- An error has occurred, which probably means the feed is down. Try again later.
Microsoft Certified: Azure Administrator Associate AZ-104
You plan to deploy an Azure web app that will have the following settings:
- Name: WebApp1
- Publish: Code
- Runtime Stack: Java 11
- Operating System: Linux
- Continuous deployment: Disabled
You need to ensure that you can integrate WebApp1 with GitHub Actions. Which setting should you modify?
A) Continuous Deployment
B) Operating System
C) Publish
D) Runtime stack
Answer: Continuous Deployment
You plan to deploy an Azure web app that will have the following settings:
Name: WebApp1
Publish: Docker Container
Operating system: Windows
Region: West US
Windows Plan (West US): ASP-RG1-8bcf
You need to ensure that WebApp1 uses the ASP.NET V4.8 runtime stack.
Which setting should you modify?
Select only one answer.
Operating system
Publish
Region
Windows Plan
Answer : Publish
You have an Azure subscription that includes the following web apps:
WebApp1, which runs code in a Windows operating system.
WebApp2, which runs code in a Linux operating system.
WebApp3, which runs in a Docker container on Windows.
WebApp4, which runs in a Docker container on Linux.
From which web apps can you use WebJobs?
Select only one answer.
WebApp1 and WebApp2 only (Correct Answer)
WebApp1 and Web3 only
WebApp1 only
WebApp1, WebApp2, WebApp3 and WebApp4
ou have an Azure web service named Contoso2022 that runs in the Standard App Service plan. Contoso2022 has five deployment slots in use.
A user named User1 has the Contributor role for Contoso2022.
You need to ensure that User1 can create additional deployment slots to Contoso2022.
What should you do?
Select only one answer.
Assign User1 the Owner role for Contoso2022.
Assign User1 the Website Contributor role for Contoso2022.
Scale out the Contoso2022 App Service plan.(Correct)
Scale up the Contoso2022 App Service plan.
You have Azure web app named WebApp1.
You need to integrate GitHub as a source code repository for WebApp1.
What should you use?Select only one answer.
Deployment Center (Correct Answer)
Deployment slots
Extensions
Service Connector
You have an Azure subscription that includes a virtual network named VNet1.
You plan to create a web app named WebApp1 and deploy it to VNet1.
You need to prepare the environment for the planned web app. The solution must minimize costs.
Which app service plan size should you use?
Select only one answer.
Dev / Test B1
Dev / Test F1 (Correct Answer)
Isolated I1V2
Production P1V2
Production P3V3
You have an Azure web app named WebApp1.
You discover that backup options are unavailable for WebApp1.
You need to back up WebApp1.
What should you do first?Select only one answer.
Modify the Application settings of WebApp1.
Modify the platform settings of WebApp1.
Scale out the app service plan.
Scale up the app service plan. (Correct Answer)
You plan to create an Azure container instance named container1 that will use a Docker image named Image1.
You need to ensure that container1 has persistent storage.
Which Azure resources should you deploy for the persistent storage?Select only one answer.
an Azure container registry
an Azure SQL database
an Azure Storage account and a blob container
an Azure Storage account and a file share(Correct Answer)
You have an Azure subscription that contains the following resources:
a storage account named storage123
a container instance named AppContainer
The subscription contains a virtual network named VirtualNet4 that has the following subnets:
SubnetA- has a Microsoft.Storage service endpoint.
SubnetB- AppContainer is deployed to SubnetB.
SubnetC- No resources are connected to SubnetC.
You plan to deploy an Azure container instance named container5 to VirtualNet4.
To which subnets can you deploy container5?
Select only one answer.
SubnetA, SubnetB, and SubnetC
SubnetB and SubnetC only(Correct answer)
SubnetB only
SubnetC only
You have an Azure container registry that stores an image named Image1 and a Windows Server 2022 Azure virtual machine named VM1.
You need to ensure that you can run Image1 in VM1.
What should you install in VM1?
Select only one answer.
