AZ-104 practice questions 41–50

1. Question 41 · 570 in bank

   You need to implement a backup solution for App1 after the application is moved. What should you create first?

   • Aa recovery plan
   • Ban Azure Backup Server
   • Ca backup policy
   • Da Recovery Services vault

   Show answer

   Answer: D

   Explanation

   Correct Answer: D As per requirements: - Move all the tiers of App1 to Azure. - There are three application tiers, each with five virtual machines. - Ensure that all the virtual machines for App1 are protected by backups. Before starting the backup process, you must create a Recovery Services Vault as an initial step, as a place for the backups, or restore points, to be stored. Later steps include downloading recovery services agent, installing and registering the agent. A Recovery Services vault is a logical container that stores the backup data for each protected resource, such as Azure VMs. When the backup job for a protected resource runs, it creates a recovery point inside the Recovery Services vault. Reference: https://docs.microsoft.com/en-us/azure/backup/quick-backup-vm-portal https://docs.microsoft.com/en-us/azure/app-service/manage-backup https://docs.microsoft.com/en-us/azure/backup/tutorial-backup-windows-server-to-azure

   Source: Adapted from community discussion — mlantonis

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

2. Question 42 · 570 in bank

   You need to move the blueprint files to Azure. What should you do?

   • AGenerate an access key. Map a drive, and then copy the files by using File Explorer.
   • BUse Azure Storage Explorer to copy the files.
   • CUse the Azure Import/Export service.
   • DGenerate a shared access signature (SAS). Map a drive, and then copy the files by using File Explorer.

   Show answer

   Answer: B

   Explanation

   Correct Answer: B As per requirements: - Move the existing product blueprint files to Azure Blob storage. - Copy the blueprint files to Azure over the Internet. - Ensure that the blueprint files are stored in the archive storage tier. - Ensure that partner access to the blueprint files is secured and temporary. - Minimize administrative effort whenever possible. Azure Storage Explorer is a free tool from Microsoft that allows you to work with Azure Storage data on Windows, macOS, and Linux. You can use it to upload and download data from Azure blob storage. It’s the best solution, because copies data through Internet and minimizes administrative effort. C: Azure Import/Export service is not using Internet, but ships data drives using a shipping carrier such as FedEx, UPS, or DHL. D: You can't use SAS with a mapped drive.

   Source: Adapted from community discussion — mlantonis

   Next question

3. Question 43 · 570 in bank

   HOTSPOT - You need to identify the storage requirements for Contoso. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Box 1: Yes - Contoso is moving the existing product blueprint files to Azure Blob storage. Use unmanaged standard storage for the hard disks of the virtual machines. We use Page Blobs for these. Box 2: No - Box 3: No

   Source: Adapted from community discussion — mlantonis

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

4. Question 44 · 570 in bank

   HOTSPOT - You need to create container1 and share1. Which storage accounts should you use for each resource? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-storage-tiers https://docs.microsoft.com/en-us/azure/storage/common/storage-account-overview

   Source: Adapted from community discussion — Bere

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

5. Question 45 · 570 in bank

   HOTSPOT - You need to create storage5. The solution must support the planned changes. Which type of storage account should you use, and which account should you configure as the destination storage account? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://docs.microsoft.com/en-us/azure/storage/blobs/object-replication-configure?tabs=portal

   Source: Adapted from community discussion — zodraz

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

6. Question 46 · 570 in bank

   You need to identify which storage account to use for the flow logging of IP traffic from VM5. The solution must meet the retention requirements. Which storage account should you identify?

   • Astorage1
   • Bstorage2
   • Cstorage3
   • Dstorage4

   Show answer

   Answer: B

   Explanation

   For at least two reasons, storage2 is the only candidate: - Location: The storage account used must be in the same region as the NSG. - Retention is available only if you use General Purpose v2 Storage accounts (GPv2). Reference: https://learn.microsoft.com/en-us/azure/network-watcher/network-watcher-nsg-flow-logging-overview

   Source: Adapted from community discussion — alirasouli

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

7. Question 47 · 570 in bank

   You discover that VM3 does NOT meet the technical requirements. You need to verify whether the issue relates to the NSGs. What should you use?

