Microsoft Azure Administrator570 questions across 57 pages are complete and free, with no account or card.
570 questions in this bank
Free access · progress saved on this device
You are planning the move of App1 to Azure. You create a network security group (NSG). You need to recommend a solution to provide users with access to App1. What should you recommend?
Answer: A
All the best to everyone that has arrived at this final page. My first comment tho. Good Luck and Good Health to everyone! Cheers!
Source: Adapted from community discussion — Jasonwcc
HOTSPOT - You implement the planned changes for NSG1 and NSG2. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Answer: See figure below
Box 1: No - NSG2 blocks RDP to VM2 - Box 2: Yes - ICMP is not blocked - Box 3: No - NSG2 blocks RDP from VM2 - Reference: https://docs.microsoft.com/en-us/azure/virtual-network/network-security-group-how-it-works
Source: Adapted from community discussion — humnahibataynge
You need to add VM1 and VM2 to the backend pool of LB1. What should you do first?
Answer: C
No point in Connecting VM2 to VNET1/Subnet1 as you are going to have to redeploy it anyway. "An existing VM cannot be added to an availability set after it is created." https://learn.microsoft.com/en-us/azure/virtual-machines/linux/tutorial-availability-sets A VM can only be added to an availability set when it is created. "https://learn.microsoft.com/en-us/azure/virtual-machines/windows/change-availability-set" If they are already in the same availability set , then you don't need to do B anyway, your a good little Azure admin, keep it up and create your backend pool with them in it. The fact that this question is being asked with no option of 'nothing' means they are not already in the same AS.
Source: Adapted from community discussion — GBAU
You need to ensure that VM1 can communicate with VM4. The solution must minimize administrative effort. What should you do?
Answer: D
The correct option is D. Establish peering between VNET1 and VNET3. To ensure that VM1 can communicate with VM4, we need to establish connectivity between the two virtual networks (VNET1 and VNET3) where the VMs reside. VNet peering enables us to connect two virtual networks together so that VMs in either network can communicate with each other. With VNet peering, the virtual networks are connected directly using the Azure backbone network, so we do not need to create any user-defined routes or assign specific IP addresses to VMs. Additionally, peering reduces administrative effort by eliminating the need for complex network configurations.
Source: Adapted from community discussion — Madbo
HOTSPOT - You need to implement Role1. Which command should you run before you create Role1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Answer: See figure below
yes lets memorize all this azure cli commands... I got it correct becaouse I have a bit experience, but I look it up in the documentation
Source: Adapted from community discussion — atilla
You need to recommend a solution to automate the configuration for the finance department users. The solution must meet the technical requirements. What should you include in the recommendation?
Answer: B
Congratulations! For reaching this end. 07/30/2021 AZ 104 passed with 909 points. About 70% of the questions were from here. Many given answers here are wrong. Look carefully in the comments, there are more often the correct answers. If you work through Microsoft Learn like I did, I'll give you a tip: Do everything you learn directly in Azure once yourself. This is the only way to have a chance to answer the questions that are not listed here.
Source: Adapted from community discussion — Merkur76
HOTSPOT - You have an Azure subscription named Subscription1 that contains a resource group named RG1. In RG1, you create an internal load balancer named LB1 and a public load balancer named LB2. You need to ensure that an administrator named Admin1 can manage LB1 and LB2. The solution must follow the principle of least privilege. Which role should you assign to Admin1 for each task? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Answer: See figure below
The Network Contributor role lets you manage networks, but not access them. Reference: https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles
Source: Adapted from community discussion — Abd99
You have an Azure Active Directory (Azure AD) tenant that contains 5,000 user accounts. You create a new user account named AdminUser1. You need to assign the User administrator administrative role to AdminUser1. What should you do from the user account properties?
Answer: B
Correct Answer: B Active Directory -> Manage Section -> Roles and administrators-> Search for Admin and assign a user to it. Reference: https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-users-assign-role-azure-portal
Source: Adapted from community discussion — mlantonis
HOTSPOT - You have a Microsoft Entra tenant that contains the groups shown in the following table.
The tenant contains the users shown in the following table.
Which users and groups can you delete? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Answer: See figure below
Tested and verified answers are Users = User1, User2, User3, User4 (can delete all users whether a license is assigned directly or via inheritance from a group membership) Groups = Group 2 and Group 4 (Groups with active license assignments cannot be deleted. You get an error)
Source: Adapted from community discussion — techtest848
You have an Azure subscription that contains the resources shown in the following table.
You need to ensure that data transfers between storage1 and VM1 do NOT traverse the internet What should you configure for storage1?
Answer: B
Correct Answer: B To ensure that all the traffic from VM1 to storage1 travels across the Microsoft backbone network without going out to the public internet, you should use a private endpoint. A private endpoint uses a private IP address from your VNet, effectively bringing the service into your VNet. Any traffic between your virtual machine and the storage account will traverse over the VNet and stay on the Microsoft backbone network, without ever leaving it. Link: https://learn.microsoft.com/en-us/azure/storage/common/storage-private-endpoints
Source: Adapted from community discussion — Yumperboy
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
AZ-104 practice, question 51. 570 questions available.
Version 1.0.0. How we source questions