t
ne
sh
AZ 104 RENEWAL EXAM QUESTIONS AND
ne
ANSWER UPDATED 2023
la
tz
sh
Sp
1. You plan to deploy an Azure web app that will have the following settings
Name: WebApp1 ne
la
Publish: Docker container
Operating system: Windows
sh
Sp
Region: West US
ne
Windows Plan (West US): ASP-RG1-8bcf
la
You need to ensure that WebApp!1 uses the ASP.NET v4.7 runtime stack. Which setting
should You modify?
tz
sh
Sp
Select only one answer
a) Region
ne
b) Operating system
la
c) Publish
d) Windows Plan
sh
Sp
ne
2. You have the following Azure resources:
la
e Azure Key Vault named KeyVault1
e Azure App Service named WebApp1
tz
sh
Sp
You need to ensure that WebApp1 can access KeyVault1 by using Azure Active
Directory(Azure AD) authentication.
ne
Which two settings can be used to configure WebApp1? Each correct answer presents a
complete solution.
Select all answers that apply.
l a
sh
Sp
a) User assigned managed identity
ne
b) Application settings
a
c) TLS/SSL
l
d) Bindings
tz
sh
Sp
e) App Service Authentication
f) System assigned managed identity
ne
la
3. You have an Azure web app named Contoso2023. You add a deployment slot to
sh
Contoso2023 named Slot1. You need to be able to perform a deployment slot swap with a
Sp
preview.
ne
What should you modify?
la
Select only one answer
tz
sh
Sp
a) application settings for Contoso2023
ne
b) general settings for Contoso2023
la
c) application settings for Contoso2023-Slot1
d) general settings for
sh
Sp
e) Contoso2023-Slot1
la
, t
ne
sh
4. You plan to create an Azure container instance named container1 that will use a Docker
ne
image named Image1. You need to ensure that container1 has persistent storage.
la
Which Azure resources should you deploy for the persistent storage?
Select only one answer.
tz
sh
Sp
a) an Azure container registry only
b) an Azure Storage account and a file share
ne
c) an Azure Storage account and a blob container
la
d) an Azure SQL database only
sh
Sp
5. You have an Azure container registry named Registry1. You enable the admin user for
ne
Registry1.
la
Which username should you use to connect to Registry1 as an admin user?
tz
sh
Sp
Select only one answer
a) Admin
ne
b) Root
la
c) Administrator
sh
d) Registry1.azurecr.io
Sp
ne
6. You have an Azure subscription that contains the following resources:
la
a storage account named storage123
a container instance named App Container
tz
sh
Sp
The subscription contains a virtual network named VirtualNet4 that has the
following subnets:
ne
SubnetA- storage123 is connected to SubnetA.
SubnetB- AppContainer is connected to SubnetB. l a
sh
Sp
SubnetC- No resources.
You plan to deploy an Azure container instance named container5 to VirtualNet4.
To which subnets can you deploy container5? Select only one answer.
ne
a
a) SubnetB only
l
tz
b) SubnetC only
sh
Sp
c) SubnetB and SubnetC only
ne
d) SubnetA, SubnetB, and SubnetC
la
7. You have an Azure Storage account named storage1. You create the following encryption
sh
Sp
scopes for storage1:
Scope1 that has an encryption type of Microsoft-managed keys
ne
Scope2 that has an encryption type of Customer-managed keys
la
Which storage services can be used with Scope2? Select only one answer.
tz
a) blob only
sh
Sp
b) file only
ne
c) blob and file only
la
d) table and queue only
e) blob, file, table, and queue
sh
Sp
la
, t
ne
sh
ne
You have an Azure Storage account named storage’ that contains a file share named share.
la
You also have an on-premises Active Directory domain that contains a user named User1.
You need to ensure that User! can access share1 by using the SMB protocol.
tz
sh
Sp
What should you do?
ne
a) Provide User1 with the shared access signature (SAS) for storage.
la
b) Configure the Access control (IAM) settings of storage.
c) Configure the Firewalls and virtual networks settings of storage1
sh
Sp
d) Provide User1 with the access key for storage1.
ne
la
10. You have an Azure Storage account named storage1 that is configured to use the Hot
tz
sh
Sp
access tier.
Storage has a container named container1 and the lifecycle management rule with the
ne
following settings:
la
Move blob to cool storage: Selected
sh
Days after last modification: 3
Sp
Move blob to archive storage: Selected
ne
Days after last modification: 5
la
On December 1, you create a file named File1 in container1. On December 10, you rehydrate
tz
sh
Sp
File1 and move the file to the Hot access tier. When will File1 be moved to archive storage?
ne
Select only one answer
a) within 24 hours
b) on December 15 l a
sh
Sp
c) on December 18
d) on January 1
ne
a
11. You have an Azure Storage account named storage1. You need to provide time-limited
l
tz
access to storage1.
sh
Sp
What should you use?
ne
Select only one answer
la
a) an access key
b) a role assignment
sh
Sp
c) an access policy
d) a share access signature (SAS)
ne
la
12. You have the following Azure virtual machines that run Windows Server 2019:
tz
Server1- connected to VirtualNET1 and has a Wingtiptoys.com DNS suffix configured in
sh
Sp
Windows Server 2019
ne
Server2- connected to VirtualNET1 and has a Fabrikam.com DNS suffix configured in
la
Windows Server 2019
Server3- connected to VirtualNET2 and has a Wingtiptoys.com DNS suffix configured
sh
Sp
la
ne
sh
AZ 104 RENEWAL EXAM QUESTIONS AND
ne
ANSWER UPDATED 2023
la
tz
sh
Sp
1. You plan to deploy an Azure web app that will have the following settings
Name: WebApp1 ne
la
Publish: Docker container
Operating system: Windows
sh
Sp
Region: West US
ne
Windows Plan (West US): ASP-RG1-8bcf
la
You need to ensure that WebApp!1 uses the ASP.NET v4.7 runtime stack. Which setting
should You modify?
