AZ 104 EXAM PREPARATION: QUESTIONS AND
ANSWERS (100% CORRECT)
You have two premium block blob Azure Storage accounts named storage1
and storage2.
You need to configure object replication from storage1 to storage2.
Which three features should be enabled before configuring object replication?
Each correct answer presents part of the solution. Right Ans - Object
replication can be used to replicate blobs between storage accounts. Before
configuring object replication, you must enable blob versioning for both
storage accounts, and you must enable the change feed for the source account.
You have an Azure subscription.
You plan to create a storage account named storage1.
You need to ensure that storage1 provides POSIX-compliant access control
lists (ACLs).
Which option should you configure when creating storage1?
Select only one answer. Right Ans - Hierarchical namespace
You plan to deploy an Azure virtual machine.
You are evaluating whether to use an Azure Spot instance.
Which two factors can cause an Azure Spot instance to be evicted? Each
correct answer presents a complete solution.
Select all answers that apply. Right Ans - Azure Spot instances allow you to
provision virtual machines at a reduced cost, but these virtual machines can
be stopped by Azure when Azure needs the capacity for other pay-as-you-go
workloads, or when the price of the spot instance exceeds the maximum price
that you have set. These virtual machines are good for dev, testing, or for
workloads that do not require any specific SLA.
You have an Azure subscription that contains an Azure App Service web app
named App1.
You have the following diagnostic logging configurations:
Application Logging (FileSystem): Error
Application Logging (Blob): Information
Detailed Error Message: Warning
Web Server Logging: Verbose
You need to configure diagnostic logging to store all warnings or higher.
,Which types of diagnostic logging and severity should you enable?
Select all answers that apply. Right Ans - You must enable the Application
Logging (Blob) diagnostic, which can be stored for more than a week. You
must also set the severity level to warning, to store warning, error, and critical
log messages.
You need to create an Azure App Service web app that runs on Windows. The
web app requires scaling to five instances, 45 GB of storage, and a custom
domain name. The solution must minimize costs.
Which App Service plan should you use? Right Ans - The Standard service
plan can host unlimited web apps, up to 50 GB of disk space, and up to 10
instances. The plan will cost approximately $0.10/hour. The Free plan only
offers 1 GB of disk size and 0 instances to host the app. The Premium plan
offers 250 GB of disk space and up to 30 instances and will cost approximately
$0.20/hour. The Basic plan offers 10 GB of disk space and up to three virtual
machines.
You have two Azure subscriptions named Sub1 and Sub2.
Sub1 contains a virtual network named VNet1 and a VPN gateway. Sub2
contains a virtual network named VNet2.
You have an on-premises device named Device1 that runs Windows and has a
Point-to-Site (P2S) VPN client installed.
You configure network peering between VNet1 and VNet2.
You need to ensure that Device1 can access VNet2 when a VPN connection is
established.
What should you do? Right Ans - Point-to-Site (P2S) VPN clients must be
downloaded and reinstalled again after virtual network peering is successfully
configured to ensure that the new routes are downloaded to the client.
You have an Azure virtual network that contains four subnets. Each subnet
contains 10 virtual machines.
You plan to configure a network security group (NSG) that will allow inbound
traffic over TCP port 8080 to two virtual machines on each subnet. The NSG
will be associated to each subnet.
You need to recommend a solution to configure the inbound access by using
the fewest number of NSG rules possible.
What should you use as the destination in the NSG? Right Ans - Application
security groups allow you to group together the network interfaces from
, multiple virtual machines, and then use the group as the source or destination
in an NSG rule. The network interfaces must be in the same virtual network.
You have an Azure subscription that contains a virtual network named VNet1.
You plan to enable VNet1 connectivity to on-premises resources by using an
encrypted connection.
What should you configure for VNet1? Right Ans - A VPN gateway is a type
of virtual network gateway that sends encrypted traffic between a virtual
network and an on-premises location across a public connection. You can also
use a VPN gateway to send traffic between virtual networks across the Azure
backbone. A VPN gateway connection relies on the configuration of multiple
resources, each of which contains configurable settings.
You have a Microsoft Entra tenant named contoso.com. Microsoft Entra
Connect is configured to sync users to the tenant.
You need to assign licenses to the users based on Microsoft Entra ID
attributes. The solution must minimize administrative effort.
Which two actions should you perform? Each correct answer presents part of
the solution.
Select all answers that apply. Right Ans - To assign licenses to users based
on Microsoft Entra ID attributes, you must create a dynamic security group
and configure rules based on custom attributes. The dynamic group must be
added to a license group for automatic synchronization. All users in the
groups will get the license automatically. Microsoft Entra evaluates the users
in the organization that are in scope for an assignment policy rule and creates
assignments for the users who don't have assignments to an access package
You have several management groups and Azure subscriptions.
You want to prevent the accidental deletion of resources.
To which three resource types can you apply delete locks? Each correct
answer presents a complete solution.
Select all answers that apply. Right Ans - You can use delete locks to block
the deletion of virtual machines, subscriptions, and resource groups. You
cannot use delete locks on management groups or storage account data.
You have an Azure virtual machine that runs Linux. The virtual machine hosts
a custom application that outputs log data in the JSON format.
You need to recommend a solution to collect the logs in Log Analytics
workspace.
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller LeCrae. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $17.99. You're not tied to anything after your purchase.