AZ-104 Examsfragen, AZ-104 Online Prüfungen

P.S. Kostenlose und neue AZ-104 Prüfungsfragen sind auf Google Drive freigegeben von ZertSoft verfügbar: https://drive.google.com/open?id=1_b5xoZSVGCNZT-o_0APG0djYi3TQ7C9g

Microsoft AZ-104 Dumps von ZertSoft sind ganz gleich wie die richtigen Zertifizierungsprüfungen. Die beinhalten alle Prüfungsfragen und Testantworten in aktueller Prüfung. Und die Software-Version simuliert die gleiche Atmosphäre der aktuellen Prüfungen. Bei der Nutzung der ZertSoft Dumps, können Sie ganz sorglos die Microsoft AZ-104 Prüfung ablegen und sehr gute Note bekommen.

Microsoft AZ-104 Exam Syllabus Topics:

Section	Weight	Objectives
Monitor and maintain Azure resources	10–15%	- Monitor resources and performance 1. Use Log Analytics and Kusto Query Language 2. Configure Azure Monitor and metrics 3. Create alerts and action groups - Maintain resource health and updates 1. Apply updates and patches 2. Analyze resource health and recommendations - Implement backup and recovery 1. Configure Azure Backup and Recovery Services vaults 2. Implement Azure Site Recovery
Manage Azure identities and governance	20–25%	- Manage Azure subscriptions and governance 1. Configure management groups and subscriptions 2. Manage costs and billing 3. Apply resource locks and tags 4. Implement and manage Azure Policy - Manage access to Azure resources 1. Interpret access assignments and permissions 2. Implement and manage role-based access control (RBAC) 3. Assign roles at different scopes - Manage Microsoft Entra users and groups 1. Create and configure users and groups 2. Configure self-service password reset 3. Manage licenses and external identities
Implement and manage virtual networking	15–20%	- Configure connectivity services 1. Implement Private Link and Endpoints 2. Configure Azure DNS and Private DNS 3. Implement VPN Gateway and ExpressRoute - Configure virtual networks 1. Create and configure VNet and subnets 2. Plan and configure IP addressing 3. Configure VNet peering and service endpoints - Monitor and troubleshoot networking 1. Use Network Watcher and diagnostic tools - Secure network access 1. Implement Azure Firewall and WAF 2. Configure network security groups (NSGs) 3. Configure application security groups
Implement and manage storage	15–20%	- Configure storage accounts 1. Choose replication and redundancy options 2. Create and configure storage accounts 3. Manage encryption and security settings - Configure access to storage 1. Implement identity-based access 2. Manage access keys and shared access signatures (SAS) 3. Configure firewalls and virtual network access - Manage data in storage 1. Use tools like AzCopy and Storage Explorer 2. Configure and use Azure Files 3. Configure and use Azure Blob Storage 4. Manage data lifecycle and protection
Deploy and manage Azure compute resources	20–25%	- Manage virtual machine scale sets 1. Configure scaling and management - Deploy and configure virtual machines 1. Configure high availability and scaling 2. Create and configure VMs 3. Manage VM extensions and images - Manage containerized workloads 1. Deploy and manage Azure Container Instances 2. Deploy and manage Azure Kubernetes Service - Automate deployment and configuration 1. Use Azure Automation and scripts 2. Deploy resources with ARM templates or Bicep

>> AZ-104 Examsfragen <<

AZ-104: Microsoft Azure Administrator Exam Dumps & PassGuide AZ-104 Examen

Die Microsoft AZ-104 Zertifizierungsunterlagen von ZertSoft sind unbedingt die Unterlagen für Microsoft AZ-104 Zertifizierungsprüfung, an der Sie glauben können. Falls Sie nicht glauben, probieren Sie bitte persönlich, dann können Sie diese Tatsachen wissen. Klicken Sie bitte die Demo von ZertSoft Website. PDF-Versionen und Software-Versionen sind beide vorhanden. Probieren Sie bitte zuerst. Sie können persönlich die Qualität der Microsoft AZ-104 Dumps überprüfen.

Microsoft Azure Administrator Exam AZ-104 Prüfungsfragen mit Lösungen (Q111-Q116):

111. Frage
You need to prepare the environment to meet the authentication requirements.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

A. Add http://autogon.microsoftazuread-sso.com to the intranet zone of each client computer in the Miami office.
B. Install the Active Directory Federation Services (AD FS) role on a domain controller in the Miami office.
C. Allow inbound TCP port 8080 to the domain controllers in the Miami office.
D. Install Azure AD Connect on a server in the Miami office and enable Pass-through Authentication.
E. Join the client computers in the Miami office to Azure AD.

