Azure Administrator Associate (AZ-104) Study Stack, Exams of Network and System Administration

A comprehensive study stack for the azure administrator associate (az-104) certification exam, including the newest updated questions and answers for the 2024/2025 exam cycle. It covers a wide range of azure-related topics, such as azure active directory, azure kubernetes service, azure storage, azure virtual machines, azure networking, and azure monitoring. The study stack is rated a+ for success, with 100% correct and verified answers. It is designed to help azure administrators and aspiring azure professionals prepare for the az-104 exam and master the required skills and knowledge to effectively manage and administer azure resources.

Typology: Exams

2024/2025

Available from 09/29/2024

HESIEXPERT01
HESIEXPERT01 🇺🇸

4.1

(7)

2.9K documents

1 / 33

Toggle sidebar

This page cannot be seen from the preview

Don't miss anything!

bg1
AZURE ADMINISTRATOR ASSOCIATE (AZ-104) STUDY STACK
QUESTIONS AND ANSWERS NEWEST UPDATED 2024/2025
ALL ANSWERS 100% CORRECT VERIFIED BEST EXAM
SOLUTION RATED A+ FOR SUCCESS
You have an Azure subscription that contains an Azure Active Directory (Azure AD) tenant
named contoso.com and an Azure Kubernetes Service (AKS) cluster named AKS1.
An administrator reports that she is unable to grant access to AKS1 to the users in
contoso.com.
You need to ensure that access to AKS1 can be granted to the contoso.com users.
What should you do first?
A. From contoso.com, modify the Organization relationships settings.
B. From contoso.com, create an OAuth 2.0 authorization endpoint.
C. Recreate AKS1.
D. From AKS1, create a namespace. - CORRECT ANSWERS B. From contoso.com, create an
OAuth 2.0 authorization endpoint.
You have a Microsoft 365 tenant and an Azure Active Directory (Azure AD) tenant named
contoso.com.
You plan to grant three users named User1, User2, and User3 access to a temporary
Microsoft SharePoint document library named Library1.
You need to create groups for the users. The solution must ensure that the groups are
deleted automatically after 180 days.
pf3
pf4
pf5
pf8
pf9
pfa
pfd
pfe
pff
pf12
pf13
pf14
pf15
pf16
pf17
pf18
pf19
pf1a
pf1b
pf1c
pf1d
pf1e
pf1f
pf20
pf21

Partial preview of the text

Download Azure Administrator Associate (AZ-104) Study Stack and more Exams Network and System Administration in PDF only on Docsity!

QUESTIONS AND ANSWERS NEWEST UPDATED 2024/

ALL ANSWERS 100% CORRECT VERIFIED BEST EXAM

SOLUTION RATED A+ FOR SUCCESS

You have an Azure subscription that contains an Azure Active Directory (Azure AD) tenant named contoso.com and an Azure Kubernetes Service (AKS) cluster named AKS1. An administrator reports that she is unable to grant access to AKS1 to the users in contoso.com. You need to ensure that access to AKS1 can be granted to the contoso.com users. What should you do first? A. From contoso.com, modify the Organization relationships settings. B. From contoso.com, create an OAuth 2.0 authorization endpoint. C. Recreate AKS1. D. From AKS1, create a namespace. - CORRECT ANSWERS B. From contoso.com, create an OAuth 2.0 authorization endpoint. You have a Microsoft 365 tenant and an Azure Active Directory (Azure AD) tenant named contoso.com. You plan to grant three users named User1, User2, and User3 access to a temporary Microsoft SharePoint document library named Library1. You need to create groups for the users. The solution must ensure that the groups are deleted automatically after 180 days.

QUESTIONS AND ANSWERS NEWEST UPDATED 2024/

ALL ANSWERS 100% CORRECT VERIFIED BEST EXAM

SOLUTION RATED A+ FOR SUCCESS

Which two groups should you create? A. an Office 365 group that uses the Assigned membership type B. a Security group that uses the Assigned membership type C. an Office 365 group that uses the Dynamic User membership type D. a Security group that uses the Dynamic User membership type E. a Security group that uses the Dynamic Device membership type - CORRECT ANSWERS A. an Office 365 group that uses the Assigned membership type C. an Office 365 group that uses the Dynamic User membership type You recently created a new Azure subscription that contains a user named Admin1. Admin1 attempts to deploy an Azure Marketplace resource by using an Azure Resource Manager template. Admin1 deploys the template by using AzurePowerShell and receives the following error message: "User failed validation to purchase resources. Error message: "Legal terms have not been accepted for this item on this subscription. To accept legal terms, please go to the Azure portal (http://go.microsoft.com/fwlink/?LinkId=534873) and configure programmatic deployment for the Marketplace item or create it there for the first time. "You need to ensure that Admin1 can deploy the Marketplace resource successfully." What should you do?

