BONUS!!! Download part of BraindumpsVCE AZ-104 dumps for free: https://drive.google.com/open?id=1elFz5vcNwLNHgtvCFfQeKekMqB1U3eru
Through BraindumpsVCE you can get the latest Microsoft certification AZ-104 exam practice questions and answers. Please purchase it earlier, it can help you pass your first time to participate in the Microsoft Certification AZ-104 Exam. Currently, BraindumpsVCE uniquely has the latest Microsoft certification AZ-104 exam exam practice questions and answers.
| Section | Weight | Objectives |
|---|---|---|
| Deploy and manage Azure compute resources | 20-25% | - Automate deployment of virtual machines (VMs) by using Azure Resource Manager templates
|
| Manage Azure identities and governance | 20-25% | - Manage Azure AD objects
|
| Implement and manage storage | 15-20% | - Configure Azure Files and Azure Blob Storage
|
| Monitor and maintain Azure resources | 10-15% | - Implement backup and recovery
|
| Implement and manage virtual networking | 15-20% | - Implement virtual networks
|
Our AZ-104 PDF format is also an effective format to do test preparation. In your spare time, you can easily use the AZ-104 dumps PDF file for study or revision. The PDF file of Microsoft AZ-104 real questions is convenient and manageable. These Microsoft AZ-104 Questions are also printable, giving you the option of paper study since some Microsoft AZ-104 applicants prefer off-screen preparation rather than on a screen.
NEW QUESTION # 381
You plan to deploy three Azure virtual machines named VM1, VM2, and VM3. The virtual machines will host a web app named App1.
You need to ensure that at least two virtual machines are available if a single Azure datacenter becomes unavailable.
What should you deploy?
Answer: B
Explanation:
Section: [none]
Explanation:
Use availability zones to protect from datacenter level failures.
Reference:
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/manage-availability
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/tutorial-availability-sets
NEW QUESTION # 382
You have an Azure subscription that contains a web app named webapp1. You need to add a custom domain named www.contoso.com to webapp1. What should you do first?
Answer: D
Explanation:
When configuring a custom domain for an Azure Web App (App Service) such as webapp1, the first prerequisite is to create and configure a corresponding DNS record that maps your custom domain name (www.contoso.com) to the Azure App Service's default domain (webapp1.azurewebsites.net).
According to Microsoft Azure App Service documentation:
"Before you can assign a custom domain name to your web app, you must first create a CNAME record in your DNS provider that maps your custom domain (for example, www.contoso.com) to your app's default domain name (webappname.azurewebsites.net)." This DNS record ensures that requests to the custom domain are routed correctly to Azure's front-end load balancer hosting your web app. Only after the DNS record has propagated can you validate and bind the domain to the web app in the Azure portal.
Uploading an SSL certificate is only required for HTTPS bindings after the domain is added. Stopping the app or adding connection strings is unrelated to domain configuration.
Therefore, the first step is to create a DNS record at your domain registrar that points to your web app.
NEW QUESTION # 383
Case Study 6 - ADatum Corporation
Overview
ADatum Corporation is consulting firm that has a main office in Montreal and branch offices in Seattle and New York.
Existing Environment
Azure Environment
ADatum has an Azure subscription that contains three resource groups named RG1, RG2, and RG3.
The subscription contains the storage accounts shown in the following table.
The subscription contains the virtual machines shown in the following table.
The subscription has an Azure container registry that contains the images shown in the following table.
The subscription contains the resources shown in the following table.
Azure Key Vault
The subscription contains an Azure key vault named Vault1.
Vault1 contains the certificates shown in the following table.
Vault1 contains the keys shown in the following table.
Microsoft Entra Environment
ADatum has a Microsoft Entra tenant named adatum.com that is linked to the Azure subscription and contains the users shown in the following table.
The tenant contains the groups shown in the following table.
The adatum.com tenant has a custom security attribute named Attribute1.
Planned Changes
ADatum plans to implement the following changes:
- Configure a data collection rule (DCR) named DCR1 to collect only system events that have an event ID of 4648 from VM2 and VM4.
- In storage1, create a new container named cont2 that has the following access policies:
o Three stored access policies named Stored1, Stored2, and Stored3
o A legal hold for immutable blob storage
- Whenever possible, use directories to organize storage account content.
- Grant User1 the permissions required to link Zone1 to VNet1.
- Assign Attribute1 to supported adatum.com resources.
- In storage2, create an encryption scope named Scope1.
- Deploy new containers by using Image1 or Image2.
Technical Requirements
ADatum must meet the following technical requirements:
- Use TLS for WebApp1.
- Follow the principle of least privilege.
- Grant permissions at the required scope only.
- Ensure that Scope1 is used to encrypt storage services.
- Use Azure Backup to back up cont1 and share1 as frequently as possible.
- Whenever possible, use Azure Disk Encryption and a key encryption key (KEK) to encrypt the virtual machines.
Hotspot Question
You implement the planned changes for cont2.
What is the maximum number of additional access policies you can create for cont2? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
In any case. the maximum number of stored access policies on a container is 5. Assuming stored1 through stored3 are already implemented, then you can only add 2 more.
You can have one legal hold and one time-based retention policy on a container in Azure blob storage. Assuming the legal hold policy is already set, you can only add the time-based retention policy.
NEW QUESTION # 384
You have an on-premises network that you plan to connect to Azure by using a site-to-site VPN.
In Azure, you have an Azure virtual network named VNet1 that uses an address space of 10.0.0.0/16. VNet1 contains a subnet named Subnet1 that uses an address space of 10.0.0.0/24.
You need to create a site-to-site VPN to Azure.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
NOTE: More than one order of answer choices is correct. You will receive credit for any of the correct orders you select.
Answer:
Explanation:
Explanation:
Note: More than one order of answer choices is correct.
Creating a local gateway (a logical object that represents the on-premise router) can be done at step 1, step 2 or step 3. The other three steps must be done in order: create gateway subnet then create VPN gateway then create the VPN connection. The VPN connection is a connection between the VPN gateway and the Local gateway.
NEW QUESTION # 385
You have an Azure subscription that contains the virtual machines shown in the following table.
VM1 and VM2 use public IP addresses. From Windows Server 2019 on VM1 and VM2, you allow inbound Remote Desktop connections.
Subnet1 and Subnet2 are in a virtual network named VNET1.
The subscription contains two network security groups (NSGs) named NSG1 and NSG2. NSG1 uses only the default rules.
NSG2 uses the default rules and the following custom incoming rule;
* Priority: 100
* Name: Rule1
* Port: 3389
* Protocol: TCP
* Source: Any
* Destination: Any
* Action: Allow
NSG1 is associated to Subnet! NSG2 is associated to the network interface of VM2.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 386
......
AZ-104certification exam questions have very high quality services in addition to their high quality and efficiency. If you use AZ-104test prep, you will have a very enjoyable experience while improving your ability. We have always advocated customer first. If you use our AZ-104 Learning Materials to achieve your goals, we will be honored. And our AZ-104 pdf files give you more efficient learning efficiency and allows you to achieve the best results in a limited time. Our AZ-104 pdf files are the best exam tool that you have to choose.
AZ-104 Test Collection: https://www.braindumpsvce.com/AZ-104_exam-dumps-torrent.html
BTW, DOWNLOAD part of BraindumpsVCE AZ-104 dumps from Cloud Storage: https://drive.google.com/open?id=1elFz5vcNwLNHgtvCFfQeKekMqB1U3eru