tz
sh
Sp
Select only one answer
a) Region
ne
b) Operating system
la
c) Publish
d) Windows Plan
sh
Sp
ne
2. You have the following Azure resources:
la
e Azure Key Vault named KeyVault1
e Azure App Service named WebApp1
tz
sh
Sp
You need to ensure that WebApp1 can access KeyVault1 by using Azure Active
Directory(Azure AD) authentication.
ne
Which two settings can be used to configure WebApp1? Each correct answer presents a
complete solution.
Select all answers that apply.
l a
sh
Sp
a) User assigned managed identity
ne
b) Application settings
a
c) TLS/SSL
l
d) Bindings
tz
sh
Sp
e) App Service Authentication
f) System assigned managed identity
ne
la
3. You have an Azure web app named Contoso2023. You add a deployment slot to
sh
Contoso2023 named Slot1. You need to be able to perform a deployment slot swap with a
Sp
preview.
ne
What should you modify?
la
Select only one answer
tz
sh
Sp
a) application settings for Contoso2023
ne
b) general settings for Contoso2023
la
c) application settings for Contoso2023-Slot1
d) general settings for
sh
Sp
e) Contoso2023-Slot1
la
, t
ne
sh
4. You plan to create an Azure container instance named container1 that will use a Docker
ne
image named Image1. You need to ensure that container1 has persistent storage.
la
Which Azure resources should you deploy for the persistent storage?
Select only one answer.
tz
sh
Sp
a) an Azure container registry only
b) an Azure Storage account and a file share
ne
c) an Azure Storage account and a blob container
la
d) an Azure SQL database only
sh
Sp
5. You have an Azure container registry named Registry1. You enable the admin user for
ne
Registry1.
la
Which username should you use to connect to Registry1 as an admin user?
tz
sh
Sp
Select only one answer
a) Admin
ne
b) Root
la
c) Administrator
sh
d) Registry1.azurecr.io
Sp
ne
6. You have an Azure subscription that contains the following resources:
la
a storage account named storage123
a container instance named App Container
tz
sh
Sp
The subscription contains a virtual network named VirtualNet4 that has the
following subnets:
ne
SubnetA- storage123 is connected to SubnetA.
SubnetB- AppContainer is connected to SubnetB. l a
sh
Sp
SubnetC- No resources.
You plan to deploy an Azure container instance named container5 to VirtualNet4.
To which subnets can you deploy container5? Select only one answer.
ne
a
a) SubnetB only
l
tz
b) SubnetC only
sh
Sp
c) SubnetB and SubnetC only
ne
d) SubnetA, SubnetB, and SubnetC
la
7. You have an Azure Storage account named storage1. You create the following encryption
sh
Sp
scopes for storage1:
Scope1 that has an encryption type of Microsoft-managed keys
ne
Scope2 that has an encryption type of Customer-managed keys
la
Which storage services can be used with Scope2? Select only one answer.
tz
a) blob only
sh
Sp
b) file only
ne
c) blob and file only
la
d) table and queue only
e) blob, file, table, and queue
sh
Sp
la
, t
ne
sh
ne
You have an Azure Storage account named storage’ that contains a file share named share.
la
You also have an on-premises Active Directory domain that contains a user named User1.
You need to ensure that User! can access share1 by using the SMB protocol.
tz
sh
Sp
What should you do?
ne
a) Provide User1 with the shared access signature (SAS) for storage.
la
b) Configure the Access control (IAM) settings of storage.
c) Configure the Firewalls and virtual networks settings of storage1
sh
Sp
d) Provide User1 with the access key for storage1.
ne
la
10. You have an Azure Storage account named storage1 that is configured to use the Hot
tz
sh
Sp
access tier.
Storage has a container named container1 and the lifecycle management rule with the
ne
following settings:
la
Move blob to cool storage: Selected
sh
Days after last modification: 3
Sp
Move blob to archive storage: Selected
ne
Days after last modification: 5
la
On December 1, you create a file named File1 in container1. On December 10, you rehydrate
tz
sh
Sp
File1 and move the file to the Hot access tier. When will File1 be moved to archive storage?
ne
Select only one answer
a) within 24 hours
b) on December 15 l a
sh
Sp
c) on December 18
d) on January 1
ne
a
11. You have an Azure Storage account named storage1. You need to provide time-limited
l
tz
access to storage1.
sh
Sp
What should you use?
ne
Select only one answer
la
a) an access key
b) a role assignment
sh
Sp
c) an access policy
d) a share access signature (SAS)
ne
la
12. You have the following Azure virtual machines that run Windows Server 2019:
tz
Server1- connected to VirtualNET1 and has a Wingtiptoys.com DNS suffix configured in
sh
Sp
Windows Server 2019
ne
Server2- connected to VirtualNET1 and has a Fabrikam.com DNS suffix configured in
la
Windows Server 2019
Server3- connected to VirtualNET2 and has a Wingtiptoys.com DNS suffix configured
sh
Sp
la
