CertBlaze

Microsoft

AZ-104 Free Practice Questions — Page 25

Question 253

HOTSPOT - You have an Azure subscription that has diagnostic logging enabled and is configured to send logs to a Log Analytics workspace. You are investigating a service outage. You need to view the event time, the event name, and the affected resources. How should you complete the query? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

Illustration for AZ-104 question 253
Show Answer
Correct Answer: AzureActivity project
Explanation:
Use the AzureActivity table for subscription activity logs. Filtering with `where Level == 'Critical'` and then `project TimeGenerated, OperationNameValue, _ResourceId` returns the event time, event name, and affected resource.

Question 254

HOTSPOT - You configure the custom role shown in the following exhibit. Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point. Hot Area:

Illustration for AZ-104 question 254 Illustration for AZ-104 question 254
Show Answer
Correct Answer: dataActions assignableScopes
Explanation:
VM sign-in permission (Microsoft.Compute/virtualMachines/login/action or loginAsAdmin/action) is defined as a DataAction in Azure RBAC built-in VM login roles. Limiting where a custom role can be assigned is controlled by assignableScopes, so scope it to the RG1 resource group.

Question 255

You have an Azure Subscription that contains a storage account named storageacct1234 and two users named User1 and User2. You assign User1 the roles shown in the following exhibit. Which two actions can User1 perform? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

A. Assign roles to User2 for storageacct1234.
B. Upload blob data to storageacct1234.
C. Modify the firewall of storageacct1234.
D. View blob data in storageacct1234.
E. View file shares in storageacct1234.
Show Answer
Correct Answer: B, D
Explanation:
User1 has the Storage Blob Data Contributor role, which grants read/write/delete access to blob data, including uploading blobs. User1 also has the Reader role, which provides management-plane read access needed to navigate the storage account in the Azure portal. Together these roles allow viewing blob data in the portal. Reader alone does not grant permission to modify storage account settings, assign RBAC roles, or access Azure Files data.

Question 256

HOTSPOT - You have two Azure virtual machines as shown in the following table. You create the Azure DNS zones shown in the following table. You perform the following actions: ✑ ׀¢׀¾ fabrikam.com, you add a virtual network link to vnet1 and enable auto registration. ✑ For contoso.com, you assign vm1 and vm2 the Owner role. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:

Illustration for AZ-104 question 256 Illustration for AZ-104 question 256 Illustration for AZ-104 question 256
Show Answer
Correct Answer: No Yes Yes
Explanation:
Auto-registration applies only to the linked Azure Private DNS zone and registers VMs using their private IPs. Assigning the Owner role on a public DNS zone does not automatically create A records. Both VMs in the linked virtual network are auto-registered in the private zone, including the Linux VM.

Question 257

You plan to create the Azure web apps shown in the following table. What is the minimum number of App Service plans you should create for the web apps?

A. 1
B. 2
C. 3
D. 4
Show Answer
Correct Answer: B
Explanation:
An App Service plan is tied to a single operating system. ASP.NET .NET Framework (v4.7) requires Windows, while Ruby App Service runtime is Linux-only in the context of this exam. .NET Core and PHP can be placed on either supported OS. Therefore, the minimum is one Windows App Service plan and one Linux App Service plan.

Question 258

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure Active Directory (Azure AD) tenant named contoso.com. You have a CSV file that contains the names and email addresses of 500 external users. You need to create a guest user account in contoso.com for each of the 500 external users. Solution: You create a PowerShell script that runs the New-AzureADMSInvitation cmdlet for each external user. Does this meet the goal?

A. Yes
B. No
Show Answer
Correct Answer: A
Explanation:
New-AzureADMSInvitation is the Azure AD PowerShell cmdlet used to invite external users, which creates guest user accounts in the tenant. Running it in a loop for each entry in the CSV meets the requirement to create guest accounts for all 500 external users. Although the AzureAD module is deprecated in favor of Microsoft Graph (New-MgInvitation), the described solution satisfies the goal.

Question 259

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure Active Directory (Azure AD) tenant named contoso.com. You have a CSV file that contains the names and email addresses of 500 external users. You need to create a guest user account in contoso.com for each of the 500 external users. Solution: From Azure AD in the Azure portal, you use the Bulk create user operation. Does this meet the goal?

A. Yes
B. No
Show Answer
Correct Answer: B
Explanation:
The Bulk create user operation is intended for creating member users in the Azure AD tenant, not guest users. To add external users as guests in bulk, you should use the Bulk invite users feature (or the invitation APIs/cmdlets such as New-MgInvitation/New-AzureADMSInvitation), which creates guest accounts through Azure AD B2B invitations.

Question 261

You have an on-premises network that contains a database server named dbserver1. You have an Azure subscription. You plan to deploy three Azure virtual machines. Each virtual machine will be deployed to a separate availability zone. You need to configure an Azure VPN gateway for a site-to-site VPN. The solution must ensure that the virtual machines can connect to dbserver1. Which type of public IP address SKU and assignment should you use for the gateway?

A. a basic SKU and a static IP address assignment
B. a standard SKU and a static IP address assignment
C. a basic SKU and a dynamic IP address assignment
Show Answer
Correct Answer: B
Explanation:
Availability zone-aware VPN gateway deployments use the AZ gateway SKUs, which require a Standard SKU public IP address. Standard public IPs for VPN gateways use a static assignment. Therefore, to support a site-to-site VPN with zone-based deployment requirements, the correct choice is a Standard SKU with a static IP address assignment.

Question 262

You have an Azure subscription named Subscription1 that contains an Azure Log Analytics workspace named Workspace1. You need to view the error events from a table named Event. Which query should you run in Workspace1?

A. search in (Event) "error"
B. Event | where EventType is "error"
C. select * from Event where EventType == "error"
D. Get-Event Event | where {$_.EventType == "error"}
Show Answer
Correct Answer: A
Explanation:
Azure Log Analytics uses Kusto Query Language. Option B is invalid as written because `is` is not a valid equality operator in KQL (it should be `==` if filtering a column). Option C is SQL syntax, and option D is PowerShell. Option A is valid KQL search syntax that searches within the Event table for the term "error".

Question 263

HOTSPOT - You have an Azure subscription. The subscription contains a virtual machine that runs Windows 10. You need to join the virtual machine to an Active Directory domain. How should you complete the Azure Resource Manager (ARM) template? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

Illustration for AZ-104 question 263
Show Answer
Correct Answer: Microsoft.Compute/virtualMachines/extensions protectedSettings
Explanation:
To join an Azure VM to an Active Directory domain using the JsonADDomainExtension, the ARM resource type is Microsoft.Compute/virtualMachines/extensions, and the domain join password must be supplied under protectedSettings.

$19

Get all 555 questions with detailed answers and explanations

  • Instant download HTML + PDF delivered the moment payment clears.
  • Secure Stripe checkout we never see or store your card details.
  • 7-day refund if files are defective see our refund policy.

Full AZ-104 study guide →