Free Printable AZ104

Worksheets

AZ104

Total questions: 55

Worksheet time: 51mins

Name

Class

Date

Your organization is migrating an on-premises application to Azure. The application requires a dedicated, isolated environment for hosting multiple web servers, database servers, and application servers. What Azure service should you use to create and manage these isolated environments?

Azure Virtual Network

Azure Virtual Machine

Azure App Service

Azure Kubernetes Service (AKS)

You are responsible for deploying and managing a Windows-based application on Azure. The application requires a Windows Server environment and is compatible with IIS. What Azure resource type should you provision to host this application?

Azure Virtual Machine

Azure Web App Service

Azure Functions

Azure Virtual Machine Scale Set

Your organization has a web application that relies on Microsoft technologies and requires a web server for hosting. You need to configure a Windows-based virtual machine on Azure to run IIS (Internet Information Services) for this application. Which Azure VM series is suitable for this scenario?

General Purpose VM series

Memory Optimized VM series

Compute Optimized VM series

GPU Optimized VM series

You are tasked with setting up a web hosting environment for your organization's e-commerce website on Azure. The website runs on Windows-based servers and relies on IIS for hosting. What Azure service should you use for efficient web hosting and scaling capabilities?

Azure Virtual Machine

Azure Virtual Machine Scale Set

Azure App Service

Azure Kubernetes Service (AKS)

Your organization operates a web application that experiences varying levels of traffic throughout the day. You need to ensure that the application can automatically scale out to handle increased traffic and scale in during periods of low demand. Which Azure service is designed to address this requirement?

Azure Virtual Machine

Azure Virtual Machine Scale Set

Azure App Service

Azure Kubernetes Service (AKS)

You are responsible for deploying a group of Windows-based virtual machines on Azure to host a web application. The application must be highly available, and you want to manage all VM instances as a single entity. What Azure resource type should you use?

Azure Virtual Machine

Azure Virtual Network

Azure Virtual Machine Scale Set

Azure App Service

Your organization is planning to host a scalable web application on Azure. The application uses IIS and requires a combination of both individual VMs and auto-scaling capabilities. Which Azure resources should you choose to achieve this architecture?

Azure Virtual Machines

Azure Virtual Machine Scale Sets and Azure Virtual Machines

Azure App Service

Azure Kubernetes Service (AKS)

You need to deploy a Windows-based web application that serves both static and dynamic content. You want to ensure high availability and scalability. Which combination of Azure services can you use to achieve this?

Azure Virtual Machines and Azure Virtual Network

Azure App Service and Azure Virtual Machine Scale Set

Azure Kubernetes Service (AKS)

Azure App Service and Azure Virtual Network

Your organization is migrating a legacy .NET application to Azure. The application relies on IIS and consists of multiple components, including a web server and a backend database server. You need to deploy and manage these components on Azure while ensuring scalability. Which combination of Azure services should you choose?

Azure Virtual Machine Scale Set and Azure SQL Database

Azure Virtual Machines and Azure Cosmos DB

Azure Kubernetes Service (AKS) and Azure Virtual Network

Azure App Service and Azure Database for SQL Server

10.

Your organization operates a popular online news portal that experiences traffic spikes during breaking news events. You need to deploy web servers running IIS on Azure to handle these spikes efficiently and cost-effectively. What combination of Azure services can help you achieve this?

Azure Virtual Machines and Azure Virtual Network

Azure Virtual Machine Scale Sets and Azure Load Balancer

Azure App Service and Azure Traffic Manager

Azure Kubernetes Service (AKS) and Azure Content Delivery Network (CDN)

11.

