AZ-104 practice questions 541–550

1. Question 541 · 570 in bank

   You have an Azure subscription that contains a virtual network named VNet1. VNet1 uses two ExpressRoute circuits that connect to two separate on-premises datacenters. You need to create a dashboard to display detailed metrics and a visual representation of the network topology. What should you use?

   • AAzure Monitor Network Insights
   • Ba Data Collection Rule (DCR)
   • CAzure Virtual Network Watcher
   • DLog Analytics

   Show answer

   Answer: A

   Explanation

   A is the answer. https://learn.microsoft.com/en-us/azure/network-watcher/network-insights-overview Azure Monitor Network Insights provides a comprehensive and visual representation through topologies, of health and metrics for all deployed network resources, without requiring any configuration. It also provides access to network monitoring capabilities like Connection Monitor, flow logging for network security groups (NSGs), and Traffic Analytics. And it provides other network diagnostic features.

   Source: Adapted from community discussion — zellck

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

2. Question 542 · 570 in bank

   Select 2

   You deploy Azure virtual machines to three Azure regions Each region contains a virtual network. Each virtual network contains multiple subnets peered in a full mesh topology. Each subnet contains a network security group (NSG) that has defined rules. A user reports that he cannot use port 33000 to connect from a virtual machine in one region to a virtual machine in another region. Which two options can you use to diagnose the issue? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

   • AAzure Virtual Network Manager
   • BIP flow verify
   • CAzure Monitor Network Insights
   • DConnection troubleshoot
   • Eelective security rules

   Show answer

   Answer: BD

   Explanation

   BD is the answer. https://learn.microsoft.com/en-us/azure/network-watcher/network-watcher-ip-flow-verify-overview IP flow verify checks if a packet is allowed or denied to or from a virtual machine. The information consists of direction, protocol, local IP, remote IP, local port, and a remote port. If the packet is denied by a security group, the name of the rule that denied the packet is returned. While any source or destination IP can be chosen, IP flow verify helps administrators quickly diagnose connectivity issues from or to the internet and from or to the on-premises environment.

   Source: Adapted from community discussion — zellck

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

3. Question 543 · 570 in bank

   You have an Azure subscription. You need to receive an email alert when a resource lock is removed from any resource in the subscription. What should you use to create an activity log alert in Azure Monitor?

   • Aa resource, a condition, and an action group
   • Ba resource, a condition, and a Microsoft 365 group
   • Ca Log Analytics workspace, a resource, and an action group
   • Da data collection endpoint, an application security group, and a resource group

   Show answer

   Answer: A

   Explanation

   A is the answer. https://learn.microsoft.com/en-us/azure/azure-monitor/alerts/alerts-create-new-alert-rule You create an alert rule by combining: - The resources to be monitored. - The signal or telemetry from the resource. - Conditions. Then you define these elements for the resulting alert actions by using: - Alert processing rules - Action groups

   Source: Adapted from community discussion — zellck

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

4. Question 544 · 570 in bank

   HOTSPOT - You have an Azure subscription that contains the alerts shown in the following exhibit.

   

   Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Tested in lab. Correct answer for: Box1: can be changed to New or Acknowledged Explanation: "Changing the user response doesnt affect the alert condition" is what the portal says while changing the response of an alert whose user response is closed Box2: can be changed to Acknowledged or Closed

   Source: Adapted from community discussion — fcert1att

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

5. Question 545 · 570 in bank

   HOTSPOT - You create a Recovery Services vault backup policy named Policy1 as shown in the following exhibit:

   

   Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Correct answer Box 1: 10 years The yearly backup point occurs to 1 March and its retention period is 10 years. Box 2: 36 months The monthly backup point occurs on the 1 of every month and its retention period is 36 months. Note: Azure retention policy takes the longest period of retention for each backup. In case of conflict between 2 different policies. Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/retention?view=o365-worldwide

   Source: Adapted from community discussion — DeVullers

   References

   • Microsoft Learn

   

   Next question

6. Question 546 · 570 in bank

   You have an Azure subscription that contains the identities shown in the following table.

   

   User1, Principal1, and Group1 are assigned the Monitoring Reader role. An action group named AG1 has the Email Azure Resource Manager Role notification type and is configured to email the Monitoring Reader role. You create an alert rule named Alert1 that uses AG1. You need to identity who will receive an email notification when Alert1 is triggered. Who should you identify?

