AZ-104 practice questions 361–370

1. Question 361 · 570 in bank

   HOTSPOT - You have an Azure subscription. You need to deploy a virtual machine by using an Azure Resource Manager (ARM) template. How should you complete the template? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   The dependsOn property specifies the resources that must be created before the virtual machine can be created. In this case, the virtual machine must depend on the network interface. The storageProfile property specifies the storage configuration for the virtual machine. In this case, the virtual machine will use an image from the Microsoft Windows Server image gallery.

   Source: Adapted from community discussion — Navigati0n

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

2. Question 362 · 570 in bank

   HOTSPOT - You need to configure a new Azure App Service app named WebApp1. The solution must meet the following requirements: • WebApp1 must be able to verify a custom domain name of app.contoso.com. • WebApp1 must be able to automatically scale up to eight instances. • Costs and administrative effort must be minimized. Which pricing plan should you choose, and which type of record should you use to verify the domain? To answer, select the appropriate options in the answer area. NOTE: Each correct answer is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   WebApp1 must be able to verify a custom domain name of app.contoso.com. All paid tiers (Basic, Standard, Premium, Isolated) allow for custom domains. WebApp1 must be able to automatically scale up to eight instances. Auto-scaling is a feature that is available in the Standard, Premium, and Isolated tiers. It is not available in the Basic tier, which allows you to manually scale up to 3 instances. Costs and administrative effort must be minimized. Pricing Plan: Given these requirements, the best option is the "Standard" tier. It offers both auto-scaling and custom domains, while being less expensive than the Premium or Isolated tiers. The Basic tier does not support auto-scaling, and the Free and Shared tiers do not support custom domains or auto-scaling. For verifying a custom domain, Azure uses a CNAME or TXT record. The A record cannot be used for domain verification Pricing Plan: Standard Record Type: TXT

   Source: Adapted from community discussion — Navigati0n

   References

   • Microsoft Learn
   • azure.microsoft.com documentation
   • Microsoft Learn
   • azure.microsoft.com documentation
   • Microsoft Learn

   

   Next question

3. Question 363 · 570 in bank

   HOTSPOT - You have an Azure subscription that contains the virtual machines shown in the following table.

   

   You create an Azure Compute Gallery named ComputeGallery1 as shown in the Azure Compute Gallery exhibit. (Click the Azure Compute Gallery tab.)

   

   In ComputeGallery1, you create a virtual machine image definition named Image1 as shown in the image definition exhibit. (Click the Image Definition tab.)

   

   For each of the following statements, select Yes if the statement is true. Otherwise, select No, NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   So many people here are making assumptions without actually testing or validating them. The answer is YYY - Tested in Lab. Neither the region, vCPU count, nor the VM generation had any impact on my ability to select a particular VM OS disk as a source for an image version.

   Source: Adapted from community discussion — mmarkiew

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

4. Question 364 · 570 in bank

   You plan to create the Azure web apps shown in the following table.

   

   What is the minimum number of App Service plans you should create for the web apps?

   • A1
   • B2
   • C3
   • D4

   Show answer

   Answer: B

   Explanation

   Since Python on Windows is no longer supported, we have to use Linux platform. ASP.NET is only supported on Windows platform. So we need at least 2 App Service plan

   Source: Adapted from community discussion — athli

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

5. Question 365 · 570 in bank

   HOTSPOT - You have an Azure subscription that contains the resource groups shown in the following table.

   

   You create the following Azure Resource Manager (ARM) template named deploy.json.

   

   You deploy the template by running the following cmdlet.

   

   For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   1. Yes. RG0 will be created with location from template file. For subscription level deployments, you must provide a location for the deployment. The location of the deployment is separate from the location of the resources you deploy. The deployment location specifies where to store deployment data. 2. No. Only RG0 and RG3 will be created, RG1 and RG2 already exist and can't be created. 3. No. RG3 will be created in east region. https://learn.microsoft.com/en-us/azure/azure-resource-manager/templates/deploy-to-subscription?tabs=azure-cli#deployment-location-and-name

   Source: Adapted from community discussion — AntaninaD

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

6. Question 366 · 570 in bank

   You have an Azure App Service app named App1 that contains two running instances. You have an autoscale rule configured as shown in the following exhibit.

   

   For the Instance limits scale condition setting, you set Maximum to 5. During a 30-minute period, App1 uses 80 percent of the available memory. What is the maximum number of instances for App1 during the 30-minute period?

   • A2
   • B3
   • C4
   • D5

   Show answer

   Answer: D

   Explanation

   Start at 2 instances, after 15 min, > 70%, then +1 instance Cooling 5 mins, still >70%, then +1 instance Cooling 5 mins, still > 70%, then +1 instance Cooling 5 mins, still >70%, since max 5 instances, keep 5 instances only

   Source: Adapted from community discussion — athli

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

7. Question 367 · 570 in bank

   HOTSPOT - You have an Azure subscription that contains the container images shown in the following table.

