AZ-104 RENEWAL EXAM QUESTIONS AND 100% CORRECT ANSWER
(ALREADY GRADED A+)
You have an Azure virtual machine named VM1 that runs Windows Server 2019. You
save VM1 as a template named Template1 to the Azure Resource Manager library. You
plan to deploy a virtual machine named VM2 from Template1. What can you configure
during the deployment of VM2?
A. virtual machine size
B. operating system
C. administrator username
D. resource group ---ANSWER-- Answer: D
Explanation: When deploying a virtual machine from a template, you must specify: the
Resource Group name and location for the VM the administrator username and
password an unique DNS name for the public IP
Note: This question is part of a series of questions that present the same scenario.
Each question in the series contains a unique solution that might meet the stated goals.
Some question sets might have more than one correct solution, while others might not
have a correct solution. After you answer a question in this section, you will NOT be
able to return to it. As a result, these questions will not appear in the review screen. You
have an Azure virtual machine named VM1 that runs Windows Server 2016. You need
to create an alert in Azure when more than two error events are logged to the System
log on VM1 within an hour. Solution: You create an Azure Log Analytics workspace and
configure the data settings. You add an extension to VM1. You create an alert in Azure
Monitor and specify the Log Analytics workspace as the source. Does this meet the
goal? A. Yes
B. No ---ANSWER-- Answer: B
Explanation: Instead: You create an Azure Log Analytics workspace and configure the
data settings. You install the Microsoft Monitoring Agent on VM1. You create an alert in
Azure Monitor and specify the Log Analytics workspace as the source
You have an Azure Active Directory (Azure AD) domain that contains 5,000 user
accounts. You create a new user account named AdminUser1. You need to assign the
User administrator administrative role to AdminUser1. What should you do from the user
account properties?
A. From the Directory role blade, modify the directory role.
,B. From the Groups blade, invite the user account to a new group.
C. From the Licenses blade, assign a new license. ---ANSWER-- Answer: A
Explanation: Assign a role to a user Sign in to the Azure portal with an account that's a
global admin or privileged role admin for the directory. Select Azure Active Directory,
select Users, and then select a specific user from the list. For the selected user, select
Directory role, select Add role, and then pick the appropriate admin roles from the
Directory roles list, such as Conditional access administrator. Press Select to save.
You have an Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com
that contains 100 user accounts. You purchase 10 Azure AD Premium P2 licenses for
the tenant. You need to ensure that 10 users can use all the Azure AD Premium
features. What should you do?
A. From the Groups blade of each user, invite the users to a group.
B. From the Licenses blade of Azure AD, assign a license.
C. From the Directory role blade of each user, modify the directory role.
D. From the Azure AD domain, add an enterprise application. ---ANSWER-- Answer: B
Many Azure Active Directory (Azure AD) services require you to license each of your
users or groups (and associated members) for that service. Only users with active
licenses will be able to access and use the licensed Azure AD services for which that's
true. Licenses are applied per tenant and do not transfer to other tenants. Not all
Microsoft services are available in all locations. Before a license can be assigned to a
group, you must specify the Usage location for all members. You can set this value in
the Azure Active Directory > Users > Profile > Settings area in Azure AD. Any user
whose usage location is not specified inherits the location of the Azure AD organization.
You can add the licensing rights to users or to an entire group.
You have an Azure subscription named Subscription 1 and an on-premises deployment
of Microsoft System Center Service Manager Subscription! contains a virtual machine
named VM1. You need to ensure that an alert is set in Service Manager when the
amount of available memory on VM1 is below 10 percent. What should you do first?
A. Create a notification.
B. Create an automation runbook.
C. Deploy the IT Service Management Connector (ITSM).
D. Deploy a function app. ---ANSWER-- Answer: C
Explanation: The IT Service Management Connector (ITSMC) allows you to connect
Azure and a supported IT Service Management (ITSM) product/service, such as the
Microsoft System Center Service Manager. With ITSMC, you can create work items in
ITSM tool, based on your Azure alerts (metric alerts, Activity Log alerts and Log
Analytics alerts).
