AZ-104 practice questions 401–410

1. Question 401 · 570 in bank

   HOTSPOT - You have an Azure subscription that contains the virtual networks shown in the following table.

   

   The subscription contains the virtual machines shown in the following table.

   

   Each virtual machine contains only a private IP address. You create an Azure bastion for VNet1 as shown in the following exhibit.

   

   For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   the 1st is "No" mstsc is a native client and is supported only by Standard Bastion the 2nd is "Yes"? if the poor wording means connecting through Azure Portal by SSH, that's what Basic Bastion supports. the 3rd is "No" No peering from the Bastion enabled Vnet1

   Source: Adapted from community discussion — hidefo6963

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

2. Question 402 · 570 in bank

   HOTSPOT - You have an Azure subscription that contains the virtual networks shown in the following table.

   

   The subscription contains the subnets shown in the following table.

   

   The subscription contains the storage accounts shown in the following table.

   

   You create a service endpoint policy named Policy1 in the South Central US Azure region to allow connectivity to all the storage accounts in the subscription. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   I would go for Y N N 1) YES Virtual networks must be in the same region as the service endpoint policy. https://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-service-endpoint-policies-overview#limitations 2) NO - By default, if no policies are attached to a subnet with endpoints, you can access all storage accounts in the service as VNET2 is in diff region this policy is definetly not applied to subnet 2 3) NO - Policy allows all storage accounts + IMHO its not full vnet3 to be considered.

   Source: Adapted from community discussion — conip

   References

   • Microsoft Learn

   

   Next question

3. Question 403 · 570 in bank

   You have an Azure virtual network named VNet1 that contains the following settings: • IPv4 address space: 172.16.10.0/24 • Subnet name: Subnet1 • Subnet address range: 172.16.10.0/25 What is the maximum number of virtual machines that can connect to Subnet1?

   • A24
   • B25
   • C123
   • D128
   • E251

   Show answer

   Answer: C

   Explanation

   A /25 CIDR notation means that 25 bits are used for the network portion of the address, and the remaining 7 bits are available for the host portion. An IPv4 address has 32 bits in total. With /25, the first 25 bits define the network. The remaining 7 bits are used to define individual hosts within that network. With 7 bits for the host, you can have 2^7 = 128 total addresses. However, 5 addresses are reserved (network address, broadcast address, and 3 by Azure), leaving you with 123 usable addresses for VMs and other resources.

   Source: Adapted from community discussion — Dankho

   Next question

4. Question 404 · 570 in bank

   You have an Azure web app named webapp1. You have a virtual network named VNET1 and an Azure virtual machine named VM1 that hosts a MySQL database. VM1 connects to VNET1. You need to ensure that webapp1 can access the data hosted on VM1. What should you do?

   • ADeploy an internal load balancer
   • BPeer VNET1 to another virtual network
   • CConnect webapp1 to VNET1
   • DDeploy an Azure Application Gateway

   Show answer

   Answer: C

   Explanation

   Answer is wrong. It should be "C" Connect the webapp to VNET using webapp VNET integration. where webapp can access the resources in the VNET.

   Source: Adapted from community discussion — fedztedz

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

5. Question 405 · 570 in bank

   You have an Azure subscription that contains a resource group named RG1 and a virtual network named VNet1. You plan to create an Azure container instance named container1. You need to be able to configure DNS name label scope reuse for container1. What should you configure for container1?

   • Athe private networking type
   • Bthe public networking type
   • Ca new subnet on VNet1
   • Da confidential SKU

   Show answer

   Answer: B

   Explanation

   Answer is correct: Public networking type allows you to assign a DNS name label to the container instance that is globally unique within Azure, and it's accessible from the internet. This is typically used when you want to expose a service hosted in a container to the public. Private networking type would not allow you to configure DNS name label scope reuse because it doesn't expose the container instance to the public internet, and it typically operates within a virtual network (VNet) for private communication. Creating a new subnet on VNet1 (Option C) is related to configuring the network settings of the virtual network and isn't directly related to configuring DNS name label scope reuse for the container instance. A confidential SKU (Option D) is not related to DNS name label scope reuse or networking configurations. It is used for specific security and confidentiality requirements.

   Source: Adapted from community discussion — Vokuhila

   References

   • Microsoft Learn

   Next question

6. Question 406 · 570 in bank

   HOTSPOT - You have the Azure virtual machines shown in the following table.

   

   VNET1, VNET2, and VNET3 are peered. VM4 has a DNS server that is authoritative for a zone named contoso.com and contains the records shown in the following table.