QUESTIONS AND ANSWERS NEWEST UPDATED 2024/

ALL ANSWERS 100% CORRECT VERIFIED BEST EXAM

SOLUTION RATED A+ FOR SUCCESS

You need to ensure that 10 users can use all the Azure AD Premium features. What should you do? A. From the Licenses blade of Azure AD, assign a license B. From the Groups blade of each user, invite the users to a group C. From the Azure AD domain, add an enterprise application D. From the Directory role blade of each user, modify the directory role - CORRECT ANSWERS A. From the Licenses blade of Azure AD, assign a license You have an Azure subscription named Subscription1 and an on-premises deployment of Microsoft System Center Service Manager. Subscription1 contains a virtual machine named VM1. You need to ensure that an alert is set in Service Manager when the amount of available memory on VM1 is below 10 percent. What should you do first? A. Create an automation runbook B. Deploy a function app

QUESTIONS AND ANSWERS NEWEST UPDATED 2024/

ALL ANSWERS 100% CORRECT VERIFIED BEST EXAM

SOLUTION RATED A+ FOR SUCCESS

C. Deploy the IT Service Management Connector (ITSM) D. Create a notification - CORRECT ANSWERS C. Deploy the IT Service Management Connector (ITSM) You sign up for Azure Active Directory (Azure AD) Premium. You need to add a user named [email protected] as an administrator on all the computers that will be joined to the Azure AD domain. What should you configure in Azure AD? A. Device settings from the Devices blade B. Providers from the MFA Server blade C. User settings from the Users blade D. General settings from the Groups blade - CORRECT ANSWERS A. Device settings from the Devices blade You have an Azure subscription named Subscription1 that contains a virtual network named VNet1. VNet1 is in a resource group named RG1.Subscription1 has a user named User1. User1 has the following roles: ✑ Reader ✑ Security Admin

QUESTIONS AND ANSWERS NEWEST UPDATED 2024/

ALL ANSWERS 100% CORRECT VERIFIED BEST EXAM

SOLUTION RATED A+ FOR SUCCESS

B. NSEC

C. SRV

D. NSEC3 - CORRECT ANSWERS A. MX

You have an Azure Storage account named storage1. You plan to use AzCopy to copy data to storage1. You need to identify the storage services in storage1 to which you can copy the data. What should you identify? A. blob, file, table, and queue B. blob and file only C. file and table only D. file only E. blob, table, and queue only - CORRECT ANSWERS B. blob and file only You have an Azure subscription that contains an Azure Storage account.

QUESTIONS AND ANSWERS NEWEST UPDATED 2024/

ALL ANSWERS 100% CORRECT VERIFIED BEST EXAM

SOLUTION RATED A+ FOR SUCCESS

You plan to create an Azure container instance named container1 that will use a Docker image named Image1. Image1 contains a Microsoft SQL Server instance that requires persistent storage. You need to configure a storage service for Container1. What should you use? A. Azure Files B. Azure Blob storage C. Azure Queue storage D. Azure Table storage - CORRECT ANSWERS D. Azure Table storage You have an app named App1 that runs on two Azure virtual machines named VM1 and VM2. You plan to implement an Azure Availability Set for App1. The solution must ensure that App1 is available during planned maintenance of the hardware hostingVM1 and VM2. What should you include in the Availability Set? A. one update domain B. two fault domains

QUESTIONS AND ANSWERS NEWEST UPDATED 2024/

ALL ANSWERS 100% CORRECT VERIFIED BEST EXAM

SOLUTION RATED A+ FOR SUCCESS

You plan to use the disk files to provision an Azure virtual machine named VM1. VM1 will be attached to a virtual network named VNet1. VNet1 uses an IP address space of 192.168.0.0/24. You need to configure account1 to meet the following requirements: ✑ Ensure that you can upload the disk files to account1. ✑ Ensure that you can attach the disks to VM1. ✑ Prevent all other access to account1. Which two actions should you perform? A. From the Firewalls and virtual networks blade of account1, select Selected networks. B. From the Firewalls and virtual networks blade of account1, select Allow trusted Microsoft services to access this storage account. C. From the Fi - CORRECT ANSWERS A. From the Firewalls and virtual networks blade of account1, select Selected networks. E. From the Service endpoints blade of VNet1, add a service endpoint. You have an Azure subscription named Subscription1. Subscription1 contains a resource group named RG1. RG1 contains resources that were deployed by using templates. You need to view the date and time when the resources were created in RG1.

QUESTIONS AND ANSWERS NEWEST UPDATED 2024/

ALL ANSWERS 100% CORRECT VERIFIED BEST EXAM

SOLUTION RATED A+ FOR SUCCESS

Solution: From the Subscriptions blade, you select the subscription, and then click Programmatic deployment. Does this meet the goal? A. Yes B. No - CORRECT ANSWERS B. No You have an Azure subscription named Subscription1. Subscription1 contains a resource group named RG1. RG1 contains resources that were deployed by using templates. You need to view the date and time when the resources were created in RG1. Solution: From the RG1 blade, you click Automation script. Does this meet the goal? A. Yes B. No - CORRECT ANSWERS B. No You have an Azure subscription named Subscription1. Subscription1 contains a resource group named RG1. RG1 contains resources that were deployed by using templates. You need to view the date and time when the resources were created in RG1.