,You have an on-premises server that contains a folder named D:\Folder1. You need to
copy the contents of D:\Folder1 to the public container in an Azure Storage account
named contoso data. Which command should you run?
A. https://contosodata.blob.core.windows.net/public
B. azcopy sync D:\folder1 https://contosodata.blob.core.windows.net/public --snapshot
C. azcopy copy D:\folder1 https://contosodata.blob.core.windows.net/public --recursive
D. az storage blob copy start-batch D:\Folder1 https://
contosodata.blob.core.windows.net/public ---ANSWER-- Answer: C
Explanation:
The azcopy copy command copies a directory (and all of the files in that directory) to a
blob container. The result is a directory in the container by the same name.
InANSWERs: B: The azcopy sync command replicates the source location to the
destination location. However, the file is skipped if the last modified time in the
destination is more recent. D: The az storage blob copy start-batch command copies
multiple blobs to a blob container.
You have an Azure Storage account named storage1. You plan to use AzCopy to copy
data to storage1. You need to identify the storage services in storage1 to which you can
copy the data. What should you identify?
A. blob, file, table, and queue
B. blob and file only
C. file and table only
D. file only
E. blob, table, and queue only ---ANSWER-- Answer: B
Explanation: AzCopy is a command-line utility that you can use to copy blobs or files to
or from a storage account. InANSWERs: A, C, E: AzCopy does not support table and
queue storage services. D: AzCopy supports file storage services, as well as blob
storage services.
You have an Azure subscription that contains an Azure Storage account. You plan to
create an Azure container instance named container1 that will use a Docker image
namedImage1. Image1 contains a Microsoft SQL Server instance that requires
persistent storage. You need to configure a storage service for Container1. What should
you use?
A. Azure Files
B. Azure Blob storage
C. Azure Queue storage
D. Azure Table storage ---ANSWER-- Answer: A
, Explanation:
Microsoft have Docker Volume Plugin for Azure file storage which provides exactly this
and it is used for Azure file shares. Azure File Storage volume plugin is not limited to
ease of container migration. It also allows a file share to be shared among multiple
containers (even though they are on different hosts) to collaborate on workloads, share
configuration or secrets of an application running on multiple hosts. Another use case is
uploading metrics and diagnostics data such as logs from applications to a file share for
further processing.
You have an app named App1 that runs on two Azure virtual machines named VM1 and
VM2. You plan to implement an Azure Availability Set for App1. The solution must
ensure that App1 is available during planned maintenance of the hardware hosting VM1
and VM2. What should you include in the Availability Set?
A. one update domain
B. two fault domains
C. one fault domain
D. two update domains ---ANSWER-- Answer: D
Explanation: Microsoft updates, which Microsoft refers to as planned maintenance
events, sometimes require that VMs be rebooted to complete the update. To reduce the
impact on VMs, the Azure fabric is divided into update domains to ensure that not all
VMs are rebooted at the same time. InANSWERs: A: An update domain is a group of
VMs and underlying physical hardware that can be rebooted at the same time. B, C: A
fault domain shares common storage as well as a common power source and network
switch. It is used to protect against unplanned system failure.
Note: This question is part of a series of questions that present the same scenario.
Each question in the series contains a unique solution that might meet the stated goals.
Some question sets might have more than one correct solution, while others might not
have a correct solution. After you answer a question in this section, you will NOT be
able to return to it. As a result, these questions will not appear in the review screen. You
have an Azure subscription named Subscription1. Subscription1 contains a resource
group named RG1. RG1 contains resources that were deployed by using templates.
You need to view the date and time when the resources were created in RG1. Solution:
From the RG1 blade, you click Automation script. Does this meet the goal?
