AZ-104-skillcertpro 79 possible questions with 100% correct answers 2022.

AZ-104-skillcertpro 79 possible questions with 100% correct answers 2022 "VNet1 is in RG1. VNet2 is in RG2. There is no connectivity between VNet1 and VNet2. An administrator named Admin1 creates an Azure virtual mach ...

AZ-104-skillcertpro 79 possible questions with 100% correct answers 2022 "VNet1 is in RG1. VNet2 is in RG2. There is no connectivity between VNet1 and VNet2. An administrator named Admin1 creates an Azure virtual machine named VM1 in RG1. VM1 uses a disk named Disk1 and connects to VNet1. Admin1 then installs a custom application in VM1. You need to move the custom application to VNet2. The solution must minimize administrative effort. Which two actions should you perform? Detach VM1 network interface Attach a new network interface Move network interface to RG2 Move VM1 to RG2 Delete VM1 Create a new virtual machine in VNet2 -Answer- " "1. Detach VM1 network interface 2. Create a new virtual machine in VNet2 " "Subscription1 contains an Azure virtual machine named VM1 that has the following configurations: -> Private IP address: 10.0.0.4 (dynamic) -> Network security group (NSG): NSG1 -> Public IP address: None -> Availability set: AVSet -> Subnet: 10.0.0.0/24 -> Managed disks: No Location: East US - You need to record all the successful and failed connection attempts to VM1. Which three actions should you perform? Enable Azure Network Watcher in the East US Azure region. Add an Azure Network Watcher connection monitor. Register the MicrosoftLogAnalytics provider. Create an Azure Storage account. Register the Microsoft.Insights resource provider. Enable Azure Network Watcher flow logs. -Answer- " "Enable Azure Network Watcher in the East US Azure region. Enable Azure Network Watcher in the East US Azure region. " "You have an Azure subscription named Subscription1 and an on-premises deployment of Microsoft System Center Service Manager. Subscription1 contains a virtual machine named VM1. You need to ensure that an alert is set in Service Manager when the amount of available memory on VM1 is below 10 percent. What should you do first?Create an automation runbook Deploy a function app Deploy the IT Service Management Connector (ITSM) Create a notification -Answer- " Deploy the IT Service Management Connector (ITSM) "You have an Azure Active Directory (Azure AD) tenant. You need to create a conditional access policy that requires all users to use multi-factor authentication when they access the Azure portal. Which three settings should you configure? Users and Groups Cloud Apps Conditions Grant Session -Answer- " "Users and Groups Cloud Apps Grant " "You have an Azure virtual machine named VM1 that runs Windows Server 2016. You need to create an alert in Azure when more than two error events are logged to the System event log on VM1 within an hour. Solution: You create an Azure Log Analytics workspace and configure the data settings. You install the Microsoft Monitoring Agent on VM1. You create an alert in Azure Monitor and specify the Log Analytics workspace as the source. Does this meet the goal? -Answer- " Yes "You have an Azure virtual machine named VM1 that runs Windows Server 2016. You need to create an alert in Azure when more than two error events are logged to the System event log on VM1 within an hour. Solution: You create an event subscription on VM1. You create an alert in Azure Monitor and specify VM1 as the source Does this meet the goal? -Answer- " No "Rate limiting for Voice, SMS, emails, Azure App push notifications and webhook posts what is the rate limit for SMS messages per hour? 1) 60 2) 30 3) 6 4) 12 -Answer- " 4) 12 "Rate limiting for Voice, SMS, emails, Azure App push notifications and webhook posts what is the rate limit for Email messages per hour? 1) 120 2) 60 3) 80 4) 100 -Answer- " 4) 100"Rate limiting for Voice, SMS, emails, Azure App push notifications and webhook posts what is the rate limit for Voice messages per hour? 1) 60 2) 30 3) 6 4) 12 -Answer- " 4) 12 "You have several servers running a microservice, and you want to make sure that all the servers have connectivity to each other. You need to calculate network performance metrics like packet loss and link latency. Which two Azure resources do you need to meet this requirement? Azure Traffic Manager Azure Monitor Network Performance Monitor Log Analytics Workspace -Answer- " "Azure Monitor Log Analytics Workspace " "You have an Azure subscription that contains an Azure Active Directory (Azure