AZ-104: Alan Rodrigues Course

Your company has an Azure virtual network that has an address space of 10.0.0.0/16. The network has a subnet named SubnetA with an address space of 10.0.0.0/24. You have to configure a Site-to-Site VPN connection between an on-premises network and the Azure virtual network. Which of the following steps need to be implemented for this requirement? Choose 4 answers from the options given below

- Create a local network gateway - Create a virtual network gateway - Create a gateway subnet - Create the VPN connection

Your company has an Azure Storage Account and a file share in the storage account. They want to synchronize files between the file share and an on-premises server. Which of the following needs to be implemented for this requirement? Choose 3 answers from the options given below

- Create a sync group - Register the on-premises server - Install the Azure File Sync agent on the server

You have to deploy a set of four Azure virtual machines. Each machine will have a public and a private IP address. Each machine will need the same set of Inbound and Outbound rules. What is the minimum number of network security groups required for this implementation?

1

Your company has the following Azure virtual machines defined as part of their Azure subscription. vm1 - 10.0.0.4 vm2 - 10.0.0.5 Both virtual machines are part of a subnet named SubnetA. The subnet is part of a virtual network named app-network. You have to ensure that a ping request can be sent from appvm1 to appvm2. You need to add a Network Security Group Rule accordingly. The solution must use the principle of least privilege. Which of the following would you set as the source for the rule?

10.0.0.4 - Here appvm2 needs to receive the request from appvm1. Hence the private IP address of appvm1 needs to be set as the source.

You have to create an alert in Azure Monitor. You have to create an Action Group that would be used to send email messages and SMS messages. What is the maximum number of SMS messages that will be sent an hour if the alert gets triggered every minute?

12

You have to deploy a set of four Azure virtual machines. Each machine will have a public and a private IP address. Each machine will need the same set of Inbound and Outbound rules. What is the minimum number of network interfaces required for this implementation?

4

You have to create an alert in Azure Monitor. You have to create an Action Group that would be used to send email messages and SMS messages. What is the maximum number of email messages that will be sent an hour if the alert gets triggered every minute?

60

You have an Azure virtual machine. You need to enable backups for the Azure virtual machine. The backups need to be taken at 2:00 every day. The backups need to be stored for 30 days. Which of the following needs to be configured to fulfil the requirements of "The backups need to be taken at 2:00 every day. The backups need to be stored for 30 days."

A backup policy

What is needed to have VM's in separate virutal networks connect with each other?

A peering connection.

Your company has an Azure subscription and an Azure AD tenant. The company has several office locations. They want to assign permissions to the administrator assigned for each office. The administrator will be responsible for managing users. Which of the following can be used when granting the required permissions?

Administrative Units

Your company has a set of Azure virtual machines. The virtual machines are used by several departments. The virtual machines are part of a resource group named app-grp. You have to link each virtual machine to the department that is making use of that machine. Which of the following can you configure for this requirement?

Assign resource tags to the Azure virtual machines

Your team needs to deploy an Azure Kubernetes cluster. It needs to be ensured that applications can connect to the pods deployed to the cluster via the IP addresses assigned to the pod. Which of the following network type would you choose for the cluster?

Azure Container Networking Interface - In order for each pod to get it's own IP address

Your company has set an Azure subscription. They want to transfer 40 TB of data onto an Azure Storage Account. The transfer should not have an impact on the company's existing network. It should be the fastest and the most secure way of transferring of data. Which of the following can be used for this requirement?

Azure DataBox - When you want to transfer data greater than 30 TB, its ideal to use the Azure DataBox service

Which of the following tool can be used to monitor the latency between the machines in your Azure subscription and those in your on-premises network?

Azure Network Watcher - Connection Monitor

You have an Azure virtual machine. You need to enable backups for the Azure virtual machine. The backups need to be taken at 2:00 every day. The backups need to be stored for 30 days. Which of the following needs to be in place for storage of the backups?

Azure Recovery Services Vault

They have deployed an Azure Load Balancer that needs to load balance traffic across appvm1 and appvm2. Which of the following needs to be configured in the load balancer before adding the load balancing rule?

Backend pool Health Probe

Your company has an Azure subscription and an Azure AD tenant. They want to make use of Azure Conditional Access Policies. They have setup the appropriate licenses to use this feature. They want to ensure that users of an Administrators Group go through the process of Multi-Factor Authentication when they connect to Azure AD from untrusted locations. Which of the following would you configure to ensure the setting is applied for untrusted locations?

Conditions

Your company has created an Azure public DNS zone named cloudportalhub.com. They also have the domain name registered as part of an external domain registrar. They want to ensure that records from the Internet get routed to their Azure DNS zone. Which of the following must they do for this requirement?

Modify the NS records in the external domain registrar

Your company has an Azure virtual network. The network has a Site-to-Site VPN connection between an on-premises network. You discover that users are able to establish RDP connections from the Internet onto the Azure virtual machines hosted in the Azure virtual network. You need to ensure that connections to the Azure virtual machines can only be established from workstations located in the on-premises location. Which of the following can be implemented for this requirement?

Modify the Network Security Group rules linked to the Subnet that is hosting the virtual machines

Can you add a resource lock at a Management Group Level?

No

Can you add a resource lock to Tenant Root Group?

No

The storage account has a container named "data" and a table named "customer" Can you create a new storage account via the use of Azure Storage Explorer?