Azure Portal
Docker (Correct answer)
Hyper-V role
.NET Framework 4.7
You have Azure subscription that includes virtual network with following subnets:
Subnet1, which has connected virtual machine
Subnet2, which has connected web app
Subnet3, which has deployed container instance
You plan to deploy container instance named container1.
To which subnets can you deploy container1?
Select only one answer.
Subnet1 and Subnet3 only
Subnet1, Subnet2 and Subnet3(Correct Answer)
Subnet2 and Subnet3 only
Subnet3 only
You have an Azure subscription that contains the following storage accounts:
storage1, configured as StorageV2 kind
storage2, configured as BlobStorage kind
storage3, configured as FileStorage kind
Which storage account or storage accounts can you use Lifecycle management?
Select only one answer.
storage1 and storage2 only(Correct Answer)
storage1 and storage3 only
storage1 only
Storage1, storage2 and storage3
storage2 and storage3 only
You have an Azure Storage account named storage1 that is configured to use the Hot access tier.
Storage1 has a container named container1 and the lifecycle management rule with following settings:
Move blob to cool storage: Selected
Days after last modification: 3
Move blob to archive storage: Selected
Days after last modification: 5
On December 1, you create a file named File1 in container1.
On December 10, you rehydrate File1 and move the file to the Hot access tier.
When will File1 be moved to archive storage?
Select only one answer.
on December 15(Correct Answer)
on December 18
on January 1
within 24 hours
You have an Azure Storage account named storage1.
You create the following encryption scopes for storage1:
Scope1 that has an encryption type of Microsoft-managed keys
Scope2 that has an encryption type of Customer-managed keys
Which storage services can be used with Scope2?
Select only one answer.
blob and file only
blob, file, table, and queue (Correct Answer)
blob only
file only
table and queue only
You have an Azure storage account that contains a blob container named container1.
You need to configure access to container1.
Which authorization types can you use?
Select only one answer.
Microsoft Entra ID only
Microsoft Entra ID, shared access signature or certificate only
Microsoft Entra ID, storage key or shared access signature only
Microsoft Entra ID, storage key, shared access signature or certificate(Correct Answer)
Storage key or shared access signature only
You have an Azure subscription that contains a storage account named storage1 and the following virtual machines:
- VM1 has a public IP address of 13.68.158.24 and is connected to VNET1/Subnet1
- VM2 has a public IP address of 52.255.145.76 and is connected to VNET1/Subnet1
- VM3 has a public IP address of 13.68.158.50 and is connected to VNET1/Subnet2
The subnets have the following service endpoints:
- Subnet1 has a Microsoft.Storage service endpoint
- Subnet2 does NOT have any service endpoint
Storage1 has a firewall configured to allow access from the 13.68.158.0/24 IP address range only.
Which virtual machines can access storage1.
VM1 and VM2 only
VM1 and VM3 only (Correct Answer)
VM1 only
VM1, VM2, and VM3
VM3 only
You have an Azure subscription that includes the following resources:
VNet1, a virtual network
Subnet1, a subnet in VNet1
WebApp1, a web app application service
NSG1, a network security group
You create an application security group named ASG1.
Which resource can use ASG1?
Select only one answer.
NSG1
Subnet1(Correct Answer)
VNet1
WebApp1
You have an Azure Subscription that contains a virtual machine named VM1 and a storage account named Storage1. You need to ensure that VM1 can access storage1 by using a private IP address. What should you use?
A) A point to site (P2S) connection
B) A Service endpoint
C) A VPN gateway
D) The Azure Front door service
Answer: A Service endpoint
You have an Azure subscription that contains a virtual machine named VM1 and a storage account named storage1.
You need to ensure that VM1 can access storage1 by using the Azure backbone.
What should you configure?