   • AUser1 and Principal1 only
   • BUser1, User2, Principal1, and Principal2
   • CUser1 only
   • DUser1 and User2 only

   Show answer

   Answer: D

   Explanation

   Correct Answer: C Email will only be sent to Azure AD user members of the Monitoring Reader role. Email will not be sent to Azure AD groups or service principals. Reference: https://docs.microsoft.com/en-us/azure/azure-monitor/platform/action-groups https://docs.microsoft.com/en-us/azure/azure-monitor/alerts/action-groups#email-azure-resource-manager-role

   Source: Adapted from community discussion — mlantonis

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

7. Question 547 · 570 in bank

   HOTSPOT - You have an Azure subscription that contains the vaults shown in the following table.

   

   You deploy the virtual machines shown in the following table.

   

   You have the backup policies shown in the following table.

   

   For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   A:yes B:No Azure Backup vaults is not support backup Azure virtual machines *Azure Backup vaults can protect the follwing types of datasource: 1- Azure Disks 2- Azure Blobs (Azure Storage) 3- Azure database for PostgreSQL server 4- Kubernetes services C:yes, enhanced support Trusted Launch You must enable backup of Trusted Launch VM through enhanced policy only. https://learn.microsoft.com/en-us/azure/backup/backup-azure-vms-enhanced-policy?tabs=azure-portal

   Source: Adapted from community discussion — M_khuja

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

8. Question 548 · 570 in bank

   You have an Azure subscription. The subscription contains virtual machines that connect to a virtual network named VNet1. You plan to configure Azure Monitor for VM Insights. You need to ensure that all the virtual machines only communicate with Azure Monitor through VNet1. What should you create first?

   • Aa data collection rule (DCR)
   • Ba Log Analytics workspace
   • Can Azure Monitor Private Link Scope (AMPLS)
   • Da private endpoint

   Show answer

   Answer: C

   Explanation

   The answer seems correct. With Private Link you can: -Connect privately to Azure Monitor without opening up any public network access. -Ensure your monitoring data is only accessed through authorized private networks. -Prevent data exfiltration from your private networks by defining specific Azure Monitor resources that connect through your private endpoint. -Securely connect your private on-premises network to Azure Monitor by using Azure ExpressRoute and Private Link. -Keep all traffic inside the Azure backbone network. https://learn.microsoft.com/en-us/azure/azure-monitor/logs/private-link-security#advantages

   Source: Adapted from community discussion — Marianeiro

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

9. Question 549 · 570 in bank

   HOTSPOT - You have an Azure subscription that contains the vaults shown in the following table.

   

   You create a storage account that contains the resources shown in the following table.

   

   To which vault can you back up cont1 and share1? To answer, select the appropriate options in the answer area. NOTE: Each correct answer is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   a) Backup1 -- blob containers are backed up to Azure Backup vaults b) Recovery1 -- Azure Files are backed up to Azure Recovery Services vaults https://learn.microsoft.com/en-us/answers/questions/405915/what-is-difference-between-recovery-services-vault

   Source: Adapted from community discussion — snorfknickles

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

10. Question 550 · 570 in bank

    You have an Azure subscription that contains an Azure Stream Analytics job named Job1. You need to monitor input events for Job1 to identify the number of events that were NOT processed. Which metric should you use?

    • AOut-of-Order Events
    • BOutput Events
    • CLate Input Events
    • DBacklogged Input Events

    Show answer

    Answer: D

    Explanation

    Correct answer: D Out-of-Order Events Number of events received out of order that were either dropped or given an adjusted time stamp, based on the event ordering policy. This metric can be affected by the configuration of the Out-of-Order Tolerance Window setting. Output Events Amount of data that the Stream Analytics job sends to the output target, in number of events. Late Input Events Events that arrived later than the configured tolerance window for late arrivals. Learn more about Azure Stream Analytics event order considerations. Backlogged Input Events Number of input events that are backlogged. A nonzero value for this metric implies that your job can't keep up with the number of incoming events. If this value is slowly increasing or is consistently nonzero, you should scale out your job. To learn more, see Understand and adjust streaming units. Reference: https://learn.microsoft.com/en-us/azure/stream-analytics/stream-analytics-job-metrics

    Source: Adapted from community discussion — DeVullers

    References

    • Microsoft Learn

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

AZ-104 practice, question 541. 570 questions available.