A. Yes
B. No ---ANSWER-- Answer: B
Explanation: From the RG1 blade, click Deployments. You see a history of deployment
for the resource group. Reference: https://docs.microsoft.com/en-
us/azure/azureresource-manager/templates/template-tutorialcreate-first-
template?tabs=azurepowershell Through activity logs, you can determine: § what
(ALREADY GRADED A+)
You have an Azure virtual machine named VM1 that runs Windows Server 2019. You
save VM1 as a template named Template1 to the Azure Resource Manager library. You
plan to deploy a virtual machine named VM2 from Template1. What can you configure
during the deployment of VM2?
A. virtual machine size
B. operating system
C. administrator username
D. resource group ---ANSWER-- Answer: D
Explanation: When deploying a virtual machine from a template, you must specify: the
Resource Group name and location for the VM the administrator username and
password an unique DNS name for the public IP
Note: This question is part of a series of questions that present the same scenario.
Each question in the series contains a unique solution that might meet the stated goals.
Some question sets might have more than one correct solution, while others might not
have a correct solution. After you answer a question in this section, you will NOT be
able to return to it. As a result, these questions will not appear in the review screen. You
have an Azure virtual machine named VM1 that runs Windows Server 2016. You need
to create an alert in Azure when more than two error events are logged to the System
log on VM1 within an hour. Solution: You create an Azure Log Analytics workspace and
configure the data settings. You add an extension to VM1. You create an alert in Azure
Monitor and specify the Log Analytics workspace as the source. Does this meet the
goal? A. Yes
B. No ---ANSWER-- Answer: B
Explanation: Instead: You create an Azure Log Analytics workspace and configure the
data settings. You install the Microsoft Monitoring Agent on VM1. You create an alert in
Azure Monitor and specify the Log Analytics workspace as the source
You have an Azure Active Directory (Azure AD) domain that contains 5,000 user
accounts. You create a new user account named AdminUser1. You need to assign the
User administrator administrative role to AdminUser1. What should you do from the user
account properties?
A. From the Directory role blade, modify the directory role.
,B. From the Groups blade, invite the user account to a new group.
C. From the Licenses blade, assign a new license. ---ANSWER-- Answer: A
Explanation: Assign a role to a user Sign in to the Azure portal with an account that's a
global admin or privileged role admin for the directory. Select Azure Active Directory,
select Users, and then select a specific user from the list. For the selected user, select
Directory role, select Add role, and then pick the appropriate admin roles from the
Directory roles list, such as Conditional access administrator. Press Select to save.
You have an Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com
that contains 100 user accounts. You purchase 10 Azure AD Premium P2 licenses for
the tenant. You need to ensure that 10 users can use all the Azure AD Premium
features. What should you do?
A. From the Groups blade of each user, invite the users to a group.
B. From the Licenses blade of Azure AD, assign a license.
C. From the Directory role blade of each user, modify the directory role.
D. From the Azure AD domain, add an enterprise application. ---ANSWER-- Answer: B
Many Azure Active Directory (Azure AD) services require you to license each of your
users or groups (and associated members) for that service. Only users with active
licenses will be able to access and use the licensed Azure AD services for which that's
true. Licenses are applied per tenant and do not transfer to other tenants. Not all
Microsoft services are available in all locations. Before a license can be assigned to a
group, you must specify the Usage location for all members. You can set this value in
the Azure Active Directory > Users > Profile > Settings area in Azure AD. Any user
whose usage location is not specified inherits the location of the Azure AD organization.
You can add the licensing rights to users or to an entire group.
You have an Azure subscription named Subscription 1 and an on-premises deployment
of Microsoft System Center Service Manager Subscription! contains a virtual machine
named VM1. You need to ensure that an alert is set in Service Manager when the
amount of available memory on VM1 is below 10 percent. What should you do first?
A. Create a notification.
B. Create an automation runbook.
C. Deploy the IT Service Management Connector (ITSM).
D. Deploy a function app. ---ANSWER-- Answer: C
Explanation: The IT Service Management Connector (ITSMC) allows you to connect
Azure and a supported IT Service Management (ITSM) product/service, such as the
Microsoft System Center Service Manager. With ITSMC, you can create work items in
ITSM tool, based on your Azure alerts (metric alerts, Activity Log alerts and Log
Analytics alerts).
