Az-104 Test Questions - Exam Topics questions
and answers latest test 2022
The status of VM1 is running . You assign an Azure policy as shown in the exhibit. (Click the Exhibit
tab.) You assign the policy by using the following
parameters:Microsoft.ClassicNetwork/virtualNetworksMicrosoft.Network/virtualNetworksMicrosoft.Co
mpute/virtualMachines
1) An administrator can move VNET1 to RG2
2)the state of vm1 changed to deallocated
3) an administrator can modify the address space of vnet2 Correct Answer: 1)no
2)yes
3)no
You have an Azure subscription named Subscription1 that contains a resource group named RG1.In
RG1, you create an internal load balancer named LB1 and a public load balancer named LB2.You
need to ensure that an administrator named Admin1 can manage LB1 and LB2. The solution must
follow the principle of least privilege. Which role should you assign to Admin1 for each task? To
answer, select the appropriate options in the answer area. Correct Answer: To add a backend pool to
LB1:
Network contributor to LB1
To add a health probe to LB2:
Network contributor to LB2
You have an Azure subscription that contains an Azure Active Directory (Azure AD) tenant named
contoso.com and an Azure Kubernetes Service (AKS) cluster named AKS1.An administrator reports
that she is unable to grant access to AKS1 to the users in contoso.com.You need to ensure that
access to AKS1 can be granted to the contoso.com users.What should you do first? Correct Answer:
From contoso.com, create an OAuth 2.0 authorization endpoint.
You have a Microsoft 365 tenant and an Azure Active Directory (Azure AD) tenant named
contoso.com.You plan to grant three users named User1, User2, and User3 access to a temporary
Microsoft SharePoint document library named Library1.You need to create groups for the users. The
solution must ensure that the groups are deleted automatically after 180 days.Which two groups
should you create? Each correct answer presents a complete solution Correct Answer: an Office 365
group that uses the Assigned membership type
an Office 365 group that uses the Dynamic User membership type
1) User3 can perform an access review of user1
2) User3 can perform an access review of UserA
3) User3 can perform an access review of UserB Correct Answer: 1) No
2) No
3) Yes
Overall: User3 is a member and can only review guest accounts
Management groups, subscriptions, and virtual networks allow Correct Answer: Box 1: No -Virtual
networks are not allowed at the root and is inherited. Deny overrides allowed.Box 2: Yes -Virtual
Machines can be created on a Management Group provided the user has the required RBAC
, permissions.Box 3: Yes -Subscriptions can be moved between Management Groups provided the
user has the required RBAC permissions.
What does the scope subscription do? Correct Answer: You can create Azure SQL servers in
contosoRG1 only
To RG6, you apply the tag: RGroup: RG6.You deploy a virtual network named VNET2 to RG6.Which
tags apply to VNET1 and VNET2? To answer, select the appropriate options in the answer
area.NOTE: Each correct selection is worth one point. Correct Answer: VNET1: Department: D1, and
Label:Value1 only.Tags applied to the resource group or subscription are not inherited by the
resources.Note: Azure Policy allows you to use either built-in or custom-defined policy definitions and
assign them to either a specific resource group or across a wholeAzure subscription.VNET2:
Label:Value1 only.Incorrect Answers:RGROUP: RG6 -Tags applied to the resource group or
subscription are not inherited by the resources.
You have an Azure subscription named AZPT1 that contains the resources shown in the following
table:
You create a new Azure subscription named AZPT2.You need to identify which resources can be
moved to AZPT2.Which resources should you identify? Correct Answer: VM1, storage1, VNET1,
VM1Managed, and RVAULT1
You recently created a new Azure subscription that contains a user named Admin1.Admin1 attempts
to deploy an Azure Marketplace resource by using an Azure Resource Manager template. Admin1
deploys the template by using AzurePowerShell and receives the following error message: "User
failed validation to purchase resources. Error message: "Legal terms have not been accepted for this
item on this subscription. To accept legal terms, please go to the Azure portal
(http://go.microsoft.com/fwlink/?LinkId=534873) and configure programmatic deployment for the
Marketplace item or create it there for the first time."You need to ensure that Admin1 can deploy the
Marketplace resource successfully.What should you do? Correct Answer: From Azure PowerShell,
run the Set-AzMarketplaceTerms cmdlet
You have an Azure Active Directory (Azure AD) tenant that contains 5,000 user accounts.You create
a new user account named AdminUser1.You need to assign the User administrator administrative
role to AdminUser1.What should you do from the user account properties? Correct Answer: From the
Directory role blade, modify the directory role
You have an Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com that contains
100 user accounts.You purchase 10 Azure AD Premium P2 licenses for the tenant.You need to
ensure that 10 users can use all the Azure AD Premium features.What should you do? Correct
Answer: From the Licenses blade of Azure AD, assign a license
You have an Azure subscription named Subscription1 and an on-premises deployment of Microsoft
System Center Service Manager.Subscription1 contains a virtual machine named VM1.You need to
ensure that an alert is set in Service Manager when the amount of available memory on VM1 is below
10 percent. What should you do first? Correct Answer: Deploy the IT Service Management Connector
(ITSM)
You sign up for Azure Active Directory (Azure AD) Premium.You need to add a user named
as an administrator on all the computers that will be joined to the Azure AD
and answers latest test 2022
The status of VM1 is running . You assign an Azure policy as shown in the exhibit. (Click the Exhibit
tab.) You assign the policy by using the following
parameters:Microsoft.ClassicNetwork/virtualNetworksMicrosoft.Network/virtualNetworksMicrosoft.Co
mpute/virtualMachines
1) An administrator can move VNET1 to RG2
2)the state of vm1 changed to deallocated
3) an administrator can modify the address space of vnet2 Correct Answer: 1)no
2)yes
3)no
You have an Azure subscription named Subscription1 that contains a resource group named RG1.In
RG1, you create an internal load balancer named LB1 and a public load balancer named LB2.You
need to ensure that an administrator named Admin1 can manage LB1 and LB2. The solution must
follow the principle of least privilege. Which role should you assign to Admin1 for each task? To
answer, select the appropriate options in the answer area. Correct Answer: To add a backend pool to
LB1:
Network contributor to LB1
To add a health probe to LB2:
Network contributor to LB2
You have an Azure subscription that contains an Azure Active Directory (Azure AD) tenant named
contoso.com and an Azure Kubernetes Service (AKS) cluster named AKS1.An administrator reports
that she is unable to grant access to AKS1 to the users in contoso.com.You need to ensure that
access to AKS1 can be granted to the contoso.com users.What should you do first? Correct Answer:
From contoso.com, create an OAuth 2.0 authorization endpoint.
