Advance Your Career by Using Online AZ-104 Dumps

1. You have an Azure subscription.

Users access the resources in the subscription from either home or from customer sites. From home, users must establish a point-to-site VPN to access the Azure resources. The users on the customer sites access the Azure resources by using site-to-site VPNs.

You have a line-of-business app named App1 that runs on several Azure virtual machine. The virtual machines run Windows Server 2016.

You need to ensure that the connections to App1 are spread across all the virtual machines.

What are two possible Azure services that you can use? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

2. You are configuring Azure AD authentication for an Azure Storage account named storage1.

You need to ensure that the members of a group named Group1 can upload files by using the Azure portal. The solution must use the principle of least privilege.

Which two roles should you assign to Group1? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

3. You have an Azure subscription that contains the resources shown in the following table.





You need to create a network interface named NIC1.

In which location can you create NIC1?

4. HOTSPOT

You have a Microsoft Entra user named User1 and a read-access geo-redundant storage (RA-GRS) account named contoso2023.

You need to meet the following requirements:

• User1 must be able to write blob data to contoso2023.

• The contoso2023 account must fail over to its secondary endpoint.

Which two settings should you configure? To answer, select the appropriate settings in the answer area. NOTE Each correct selection is worth one point.

5. HOTSPOT

You have an Azure subscription that contains a storage account named contoso?02 3. The Contoso 2023 storage account contains the resources shown in the following table.

The Contoso 2023 storage account is configured as shown in the following exhibit.





You have a Microsoft Entra tenant that contains the users shown in the following table.





For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

6. HOTSPOT

You have an Azure virtual machine named VM1 and a Recovery Services vault named Vault1.

You create a backup Policy1 as shown in the exhibit. (Click the Exhibit tab.)





You configure the backup of VM1 to use Policy1 on Thursday, January 1.

You need to identify the number of available recovery points for VM1.

How many recovery points are available on January 8 and on January 15? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

7. DRAG DROP

You have an Azure Linux virtual machine that is protected by Azure Backup.

One week ago, two files were deleted from the virtual machine.

You need to reses clients connect n on-premises computer as quickly as possible.

Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

8. You plan to deploy three Azure virtual machines named VM1, VM2, and VM3. The virtual machines will host a web app named App1.

You need to ensure that at least two virtual machines are available if a single Azure datacenter becomes unavailable.

What should you deploy?

9. You have an Azure subscription that contains a storage account named storageacct1234 and two users named User1 and User2.

You assign User1 the roles shown in the following exhibit.





Which two actions can User1 perform? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

10. HOTSPOT

You have the following custom role-based access control (RBAC) role.





For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

11. You create an Azure Storage account named Contoso storage.

You plan to create a file share named data.

Users need to map a drive to the data file share from home computers that run Windows 10.

Which outbound port should be open between the home computers and the data file share?

12. HOTSPOT

You have an Azure subscription that contains the users shown in the following table.





The groups are configured as shown in the following table.





For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

13. HOTSPOT

You have an Azure Storage account named storage1 that contains two containers named container 1 and container2. Blob versioning is enabled for both containers.

You periodically take blob snapshots of critical blobs.

You create the following lifecycle management policy:





For each of the following statements, select Yes If the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

14. You have the Azure virtual machines shown in the following table.





VNET1 is linked to a private DNS zone and named contoso.com that contains the records shown in the following table.





You need to ping VM2 from VM1.

Which DNS names can you use to ping VM2.

15. HOTSPOT

You have a virtual network named VNet1 that has the configuration shown in the following exhibit.





Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

16. HOTSPOT

You have an Azure subscription named Subscription1. Subscription1 contains a virtual machine named VM1.

You install and configure a web server and a DNS server on VM1.

VM1 has the effective network security rules shown in the following exhibit.





Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

17. HOTSPOT

You are evaluating the name resolution for the virtual machines after the planned implementation of the Azure networking infrastructure.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

18. You have an Azure subscription that contains a resource group named RG26.

RG26 is sot to the West Europe location and is used to create temporary resources for a project.

