CertBlaze

Microsoft

AZ-104 Free Practice Questions — Page 9

Question 82

You have an Azure subscription. You plan to deploy the resources shown in the following table. You need to create a single Azure Resource Manager (ARM) template that will be used to deploy the resources. Which resource should be added to the dependsOn section for VM1?

A. VNET1
B. NIC1
C. IP1
D. NSG1
Show Answer
Correct Answer: B
Explanation:
An Azure virtual machine resource should explicitly depend on its network interface because the VM references the NIC during creation. The NIC, in turn, can depend on the virtual network, public IP, and network security group as needed. Therefore, the direct dependency for VM1 is NIC1.

Question 83

HOTSPOT - You purchase a new Azure subscription. You create an Azure Resource Manager (ARM) template named deploy.json as shown in the following exhibit. You connect to the subscription and run the following command. New-AzDeployment –Location westus –TemplateFile “deploy.json” For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Illustration for AZ-104 question 83 Illustration for AZ-104 question 83
Show Answer
Correct Answer: No No Yes
Explanation:
The copy loop creates two resource groups (RGS0 and RGS1), plus ResGrp8 and RGroup4 (the object has four top-level properties), for a total of four resource groups. The deployment location (westus) is only where the subscription deployment metadata is stored; all resource group locations defined in the template resolve to East US.

Question 84

You have an Azure subscription. The subscription contains 10 virtual machines that run Windows Server. Each virtual machine hosts a website in IIS and has the Azure Monitor Agent installed. You need to collect the IIS logs from each virtual machine and store them in a Log Analytics workspace. What should you configure first?

A. a data collection endpoint
B. an Azure Monitor Private Link Scope (AMPLS)
C. Diagnostic settings
D. VM insights
E. a private endpoint
Show Answer
Correct Answer: A
Explanation:
The correct choice is A. With the Azure Monitor Agent, collecting IIS logs from Windows VMs is configured through Data Collection Rules (DCRs). IIS logs are one of the data sources that require a Data Collection Endpoint (DCE) as the ingestion endpoint before configuring the DCR. Diagnostic settings are used for Azure resource platform logs and metrics, not guest IIS log files on VMs. VM Insights, AMPLS, and private endpoints are not the first required configuration for this scenario.

Question 85

You have an Azure subscription that has Traffic Analytics configured. You deploy a new virtual machine named VM1 that has the following settings: • Region: East US • Virtual network: VNet1 • NIC network security group: NSG1 You need to monitor VM1 traffic by using Traffic Analytics. Which settings should you configure?

A. Diagnostic settings for VM1
B. NSG flow logs for NSG1
C. Diagnostic settings for NSG1
D. Insights for VM1
Show Answer
Correct Answer: B
Explanation:
Traffic Analytics analyzes NSG flow logs (or virtual network flow logs). Since VM1 is associated with NSG1 at the NIC level, you must enable NSG flow logs for NSG1 so Traffic Analytics has traffic data to process. Diagnostic settings for the VM or NSG alone and VM Insights do not provide the required flow log data.

Question 87

You have an Azure subscription. The subscription contains virtual machines that run Windows Server. You have a data collection rule (DCR) named Rule1. You plan to use the Azure Monitor Agent to collect events from Windows System event logs. You only need to collect system events that have an ID of 1001. Which type of query should you use for the data source in Rule1?

A. SQL
B. XPath
C. KQL
Show Answer
Correct Answer: B
Explanation:
For Windows Event Logs collected by the Azure Monitor Agent, the Data Collection Rule (DCR) data source uses XPath queries (xPathQueries) to filter which events are collected. KQL is used to query data after ingestion in Log Analytics, not to define Windows event log collection filters. SQL is not applicable.

Question 88

HOTSPOT - You have an Azure subscription that contains the vaults shown in the following table. You deploy the virtual machines shown in the following table. You have the backup policies shown in the following table. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Illustration for AZ-104 question 88 Illustration for AZ-104 question 88 Illustration for AZ-104 question 88 Illustration for AZ-104 question 88
Show Answer
Correct Answer: Yes No No
Explanation:
VM1 can use a standard policy in the existing Recovery Services vault. Azure Backup vault policies do not back up Azure VMs, so Policy3 cannot back up VM2. Trusted Launch VMs require an Enhanced policy, but Policy2 is associated with Recovery2, which is not one of the existing vaults shown, so it cannot be used as given.

Question 89

You have an Azure subscription that contains an Azure Stream Analytics job named Job1. You need to monitor input events for Job1 to identify the number of events that were NOT processed. Which metric should you use?

A. Out-of-Order Events
B. Output Events
C. Late Input Events
D. Backlogged Input Events
Show Answer
Correct Answer: D
Explanation:
The correct metric is Backlogged Input Events. It reports the number of input events waiting to be processed, indicating events the job has not yet processed because it cannot keep up with incoming data. Out-of-Order Events and Late Input Events track specific timing conditions, while Output Events measures successfully written output events.

Question 90

HOTSPOT - You have an Azure subscription that contains the virtual networks shown in the following table. The subscription contains the subnets shown in the following table. The subscription contains the storage accounts shown in the following table. You create a service endpoint policy named Policy1 in the South Central US Azure region to allow connectivity to all the storage accounts in the subscription. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Illustration for AZ-104 question 90 Illustration for AZ-104 question 90 Illustration for AZ-104 question 90 Illustration for AZ-104 question 90
Show Answer
Correct Answer: Yes No No
Explanation:
Service endpoint policies can only be associated with virtual networks in the same region as the policy, so Policy1 can be applied to Subnet3 (South Central US). VNet2 is in a different region, so the policy cannot apply there; with a Storage service endpoint and no restricting policy, access is not limited to only storage1 and storage2. Policy1 explicitly allows all storage accounts, so it is false that only storage2 can be accessed from VNet3.

Question 91

HOTSPOT - You create a Recovery Services vault backup policy named Policy1 as shown in the following exhibit: Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

Illustration for AZ-104 question 91 Illustration for AZ-104 question 91
Show Answer
Correct Answer: 10 years 36 months
Explanation:
A backup matching multiple retention rules is kept for the longest applicable retention. March 1 matches the yearly rule (March 1) so it is retained for 10 years. November 1 matches the monthly rule (day 1 of every month) but not the yearly rule, so it is retained for 36 months.

Question 92

HOTSPOT - You have an Azure subscription. You plan to create a role definition to meet the following requirements: • Users must be able to view the configuration data of a storage account. • Users must be able to perform all actions on a virtual network. • The solution must use the principle of least privilege. What should you include in the role definition for each requirement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Illustration for AZ-104 question 92
Show Answer
Correct Answer: Perform all actions on a virtual network: Microsoft.Network/virtualNetworks/* View the configuration data of a storage account: Microsoft.Storage/storageAccounts/read
Explanation:
The wildcard (*) grants all virtual network operations, including read, write, and delete. To only view a storage account's configuration (management plane), the least-privilege permission is storageAccounts/read; blob read is for data plane, and storageAccounts/* grants excessive permissions.

$19

Get all 555 questions with detailed answers and explanations

  • Instant download HTML + PDF delivered the moment payment clears.
  • Secure Stripe checkout we never see or store your card details.
  • 7-day refund if files are defective see our refund policy.

Full AZ-104 study guide →