Antwort: A,D

Begründung:
B: You can gradually roll out Seamless SSO to your users. You start by adding the following Azure AD URL to all or selected users' Intranet zone settings by using Group Policy in Active Directory: https://autologon.microsoftazuread-sso.com E: Seamless SSO works with any method of cloud authentication - Password Hash Synchronization or Pass-through Authentication, and can be enabled via Azure AD Connect.
References:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sso-quick-start
Topic 3, Contoso Ltd
Overview
Contoso, Ltd. is a manufacturing company that has offices worldwide. Contoso works with partner organizations to bring products to market.
Contoso products are manufactured by using blueprint files that the company authors and maintains.
Existing Environment
Currently, Contoso uses multiple types of servers for business operations, including the following:
* File servers
* Domain controllers
* Microsoft SQL Server servers
Your network contains an Active Directory forest named contoso.com. All servers and client computers are joined to Active Directory.
You have a public-facing application named App1. App1 is comprised of the following three tiers:
* A SQL database
* A web front end
* A processing middle tier
Each tier is comprised of five virtual machines. Users access the web front end by using HTTPS only.
Requirements
Planned Changes
Contoso plans to implement the following changes to the infrastructure:
Move all the tiers of App1 to Azure.
Move the existing product blueprint files to Azure Blob storage.
Create a hybrid directory to support an upcoming Microsoft Office 365 migration project.
Technical Requirements
Contoso must meet the following technical requirements:
* Move all the virtual machines for App1 to Azure.
* Minimize the number of open ports between the App1 tiers.
* Ensure that all the virtual machines for App1 are protected by backups.
* Copy the blueprint files to Azure over the Internet.
* Ensure that the blueprint files are stored in the archive storage tier.
* Ensure that partner access to the blueprint files is secured and temporary.
* Prevent user passwords or hashes of passwords from being stored in Azure.
* Use unmanaged standard storage for the hard disks of the virtual machines.
* Ensure that when users join devices to Azure Active Directory (Azure AD), the users use a mobile phone to verify their identity.
Minimize administrative effort whenever possible.
User Requirements
Contoso identifies the following requirements for users:
Ensure that only users who are part of a group named Pilot can join devices to Azure AD.
Designate a new user named Admin1 as the service administrator of the Azure subscription.
Ensure that a new user named User3 can create network objects for the Azure subscription.

112. Frage
You have an Azure subscription mat contains a virtual machine named VM1 and an Azure function named App1. You need to create an alert rule that will run App1 if VM1 stops. What should you create for the alert rule?

A. an action group
B. an application security group
C. a security group that has dynamic device membership
D. an application group

Antwort: A

Begründung:
Detailed Explanation
An Azure Monitor alert rule separates the condition (what triggers the alert, here a VM stop activity-log event) from the response (what happens when it fires), and the response is defined by an Action Group -- a reusable collection of notification and automated-action recipients that can include email/SMS, webhooks, Logic Apps, and specifically Azure Functions. To have App1 execute automatically when VM1 stops, the alert rule must reference an action group configured with an Azure Function action pointing to App1. A dynamic-membership security group and an application security group are Entra ID/networking constructs unrelated to alert response actions, and ' application group ' is not a valid Azure Monitor alerting construct.
An action group is therefore correct.
Official Reference
Create and manage action groups in Azure Monitor - https://learn.microsoft.com/en-us/azure/azure-monitor
/alerts/action-groups

113. Frage
You have an Azure subscription named Subscription1. Subscription1 contains two Azure virtual machines named VM1 and VM2. VM1 and VM2 run Windows Server 2016.
VM1 is backed up daily by Azure Backup without using the Azure Backup agent.
VM1 is affected by ransomware that encrypts data.
You need to restore the latest backup of VM1.
To which location can you restore the backup? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Antwort:

Begründung:

Reference:
https://docs.microsoft.com/en-us/azure/backup/backup-azure-arm-restore-vms
https://docs.microsoft.com/en-us/azure/backup/backup-azure-restore-files-from-vm#system-requirements

114. Frage
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure subscription that contains the following users in an Azure Active Directory tenant named contoso.onmicrosoft.com:

User1 creates a new Azure Active Directory tenant named external.contoso.onmicrosoft.com.
You need to create new user accounts in external.contoso.onmicrosoft.com.
Solution: You instruct User4 to create the user accounts.
Does that meet the goal?

A. yes
B. No

Antwort: B

Begründung:
Explanation
Only a global administrator can add users to this tenant.
Reference:
https://docs.microsoft.com/en-us/azure/devops/organizations/accounts/add-users-to-azure-ad

115. Frage
You have the Azure management groups shown in the following table.

You add Azure subscriptions to the management groups as shown in the following table.

You create the Azure policies shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Antwort:

Begründung:

Explanation:
Box 1: No
Virtual networks are not allowed at the root and is inherited. Deny overrides allowed.
Box 2: Yes
Virtual Machines can be created on a Management Group provided the user has the required RBAC permissions.
Box 3: Yes
Subscriptions can be moved between Management Groups provided the user has the required RBAC permissions.
Reference:
https://docs.microsoft.com/en-us/azure/governance/management-groups/overview
https://docs.microsoft.com/en-us/azure/governance/management-groups/manage#moving-management-groups-and-subscriptions

116. Frage
......

Sie haben einen großen Traum. Sie können viele Materialien zur Vorbereitung finden. Unsere Fragenkataloge zur Microsoft AZ-104 Zertifizierungsprüfung können Ihren Traum verwirklichen. Die Fragen und Antworten zur Microsoft AZ-104 Zertifizierungsprüfung von ZertSoft werden von den erfahrungsreichen IT-Fachleuten bearbeitet. Mit unseren Produkten können Sie alle Probleme versuchen. Wir würden Ihnen versprechen, dass die Kandidaten die realen Antworten 100% bekommen.

AZ-104 Online Prüfungen: https://www.zertsoft.com/AZ-104-pruefungsfragen.html

Laden Sie die neuesten ZertSoft AZ-104 PDF-Versionen von Prüfungsfragen kostenlos von Google Drive herunter: https://drive.google.com/open?id=1_b5xoZSVGCNZT-o_0APG0djYi3TQ7C9g