さらに、MogiExam AZ-104ダンプの一部が現在無料で提供されています：https://drive.google.com/open?id=14H49w-QbyBicQt6Ly6YMba68CYPPwLdf
AZ-104クイズガイドは、毎年の質問の調査と分析を通じて、多くの隠れたルールを調査する価値があることがわかりました。さらに、強力な専門家チームがあるため、ルールを要約して使用できます。 AZ-104トレントの準備は、毎年の質問の分析に基づいて行うことができ、近年の関連知識と組み合わせて、資格試験に関連する一連の重要な結論が結論付けられます。 AZ-104テスト資料は、今年のトピックと提案の傾向を正確に予測する能力を向上させ、AZ-104試験に合格するのに役立ちます。
| Section | Weight | Objectives |
|---|---|---|
| Topic 1: Manage Azure identities and governance | 20–25% | - Manage Microsoft Entra users and groups
|
| Topic 2: Implement and manage virtual networking | 15–20% | - Secure network access
|
| Topic 3: Deploy and manage Azure compute resources | 20–25% | - Automate deployment and configuration
|
| Topic 4: Implement and manage storage | 15–20% | - Configure storage accounts
|
| Topic 5: Monitor and maintain Azure resources | 10–15% | - Monitor resources and performance
|
AZ-104認定試験はたいへん難しい試験ですね。しかし、難しい試験といっても、試験を申し込んで受験する人が多くいます。なぜかと言うと、もちろんAZ-104認定試験がとても大切な試験ですから。IT職員の皆さんにとって、この試験のAZ-104認証資格を持っていないならちょっと大変ですね。この認証資格はあなたの仕事にたくさんのメリットを与えられ、あなたの昇進にも助けになることができます。とにかく、これは皆さんのキャリアに大きな影響をもたらせる試験です。こんなに重要な試験ですから、あなたも受験したいでしょう。
質問 # 37
You have an Azure subscription that contains the users shown in the following table.
The groups are configured as shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.
正解：
解説：
質問 # 38
Case Study 5 - Contoso, Ltd
Overview
General Overview
Contoso, Ltd. is a consulting company that has a main office in Montreal and branch offices in Seattle and New York.
Environment
Existing Environment
Contoso has an Azure subscription named Sub1 that is linked to an Azure Active Directory (Azure AD) tenant. The network contains an on-premises Active Directory domain that syncs to the Azure AD tenant.
The Azure AD tenant contains the users shown in the following table.
Sub1 contains two resource groups named RG1 and RG2 and the virtual networks shown in the following table.
User1 manages the resources in RG1. User4 manages the resources in RG2.
Sub1 contains virtual machines that run Windows Server 2019 as shown in the following table
No network security groups (NSGs) are associated to the network interfaces or the subnets.
Sub1 contains the storage accounts shown in the following table.
Requirements
Planned Changes
Contoso plans to implement the following changes:
Create a blob container named container1 and a file share named share1 that will use the Cool
storage tier.
Create a storage account named storage5 and configure storage replication for the Blob
service.
Create an NSG named NSG1 that will have the custom inbound security rules shown in the
following table.
Associate NSG1 to the network interface of VM1.
Create an NSG named NSG2 that will have the custom outbound security rules shown in the
following table.
Associate NSG2 to VNET1/Subnet2.
Technical Requirements
Contoso must meet the following technical requirements:
Create container1 and share1.
Use the principle of least privilege.
Create an Azure AD security group named Group4.
Back up the Azure file shares and virtual machines by using Azure Backup.
Trigger an alert if VM1 or VM2 has less than 20 GB of free space on volume C.
Enable User1 to create Azure policy definitions and User2 to assign Azure policies to RG1.
Create an internal Basic Azure Load Balancer named LB1 and connect the load balancer to
VNET1/Subnet1
Enable flow logging for IP traffic from VM5 and retain the flow logs for a period of eight months.
Whenever possible, grant Group4 Azure role-based access control (Azure RBAC) read-only
permissions to the Azure file shares.
Hotspot Question
You need to ensure that User1 can create initiative definitions, and User4 can assign initiatives to RG2. The solution must meet the technical requirements.
Which role should you assign to each user? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
正解：
解説：
Explanation:
Many Built-in roles grant permission to Azure Policy resources. The Resource Policy Contributor role includes most Azure Policy operations. Owner has full rights. Both Contributor and Reader have access to all read Azure Policy operations. Contributor may trigger resource remediation, but can't create definitions or assignments.
https://docs.microsoft.com/en-us/azure/governance/policy/overview
質問 # 39
You are configuring Azure AD authentication for an Azure Storage account named storage1.
You need to ensure that the members of a group named Group1 can upload files by using the Azure portal.
The solution must use the principle of least privilege.
Which two roles should you assign to Group1? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
正解：A、C
解説：
Explanation
To ensure that the members of Group1 can upload files by using the Azure portal, they need to have both data access and management access to the storage account. Data access refers to the ability to read, write, or delete blob data in the storage account. Management access refers to the ability to view the storage account resources in the Azure portal, but not modify them. The Azure role-based access control (Azure RBAC) system provides built-in roles that encompass common sets of permissions for data access and management access. The Storage Blob Data Contributor role grants read, write, and delete access to blob data in the storage account.
The Reader role grants view access to the storage account resources in the Azure portal. Therefore, by assigning both roles to Group1, the members of the group can upload files by using the Azure portal. This solution also follows the principle of least privilege, as the group members are only granted the minimum permissions required to perform the task. References:
Assign an Azure role for access to blob data
Data access from the Azure portal
質問 # 40
You have an Azure Storage accounts as shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
正解：
解説：
質問 # 41
You plan to deploy five virtual machines to a virtual network subnet.
Each virtual machine will have a public IP address and a private IP address.
Each virtual machine requires the same inbound and outbound security rules.
What is the minimum number of network interfaces and network security groups that you require? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
正解：
解説：
Reference:
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-network-interface-addresses
質問 # 42
......
当社MogiExamの製品は、実践と記憶に値する専門知識の蓄積です。一緒に参加して、お客様のニーズに合わせてAZ-104ガイドクイズの成功に貢献する多くの専門家がいます。仕事に取り掛かって顧客とやり取りする前に厳密に訓練された責任ある忍耐強いスタッフ。 AZ-104試験の準備の質を実践し、経験すると、それらの保守性と有用性を思い出すでしょう。 AZ-104練習教材が試験受験者の98％以上が夢の証明書を取得するのに役立った理由を説明しています。あなたもそれを手に入れることができると信じてください。
AZ-104資格準備: https://www.mogiexam.com/AZ-104-exam.html
ちなみに、MogiExam AZ-104の一部をクラウドストレージからダウンロードできます：https://drive.google.com/open?id=14H49w-QbyBicQt6Ly6YMba68CYPPwLdf