Online Access Free AZ-104 Exam Questions

No.# Therefore, the most direct and crucial dependency for VM1 among the listed resources is NIC1 (Option B). The NIC acts as the bridge between the VM and the other network resources like the virtual network, public IP, and network security group. Hence, it's essential to ensure that NIC1 is deployed before VM1.
https://learn.microsoft.com/en-us/azure/templates/microsoft.compute/virtualmachines?pivots=deployment-language-arm-template
https://learn.microsoft.com/en-us/azure/azure-resource-manager/templates/resource-dependency
https://learn.microsoft.com/en-us/azure/azure-resource-manager/templates/template-tutorial-create-templates-with-dependent-resources?tabs=CLI

No.# A is Correct answers
organizations wanting to enforce their on-premises Active Directory security and password policies, can choose to use Pass-through Authentication
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-pta

No.# Tested in lab, correct answer is D. User2 inherits the role from Group1, hence he will also receive an email besides User1.

No.# The lifecycle management feature is available in all Azure regions for general purpose v2 (GPv2) accounts, blob storage accounts, premium block blobs storage accounts, and Azure Data Lake Storage Gen2 accounts.

No.# You access the Azure portal to alter the grant control of the Azure AD conditional access policy.

No.# A. Run the docker push command.

No.# 1. Create Recovery Services Vault,
2. Set Replication Policy to ZRS (because of the requirement for having in three separate zones)
3. For VM1, create a backup policy

No.# D) " Assign Group1 the User Access Administrator role for the root management group."

To be able to assign licenses to all current and future subscriptions, while minimizing the administrative effort, one should apply the role to the Root Management Group.

And because we should use the principle of least privilege we should chose the User Access Administrator role instead of the Owner one.

No.# B should be the correct answer instead.

https://learn.microsoft.com/en-us/azure/virtual-network/ip-services/public-ip-addresses#at-a-glance
Azure Firewall
- Dynamic IPv4: No
- Static IPv4: Yes
- Dynamic IPv6: No
- Static IPv6: No

https://learn.microsoft.com/en-us/azure/virtual-network/ip-services/configure-public-ip-firewall
Azure Firewall is a cloud-based network security service that protects your Azure Virtual Network resources. Azure Firewall requires at least one public static IP address to be configured. This IP or set of IPs are used as the external connection point to the firewall. Azure Firewall supports standard SKU public IP addresses. Basic SKU public IP address and public IP prefixes aren't supported.

No.# Answer: NO

To deploy a YAML file, the command is:
kubectl apply -f example.yaml

No.# Correct Answer: B

You would need the Logic App Contributor role.

Logic App Operator - Lets you read, enable, and disable logic apps, but not edit or update them.

Logic App Contributor - Lets you create, manage logic apps, but not access to them.

No.# Correct
"A queue allows processing of a message by a single consumer. In contrast to queues, topics and subscriptions provide a one-to-many form of communication in a publish and subscribe pattern."
https://docs.microsoft.com/en-us/azure/service-bus-messaging/service-bus-queues-topics-subscriptions

No.# First answer should be no. A read-only lock makes the RG read-only (as indicated by the name). You won´t be able to make ANY changes including moving resources into it so NO/YES/YES

No.# Bulk Create" is for new Azure AD Users.

For Guests:

- Use "Bulk invite users" to prepare a comma-separated value (.csv) file with the user information and invitation preferences
- Upload the .csv file to Azure AD
- Verify the users were added to the directory

No.# Both of them are correct.

- LRS has 3 copies of data
- Access tier has the "cool" option to store infrequently accessed data.

No.# mlantonis Highly Voted 3 years, 4 months ago
Correct Answer:

Box 1: 10.0.0.0/16
Address prefix
destination-> Vnet 1 (Address space of Vnet1)

Box 2: Virtual appliance
Next hop type
VM1 ->Virtual Appliance. You can specify IP address of VM 1 when configuring next hop as Virtual appliance.

Box 3: Gateway Subnet
Assigned to
This route is to be followed by Gateway Subnet for the incoming traffic. You can associate routing table to the Subnet from Rout Table -> subnet ->Associate.

No.# I tested in lab - because I could not find a definitive answer and could not take it on faith. But you are right, no matter what lock is set - I was able to move resources. The -> ONLY <- situation where I was NOT able to MOVE resources is when i set READ-ONLY lock on the DESTINATION resource group.

No.# Tenant Isolation: Azure AD tenants are isolated from each other, meaning that roles and permissions are specific to each tenant. A Global Administrator in one tenant does not have any privileges in another tenant unless they are explicitly granted.

No.# "Bulk Create" is for new Azure AD Users.

For Guests:

- Use "Bulk invite users" to prepare a comma-separated value (.csv) file with the user information and invitation preferences
- Upload the .csv file to Azure AD
- Verify the users were added to the directory

No.# In the solution of this question they say “-PolicyType Initial”.
However you must use “-PolicyType Delta” to get only the change made and sync it immediately.
So the answer is “No”.