What's more, part of that Test4Cram AZ-104 dumps now are free: https://drive.google.com/open?id=1xmEiTXDaSARhE2KV41chl2fd64AeU9dI
We hope you can feel that we sincerely hope to help you. We hope that after choosing our AZ-104 study materials, you will be able to concentrate on learning our AZ-104 learning guide without worry. It is our greatest honor that you can feel satisfied. Of course, we will value every user. We will never neglect any user. Our AZ-104 Exam Braindumps will provide perfect service for everyone.
| Section | Weight | Objectives |
|---|---|---|
| Implement and manage virtual networking | 15-20% | - Monitor virtual networking
|
| Implement and manage storage | 15-20% | - Configure Azure Files and Azure Blob Storage
|
| Deploy and manage Azure compute resources | 20-25% | - Provision and manage containers in the Azure portal
|
| Manage Azure identities and governance | 20-25% | - Manage role-based access control (RBAC)
|
| Monitor and maintain Azure resources | 10-15% | - Implement backup and recovery
|
>> Latest AZ-104 Exam Pass4sure <<
It is a virtual certainty that our AZ-104 actual exam is high efficient with passing rate up to 98 percent and so on. We made it by persistence, patient and enthusiastic as well as responsibility. Moreover, about some tricky problems of AZ-104 Exam Materials you do not to be anxious and choose to take a detour, our experts left notes for your reference. So our AZ-104 practice materials are beyond the contrivance of all of you.
NEW QUESTION # 283
You have a virtual network named VNETI that contains the subnets shown in the following table.
You have Azure virtual machines that have the network configurations shown in the following table.
For NSG2, you create the inbound security rule shown in the following table.
For NSG2, you create the inbound security rule shown in the following table.
For each of the following statements, select Yes If the statement is true. Otherwise, select No. NOTE Each correct selection is worth one point
Answer:
Explanation:
Explanation:
No Yes Yes
In this question, we analyze Network Security Groups (NSGs) and their effect on connectivity between virtual machines (VMs) within a virtual network (VNet). Azure NSGs contain inbound and outbound security rules that are processed in priority order (from lowest number to highest), and the first matching rule determines the outcome. NSGs can be applied at both subnet and network interface (NIC) levels.
When an NSG is associated at both levels, both must allow the traffic - if either blocks it, the traffic is denied (Microsoft Azure documentation: "Network security groups - Azure Virtual Network").
Given Configuration Summary
Subnets
Name
Subnet
NSG
Subnet1
10.10.1.0/24
NSG1
Subnet2
10.10.2.0/24
None
VMs
VM
Subnet
IP
NSG
VM1
Subnet1
10.10.1.5
NSG2
VM2
Subnet2
10.10.2.5
None
VM3
Subnet2
10.10.2.6
None
NSG Rules
NSG1 (applied at Subnet1):
Priority
Source
Destination
Port
Action
101
10.10.2.0/24
10.10.1.0/24
TCP/1433
Allow
NSG2 (applied at VM1 NIC):
Priority
Source
Destination
Port
Action
125
10.10.2.5
10.10.1.5
TCP/1433
Block
Traffic Analysis
VM2 # VM1 (TCP 1433)
NSG1 (Subnet1) allows traffic from 10.10.2.0/24 to 10.10.1.0/24 on TCP/1433.
NSG2 (VM1 NIC) explicitly blocks traffic from 10.10.2.5 (VM2) to 10.10.1.5 on TCP/1433.
# Subnet-level allows, but NIC-level denies # Effective result: Denied
The Answer: # No
VM1 # VM2 (TCP 1433)
Outbound from VM1 # no outbound deny rule.
Inbound on VM2 # no NSG (thus allowed).
# No restriction applies # Traffic allowed
The Answer: # Yes
VM2 # VM3 (TCP 1433)
Both VMs are on Subnet2, which has no NSG applied.
No rule blocks communication within the subnet.
