Online Access Free AZ-104 Exam Questions

This study guide prepare me to get a passing score on the AZ-104 exam. I love the dump. Thanks a million for your help.

AZ-104 exam dumps are very valid! I passed the exam today and i can prove it! Thank you so much!

No.# B. No

No.# D. Enable identity-based data access for the file shares in storage1.

No.# N-N-N

No.# B. No

Assigning the "Traffic Manager Contributor" role to Admin1 does not directly align with enabling Traffic Analytics for an Azure subscription. The "Traffic Manager Contributor" role is used to manage Azure Traffic Manager profiles, which is a different service responsible for distributing network traffic across multiple endpoints.

No.# N-N-N

Hey, your AZ-104 questions are exactly the same as the actual exam's.

No.# D. On storage2, enable identity-based access for the file shares.

To grant Group4 Azure RBAC read-only permissions to all the Azure file shares, you should enable identity-based access for the file shares on storage2. Identity-based access enables you to manage access to file shares based on Azure AD identities, including users, groups, and service principals. By enabling identity-based access, you can grant access to specific users or groups and manage access control centrally from Azure AD.

Recreating storage2 with Hierarchical namespace enabled is not relevant to granting RBAC permissions to Azure file shares.

Changing the account kind type to StorageV2 (general purpose v2) is not relevant to granting RBAC permissions to Azure file shares.

Creating a shared access signature (SAS) ) provides temporary access to resources in storage accounts, but it does not allow you to grant RBAC permissions to Azure file shares.

Therefore, the correct answer is D. On storage2, enable identity-based access for the file shares....

No.# Correct answer:
1. Create Azure Virtual WAN
2. Create Virtual Hub
3. Create VPN sites
4. Connect VPN sites to virtual hub

No.# Y-Y-N

No.# B. Create a TXT record named asuid that contains the domain verification ID.

No.# N-Y-N
Explanation
1. The azure policy (not allowed resource types – Virtual networks) is inherited to Subscription1. So, Virtual networks are not allowed to create in Subscription1.

2. Policy assignments get evaluated top-to-bottom. The most restrictive policy assignment will always win, i.e. a DENY on any level will take precedence over an ALLOW on any other level. So the azure policy (not allowed resource types – Virtual networks) will be applied to Subscription2. The deny policy is only for virtual networks. This allows to create a virtual machine by leveraging existing VNet’s.

3. Each management group and subscription can only support one parent. Subscription1 is already part of a management group. We can’t add this to another management group though we can move.

https://docs.microsoft.com/en-us/azure/governance/management-groups/overview

No.# Answer is Resource Group. I tried the only ones that need to be updated manually are resource group and password

No.# There are four patterns with this question, please find the answers which is No and the one which is Yes.
Solution: You create a PTR record for www in the contoso.com zone.
Does this meet the goal?
No

Solution: You modify the SOA record in the contoso.com zone.
Does this meet the goal?
No

Solution: You add an NS record to the contoso.com Azure DNS zone.
Does this meet the goal?
No

Solution: You modify the name servers at the domain registrar.
Does this meet the goal?
Yes

No.# i think its B. New-AzDeployment

Explanation: The New-AzDeployment cmdlet is used to deploy Azure Resource Manager templates. This cmdlet is specifically designed to deploy templates that create or update Azure resources within a resource group.

No.# Correct Answer: A - Yes

You can only attach virtual machines that are in the same location and on the same virtual network as the LB. Virtual machines must have a standard SKU public IP or no public IP.

The LB needs to be a standard SKU to accept individual VMs outside an availability set or vmss. VMs do not need to have public IPs but if they do have them they have to be standard SKU. Vms can only be from a single network. When they don’t have a public IP they are assigned an ephemeral IP.

Also, when adding them to a backend pool, it doesn’t matter in which status are the VMs.

Note: Load balancer and the public IP address SKU must match when you use them with public IP addresses.

No.# Should be C, 2 service endpoints. VM is not a service endpoint type. So the first question is irrelevant.
Both storage accounts must have service endpoints in vnet 1, so answer should be 2

No.# answer NO

No.# Correct Answer: A and E

The Custom Script Extension downloads and executes scripts on Azure VMs. This extension is useful for post deployment configuration, software installation, or any other configuration / management task. Scripts can be downloaded from Azure storage or GitHub, or provided to the Azure portal at extension run-time.

The Custom Script extension integrates with Azure Resource Manager templates, and can also be used with the Azure CLI, Azure PowerShell, Azure portal, or the REST API
The following Custom Script Extension definition downloads a sample script from GitHub, installs the required packages, then writes the VM instance hostname to a basic HTML page.