AZ 104 RENEWAL EXAM QUESTIONS AND
ANSWER UPDATED 2023
1. You plan to deploy an Azure web app that will have the following settings
Name:
... [Show More] WebApp1
Publish: Docker container
Operating system: Windows
Region: West US
Windows Plan (West US): ASP-RG1-8bcf
You need to ensure that WebApp!1 usesthe ASP.NET v4.7 runtime stack. Which setting
should You modify?
Select only one answer
a) Region
b) Operating system
c) Publish
d) Windows Plan
2. You have the following Azure resources:
e Azure Key Vault named KeyVault1
e Azure App Service named WebApp1
You need to ensure that WebApp1 can access KeyVault1 by using Azure Active
Directory(Azure AD) authentication.
Which two settings can be used to configure WebApp1? Each correct answer presents a
complete solution.
Select all answersthat apply.
a) User assigned managed identity
b) Application settings
c) TLS/SSL
d) Bindings
e) App Service Authentication
f) System assigned managed identity
3. You have an Azure web app named Contoso2023. You add a deployment slot to
Contoso2023 named Slot1. You need to be able to perform a deployment slot swap with a
preview.
What should you modify?
Select only one answer
a) application settingsfor Contoso2023
b) generalsettingsfor Contoso2023
c) application settingsfor Contoso2023-Slot1
d) generalsettingsfor
e) Contoso2023-Slot1
4. You plan to create an Azure container instance named container1 that will use a Docker
image named Image1. You need to ensure that container1 has persistent storage.
Which Azure resourcesshould you deploy for the persistent storage?
Select only one answer.
a) an Azure container registry only
b) an Azure Storage account and a file share
c) an Azure Storage account and a blob container
d) an Azure SQL database only
5. You have an Azure container registry named Registry1. You enable the admin user for
Registry1.
Which username should you use to connect to Registry1 as an admin user?
Select only one answer
a) Admin
b) Root
c) Administrator
d) Registry1.azurecr.io
6. You have an Azure subscription that containsthe following resources:
a storage account named storage123
a container instance named App Container
The subscription contains a virtual network named VirtualNet4 that has the
following subnets:
SubnetA- storage123 is connected to SubnetA.
SubnetB- AppContainer is connected to SubnetB.
SubnetC- No resources.
You plan to deploy an Azure container instance named container5 to VirtualNet4.
To which subnets can you deploy container5? Select only one answer.
a) SubnetB only
b) SubnetC only
c) SubnetB and SubnetC only
d) SubnetA, SubnetB, and SubnetC
7. You have an Azure Storage account named storage1. You create the following encryption
scopes for storage1:
Scope1 that has an encryption type of Microsoft-managed keys
Scope2 that has an encryption type of Customer-managed keys
Which storage services can be used with Scope2? Select only one answer.
a) blob only
b) file only
c) blob and file only
d) table and queue only
e) blob, file, table, and queue
You have an Azure Storage account named storage’ that contains a file share named share.
You also have an on-premises Active Directory domain that contains a user named User1.
You need to ensure that User! can access share1 by using the SMB protocol.
What should you do?
a) Provide User1 with the shared access signature (SAS) for storage.
b) Configure the Access control (IAM) settings ofstorage.
c) Configure the Firewalls and virtual networkssettings ofstorage1
d) Provide User1 with the access key for storage1.
10. You have an Azure Storage account named storage1 that is configured to use the Hot
access tier.
Storage has a container named container1 and the lifecycle management rule with the
following settings:
Move blob to cool storage: Selected
Days after last modification: 3
Move blob to archive storage: Selected
Days after last modification: 5
On December 1, you create a file named File1 in container1. On December 10, you rehydrate
File1 and move the file to the Hot access tier. When will File1 be moved to archive storage?
Select only one answer
a) within 24 hours
b) on December 15
c) on December 18
d) on January 1
11. You have an Azure Storage account named storage1. You need to provide time-limited
access to storage1.
What should you use?
Select only one answer
a) an access key
b) a role assignment
c) an access policy
d) a share access signature (SAS)
12. You have the following Azure virtual machines that run Windows Server 2019:
Server1- connected to VirtualNET1 and has a Wingtiptoys.com DNS suffix configured in
Windows Server 2019
Server2- connected to VirtualNET1 and has a Fabrikam.com DNS suffix configured in
Windows Server 2019
Server3- connected to VirtualNET2 and has a Wingtiptoys.com DNS suffix configured [Show Less]