No

Your company has a set of Azure virtual machines named appvm1 and appvm2. The machines are independent machines that are part of an Azure virtual network named app-network. You deploy an Azure Load Balancer of the Basic SKU in the same region as the Azure virtual machines. Can the Azure Load Balancer be used to load balance traffic between appvm1 and appvm2?

No

Your company has an Azure virtual machine named appvm that is deployed to a resource group named app-grp. The resource group is part of an Azure subscription named app-subscription. The subscription is part of a Management Group named app-management. The Management Group is part of the Tenant Root Group. You need to assign an Azure Policy. Can you assign the Azure Policy at the virtual machine Level?

No - The maximum level you can go till when it comes to assigning the Azure Policy is the Resource Group level.

appstore200 - General Purpose V2 Can you create a premium file share in appstore200?

No - You can only create Premium files shares in the FileStorage account.

You need to assign the IP address to a Standard Load Balancer deployed to the same region and resource group as the IP addresses defined in the table. app-ip2: - IP version: IPv4 - SKU: Basic - IP address assignment: Dynamic Can you assign app-ip2 to the Load Balancer?

No - You cannot assign a Basic SKU IP address to a Standard Load Balancer

appstore100 - General Purpose V1 Can you make use of access tiers for appstore100?

No - access tiers are only supported in General Purpose V2 storage accounts.

A container image named app-image has been created on a developer's machine. The image needs to be deployed as a container onto the cluster. Which of the following must you do first for this requirement?

Push the application image to the container registry - First push the application image to the container registry. Then you can deploy the container on the cluster based on the image stored in the container registry.

Your company needs to setup an Azure Storage account. Below are the key requirements for the storage account 1) Be able to store data in separate geographic locations. 2) You should be able to read the data from the secondary and primary location Which of the following would you choose as the redundancy option for the Azure storage account?

Read-access geo-redundant storage

Your company currently has an Azure Web App that is part of a Basic App Service Plan. They want to enable custom domains and Backups for the Azure Web App. Which of the following needs to be first for achieving these requirements?

Scale up the App Service Plan

You need to deploy an Azure virtual machine based on a template that is stored in the Azure Resource Manager Library. Which of the following can you configure during the deployment of the template?

The resource group

You need to use the Bulk feature in Azure Active Directory to delete a set of users. Which of the following needs to be specified for each user for the Bulk delete operation?

The user principal name only

You have to create Azure virtual machines that need to be added to the backend pool of the load balancers. Which of the following needs to be considered when deploying virtual machines that need to be added to app-balancer2?

They need to be part of the same virtual network

Your team has a web application running in an Azure Web App. You have to understand the details of the HTTP errors that are faced when connections are made to the web app. Which of the following can be implemented for this requirement?

Turn on Web Server logging for the Azure Web App

Your company wants to setup an Azure Application Gateway. They have setup virtual machines that are going to be part of separate backend pools. You have to ensure that requests to the Application Gateway on https://cloudportalhub.com/images is redirected to one backend pool and requests to https://cloudportalhub.com/videos is redirected to another backend pool. Which of the following needs to be configured on the Application Gateway for this requirement?

URL Path-based routing

You have deployed an Azure Kubernetes cluster. You have to deploy a YAML file to the cluster. Which of the following can be used for this requirement?

Use the kubectl client tool to deploy the YAML file to the cluster

Your company has a set of resources deployed as part of their subscription. Some of the resources include the following appvm is deployed to app-network and contains a database workload. There is no access to appdb from the Internet. You have to ensure that webapp can access the database hosted on appvm. Which of the following can be implemented for this requirement?

VNET Integration for the Web App

A storage account named appstore1000 is a part of a resource named app-grp. app-grp is created under Azure subscription1. Can you add a resource lock to Azure subscription1?

Yes

Your company has a set of Azure virtual machines named appvm1 and appvm2. They are part of an availability set named appset. You deploy an Azure Load Balancer of the Basic SKU in the same region as the Azure virtual machines. Can the Azure Load Balancer be used to load balance traffic between appvm1 and appvm2?

Yes

Your company has an Azure Web App named newapp1000. A deployment slot has been created for the Web App named "staging". You perform a swap of the staging and the production slot. Is the setting for Web sockets swapped between the staging and the production slot?

Yes

Your company has an Azure virtual machine named appvm that is deployed to a resource group named app-grp. The resource group is part of an Azure subscription named app-subscription. The subscription is part of a Management Group named app-management. The Management Group is part of the Tenant Root Group. You need to assign an Azure Policy. Can you assign the Azure Policy at the Tenant Root Group Level?

Yes - When assigning an Azure Policy, you can assign it at the Tenant Root Group level

You need to assign the IP address to a Standard Load Balancer deployed to the same region and resource group as the IP addresses defined in the table. app-ip3: - IP version: IPv4 - SKU: Standard - IP address assignment: Dynamic Can you assign app-ip2 to the Load Balancer?

Yes - You can assign a Basic SKU IP address to a Standard Load Balancer

appstore200 - General Purpose V2 Can you make use of access tiers for appstore200?

Yes - access tiers are supported in General Purpose V2 storage accounts

appstore400 - FileStorage Can you create a premium file share in appstore400?

Yes - you can create a premium file share in this type of storage account

You perform a reverse DNS lookup for appvm. Which of the following will be the output as the FQDN?

appvm.internal.cloudapp.net