leads4pass az-104 dumps contain 763 new exam questions and answers, which are the best exam practice materials for the 2024 “Microsoft Azure Administrator” exam!
New AZ-104 dumps come with two practice formats, PDF and VCE! It is designed to make it easier for candidates to choose the appropriate method! As well as saving you more!
The current AZ-104 “Microsoft Azure Administrator” exam has been updated! Therefore, leads4pass az-104 dumps, which have been verified by a professional team and verified, can 100% guarantee that you will pass the 2024 exam!
Download leads4pass az-104 dumps: https://www.leads4pass.com/az-104.html, practice the test carefully to ensure you can easily complete the target plan.
Tips: Leads4Pass is a collection of updated and upgraded certification exam practice plans from Lead4Pass!
Table of contents:
New leads4pass az-104 dumps exam questions and answers
| From | Number of exam questions | Type |
| Leads4Pass | 15/763 | Free Practice Test |
Question 1:
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure subscription named Subscription1 that contains the resources shown in the following table.
VM1 connects to a virtual network named VNET2 by using a network interface named NIC1.
You need to create a new network interface named NIC2 for VM1.
Solution: You create NIC2 in RG1 and West US.
Does this meet the goal?
A. Yes
B. No
Correct Answer: A
The virtual machine you attach a network interface to and the virtual network you connect it to must exist in the same location, here in West US, also referred to as a region.
References:
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-network-interface
Question 2:
Your company has an Azure subscription named Subscription1. The company also has two on-premises servers named Server1 and Server2 that run Windows Server 2016. Server1 is configured as a DNS server that has a primary DNS zone named adatum.com.
Adatum.com contains 1,000 DNS records.
You manage Server1 and Subscription1 from Server2. Server2 has the following tools installed:
1.
The DNS Manager console
2.
Azure PowerShell
3.
Azure CLI 2.0
You need to move the adatum.com zone to Subscription1.
The solution must minimize administrative effort.
What should you use?
A. Azure PowerShell
B. Azure CLI
C. the Azure portal
D. the DNS Manager console
Correct Answer: B
Azure DNS supports importing and exporting zone files by using the Azure command-line interface (CLI). Zone file import is not currently supported via Azure PowerShell or the Azure portal.
References: https://docs.microsoft.com/en-us/azure/dns/dns-import-export
Question 3:
You have an Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com that contains 100 user accounts.
You purchase 10 Azure AD Premium P2 licenses for the tenant.
You need to ensure that 10 users can use all the Azure AD Premium features.
What should you do?
A. From the Groups blade of each user, invite the users to a group.
B. From the Licenses blade of Azure AD, assign a license.
C. From the Directory role blade of each user, modify the directory role.
D. From the Azure AD domain, add an enterprise application.
Correct Answer: B
Many Azure Active Directory (Azure AD) services require you to license each of your users or groups (and associated members) for that service. Only users with active licenses will be able to access and use the licensed Azure AD services for which that\’s true. Licenses are applied per tenant and do not transfer to other tenants.
Not all Microsoft services are available in all locations. Before a license can be assigned to a group, you must specify the Usage location for all members. You can set this value in the Azure Active Directory > Users > Profile > Settings area in
Azure AD. Any user whose usage location is not specified inherits the location of the Azure AD organization.
You can add the licensing rights to users or an entire group. Check the reference link for the steps.
References:
https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/license-users-groups
Question 4:
DRAG DROP
You have an on-premises network that you plan to connect to Azure by using a site-to-site VPN.
In Azure, you have an Azure virtual network named VNet1 that uses an address space of 10.0.0.0/16 VNet1 contains a subnet named Subnet1 that uses an address space of 10.0.0.0/24.
You need to create a site-to-site VPN to Azure.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
NOTE: More than one order of answer choice is correct. You will receive credit for any of the correct orders you select.
Select and Place:
Correct Answer:
A Site-to-Site VPN gateway connection is used to connect your on-premises network to an Azure virtual network over an IPsec/IKE (IKEv1 or IKEv2) VPN tunnel. This type of connection requires a VPN device located on-premises that has an externally facing public IP address assigned to it. For more information about VPN gateways, see About VPN gateway.
