Welcome to the Microsoft Azure Administrator (AZ-104) practice test | Azure Administrator : Real Tests course. This course will help you test your knowledge on the Microsoft AZ-104 exam and will help you prepare for the final exam. With our practice tests, you will be able to pass the official exam pretty much easier and pass in the first attempt. Azure Administrator : Real Tests

What you get?

• 122 latest practice questions (more on the way)Thorough explanation for each question

  Reference links to the official MS documentation

  30 days money-back guarantee

The tests cover the following AZ-104 exam domains:

1. Manage Azure identities and governance (15-20%)
2. Implement and manage storage (10-15%)
3. Deploy and manage Azure compute resources (25-30%)
4. Configure and manage virtual networking (30-35%)
5. Monitor and back up Azure resources (10-15%)

See you on the course.

======================================================================

MS Azure Cloud Engineer Masters Program

AZ-104 : Microsoft Azure Administrator | Azure Administrator : Real Tests

Question 1.

Your company has a Microsoft SQL Server Always On availability group configured on their Azure virtual machines (VMs).
You need to configure an Azure internal load balancer as a listener for the availability group.
Solution: You set Session persistence to Client IP.
Does the solution meet the goal?

• A. Yes
• B. No

Answer – B

Question 2.

Your company has a Microsoft SQL Server Always On availability group configured on their Azure virtual machines (VMs).
You need to configure an Azure internal load balancer as a listener for the availability group.
Solution: You enable Floating IP.
Does the solution meet the goal?

• A. Yes
• B. No

Answer 2. A

Question 3

You plan to migrate the application on Azure virtual machines (VMs). You have configured two VMs on a single subnet in an Azure virtual network.
You need to configure the two VMs with static internal IP addresses.
What should you do?

• A. Run the New-AzureRMVMConfig PowerShell cmdlet.
• B. Run the Set-AzureSubnet PowerShell cmdlet.
• C. Modify the VM properties in the Azure Management Portal.
• D. Modify the IP properties in Windows Network and Sharing Center.
• E. Run the Set-AzureStaticVNetIP PowerShell cmdlet.

Answer 3. E

Explanation: Specify a static internal IP for a previously created VM
If you want to set a static IP address for a VM that you previously created, you can do so by using the following cmdlets. If you already set an IP address for the
VM and you want to change it to a different IP address, youג€™ll need to remove the existing static IP address before running these cmdlets. See the instructions below to remove a static IP.
For this procedure, you’ll use the Update-AzureVM cmdlet. The Update-AzureVM cmdlet restarts the VM as part of the update process. The DIP that you specify will be assigned after the VM restarts. In this example, we set the IP address for VM2, which is located in cloud service StaticDemo

Question 4.

Your company has an Azure Active Directory (Azure AD) subscription.
You need to deploy five virtual machines (VMs) to your company’s virtual network subnet.
The VMs will each have both a public and private IP address. Inbound and outbound security rules for all of these virtual machines must be identical.
Which of the following is the least amount of network interfaces needed for this configuration?

• A. 5
• B. 10
• C. 20
• D. 40

Answer 4. A

Question 5.

Your company’s Azure subscription includes Azure virtual machines (VMs) that run Windows Server 2016. One of the VMs is backed up every day using Azure Backup Instant Restore.
When the VM becomes infected with data encrypting ransomware, you decide to recover the VM’s files. Which of the following is TRUE in this scenario?

• A. You can only recover the files to the infected VM.
• B. You can recover the files to any VM within the companyג€™s subscription.
• C. You can only recover the files to a new VM.
• D. You will not be able to recover the files.

Answer 5. A

Azure Administrator : Real Tests

Question 6.

Your company has an Azure subscription that includes a Recovery Services vault.
You want to use Azure Backup to schedule a backup of your company’s virtual machines (VMs) to the Recovery Services vault.
Which of the following VMs can you back up? Choose all that apply.