RG26 contains the resources shown in the following table.





SQLD01 is backed up to RGV1.

When the project is complete, you attempt to delete RG26 from the Azure portal. The deletion fails.

You need to delete RG26.

What should you do first?

19. HOTSPOT

You plan to deploy an Azure container instance by using the following Azure Resource Manager template.





Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the template.

20. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You need to ensure that an Azure Active Directory (Azure AD) user named Admin1 is assigned the required role to enable Traffic Analytics for an Azure subscription.

Solution: You assign the Network Contributor role at the subscription level to Admin1.

Does this meet the goal?

21. HOTSPOT

You have a pay-as-you-go Azure subscription that contains the virtual machines shown in the following table.





You create the budget shown in the following exhibit.





The AG1 action group contains a user named [email protected] only.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

22. You have an Azure App Services web app named App1.

You plan to deploy App1 by using Web Deploy.

You need to ensure that the developers of App1 can use their Azure Active Directory (Azure AD) credentials to deploy content to App1. The solution must use the principle of least privilege.

What should you do?

23. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure virtual machine named VM1. VM1 was deployed by using a custom Azure

Resource Manager template named ARM1.json.

You receive a notification that VM1 will be affected by maintenance.

You need to move VM1 to a different host immediately.

Solution: From the Update management blade, you click Enable.

Does this meet the goal?

24. HOTSPOT

You have Azure virtual machines that run Windows Server 2019 and are configured as shown in the following table.





You create a private Azure DNS zone named adatum.com. You configure the adatum.com zone to allow auto registration from VNET1.

Which A records will be added to the adatum.com zone for each virtual machine? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

25. You have an Azure subscription.

You plan to deploy the Azure container instances shown in the following table.





Which instances can you deploy to a container group?

26. HOTSPOT

You plan to use Azure Network Watcher to perform the following tasks:

Task1: Identify a security rule that prevents a network packet from reaching an Azure virtual machine

Task2: Validate outbound connectivity from an Azure virtual machine to an external host

Which feature should you use for each task? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

27. You have an Azure subscription that contains a virtual network named VNET1.

VNET1 contains the subnets shown in the following table.





Each virtual machine uses a static IP address.

You need to create network security groups (NSGs) to meet following requirements:

- Allow web requests from the internet to VM3, VM4, VM5, and VM6.

- Allow all connections between VM1 and VM2.

- Allow Remote Desktop connections to VM 1.

- Prevent all other network traffic to VNET 1.

What is the minimum number of NSGs you should create?

28. Topic 5, mix Ques



HOTSPOT

You have an Azure virtual machine named VM1 that connects to a virtual network named VNet1.

VM1 has the following configurations:

✑ Subnet: 10.0.0.0/24

✑ Availability set: AVSet

✑ Network security group (NSG): None

✑ Private IP address: 10.0.0.4 (dynamic)

✑ Public IP address: 40.90.219.6 (dynamic)

You deploy a standard, Internet-facing load balancer named slb 1.

You need to configure slb1 to allow connectivity to VM 1.

Which changes should you apply to VM1 as you configure slb1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

29. You have an Azure subscription named Subscription1.

Subscription1 contains the resource groups in the following table.





RG1 has a web app named WebApp1. WebApp1 is located in West Europe.

You move WebApp1 to RG2.

What is the effect of the move?

30. HOTSPOT

You have an Azure subscription that contains the resources shown in the following table.





NSG1 is configured as shown in the following exhibit.





For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

31. HOTSPOT

You have an Azure subscription

You plan to deploy a new storage account

You need to configure encryption for the account.

The solution must meet the following requirements

• Use a customer-managed key stored in an key vault

• Use the maximum supported bit length.

Which type of key and which bit length should you use?

32. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure container registry named Registry1 that contains an image named image1. You receive an error message when you attempt to deploy a container instance by using image1. You need to be able to deploy a container instance by using image1.

