AZ- 104 Renewal Exam Questions and Answers 2022/2023
1) You plan to deploy an Azure web app that will have the following settings:
Name:
... [Show More] WebApp1
Publish: Docker container
Operating system: Windows
Region: West US
Windows Plan (West US): ASP-RG1-8bcf
You need to ensure that WebApp1 uses the ASP.NET v4.7 runtime stack.
Which setting should you modify?
Select only one answer.
RegionOperating system Publish Windows Plan
2) You have the following Azure resources:
Azure Key Vault named KeyVault1
Azure App Service named WebApp1
You need to ensure that WebApp1 can access KeyVault1 by using Azure Active Directory (Azure AD) authentication.
Which two settings can be used to configure WebApp1? Each correct answer presents a complete solution.
Select all answers that apply.
User assigned managed identity Application settings TLS/SSL bindings App Service Authentication System assigned managed identity
You have an Azure web app named WebApp1.
You discover that backup options are unavailable for WebApp1.
You need to back up WebApp1.
What should you do first?
Select only one answer.
Modify the platform settings of WebApp1.Modify the Application settings of WebApp1.Scale up the app service plan.Scale out the app service plan.
You have an Azure web app named Contoso2023.
You add a deployment slot to Contoso2023 named Slot1.
You need to be able to perform a deployment slot swap with preview.
What should you modify?
Select only one answer. application settings for Contoso2023 general settings for Contoso2023 application settings for Contoso2023-Slot1 general settings for
Contoso2023-Slot1
You plan to create an Azure container instance named container1 that will use a Docker image named Image1.
You need to ensure that container1 has persistent storage.
Which Azure resources should you deploy for the persistent storage?
Select only one answer.
an Azure container registry onlyan Azure Storage account and a file
sharean Azure Storage account and a blob containeran Azure SQL database only
You have an Azure container registry named Registry1.
You enable the admin user for Registry1.
Which username should you use to connect to Registry1 as an admin user?
Select only one answer.
rootAdminAdministratorRegistry1Registry1.azurecr.io
You have an Azure subscription that contains the following resources:
a storage account named storage123
a container instance named AppContainer
The subscription contains a virtual network named VirtualNet4 that has the following subnets:
SubnetA- storage123 is connected to SubnetA.
SubnetB- AppContainer is connected to SubnetB. SubnetC- No resources.
You plan to deploy an Azure container instance named container5 to VirtualNet4.
To which subnets can you deploy container5?
Select only one answer.
SubnetB onlySubnetC onlySubnetB and SubnetC onlySubnetA, SubnetB, and SubnetC
8) You have an Azure Storage account named storage1.
You create the following encryption scopes for storage1:
Scope1 that has an encryption type of Microsoft-managed keys
Scope2 that has an encryption type of Customer-managed keys
Which storage services can be used with Scope2?
Select only one answer.
blob onlyfile onlyblob and file onlytable and queue onlyblob, file, table, and queue
You have an Azure Storage account named storage1 that contains a file share named share1.
You also have an on-premises Active Directory domain that contains a user named User1.
You need to ensure that User1 can access share1 by using the SMB protocol.
What should you do?
Select only one answer.
Provide User1 with the shared access signature (SAS) for storage1.
Configure the Access control (IAM) settings of storage1.Configure the
Firewalls and virtual networks settings of storage1.Provide User1 with the access key for storage1.
You have an Azure Storage account named storage1 that is configured to use the Hot access tier.
Storage1 has a container named container1 and the lifecycle management rule with following settings:
Move blob to cool storage: Selected o Days after last modification: 3
Move blob to archive storage: Selected o Days after last modification: 5
On December 1, you create a file named File1 in container1.
On December 10, you rehydrate File1 and move the file to the Hot access tier.
When will File1 be moved to archive storage?
Select only one answer.
within 24 hourson December 15on December 18on January 1
You have an Azure Storage account named storage1.
You need to provide time-limited access to storage1.
What should you use?
Select only one answer.
an access keya role assignmentan access policya shared access
signature (SAS)
You have the following Azure virtual machines that run Windows Server 2019:
Server1- connected to VirtualNET1 and has a Wingtiptoys.com DNS suffix configured in Windows Server 2019
Server2- connected to VirtualNET1 and has a Fabrikam.com DNS suffix configured in Windows Server 2019
Server3- connected to VirtualNET2 and has a Wingtiptoys.com DNS suffix configured in Windows Server 2019
Server4- connected to VirtualNET2 and has a Fabrikam.com DNS suffix configured in Windows Server 2019
You create a private DNS zone named fabrikam.com and add the following virtual network links to fabrikam.com:
Link1- connected to VirtualNET1 and has auto registration enabled
Link2- connected to VirtualNET2 and has auto registration enabled
Which virtual machines will register a DNS record in fabrikam.com?
