P.S. Free & New AZ-104 dumps are available on Google Drive shared by PDF4Test: https://drive.google.com/open?id=1-JJS5g25D5wj9VPdwHd_96QXTuQyrYdM
Our AZ-104 practice braindumps have striking achievements up to now with passing rate up to 98-100 percent. Because we clearly understand your exam hinge on the quality of our AZ-104 exam prep. So we understand your worries. Some immoral companies’ may cash in on you at this moment by making use of your worries. On the contrary, we admire your willpower and willing to offer the most sincere help. To have our AZ-104 study engjne, this decision of you may bring stinking achievements in the future.
| Section | Weight | Objectives |
|---|---|---|
| Topic 1: Implement and manage storage | 15-20% | - Manage data in Azure Storage - Configure Azure Files and Blob storage - Configure Azure Storage accounts |
| Topic 2: Deploy and manage Azure compute resources | 20-25% | - Configure App Services - Configure and manage virtual machines - Manage containers in Azure |
| Topic 3: Monitor and maintain Azure resources | 10-15% | - Troubleshoot resources - Monitor resources using Azure Monitor - Implement backup and recovery |
| Topic 4: Configure and manage virtual networking | 25-30% | - Configure virtual networks - Configure load balancing and traffic routing - Configure network security |
| Topic 5: Manage Azure identities and governance | 15-20% | - Manage Microsoft Entra ID objects and roles - Manage subscriptions and governance - Manage Azure policy and RBAC |
>> New Braindumps AZ-104 Book <<
There is no shortcut to Microsoft AZ-104 exam questions success except hard work. You cannot expect your dream of earning the Microsoft Azure Administrator Exam CERTIFICATION EXAM come true without using updated study material Microsoft Azure Administrator Exam (AZ-104) exam questions. Success in the AZ-104 exam adds more value to your resume and helps you land the best jobs in the industry.
NEW QUESTION # 225
Your network contains an Active Directory domain named adatum.com and an Azure Active Directory (Azure AD) tenant named adatum.onmicrosoft.com.
Adatum.com contains the user accounts in the following table.
Adatum.onmicrosoft.com contains the user accounts in the following table.
You need to implement Azure AD Connect. The solution must follow the principle of least privilege.
Which user accounts should you use? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 226
You have an Azure virtual machine named VM1.
The network interface for VM1 is configured as shown in the exhibit. (Click the Exhibit tab.)
You deploy a web server on VM1, and then create a secure website that is accessible by using the HTTPS protocol VM1 is used as a web server only.
You need to ensure that users can connect to the website from the Internet.
What should you do?
Answer: E
Explanation:
HTTPS uses port 443.
Rule2, with priority 500, denies HTTPS traffic.
Rule5, with priority changed from 2000 to 401, would allow HTTPS traffic.
Note: Priority is a number between 100 and 4096. Rules are processed in priority order, with lower numbers processed before higher numbers, because lower numbers have higher priority. Once traffic matches a rule, processing stops. As a result, any rules that exist with lower priorities (higher numbers) that have the same attributes as rules with higher priorities are not processed.
Reference:
https://docs.microsoft.com/en-us/azure/virtual-network/network-security-groups-overview
NEW QUESTION # 227
You have an Azure subscription named Subscription1.
In Subscription1, you create an Azure web app named WebApp1. WebApp1 will access an external service that requires certificate authentication.
You plan to require the use of HTTPS to access WebApp1.
You need to upload certificates to WebApp1.
In which formats should you upload the certificate? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
A PFX file contains the public key file (SSL Certificate) and its unique private key file. This is required for HTTPS access. The web app will distribute the public key (in a CER file) to clients that connect to the web app.
The CER file is an SSL Certificate which has the public key of the external service. The external service will have the private key associated with the public key contained in the CER file.
NEW QUESTION # 228
Case Study 5 - Contoso, Ltd
Overview
General Overview
Contoso, Ltd. is a consulting company that has a main office in Montreal and branch offices in Seattle and New York.
Environment
Existing Environment
Contoso has an Azure subscription named Sub1 that is linked to an Azure Active Directory (Azure AD) tenant. The network contains an on-premises Active Directory domain that syncs to the Azure AD tenant.
The Azure AD tenant contains the users shown in the following table.
Sub1 contains two resource groups named RG1 and RG2 and the virtual networks shown in the following table.
User1 manages the resources in RG1. User4 manages the resources in RG2.
Sub1 contains virtual machines that run Windows Server 2019 as shown in the following table
No network security groups (NSGs) are associated to the network interfaces or the subnets.
Sub1 contains the storage accounts shown in the following table.
Requirements
Planned Changes
Contoso plans to implement the following changes:
Create a blob container named container1 and a file share named share1 that will use the Cool
storage tier.
Create a storage account named storage5 and configure storage replication for the Blob
service.
Create an NSG named NSG1 that will have the custom inbound security rules shown in the
following table.
Associate NSG1 to the network interface of VM1.
Create an NSG named NSG2 that will have the custom outbound security rules shown in the
following table.
Associate NSG2 to VNET1/Subnet2.
Technical Requirements
Contoso must meet the following technical requirements:
Create container1 and share1.
Use the principle of least privilege.
Create an Azure AD security group named Group4.
Back up the Azure file shares and virtual machines by using Azure Backup.
Trigger an alert if VM1 or VM2 has less than 20 GB of free space on volume C.
Enable User1 to create Azure policy definitions and User2 to assign Azure policies to RG1.
Create an internal Basic Azure Load Balancer named LB1 and connect the load balancer to
VNET1/Subnet1
Enable flow logging for IP traffic from VM5 and retain the flow logs for a period of eight months.
Whenever possible, grant Group4 Azure role-based access control (Azure RBAC) read-only
permissions to the Azure file shares.
Hotspot Question
You implement the planned changes for NSG1 and NSG2.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Box 1: Yes
VM1 has inbound rules, so no restriction on outbound.
Box 2: Yes
VM2 has outbound rules, so no restrictions on inbound.
Box 3: No
VM2 has outbound RDP rule to Deny from 10.0.0.0/16 to any VNET.
Reference:
https://docs.microsoft.com/en-us/azure/virtual-network/network-security-group-how-it-works
NEW QUESTION # 229
You have an Azure virtual machine that runs Windows Server 2019 and has the following configurations:
Name: VM1
Location: West US
Connected to: VNET1
Private IP address: 10.1.0.4
Public IP address: 52.186.85.63
DNS suffix in Windows Server: Adatum.com
You create the Azure DNS zones shown in the following table.
You need to identify which DNS zones you can link to VNET1 and the DNS zones to which VM1 can automatically register.
Which zones should you identify? To answer, select the appropriate options in the answer area.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/dns/private-dns-overview
NEW QUESTION # 230
......
Desktop Microsoft AZ-104 Practice Exam Software is a one-of-a-kind and very effective software developed to assist applicants in preparing for the Microsoft AZ-104 certification test. The Desktop Microsoft AZ-104 Practice Exam Software that we provide includes a self-assessment feature that enables you to test your knowledge by taking simulated tests and evaluating the results.
Practice AZ-104 Test: https://www.pdf4test.com/AZ-104-dump-torrent.html
BTW, DOWNLOAD part of PDF4Test AZ-104 dumps from Cloud Storage: https://drive.google.com/open?id=1-JJS5g25D5wj9VPdwHd_96QXTuQyrYdM