# All traffic allowed by default.
The Answer: # Yes
Final Verified Answers (as per Microsoft Azure Documentation):
Statement
The Answer
VM2 can connect to TCP port 1433 services on VM1
# No
VM1 can connect to TCP port 1433 services on VM2
# Yes
VM2 can connect to TCP port 1433 services on VM3
# Yes
Supporting Extract from Microsoft Azure Documentation:
"When multiple network security groups are associated, the network interface and subnet rules are combined using a deny-by-default model. For inbound traffic to be allowed, it must be permitted by both the subnet- level and network interface-level NSGs."
"By default, virtual network traffic within the same subnet or between subnets in the same virtual network is allowed." (Source: Microsoft Learn - Azure Virtual Network NSG Concepts)
NEW QUESTION # 284
You are developing an Azure web app named WebApp1. WebApp1 uses an Azure App Service plan named Plan1 that uses the B1 pricing tier.
You need to configure WebApp1 to add additional instances of the app when CPU usage exceeds 70 percent for 10 minutes.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation:
Box 1: From the Scale up (App Service Plan) settings blade, change the pricing tier The B1 pricing tier only allows for 1 core. We must choose another pricing tier.
Box 2: From the Scale out (App Service Plan) settings blade, enable autoscale
1. Log in to the Azure portal at http://portal.azure.com
1. Navigate to the App Service you would like to autoscale.
2. Select Scale out (App Service plan) from the menu
3. Click on Enable autoscale. This activates the editor for scaling rules.
Box 3: From the Scale mode to Scale based on metric, add a rule, and set the instance limits.
Click on Add a rule. This shows a form where you can create a rule and specify details of the scaling.
References:
https://azure.microsoft.com/en-us/pricing/details/app-service/windows/
https://blogs.msdn.microsoft.com/hsirtl/2017/07/03/autoscaling-azure-web-apps/
NEW QUESTION # 285
You have an Azure subscription that contains the storage account shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
NEW QUESTION # 286
You have an on-premises network that includes a Microsoft SQL Server instance named SQL1.
You create an Azure Logic App named App1.
You need to ensure that App1 can query a database on SQL1.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation
To access data sources on premises from your logic apps, you can create a data gateway resource in Azure so that your logic apps can use the on-premises connectors.
Box 1: From an on-premises computer, install an on-premises data gateway.
Before you can connect to on-premises data sources from Azure Logic Apps, download and install the on-premises data gateway on a local computer.
Box 2: From the Azure portal, create an on-premises data gateway
Create Azure resource for gateway
After you install the gateway on a local computer, you can then create an Azure resource for your gateway.
This step also associates your gateway resource with your Azure subscription.
* Sign in to the Azure portal. Make sure you use the same Azure work or school email address used to install the gateway.
* On the main Azure menu, select Create a resource > Integration > On-premises data gateway.
* On the Create connection gateway page, provide this information for your gateway resource.
* To add the gateway resource to your Azure dashboard, select Pin to dashboard. When you're done, choose Create.
Box 3: From the Logic Apps Designer in the Azure portal, add a connector After you create your gateway resource and associate your Azure subscription with this resource, you can now create a connection between your logic app and your on-premises data source by using the gateway.
* In the Azure portal, create or open your logic app in the Logic App Designer.
* Add a connector that supports on-premises connections, for example, SQL Server.
* Set up your connection.
References:
https://docs.microsoft.com/en-us/azure/logic-apps/logic-apps-gateway-connection
NEW QUESTION # 287
You have an Azure subscription.
You plan to use an Azure Resource Manager template to deploy a virtual network named VNET1 that will use Azure Bastion.
How should you complete the template? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://medium.com/charot/deploy-azure-bastion-preview-using-an-arm-template-15e3010767d6
NEW QUESTION # 288
......
We provide a guarantee on all of our AZ-104 test products, and you will be able to get your money back if we fail to deliver the results as advertised. We provide 100% money back guarantee for all of us AZ-104 test questions products, and we are always available to provide you top notch support and new AZ-104 Questions. If you are facing issues in downloading the AZ-104 study guides, then all you have to do is to contact our support professional, and they will be able to help you out with AZ-104 answers.
Exam AZ-104 Guide: https://www.test4cram.com/AZ-104_real-exam-dumps.html
BONUS!!! Download part of Test4Cram AZ-104 dumps for free: https://drive.google.com/open?id=1xmEiTXDaSARhE2KV41chl2fd64AeU9dI