AD) tenant named preparationlabs.com and an Azure Kubernetes Service (AKS) cluster named AKS1. An administrator reports that she is unable to grant access to AKS1 to the users in preparationlabs.com. You need to ensure that access to AKS1 can be granted to the preparationlabs.com users. What should you do first? From preparationlabs.com, modify the Organization relationships settings. From preparationlabs.com, create an OAuth 2.0 authorization endpoint. Recreate AKS1. From AKS1, create a namespace. -Answer- " "From preparationlabs.com, create an OAuth 2.0 authorization endpoint. In this regard, Kubernetes does not have objects which represent normal user accounts. Normal users cannot be added to a cluster through an API call. Kubernetes uses client certificates, bearer tokens, an authenticating proxy, or HTTP basic auth to authenticate API requests through authentication plugins. " "You recently created a new Azure subscription that contains a user named Admin1. Admin1 attempts to deploy an Azure Marketplace resource by using an Azure Resource Manager template. Admin1 deploys the template by using Azure PowerShell and receives the following error message: "User failed validation to purchase resources. Error message: "Legal terms have not been accepted for this item on this subscription. To accept legal terms, please go to the Azure portal (http://go.microsoft.com/fwlink/?LinkId=534873) and configure programmatic deployment for the Marketplace item or create it there for the first time."You need to ensure that Admin1 can deploy the Marketplace resource successfully. What should you do? From Azure PowerShell, run the Set-AzApiManagementSubscription cmdlet From the Azure portal, register the Microsoft.Marketplace resource provider From Azure PowerShell, run the Set-AzMarketplaceTerms cmdlet From the Azure portal, assign the Billing administrator role to Admin1 -Answer- " From Azure PowerShell, run the Set-AzMarketplaceTerms cmdlet "You plan to use the Azure Import/Export service to copy files to a storage account. Which two files should you create before you prepare the drives for the import job? an XML manifest file a dataset CSV file a JSON configuration file a PowerShell PS1 file a driveset CSV file -Answer- " "a dataset CSV file a driveset CSV file While preparing drives for the import job, first we need to generate a journal file. The journal file stores basic information such as drive serial number, encryption key, and storage account details. " "You have a Recovery Service vault that you use to test backups. The test backups contain two protected virtual machines. You need to delete the Recovery Services vault. What should you do first? From the Recovery Service vault, delete the backup data. Modify the disaster recovery properties of each virtual machine. Modify the locks of each virtual machine. From the Recovery Service vault, stop the backup of each backup item. -Answer- " From the Recovery Service vault, stop the backup of each backup item. "You have an Azure virtual machine named VM1 that runs Windows Server 2019. You save VM1 as a template named Template1 to the Azure Resource Manager library. You plan to deploy a virtual machine named VM2 from Template1. What can you configure during the deployment of VM2? operating system administrator username virtual machine size resource group -Answer- " resource group "Your on-premises network contains an SMB share named Share1. You have an Azure subscription that contains the following resources: 1) A web app named webapp1 2)A virtual network named VNET1 3) You need to ensure that webapp1 can connect to Share1. 4) What should you deploy? -Answer- " "Azure Virtual Network Gateway.A Site-to-Site VPN gateway connection can be used to connect your on-premises network to an Azure virtual network over an IPsec/IKE (IKEv1 or IKEv2) VPN tunnel. This type of connection requires a VPN device, a VPN gateway, located on-premises that has an externally facing public IP address assigned to it. " You have an Azure subscription named Subscription1 that contains two Azure virtual networks named VNet1 and VNet2. VNet1 contains a VPN gateway named VPNGW1 that uses static routing. There is a site-to-site VPN connection between your onpremises network and VNet1. On a computer named Client1 that runs Windows 10, you configure a point-to-site VPN connection to VNet1. You configure virtual network peering between VNet1 and VNet2. You verify that you can connect to VNet2 from the on-premises network. Client1 is unable to connect to VNet2. You need to ensure that you can connect Client1 to VNet2. What should you do? -Answer- Download and reinstall the VPN client configuration package on Client1. You have a public load balancer that balances ports 80 and 443 across three virtual machines. You need to direct all the Remote Desktop Protocol (RDP) connections to VM3 only. What should you configure? 