AZ-104 Practice Test Questions

You have several Azure virtual machines on a virtual network named VNet1.

You configure an Azure Storage account as shown in the following exhibit.

You have an Azure Kubernetes Service (AKS) cluster named AKS1.

You need to configure cluster autoscaler for AKS1.

Which two tools should you use? Each correct answer presents a complete solution,

NOTE: Each correct selection is worth one point.

A. the set-AzAKs cmdlet

B. the Azure portal

C. The az aks command

D. the kubect1 command

E. the set Azure cmdlet

B. the Azure portal

C. The az aks command

Explanation:

AKS clusters can scale in one of two ways: - The cluster autoscaler watches for pods that can't be scheduled on nodes because of resource constraints. The cluster then automatically increases the number of nodes. - The horizontal pod autoscaler uses the Metrics Server in a Kubernetes cluster to monitor the resource demand of pods. If an application needs more resources, the number of pods is automatically increased to meet the demand. Reference: https://docs.microsoft.com/en-us/azure/aks/cluster-autoscaler

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure virtual machine named VM1. VM1 was deployed by using a custom Azure Resource Manager template named ARM1.json.

You receive a notification that VM1 will be affected by maintenance.

You need to move VM1 to a different host immediately.

Solution: From the Overview blade, you move the virtual machine to a different resource

group.

Does this meet the goal?

A. Yes

B. No

You have two Azure subscriptions named Sub1 and Sub2.

Sub! contains a virtual machine named VM1 and a storage account named storage1.

VM1 is associated to the resources shown in the following table.

You need to move VM1 to Sub2.

Which resources should you move to Sub2?

A. VM1, Disk1. and Netlnt1 only

B. VM1. Disk1. and VNet1 only

C. VM1. Disk1. and storage1 only

D. VM1. Disk1. Netlnt1, and VNet1

Explanation:

When you move a virtual machine to a different subscription, you need to move all the resources that are associated with the virtual machine, such as the disks, the network interface, and the virtual network. You cannot move a virtual machine without moving its dependent resources. You also need to ensure that the target subscription supports the same region, resource type, and API version as the source subscription. Then,

References:

[Move a Windows VM to another Azure subscription or resource group]

You have an Azure subscription named Subscription1 that contains virtual network named VNet1. VNet1 is in a resource group named RG1. A user named User1 has the following roles for Subscription1:

• Reader

• Security Admin

• Security Reader

You need to ensure that User1 can assign the Reader role for VNet1 to other users. What should you do?

A. Remove User1 from the Security Reader and Reader roles for Subscription1.

B. Assign User1 the Owner role for VNet1.

C.

Remove User1 from the Security Reader role for Subscription1. Assign User1 the Contributor role for RG1.

D.

Remove User1 from the Security Reader and Reader roles for Subscription1. Assign User1 the Contributor role for Subscription1

B. Assign User1 the Owner role for VNet1.

You have an Azure subscription That contains a Recovery Services vault named Vault1.

You need to enable multi-user authorization (MAU) for Vaultl.
Which resource should you create first?

A. a managed identity

B. a resource guard

C. an administrative unit

D. a custom Azure role

B. a resource guard

Explanation:

https://learn.microsoft.com/en-us/azure/backup/multi-user-authorization?tabs=azureportal&pivots=vaults-recovery-services-vault#before-you-start

Before you start

Ensure the Resource Guard and the Recovery Services vault are in the same Azure region.

Ensure the Backup admin does not have Contributor permissions on the Resource Guard.

You can choose to have the Resource Guard in another subscription of the same directory or in another directory to ensure maximum isolation.

Ensure that your subscriptions containing the Recovery Services vault as well as the Resource Guard (in different subscriptions or tenants) are registered to use the providers - Microsoft.RecoveryServices and Microsoft.DataProtection . For more information, see Azure.

You create a Recovery Services vault backup policy named Policy1 as shown in the following exhibit.

You have an Azure subscription that contains the resource groups shown in the following table.

You have an Azure Resource Manager that is used to deploy an Azure virtual machine.

Template1 contains the following text:

A. Modify the location in the resource section to westus

B. Select West US during the deployment

C. Modify the location in the variables section to westus

A. Modify the location in the resource section to westus

You can change the location in resources. Parameters used to define the value of some variables to be able to use in different places in the template resources. Resources are used only for complicated expressions. In any case, RM will only deploy from resources. In case the value is not mentioned directly, then it will check parameters if it is specified in the resources. Based on this question, the value of location is defined directly in resources. so you change the resources location value.

Use location parameter. To allow flexibility when deploying your template, use a parameter to specify the location for resources. Set the default value of the parameter to resourceGroup().location.

Reference:

https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/resourcelocation?tabs=azure-powershell

https://docs.microsoft.com/en-us/azure/azure-resource-manager/templates/templatesyntax#resources

Peering for VNET2 is configured as shown in the following exhibit.

You have an Azure Storage accounts as shown in the following exhibit.

You have an Azure subscription that contains the Azure virtual machines shown in the following table.