AZ-104: Microsoft Azure Administrator Exam Graded A

What Steps are involved in shipping data to Azure - ANSWER 1 - Prepare Hard drives 2 - Create import Job 3 - Ship drives to Az Dc 4 - Update Tracking 5 - Verify the data upload. Is IPV6 to IPV6 communication is s ...

What Steps are involved in shipping data to Azure - ANSWER 1 - Prepare Hard drives 2 - Create import Job 3 - Ship drives to Az Dc 4 - Update Tracking 5 - Verify the data upload. Is IPV6 to IPV6 communication is supported without load balancer? True or False - ANSWER True, to have ipv6 communitication between vnets you need and internal load balancer What effect is evaluated first in Azure Policy A- Append B- Disabled C- Deny D - Audit - ANSWER B - Disabled How do you enable auto scale on basic web app - ANSWER Change to standard Enable autscale create Scale rule When using az ad user create, what parameters are needed - ANSWER UPN, DisplayName and Password What is the restore period of an Azure AD user? A- 30 B- 60 c - 90 d - Can't restore - ANSWER A - 30 days What are actions and not actions - ANSWER actions = allowable permissions on Role definition Not acctions = Denied permissions How are NotActions used in a role definition? A - NotActions are subtracted from the Actions to define the list of permissible operations. B- NotActions are consulted after Actions to deny access to a specific operation. C - NotActions allow you to specify a single operation that is not allowed. - ANSWER A - NotActions are subtracted from the Actions to define the list of permissible operations. What tool would you use to monitor Subnets? - ANSWER Network security group (NSG) flow logging What Role is needed to manage access to Azure Resources? A - Co-administrator B - Owner C - User Access Administrator D - Contributor - ANSWER User Access Administrator Pubilc IP assigned to the Nic will take precedence over one on the Load balancer? True or False - ANSWER True How many SNAT ports allocated to a Load public IP address - ANSWER 1024 How is outbound Public traffic used on basic load balancers? - ANSWER All IPs took into consideration but one used. standard all are used at the same time What steps are involved in creating an Azure Bastion? - ANSWER 1) Create Subnet named Azure bastion subnet /27? 2)Create Bastion 3) Connect to VM1 using azure portal In Kubernetes can a POD share Managed Disks? Yes or No - ANSWER Yes Azure Files Main steps involved in Registering DNS with Azure - ANSWER Purchase from Registrar Configure Forward Lookup zone Point NS records to Azure DNS 5 steps to create Azure File Share in powershell - ANSWER New-StorageAccount - Create storage account Get-StorageAccountKeys - grab keys New-AzureStorageContext - login keys etc New-AzureStorageShare - create share CMDKEY - stores access keys New-PSDrive - maps drive When creating an Azure Bastion, What are the 3 main requirements? - ANSWER Subnet must be called AzureBastionSubnet and created first CIDR min /27 or larger Standard SKU static IP What are the minimum permissions for an Azure Bastion? - ANSWER Reader role on the VM Reader role on the NIC with private IP of the VM Reader role on Azure Bastion resource What can Azure AD role, User Administrator do? - ANSWER Manage all aspects of users and groups, including support tickets Monitoring service tickers resetting passwords What can Azure AD role, Billing Administrator do? - ANSWER make purchases manage subscriptions support ticket monitor service health. What command would you use to list permissions of a role? - ANSWER az role definition list --name Get-AzRoleDefinition A Basic IP SKU can support availability zones True or False - ANSWER False Name several services that don't work over Global vent peering - ANSWER VM behind Load balancers VMSS behind basic load balancers Redis cache Application gateway Logic Apps What security features does Azure DNS provide? - ANSWER RBAC Activity logs Resource locking We need to set up and DNS record to point to an Azure load-balancer which record will need to be created. A) Record Set B) A Record C) CNAME D) AAA - ANSWER A) Record Set Commands to create DNS record in AZ and PowerShell - ANSWER az network dns record-set New-AzDnsRecordSet -Name www -RecordType A -ZoneName contoso.xyz -ResourceGroupName MyResourceGroup -Ttl 3600 -DnsRecords (New-AzDnsRecordConfig -IPv4Address "10.10.10.10") What are the main Services tags (7) v a i a s s a - ANSWER Virtual Network AzureLoadBalancer Internet Azure Traffic Manager Storage SQL AppService How would you troubleshoot VPN connectivity? - ANSWER - enabled network watcher - Start VPN Logging - Check Security associations - Check on premise VPN External Devices What cmdlets are used to test network connectivity? - ANSWER Ge-AzEffectiveNetworksecgroup Test-AzNetworkWatcherIPFlow What cmdlet should you run if you are having issues with validation on purchases in the Azure portal? - ANSWER Set-AzMarketplaceTerms cmdlet With AZ Copy what access methods can you use to copy data into File Storage? - ANSWER SAS Keys only With AZ Copy what access methods can you use to copy data into Blob Storage? - ANSWER Azure AD and SAS keys What needs to be installed on a Virtual machine to be able to capture all network traffic? - ANSWER Network Watcher Agent VM Extension When using Network Performance Monitor (NPM) why is the OMS agent needed? - ANSWER Service Connection reliability Performance monitor Express Route Monitor What is IP Flow used for and the power shell command to run? - ANSWER Check if packets are allowed or denied on a NSG Test-AzNetworkWatcherIPFlow What is Connection Monitor used for and what PowerShell command is used? - ANSWER Check two VMs can communicate