Select only one answer.
a routing table
a service endpoint(Correct Answer)
a VPN gateway
Peering
You have an Azure subscription that contains a virtual network named VNET1. VNET1 uses the following address spaces:
10.10.1.0/24
10.10.2.0/28
VNET1 contains the following subnets:
Subnet1- has an address space of 10.10.1.0/24
Subnet2- has an address space of 10.10.2.0/28
To Subnet1, you deploy a virtual machine named VM1 that runs Windows Server 2022. VM1 has Remote Desktop enabled.
VM1 does NOT have a public IP address.
You need to be able to deploy Azure Bastion to protect VM1.
What should you do first?
Select only one answer.
Add a new subnet to VNET1.(Maybe correct)
Add a public IP address to VM1.
Add an extension to VM1.
Modify the address space of VNET1. (Or maybe correct)
You have an Azure subscription that includes a network security group named NSG1.
You plan to add an inbound security rule named Rule1 to NSG1.
You need to configure a priority for Rule1. Rule1 must have the highest priority for inbound security rules in NSG1.
Which priority should you configure for Rule1?Select only one answer.
0
1
10
100(Correct Answer)
1000
You have an Azure subscription that includes a virtual machine named VM1.
You need to protect VM1 by using Azure Backup.
Which Azure resource should you create first?Select only one answer.
a backup policy
a backup vault
a recovery services vault(Correct Answer)
a storage account
You recently create an Azure virtual machine standard backup policy.
You need to configure a retention period for virtual machine instant recovery snapshots.
What is the maximum number of days that can be set for the retention period?Select only one answer.
5(Correct Answer)
7
14
30
ou have an Azure virtual machine named VM1.
VM1 contains the following:
- a File named File1 that is stored on volume C:\
- a File named File2 that is stored on volume D:\
- an App named App1 that is in a running state
- a user named User1 that is connected to VM1
You plan to resize VM1.
What is preserved after the resize?Select only one answer.
File1 and File2 only(Correct Answer)
File1 and the state of App1 only
File1, File2 and the state of App1 only
File1, File2, the state of App1 and the connection of User1
File1 only
You have an Azure subscription named Sub1.
You plan to deploy a virtual machine scale set named VMSS1 in East US region. VMSS1 will have 8 instances.
What is the maximum number of availability zones that VMSS1 can use?Select only one answer.
1
2
3(Correct Answer)
4
You have an Azure subscription that contains the following fully peered virtual networks:
VNet1, located in the West US region. 5 virtual machines are connected to VNet1.
VNet2, located in the West US region. 7 virtual machines are connected to VNet2.
VNet3, located in the East US region, 10 virtual machines are connected to VNet3.
VNet4, located in the East US region, 4 virtual machines are connected to VNet4.
You plan to protect all of the connected virtual machines by using Azure Bastion.
What is the minimum number of Azure Bastion hosts that you must deploy?
1
2
3
4
ANSWER-1
Tiering of Block Blobs+ Default setting at storage account level+ Archive Restore process
You have an Azure Storage account named storage1 that is configured to use the Hot access tier.
Storage1 has a container named container1 and the lifecycle management rule with following settings:
Move blob to cool storage: Selected
Days after last modification: 3
Move blob to archive storage: Selected
Days after last modification: 5
On December 1, you create a file named File1 in container1.
On December 10, you rehydrate File1 and move the file to the Hot access tier.
When will File1 be moved to archive storage?
Select only one answer.
- within 24 hours
- on December 15
- on December 18
- on January 1
ANSWER: Within 24 hours
ou have an Azure Storage account named storage1.
You create the following encryption scopes for storage1:
- Scope1 that has an encryption type of Microsoft-managed keys
- Scope2 that has an encryption type of Customer-managed keys
Which storage services can be used with Scope2?
Select only one answer.
blob only
file only
blob and file only
table and queue only
blob, file, table, and queue
ANSWER: Blob only.
