Microsoft Azure Administrator Exam

Microsoft AZ-104
Version Demo

Total Demo Questions: 15

Total Premium Questions: 341

Buy Premium PDF

https://dumpsboss.com

[email protected]
 Topic Break Down

Topic No. of Questions

Topic 1, Case Study 1 2

Topic 2, Case Study 2 3

Topic 3, Case Study 3 2

Topic 4, Case Study 4 2

Topic 5, Case Study 5 2

Topic 6, Case Study 6 2

Topic 7, Mixed Questions 328

Total 341

DumpsBoss - Pass Your Next Certification Exam Fast!

dumpsboss.com
QUESTION NO: 1

You have an Azure subscription that contains two virtual machines named VM1 and VM2.

You create an Azure load balancer.

You plan to create a load balancing rule that will load balance HTTPS traffic between VM1 and VM2.

Which two additional load balancer resources should you create before you can create the load balancing rule? Each correct
answer presents part of the solution.

NOTE: Each correct selection is worth one point.

A. a frontend IP address

B. an inbound NAT rule

C. a virtual network

D. a backend pool

E. a health probe

ANSWER: D E

Explanation:

Reference: https://docs.microsoft.com/en-us/azure/load-balancer/components

QUESTION NO: 2

You plan to use the Azure Import/Export service to copy files to a storage account.

Which two files should you create before you prepare the drives for the import job? Each correct answer presents part of the
solution.

NOTE: Each correct selection is worth one point.

A. an XML manifest file

B. a dataset CSV file

C. a JSON configuration file

D. a PowerShell PS1 file

E. a driveset CSV file

DumpsBoss - Pass Your Next Certification Exam Fast!

dumpsboss.com
ANSWER: B E

Explanation:

B: Modify the dataset.csv file in the root folder where the tool resides. Depending on whether you want to import a file or
folder or both, add entries in the dataset.csv file E: Modify the driveset.csv file in the root folder where the tool resides.

Reference: https://docs.microsoft.com/en-us/azure/storage/common/storage-import-export-data-to-files

QUESTION NO: 3

You have an Azure subscription that contains a policy-based virtual network gateway named GW1 and a virtual network
named VNet1.

You need to ensure that you can configure a point-to-site connection from an on-premises computer to VNet1.

Which two actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

A. Add a service endpoint to VNet1

B. Reset GW1

C. Create a route-based virtual network gateway

D. Add a connection to GW1

E. Delete GW1

F. Add a public IP address space to VNet1

ANSWER: C E

Explanation:

C: A VPN gateway is used when creating a VPN connection to your on-premises network.

Route-based VPN devices use any-to-any (wildcard) traffic selectors, and let routing/forwarding tables direct traffic to
different IPsec tunnels. It is typically built on router platforms where each IPsec tunnel is modeled as a network interface or
VTI (virtual tunnel interface).

E: Policy-based VPN devices use the combinations of prefixes from both networks to define how traffic is
encrypted/decrypted through IPsec tunnels. It is typically built on firewall devices that perform packet filtering. IPsec tunnel
encryption and decryption are added to the packet filtering and processing engine.

Incorrect Answers:

F: Point-to-Site connections do not require a VPN device or a public-facing IP address.

Reference: https://docs.microsoft.com/en-us/azure/vpn-gateway/create-routebased-vpn-gateway-portal
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-connect-multiple-policybased-rm-ps

DumpsBoss - Pass Your Next Certification Exam Fast!

dumpsboss.com
QUESTION NO: 4

You have an Azure subscription.

Users access the resources in the subscription from either home or from customer sites. From home, users must establish a
point-to-site VPN to access the Azure resources. The users on the customer sites access the Azure resources by using site-
to-site VPNs.

You have a line-of-business-app named App1 that runs on several Azure virtual machine. The virtual machines run Windows
Server 2016.

You need to ensure that the connections to App1 are spread across all the virtual machines.

What are two possible Azure services that you can use? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

A. an internal load balancer

B. a public load balancer

C. an Azure Content Delivery Network (CDN)

D. Traffic Manager

E. an Azure Application Gateway

ANSWER: A E

Explanation:

Network traffic from the VPN gateway is routed to the cloud application through an internal load balancer. The load balancer
is located in the front-end subnet of the application.

Reference:

https://docs.microsoft.com/en-us/azure/architecture/reference-architectures/hybrid-networking/vpn
https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-overview https://docs.microsoft.com/en-
us/azure/application-gateway/overview

QUESTION NO: 5

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a
unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while
others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in
the review screen.

You have an Azure subscription named Subscription1. Subscription1 contains a resource group named RG1. RG1 contains
resources that were deployed by using templates.

You need to view the date and time when the resources were created in RG1.