You recently created a new Azure subscription that contains a user named Admin1. Admin1 attempts to deploy an Azure Marketplace resource by using an Azure Resource Manager template. Admin1 deploys the template by using Azure PowerShell and receives the following error message: “User failed validation to purchase resources. Error message: “Legal terms have not been accepted for this item on this subscription. To accept legal terms, please go to the Azure portal (http://go.microsoft.com/fwlink/?LinkId=534873) and configure programmatic deployment for the Marketplace item or create it there for the first time.” You need to ensure that Admin1 can deploy the Marketplace resource successfully. What should you do?

From Azure PowerShell, run the Set-AzApiManagementSubscription cmdlet

From the Azure portal, register the Microsoft.Marketplace resource provider

From Azure PowerShell, run the Set-AzMarketplaceTerms cmdlet

12.

You have an on-premises file server named Server1 that runs Windows Server 2016. You have an Azure subscription that contains an Azure file share. You deploy an Azure File Sync Storage Sync Service, and you create a sync group. You need to synchronize files from Server1 to Azure. Which actions should you perform? Select three actions best

Install the Azure File Sync agent on Server1

Create an Azure on-premises data gateway

Add a server endpoint

13.

Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure subscription named Subscription1. Subscription1 contains a resource group named RG1. RG1 contains resources that were deployed by using templates. You need to view the date and time when the resources were created in RG1. Solution: From the RG1 blade, you click Automation script. Does this meet the goal?

Yes

14.

You have an Azure subscription named Subscription1 that contains the storage accounts. 1. Storage 1 for account kind storage and azure service that contains data is file. 2. Storage 2 for account kind storage v2 (general purpose v2) and azure service contains data are file and table. 3. Storage 3 for account kind storage v2 (general purpose v2) but data azure service is queue. 4. Storage 4 for blobstorage and azure service contains data is blob. You plan to use the Azure Import/Export service to export data from Subscription1. You need to identify which storage account can be used to export the data. What should you identify?

Storage 1

Storage 2

Storage 3

Storage 4

15.

You have the Azure virtual machines as follows. VM1 and VM2 - Azure Region West Europe. VM3 and VM4 - Azure Region North Europe. You have a recovery services vault that protects VM1 and VM2. You need to protect VM3 and VM4 by using recovery services. What should you do first?

Create a storage account

Configure the extensions for VM3 and VM4

Create a new recovery services vault

Create a new backup policy

16.

You have an Azure subscription named Subscription1, can deploy a Linux virtual machine named VM1 to Subscription1. You need to monitor the metrics and the logs of VM1. What should you use?

the AzurePerformanceDiagnostics extension

Azure Analysis Services

Azure HDInsight

Linux Diagnostic Extension (LAD) 3.0

17.

You have an Azure Storage account named storage1 that uses Azure Blob storage and Azure File storage, need to use AzCopy to copy data to the blob storage and file storage in storage1. Which authentication method should you use for each type of storage? Select two best answer

Only Shared Access Signature (SAS) token is supported for Blob storage

Both Azure Active Directory (AD) and Shared Access Signature (SAS) token are supported for Blob storage

Only Shared Access Signature (SAS) token is supported for File storage

Both Azure Active Directory (AD) and Shared Access Signature (SAS) token are supported for File storage

18.

You have an Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com that contains 100 user accounts. You purchase 10 Azure AD Premium P2 licenses for the tenant. You need to ensure that 10 users can use all the Azure AD Premium features. What should you do?

From the Azure AD domain, add an enterprise application

From the Directory role blade of each user, modify the directory role

From the Licenses blade of Azure AD, assign a license

From the Groups blade of each user, invite the users to a group

19.

You have an Azure subscription named Subscription1 that contains a resource group named RG1. In RG1, you create an internal load balancer named LB1 and a public load balancer named LB2. You need to ensure that an administrator named Admin1 can manage LB1 and LB2. The solution must follow the principle of least privilege. Which role should you assign to Admin1 for each task? Select two best answer

Added backend pool to LB1 with Network contributor on LB1

Added backend pool to LB1 with Network contributor on RG1 and contributor on LB1

Added health probe to LB2 with Network contributor on RG1 and contributor on LB2

Added health probe to LB2 with Network contributor on LB2

20.