   • ADiagram in VNet1
   • BDiagnostic settings in Azure Monitor
   • CDiagnose and solve problems in Traffic Manager profiles
   • DThe security recommendations in Azure Advisor
   • EIP flow verify in Azure Network Watcher

   Show answer

   Answer: E

   Explanation

   correct use Test-AzNetworkWatcherIPFlow to get NSG security rule which blocked traffic + Get-AzEffectiveNetworkSecurityGroup to get details of NSG rules https://docs.microsoft.com/en-us/azure/network-watcher/diagnose-vm-network-traffic-filtering-problem-powershell

   Source: Adapted from community discussion — d0bermannn

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

8. Question 48 · 570 in bank

   You need to ensure that VM1 can communicate with VM4. The solution must minimize the administrative effort. What should you do?

   • ACreate an NSG and associate the NSG to VM1 and VM4.
   • BEstablish peering between VNET1 and VNET3.
   • CAssign VM4 an IP address of 10.0.1.5/24.
   • DCreate a user-defined route from VNET1 to VNET3.

   Show answer

   Answer: B

   Explanation

   I think this question is missing some critical info. Where does the VNET3 and 10.0.1.x/24 come from? No mentioning of them at all in the question!

   Source: Adapted from community discussion — Lionred

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

9. Question 49 · 570 in bank

   HOTSPOT - You need to meet the connection requirements for the New York office. What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Box 1: Create a virtual network gateway and a local network gateway. Azure VPN gateway. The VPN gateway service enables you to connect the VNet to the on-premises network through a VPN appliance. For more information, see Connect an on-premises network to a Microsoft Azure virtual network. The VPN gateway includes the following elements: ✑ Virtual network gateway. A resource that provides a virtual VPN appliance for the VNet. It is responsible for routing traffic from the on-premises network to the VNet. ✑ Local network gateway. An abstraction of the on-premises VPN appliance. Network traffic from the cloud application to the on-premises network is routed through this gateway. ✑ Connection. The connection has properties that specify the connection type (IPSec) and the key shared with the on-premises VPN appliance to encrypt traffic. ✑ Gateway subnet. The virtual network gateway is held in its own subnet, which is subject to various requirements, described in the Recommendations section below. Box 2: Configure a site-to-site VPN connection On premises create a site-to-site connection for the virtual network gateway and the local network gateway. Scenario: Connect the New York office to VNet1 over the Internet by using an encrypted connection. Incorrect Answers: Azure ExpressRoute: Established between your network and Azure, through an ExpressRoute partner. This connection is private. Traffic does not go over the internet. Reference: https://docs.microsoft.com/en-us/azure/architecture/reference-architectures/hybrid-networking/vpn

   Source: Adapted from community discussion — meeko86

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

10. Question 50 · 570 in bank

    HOTSPOT - You need to recommend a solution for App1. The solution must meet the technical requirements. What should you include in the recommendation? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

    

    This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

    Show the answer figure

    Answer: See figure below

    Explanation

    This reference architecture shows how to deploy VMs and a virtual network configured for an N-tier application, using SQL Server on Windows for the data tier. Scenario: You have a public-facing application named App1. App1 is comprised of the following three tiers: ✑ A SQL database ✑ A web front end ✑ A processing middle tier Each tier is comprised of five virtual machines. Users access the web front end by using HTTPS only. Technical requirements include: ✑ Move all the virtual machines for App1 to Azure. ✑ Minimize the number of open ports between the App1 tiers. Reference: https://docs.microsoft.com/en-us/azure/architecture/reference-architectures/n-tier/n-tier-sql-server

    Source: Adapted from community discussion — mlantonis

    References

    • Microsoft Learn

    

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

AZ-104 practice, question 41. 570 questions available.