DumpsBoss - Pass Your Next Certification Exam Fast!

dumpsboss.com
Solution: From the RG1 blade, you click Automation script.

Does this meet the goal?

A. Yes

B. No

ANSWER: B

Explanation:

From the RG1 blade, click Deployments. You see a history of deployment for the resource group.

Reference:

https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/template-tutorial-create-first-
template?tabs=azure-powershell

QUESTION NO: 6 - (DRAG DROP)

Your company has an Azure subscription that includes a number of Azure virtual machines (VMs), which are all part of the
same virtual network.

Your company also has an on-premises Hyper-V server that hosts a VM, named VM1, which must be replicated to Azure.

Which of the following objects that must be created to achieve this goal? Answer by dragging the correct option from the list
to the answer area.

Select and Place:

DumpsBoss - Pass Your Next Certification Exam Fast!

dumpsboss.com
ANSWER:

DumpsBoss - Pass Your Next Certification Exam Fast!

dumpsboss.com
QUESTION NO: 7

You have Azure subscription that includes data in following locations:

DumpsBoss - Pass Your Next Certification Exam Fast!

dumpsboss.com
You plan to export data by using Azure import/export job named Export1.

You need to identify the data that can be exported by using Export1.

Which data should you identify?

A. DB1

B. container1

C. share1

D. Table1

ANSWER: B

QUESTION NO: 8

You create an App Service plan named Plan1 and an Azure web app named webapp1.

You discover that the option to create a staging slot is unavailable.

You need to create a staging slot for Plan1.

What should you do first?

A. From Plan1, scale up the App Service plan

B. From webapp1, modify the Application settings

C. From webapp1, add a custom domain

D. From Plan1, scale out the App Service plan

ANSWER: A

Explanation:

The app must be running in the Standard, Premium, or Isolated tier in order for you to enable multiple deployment slots.

If the app isn't already in the Standard, Premium, or Isolated tier, you receive a message that indicates the supported tiers
for enabling staged publishing. At this point, you have the option to select Upgrade and go to the Scale tab of your app
before continuing.

Scale up: Get more CPU, memory, disk space, and extra features like dedicated virtual machines (VMs), custom domains
and certificates, staging slots, autoscaling, and more.

Incorrect:

Scale out: Increase the number of VM instances that run your app. You can scale out to as many as 30 instances

Reference: https://docs.microsoft.com/en-us/azure/app-service/deploy-staging-slots https://docs.microsoft.com/en-

us/azure/app-service/manage-scale-up

DumpsBoss - Pass Your Next Certification Exam Fast!

dumpsboss.com
QUESTION NO: 9

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a
unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while
others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in
the review screen.

You have an Azure virtual machine named VM1 that runs Windows Server 2016.

You need to create an alert in Azure when more than two error events are logged to the System event log on VM1 within an
hour.

Solution: You create an Azure Log Analytics workspace and configure the data settings. You install the Microsoft Monitoring
Agent on VM1. You create an alert in Azure Monitor and specify the Log Analytics workspace as the source.

Does this meet the goal?

A. Yes

B. No

ANSWER: A

Explanation:

Alerts in Azure Monitor can identify important information in your Log Analytics repository. They are created by alert rules
that automatically run log searches at regular intervals, and if results of the log search match particular criteria, then an alert
record is created and it can be configured to perform an automated response.

The Log Analytics agent collects monitoring data from the guest operating system and workloads of virtual machines in
Azure, other cloud providers, and on-premises. It collects data into a Log Analytics workspace.

Reference: https://docs.microsoft.com/en-us/azure/azure-monitor/learn/tutorial-response https://docs.microsoft.com/en-

us/azure/azure-monitor/platform/agents-overview

QUESTION NO: 10 - (DRAG DROP)

DRAG DROP

You have an on-premises file server named Server1 that runs Windows Server 2016.

You have an Azure subscription that contains an Azure file share.

You deploy an Azure File Sync Storage Sync Service, and you create a sync group.

You need to synchronize files from Server1 to Azure.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the
answer area and arrange them in the correct order.

Select and Place:

DumpsBoss - Pass Your Next Certification Exam Fast!

dumpsboss.com
ANSWER:

Explanation:

Step 1: Install the Azure File Sync agent on Server1

The Azure File Sync agent is a downloadable package that enables Windows Server to be synced with an Azure file share

Step 2: Register Server1.

Register Windows Server with Storage Sync Service

DumpsBoss - Pass Your Next Certification Exam Fast!

dumpsboss.com
Registering your Windows Server with a Storage Sync Service establishes a trust relationship between your server (or
cluster) and the Storage Sync Service.

Step 3: Add a server endpoint

Create a sync group and a cloud endpoint.