1) a new public load balancer for VM3 2) an inbound NAT rule 3) a frontend IP configuration 4)a load balancing rule, -Answer- 2) an inbound NAT rule. Port forwarding lets you connect to virtual machines (VMs) in an Azure virtual network by using an Azure Load Balancer public IP address and port number. To set up port forwarding on an Azure Load Balancer, you must create inbound NAT port-forwarding rules. "ou have an Azure subscription. Users access the resources in the subscription from either home or from customer sites. From home, users must establish a point-to-site VPN to access the Azure resources. The users on the customer sites access the Azure resources by using site-to-site VPNs. You have a line-of-business-app named App1 that runs on several Azure virtual machine. The virtual machines run Windows Server 2016. You need to ensure that the connections to App1 are spread across all the virtual machines. What are two possible Azure services that you can use? an internal load balancer a public load balancer an Azure Content Delivery Network (CDN) Traffic Manager an Azure Application Gateway -Answer- " "an internal load balancer an Azure Application Gateway " "You have 10 Azure virtual machines on a subnet named Subnet1. Subnet1 is on a virtual network named VNet1. You plan to deploy a public Azure Standard Load Balancer named LB1 to the same Azure region as the 10 virtual machines.You need to ensure that traffic from all the virtual machines to the internet flows through LB1. The solution must prevent the virtual machines from being accessible on the internet. Which three actions should you perform? Each correct answer presents part of the solution. Add health probes to LB1. Add the network interfaces of the virtual machines to the backend pool of LB1. Add an inbound rule to LB1. Add an outbound rule to LB1. Associate a network security group (NSG) to Subnet1. Associate a user-defined route to Subnet1. -Answer- " "Add the network interfaces of the virtual machines to the backend pool of LB1. Add an outbound rule to LB1. Associate a network security group (NSG) to Subnet1. " "You need to deploy an Azure virtual machine scale set that contains five instances as quickly as possible. What should you do? Deploy five virtual machines. Modify the Availability Zones settings for each virtual machine. Deploy five virtual machines. Modify the Size setting for each virtual machine. Deploy one virtual machine scale set that is set to VM (virtual machines) orchestration mode. Deploy one virtual machine scale set that is set to ScaleSetVM orchestration mode. - Answer- " Deploy one virtual machine scale set that is set to ScaleSetVM orchestration mode. "You have an Azure virtual network named VNet1 that connects to your on-premises network by using a site-to-site VPN. VNet1 contains one subnet named Sunet1. Subnet1 is associated to a network security group (NSG) named NSG1. Subnet1 contains a basic internal load balancer named ILB1. ILB1 has three Azure virtual machines in the backend pool. You need to collect data about the IP addresses that connects to ILB1. You must be able to run interactive queries from the Azure portal against the collected data. What should you do? Resource to create: An Azure Event Grid Resource to create: An Azure Log Analytics workspace Resource to create: An Azure Storage account Resource on which you enable diagnostics: ILB1 Resource on which you enable diagnostics: NSG1 Resource on which you enable diagnostics: Azure Virtual Machines -Answer- " "Resource to create: An Azure Log Analytics workspace Resource on which you enable diagnostics: ILB1 ""Your company has three offices. The offices are located in Miami, Los Angeles, and New York. Each office contains datacenter. You have an Azure subscription that contains resources in the East US and West US Azure regions. Each region contains a virtual network. The virtual networks are peered. You need to connect the datacenters to the subscription. The solution must minimize network latency between the datacenters. What should you create? three Azure Application Gateways and one On-premises data gateway two virtual hubs and one virtual WAN three virtual WANs and one