Free Microsoft AZ-104 Exam Dumps

MultipleChoice

You have an Azure subscription that contains a virtual network named VNET1. VNET1 contains the subnets shown in the following table.

Each virtual machine uses a static IP address.

You need to create network security groups (NSGs) to meet following requirements:

* Allow web requests from the internet to VM3, VM4, VM5, and VM6.

* Allow all connections between VM1 and VM2.

* Allow Remote Desktop connections to VM1.

* Prevent all other network traffic to VNET1.

What is the minimum number of NSGs you should create?

Hotspot

You have an Azure subscription named Subscription1 that contains the virtual networks in the following table.

Subscripton1 contains the virtual machines in the following table.

In Subscription1, you create a load balancer that has the following configurations:

* Name: LB1

* SKU: Basic

* Type: Internal

* Subnet: Subnet12

* Virtual network: VNET1

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: each correct selection is worth one point.

MultipleChoice

You have an Azure subscription that contains a virtual machine named VM1. VM1 hosts a line-of-business application that is available 24 hours a day. VM1 has one network interface and one managed disk. VM1 uses the D4s v3 size.

You plan to make the following changes to VM1:

* Change the size to D8s v3.

* Add a 500-GB managed disk.

* Add the Puppet Agent extension.

* Attach an additional network interface.

Which change will cause downtime for VM1?

Hotspot

You have an Azure Active Directory (Azure AD) tenant that contains three global administrators named Admin1, Admin2, and Admin3.

The tenant is associated to an Azure subscription. Access control for the subscription is configured as shown in the Access control exhibit. (Click the Exhibit tab.)

You sign in to the Azure portal as Admin1 and configure the tenant as shown in the Tenant exhibit. (Click the Exhibit tab.)

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Explanation

They are all Global admins so they can all modify user permission. i.e add self as owner etc.

You can be GA in one of the subscription, it doesn't mean that you can create the resources in all subscription. As a Global Administrator in Azure Active Directory (Azure AD), you might not have access to all subscriptions and management groups in your directory. Azure AD and Azure resources are secured independently from one another. That is, Azure AD role assignments do not grant access to Azure resources, and Azure role assignments do not grant access to Azure AD.

However, if you are a Global Administrator in Azure AD, you can assign yourself access to all Azure subscriptions and management groups in your directory

Hotspot

You plan to use Azure Network Watcher to perform the following tasks:

* Task1: Identify a security rule that prevents a network packet from reaching an Azure virtual machine

* Task2: Validate outbound connectivity from an Azure virtual machine to an external host

Which feature should you use for each task? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hotspot

You have an Azure virtual machine named VM1 that connects to a virtual network named VNet1. VM1 has the following configurations:

* Subnet: 10.0.0.0/24

* Availability set: AVSet

* Network security group (NSG): None

* Private IP address: 10.0.0.4 (dynamic)

* Public IP address: 40.90.219.6 (dynamic)

You deploy a standard, Internet-facing load balancer named slb1.

You need to configure slb1 to allow connectivity to VM1.

Which changes should you apply to VM1 as you configure slb1? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hotspot

You have an Azure subscription that contains the resources in the following table.

You install the Web Server server role (IIS) on VM1 and VM2, and then and VM1 and VM2 to LB1.

Hotspot

You have a hybrid deployment of Azure Active Directory (Azure AD) that contains the users shown in the following table.

You need to modify the JobTitle and UsageLocation attributes for the users.

For which users can you modify the- attributes from Azure AD? To answer, select the appropriate options in the answer area.

See below answer

Hotspot

You have an Azure subscription named Subscription1 that has a subscription ID of c276fc76-9cd4-44c9-99a7-4fd71546436e.

You need to create a custom RBAC role named CR1 that meets the following requirements:

* Can be assigned only to the resource groups in Subscription1

* Prevents the management of the access permissions for the resource groups

* Allows the viewing, creating, modifying, and deleting of resource within the resource groups

What should you specify in the assignable scopes and the permission elements of the definition of CR1? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

MultipleChoice

You have an Azure subscription that uses the public IP addresses shown in the following table.

You need to create a public Standard Load Balancer.