AZ-104 RENEWAL EXAM QUESTIONS AND CORRECT ANSWERS |ALREADY GRADED A

AZ-104 RENEWAL EXAM QUESTIONS AND CORRECT ANSWERS |ALREADY GRADED A You have an Azure Storage account named storage1. You need to provide time-limited access to storage1. What should you use? Select only one answer. an access key a role assignment an access policy a shared access signature (SAS) You have the following Azure virtual machines that run Windows Server 2019: • Server1- connected to VirtualNET1 and has a W DNS suffix configured in Windows Server 2019 • Server2- connected to VirtualNET1 and has a F DNS suffix configured in Windows Server 2019 • Server3- connected to VirtualNET2 and has a W DNS suffix configured in Windows Server 2019 • Server4- connected to VirtualNET2 and has a F DNS suffix configured in Windows Server 2019 You create a private DNS zone named and add the following virtual network links to : • Link1- connected to VirtualNET1 and has auto registration enabled • Link2- connected to VirtualNET2 and has auto registration enabled Which virtual machines will register a DNS record in ? Select only one answer. Server2 only Server1 and Server2 only Server2 and Server4 only Server1, Server2, Server3, and Server4 A company named Contoso, Ltd. has an Azure subscription that contains an Azure Active Directory (Azure AD) tenant named . The Azure subscription contains the following virtual networks: • VNET1- deployed in the East US location • VNET2- deployed in the East US location • VNET3- deployed in the West US location Contoso purchases a company named A. Datum Corporation. A. Datum has an Azure subscription that contains an Azure AD tenant named . A contains the following virtual networks: • VNETA- deployed in the East US location • VNETB- deployed in the West US location Which virtual networks can you peer to VNET1? Select only one answer. VNET2 only VNET2 and VNET3 only VNET2 and VNETA only VNET2, VNET3, and VNETA only VNET2, VNET3, VNETA, and VNETB You have an Azure virtual machine named VM1 that connects to a virtual network named VNET1. You create a private DNS zone named and add an A record named host1 to the zone. You need to ensure that VM1 can resolve . What should you do? Select only one answer. Modify the Access control (IAM) settings of the zone. From the zone, add a virtual network link. From the properties of the network interface, modify the options of the DNS servers. From the properties of VNET1, modify the options of the DNS servers. You have a proximity placement group named Proximity1. You plan to create the following Azure resources: • a virtual machine named VM1 • a disk named Disk1 • a virtual network named VNET1 • a public IP address named IP1 Which resources can you place in Proximity1? Select only one answer. VM1 only VM1 and Disk1 only Disk1 and IP1 only VNET1, Disk1, and IP1 only You have an Azure virtual network named VNET1 has and a network security group (NSG) named NSG1. NSG1 has the following inbound security rules: • Rule1 has a priority of 100 and allows port 3389 on TCP protocol from any source and to any destination • Rule2 has a priority of 200 and allows ports 80 and 8080 on UDP protocol from any source and to any destination • Rule3 has a priority of 300 and denies ports 1-2000 on TCP protocol from any source and to any destination • Rule4 has a priority of 400 and allows ports 50-500 on TCP protocol from VirtualNetwork source and to any destination • Rule5 has a priority of 500 and allows ports 80 and 443 on TCP protocol from any source and to any destination You need to allow http and https connections from the internet to VNET1. What should you change for NSG1? Select only one answer. Priority for Rule4 to 250 Protocol for Rule2 to TCP Priority for Rule3 to 450 Priority for Rule5 to 250 You have an Azure virtual machine named VM1 that connects to a virtual network named VNET1. A network security group (NSG) named NSG1 allows connections to VM1 from VNET1 only. You need to add an inbound security rule to NSG1 that meets the following requirements: • Allows Azure Backup to back up VM1 • Minimizes the types of allowed inbound traffic What should you use as the source for the inbound security rule?