Solution: You select Use dedicated data endpoint for Registry1.

Does this meet the goal?

33. HOTSPOT

You have the App Service plans shown in the following table.





You plan to create the Azure web apps shown in the following table.





You need to identify which App Service plans can be used for the web apps.

What should you identify? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

34. HOTSPOT

You have peering configured as shown in the following exhibit.





Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

35. DRAG DROP

You have an Azure subscription named Sub1 that contains two users named User1 and User2.

You need to assign role-based access control (RBAC) roles to User1 and User2.

The users must be able to perform the following tasks in Sub1:

• User1 must view the data in any storage account.

• User2 must assign users the Contributor role for storage accounts.

The solution must use the principle of least privilege.

Which RBAC role should you assign to each user? To answer, drag the appropriate roles to the correct users. Each role may be used once, more than once, or not at all.

36. DRAG DROP

You have an Azure subscription that contains a virtual network named VNet1 VNet1 contains virtual machines that have Remote Desktop enabled

Several users plan to work remotely and connect to the virtual machines from a home office.

You need to configure connectivity to the virtual machines to support a Point-to-Site (P2S) VPN connection for each user.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

37. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have a Microsoft Entra tenant named contoso.com.

You have a CSV file that contains the names and email addresses of 500 external users.

You need to create a guest user account in contoso.com for each of the 500 external users.

Solution; From Microsoft Entra ID in the Azure portal, you use the Bulk invite users’ operation.

Does this meet the goal?

38. HOTSPOT

You have an Azure subscription that contains an Azure Storage account named storageaccount1.

You export storageaccount1 as an Azure Resource Manager template.

The template contains the following sections.





For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

39. HOTSPOT

You have an Azure subscription that contains the virtual networks shown in the following table.





You have the virtual machines shown in the following table.





You have the virtual network interfaces shown in the following table.





Server1 is a DNS server that contains the resources shown in the following table.





You have an Azure private DNS zone named contoso.com that has a virtual network link to VNET2 and the records shown in the following table.





For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

40. HOTSPOT

You have an Azure subscription.

You create the following file named Deploy.json.





You connect to the subscription and run the following commands.





For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

41. You have an Azure web app named App1.

App1 has the deployment slots shown in the following table:





In webapp1-test, you test several changes to App1.

You back up App1.

You swap webapp1-test for webapp1-prod and discover that App1 is experiencing performance issues.

You need to revert to the previous version of App1 as quickly as possible.

What should you do?

42. HOTSPOT

You have an Azure Active Directory (Azure AD) tenant named contoso.com.

You have two external partner organizations named fabrilcam.com and litwareinc.com.

FabtAam.com is configured as a connected organization.

You create an access package as shown in the Access package exhibit. (Click the Access package lab.)





You configure the external user lifecycle settings as shown in the Lifecycle exhibit. (Click the lifecycle tab)





For each of the following statements, select Yes if the statement is true Otherwise, select No Note: Each correct selection is worth one point.

43. You need to ensure that VM1 can communicate with VM4. The solution must minimize administrative effort.

What should you do?

44. You have two subscriptions named Subscription1 and Subscription2. Each subscription is associated to a different Azure AD tenant.

Subscription1 contains a virtual network named VNet1. VNet1 contains an Azure virtual machine named VM1 and has an IP address space of 10.0.0.0/16.

Subscription2 contains a virtual network named VNet2. VNet2 contains an Azure virtual machine named VM2 and has an IP address space of 10.10.0.0/24.

You need to connect VNet1 to VNet2.

What should you do first?

45. HOTSPOT

You have an Azure subscription that contains the virtual networks shown in the following table.





The subscription contains the subnets shown in the following table.





The subscription contains the storage accounts shown in the following table.





You create a service endpoint policy named policy1 in the South Central US Azure region to allow connectivity to all the storage accounts in the subscription.

