Font size
WorksheetsAZ-104 Microsoft Azure Administrator - 3
Total questions: 55
Worksheet time: 1hrs 23mins
You have been requested to move the initial set of documents to Azure. The total size of the documents is 500MB. Which of the following is the ideal implementation step that should be followed to fulfill this requirement?
Generate a shared access signature (SAS). Map a drive and then copy the files by using File Explorer.
Use the Azure Import/Export service.
Generate an access key. Map a drive, and then copy the files by using File Explorer.
Use Azure Storage Explorer to copy the files.
The application whizlabs-app is a critical application. Hence you need to ensure that a backup solution is in place for the application. Which of the following would you need to create first?
A recovery plan
An Azure Backup Server
A backup policy
A Recovery Services vault
You are working on the network design for hosting the different tiers for the whizlabs-app application. How many virtual networks would you recommend hosting the Virtual Machines for the application?
1
2
3
4
You are working on the network design for hosting the different tiers for the whizlabs-app application. How many subnets would you recommend hosting the Virtual Machines for the application?
1
2
3
4
You need to ensure that users can join devices to Azure AD. These users must be members of the pilot Azure AD group. Which two settings do you need to modify to implement these requirements? The case requirement is that the user should be a member of a pilot group and all pilot group members should be able to join the devices.
Users may join devices to Azure AD.
Additional local administrators on Azure AD joined devices.
Users may register their devices with Azure AD.
Require Multi-Factor Auth to join devices.
You are planning the move of whizlabs-app to Azure. You create a network security group (NSG). You need to recommend a solution to provide users with access to whizlabs-app. What should you recommend?
Create an outgoing security rule for port 443 from the Internet. Associate the Network Security Group to all the subnets.
Create an incoming security rule for port 443 from the Internet. Associate the Network Security Group to all the subnets.
Create an incoming security rule for port 443 from the Internet. Associate the Network Security Group to the subnet that contains the web servers.
Create an outgoing security rule for port 443 from the Internet. Associate the Network Security Group to the subnet that contains the web servers.
Your company has an Azure subscription, and an on-premises file server named demoserver. You need to synchronize files with the demoserver and Azure using Azure File Sync Service.
Which of the following actions would you perform to deploy the Azure File Sync?
1. Create a sync group and a cloud endpoint
2. Add a server endpoint
3. Install the Azure File Sync agent on the demoserver
4. Register demoserver
1,2,3,4
3,4,1,2
4,2,1,3
2,4,1,3
Your company has an Azure subscription that is used by multiple departments in your company. The subscription contains 5 resource groups. Each department uses resources in several resource groups. Your supervisor has requested to send a report that details the costs for each department. Which of the following actions would you need to perform for this purpose? Choose 3 answers from the options given below.
Assign a tag to each resource group.
Use the Resource costs blade of each resource group.
Download the usage report.
Assign a tag to each resource.
From the Costs Analysis blade, filter the view by tag.
You have an Azure Active Directory (Azure AD) tenant that has the initial domain name.
You have a domain name of whizlabs.com registered at a third-party registrar. You need to ensure that you can create Azure AD users that have names containing a suffix of @whizlabs.com.
Which of the following would need to be implemented to fulfill this requirement? Choose 3 answers from the options given below.
Add a record to the public whizlabs.com DNS zone.
Add an Azure AD tenant.
Verify the domain
Create an Azure DNS Zone.
Add a custom domain name.
A company currently has an Azure account and subscription. They are planning to make their application available 99.99% of the time using Virtual Machines and a Load balancer. Which of the following would need to be in place? You have to minimize costs associated with the solution. Choose 2 answers from the options given below.
Create a Basic Load balancer.
Create a Standard Load balancer.
Add 2 Virtual Machines to the backend pool.
Add a Virtual Machine to the backend pool.
A company has set up an external load balancer that load balances traffic on port 80 and 443 across 3 virtual machines. You have to ensure that all traffic is directed towards a VM named
By creating a new public load balancer for demovm
By creating a new internal load balancer for demovm
By creating an inbound NAT rule
By creating a new IP configuration
A company has set up a Load balancer that load balances traffic on ports 80 and 443 across 3 virtual machines. You have to ensure that users are assigned the same web server for the duration of their session. Which of the following would you configure for this requirement?
Floating IP
Health Probe
Session Persistence
TCP Reset
A company has started using Azure and set up a subscription. They want to see the costs being incurred for each type of resource. Which of the following can help you get these details?
Go to your Azure AD directory and go to Cost Analysis.
Go to your Subscription and go to Cost Analysis.
