AZ-104 RENEWAL EXAM QUESTIONS With 100% Verified
Answers
You need to ensure that Admin1 can deploy the Marketplace resource successfully. What should you
do?
A. From Azure PowerShell, run the Set-AzApiManagementSubscription cmdlet
B. From the Azure portal, register the Microsoft.Marketplace resource provider
C. From Azure PowerShell, run the Set-AzMarketplaceTerms cmdlet
D. From the Azure portal, assign the Billing administrator role to Admin1
C. From Azure PowerShell, run the Set-AzMarketplaceTerms cmdlet
Explanation:
Set-AzMarketplaceTerms -Publisher <String> -Product <String> -Name <String> [-Accept] [-Terms
<PSAgreementTerms>] [-DefaultProfile <IAzureContextContainer>] [-WhatIf] [-Confirm]
[<CommonParameters>]
Reference: https://docs.microsoft.com/en-
us/powershell/module/Az.MarketplaceOrdering/SetAzMarketplaceTerms?view=azps-4.6.0
(Slide) You have an Azure AD tenant that contains 5,000 user accounts. You create a new user account
named AdminUser1. You need to assign the User administrator administrative role to AdminUser1.
What should you do from the user account properties?
A. From the Licenses blade, assign a new license
B. From the Directory role blade, modify the directory role
C. From the Groups blade, invite the user account to a new group
B. From the Directory role blade, modify the directory role
Explanation:
Active directory --> Users --> select the username --> Assigned roles --> click on +add Assignments -->
select User administrator role
,(Slide) You have an Azure AD tenant named contoso.onmicrosoft.com that contains 100 user accounts.
You purchase 10 Azure AD Premium P2 licenses for the tenant. You need to ensure that 10 users can use
all the Azure AD Premium features. What should you do?
A. From the License blade of Azure AD, assign a license
B. From the Groups blade of each user, invite the users to a group
C. From the Azure AD domain, add an enterprise application
D. From the Directory role blade of each user, modify the directory role
A. From the Licenses blade of Azure AD, assign a license
(Slide) You have an Azure subscription named Subscription1 and an on-premises deployment of
Microsoft System Center Service Manager. Subscription1 contains a VM named VM1. You need to
ensure that an alert is set in Service Manager when the amount of available memory on VM1 is below
10 percent. What should you do first?
A. Create an automation runbook
B. Deploy a function app
C. Deploy the IT Service Management Connector (ITSM)
D. Create a notification
C. Deploy the IT Service Management Connector (ITSM)
Explanation:
IT Service Management Connector (ITSMC) allows you to connect Azure to a supported IT Service
Management (ITSM) product or service. Azure services like Azure Log Analytics and Azure Monitor
provide tools to detect, analyze, and troubleshoot problems with your Azure and non-Azure resources.
But the work items related to an issue typically reside in an ITSM product or service. ITSMC provides a
bi-directional connection between Azure and ITSM tools to help you resolve issues faster. ITSMC
supports connections with the following ITSM tools: ServiceNow, System Center Service Manager,
Provance, Cherwell.
(Slide) You sign up for Azure AD Premium. You need to add a user named as an
administrator on all the computers that will be joined to the Azure AD domain. What should you
configure in Azure AD?
A. Device settings from the Devices blade
B. Providers from the MFA Server blade
C. User settings from the Users blade
,D. General settings from the Groups blade
A. Device settings from the Devices blade
(HOTSPOT)
You have an Azure Active Directory tenant named Contoso.com that includes following users:
Name_________________________________________Role
User1.........................................Cloud device administrator
User2.................................................User administrator
Contoso.com includes following Windows 10 devices:
Name_____________________________Join type
Device1............................Azure AD registered
Device2..............................Azure AD joined
You create the following security groups in Contoso.com:
Name____________________Membership Type_________________________Owner
Group1....................................Assigned.................................................User2
Group2.............................Dynamic Device........................................User2
ANSWER AREA
User1 can add Device2 to Group1...................................Yes/No
User2 can add Device1 to Group1...................................Yes/No
User2 can add Device2 to Group2.................................Yes/No
User1 can add Device2 to Group1...................................No
User1 is a cloud device administrator. Users in this role can enable, disable, and delete devices in Azure
AD and read Windows 10 BitLocker keys (if present) in the Azure portal. The role does not grant
permissions to manage any other properties on the device.
