AZ-104 practice questions 531–540

1. Question 531 · 570 in bank

   You have an Azure subscription that contains the storage accounts shown in the following table.

   

   You deploy a web app named App1 to the West US Azure region. You need to back up App1. The solution must minimize costs. Which storage account should you use as the target for the backup?

   • Astorage1
   • Bstorage2
   • Cstorage3
   • Dstorage4

   Show answer

   Answer: B

   Explanation

   To minimize costs, you should use the storage account that is in the same region as the web app that you are backing up. In this case, the web app is in the West US region, so you should use storage2

   Source: Adapted from community discussion — khaled_razouk

   References

   • Microsoft Learn
   • azure.microsoft.com documentation
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

2. Question 532 · 570 in bank

   HOTSPOT - You have an Azure subscription that is linked to an Azure AD tenant. The tenant contains two users named User1 and User2. The subscription contains the resources shown in the following table.

   

   The subscription contains the alert rules shown in the following table.

   

   The users perform the following action: • User1 creates a new virtual disk and attaches the disk to VM1 • User2 creates a new resource tag and assigns the tag to RG1 and VM1 Which alert rules are triggered by each user? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Tested in a lab. User 1 - Alert 1 and Alert 2 fired Alert 1 operations: Microsoft.Compute/virtualMachines/write Microsoft.Compute/disks/write Alert 2 operations: Microsoft.Compute/virtualMachines/write User 2 - Alert 1 fired Alert 1 operations: Microsoft.Resources/tags/write

   Source: Adapted from community discussion — MightyMonarch74

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

3. Question 533 · 570 in bank

   You have an Azure subscription that contains eight virtual machines and the resources shown in the following table.

   

   You need to configure access for VNET1. The solution must meet the following requirements: • The virtual machines connected to VNET1 must be able to communicate with the virtual machines connected to VNET2 by using the Microsoft backbone. • The virtual machines connected to VNET1 must be able to access storage1, storage2, and Azure AD by using the Microsoft backbone. What is the minimum number of service endpoints you should add to VNET1?

   • A1
   • B2
   • C3
   • D5

   Show answer

   Answer: B

   Explanation

   My answer: 2 First service endpoint: One service endpoint for Microsoft.Storage added to VNET1. The question asks how many to add to VNET1. When adding service endpoints on the VNET1 side you only get to choose the service ( Microsoft.Storage ) not the actual storage accounts. Once you add this service endpoint it can be then linked to on the storage side for both accounts. Second Service Endpoint: Microsoft.AzureActiveDirectory. Total:2

   Source: Adapted from community discussion — moshos

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

4. Question 534 · 570 in bank

   You need to configure an Azure web app named contoso.azurewebsites.net to host www.contoso.com. What should you do first?

   • ACreate A records named www.contoso.com and asuid.contoso.com.
   • BCreate a TXT record named asuid that contains the domain verification ID.
   • CCreate a CNAME record named asuid that contains the domain verification ID.
   • DCreate a TXT record named www.contoso.com that has a value of contoso.azurewebsites.net.

   Show answer

   Answer: B

   Explanation

   Before you can point your domain (www.contoso.com) to an Azure Web App (contoso.azurewebsites.net), you need to verify that you actually own the domain. c 1. Obtain Domain Verification ID In the Azure portal, navigate to your Azure Web App. Go to the "Custom domains" section. Azure provides a unique domain verification ID. 2. Create the TXT Record Log in to your domain registrar's (e.g., GoDaddy, Namecheap) DNS management area. Add a new TXT record. The name of this record will be "asuid". The value of the record should be the domain verification ID you got from Azure. 3. Add CNAME Record (Later) Once Azure has verified that you own the domain, you'll then need to create a CNAME record named "www" that points to "contoso.azurewebsites.net". This tells the DNS system where to direct web traffic for www.contoso.com.

   Source: Adapted from community discussion — goldist

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

5. Question 535 · 570 in bank

   HOTSPOT - You have an Azure subscription that contains an Azure Storage account named storage1 and the users shown in the following table.

   

   You plan to monitor storage1 and to configure email notifications for the signals shown in the following table.

   

   You need to identify the minimum number of alert rules and action groups required for the planned monitoring. How many alert rules and action groups should you identify? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Correct Answer: You can define only one activity log signal per alert rule. To alert on more signals, create another alert rule. Box 1: 4 You need 1 alert rule per 1 signal (1xIngress, 1xEgress, 1xDelete storage account, 1xRestore blob ranges). Box 2: 3 You need 3 Action Groups (1xUser1 and User3, 1xUser1 only, 1xUser1 User2 and User3). Check ‘Users to notify’ column.