QUESTIONS AND ANSWERS NEWEST UPDATED 2024/

ALL ANSWERS 100% CORRECT VERIFIED BEST EXAM

SOLUTION RATED A+ FOR SUCCESS

You plan to deploy three Azure virtual machines named VM1, VM2, and VM3. The virtual machines will host a web app named App1. You need to ensure that at least two virtual machines are available if a single Azure datacenter becomes unavailable. What should you deploy? A. all three virtual machines in a single Availability Zone B. all virtual machines in a single Availability Set C. each virtual machine in a separate Availability Zone D. each virtual machine in a separate Availability Set - CORRECT ANSWERS B. all virtual machines in a single Availability Set You have an Azure virtual machine named VM1 that runs Windows Server 2019. You save VM1 as a template named Template1 to the Azure Resource Manager library. You plan to deploy a virtual machine named VM2 from Template1. What can you configure during the deployment of VM2? A. operating system

QUESTIONS AND ANSWERS NEWEST UPDATED 2024/

ALL ANSWERS 100% CORRECT VERIFIED BEST EXAM

SOLUTION RATED A+ FOR SUCCESS

B. administrator username C. virtual machine size D. resource group - CORRECT ANSWERS B. administrator username You have an Azure subscription that contains an Azure virtual machine named VM1. VM runs a financial reporting app named App1 that does not support multiple active instances. At the end of each month, CPU usage for VM1 peaks when App1 runs. You need to create a scheduled runbook to increase the processor performance of VM1 at the end of each month.What task should you include in the runbook? A. Add the Azure Performance Diagnostics agent to VM1. B. Modify the VM size property of VM1. C. Add VM1 to a scale set. D. Increase the vCPU quota for the subscription. E. Add a Desired State Configuration (DSC) extension to VM1. - CORRECT ANSWERS E. Add a Desired State Configuration (DSC) extension to VM1. You have an Azure virtual machine named VM1 that runs Windows Server 2019.

QUESTIONS AND ANSWERS NEWEST UPDATED 2024/

ALL ANSWERS 100% CORRECT VERIFIED BEST EXAM

SOLUTION RATED A+ FOR SUCCESS

Solution: You create an Azure Log Analytics workspace and configure the data settings. You add the Microsoft Monitoring Agent VM extension to VM1. You create an alert in Azure Monitor and specify the Log Analytics workspace as the source. Does this meet the goal? A. Yes B. No - CORRECT ANSWERS B. No You have an Azure virtual machine named VM1 that runs Windows Server 2016. You need to create an alert in Azure when more than two error events are logged to the System event log on VM1 within an hour. Solution: You create an Azure Log Analytics workspace and configure the data settings. You install the Microsoft Monitoring Agent on VM1. You create an alert in Azure Monitor and specify the Log Analytics workspace as the source. Does this meet the goal? A. Yes B. No - CORRECT ANSWERS A. Yes You have an Azure virtual machine named VM1 that runs Windows Server 2016.

QUESTIONS AND ANSWERS NEWEST UPDATED 2024/

ALL ANSWERS 100% CORRECT VERIFIED BEST EXAM

SOLUTION RATED A+ FOR SUCCESS

You need to create an alert in Azure when more than two error events are logged to the System event log on VM1 within an hour. Solution: You create an Azure storage account and configure shared access signatures (SASs). You install the Microsoft Monitoring Agent on VM1. You create an alert in Azure Monitor and specify the storage account as the source. Does this meet the goal? A. Yes B. No - CORRECT ANSWERS B. No You have a deployment template named Template1 that is used to deploy 10 Azure web apps. You need to identify what to deploy before you deploy Template1. The solution must minimize Azure costs. What should you identify? A. five Azure Application Gateways B. one App Service plan C. 10 App Service plans D. one Azure Traffic Manager

QUESTIONS AND ANSWERS NEWEST UPDATED 2024/

ALL ANSWERS 100% CORRECT VERIFIED BEST EXAM

SOLUTION RATED A+ FOR SUCCESS

You have an Azure subscription named Subscription1 that has the following providers registered: ✑ Authorization ✑ Automation ✑ Resources ✑ Compute ✑ KeyVault ✑ Network ✑ Storage ✑ Billing ✑ Web Subscription1 contains an Azure virtual machine named VM1 that has the following configurations: ✑ Private IP address: 10.0.0.4 (dynamic) ✑ Network security group (NSG): NSG

QUESTIONS AND ANSWERS NEWEST UPDATED 2024/

ALL ANSWERS 100% CORRECT VERIFIED BEST EXAM

SOLUTION RATED A+ FOR SUCCESS

✑ Public IP address: None ✑ Availability set: AVSet ✑ Subnet: 10.0.0.0/ ✑ Managed disks: No Location: East US - You need to record all the successful and failed connection attempts to VM1. Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point. A. Enable Azure Network Watcher in the East US Azure region. B. Add an Azure Network Watcher connection monitor. C. Register the MicrosoftLogAnalytics provider. D. Create an Azure Storage account. E. Regis - CORRECT ANSWERS A. Enable Azure Network Watcher in the East US Azure region.