Go to your Azure AD directory and go to Licences.
Go to your Subscription and go to Resource Groups.
Your company currently has a Virtual Network defined in Azure. The Virtual Network has a default subnet that contains 2 Virtual machines named demovm and demovm1. There is a requirement to inspect all network traffic between the Virtual Machines for a duration of 3 hours.
You propose a solution to create a Data Collector Set.
Does this solution fulfill the requirement?
YES
NO
Your company currently has a Virtual Network defined in Azure. The Virtual Network has a default subnet that contains 2 Virtual machines named demovm and demovm1. There is a requirement to inspect all network traffic between the Virtual Machines for a duration of 3 hours.
You propose a solution to run Packet Capture on Azure Network watcher.
Does this solution fulfill the requirement?
YES
NO
Your company currently has a Virtual Network defined in Azure. The Virtual Network has a default subnet that contains 2 Virtual machines named demovm and demovm1. There is a requirement to inspect all network traffic between the Virtual Machines for a duration of 3 hours.
You propose a solution to create a metric chart for Network In and Network Out.
Does this solution fulfill the requirement?
YES
NO
You are the Azure administrator for a company. You have to create a custom role based on the Virtual Machine Contributor role. You have to complete the following PowerShell script.
Which of the following would come in SLOT 1?
Get-AzRoleDefinition
New-AzRoleDefinition
Set-AzRoleDefinition
Create-AzRoleDefinition
You are the Azure administrator for a company. You have to create a custom role based on the Virtual Machine Contributor role. You have to complete the following PowerShell script.
Which of the following would come in SLOT 2?
Get-AzRoleDefinition
New-AzRoleDefinition
Set-AzRoleDefinition
Create-AzRoleDefinition
A company has just set up an Azure account and subscription. There is a requirement to ensure that IT administrators can only spin up virtual machines of a particular SKU size. Which of the following can help achieve this?
Create an RBAC role and assign it to the relevant resource group.
Create an Azure policy and assign it to the subscription.
Assign the appropriate AD role to the IT administrators’ group.
Assign the appropriate subscription policy to the IT administrators’ group.
A company has the following set of Virtual Machines defined in the Azure account.
The company wants to move whizlabs-vm1 to another subscription. Which of the following can be implemented to fulfill this requirement?
Move the Virtual Machine to the Central US region first.
You cannot move the Virtual Machine across subscriptions. You would need to delete and recreate the VM in the new subscription.
Use the Move-AzResource powershell command to move the Virtual Machine.
Use the Move-VMResource powershell command to move the Virtual Machine.
A team has a Virtual Machine defined in Azure. The Networking details are given below.
A new network interface named secondary has been created. The Network interface needs to be added to the Virtual machine. What must be done first to ensure that the network interface can be attached to the Virtual Machine?
The machine needs to be stopped first.
The primary network interface needs to be removed
The Network security group rules needs to be removed from the network interface
The public IP needs to be deallocated from the primary network interface
The necessary peering connections have been created between whizlabs-network1 and whizlabs-network2. The firewalls on the virtual machines have been modified to allow ICMP traffic. But traffic does not seem to flow between the virtual machines when the ping request is made.
Which of the following can be used to diagnose the issue?
Application Insights
IP Flow Verify
Azure Advisor
Microsoft Defender for Cloud
The necessary peering connections have been created between whizlabs-network1 and whizlabs-network2. The firewalls on the virtual machines have been modified to allow ICMP traffic. But traffic does not seem to flow between the virtual machines when the ping request is made.
The security department wanted to check on any network intrusions into the virtual networks. Which of the following tool could be used for this purpose?
IP Flow Verify
Packet Capture
Azure connection monitor
Application Insights
Your company has an Azure account and subscription. The subscription contains a virtual machine named
In your office, you have Windows 10 PC named Computer1 that is connected to the Internet. You add a network interface to the demovm, as shown in the exhibit below.
You are trying to connect to demovm from Computer1 using Remote Desktop, but the connection fails. You need to establish a Remote Desktop connection to demovm.
What should you do first?
Start demovm.
Attach a network interface.
Delete the DenyAllOutBound outbound port rule.
Delete the DenyAllInBound inbound port rule.
Your company has an Azure account and subscription. The subscription contains a virtual machine named
In your office, you have Windows 10 PC named Computer1 that is connected to the internet.
You add a network interface to demovm as shown in the exhibit below.
From Computer1 you want to access a web service running on port 80 after demovm is started.
Which of the following must be done for this to work?
Attach a network interface.
