Microsoft Azure Administrator (beta) v1.0 (AZ-104)

Page:    1 / 7   
Total 103 questions

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure subscription that contains the resources shown in the following table.


VM1 connects to VNET1.
You need to connect VM1 to VNET2.
Solution: You turn off VM1, and then you add a new network interface to VM1.
Does this meet the goal?

  • A. Yes
  • B. No


Answer : B

Explanation:
Instead you should delete VM1. You recreate VM1, and then you add the network interface for VM1.
Note: When you create an Azure virtual machine (VM), you must create a virtual network (VNet) or use an existing VNet. You can change the subnet a VM is connected to after it's created, but you cannot change the VNet.
Reference:
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/network-overview

HOTSPOT -
You have an Azure subscription named Subscription1 that contains the quotas shown in the following table.


You deploy virtual machine to Subscription1 as shown in the following table.

You plan to deploy the virtual machines shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:



Answer :

Explanation:
The total regional vCPUs is 20 so that means a maximum total of 20 vCPUs across all the different VM sizes. The deallocated VM with 16 vCPUs counts towards the total. VM20 and VM1 are using 18 of the maximum 20 vCPUs leaving only two vCPUs available.
Reference:
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/quotas

HOTSPOT -
You have an Azure subscription that contains an Azure Availability Set named WEBPROD-AS-USE2 as shown in the following exhibit.


You add 14 virtual machines to WEBPROD-AS-USE2.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Hot Area:



Answer :

Explanation:

Box 1: 2 -
There are 10 update domains. The 14 VMs are shared across the 10 update domains so four update domains will have two VMs and six update domains will have one VM. Only one update domain is rebooted at a time. Therefore, a maximum of two VMs will be offline.

Box 2: 7 -
There are 2 fault domains. The 14 VMs are shared across the 2 fault domains, so 7 VMs in each fault domain. A rack failure will affect one fault domain so 7 VMs will be offline.
Reference:
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/manage-availability

You deploy an Azure Kubernetes Service (AKS) cluster named Cluster1 that uses the IP addresses shown in the following table.


You need to provide internet users with access to the applications that run in Cluster1.
Which IP address should you include in the DNS record for Cluster1?

  • A. 131.107.2.1
  • B. 10.0.10.11
  • C. 172.17.7.1
  • D. 192.168.10.2


Answer : A

You have a deployment template named Template1 that is used to deploy 10 Azure web apps.
You need to identify what to deploy before you deploy Template1. The solution must minimize Azure costs.
What should you identify?

  • A. five Azure Application Gateways
  • B. one App Service plan
  • C. 10 App Service plans
  • D. one Azure Traffic Manager
  • E. one Azure Application Gateway


Answer : B

Explanation:
You create Azure web apps in an App Service plan.
Reference:
https://docs.microsoft.com/en-us/azure/app-service/overview-hosting-plans

HOTSPOT -
You plan to deploy an Azure container instance by using the following Azure Resource Manager template.


Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the template.
Hot Area:



Answer :

You have an Azure subscription that contains a virtual machine named VM1. VM1 hosts a line-of-business application that is available 24 hours a day. VM1 has one network interface and one managed disk. VM1 uses the D4s v3 size.
You plan to make the following changes to VM1:
-> Change the size to D8s v3.
-> Add a 500-GB managed disk.
-> Add the Puppet Agent extension.
-> Enable Desired State Configuration Management.
Which change will cause downtime for VM1?

  • A. Enable Desired State Configuration Management
  • B. Add a 500-GB managed disk
  • C. Change the size to D8s v3
  • D. Add the Puppet Agent extension


Answer : C

Explanation:
While resizing the VM it must be in a stopped state.
Reference:
https://azure.microsoft.com/en-us/blog/resize-virtual-machines/

You have an app named App1 that runs on an Azure web app named webapp1.
The developers at your company upload an update of App1 to a Git repository named Git1.
Webapp1 has the deployment slots shown in the following table.


You need to ensure that the App1 update is tested before the update is made available to users.
Which two actions should you perform? Each correct answer presents part of the solution.

  • A. Swap the slots
  • B. Deploy the App1 update to webapp1-prod, and then test the update
  • C. Stop webapp1-prod
  • D. Deploy the App1 update to webapp1-test, and then test the update
  • E. Stop webapp1-test


Answer : AD

You have an Azure subscription named Subscription1 that has the following providers registered:
-> Authorization
-> Automation
-> Resources
-> Compute
-> KeyVault
-> Network
-> Storage
-> Billing
-> Web
Subscription1 contains an Azure virtual machine named VM1 that has the following configurations:
-> Private IP address: 10.0.0.4 (dynamic)
-> Network security group (NSG): NSG1
-> Public IP address: None
-> Availability set: AVSet
-> Subnet: 10.0.0.0/24
-> Managed disks: No

Location: East US -


You need to record all the successful and failed connection attempts to VM1.
Which three actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

  • A. Enable Azure Network Watcher in the East US Azure region.
  • B. Add an Azure Network Watcher connection monitor.
  • C. Register the MicrosoftLogAnalytics provider.
  • D. Create an Azure Storage account.
  • E. Register the Microsoft.Insights resource provider.
  • F. Enable Azure Network Watcher flow logs.