1.
Create a virtual network
You can create a VNet with the Resource Manager deployment model and the Azure portal
2.
Create the gateway subnet :
The virtual network gateway uses a specific subnet called the gateway subnet. The gateway subnet is part of the virtual network IP address range that you specify when configuring your virtual network. It contains the IP addresses that the virtual network gateway resources and services use.
3.
Create the VPN gateway :
You create the virtual network gateway for your VNet. Creating a gateway can often take 45 minutes or more, depending on the selected gateway SKU.
4.
Create the local network gateway:
The local network gateway typically refers to your on-premises location. You give the site a name by which Azure can refer to it, then specify the IP address of the on-premises VPN device to which you will create a connection.
You also specify the IP address prefixes that will be routed through the VPN gateway to the VPN device. The address prefixes you specify are the prefixes located on your on-premises network. If your on-premises network changes or you need to change the public IP address for the VPN device, you can easily update the values later.
5.
Configure your VPN device:
Site-to-site connections to an on-premises network require a VPN device. In this step, you configure your VPN device. When configuring your VPN device, you need the following:
A shared key. This is the same shared key that you specify when creating your Site-to-Site VPN connection. In our examples, we use a basic shared key. We recommend that you generate a more complex key to use.
The Public IP address of your virtual network gateway. You can view the public IP address by using the Azure portal, PowerShell, or CLI. To find the Public IP address of your VPN gateway using the Azure portal, navigate to the Virtual network gateways, then click the name of your gateway.
6.
Create the VPN connection:
Create the Site-to-Site VPN connection between your virtual network gateway and your on-premises VPN device.
Reference:
Question 5:
HOTSPOT
You are creating an Azure load balancer.
You need to add an IPv6 load balancing rule to the load balancer.
How should you complete the Azure PowerShell script? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Correct Answer:
Powershell command to create a load balancer rule (AzureRm module new version is AZ as given in the below command): $lbrule1v6 = New-AzLoadBalancerRuleConfig -Name “HTTPv6” -FrontendIpConfiguration $FEIPConfigv6 -BackendAddressPool $backendpoolipv6 -Probe $healthProbe -Protocol Tcp -FrontendPort 80 -BackendPort 8080 Powershell command to create the load balancer using the previously created objects: New-AzLoadBalancer -ResourceGroupName NRP-RG -Name \’myNrpIPv6LB\’ -Location \’West US\’ -FrontendIpConfiguration $FEIPConfigv6 -InboundNatRule $inboundNATRule1v6 -BackendAddressPool $backendpoolipv6 -Probe $healthProbe -LoadBalancingRule $lbrule1v6
References: https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-ipv6-internet-ps
Question 6:
Your company has an Azure Active Directory (Azure AD) tenant that is configured for hybrid coexistence with the on-premises Active Directory domain.
You plan to deploy several new virtual machines (VMs) in Azure. The VMs will have the same operating system and custom software requirements.
You configure a reference VM in the on-premise virtual environment. You then generalize the VM to create an image.
You need to upload the image to Azure to ensure that it is available for selection when you create the new Azure VMs.
Which PowerShell cmdlets should you use?
A. Add-AzVM
B. Add-AzVhd
C. Add-AzImage
D. Add-AzImageDataDisk
Correct Answer: B
The Add-AzVhd cmdlet uploads on-premises virtual hard disks, in .vhd file format, to a blob storage account as fixed virtual hard disks.
Reference: https://docs.microsoft.com/en-us/azure/virtual-machines/windows/upload-generalized-managed
Question 7:
You have the Azure virtual networks shown in the following table.
To which virtual networks can you establish a peering connection from VNet1?
A. VNet2 and VNet3 only
B. VNet2 only
C. VNet3 and VNet4 only
D. VNet2, VNet3, and VNet4
Correct Answer: C
You can connect virtual networks with virtual network peering. These virtual networks can be in the same region or different regions (also known as Global VNet peering).
Once virtual networks are peered, resources in both virtual networks can communicate with each other, with the same latency and bandwidth as if the resources were in the same virtual network. Global VNet Peering is now generally available in all Azure public regions, excluding the China, Germany, and Azure Government regions.
