Exam AZ-104: Microsoft Azure Administrator All Answers Correct

Document Content and Description Below

What Steps are involved in shipping data to Azure Ans- 1 - Prepare Hard drives 2 - Create import Job 3 - Ship drives to Az Dc 4 - Update Tracking 5 - Verify the data upload. Is IPV6 to IPV6 comm... unication is supported without load balancer? True or False Ans- True, to have ipv6 communitication between vnets you need and internal load balancer What effect is evaluated first in Azure Policy A- Append B- Disabled C- Deny D - Audit Ans- B - Disabled How do you enable auto scale on basic web app Ans- Change to standard Enable autscale create Scale rule When using az ad user create, what parameters are needed Ans- UPN, DisplayName and Password What is the restore period of an Azure AD user? A- 30 B- 60 c - 90 d - Can't restore Ans- A - 30 days What are actions and not actions Ans- actions = allowable permissions on Role definition Not acctions = Denied permissions How are NotActions used in a role definition? A - NotActions are subtracted from the Actions to define the list of permissible operations. B- NotActions are consulted after Actions to deny access to a specific operation. C - NotActions allow you to specify a single operation that is not allowed. Ans- A - NotActions are subtracted from the Actions to define the list of permissible operations. What tool would you use to monitor Subnets? Ans- Network security group (NSG) flow logging What Role is needed to manage access to Azure Resources? A - Co-administrator B - Owner C - User Access Administrator D - Contributor Ans- User Access Administrator Pubilc IP assigned to the Nic will take precedence over one on the Load balancer? True or False Ans- True How many SNAT ports allocated to a Load public IP address Ans- 1024 How is outbound Public traffic used on basic load balancers? Ans- All IPs took into consideration but one used. standard all are used at the same time What steps are involved in creating an Azure Bastion? Ans- 1) Create Subnet named Azure bastion subnet /27? 2)Create Bastion 3) Connect to VM1 using azure portal In Kubernetes can a POD share Managed Disks? Yes or No Ans- Yes Azure Files Main steps involved in Registering DNS with Azure Ans- Purchase from Registrar Configure Forward Lookup zone Point NS records to Azure DNS 5 steps to create Azure File Share in powershell Ans- New-StorageAccount - Create storage account Get-StorageAccountKeys - grab keys New-AzureStorageContext - login keys etc New-AzureStorageShare - create share CMDKEY - stores access keys New-PSDrive - maps drive When creating an Azure Bastion, What are the 3 main requirements? Ans- Subnet must be called AzureBastionSubnet and created first CIDR min /27 or larger Standard SKU static IP What are the minimum permissions for an Azure Bastion? Ans- Reader role on the VM Reader role on the NIC with private IP of the VM Reader role on Azure Bastion resource What can Azure AD role, User Administrator do? Ans- Manage all aspects of users and groups, including support tickets Monitoring service tickers resetting passwords What can Azure AD role, Billing Administrator do? Ans- make purchases manage subscriptions support ticket monitor service health. What command would you use to list permissions of a role? Ans- az role definition list --name Get-AzRoleDefinition A Basic IP SKU can support availability zones True or False Ans- False Name several services that don't work over Global vent peering Ans- VM behind Load balancers VMSS behind basic load balancers Redis cache Application gateway Logic Apps What security features does Azure DNS provide? Ans- RBAC Activity logs Resource locking We need to set up and DNS record to point to an Azure load-balancer which record will need to be created. A) Record Set B) A Record C) CNAME D) AAA Ans- A) Record Set Commands to create DNS record in AZ and PowerShell Ans- a [Show More]

Last updated: 2 years ago

Preview 1 out of 11 pages