You have an Azure subscription named Subscription1. You create an Azure Storage account named contosostorage, and then you create a file share named data. Which UNC path should you include in a script that references files from the data file share?

data

blob

file.core.windows.net

contosostorage

21.

Your on-premises network contains an SMB share named Share1. You have an Azure subscription that contains the following resources: - A web app named webapp1 - A virtual network named VNET1 You need to ensure that webapp1 can connect to Share1. What should you deploy?

an Azure Application Gateway

an Azure Active Directory (Azure AD) Application Proxy

an Azure Virtual Network Gateway

22.

You have an Azure subscription that has a Recovery Services vault named Vault1. The subscription contains the virtual machines as follows. - VM1 use operating system windows server 2012 R2 and mode off auto-shutdown. - VM2 use operating system windows server 2016 and mode auto -shutdown at 19:00 - VM3 use operating system ubuntu server 18.04 LTS and mode off auto-shutdown - VM4 use operating system windows 10 and mode auto-shutdown at 19:00 You plan to schedule backups to occur every night at 23:00. Which virtual machines can you back up by using Azure Backup?

VM1 and VM3 only

VM1,VM2,VM3 and VM4

VM1 and VM2 only

VM1 only

23.

You have a Microsoft 365 tenant and an Azure Active Directory (Azure AD) tenant named contoso.com. You plan to grant three users named User1, User2, and User3 access to a temporary Microsoft SharePoint document library named Library1. You need to create groups for the users. The solution must ensure that the groups are deleted automatically after 180 days. Which two groups should you create?

a Security group that uses the Assigned membership type

a Security group that uses the Dynamic Device membership type

an Office 365 group that uses the Assigned membership type

an Office 365 group that uses the Dynamic User membership type

24.

You have an Azure subscription that contains a policy-based virtual network gateway named GW1 and a virtual network named VNet1. You need to ensure that you can configure a point-to-site connection from an on-premises computer to VNet1. Which two actions should you perform?

Create a route-based virtual network gateway

Delete GW1

Add a service endpoint to VNet1

Add a public IP address space to VNet1

25.

You have an Azure subscription that contains a virtual network named VNet1. VNet1 uses an IP address space of 10.0.0.0/16 and contains the subnets as follows. Subnet0 have IP address range 10.0.0.0/24 Subnet1 have IP address range 10.0.1.0/24 Subnet2 have IP address range 10.0.2.0/24 GatewaySubnet have IP address range 10.0.254.0/24 Subnet1 contains a virtual appliance named VM1 that operates as a router. You create a routing table named RT1. You need to route all inbound traffic from the VPN gateway to VNet1 through VM1. Which describes configure RT1?

Address prefix - 10.0.1.0/24 Next hop type - Virtual network Assigned to - GatewaySubnet

Address prefix - 10.0.0.0/16 Next hop type - Virtual appliance Assigned to - GatewaySubnet

Address prefix - 10.0.254.0/24 Next hop type - Virtual network gateway Assigned to - GatewaySubnet

Address prefix - 10.0.0.0/16 Next hop type - Virtual appliance Assigned to - Subnet1 and Subnet2

26.

You have an Azure subscription that contains an Azure virtual machine named VM1. VM1 runs a financial reporting app named App1 that does not support multiple active instances. At the end of each month, CPU usage for VM1 peaks when App1 runs. You need to create a scheduled runbook to increase the processor performance of VM1 at the end of each month. What task should you include in the runbook?

Add the Azure Performance Diagnostics agent to VM1

Modify the VM size property of VM1.

Increase the vCPU quota for the subscription.

Add a Desired State Configuration (DSC) extension to VM1.

27.