Fow each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

46. You have an Azure subscription That contains a Recovery Services vault named Vault1.

You need to enable multi-user authorization (MAU) for Vaultl.

Which resource should you create first?

47. HOTSPOT

You have an Azure subscription that contains a user named User1 and a storage account named storage 1.

The storage1 account contains the resources shown in the following table.





User1 is assigned the following roles for storage 1:

• Storage Blob Data Reader

• Storage Table Data Contributor

• Storage File Data SMB Share Contributor

For storage1, you create a shared access signature (SAS) named SAS1 that has the settings shown in the following exhibit. (Click the Exhibit tab.)





To which resources can User1 write by using SAS1 and key1? To answer, select the appropriate options in the answer area.

48. HOTSPOT

You have an Azure subscription named Subscription1 that contains the following resource group:

- Name: RG1

- Region: West US

- Tag: "tag1": "value1"

You assign an Azure policy named Policy1 to Subscription1 by using the following configurations:

- Exclusions: None

- Policy definition: Append a tag and its value to resources

- Assignment name: Policy1

- Parameters:

- Tag name: Tag2

- Tag value: Value2

After Policy1 is assigned, you create a storage account that has the following configuration:

- Name: storage1

- Location: West US

- Resource group: RG1

- Tags: "tag3": "value3"

You need to identify which tags are assigned to each resource.

What should you identify? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

49. DRAG DROP

You have an Azure subscription that contains the resources shown in the following table.





You need to load balance HTTPS connections to vm1 and vm2 by using Ib1.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

50. You need to ensure that you can grant Group4 Azure RBAC read-only permissions to all the A2ure file shares.

What should you do?

51. HOTSPOT

You need to configure Azure Backup to back up the file shares and virtual machines.

What is the minimum number of Recovery Services vaults and backup policies you should create? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

52. You have an Azure subscription that contains a storage account named storage 1.

You need to allow access to storage1 from selected networks and your home office. The solution must minimize administrative effort.

What should you do first for storage1?

53. HOTSPOT

You have an Azure subscription named Subscription1.

In Subscription1, you create an Azure file share named share1.

You create a shared access signature (SAS) named SAS1 as shown in the following exhibit.





To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

54. HOTSPOT

You have an Azure subscription.

The subscription contains a storage account named storage1 that has the lifecycle management rules shown in the following table.





On June 1, you store two blobs in storage1 as shown in the following table.





For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

55. You have an Azure App Service app named App1 that contains two running instances.

You have an auto scale rule configured as shown in the following exhibit.





For the Instance limits scale condition setting, you set Maximum to 5.

During a 30-minute period, App1 uses 80 percent of the available memory.

What is the maximum number of instances for App1 during the 30-minute period?

56. DRAG DROP

You have an Azure Active Directory (Azure AD) tenant that has the initial domain name.

You have a domain name of contoso.com registered at a third-party registrar.

You need to ensure that you can create Azure AD users that have names containing a suffix of @contoso.com.

Which three actions should you perform in sequence? To answer, move the appropriate cmdlets from the list of cmdlets to the answer area and arrange them in the correct order.

57. You have an Azure subscription. The subscription contains virtual machines that connect to a virtual network named VNet1.

You plan to configure Azure Monitor for VM Insights.

You need to ensure that all the virtual machines only communicate with Azure Monitor through VNet1.

What should you create first?

58. You have five Azure virtual machines that run Windows Server 2016. The virtual machines are configured as web servers.

You have an Azure load balancer named LB1 that provides load balancing services for the virtual machines.

You need to ensure that visitors are serviced by the same web server for each request.

What should you configure?

59. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these

questions will not appear in the review screen.

You have an Azure Active Directory (Azure AD) tenant named contoso.com.

You have a CSV file that contains the names and email addresses of 500 external users.

You need to create a guest user account in contoso.com for each of the 500 external users.

Solution: From Azure AD in the Azure portal, you use the Bulk create user operation.

Does this meet the goal?