• A. VMs that run Windows 10.
• B. VMs that run Windows Server 2012 or higher.
• C. VMs that have NOT been shut down.
• D. VMs that run Debian 8.2+.
• E. VMs that have been shut down.

Azure Backup supports backup of 64-bit Windows server operating system from Windows Server 2008.
Azure Backup supports backup of 64-bit Windows 10 operating system.
Azure Backup supports backup of 64-bit Debian operating system from Debian 7.9+.
Azure Backup supports backup of VM that are shutdown or offline.

Answer 6 –> ABCDE

Question 7.

You have an Azure subscription that contains an Azure Active Directory (Azure AD) tenant named contoso.com and an Azure Kubernetes Service (AKS) cluster named AKS1.
An administrator reports that she is unable to grant access to AKS1 to the users in contoso.com.
You need to ensure that access to AKS1 can be granted to the contoso.com users.
What should you do first?

• A. From contoso.com, modify the Organization relationships settings.
• B. From contoso.com, create an OAuth 2.0 authorization endpoint.
• C. Recreate AKS1.
• D. From AKS1, create a namespace.

Answer 7. B

Question 8.

You have a Microsoft 365 tenant and an Azure Active Directory (Azure AD) tenant named contoso.com.
You plan to grant three users named User1, User2, and User3 access to a temporary Microsoft SharePoint document library named Library1.
You need to create groups for the users. The solution must ensure that the groups are deleted automatically after 180 days.
Which two groups should you create? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.

• A. a Microsoft 365 group that uses the Assigned membership type
• B. a Security group that uses the Assigned membership type
• C. a Microsoft 365 group that uses the Dynamic User membership type
• D. a Security group that uses the Dynamic User membership type
• E. a Security group that uses the Dynamic Device membership type

You can set expiration policy only for Office 365 groups in Azure Active Directory (Azure AD).
Note: With the increase in usage of Office 365 Groups, administrators and users need a way to clean up unused groups. Expiration policies can help remove inactive groups from the system and make things cleaner.
When a group expires, all of its associated services (the mailbox, Planner, SharePoint site, etc.) are also deleted.
You can set up a rule for dynamic membership on security groups or Office 365 groups.

Answer 8. A and C

Azure Administrator : Real Tests

Question 9.

You recently created a new Azure subscription that contains a user named Admin1.
Admin1 attempts to deploy an Azure Marketplace resource by using an Azure Resource Manager template. Admin1 deploys the template by using Azure
PowerShell and receives the following error message: `User failed validation to purchase resources. Error message: `Legal terms have not been accepted for this item on this subscription. To accept legal terms, please go to the Azure portal (http://go.microsoft.com/fwlink/?LinkId=534873) and configure programmatic deployment for the Marketplace item or create it there for the first time.`
You need to ensure that Admin1 can deploy the Marketplace resource successfully.
What should you do?

• A. From Azure PowerShell, run the Set-AzApiManagementSubscription cmdlet
• B. From the Azure portal, register the Microsoft.Marketplace resource provider
• C. From Azure PowerShell, run the Set-AzMarketplaceTerms cmdlet
• D. From the Azure portal, assign the Billing administrator role to Admin1

Answer 9. C.

MS Azure Cloud Engineer Masters Prog

Question 10.

You have an Azure Active Directory (Azure AD) tenant that contains 5,000 user accounts.
You create a new user account named AdminUser1.
You need to assign the User administrator administrative role to AdminUser1.
What should you do from the user account properties?

• A. From the Licenses blade, assign a new license
• B. From the Directory role blade, modify the directory role
• C. From the Groups blade, invite the user account to a new group

Assign a role to a user –
1. Sign in to the Azure portal with an account that’s a global admin or privileged role admin for the directory.
2. Select Azure Active Directory, select Users, and then select a specific user from the list.
3. For the selected user, select Directory role, select Add role, and then pick the appropriate admin roles from the Directory roles list, such as Conditional access administrator.
4. Press Select to save.