User2 can add Device1 to Group1...................................Yes
User2 is the owner of Group1. He can add Device1 to Group1.
User2 can add Device2 to Group2.................................No
Group2 is configured for dynamic membership. The properties on which the membership of a device in a
group of the type dynamic device are defined cannot be changed by either an end user or an
administrator. User2 cannot add any device to Group2.
, Groups can contain both registered and joined devices as members. As a global administrator or cloud
device administrator, you can manage the registered or joined devices. Intune Service administrators
can update and delete devices. User administrator can manage users but not devices.
(Slide) You have an Azure subscription that contains a resource group named RG26. RG26 is set to the
West Europe location and is used to create temporary resources for a project. RG26 contains the
resources shown in the following table.
NAME____|_______________TYPE_________________|___LOCATION
VM1...........|.............Virtual machine..............|....North Europe
RGV1.........|....Recovery Services vault.....|....North Europe SQLD01...|....SQL
server in Azure VM.....|....North Europe sa001........|...........Storage
account..............|.....West Europe
SQLD01 is backed up to RGV1.
When the project is complete, you attempt to delete RG26 from the Azure portal. The deletion fails. You
need to delete RG26. What should you do first?
A. Delete VM1
B. Stop VM1
C. Stop the backup of SQLD01
D. Delete sa001
C. Stop the backup of SQLDB01
You have an Azure subscription named Subscription1 that contains a virtual network named VNet1.
VNet1 is in a resource group named RG1. Subscription1 has a user named User1. User1 has the following
roles:
- Reader
- Security Admin
- Security Reader
You need to ensure that User1 can assign the Reader role for VNet1 to other users. What should you do?
A. Remove User1 from the Security Reader role for Subscription1. Assign User1 the Contributor role for
Subscription1.
B. Assign User1 the User Access Administrator role for VNet1.
C. Assign User1 the Network Contributor role for VNet1.
D. Assign User1 the Network Contributor role for RG1.
B. Assign User1 the User Access Administrator role for VNet1.
Answers
You need to ensure that Admin1 can deploy the Marketplace resource successfully. What should you
do?
A. From Azure PowerShell, run the Set-AzApiManagementSubscription cmdlet
B. From the Azure portal, register the Microsoft.Marketplace resource provider
C. From Azure PowerShell, run the Set-AzMarketplaceTerms cmdlet
D. From the Azure portal, assign the Billing administrator role to Admin1
C. From Azure PowerShell, run the Set-AzMarketplaceTerms cmdlet
Explanation:
Set-AzMarketplaceTerms -Publisher <String> -Product <String> -Name <String> [-Accept] [-Terms
<PSAgreementTerms>] [-DefaultProfile <IAzureContextContainer>] [-WhatIf] [-Confirm]
[<CommonParameters>]
Reference: https://docs.microsoft.com/en-
us/powershell/module/Az.MarketplaceOrdering/SetAzMarketplaceTerms?view=azps-4.6.0
(Slide) You have an Azure AD tenant that contains 5,000 user accounts. You create a new user account
named AdminUser1. You need to assign the User administrator administrative role to AdminUser1.
What should you do from the user account properties?
A. From the Licenses blade, assign a new license
B. From the Directory role blade, modify the directory role
C. From the Groups blade, invite the user account to a new group
B. From the Directory role blade, modify the directory role
Explanation:
Active directory --> Users --> select the username --> Assigned roles --> click on +add Assignments -->
select User administrator role
,(Slide) You have an Azure AD tenant named contoso.onmicrosoft.com that contains 100 user accounts.
You purchase 10 Azure AD Premium P2 licenses for the tenant. You need to ensure that 10 users can use
all the Azure AD Premium features. What should you do?
A. From the License blade of Azure AD, assign a license
B. From the Groups blade of each user, invite the users to a group
C. From the Azure AD domain, add an enterprise application
D. From the Directory role blade of each user, modify the directory role
A. From the Licenses blade of Azure AD, assign a license
(Slide) You have an Azure subscription named Subscription1 and an on-premises deployment of
Microsoft System Center Service Manager. Subscription1 contains a VM named VM1. You need to
ensure that an alert is set in Service Manager when the amount of available memory on VM1 is below
10 percent. What should you do first?