60. HOTSPOT

You have two Azure App Service apps named App1 and App2. Each app has a production deployment slot and a test deployment slot.

The Backup Configuration settings for the production slots are shown in the following table.





For each of the following statements, select Yes if the statement is true. Otherwise, select No.

61. You have an Anne container registry named Registry1 that contains an image named image1.

You receive an error message when you attempt to deploy a container instance by using image1.

You need to be able to deploy a container instance by using image1.

Solution: You assign the AcrPull role to ACR-Tasks-Network for Registry1.

Does this meet the goal?

62. HOTSPOT

You have a Microsoft Entra tenant named contoso.onmicrosoft.com that contains the users shown in the following table.





You enable password reset for contoso.onmicrosoftxom as shown in the Password Reset exhibit. (Click the Password Reset tab.)





You configure the authentication methods for password reset as shown in the Authentication Methods exhibit. (Click the Authentication Methods tab.)





For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

63. Yon have an Azure Storage account named storage1 that contains a blob container named comainer1. You need to prevent new content added to contalner1 from being modified for one year.

What should you configure?

64. HOTSPOT

Your network contains an on-premises Active Directory Domain Services (AD DS) domain named contoso.com.

The domain contains the servers shown in the following table.





You plan to migrate contoso.com to Azure.

You create an Azure virtual network named VNET1 that has the following settings:

• Address space: 10.0.0.0/16

• Subnet:

o Name: Subnet1

o IPv4: 10.0.1.0/24

You need to move DC1 to VNET1. The solution must ensure that the member servers in contoso.com can resolve AD DS DNS names.

How should you configure DC1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

65. Which blade should you instruct the finance department auditors to use?

66. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure virtual machine named VM1. VM1 was deployed by using a custom Azure Resource Manager template named ARM1.json.

You receive a notification that VM1 will be affected by maintenance.

You need to move VM1 to a different host immediately.

Solution: From the Redeploy blade, you click Redeploy.

Does this meet the goal?

67. Your on-premises network contains a VPN gateway.

You have an Azure subscription that contains the resources shown in the following table.





You need to ensure that all the traffic from VM1 to storage! travels across the Microsoft backbone network.

What should you configure?

68. You have an Azure web app named webapp1.

You have a virtual network named VNET1 and an Azure virtual machine named VM1 that hosts a MySQL database. VM1 connects to VNET1.

You need to ensure that webapp1 can access the data hosted on VM1.

What should you do?

69. You need to create an Azure Storage account named storage1.

The solution must meet the following requirements:

• Support Azure Data Lake Storage.

• Minimize costs for infrequently accessed data.

• Automatically replicate data to a secondary Azure region.

Which three options should you configure for storage1? Each correct answer presents part of the solution. NOTE: Each correct answer is worth one point.

70. You have a Microsoft 365 tenant and an Azure Active Directory (Azure AD) tenant named contoso.com.

You plan to grant three users named User1, User2, and User3 access to a temporary Microsoft SharePoint document library named Library1.

You need to create groups for the users. The solution must ensure that the groups are deleted automatically after 180 days.

Which two groups should you create? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

71. You have an Azure subscription that contains the resources shown in the following table.





You need to perform the tasks shown in the following table.





Which tasks can you perform by using Azure Storage Explorer?

72. HOTSPOT

You have an Azure subscription that contains two storage accounts named contoso101 and contoso102.

The subscription contains the virtual machines shown in the following table.

VNet1 has service endpoints configured as shown in the Service endpoints exhibit. (Click the Service endpoints tab.)





The Microsoft. Storage service endpoint has the service endpoint policy shown in the Microsoft. Storage exhibit. (Click the Microsoft. Storage tab.)





For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

73. HOTSPOT

You have an Azure subscription that contains a storage account named storage1. The subscription is linked to an Azure Active Directory (Azure AD) tenant named contoso.com that syncs to an on-premises Active Directory domain.

The domain contains the security principals shown in the following table.





In Azure AD, you create a user named User2.