A sync group defines the sync topology for a set of files. Endpoints within a sync group are kept in sync with each other. A
sync group must contain one cloud endpoint, which represents an Azure file share and one or more server endpoints. A
server endpoint represents a path on registered server.

Reference: https://docs.microsoft.com/en-us/azure/storage/files/storage-sync-files-deployment-guide

QUESTION NO: 11

You have an Azure subscription that contains the resources in the following table.

Store1 contains a file share named data. Data contains 5,000 files.

You need to synchronize the files in the file share named data to an on-premises server named Server1.

Which three actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

A. Create a container instance

B. Register Server1

C. Install the Azure File Sync agent on Server1

D. Download an automation script

E. Create a sync group

ANSWER: B C E

Explanation:

Step 1 (C): Install the Azure File Sync agent on Server1

The Azure File Sync agent is a downloadable package that enables Windows Server to be synced with an Azure file share

Step 2 (B): Register Server1.

Register Windows Server with Storage Sync Service

DumpsBoss - Pass Your Next Certification Exam Fast!

dumpsboss.com
Registering your Windows Server with a Storage Sync Service establishes a trust relationship between your server (or
cluster) and the Storage Sync Service.

Step 3 (E): Create a sync group and a cloud endpoint.

A sync group defines the sync topology for a set of files. Endpoints within a sync group are kept in sync with each other. A
sync group must contain one cloud endpoint, which represents an Azure file share and one or more server endpoints. A
server endpoint represents a path on registered server.

Reference:

https://docs.microsoft.com/en-us/azure/storage/files/storage-sync-files-deployment-guide

QUESTION NO: 12

You discover that VM3 does NOT meet the technical requirements.

You need to verify whether the issue relates to the NSGs.

What should you use?

A. Diagram in VNet1

B. Diagnostic settings in Azure Monitor

C. Diagnose and solve problems in Traffic Manager profiles

D. The security recommendations in Azure Advisor

E. IP flow verify in Azure Network Watcher

ANSWER: E

Explanation:

Scenario: Contoso must meet technical requirements including:

Ensure that VM3 can establish outbound connections over TCP port 8080 to the applications servers in the Montreal office.

IP flow verify checks if a packet is allowed or denied to or from a virtual machine. The information consists of direction,
protocol, local IP, remote IP, local port, and remote port. If the packet is denied by a security group, the name of the rule that
denied the packet is returned. While any source or destination IP can be chosen, IP flow verify helps administrators quickly
diagnose connectivity issues from or to the internet and from or to the on-premises environment.

Reference: https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-ip-flow-verify-overview

QUESTION NO: 13 - (HOTSPOT)

HOTSPOT

You have an Azure subscription.

You plan to use an Azure Resource Manager template to deploy a virtual network named VNET1 that will use Azure Bastion.

DumpsBoss - Pass Your Next Certification Exam Fast!

dumpsboss.com
How should you complete the template? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

ANSWER:

DumpsBoss - Pass Your Next Certification Exam Fast!

dumpsboss.com
Explanation:

Reference: https://medium.com/charot/deploy-azure-bastion-preview-using-an-arm-template-15e3010767d6

QUESTION NO: 14

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a
unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while
others might not have a correct solution.

DumpsBoss - Pass Your Next Certification Exam Fast!

dumpsboss.com
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in
the review screen.

You have an Azure subscription named Subscription1 that contains the resources shown in the following table.

VM1 connects to a virtual network named VNET2 by using a network interface named NIC1.

You need to create a new network interface named NIC2 for VM1.

Solution: You create NIC2 in RG2 and Central US.

Does this meet the goal?

A. Yes

B. No

ANSWER: B

Explanation:

The virtual machine you attach a network interface to and the virtual network you connect it to must exist in the same
location, here West US, also referred to as a region.

Reference: https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-network-interface

QUESTION NO: 15 - (HOTSPOT)

HOTSPOT

You have an Azure subscription named Subscription1 that contains the resources shown in the following table:

DumpsBoss - Pass Your Next Certification Exam Fast!

dumpsboss.com
You plan to configure Azure Backup reports for Vault1.

You are configuring the Diagnostics settings for the AzureBackupReports log.

Which storage accounts and which Log Analytics workspaces can you use for the Azure Backup reports of Vault1? To
answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

ANSWER:

DumpsBoss - Pass Your Next Certification Exam Fast!

dumpsboss.com
Explanation:

Box 1: storage1, storage2, and storage3

The location and subscription where this Log Analytics workspace can be created is independent of the location and
subscription where your vaults exist.

Box 2: Analytics3

Vault1 and Analytics3 are both in West Europe.

Reference: https://docs.microsoft.com/en-us/azure/backup/backup-azure-configure-reports

DumpsBoss - Pass Your Next Certification Exam Fast!

dumpsboss.com