   Source: Adapted from community discussion — mlantonis

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

6. Question 536 · 570 in bank

   You have an Azure subscription that contains 10 network security groups (NSGs), 10 virtual machines, and a Log Analytics workspace named Workspace1. Each NSG is connected to a virtual machine. You need to configure an Azure Monitor Network Insights alert that will be triggered when suspicious network traffic is detected. What should you do first?

   • ADeploy Connection Monitor.
   • BConfigure data collection endpoints.
   • CConfigure a private link.
   • DConfigure NSG flow logs.

   Show answer

   Answer: D

   Explanation

   To configure an Azure Monitor Network Insights alert that will be triggered when suspicious network traffic is detected, you should first configure NSG flow logs. NSG flow logs provide information about traffic that is allowed or denied by an NSG. By configuring NSG flow logs, you will be able to monitor the traffic passing through your NSGs and detect any suspicious activity.

   Source: Adapted from community discussion — khaled_razouk

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

7. Question 537 · 570 in bank

   HOTSPOT - You have an Azure subscription named Sub1 that contains the resources shown in the following table.

   

   Sub1 contains the following alert rule: • Name: Alert1 • Scope: All resource groups in Sub1 o Include all future resources • Condition: All administrative operations • Actions: Action1 Sub1 contains the following alert processing rule: • Name: Rule1 • Scope: Sub1 • Rule type: Suppress notifications • Apply the rule: On a specific time o Start: August 10, 2022 o End: August 13, 2022 For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Y - "alert is listed" does not mean a notification in my understanding therefore yes N - The date is within suppression rule boundaries therefore email will be suppressed Y - The date is outside suppression rule boundaries

   Source: Adapted from community discussion — FabrityDev

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

8. Question 538 · 570 in bank

   You have an Azure subscription that contains a storage account named storage1 in the North Europe Azure region. You need to ensure that when blob data is added to storage1, a secondary copy is created in the East US region. The solution must minimize administrative effort. What should you configure?

   • Aoperational backup
   • Bobject replication
   • Cgeo-redundant storage (GRS)
   • Da lifecycle management rule

   Show answer

   Answer: B

   Explanation

   With GRS you can't choose the Destination region and for North Europe the paired region is West Europe so correct answer Object replication.

   Source: Adapted from community discussion — sadhou2004

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

9. Question 539 · 570 in bank

   You have an Azure subscription that contains two Log Analytics workspaces named Workspace1 and Workspace2 and 100 virtual machines that run Windows Server. You need to collect performance data and events from the virtual machines. The solution must meet the following requirements: • Logs must be sent to Workspace1 and Workspace 2. • All Windows events must be captured. • All security events must be captured. What should you install and configure on each virtual machine?

   • Athe Azure Monitor agent
   • Bthe Windows Azure diagnostics extension (WAD)
   • Cthe Windows VM agent

   Show answer

   Answer: A

   Explanation

   A is the answer. https://learn.microsoft.com/en-us/azure/azure-monitor/agents/agents-overview Azure Monitor Agent (AMA) collects monitoring data from the guest operating system of Azure and hybrid virtual machines and delivers it to Azure Monitor for use by features, insights, and other services, such as Microsoft Sentinel and Microsoft Defender for Cloud. Azure Monitor Agent replaces all of Azure Monitor's legacy monitoring agents.

   Source: Adapted from community discussion — zellck

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

10. Question 540 · 570 in bank

    You have an Azure subscription that contains a virtual machine named VM1 and an Azure function named App1. You need to create an alert rule that will run App1 if VM1 stops. What should you create for the alert rule?

    • Aan application security group
    • Ba security group that has dynamic device membership
    • Can action group
    • Dan application group

    Show answer

    Answer: C

    Explanation

    Answer is correct, C. An action group is a collection of actions that are triggered by an Azure alert. In this scenario, you need to create an alert rule that will run App1 if VM1 stops, and for this purpose, you need to create an action group. An action group defines the set of actions to be taken when an alert is triggered, such as running an Azure function, sending an email, or creating an Azure ticket. By creating an action group and associating it with the alert rule, you can automate the process of running App1 if VM1 stops, without the need for manual intervention. This helps ensure that critical systems, such as App1, are automatically activated when necessary, improving the overall reliability and availability of your Azure services.

    Source: Adapted from community discussion — omgMerrick

    References

    • Microsoft Learn
    • Microsoft Learn

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

AZ-104 practice, question 531. 570 questions available.