The storage1 account contains a file share named share1 and has the following configurations.





For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

74. You plan to deploy several Azure virtual machines that will run Windows Server 2022 in a virtual machine scale set by using an Azure Resource Manager template.

You need to ensure that NGINX is available on all the virtual machines after they are deployed.

What should you use?

75. HOTSPOT

You have an Azure subscription that contains the resource groups shown in the following table.





You create the following Azure Resource Manager (ARM) template named deploy json.





You deploy the template by running the following cmdlet.

Item-AzSubscriptionDeployment -location -Template file deploy-json

For each or the following statements, select Yes il the statement is bue. Otherwise, select No. NOTE: Each correct selection is worth one point.

76. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure subscription that contains the virtual machines shown in the following table.

You deploy a load balancer that has the following configurations:

• Name: LB1

• Type: Internal

• SKU: Standard

• Virtual network: VNET1

You need to ensure that you can add VM1 and VM2 to the backend pool of LB1.

Solution: You create two Standard public IP addresses and associate a Standard SKU public IP address to the network interface of each virtual machine.

Does this meet the goal?

77. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an app named App1 that is installed on two Azure virtual machines named VM1 and VM2.

Connections to App1 are managed by using an Azure Load Balancer.

The effective network security configurations for VM2 are shown in the following exhibit.





You discover that connections to App1 from 131.107.100.50 over TCP port 443 fail. You verify that the Load Balancer rules are configured correctly.

You need to ensure that connections to App1 can be established successfully from 131.107.100.50 over TCP port 443.

Solution: You create an inbound security rule that denies all traffic from the 131.107.100.50 source and has a cost of 64999.

Does this meet the goal?

78. HOTSPOT

You have an Azure subscription that contains an Azure Availability Set named WEBPROD-AS-USE2 as shown in the following exhibit.





You add 14 virtual machines to WEBPROD-AS-USE2.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

79. You have an Azure subscription that contains the resources shown in the following table.





LB1 is configured as shown in the following table.





You plan to create new inbound NAT rules that meet the following requirements:

Provide Remote Desktop access to VM2 from the internet by using port 3389.

80. You have an Azure Subscription that contains the virtual networks Shown in the following table.





All the virtual networks are peered. Each virtual network contains nine virtual machines.

You need to configure secure RDP corrections to the virtual machines by using Azure Boston.

Whit is the minimum number of Bastion nests required?

81. You have an Azure policy as shown in the following exhibit.





What is the effect of the policy?

82. You are planning the move of App1 to Azure.

You create a network security group (NSG).

You need to recommend a solution to provide users with access to App1.

What should you recommend?

83. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these

questions will not appear in the review screen.

You manage a virtual network named VNet1 that is hosted in the West US Azure region.

VNet1 hosts two virtual machines named VM1 and VM2 that run Windows Server.

You need to inspect all the network traffic from VM1 to VM2 for a period of three hours.

Solution: From Azure Monitor, you create a metric on Network in and Network Out.

Does this meet the goal?

84. You have an Azure subscription that contains two Log Analytics workspaces named Workspace 1 and Workspace? and 100 virtual machines that run Windows Server.

You need to collect performance data and events from the virtual machines.

The solution must meet the following requirements:

• Logs must be sent to Workspace! and Workspace?

• All Windows events must be captured

• All security events must be captured.

What should you install and configure on each virtual machine?

85. HOTSPOT

You manage two Azure subscriptions named Subscription 1 and Subscription2.

Subscription! has following virtual networks:





The virtual networks contain the following subnets:





Subscnption2 contains the following virtual network:

- Name: VNETA

• Address space: 10.10.128.0/17

• Region: Canada Central

VNETA contains the following subnets:





For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

86. You have an Azure subscription that contains the storage accounts shown in the following table.





You need to identify which storage account can be converted to zone-redundant storage (ZRS) replication by requesting a live migration from Azure support.

What should you identify?