Add an incoming network security group rule for allowing traffic on port 80
Add an outgoing network security group rule for allowing traffic on port 80
Delete the DenyAllOutBound outbound port rule.
Delete the DenyAllInBound inbound port rule.
Your company has an Azure account and subscription. The subscription contains the resources in the following table.
Your IT administrator has deployed a virtual machine called demovm and a storage account called whizlabstore by using a single Azure Resource Manager template. You want to do a review of the template that was used for the deployment. Which of the following resource blade could be used to view the template that was used for the deployment?
whizlabs-rg
demovm
whizlabs-sc
whizlabstore
Your company has an Azure subscription. In the subscription, you create an Azure file share named share1. You also create a shared access signature (SAS) named SASdemo, as shown in the following exhibit.
If you run Microsoft Azure Storage Explorer on a computer that has an IP address of 193.77.134.1 and you use SASdemo to connect to the storage account, then you
will be prompted for the credentials.
will have no access.
will have read, write and list access.
will have read-only access.
Your company has an Azure subscription. In the subscription, you create an Azure file share named share1 . You also create a shared access signature (SAS) named SASdemo, as shown in the following exhibit.
If you use the "net use" command on a computer that has an IP address of 193.77.134.50 and then use SASdemo to connect to share1, then you
will be prompted for the credentials
will have no access
will have read,write and list access
will have read-only access
You plan to deploy five virtual machines to a virtual network subnet.
Each virtual machine will have a public IP address and a private IP address.
Each virtual machine requires the same inbound and outbound security rules.
What is the minimum number of network interfaces that you require?
5
10
15
20
You plan to deploy five virtual machines to a virtual network subnet.
Each virtual machine will have a public IP address and a private IP address.
Each virtual machine requires the same inbound and outbound security rules.
What is the minimum number of network security groups that you require?
1
2
5
10
You have a virtual network named VNET2 that has the configuration shown in the following exhibit.
What should you do first before a virtual machine on VNET2 can receive an IP address from 192.168.1.0/24?
Add a network interface.
Add a subnet.
Add an address space.
Delete a subnet.
Delete an address space.
You have a virtual network named VNET2 that has the configuration shown in the following exhibit.
What should you do first before a virtual machine on VNET2 can receive an IP address from 10.2.1.0/24?
Add a network interface.
Add a subnet.
Add an address space.
Delete a subnet.
Delete an address space.
You create a new version of your web app. But you still need to finalize the app testing and verification before deploying the latest version to production.
Please select the most effective tool for checking your app and deployment to production.
Create a test App Service app, deploy a new version, test and then copy to production
Create a test VM, deploy a new version, test, zip a new version project, and deploy to production
Create a test deployment slot for your web app, deploy a new version, test and swap the slots
Create a test Docker container with a new version, deploy it to a new App Service, test it and switch the old App Service production to a new one.
Create a test environment on the OneDrive, test and sync content of your new version with App Service
A company needs to create a storage account that must follow the requirements below.
-Users should be able to add files such as images and videos.
-Ability to store archive data.
-File shares need to be in place, which can be accessed across several VM’s.
-The data needs to be available even if a region goes down.
-The solution needs to be cost-effective.
Which of the following type of storage account would you create for this purpose?
BlockBlob Storage
General Purpose(v1)
General Purpose(v2)
Table storage
A company needs to create a storage account that must follow the requirements below.
-Users should be able to add files such as images and videos.
-Ability to store archive data.
-File shares need to be in place, which can be accessed across several VM’s.
-The data needs to be available even if a region goes down.
-The solution needs to be cost-effective.
What is the type of replication they need to implement for the storage account?
Locally redundant storage (LRS)
Zone-redundant storage (ZRS)
Geo-redundant storage (GRS)
Read-access geo-redundant storage (RA-GRS)
You need to deploy two Azure virtual machines named VM1 and VM2 based on the Windows server 2016. The deployment must meet the following requirements.
-Provide a Service Level Agreement (SLA) of 99.95 percent availability.
-Use managed disks.
You propose a solution to create a scale set for the requirement.
Would the solution meet the goal?
YES
NO
You need to deploy two Azure virtual machines named VM1 and VM2 based on the Windows server 2016 image. The deployment must meet the following requirements.
-Provide a Service Level Agreement (SLA) of 99.95 percent availability.
-Use managed disks.
You propose a solution to create an availability set for the requirement.
Would the solution meet the goal?
YES
NO
You need to deploy two Azure virtual machines named VM1 and VM2 based on the Windows server 2016. The deployment must meet the following requirements.