You have an Azure subscription that contains the following users in an Azure Active Directory tenant named contoso.onmicrosoft.com: 1. User1 have role global administrator in scope Azure Active Directory 2. User2 have role global administrator in scope Azure Active Directory 3. User3 have role user administrator in scope Azure Active Directory 4. User4 have role owner in Azure Subscription. User1 creates a new Azure Active Directory tenant named external.contoso.onmicrosoft.com. You need to create new user accounts in external.contoso.onmicrosoft.com. Solution: You instruct User4 to create the user accounts. Does that meet the goal?

Yes

28.

You have an Azure subscription named Subscription1 and an on-premises deployment of Microsoft System Center Service Manager. Subscription1 contains a virtual machine named VM1. You need to ensure that an alert is set in Service Manager when the amount of available memory on VM1 is below 10 percent. What should you do first?

Deploy a function app

Create an automation rnbook

Create a notification

Deploy the IT Service Management Connector (ITSM)

29.

You have an app named App1 that runs on two Azure virtual machines named VM1 and VM2. You plan to implement an Azure Availability Set for App1. The solution must ensure that App1 is available during planned maintenance of the hardware hosting VM1 and VM2. What should you include in the Availability Set?

two update domains

one fault domain

two fault domains

one update domain

30.

You plan to create an Azure Storage account in the Azure region of East US 2. You need to create a storage account that meets the following requirements: - Replicates synchronously. - Remains available if a single data center in the region fails. How should you configure the storage account?

Replicate Read-access geo-redundant storage (RA GRS)

Using the account type Storage (General Purpose v1)

Replicate Zone-redundant storage (ZRS)

Using the account type StorageV2 (General purpose v2)

31.

You plan to deploy three Azure virtual machines named VM1, VM2, and VM3. The virtual machines will host a web app named App1.You need to ensure that at least two virtual machines are available if a single Azure datacenter becomes unavailable. What should you deploy?

all three virtual machines in a single Availability Zone

all virtual machines in a single Availability Set

each virtual machine in a separate Availability Zone

each virtual machine in a separate Availability Set

32.

You have two Azure virtual networks named VNet1 and VNet2. VNet1 contains an Azure virtual machine named VM1. VNet2 contains an Azure virtual machine named VM2. VM1 hosts a frontend application that connects to VM2 to retrieve data. Users report that the frontend application is slower than usual. You need to view the average round-trip time (RTT) of the packets from VM1 to VM2. Which Azure Network Watcher feature should you use?

IP flow verify

Connection troubleshoot

Connection monitor

NSG flow logs

33.

You have an Azure web app named App1. App1 has the deployment slots as follows. - webapp1-prod have function to production - webapp1-test have function to staging In webapp1-test, you test several changes to App1 and back up App1. You swap webapp1-test for webapp1-prod and discover that App1 is experiencing performance issues. You need to revert to the previous version of App1 as quickly as possible. What should you do?

Redeploy App1

Sway the slots

Clone App1

Restore the backup of App1

34.

You have an Azure virtual machine named VM1 that runs Windows Server 2019. You save VM1 as a template named Template1 to the Azure Resource Manager library. You plan to deploy a virtual machine named VM2 from Template1. What can you configure during the deployment of VM2?

operating system

resource group

virtual machine size

administrator username

35.

You have an Azure web app named webapp1. Users report that they often experience HTTP 500 errors when they connect to webapp1. You need to provide the developers of webapp1 with real-time access to the connection errors. The solution must provide all the connection error details.What should you do first?

From webapp1, enable Web server logging

From Azure Monitor, create a workbook

From Azure Monitor, create a Service Health alert

From webapp1, turn on Application logging

36.

What do you need to install on your machine so you can execute Azure CLI commands locally? Select one.

The Azure cloud shell

The Azure CLI and Azure PowerShell

Only the Azure CLI

37.

Your company has two NSG security rules for inbound traffic to your web servers. There is an allow rule with a priority of 200. And, there is a deny rule with a priority of 150. Which rule takes precedence? Select one.