You have a Microsoft 365 tenant and an Azure Active Directory (Azure AD) tenant named
contoso.com.You plan to grant three users named User1, User2, and User3 access to a temporary
Microsoft SharePoint document library named Library1.You need to create groups for the users. The
solution must ensure that the groups are deleted automatically after 180 days.Which two groups
should you create? Each correct answer presents a complete solution Correct Answer: an Office 365
group that uses the Assigned membership type
an Office 365 group that uses the Dynamic User membership type
1) User3 can perform an access review of user1
2) User3 can perform an access review of UserA
3) User3 can perform an access review of UserB Correct Answer: 1) No
2) No
3) Yes
Overall: User3 is a member and can only review guest accounts
Management groups, subscriptions, and virtual networks allow Correct Answer: Box 1: No -Virtual
networks are not allowed at the root and is inherited. Deny overrides allowed.Box 2: Yes -Virtual
Machines can be created on a Management Group provided the user has the required RBAC
, permissions.Box 3: Yes -Subscriptions can be moved between Management Groups provided the
user has the required RBAC permissions.
What does the scope subscription do? Correct Answer: You can create Azure SQL servers in
contosoRG1 only
To RG6, you apply the tag: RGroup: RG6.You deploy a virtual network named VNET2 to RG6.Which
tags apply to VNET1 and VNET2? To answer, select the appropriate options in the answer
area.NOTE: Each correct selection is worth one point. Correct Answer: VNET1: Department: D1, and
Label:Value1 only.Tags applied to the resource group or subscription are not inherited by the
resources.Note: Azure Policy allows you to use either built-in or custom-defined policy definitions and
assign them to either a specific resource group or across a wholeAzure subscription.VNET2:
Label:Value1 only.Incorrect Answers:RGROUP: RG6 -Tags applied to the resource group or
subscription are not inherited by the resources.
You have an Azure subscription named AZPT1 that contains the resources shown in the following
table:
You create a new Azure subscription named AZPT2.You need to identify which resources can be
moved to AZPT2.Which resources should you identify? Correct Answer: VM1, storage1, VNET1,
VM1Managed, and RVAULT1
You recently created a new Azure subscription that contains a user named Admin1.Admin1 attempts
to deploy an Azure Marketplace resource by using an Azure Resource Manager template. Admin1
deploys the template by using AzurePowerShell and receives the following error message: "User
failed validation to purchase resources. Error message: "Legal terms have not been accepted for this
item on this subscription. To accept legal terms, please go to the Azure portal
(http://go.microsoft.com/fwlink/?LinkId=534873) and configure programmatic deployment for the
Marketplace item or create it there for the first time."You need to ensure that Admin1 can deploy the
Marketplace resource successfully.What should you do? Correct Answer: From Azure PowerShell,
run the Set-AzMarketplaceTerms cmdlet
You have an Azure Active Directory (Azure AD) tenant that contains 5,000 user accounts.You create
a new user account named AdminUser1.You need to assign the User administrator administrative
role to AdminUser1.What should you do from the user account properties? Correct Answer: From the
Directory role blade, modify the directory role
You have an Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com that contains
100 user accounts.You purchase 10 Azure AD Premium P2 licenses for the tenant.You need to
ensure that 10 users can use all the Azure AD Premium features.What should you do? Correct
Answer: From the Licenses blade of Azure AD, assign a license
You have an Azure subscription named Subscription1 and an on-premises deployment of Microsoft
System Center Service Manager.Subscription1 contains a virtual machine named VM1.You need to
ensure that an alert is set in Service Manager when the amount of available memory on VM1 is below
10 percent. What should you do first? Correct Answer: Deploy the IT Service Management Connector
(ITSM)
You sign up for Azure Active Directory (Azure AD) Premium.You need to add a user named
as an administrator on all the computers that will be joined to the Azure AD