,You have an on-premises server that contains a folder named D:\Folder1. You need to
copy the contents of D:\Folder1 to the public container in an Azure Storage account
named contoso data. Which command should you run?
A. https://contosodata.blob.core.windows.net/public
B. azcopy sync D:\folder1 https://contosodata.blob.core.windows.net/public --snapshot
C. azcopy copy D:\folder1 https://contosodata.blob.core.windows.net/public --recursive
D. az storage blob copy start-batch D:\Folder1 https://
contosodata.blob.core.windows.net/public ---ANSWER-- Answer: C
Explanation:
The azcopy copy command copies a directory (and all of the files in that directory) to a
blob container. The result is a directory in the container by the same name.
InANSWERs: B: The azcopy sync command replicates the source location to the
destination location. However, the file is skipped if the last modified time in the
destination is more recent. D: The az storage blob copy start-batch command copies
multiple blobs to a blob container.
You have an Azure Storage account named storage1. You plan to use AzCopy to copy
data to storage1. You need to identify the storage services in storage1 to which you can
copy the data. What should you identify?
A. blob, file, table, and queue
B. blob and file only
C. file and table only
D. file only
E. blob, table, and queue only ---ANSWER-- Answer: B
Explanation: AzCopy is a command-line utility that you can use to copy blobs or files to
or from a storage account. InANSWERs: A, C, E: AzCopy does not support table and
queue storage services. D: AzCopy supports file storage services, as well as blob
storage services.
You have an Azure subscription that contains an Azure Storage account. You plan to
create an Azure container instance named container1 that will use a Docker image
namedImage1. Image1 contains a Microsoft SQL Server instance that requires
persistent storage. You need to configure a storage service for Container1. What should
you use?
A. Azure Files
B. Azure Blob storage
C. Azure Queue storage
D. Azure Table storage ---ANSWER-- Answer: A
, Explanation:
Microsoft have Docker Volume Plugin for Azure file storage which provides exactly this
and it is used for Azure file shares. Azure File Storage volume plugin is not limited to
ease of container migration. It also allows a file share to be shared among multiple
containers (even though they are on different hosts) to collaborate on workloads, share
configuration or secrets of an application running on multiple hosts. Another use case is
uploading metrics and diagnostics data such as logs from applications to a file share for
further processing.
You have an app named App1 that runs on two Azure virtual machines named VM1 and
VM2. You plan to implement an Azure Availability Set for App1. The solution must
ensure that App1 is available during planned maintenance of the hardware hosting VM1
and VM2. What should you include in the Availability Set?
A. one update domain
B. two fault domains
C. one fault domain
D. two update domains ---ANSWER-- Answer: D
Explanation: Microsoft updates, which Microsoft refers to as planned maintenance
events, sometimes require that VMs be rebooted to complete the update. To reduce the
impact on VMs, the Azure fabric is divided into update domains to ensure that not all
VMs are rebooted at the same time. InANSWERs: A: An update domain is a group of
VMs and underlying physical hardware that can be rebooted at the same time. B, C: A
fault domain shares common storage as well as a common power source and network
switch. It is used to protect against unplanned system failure.
Note: This question is part of a series of questions that present the same scenario.
Each question in the series contains a unique solution that might meet the stated goals.
Some question sets might have more than one correct solution, while others might not
have a correct solution. After you answer a question in this section, you will NOT be
able to return to it. As a result, these questions will not appear in the review screen. You
have an Azure subscription named Subscription1. Subscription1 contains a resource
group named RG1. RG1 contains resources that were deployed by using templates.
You need to view the date and time when the resources were created in RG1. Solution:
From the RG1 blade, you click Automation script. Does this meet the goal?
A. Yes
B. No ---ANSWER-- Answer: B
Explanation: From the RG1 blade, click Deployments. You see a history of deployment
for the resource group. Reference: https://docs.microsoft.com/en-
us/azure/azureresource-manager/templates/template-tutorialcreate-first-
template?tabs=azurepowershell Through activity logs, you can determine: § what
