Our AZ-104 Exam Question study guide has three formats which can meet your different needs: PDF, software and online. If you choose the PDF version, you can download our study material and print it for studying everywhere. With our software version of AZ-104 Exam Question exam material, you can practice in an environment just like the real examination. Our after sales services are also considerate. If you get any questions with our AZ-104 Exam Question guide question, all helps are available upon request. Although some of the hard copy materials contain mock examination papers, they do not have the automatic timekeeping system.
Microsoft Azure Administrator Associate AZ-104 This is a practice test website.
High quality AZ-104 - Microsoft Azure Administrator Exam Question practice materials leave a good impression on the exam candidates and bring more business opportunities in the future. Omgzlook site has a long history of providing Microsoft AZ-104 Instant Access exam certification training materials. It has been a long time in certified IT industry with well-known position and visibility.
Provided that you lose your exam with our AZ-104 Exam Question exam questions unfortunately, you can have full refund or switch other version for free. All the preoccupation based on your needs and all these explain our belief to help you have satisfactory and comfortable purchasing services on the AZ-104 Exam Question study guide. We assume all the responsibilities our AZ-104 Exam Question simulating practice may bring you foreseeable outcomes and you will not regret for believing in us assuredly.
Microsoft AZ-104 Exam Question - A bold attempt is half success.
Our Microsoft Azure Administrator exam questions are designed by a reliable and reputable company and our company has rich experience in doing research about the study materials. We can make sure that all employees in our company have wide experience and advanced technologies in designing the AZ-104 Exam Question study dump. So a growing number of the people have used our study materials in the past years, and it has been a generally acknowledged fact that the quality of the AZ-104 Exam Question test guide from our company is best in the study materials market. Now we would like to share the advantages of our AZ-104 Exam Question study dump to you, we hope you can spend several minutes on reading our introduction; you will benefit a lot from it.
Using AZ-104 Exam Question real questions will not only help you clear exam with less time and money but also bring you a bright future. We are looking forward to your join.
AZ-104 PDF DEMO:
QUESTION NO: 1
You download an Azure Resource Manager template based on an existing virtual machine. The template will be used to deploy 100 virtual machines.
You need to modify the template to reference an administrative password. You must prevent the password from being stored in plain text.
What should you create to store the password?
A. an Azure Storage account and an access policy
B. an Azure Key Vault and an access policy
C. Azure Active Directory (AD) Identity Protection and an Azure policy
D. a Recovery Services vault and a backup policy
Answer: B
Explanation:
You can use a template that allows you to deploy a simple Windows VM by retrieving the password that is stored in a Key Vault. Therefore the password is never put in plain text in the template parameter file.
References: https://azure.microsoft.com/en-us/resources/templates/101-vm-secure-password/
QUESTION NO: 2
You have an Azure subscription named Subscription1 that contains the resources shown in the following table.
In storage1, you create a blob container named blob1 and a file share named share1.
Which resources can be backed up to Vault1 and Vault2? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Box 1: VM1 only
VM1 is in the same region as Vault1.
File1 is not in the same region as Vautl1.
SQL is not in the same region as Vault1.
Blobs cannot be backup up to service vaults.
Note: To create a vault to protect virtual machines, the vault must be in the same region as the virtual machines.
Box 2: Share1 only.
Storage1 is in the same region (West USA) as Vault2. Share1 is in Storage1.
Note: After you select Backup, the Backup pane opens and prompts you to select a storage account from a list of discovered supported storage accounts. They're either associated with this vault or present in the same region as the vault, but not yet associated to any Recovery Services vault.
References:
https://docs.microsoft.com/bs-cyrl-ba/azure/backup/backup-create-rs-vault
https://docs.microsoft.com/en-us/azure/backup/backup-afs
QUESTION NO: 3
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure subscription that contains the following resources:
* A virtual network that has a subnet named Subnet1
* Two network security groups (NSGs) named NSG-VM1 and NSG-Subnet1
* A virtual machine named VM1 that has the required Windows Server configurations to allow
Remote Desktop connections NSG-Subnet1 has the default inbound security rules only.
NSG-VM1 has the default inbound security rules and the following custom inbound security rule:
* Priority: 100
* Source: Any
* Source port range: *
* Destination: *
* Destination port range: 3389
* Protocol: UDP
* Action: Allow
VM1 connects to Subnet1. NSG1-VM1 is associated to the network interface of VM1. NSG-Subnet1 is associated to Subnet1.
You need to be able to establish Remote Desktop connections from the internet to VM1.
Solution: You add an inbound security rule to NSG-Subnet1 and NSG-VM1 that allows connections from the internet source to the VirtualNetwork destination for port range 3389 and uses the TCP protocol.
Does this meet the goal?
A. No
B. Yes
Answer: B
Explanation:
The default port for RDP is TCP port 3389. A rule to permit RDP traffic must be created automatically when you create your VM.
Note on NSG-Subnet1: Azure routes network traffic between all subnets in a virtual network, by default.
References:
https://docs.microsoft.com/en-us/azure/virtual-machines/troubleshooting/troubleshoot-rdp- connection
QUESTION NO: 4
You have an Azure subscription that contains an Azure Directory (Azure AD) tenant named contoso.com. The tenant is synced to the on-premises Active Directory domain. The domain contains the users shown in the following table.
You enable self-service password reset (SSPR) for all users and configure SSPR to have the following authentication methods:
* Number of methods required to reset: 2
* Methods available to users: Mobile phone, Security questions
* Number of questions required to register: 3
* Number of questions required to reset: 3
You select the following security questions:
* What is your favorite food?
* In what city was your first job?
* What was the name of your first pet?
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Box 1: No
Administrator accounts are special accounts with elevated permissions. To secure them, the following restrictions apply to changing passwords of administrators:
On-premises enterprise administrators or domain administrators cannot reset their password through Self-service password reset (SSPR). They can only change their password in their on-premises environment. Thus, we recommend not syncing on-prem AD admin accounts to Azure AD.
An administrator cannot use secret Questions & Answers as a method to reset password.
Box 2: Yes
Self-service password reset (SSPR) is an Azure Active Directory feature that enables employees to reset their passwords without needing to contact IT staff.
Box 3: Yes
References:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-sspr-deployment
QUESTION NO: 5
You have the Azure virtual machines shown in the following table.
A DNS service is install on VM1.
You configure the DNS server settings for each virtual network as shown in the following exhibit.
You need 10 ensure that all the virtual machines can resolve DNS names by using the DNS service on
VM1. What should you do?
A. Add service endpoints on VNET2 and VNET3.
B. Add service endpoints on VNET1.
C. Configure peering between VNE11, VNETT2, and VNET3.
D. Configure a conditional forwarder on VM1
Answer: D
Reference:
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-name-resolution-for-vms- and-role-instances
After using the trial version, we believe that you will be willing to choose Microsoft AZ-400 exam questions. We are confident about our Microsoft Fortinet NSE7_NST-7.2 braindumps tested by our certified experts who have great reputation in IT certification. HP HPE2-N71 - In the process of development, it also constantly considers the different needs of users. The frequently updated of ACFCS CFCS latest torrent can ensure you get the newest and latest study material. Microsoft MS-102 - This certification gives us more opportunities.
Updated: May 28, 2022