   

   The virtual networks are configured to use the DNS servers shown in the following table.

   

   For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   NYN is a correct answer. Analysis of the Statements: Statement 1: From VM1, server1.contoso.com resolves to 131.107.3.3. VM1 in VNET1 uses the Azure-provided DNS, which does not reference the DNS records on VM4. Result: No. Statement 2: From VM2, server1.contoso.com resolves to 131.107.3.3. VM2 in VNET2 uses a custom DNS (192.168.0.5), which points to VM4's DNS server. VM4's DNS contains a record for server1.contoso.com resolving to 131.107.3.3. Result: Yes. Statement 3: From VM3, server2.contoso.com resolves to 131.107.2.4. VM3 in VNET3 uses a custom DNS (192.168.0.5), which points to VM4's DNS server. VM4's DNS contains a record for server2.contoso.com, but it resolves to 131.107.3.4, not 131.107.2.4. Result: No. Final Answer: Statement 1: No Statement 2: Yes Statement 3: No

   Source: Adapted from community discussion — adilkhan

   

   Next question

7. Question 407 · 570 in bank

   DRAG DROP - You have an Azure subscription that contains a resource group named RG1. You plan to create an Azure Resource Manager (ARM) template to deploy a new virtual machine named VM1. VM1 must support the capture of performance data. You need to specify resource dependencies for the ARM template. In which order should you deploy the resources? To answer, move all resources from the list of resources to the answer area and arrange them in the correct order.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   

   Next question

8. Question 408 · 570 in bank

   You have an Azure subscription that contains the virtual networks shown in the following table.

   

   The subscription contains the virtual machines shown in the following table.

   

   All the virtual machines have only private IP addresses. You deploy an Azure Bastion host named Bastion1 to VNet1. To which virtual machines can you connect through Bastion1?

   • AVM1 only
   • BVM1 and VM2 only
   • CVM1 and VM3 only
   • DVM1, VM2, and VM3

   Show answer

   Answer: B

   Explanation

   VNet1 and VNet are peered and VNet2 and VNet3 are also peered. However VNet1 and VNet3 are not peered with each other. If gateway transit is not allowed - and it is not stated -, then there is no connection between VNet1 and VNet3. Bastion is deployed in VNet1.

   Source: Adapted from community discussion — peterwheat

   References

   • Microsoft Learn

   Next question

9. Question 409 · 570 in bank

   You have an Azure subscription. You plan to migrate 50 virtual machines from VMware vSphere to the subscription. You create a Recovery Services vault. What should you do next?

   • AConfigure an extended network.
   • BCreate a recovery plan.
   • CDeploy an Open Virtualization Application (OVA) template to vSphere.
   • DConfigure a virtual network.

   Show answer

   Answer: D

   Explanation

   Correct Answer (D) - In order to migrate 50 VMs to Azure using Azure Site Recovery, one needs: - Recovery Service Vault (which is created) - Configure virtual network - configure extended network (next step after)

   Source: Adapted from community discussion — 01111010

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

10. Question 410 · 570 in bank

    HOTSPOT - You have an Azure subscription that contains the virtual networks shown in the following table.

    

    Each virtual network has 50 connected virtual machines. You need to implement Azure Bastion. The solution must meet the fallowing requirements: • Support host scaling. • Support uploading and downloading files. • Support the virtual machines on both VNet1 and VNet2. • Minimize the number of addresses on the Azure Bastion subnet. How should you configure Azure Bastion? To answer, select the options in the answer area. NOTE: Each correct answer is worth one point.

    

    This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

    Show the answer figure

    Answer: See figure below

    Explanation

    Subnet size: /26 The recommended subnet size for Azure Bastion is /26 "Subnet size must be /26 or larger (/25, /24 etc.)." "For host scaling, a /26 or larger subnet is recommended. Using a smaller subnet space limits the number of scale units" "For Azure Bastion resources deployed on or after November 2, 2021, the minimum AzureBastionSubnet size is /26 or larger (/25, /24, etc.)" Public IP: Standard SKU with a static allocation Only Azure Bastion Standard SKU supports 'Host scaling' and 'Upload or download files'. Besides that, Public IP address recomended by Microsoft must be Standard and Static References: https://learn.microsoft.com/en-us/azure/bastion/configuration-settings https://learn.microsoft.com/en-us/azure/bastion/bastion-faq

    Source: Adapted from community discussion — trferreiraBR

    References

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn

    

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

AZ-104 practice, question 401. 570 questions available.