AZ-104 Online Practice Questions and Answers

Correct Answer:

Step 1: From the Azure portal, click File Recovery from the vault

Step 2. Select a restore point that contains the deleted files

Step 3: Download and run the script to mount a drive on the local computer

Generate and download script to browse and recover files:

Step 4: Copy the files using File Explorer!

After the disks are attached, use Windows File Explorer to browse the new volumes and files. The restore files functionality provides access to all files in a recovery point. Manage the files via File Explorer as you would for normal files.

Step 1-3 below:

To restore files or folders from the recovery point, go to the virtual machine and perform the following steps:

1.

Sign in to the Azure portal and in the left pane, select Virtual machines. From the list of virtual machines, select the virtual machine to open that virtual machine's dashboard.

2.

In the virtual machine's menu, select Backup to open the Backup dashboard.

3.

In the Backup dashboard menu, select File Recovery.

The File Recovery menu opens.

4.

From the Select recovery point drop-down menu, select the recovery point that holds the files you want. By default, the latest recovery point is already selected.

5.

Select Download Executable (for Windows Azure VMs) or Download Script (for Linux Azure VMs, a python script is generated) to download the software used to copy files from the recovery point.

Running the script and identifying volumes:

For Linux machines, a python script is generated. Download the script and copy it to the relevant/compatible Linux server.

Reference: https://docs.microsoft.com/en-us/azure/backup/backup-azure-restore-files-from-vm https://docs.microsoft.com/en-us/azure/backup/backup-azure-vms-automation#restore-files-from-an-azure-vm-backup

Correct Answer:

Box 1: Assign a tag to each resource.

You apply tags to your Azure resources giving metadata to logically organize them into a taxonomy. After you apply tags, you can retrieve all the resources in your subscription with that tag name and value. Each resource or resource group

can have a maximum of 15 tag name/value pairs. Tags applied to the resource group are not inherited by the resources in that resource group.

Box 2: From the Cost analysis blade, filter the view by tag

After you get your services running, regularly check how much they're costing you. You can see the current spend and burn rate in Azure portal.

1.

Visit the Subscriptions blade in Azure portal and select a subscription. You should see the cost breakdown and burn rate in the popup blade.

2.

Click Cost analysis in the list to the left to see the cost breakdown by resource. Wait 24 hours after you add a service for the data to populate.

3.

You can filter by different properties like tags, resource group, and timespan. Click Apply to confirm the filters and Download if you want to export the view to a Comma-Separated Values (.csv) file.

Box 3: Download the usage report

Reference: https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-using-tags https://docs.microsoft.com/en-us/azure/billing/billing-getting-started

Correct Answer:

Box 1: a computer joined in the Active Directory domain The Active Directory domain service stores passwords in the form of a hash value representation, of the actual user password.

Box 2: Stored in both Azure AD and in the Active Director domain The Active Directory domain service stores passwords in the form of a hash value representation, of the actual user password.

To synchronize your password, Azure AD Connect sync extracts your password hash from the on- premises Active Directory instance.

References:

https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-password-hash- synchronization

Correct Answer: C

A content delivery network (CDN) is a distributed network of servers that can efficiently deliver web content to users. CDNs' store cached content on edge servers in point-of-presence (POP) locations that are close to end users, to minimize

latency.

Azure Content Delivery Network (CDN) offers developers a global solution for rapidly delivering high- bandwidth content to users by caching their content at strategically placed physical nodes across the world.

Reference: https://docs.microsoft.com/en-us/azure/cdn/cdn-overview

Correct Answer: A

The virtual machine you attach a network interface to and the virtual network you connect it to must exist in the same location, here West US, also referred to as a region.

Reference: https://docs.microsoft.com/en-us/azure/virtual-network/virtual-network-network-interface

Correct Answer: B

https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles#website-contributor Microsoft.Resources/deployments/* - Create and manage a deployment

Correct Answer: BCE

A standard load balancer is required for the HA ports. -Two backend pools are needed as there are two services with different IP addresses. -Floating IP rule is used where backend ports are reused. Incorrect Answers:

F: HA Ports are not available for the basic load balancer.

References:

https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-standard-overview

https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-multivip-overview

The following diagram presents a hub-and-spoke virtual network deployment.

The spokes force- tunnel their traffic to the hub virtual network and through the NVA, before leaving the trusted space.

The NVAs are behind an internal Standard Load Balancer with an HA ports configuration.

All traffic can be processed and forwarded accordingly.

When configured as show in the following diagram, an HA Ports load-balancing rule additionally provides flow symmetry for ingress and egress traffic.

Reference : https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-overview https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-multivip-overview https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-ha-ports-overview#a-single-floating-ip-direct-server-return-ha-ports-configuration-on-an-internal-standard-load-balancer

Correct Answer: A

Microsoft have Docker Volume Plugin for Azure file storage which provides exactly this and it is used for Azure file shares.

Azure File Storage volume plugin is not limited to ease of container migration. It also allows a file share to be shared among multiple containers (even though they are on different hosts) to collaborate on workloads, share configuration or

secrets of an application running on multiple hosts. Another use case is uploading metrics and diagnostics data such as logs from applications to a file share for further processing.

Reference:

https://azure.microsoft.com/en-gb/blog/persistent-docker-volumes-with-azure-file-storage/

Correct Answer: C

Network Performance Monitor is a cloud-based hybrid network monitoring solution that helps you monitor network performance between various points in your network infrastructure. It also helps you monitor network connectivity to service

and application endpoints and monitor the performance of Azure ExpressRoute.

You can monitor network connectivity across cloud deployments and on-premises locations, multiple data centers, and branch offices and mission-critical multitier applications or microservices. With Performance Monitor, you can detect

network issues before users complain.

Reference:

https://docs.microsoft.com/en-us/azure/azure-monitor/insights/network-performance-monitor

Correct Answer: D

Scenario: Ensure Azure Multi-Factor Authentication (MFA) for the users in the finance department only.

The recommendation is to use conditional access policies that can then be targeted to groups of users, specific applications, or other conditions.

Technically, The finance department needs to migrate their users from AD to AAD using AADC based on the finance OU, and need to enforce MFA use. This is conditional access policy. Employees also often get promotions and/or join other departments and when that occurs, the user's OU attribute will change when the admin puts the user in a new OU, and the dynamic group conditional access exception (OU= [Department Name Value]) will move the user to the appropriate dynamic group on next AADC delta sync.

References: https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-userstates https://docs.microsoft.com/en-us/azure/active-directory/enterprise-users/groups-dynamicmembership https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overview