P.S. Free & New AZ-104 dumps are available on Google Drive shared by Dumpleader: https://drive.google.com/open?id=1iZA_WDM7RRCy77rt1SdMinSXZoR0W4Jr
Dumpleader not only provide the products which have high quality to each candidate, but also provides a comprehensive after-sales service. If you are using our AZ-104 products, we will let you enjoy one year of free updates. So that you can get the latest exam information in time. We will be use the greatest efficiency to service each candidate.
| Section | Weight | Objectives |
|---|---|---|
| Topic 1: Manage Azure identities and governance | 15-20% | - Manage Azure policy and RBAC - Manage subscriptions and governance - Manage Microsoft Entra ID objects and roles |
| Topic 2: Monitor and maintain Azure resources | 10-15% | - Implement backup and recovery - Troubleshoot resources - Monitor resources using Azure Monitor |
| Topic 3: Implement and manage storage | 15-20% | - Manage data in Azure Storage - Configure Azure Files and Blob storage - Configure Azure Storage accounts |
| Topic 4: Configure and manage virtual networking | 25-30% | - Configure network security - Configure load balancing and traffic routing - Configure virtual networks |
| Topic 5: Deploy and manage Azure compute resources | 20-25% | - Manage containers in Azure - Configure and manage virtual machines - Configure App Services |
>> AZ-104 Valid Study Materials <<
A second format is a Microsoft AZ-104 web-based practice exam that can take for self-assessment. However, it differs from desktop-based AZ-104 practice exam software as it can be taken via any browser, including Chrome, Firefox, Safari, and Opera. This Microsoft AZ-104 web-based practice exam does not require any other plugins. It also includes all of the functionalities of desktop AZ-104 software and will assist you in passing the AZ-104 certification test.
NEW QUESTION # 304
You have an Azure subscription that contains the resources shown in the following table.
You create a route table named RT1 in the East US Azure region. To which resources can you associate RT1?
Answer: D
Explanation:
The correct answer is Subnet1 only . In Azure, a route table is associated to one or more subnets , not directly to a virtual network or a network interface. Microsoft states that after creating custom routes, you associate the route table to zero or more virtual network subnets, and each subnet can have zero or one route table associated with it. This means RT1 can be associated with Subnet1 , provided the subnet is in a virtual network in the same Azure location and subscription as the route table. Here, RT1 is created in East US , and Subnet1 is also in East US , so the association is valid.
RT1 cannot be associated directly with VNet1 , because route tables apply at the subnet level within a virtual network rather than the VNet object itself. RT1 also cannot be associated directly with NIC1 ; network interfaces have effective routes, but those routes are derived from system routes, subnet-associated route tables, BGP routes, and other platform routing behavior. Therefore, among the listed resources, only Subnet1 is a valid route table association target. Study Guide reference: AZ-104 Configure and manage virtual networking , specifically configuring route tables, user-defined routes, and subnet-level routing.
NEW QUESTION # 305
You have an Azure subscription.
You create the following Azure Resource Manager (ARM) template named Templatejson.
You need to deploy Template.json.
Which PowerShell cmdlet should you run from Azure Cloud Shell?
Answer: B
Explanation:
The provided ARM template creates a resource of type Microsoft.Resources/resourceGroups. Templates that create or manage resource groups must be deployed at the subscription scope, not at the resource group scope.
Microsoft guidance on deployment scopes explains that resource group creation requires a subscription-level deployment.
Accordingly, the correct Azure PowerShell cmdlet to deploy such a template from Azure Cloud Shell is New- AzSubscriptionDeployment. The other options target tenant, management group, or resource group scopes and are not appropriate for creating a resource group.
NEW QUESTION # 306
You have an Azure subscription that contains three virtual networks named VNet1, VNet2, VNet3. VNet2
contains a virtual appliance named VM2 that operates as a router.
You are configuring the virtual networks in a hub and spoke topology that uses VNet2 as the hub network.
You plan to configure peering between VNet1 and VNet2 and between VNet2 and VNet3.