   

   You plan to use the following services: • Azure Container Instances • Azure Container Apps • Azure App Service In which services can you run the images? To answer, select the options in the answer area. NOTE: Each correct answer is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Correct - Azure Container Instances can schedule both Windows and Linux containers with the same API. You can specify your OS type preference when you create your container groups. Some features are currently restricted to Linux containers. https://learn.microsoft.com/en-us/azure/container-instances/container-instances-overview - Azure Container Apps supports: Any Linux-based x86-64 (linux/amd64) container image with no required base image Containers from any public or private container registry Sidecar and init containers https://learn.microsoft.com/en-us/azure/container-apps/containers - Azure App Service is an HTTP-based service for hosting web applications, REST APIs, and mobile back ends. You can develop in your favorite language, be it .NET, .NET Core, Java, Node.js, PHP, and Python. Applications run and scale with ease on both Windows and Linux-based environments.https://learn.microsoft.com/en-us/azure/app-service/overview

   Source: Adapted from community discussion — Kuikz

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

8. Question 368 · 570 in bank

   You have an Azure AD tenant named contoso.com. You have an Azure subscription that contains an Azure App Service web app named App1 and an Azure key vault named KV1. KV1 contains a wildcard certificate for contoso.com. You have a user named user1@contoso.com that is assigned the Owner role for App1 and KV1. You need to configure App1 to use the wildcard certificate of KV1. What should you do first?

   • ACreate an access policy for KV1 and assign the Microsoft Azure App Service principal to the policy.
   • BAssign a managed user identity to App1.
   • CConfigure KV1 to use the role-based access control (RBAC) authorization system.
   • DCreate an access policy for KV1 and assign the policy to User1.

   Show answer

   Answer: B

   Explanation

   In this scenario, you have an Azure App Service web app (App1) and an Azure Key Vault (KV1) containing a wildcard certificate for contoso.com. You want to configure App1 to use the wildcard certificate from KV1. To achieve this, you need to grant the necessary permissions to App1. Access to Key Vault secrets and certificates is managed using Azure AD-based authentication and authorization. The Microsoft Azure App Service principal represents the App Service web app in Azure AD. The correct approach is to create an access policy in KV1 that grants the necessary permissions to the Microsoft Azure App Service principal associated with App1. By doing so, you allow App1 to access the certificate stored in KV1. So, the first step you should take is: A. Create an access policy for KV1 and assign the Microsoft Azure App Service principal to the policy. Once you've granted the necessary access to the App Service principal, the web app (App1) will be able to use the wildcard certificate from KV1 for its secure connections.

   Source: Adapted from community discussion — [Removed]

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

9. Question 369 · 570 in bank

   You have an Azure subscription. You plan to deploy the resources shown in the following table.

   

   You need to create a single Azure Resource Manager (ARM) template that will be used to deploy the resources. Which resource should be added to the dependsOn section for VM1?

   • AVNET1
   • BNIC1
   • CIP1
   • DNSG1

   Show answer

   Answer: B

   Explanation

   Therefore, the most direct and crucial dependency for VM1 among the listed resources is NIC1 (Option B). The NIC acts as the bridge between the VM and the other network resources like the virtual network, public IP, and network security group. Hence, it's essential to ensure that NIC1 is deployed before VM1. https://learn.microsoft.com/en-us/azure/templates/microsoft.compute/virtualmachines?pivots=deployment-language-arm-template https://learn.microsoft.com/en-us/azure/azure-resource-manager/templates/resource-dependency https://learn.microsoft.com/en-us/azure/azure-resource-manager/templates/template-tutorial-create-templates-with-dependent-resources?tabs=CLI

   Source: Adapted from community discussion — Vestibal

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

10. Question 370 · 570 in bank

    HOTSPOT - You have an Azure subscription named Sub1. You plan to deploy a multi-tiered application that will contain the tiers shown in the following table.

    

    You need to recommend a networking solution to meet the following requirements: ✑ Ensure that communication between the web servers and the business logic tier spreads equally across the virtual machines. ✑ Protect the web servers from SQL injection attacks. Which Azure resource should you recommend for each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

    

    This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

    Show the answer figure

    Answer: See figure below

    Explanation

    Box 1: an internal load balancer Azure Internal Load Balancer (ILB) provides network load balancing between virtual machines that reside inside a cloud service or a virtual network with a regional scope. Box 2: an application gateway that uses the WAF tier Azure Web Application Firewall (WAF) on Azure Application Gateway provides centralized protection of your web applications from common exploits and vulnerabilities. Web applications are increasingly targeted by malicious attacks that exploit commonly known vulnerabilities. Reference: https://docs.microsoft.com/en-us/azure/web-application-firewall/ag/ag-overview

    Source: Adapted from community discussion — mlantonis

    References

    • Microsoft Learn
    • Microsoft Learn

    

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

AZ-104 practice, question 361. 570 questions available.