the required packages, then writes the VM instance hostname to a basic HTML page. Reference: https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/tutorial-install-apps-template

   Source: Adapted from community discussion — mlantonis

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

10. Question 360 · 570 in bank

    You have an Azure subscription that has the public IP addresses shown in the following table.

    

    You plan to deploy an Instance of Azure Firewall Premium named FW1. Which IP addresses can you use?

    • AIP2 only
    • BIP1 and IP2 only
    • CIP1, IP2, and IP5 only
    • DIP1, IP2, IP4, and IP5 only

    Show answer

    Answer: B

    Explanation

    B should be the correct answer instead. https://learn.microsoft.com/en-us/azure/virtual-network/ip-services/public-ip-addresses#at-a-glance Azure Firewall - Dynamic IPv4: No - Static IPv4: Yes - Dynamic IPv6: No - Static IPv6: No https://learn.microsoft.com/en-us/azure/virtual-network/ip-services/configure-public-ip-firewall Azure Firewall is a cloud-based network security service that protects your Azure Virtual Network resources. Azure Firewall requires at least one public static IP address to be configured. This IP or set of IPs are used as the external connection point to the firewall. Azure Firewall supports standard SKU public IP addresses. Basic SKU public IP address and public IP prefixes aren't supported.

    Source: Adapted from community discussion — zellck

    References

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

AZ-104 practice, question 351. 570 questions available.