The allow rule takes precedence

The deny rule takes precedence

The rule that was created first takes precedence

38.

You are configuring the Azure Firewall. You need to allow Windows Update network traffic through the firewall. Which of the following should you use? Select one.

Application rules

Destination inbound rules

Network rules

39.

Your company wants to allow external users to access an Azure virtual server with a remote desktop connection. Which one of the following items would you implement on Azure Firewall to allow these connections? Select one.

Service tag

Source network address translation

Destination network address translation

40.

You want to connect different VNets in the same region as well as different regions and decide to use VNet peering to accomplish this. Which of the following statements is not true about VNet peering? Select one

The virtual networks can only exist in the same azure cloud region.

Network traffic between peered virtual networks is private.

Peering is easy to configure and manage, requiring little to no downtime.

41.

The traffic between virtual machines in peered virtual networks is routed ... Select one.

directly through the Microsoft backbone infrastructure

through a VPN gateway

through the public Internet

42.

Your company is preparing to implement a Site-to-Site VPN to Microsoft Azure. You do all the following, except? Select one.

Obtain a VPN device for the on-premises environment.

Obtain a VPN device for the Azure environment.

Create a virtual network gateway (VPN) and the local network gateway in Azure.

43.

What is the Azure ExpressRoute service?

Azure ExpressRoute is a service that provides a VPN connection between on-premises and the Microsoft cloud.

Azure ExpressRoute is a service that provides a direct connection from the on-premises datacenter to the Microsoft cloud.

Azure ExpressRoute is a service that provides a site-to-site VPN connection between the on-premises network and the Microsoft cloud

44.

What Microsoft service helps to simplify a complex hub-and-spoke virtual network WAN deployment?

Azure Virtual WAN

ExpressRoute

Virtual network peering

45.

Suppose a company wants to allow access to an Azure SQL Database instance using a FQDN address. Which of the following network rule types should they use to configure Azure firewall?

Application

Network

NAT

46.

Suppose a company wants to allow external users to access an Azure virtual server with a remote desktop connection. Which one of the following items would be implemented on the Azure firewall to allow these connections?

Service tag

Source network address translation

Destination network address translation

47.

Which of the following describes the Azure firewall IP address?

The firewall has a dynamically assigned public IP address.

The firewall has a statically assigned public IP address

The firewall has an IP address assigned from a pool of designated addresses.

48.

Which is a valid next hop type? (Route Table)

Internet

Load balancer

ExpressRoute

49.

The web team is installing the Application Gateway. They want to ensure incoming requests are checked for common security threats like cross-site scripting and crawlers. To address the concerns what should be done?

Install an internal load balancer

Install Azure Firewall

Install the Web Application Firewall

50.

Azure Backup requires which of the following?

A dedicated backup server.

A recovery service vault.

An Azure blob storage container.

51.

It's time to back up files and folders to Azure. Which of these steps should be completed first?

Download the agent and credential file.

Configure the backup.

Create the recovery services vault.

52.

A major retailer has an app that is used across the business. The performance of this app is critical to day-to-day operations. Because the app is so important, four infrastructure administrators have been identified to address any issues. What would ensure the administrators are notified if there is a problem?

Configure the Activity log

Configure an Alert Team

Configure an Action Group

53.

An alert rule consists of which of the following?

Resource, condition, log, alert type

Metrics, logs, application, operating system

Resource, condition, actions, alert details

54.

The infrastructure team thinks it would be helpful to get a visual representation of the company's networking elements. Which Network Watcher feature provides this capability?

Network Watcher Next Hop

Network Watcher Views

Network Watcher Topology

55.

Which of the following is a good use for Network Watcher?

Diagnose network traffic filtering problems to or from a virtual machine.

Log activity events.

Provide PaaS monitoring and Web analytic.

Reset

AZ104

Total questions: 55

Worksheet time: 51mins

Similar Resources on Wayground