Select only one answer.
Server2 onlyServer1 and Server2 onlyServer2 and Server4 only
Server1, Server2, Server3, and Server4
13) A company named Contoso, Ltd. has an Azure subscription that contains an Azure Active Directory (Azure AD) tenant named contoso.com. The Azure subscription contains the following virtual networks:
VNET1- deployed in the East US location
VNET2- deployed in the East US location
VNET3- deployed in the West US location
Contoso purchases a company named A. Datum Corporation. A. Datum has an Azure subscription that contains an Azure AD tenant named adatum.com. Adatum.com contains the following virtual networks:
VNETA- deployed in the East US location
VNETB- deployed in the West US location Which virtual networks can you peer to VNET1?
Select only one answer.
VNET2 onlyVNET2 and VNET3 onlyVNET2 and VNETA only
VNET2, VNET3, and VNETA onlyVNET2, VNET3, VNETA, and VNETB
You have an Azure virtual machine named VM1 that connects to a virtual network named VNET1.
You create a private DNS zone named contoso.com and add an A record named host1 to the zone.
You need to ensure that VM1 can resolve host1.contoso.com.
What should you do?
Select only one answer.
Modify the Access control (IAM) settings of the zone.From the zone, add a virtual network link.From the properties of the network interface, modify the options of the DNS servers.From the properties of VNET1, modify the options of the DNS servers.
You have a proximity placement group named Proximity1.
You plan to create the following Azure resources:
a virtual machine named VM1
a disk named Disk1
a virtual network named VNET1
a public IP address named IP1 Which resources can you place in Proximity1?
Select only one answer.
VM1 onlyVM1 and Disk1 onlyDisk1 and IP1 onlyVNET1, Disk1, and IP1 only
16) You have an Azure virtual network named VNET1 has and a network security group (NSG) named NSG1. NSG1 has the following inbound security rules:
Rule1 has a priority of 100 and allows port 3389 on TCP protocol from any source and to any destination
Rule2 has a priority of 200 and allows ports 80 and 8080 on UDP protocol from any source and to any destination
Rule3 has a priority of 300 and denies ports 1-2000 on TCP protocol from any source and to any destination
Rule4 has a priority of 400 and allows ports 50-500 on TCP protocol from VirtualNetwork source and to any destination
Rule5 has a priority of 500 and allows ports 80 and 443 on TCP protocol from any source and to any destination
You need to allow http and https connections from the internet to VNET1.
What should you change for NSG1?
Select only one answer.
Priority for Rule4 to 250 Protocol for Rule2 to TCPPriority for Rule3 to 450 Priority for Rule5 to 250
17) You have an Azure virtual machine named VM1 that connects to a virtual network named VNET1.
A network security group (NSG) named NSG1 allows connections to VM1 from VNET1 only.
You need to add an inbound security rule to NSG1 that meets the following requirements:
Allows Azure Backup to back up VM1
Minimizes the types of allowed inbound traffic
What should you use as the source for the inbound security rule?
Select only one answer.
any IP address the IP address of VM1a service tag for Azure Backup an application security group
18) You have an Azure virtual network named VNET1 that has an IP address space of 192.168.0.0/16 and the following subnets:
Subnet1- has an IP address range of 192.168.1.0/24 and is connected to 15 VMs
Subnet2- has an IP address range of 192.168.2.0/24 and does not have any VMs connected
You need to ensure that you can deploy Azure Firewall to VNET1.
What should you do?
Select only one answer.
Add a new subnet to VNET1. Add a service endpoint to Subnet2.
Modify the subnet mask of Subnet2. Modify the IP address space of VNET1.
19) You have an Azure subscription that contains a storage account named storage1 and the following virtual machines:
VM1 has a public IP address of 13.68.158.24 and is connected to VNET1/Subnet1
VM2 has a public IP address of 52.255.145.76 and is connected to VNET1/Subnet1
VM3 has a public IP address of 13.68.158.50 and is connected to VNET1/Subnet2
The subnets have the following service endpoints:
Subnet1 has a Microsoft.Storage service endpoint
Subnet2 does not have any service endpoint
Storage1 has a firewall configured to allow access from the 13.68.158.0/24 IP address range only.
You need to identify which virtual machines can access storage1.
What should you identify?
Select only one answer.
VM1 onlyVM3 onlyVM1 and VM2 onlyVM1 and VM3 onlyVM1,
VM2, and VM3 [Show Less]