You need to provide connectivity between VNet1 and VNet3 through VNet2.
Which two configurations should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
Answer: C,E
Explanation:
Allow gateway transit: Check this box if you have a virtual network gateway attached to this virtual network and want to allow traffic from the peered virtual network to flow through the gateway.
The peered virtual network must have the Use remote gateways checkbox checked when setting up the peering from the other virtual network to this virtual network.
References:
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-manage-peering#requirements-andconstraints
NEW QUESTION # 307
Case Study 6 - ADatum Corporation
Overview
ADatum Corporation is consulting firm that has a main office in Montreal and branch offices in Seattle and New York.
Existing Environment
Azure Environment
ADatum has an Azure subscription that contains three resource groups named RG1, RG2, and RG3.
The subscription contains the storage accounts shown in the following table.
The subscription contains the virtual machines shown in the following table.
The subscription has an Azure container registry that contains the images shown in the following table.
The subscription contains the resources shown in the following table.
Azure Key Vault
The subscription contains an Azure key vault named Vault1.
Vault1 contains the certificates shown in the following table.
Vault1 contains the keys shown in the following table.
Microsoft Entra Environment
ADatum has a Microsoft Entra tenant named adatum.com that is linked to the Azure subscription and contains the users shown in the following table.
The tenant contains the groups shown in the following table.
The adatum.com tenant has a custom security attribute named Attribute1.
Planned Changes
ADatum plans to implement the following changes:
- Configure a data collection rule (DCR) named DCR1 to collect only system events that have an event ID of 4648 from VM2 and VM4.
- In storage1, create a new container named cont2 that has the following access policies:
o Three stored access policies named Stored1, Stored2, and Stored3
o A legal hold for immutable blob storage
- Whenever possible, use directories to organize storage account content.
- Grant User1 the permissions required to link Zone1 to VNet1.
- Assign Attribute1 to supported adatum.com resources.
- In storage2, create an encryption scope named Scope1.
- Deploy new containers by using Image1 or Image2.
Technical Requirements
ADatum must meet the following technical requirements:
- Use TLS for WebApp1.
- Follow the principle of least privilege.
- Grant permissions at the required scope only.
- Ensure that Scope1 is used to encrypt storage services.
- Use Azure Backup to back up cont1 and share1 as frequently as possible.
- Whenever possible, use Azure Disk Encryption and a key encryption key (KEK) to encrypt the virtual machines.
You need to configure encryption for the virtual machines. The solution must meet the technical requirements.
Which virtual machines can you encrypt?
Answer: C
Explanation:
https://learn.microsoft.com/en-us/azure/virtual-machines/windows/disk-encryption-windows
NEW QUESTION # 308
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure subscription named Subscription1. Subscription1 contains a resource group named RG1. RG1 contains resources that were deployed by using templates.
You need to view the date and time when the resources were created in RG1.
Solution: From the RG1 blade, you click Deployments.
Does this meet the goal?
Answer: A
Explanation:
1. Select the resource group (Here RG1) you want to examine.
2. Select the link under Deployments.
3. Select one of the deployments from the deployment history.
4. You will see a history of deployment for the resource group, including the correlation ID.
Reference:
https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/deployment-history?tabs=azure-portal
NEW QUESTION # 309
......
We are a certificate exam materials providers, our company is also in a leading position in provide exam braindumps. With the experienced professionals to edit and examine, the AZ-104 exam dumps is high-quality. We have three versions for the AZ-104 Exam Dumps, and you can choose the right one according to your demands. Besides, we offer you free update for one year after buying the AZ-104 exam dumps, and pass guarantee and money back guarantee.
AZ-104 Valid Test Objectives: https://www.dumpleader.com/AZ-104_exam.html
P.S. Free 2026 Microsoft AZ-104 dumps are available on Google Drive shared by Dumpleader: https://drive.google.com/open?id=1iZA_WDM7RRCy77rt1SdMinSXZoR0W4Jr