The address space is the most critical configuration for a VNet in Azure. This is the IP range for the entire network that will be divided into subnets.
The address space can almost be any IP range that you wish (public or private).
You can add multiple address spaces to a VNet.
To ensure this VNet can be connected to other networks, the address space should never overlap with any other networks in your environment. If a VNet has an address space that overlaps with another Azure VNet or on-premises network,
the networks cannot be connected, as the routing of traffic will not work properly.
References:
https://docs.microsoft.com/en-us/azure/virtual-network/tutorial-connect-virtual-networks-portal
https://docs.microsoft.com/en-us/azure/virtual-network/tutorial-connect-virtual-networks-portal
https://www.microsoftpressstore.com/articles/article.aspx?p=2873369
Question 8:
HOTSPOT
You have an Azure subscription that contains the public load balancers shown in the following table.
You plan to create six virtual machines and to load balance requests to the virtual machines. Each load balancer will load balance three virtual machines. You need to create the virtual machines for the planned solution.
Hot Area:
Correct Answer:
Box 1: be created in the same availability set or virtual machine scale set.
The Basic tier is quite restrictive. A load balancer is restricted to a single availability set, virtual machine scale set, or a single machine.
Box 2: be connected to the same virtual network
The Standard tier can span any virtual machine in a single virtual network, including blends of scale sets, availability sets, and machines.
Reference:
https://www.petri.com/comparing-basic-standard-azure-load-balancers
Question 9:
You have an Azure subscription that contains a storage account named storage1.
You plan to create a blob container named container1.
You need to use customer-managed key encryption for container 1.
Which key should you use?
A. an EC key that uses the P-384 curve only
B. an EC key that uses the P-521 curve only
C. an EC key that uses the P-384 curve or P-521 curve only
D. an RSA key with a key size of 4096 only
E. an RSA key type with a key size of 2048, 3072, or 4096 only
Correct Answer: E
Enable customer-managed keys for a storage account
The key vault that stores the key must have both soft delete and purge protection enabled. Azure storage encryption supports RSA and RSA-HSM keys of sizes 2048, 3072, and 4096.
Reference:
https://learn.microsoft.com/en-us/azure/storage/common/customer-managed-keys-overview
Question 10:
You have an Azure web app named App1 that streams video content to users. App1 is located in the East US Azure region.
Users in North America stream the video content without any interruption.
Users in Asia and Europe report that the video buffer often does not play back smoothly.
You need to recommend a solution to improve video streaming for European and Asian users.
What should you recommend?
A. Scale out the App Service plan.
B. Scale up the App Service plan.
C. Configure an Azure Content Delivery Network (CDN) endpoint.
D. Configure Azure File Sync.
Correct Answer: C
A content delivery network (CDN) is a distributed network of servers that can efficiently deliver web content to users. CDNs\’ store cached content on edge servers in point-of-presence (POP) locations that are close to end users, to minimize latency.
Azure Content Delivery Network (CDN) offers developers a global solution for rapidly delivering high-bandwidth content to users by caching their content at strategically placed physical nodes across the world.
Reference: https://docs.microsoft.com/en-us/azure/cdn/cdn-overview
Question 11:
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure subscription named Subscription1 that contains the resources shown in the following table.
VM1 connects to a virtual network named VNET2 by using a network interface named NIC1.
You need to create a new network interface named NIC2 for VM1.
Solution: You create NIC2 in RG2 and West US.
Does this meet the goal?
A. Yes
B. No
Correct Answer: A
The virtual machine you attach a network interface to and the virtual network you connect it to must exist in the same location, here in West US, also referred to as a region.
Reference:
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-network-interface
Question 12:
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure subscription that contains the resources shown in the following table.
VM1 connects to VNET1.
You need to connect VM1 to VNET2.
Solution: You delete VM1. You recreate VM1, and then you create a new network interface for VM1 and connect it to VNET2.
Does this meet the goal?
A. Yes
B. No
Correct Answer: A
You should delete VM1. Then recreate VM1 and add the network interface for VM1.
To migrate a VM from a VNET to another VNET. The only option is to delete the VM and redeploy it using a new NIC and NIC connected to VNET2.
