Exam AZ-104: Microsoft Azure Administrator 2023 with complete solution

What Steps are involved in shipping data to Azure 1 - Prepare Hard drives 2 - Create import Job 3 - Ship drives to Az Dc 4 - Update Tracking 5 - Verify the data upload. Is IPV6 to IPV6 communication is supported without load balancer? True or False True, to have ipv6 communitication between vnets you need and internal load balancer What effect is evaluated first in Azure Policy A- Append B- Disabled C- Deny D - Audit B - Disabled How do you enable auto scale on basic web app Change to standard Enable autscale create Scale rule When using az ad user create, what parameters are needed UPN, DisplayName and Password What is the restore period of an Azure AD user? A- 30 B- 60 c - 90 d - Can't restore A - 30 days What are actions and not actions actions = allowable permissions on Role definition Not acctions = Denied permissions How are NotActions used in a role definition? A - NotActions are subtracted from the Actions to define the list of permissible operations. B- NotActions are consulted after Actions to deny access to a specific operation. C - NotActions allow you to specify a single operation that is not allowed. A - NotActions are subtracted from the Actions to define the list of permissible operations. What tool would you use to monitor Subnets? Network security group (NSG) flow logging What Role is needed to manage access to Azure Resources? A - Co-administrator B - Owner C - User Access Administrator D - Contributor User Access Administrator Pubilc IP assigned to the Nic will take precedence over one on the Load balancer? True or False True How many SNAT ports allocated to a Load public IP address 1024 How is outbound Public traffic used on basic load balancers? All IPs took into consideration but one used. standard all are used at the same time What steps are involved in creating an Azure Bastion? 1) Create Subnet named Azure bastion subnet /27? 2)Create Bastion 3) Connect to VM1 using azure portal In Kubernetes can a POD share Managed Disks? Yes or No Yes Azure Files Main steps involved in Registering DNS with Azure Purchase from Registrar Configure Forward Lookup zone Point NS records to Azure DNS 5 steps to create Azure File Share in powershell New-StorageAccount - Create storage account Get-StorageAccountKeys - grab keys New-AzureStorageContext - login keys etc New-AzureStorageShare - create share CMDKEY - stores access keys New-PSDrive - maps drive When creating an Azure Bastion, What are the 3 main requirements? Subnet must be called AzureBastionSubnet and created first CIDR min /27 or larger Standard SKU static IP What are the minimum permissions for an Azure Bastion? Reader role on the VM Reader role on the NIC with private IP of the VM Reader role on Azure Bastion resource What can Azure AD role, User Administrator do? Manage all aspects of users and groups, including support tickets Monitoring service tickers resetting passwords What can Azure AD role, Billing Administrator do? make purchases manage subscriptions support ticket monitor service health. What command would you use to list permissions of a role? az role definition list --name Get-AzRoleDefinition A Basic IP SKU can support availability zones True or False False Name several services that don't work over Global vent peering VM behind Load balancers VMSS behind basic load balancers Redis cache Application gateway Logic Apps What security features does Azure DNS provide? RBAC Activity logs Resource locking We need to set up and DNS record to point to an Azure load-balancer which record will need to be created. A) Record Set B) A Record C) CNAME D) AAA A) Record Set Commands to create DNS record in AZ and PowerShell az network dns record-set New-AzDnsRecordSet -Name www -RecordType A -ZoneName -ResourceGroupName MyResourceGroup -Ttl 3600 -DnsRecords (New-AzDnsRecordConfig -IPv4Address "10.10.10.10") What are the main Services tags (7) v a i a s s a Virtual Network AzureLoadBalancer Internet Azure Traffic Manager Storage SQL AppService How would you troubleshoot VPN connectivity? - enabled network watcher - Start VPN Logging - Check Security associations - Check on premise VPN External Devices What cmdlets are used to test network connectivity? Ge-AzEffectiveNetworksecgroup Test-AzNetworkWatcherIPFlow What cmdlet should you run if you are having issues with validation on purchases in the Azure portal? Set-AzMarketplaceTerms cmdlet With AZ Copy what access methods can you use to copy data into File Storage? SAS Keys only With AZ Copy what access methods can you use to copy data into Blob Storage? Azure AD and SAS keys What needs to be installed on a Virtual machine to be able to capture all network traffic? Network Watcher Agent VM Extension When using Network Performance Monitor (NPM) why is the OMS agent needed? Service Connection reliability Performance monitor Express Route Monitor What is IP Flow used for and the power shell command to run? Check if packets are allowed or denied on a NSG Test-AzNetworkWatcherIPFlow What is Connection Monitor used for and what PowerShell command is used? Check two VMs can communicate Latency Can probe at regular intervals Can monitor IP or FQDN New-AzNetworkWatcherConnectionMonitor How many email messages can an action group send in 1 Hour? 60 1 per minute How many SMS messages can an action group send in 1 Hour? 12 1 per 5 minutes How often can a voice call be used in an action group? 1 voice every 5 mins What files is used to customise Linux on first boot? A- A B- C - D- C What tool can be used to import Azure DNS and the command? AZ CLI az network DNS zone import How many minutes can a basic web app run for? 240 minutes How many minutes can a shared web app run for? 60 minutes What are the 5 steps needed to create Azure File Sync? - Allow port 4443 outbound - Create file sync service - Install agen on server and register - Create Sync Group and cloud endpoint - Register server and share What is the max quota for vCPU on a subscription and if I have a VM is deallocated, does this count towards my quota? 20 both allocated and deallocated machines count Do free space policies for azure file sync apply to each server individually? No Most restrictive applied How do you configure a report to be sent to individuals for resources consuming more than expected? Configure report in the Cost Management portal JSON or CSV When would you use WaImportV2 over WaImportV1 when using the Azure Import/Export Service? If you need to import into Azure Files v2 is needed. What happens with duplicate files on Azure File sync -servername is appended onto the filename Azure Export Job Steps Create Export Job specify containers Check the number of Drive with WAImportExport Ship empty drives to MS with tracking Update Tracking Receive and unlock with BitLocker keys What App Service Plan supports webjobs? Basic App Plan Which mode in JSON templates for Azure Policy checked the features are supported? Indexed