A. Create an automation runbook
B. Deploy a function app
C. Deploy the IT Service Management Connector (ITSM)
D. Create a notification
C. Deploy the IT Service Management Connector (ITSM)
Explanation:
IT Service Management Connector (ITSMC) allows you to connect Azure to a supported IT Service
Management (ITSM) product or service. Azure services like Azure Log Analytics and Azure Monitor
provide tools to detect, analyze, and troubleshoot problems with your Azure and non-Azure resources.
But the work items related to an issue typically reside in an ITSM product or service. ITSMC provides a
bi-directional connection between Azure and ITSM tools to help you resolve issues faster. ITSMC
supports connections with the following ITSM tools: ServiceNow, System Center Service Manager,
Provance, Cherwell.
(Slide) You sign up for Azure AD Premium. You need to add a user named as an
administrator on all the computers that will be joined to the Azure AD domain. What should you
configure in Azure AD?
A. Device settings from the Devices blade
B. Providers from the MFA Server blade
C. User settings from the Users blade
,D. General settings from the Groups blade
A. Device settings from the Devices blade
(HOTSPOT)
You have an Azure Active Directory tenant named Contoso.com that includes following users:
Name_________________________________________Role
User1.........................................Cloud device administrator
User2.................................................User administrator
Contoso.com includes following Windows 10 devices:
Name_____________________________Join type
Device1............................Azure AD registered
Device2..............................Azure AD joined
You create the following security groups in Contoso.com:
Name____________________Membership Type_________________________Owner
Group1....................................Assigned.................................................User2
Group2.............................Dynamic Device........................................User2
ANSWER AREA
User1 can add Device2 to Group1...................................Yes/No
User2 can add Device1 to Group1...................................Yes/No
User2 can add Device2 to Group2.................................Yes/No
User1 can add Device2 to Group1...................................No
User1 is a cloud device administrator. Users in this role can enable, disable, and delete devices in Azure
AD and read Windows 10 BitLocker keys (if present) in the Azure portal. The role does not grant
permissions to manage any other properties on the device.
User2 can add Device1 to Group1...................................Yes
User2 is the owner of Group1. He can add Device1 to Group1.
User2 can add Device2 to Group2.................................No
Group2 is configured for dynamic membership. The properties on which the membership of a device in a
group of the type dynamic device are defined cannot be changed by either an end user or an
administrator. User2 cannot add any device to Group2.
, Groups can contain both registered and joined devices as members. As a global administrator or cloud
device administrator, you can manage the registered or joined devices. Intune Service administrators
can update and delete devices. User administrator can manage users but not devices.
(Slide) You have an Azure subscription that contains a resource group named RG26. RG26 is set to the
West Europe location and is used to create temporary resources for a project. RG26 contains the
resources shown in the following table.
NAME____|_______________TYPE_________________|___LOCATION
VM1...........|.............Virtual machine..............|....North Europe
RGV1.........|....Recovery Services vault.....|....North Europe SQLD01...|....SQL
server in Azure VM.....|....North Europe sa001........|...........Storage
account..............|.....West Europe
SQLD01 is backed up to RGV1.
When the project is complete, you attempt to delete RG26 from the Azure portal. The deletion fails. You
need to delete RG26. What should you do first?
A. Delete VM1
B. Stop VM1
C. Stop the backup of SQLD01
D. Delete sa001
C. Stop the backup of SQLDB01
You have an Azure subscription named Subscription1 that contains a virtual network named VNet1.
VNet1 is in a resource group named RG1. Subscription1 has a user named User1. User1 has the following
roles:
- Reader
- Security Admin
- Security Reader
You need to ensure that User1 can assign the Reader role for VNet1 to other users. What should you do?
A. Remove User1 from the Security Reader role for Subscription1. Assign User1 the Contributor role for
Subscription1.
B. Assign User1 the User Access Administrator role for VNet1.
C. Assign User1 the Network Contributor role for VNet1.
D. Assign User1 the Network Contributor role for RG1.
B. Assign User1 the User Access Administrator role for VNet1.