Answer : ACD

Explanation:
D: NSG flow log data is written to an Azure Storage account. You need to create an Azure Storage account,
With an Azure Storage account NSG flow logs can be enabled.
A: Enable network watcher in the East US region.
C: NSG flow logging requires the Microsoft.Insights provider.
Reference:
https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-nsg-flow-logging-portal

You need to deploy an Azure virtual machine scale set that contains five instances as quickly as possible.
What should you do?

  • A. Deploy five virtual machines. Modify the Availability Zones settings for each virtual machine.
  • B. Deploy five virtual machines. Modify the Size setting for each virtual machine.
  • C. Deploy one virtual machine scale set that is set to VM (virtual machines) orchestration mode.
  • D. Deploy one virtual machine scale set that is set to ScaleSetVM orchestration mode.


Answer : D

Reference:
https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/orchestration-modes

You plan to create the Azure web apps shown in the following table.


What is the minimum number of App Service plans you should create for the web apps?

  • A. 1
  • B. 2
  • C. 3
  • D. 4


Answer : A

HOTSPOT -
You have a pay-as-you-go Azure subscription that contains the virtual machines shown in the following table.


You create the budget shown in the following exhibit.

The AG1 action group contains a user named [email protected] only.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
Hot Area:



Answer :

Explanation:
Box 1: VM1 is turned off, and VM2 continues to run
The budget alerts are for Resource Group RG1, which include VM1, but not VM2.
Box 2: one email notification will be sent each month.
Budget alerts for Resource Group RG1, which include VM1, but not VM2.VM1 consumes 20 Euro/day. The 50%, 500 Euro limit, will be reached in 25 days, and an email will be sent.
The 70% and 100% alert conditions will not be reached within a month, and they don't trigger email actions anyway.
Credit alerts: Credit alerts are generated automatically at 90% and at 100% of your Azure credit balance. Whenever an alert is generated, it's reflected in cost alerts and in the email sent to the account owners. 90% and 100% will not be reached though.
Reference:
https://docs.microsoft.com/en-us/azure/cost-management-billing/costs/cost-mgt-alerts-monitor-usage-spending
Configure and manage virtual networking

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure subscription that contains 10 virtual networks. The virtual networks are hosted in separate resource groups.
Another administrator plans to create several network security groups (NSGs) in the subscription.
You need to ensure that when an NSG is created, it automatically blocks TCP port 8080 between the virtual networks.
Solution: From the Resource providers blade, you unregister the Microsoft.ClassicNetwork provider.
Does this meet the goal?

  • A. Yes
  • B. No


Answer : B

Explanation:
You should use a policy definition.
Resource policy definition used by Azure Policy enables you to establish conventions for resources in your organization by describing when the policy is enforced and what effect to take. By defining conventions, you can control costs and more easily manage your resources.
Reference:
https://docs.microsoft.com/en-us/azure/azure-policy/policy-definition

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure subscription that contains 10 virtual networks. The virtual networks are hosted in separate resource groups.
Another administrator plans to create several network security groups (NSGs) in the subscription.
You need to ensure that when an NSG is created, it automatically blocks TCP port 8080 between the virtual networks.
Solution: You assign a built-in policy definition to the subscription.
Does this meet the goal?

  • A. Yes
  • B. No


Answer : B

Explanation:
Resource policy definition used by Azure Policy enables you to establish conventions for resources in your organization by describing when the policy is enforced and what effect to take. By defining conventions, you can control costs and more easily manage your resources.
Reference:
https://docs.microsoft.com/en-us/azure/azure-policy/policy-definition

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure subscription that contains 10 virtual networks. The virtual networks are hosted in separate resource groups.
Another administrator plans to create several network security groups (NSGs) in the subscription.
You need to ensure that when an NSG is created, it automatically blocks TCP port 8080 between the virtual networks.
Solution: You configure a custom policy definition, and then you assign the policy to the subscription.
Does this meet the goal?

  • A. Yes
  • B. No


Answer : A

Explanation:
Resource policy definition used by Azure Policy enables you to establish conventions for resources in your organization by describing when the policy is enforced and what effect to take. By defining conventions, you can control costs and more easily manage your resources.
Reference:
https://docs.microsoft.com/en-us/azure/azure-policy/policy-definition

Page:    1 / 7   
Total 103 questions