You have an Azure virtual network named VNET1 that is connected to a network security group (NSG) named NSG1. NSG1 has the following inbound security rules:
Rule1 has a priority of 100 and allows port 3389 on TCP protocol from any source and to any destination
Rule2 has a priority of 200 and allows ports 80 and 8080 on UDP protocol from any source and to any destination
Rule3 has a priority of 300 and denies ports 1–2000 on TCP protocol from any source and to any destination
Rule4 has a priority of 400 and allows ports 50–500 on TCP protocol from VirtualNetwork source and to any destination
Rule5 has a priority of 500 and allows ports 80 and 443 on TCP protocol from any source and to any destination
You need to allow http and https connections from the internet to VNET1.
What should you change for NSG1?
Select only one answer.
Priority for Rule3 to 450
Priority for Rule4 to 250
Priority for Rule5 to 250
Protocol for Rule2 to TCP
Answer: Priority for Rule5 to 250
You have Azure subscription that includes virtual network named VNet1 in West US region.
You plan to deploy following container instances:
Instance1, running Windows container image in West US region
Instance2, running Linux container image in West US region
Instance3, running Windows container image in East US region
Which container instances can be deployed to VNet1?
Select only one answer.
Instance1 and Instance2 only
Instance1 and Instance3 only
Instance1, Instance2 and Instance3
Instance1 only
Instance2 only
Answer- Instance1 and Instance2 only
Vnet and VM/NIC of any resource — Region restriction but no RG restriction
You have an Azure subscription that contains the following resources:
A resource group named RG1 in the West US region
A resource group named RG2 in the Central US region
A virtual network named VNet1 that is deployed to the West US region in RG1
A virtual network named VNet2 that is deployed to the Central US region in RG1
A virtual network named VNet3 that is deployed to the West US region in RG2
You need to deploy a virtual machine named VM1 to RG1 in the West US region.
To which virtual network or virtual networks can you connect VM1?
Select only one answer.
VNet1 only
VNet1 or VNet2 only
VNet1 or VNet3 only
VNet1, VNet2 or VNet3
ANSWER- VNet1 or VNet3 only
You have an Azure subscription that includes following resources:
VNet1, a virtual network
Subnet1, a subnet in VNet1
VM1, a virtual machine
NIC1, a network interface of VM1
LB1, a load balancer
You create a network security group named NSG1.
To which two Azure resources can you associate NSG1?
Select all answers that apply.
LB1
NIC1 (Correct Answer)
Subnet1(Correct Answer)
VM1
VNet1
You have an Azure subscription that contains the following fully peered virtual networks:
VNet1, located in the West US region. 5 virtual machines are connected to VNet1.
VNet2, located in the West US region. 7 virtual machines are connected to VNet2.
VNet3, located in the East US region, 10 virtual machines are connected to VNet3.
VNet4, located in the East US region, 4 virtual machines are connected to VNet4.
You plan to protect all of the connected virtual machines by using Azure Bastion.
What is the minimum number of Azure Bastion hosts that you must deploy?
Select only one answer.
1
2(Correct Answer)
3
4
You have an Azure virtual machine named Computer5 and a Recovery Services vault named Vault5. Computer5 contains the following data disks:
DiskA has a size of 512 GB
DiskB has a size of 30 TB
DiskC has a size of 26 TB
DiskD has a size of 2.0 TB
Which data disks can you back up to Vault5?
Select only one answer.
DiskA, DiskB, DiskC, and DiskD(Correct Answer)
DiskA only
DiskB only
DiskC only
DiskD only
You have a Windows Server Azure virtual machine named VM1.
You need to back up two folders in VM1 by using Azure Backup. The solution should minimize administrative effort.
What should you deploy first?
Select only one answer.
Azure Backup Server
Recovery Services agent (Correct Answer)
Microsoft Monitoring agent
Windows Server Backup role
You have an Azure subscription that contains the following virtual machines:
VM1, a virtual machine that runs Windows Server 2019
VM2, a virtual machine that runs Red Hat Enterprise Linux
VM3, a virtual machine that is configure with Azure Disk encryption and runs Windows Server 2022
You use Azure Backup to back up the three virtual machines.
Which virtual machine or virtual machines can use file-level restore?
Select only one answer.