Note: When you create an Azure Virtual Machine (VM), you must create a Virtual Network (VNet) or use an existing VNet. You can change the subnet a VM is connected to after it\’s created, but you cannot change the VNet. You can also
change the size of a VM.
Reference:
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/network-overview
Question 13:
You have an Azure subscription named Subscription1.
You have 5 TB of data that you need to transfer to Subscription1.
You plan to use an Azure Import/Export job.
What can you use as the destination of the imported data?
A. Azure SQL Database
B. Azure File Storage
C. An Azure Cosmos DB database
D. The Azure File Sync Storage Sync Service
E. Azure Data Factory
F. A virtual machine
Correct Answer: B
Azure Import/Export service is used to securely import large amounts of data to Azure Blob storage and Azure Files by shipping disk drives to an Azure data center.
References:
https://docs.microsoft.com/en-us/azure/storage/common/storage-import-export-service
Question 14:
You have an Azure subscription that contains an Azure virtual machine named VM1. VM1 runs a financial reporting app named App1 that does not support multiple active instances.
At the end of each month, CPU usage for VM1 peaks when App1 runs.
You need to create a scheduled runbook to increase the processor performance of VM1 at the end of each month.
What task should you include in the runbook?
A. Add the Azure Performance Diagnostics agent to VM1.
B. Modify the VM size property of VM1.
C. Add VM1 to a scale set.
D. Increase the vCPU quota for the subscription.
E. Add a Desired State Configuration (DSC) extension to VM1.
Correct Answer: B
If you have a CPU/performance issue then the solution is to scale up (increase VM size) or to scale out (scale set) given that the App does not support multiple instances then scale up is the obvious choice.
Reference: https://docs.microsoft.com/en-us/azure/virtual-machines/windows/resize-vm
Question 15:
Your company has three virtual machines (VMs) that are included in an availability set.
You try to resize one of the VMs, which returns an allocation failure message.
The VM must be resized.
Which of the following actions should you take?
A. You should only stop one of the VMs.
B. You should stop two of the VMs.
C. You should stop all three VMs.
D. You should remove the necessary VM from the availability set.
Correct Answer: C
If the VM you wish to resize is part of an availability set, then you must stop all VMs in the availability set before changing the size of any VM in the availability set. The reason all VMs in the availability set must be stopped before performing the resize operation to a size that requires different hardware is that all running VMs in the availability set must be using the same physical hardware cluster.
Therefore, if a change of physical hardware cluster is required to change the VM size then all VMs must be first stopped and then restarted one by one to a different physical hardware cluster.
Reference: https://azure.microsoft.com/es-es/blog/resize-virtual-machines/
…
The Microsoft AZ-104 exam was released in 2020! It will continue as the “Microsoft Azure Administrator” certification exam in 2024! It is one of the most important Microsoft certification exams for candidates!
leads4pass az-104 dumps help you consolidate the knowledge you have learned and improve your exam success rate through practical practice tests! If you practice the leads4pass az-104 dumps exam questions completely Help you pass the exam 100% successfully! Welcome to download leads4pass az-104 dumps: https://www.leads4pass.com/az-104.html (763Q&A)
Microsoft AZ-104 exam information
These contents are mentioned both in the official version and in the exam contents I shared in previous periods! The following will provide the sources of all preparation information for the Microsoft AZ-104 exam:
Microsoft az-104 official information, including exam preparation: https://learn.microsoft.com/en-us/credentials/certifications/exams/az-104/
Microsoft az-104 YouTube video tutorial: https://www.youtube.com/watch?v=VOod_VNgdJk
Microsoft Exam policies and FAQs: https://learn.microsoft.com/en-us/credentials/certifications/certification-exam-policies
Important Details And Tips For AZ-104: https://k21academy.com/microsoft-azure/admin/microsoft-azure-administrator-certification/#:~:text=Important%20Details%20And%20Tips%20For,studies%20%26%20Multiple%2Dchoice%20questions.
What are some of the top-paying Azure certifications?https://www.pluralsight.com/resources/blog/cloud/what-are-the-top-paying-microsoft-azure-certifications#:~:text=1.,demand%20IT%20certifications%20for%202021.