Microsoft AZ-104 Übungsprüfungen
Zuletzt aktualisiert am 25.04.2025- Prüfungscode: AZ-104
- Prüfungsname: Microsoft Azure Administrator
- Zertifizierungsanbieter: Microsoft
- Zuletzt aktualisiert am: 25.04.2025
You create an Azure Storage account.
You plan to add 10 blob containers to the storage account.
For one of the containers, you need to use a different key to encrypt data at rest.
What should you do before you create the container?
- A . Modify the minimum TLS version.
- B . Create an encryption scope.
- C . Generate a shared access signature (SAS).
- D . Rotate the access keys.
You have two Azure subscriptions named Sub1 and Sub2 that are linked to separate Microsoft Entra tenants.
You have the virtual networks shown in the following table.
You have two Azure subscriptions named Sub1 and Sub2 that are linked to separate Microsoft Entra tenants.
You have the virtual networks shown in the following table.
Which virtual networks can you peer with VNet1?
- A . VNet2only
- B . VNet2 and VNet3 only
- C . VNet2 and VNet4 only
- D . VNet2, VNet3, and VNet4 only
You have an Azure subscription that contains 10 virtual machines, a key vault named Vault 1, and a network security group (NSG) named NSG1. All the resources are deployed to the East US Azure region.
The virtual machines are protected by using NSG1. NSG1 is configured to block all outbound traffic to the internet.
You need to ensure that the virtual machines can access Vault1. The solution must use the principle of least privilege and minimize administrative effort.
What should you configure as the destination of the outbound security rule for NSG1?
- A . a service tag
- B . an application security group
- C . an IP address range
You need to prepare the environment to meet the authentication requirements.
Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
- A . Allow inbound TCP port 8080 to the domain controllers in the Miami office.
- B . Add http://autogon.microsoftazuread-sso.com to the intranet zone of each client computer in the Miami
office. - C . Join the client computers in the Miami office to Azure AD.
- D . Install the Active Directory Federation Services (AD FS) role on a domain controller in the Miami office.
- E . Install Azure AD Connect on a server in the Miami office and enable Pass-through Authentication.
HOTSPOT
You have an Azure subscription
You plan to deploy a new storage account
You need to configure encryption for the account
The solution must meet the following requirements
• Use a customer-managed key stored in an key vault
• Use the maximum supported bit length.
Which type of key and which bit length should you use?
HOTSPOT
You have an Azure subscription that contains the virtual networks shown in the following table.
Each virtual network has 50 connected virtual machines.
You need to implement Azure Bastion.
The solution must meet the following requirements:
• Support host scaling.
• Support uploading and downloading files.
• Support the virtual machines on both VNet1 and VNet2.
• Minimize the number of addresses on the Azure Bastion subnet.
How should you configure Azure Bastion? To answer, select the options in the answer area. NOTE: Each correct answer is worth one point.
You have an Azure Storage account named storage1.
You plan to use AzCopy to copy data to storage1.
You need to identify the storage services in storage1 to which you can copy the data.
What should you identify?
- A . blob, file, table, and queue
- B . blob and file only
- C . file and table only
- D . file only
- E . blob, table, and queue only
You plan to deploy three Azure virtual machines named VM1, VM2, and VM3. The virtual machines will host a web app named App1.
You need to ensure that at least two virtual machines are available if a single Azure datacenter becomes unavailable.
What should you deploy?
- A . all three virtual machines in a single Availability Zone
- B . all virtual machines in a single Availability Set
- C . each virtual machine in a separate Availability Zone
- D . each virtual machine in a separate Availability Set
HOTSPOT
You have the App Service plans shown in the following table.
You plan to create the Azure web apps shown in the following table.
You need to identify which App Service plans can be used for the web apps.
What should you identify? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
You have an Azure subscription that has a Recovery Services vault named Vault 1.
The subscription contains the virtual machines shown in the following table.
You plan to schedule backups to occur every night at 23:00.
Which virtual machines can you back up by using Azure Backup?
- A . VM1 only
- B . VM1 and VM2 only
- C . VM1 and VM3 only
- D . VM1, VM2, VM3 and VM4