Provide a Service Level Agreement (SLA) of 99.95 percent availability.
Use managed disks.
You propose a solution to create a Traffic Manager for the requirement.
Would the solution meet the goal?
YES
NO
Your company has an Azure account and an Azure subscription. They have created a Virtual Network named whizlabs-net. The following users have been setup.
Which of the following users would be able to add a subnet to the Virtual Network?
whizlabs-usr1 only
whizlabs-usr2 only
whizlabs-usr3 only
whizlabs-usr1 and whizlabs-usr2 only
whizlabs-usr1 and whizlabs-usr3 only
Your company has an Azure account and an Azure subscription. They have created a Virtual Network named whizlabs-net. The following users have been setup.
Which of the following users can add the Reader role access for a user to the Virtual Network?
whizlabs-usr1 only
whizlabs-usr2 only
whizlabs-usr3 only
whizlabs-usr1 and whizlabs-usr2 only
whizlabs-usr1 and whizlabs-usr3 only
You work as an Azure Administrator for a company. You need to create a role based on the following requirements.
-View all the resources in the Azure subscription.
-Issue support requests to Microsoft.
-Use the principle of least privilege.
You have to complete the below JSON role definition.
Which of the following would go into SLOT 1?
"Microsoft.Authorization/*/*"
"Microsoft.Authorization/*/read"
" Microsoft.Authorization/read/*"
“Microsoft.Authorization/*”
You work as an Azure Administrator for a company. You need to create a role based on the following requirements.
-View all the resources in the Azure subscription.
-Issue support requests to Microsoft.
-Use the principle of least privilege.
You have to complete the below JSON role definition.
Which of the following would go into SLOT 2?
"*/*"
"*/Microsoft.Support"
"Microsoft.Support/*"
“Microsoft.Support”
You have the Azure virtual networks shown in the following table.
To which virtual networks can you establish a peering connection from VNet1?
VNet2 and VNet3 only
VNet2 only
VNet3 and VNet4 only
VNet2, VNet3, and VNet4
For each of the following statements, select Yes if the statement is true.
Can VM1 ping to VM3?
YES
NO
For each of the following statements, select Yes if the statement is true.
Does VNet2(VM2) peer with VNet3(VM3)?
YES
NO
For each of the following statements, select Yes if the statement is true.
Has VM2 peered with VM1?
YES
NO
A company has the following storage accounts in place as part of its Azure subscription.
Which of the following storage account/accounts could be used to store objects as part of the Archive tier?
whizlabstore1 only
whizlabstore2 only
whizlabstore3 only
whizlabstore1 and whizlabstore2 only
whizlabstore2 and whizlabstore3 only
Domain: Configure and manage virtual networking
A company needs to deploy the following architecture to Azure.
The architecture would consist of a load balancer that should only accept requests via private IP addresses. It should not flow via the internet. The load balancer would direct requests to database servers hosted on Virtual machines.
Which of the following load balancer type should be implemented for this architecture?
Public Load balancer
Multi-port balancer
Internal Load balancer
External Load balancer
Which of the following should be used to guarantee SLA of at least 99.5% for the availability of the Virtual Machines? Choose 2 answers from the options given below.
Azure Managed Disks
Azure Network Interfaces
Azure Availability sets
Azure scale sets
Which of the following storage account type should be used for Azure storage?
Blob storage
General Purpose v1
General Purpose v2
Table storage
How many availability sets would you create for the deployment of the web and database virtual machines onto Azure?
1
2
4
10
When adding custom domain names, which of the following record needs to be added to your custom domain registrar?
A record
NS record
TXT record
PTR record
Which of the following rule would you apply to the Network Security Group for the Network interface attached to the Web server?
An inbound rule allowing traffic on port 80
An inbound rule allowing traffic on port 443
An outbound rule allowing traffic on port 80
An outbound rule allowing traffic on port 443
A team member has created a point-to-site VPN connection between a computer named “WorkstationA” and an Azure Virtual Network. Another point-to-site VPN connection needs to be created between the same Azure Virtual Network and a computer named “WorkstationB”. The VPN client package was generated and installed on “WorkstationB”. You need to ensure that you can create a successful point-to-site VPN connection.
You decide to export the “WorkstationA” client certificate in the form of .pfx file and install it on "Workstation B".
Would this solution fulfill the requirement?
YES
NO
You provide custom Azure services for your customers. They need to access the services from their own virtual networks in a secure manner avoiding any internet connections. What are the four components that you and your customers need to set up to utilize Azure custom services?
Azure Load Balancer
Private Link Service
Private Link
Private Endpoint