virtual hub three On-premises data gateways and one Azure Application Gateway -Answer- " "two virtual hubs and one virtual WAN A virtual hub is a Microsoft-managed virtual network. The hub contains various service endpoints to enable connectivity. From your on-premises network (vpnsite), you can connect to a VPN Gateway inside the virtual hub, connect ExpressRoute circuits to a virtual hub, or even connect mobile users to a Point-to-site gateway in the virtual hub. " "You plan to deploy three Azure virtual machines named VM1, VM2, and VM3. The virtual machines will host a web app named App1. You need to ensure that at least two virtual machines are available if a single Azure datacenter becomes unavailable. What should you deploy? all three virtual machines in a single Availability Zone all virtual machines in a single Availability Set each virtual machine in a separate Availability Zone each virtual machine in a separate Availability Set -Answer- " "each virtual machine in a separate Availability Zone An Availability Zone is a high-availability offering that protects your applications and data from datacenter failures. Each zone is made up of one or more datacenters equipped with independent power, cooling, and networking. To ensure resiliency, there's a minimum of three separate zones in all enabled regions. " "You have an Azure subscription and an on-premises environment that is connected via ExpressRoute circuit. You have two additional branch offices that you need to connect to the network. You also have several remote employees that change locations frequently but still need access to Azure resources. What is the solution that will provide the quickest setup at the lowest cost? Point-to-Site VPN Site-to-Site VPN Virtual WAN Hub-and-Spoke Network Topology -Answer- " "Virtual WAN The Virtual WAN architecture is a hub and spoke architecture for branches and users. "You have an Azure web app named webapp1. Users report that they often experience HTTP 500 errors when they connect to webapp1. You need to provide the developers of webapp1 with real-time access to the connection errors. The solution must provide all the connection error details. What should you do first? -Answer- "From webapp1, enable Web server logging. Web server logging - Raw HTTP request data in the W3C extended log file format. Each log message includes data such as the HTTP method, resource URI, client IP, client port, user agent, response code, and so on. " "You need to create an Azure Storage account that meets the following requirements: Minimizes costs Supports hot, cool, and archive blob tiers Provides fault tolerance if a disaster affects the Azure region where the account resides How should you complete the command? az storage account create -n storageaccount1 -g RG1 --kind BlobStorage --sku Standard_GRS az storage account create -n storageaccount1 -g RG1 --kind Storage --sku Standard_GRS az storage account create -n storageaccount1 -g RG1 --kind StorageV2 --sku Standard_GRS az storage account create -n storageaccount1 -g RG1 --kind StorageV2 --sku Standard_LRS az storage account create -n storageaccount1 -g RG1 --kind StorageV2 --sku Standard_GAGRS -Answer- " az storage account create -n storageaccount1 -g RG1 -- kind StorageV2 --sku Standard_GRS "You have an Azure virtual machine named VM1 that runs Windows Server 2019. You sign in to VM1 as a user named User1 and perform the following actions: Create files on drive C. Create files on drive D. Modify the screen saver timeout. Change the desktop background. You plan to redeploy VM1. Which changes will be lost after you redeploy VM1? the modified screen saver timeout the new desktop background the new files on drive D the new files on drive C -Answer- " "the new files on drive D On Windows VMs the temporary disk is D: by default. " "VM1 is located in the East US region. You have added a premium SSD data disk to VM1, but the IOPS are not satisfying the needs of your application, how can you change the speed of the disk?Create a new disk and migrate the data Shut down (Deallocate) the VM Select the disk configuration and increase the size Export the disk and convert to VHD -Answer- " "Shut down (Deallocate) the VM Select the disk configuration and increase the size Premium disk performance increases based on the size of the disk, while standard disks have consistent performance for all disk sizes. " "How many times does Locally redundant storage (LRS) copy your data synchronously? 1 2 3 4 -Answer- " 3 "You have an on-premises virtual machine named VM1.