87. You plan to move a distributed on-premises app named App1 to an Azure subscription.

After the planned move, App1 will be hosted on several Azure virtual machines.

You need to ensure that App1 always runs on at least eight virtual machines during planned Azure maintenance.

What should you create?

88. HOTSPOT

You have an Azure subscription that contains the vaults shown in the following table.





You deploy the virtual machines shown in the following table.





Each of the following statements, select Yes if the statement is true. Otherwise, select No NOTE: Each cored selection it worth one point.

89. You have an Azure subscription that contains the virtual networks shown in the following table. You need to ensure that all the traffic between VNet1 and VNet2 traverses the Microsoft backbone network.

What should you configure?

90. HOTSPOT

You have an Azure subscription.

You need to deploy a virtual machine by using an Azure Resource Manager (ARM) template.

How should you complete the template? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

91. You create an Azure VM named VM1 that runs Windows Server 2019.

VM1 is configured as shown in the exhibit (Click the Exhibit tab.)





You need to enable Desired State Configuration for VM1.

What should you do first?

92. Your on-premises network contains an SMB share named Share1.

You have an Azure subscription that contains the following resources:

A web app named webapp1

A virtual network named VNET1

You need to ensure that webapp1 can connect to Share1.

What should you deploy?

93. You have the Azure virtual networks shown in the following table.





To which virtual networks can you establish a peering connection from VNet1?

94. HOTSPOT

You need to implement Role1.

Which command should you run before you create Role1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

95. You have an Azure subscription that contains the resources shown in the following table.





You need to configure a proximity placement group for VMSS1.

Which proximity placement groups should you use?

96. HOTSPOT

You have an Azure subscription that contains the Azure virtual machines shown in the following table.





You configure the network interfaces of the virtual machines to use the settings shown in the following table





From the settings of VNET1, you configure the DNS servers shown in the following exhibit.





The virtual machines can successfully connect to the DNS server that has an IP address of 192.168.10.15 and the DNS server that has an IP address of 193.77.134.10.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

97. 1. Topic 1, Litware, inc.



Overview

Litware, Ltd. is a consulting company that has a main office in Montreal and two branch offices in Seattle and New York.

The Montreal office has 2,000 employees. The Seattle office has 1,000 employees. The New York office has 200 employees.

All the resources used by Litware are hosted on-premises.

Litware creates a new Azure subscription. The Azure Active Directory (Azure AD) tenant uses a domain named Litware.onmicrosoft.com. The tenant uses the P1 pricing tier.



Existing Environment

The network contains an Active Directory forest named Litware.com. All domain controllers are configured as DNS servers and host the Litware.com DNS zone.

Litware has finance, human resources, sales, research, and information technology departments. Each department has an organizational unit (OU) that contains all the accounts of that respective department. All the user accounts have the department attribute set to their respective department. New users are added frequently.

Litware.com contains a user named User1.

All the offices connect by using private links.

Litware has data centers in the Montreal and Seattle offices. Each data center has a firewall that can be configured as a VPN device.

All infrastructure servers are virtualized.



The virtualization environment contains the servers in the following table.





Litware uses two web applications named App1 and App2. Each instance on each web application requires 1GB of memory.

The Azure subscription contains the resources in the following table.





The network security team implements several network security groups (NSGs).



Planned Changes

Litware plans to implement the following changes:

• Deploy Azure ExpressRoute to the Montreal office.

• Migrate the virtual machines hosted on Server1 and Server2 to Azure.

• Synchronize on-premises Active Directory to Azure Active Directory (Azure AD).

• Migrate App1 and App2 to two Azure web apps named webApp1 and WebApp2.



Technical requirements

Litware must meet the following technical requirements:

• Ensure that WebApp1 can adjust the number of instances automatically based on the load and can scale up to five instance*.

• Ensure that VM3 can establish outbound connections over TCP port 8080 to the applications servers in the Montreal office.

• Ensure that routing information is exchanged automatically between Azure and the routers in the Montreal office.