Answer 10. B

Question 11.

You have an Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com that contains 100 user accounts.
You purchase 10 Azure AD Premium P2 licenses for the tenant.
You need to ensure that 10 users can use all the Azure AD Premium features.
What should you do?

• A. From the Licenses blade of Azure AD, assign a license
• B. From the Groups blade of each user, invite the users to a group
• C. From the Azure AD domain, add an enterprise application
• D. From the Directory role blade of each user, modify the directory role

Answer 11. A

Azure Administrator : Real Tests

Question 12.

You have an Azure subscription named Subscription1 and an on-premises deployment of Microsoft System Center Service Manager.
Subscription1 contains a virtual machine named VM1.
You need to ensure that an alert is set in Service Manager when the amount of available memory on VM1 is below 10 percent.
What should you do first?

• A. Create an automation runbook
• B. Deploy a function app
• C. Deploy the IT Service Management Connector (ITSM)
• D. Create a notification

Answer 12. C

Question 13.

You sign up for Azure Active Directory (Azure AD) Premium P2.
You need to add a user named admin1@contoso.com as an administrator on all the computers that will be joined to the Azure AD domain.
What should you configure in Azure AD?

• A. Device settings from the Devices blade
• B. Providers from the MFA Server blade
• C. User settings from the Users blade
• D. General settings from the Groups blade

Answer 13. A

When you connect a Windows device with Azure AD using an Azure AD join, Azure AD adds the following security principles to the local administrators group on the device:
✑ The Azure AD global administrator role
✑ The Azure AD device administrator role
✑ The user performing the Azure AD join
In the Azure portal, you can manage the device administrator role on the Devices page. To open the Devices page:
1. Sign in to your Azure portal as a global administrator or device administrator.
2. On the left navbar, click Azure Active Directory.
3. In the Manage section, click Devices.
4. On the Devices page, click Device settings.
5. To modify the device administrator role, configure Additional local administrators on Azure AD joined devices.

Question 14.

You have an Azure Active Directory (Azure AD) tenant named contosocloud.onmicrosoft.com.
Your company has a public DNS zone for contoso.com.
You add contoso.com as a custom domain name to Azure AD.
You need to ensure that Azure can verify the domain name.
Which type of DNS record should you create?

• A. MX
• B. NSEC
• C. PTR
• D. RRSIG

To verify your custom domain name (example)
1. Sign in to the Azure portal using a Global administrator account for the directory.
2. Select Azure Active Directory, and then select Custom domain names.
3. On the Fabrikam – Custom domain names page, select the custom domain name, Contoso.
4. On the Contoso page, select Verify to make sure your custom domain is properly registered and is valid for Azure AD. Use either the TXT or the MX record type.
Note:
There are several versions of this question in the exam. The question can have two correct answers:
1. MX
2. TXT
The question can also have other incorrect answer options, including the following:
1. SRV
2. NSEC3

Answer 14. A

Question 15.

You have an Azure subscription named Subscription1 that contains an Azure Log Analytics workspace named Workspace1.
You need to view the error events from a table named Event.
Which query should you run in Workspace1?

• A. Get-Event Event | where {$_.EventType == “error”}
• B. search in (Event) “error”
• C. select * from Event where EventType == “error”
• D. search in (Event) * | where EventType -eq “error”

To search a term in a specific table, add the table-name just after the search operator
Note:
There are several versions of this question in the exam. The question has two possible correct answers:
1. Event | search “error”
2. Event | where EventType == “error”
3. search in (Event) “error”
Other incorrect answer options you may see on the exam include the following:
1. Get-Event Event | where {$_.EventTye ג€”eq “error”}
2. Event | where EventType is “error”
3. search in (Event) * | where EventType ג€”eq “error”
4. select * from Event where EventType is “error”

Answer 15. B

===========================================================================