VM1 and VM2 only
VM1 and VM3 only
VM1 only
VM1, VM2 and VM3 (Correct Answer)
You have the following Azure resources:
a virtual machine named VM1
a Recovery Services vault named Vault1
On January 1, you configure backups for VM1 by using the following backup policy:
Frequency: Daily
Time: 23:00
Timezone: (UTC) Coordinated Universal Time
Retain instant recovery snapshot(s) for: 2 Day(s)
Retention of daily backup point: 7 Day(s)
Azure Backup Resource Group: Backup1RG
How many restore point collections recovery points will be stored in Backup1RG on January 10?
Select only one answer.
2
7(Maybe correct)
9
10
Your company has an Azure subscription.
You plan to create a virtual machine scale set named VMSS1 that has the following settings:
Resource group name: RG1
Region: West US
Orchestration mode: Uniform
Security type: Standard
OS disk type: SSD standard
Key management: Platform-managed key
You need to add custom virtual machines to VMSS1.
What setting should you modify?
Select only one answer.
Key management
Orchestration mode(Correct Answer)
OS disk type
Security type
You have an Azure subscription.
You plan to run a data warehouse in an Azure virtual machine named VM1.
You need to ensure that VM1 is optimized for running a data warehouse.
Which VM type should you use for VM1?
Select only one answer.
Compute optimized (F-Series)
General purpose (D-Series)
High performance computing (H-Series)
Memory optimized (M-Series) (Correct Answer)
Storage optimized (Ls-Series)
You have an Azure subscription.
You plan to use fault domains.
From which Azure resource can you configure the fault domains?
Select only one answer.
Availability set (Maybe Correct Answer)
Virtual machine
Virtual machine scale set(Maybe Correct Answer)
Virtual network
You have an Azure subscription that contains a user named User1, a resource group named RG1, and a virtual machine named VM1.
You enable a system-assigned managed identity for VM1.
To which identities can you assign the Reports Reader role?Select only one answer.
User1 and RG1 only
User1 and VM1 only
User1 only
User1, RG1, and VM1(Correct Answer)
You have an Azure subscription and an availability set named AS1 that has 5 update domains.
You deploy 27 virtual machines to AS1.
After a planned update, what is the minimum number of virtual machines that are available?
Select only one answer.
14
20
21
22(Correct Answer)
26
You have an Azure subscription that contains a user named User1, a resource group named RG1, and a virtual machine named VM1. You enable a system-assigned managed identity for VM1. To which identities can you assign the Reports reader role? Select only one answer.
User1 only User1 and RG1
only User1 and VM1 only
User1, RG1, and VM1 (Correct Answer)
You have a Microsoft Entra tenant named contoso.com that contains a user named Ben Smith.
You configure a Password protection for contoso.com that includes the following Custom banned passwords settings:
Enforce custom list: Yes
Custom banned password list: Contoso
Which password can be used by Ben Smith?
Select only one answer.
C0nt0s0123(Correct Answer)
CONTOSO123
Conto123so
FgRs01
You have a Microsoft Entra tenant that contains the following users:
- User1 has a Department set to Sales and a Country set to USA
- User2 has a Department set to Marketing and a Country set to USA
- User3 has a Department set to Sales and a Country set to DE
- User4 has a Department set to Marketing and a Country set to DE
You create a group named Group1 that has the following dynamic membership rule.
user.country -eq "USA" -and user.department -eq "Marketing" -or user.department -eq "Sales"
Which users are members of Group1?Select only one answer.
User1 and User2 only(Correct Answer)
User1 and User3 only
User2 and User3 only
User1, User2, and User3 only
User1, User2, User3 and User4
You have a Microsoft Entra tenant.
You create a user named Admin1.
You need to ensure that Admin1 can perform following tasks:
Assign licenses to Microsoft Entra groups
Reset passwords of Microsoft Entra users
What Microsoft Entra role should you add to Admin1?
Select only one answer.
Billing Administrator
Helpdesk Administrator
License Administrator
User Administrator(Correct Answer)