• Enable Azure Multi-Factor Authentication (MFA) for the users in the finance department only.

• Ensure that webapp2.azurewebsites.net can be accessed by using the name app2.Litware.com.

• Connect the New Your office to VNet1 over the Internet by using an encrypted connection.

• Create a workflow to send an email message when the settings of VM4 are modified.

• Create a custom Azure role named Role1 that is based on the Reader role.

• Minimize costs whenever possible.



You discover that VM3 does NOT meet the technical requirements. You need to verify whether the issue relates to the NSGs.

What should you use?

98. You have an Azure subscription that contains a storage account. The account stores website data.

You need to ensure that inbound user traffic uses the Microsoft point-of-presence (POP) closest to the user's location.

What should you configure?

99. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have a Microsoft Entra tenant named Adatum.com and an Azure Subscription named Subscription1. Adatum.com contains a group named Developers. Subscription1 contains a resource group named Dev.

You need to provide the Developers group with the ability to create Azure logic apps in the Dev resource group.

Solution: On Dev, you assign the Logic App Contributor role to the Developers group.

Does this meet the goal?

100. You have an Azure subscription that contains a storage account named storage 1 in the North Europe A2ure region.

You need to ensure that when blob data is added to storage1, a secondary copy is created in the East US region. The solution must minimize administrative effort.

What should you configure?

101. HOTSPOT

You have an Azure subscription that contains a virtual network named VNet1.

VNet1 uses an IP address space of 10.0.0.0/16 and contains the subnets in the following table.





Subnet1 contains a virtual appliance named VM1 that operates as a router.

You create a routing table named RT1.

You need to route all inbound traffic to VNet1 through VM1.

How should you configure RT1? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

102. You have an Azure subscription that contains the resources in the following table.





VM1 and VM2 are deployed from the same template and host line-of-business applications accessed by using Remote Desktop.

You configure the network security group (NSG) shown in the exhibit. (Click the Exhibit button.)





You need to prevent users of VM1 and VM2 from accessing websites on the Internet.

What should you do?

103. You have an Azure subscription.

The subscription contains a storage account named storage1 that has the lifecycle management rules shown in the following table.





On June 1, you store a blob named File1 in the Hot access tier of storage1.

What is the state of File1 on June 7?

104. You have an Azure subscription that contains a virtual network named VNet1. VNet1 contains four subnets named Gateway, Perimeter. NVA and Production.

The NVA subnet contains two network virtual appliances (NVAs) that will perform network traffic inspection between the Perimeter subnet and the Production subnet.

You need to implement an Azure load balancer for the NVAs.

The solution must meet the following requirements:

• The NVAs must run in an active-active configuration that uses automatic failover.

• The toad balancer must load balance traffic to two services on the Production subnet.

The services have different IP addresses.

Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

105. HOTSPOT

You have the App Service plans shown in the following table.





You plan to create the Azure web apps shown in the following table.





You need to identify which App Service plans can be used for the web apps.

What should you identify? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

106. You plan to create an Azure virtual machine named VM1 that will be configured as shown in the following exhibit.

The planned disk configurations for VM1 are shown in the following exhibit.





You need to ensure that VM1 can be created in an Availability Zone.





Which two settings should you modify? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

107. You download an Azure Resource Manager template based on an existing virtual machine. The template will be used to deploy 100 virtual machines.

You need to modify the template to reference an administrative password. You must prevent the password from being stored in plain text.

What should you create to store the password?

108. You have an Azure subscription that has the public IP addresses shown in the following table.





You plan to deploy an Azure Bastion Basic SKU host named Bastion1.

Which IP addresses can you use for Bastion1?

109. Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, those questions will not appear in the review screen.

You have a Microsoft Entra tenant named contoso.com.

You have a CSV file that contains the names and email addresses of 500 external users.

You need to create a guest user account in contoso.com for each of the 500 external users.

Solution: From Microsoft Entra ID in the Azure portal, you use the Bulk create user operation.

Does this meet the goal?