Exam AZ-104: Microsoft Azure Administrator Exam Questions And Answers

Exam AZ-104: Microsoft Azure Administrator Exam Questions And Answers What Steps are involved in shipping data to Azure - ANS 1 - Prepare Hard drives 2 - Create import Job 3 - Ship drives to Az Dc 4 - Update Tracking 5 - Verify the data upload. Is IPV6 to IPV6 communication supported without load balancer? True or False - ANS True, to have ipv6 communication between vnets you need and internal load balancer What effect is evaluated first in Azure Policy A- Append B- Disabled C- Deny D - Audit - ANS B - Disabled How do you enable auto scale on basic web app - ANS Change to standard Enable autscale create Scale rule When using az ad user create, what parameters are needed - ANS UPN, DisplayName and Password What is the restore period of an Azure AD user? A- 30 B- 60 c - 90 d - Can't restore - ANS A - 30 days What are actions and not actions - ANS actions = allowable permissions on Role definition Not acctions = Denied permissions How are NotActions used in a role definition? A - NotActions are subtracted from the Actions to define the list of permissible operations. B- NotActions are consulted after Actions to deny access to a specific operation. C - NotActions allow you to specify a single operation that is not allowed. - ANS A - NotActions are subtracted from the Actions to define the list of permissible operations. What tool would you use to monitor Subnets? - ANS Network security group (NSG) flow logging What Role is needed to manage access to Azure Resources? A - Co-administrator B - Owner C - User Access Administrator D - Contributor - ANS User Access Administrator Pubilc IP assigned to the Nic will take precedence over one on the Load balancer? True or False - ANS True How many SNAT ports allocated to a Load public IP address - ANS 1024 How is outbound Public traffic used on basic load balancers? - ANS All IPs took into consideration but one used. standard all are used at the same time What steps are involved in creating an Azure Bastion? - ANS 1) Create Subnet named Azure bastion subnet /27? 2)Create Bastion 3) Connect to VM1 using azure portal In Kubernetes can a POD share Managed Disks? Yes or No - ANS Yes Azure Files Main steps involved in Registering DNS with Azure - ANS Purchase from Registrar Configure Forward Lookup zone Point NS records to Azure DNS 5 steps to create Azure File Share in powershell - ANS New-StorageAccount - Create storage account Get-StorageAccountKeys - grab keys New-AzureStorageContext - login keys etc New-AzureStorageShare - create share CMDKEY - stores access keys New-PSDrive - maps drive When creating an Azure Bastion, What are the 3 main requirements? - ANS Subnet must be called AzureBastionSubnet and created first CIDR min /27 or larger Standard SKU static IP What are the minimum permissions for an Azure Bastion? - ANS Reader role on the VM Reader role on the NIC with private IP of the VM Reader role on Azure Bastion resource What can Azure AD role, User Administrator do? - ANS Manage all aspects of users and groups, including support tickets Monitoring service tickers resetting passwords What can Azure AD role, Billing Administrator do? - ANS make purchases manage subscriptions support ticket monitor service health. What command would you use to list permissions of a role? - ANS az role definition list --name Get-AzRoleDefinition A Basic IP SKU can support availability zones True or False - ANS False Name several services that don't work over Global vent peering - ANS VM behind Load balancers VMSS behind basic load balancers Redis cache Application gateway Logic Apps What security features does Azure DNS provide? - ANS RBAC