[14-Sep-2024 Update] Exam AZ-104 VCE Dumps and AZ-104 PDF Dumps from PassLeader

Valid AZ-104 Dumps shared by PassLeader for Helping Passing AZ-104 Exam! PassLeader now offer the newest AZ-104 VCE dumps and AZ-104 PDF dumps, the PassLeader AZ-104 exam questions have been updated and ANSWERS have been corrected, get the newest PassLeader AZ-104 dumps with VCE and PDF here: https://www.passleader.com/az-104.html (764 Q&As Dumps)

BTW, DOWNLOAD part of PassLeader AZ-104 dumps from Cloud Storage: https://drive.google.com/open?id=1ms1PBdUaeBViEHIq26Ry2_bjnBBmO9PL

NEW QUESTION 741
You have an Azure Storage account named storage1. You need to enable a user named User1 to list and regenerate storage account keys for storage1.
Solution: You assign the Reader and Data Access role to User1.
Does this meet the goal?

A.    Yes
B.    No

Answer: B
Explanation:
To enable User1 to list and regenerate storage account keys, you should assign the Storage Account Key Operator Service Role1.

NEW QUESTION 742
You have an Azure container registry named Registry1 that contains an image named image1. You receive an error message when you attempt to deploy a container instance by using image1. You need to be able to deploy a container instance by using image1.
Solution: You assign the AcrPull role to ACR-Tasks-Network for Registry1.
Does this meet the goal?

A.    Yes
B.    No

Answer: B
Explanation:
AcrPull role assigned to ACR-Tasks-Network does not meet the goal. This role should be assigned to the identity that is performing the container deployment.

NEW QUESTION 743
You have an Azure virtual machine named VM1. VM1 was deployed by using a custom Azure Resource Manager template named ARM1.json. You receive a notification that VM1 will be affected by maintenance. You need to move VM1 to a different host immediately.
Solution: From the resource group blade, move VM1 to another subscription.
Does this meet the goal?

A.    Yes
B.    No

Answer: B

NEW QUESTION 744
You have an app named App1 that is installed on two Azure virtual machines named VM1 and VM2. Connections to App1 are managed by using an Azure Load Balancer. The effective network security configurations for VM2 are shown in the following exhibit:
AZ-104-Exam-Dumps-7441

 

You discover that connections to App1 from 131.107.100.50 over TCP port 443 fail. You verify that the Load Balancer rules are configured correctly. You need to ensure that connections to App1 can be established successfully from 131.107.100.50 over TCP port 443.
Solution: You create an inbound security rule that allows any traffic from the AzureLoadBalancer source and has a priority of 150.
Does this meet the goal?

A.    Yes
B.    No

Answer: A

NEW QUESTION 745
You have a Microsoft Entra tenant. You plan to perform a bulk import of users. You need to ensure that imported user objects are added automatically as the members of a specific group based on each user’s department. The solution must minimize administrative effort. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

A.    Create groups that use the Assigned membership type.
B.    Create an Azure Resource Manager (ARM) template.
C.    Create groups that use the Dynamic User membership type.
D.    Write a PowerShell script that parses an import file.
E.    Create an XML file that contains user information and the appropriate attributes.
F.    Create a CSV file that contains user information and the appropriate attributes.

Answer: CF
Explanation:
Option C: Dynamic groups automatically include members based on specified attributes (like department) that are evaluated using rules. In this scenario, you would create dynamic user groups and define a membership rule based on the department attribute. This eliminates the need for manual assignment or scripting as users are automatically added to the appropriate group based on their department.
Option F: The bulk import of users in Microsoft Entra ID (formerly Azure AD) is typically done using a CSV file. The CSV file allows you to specify user attributes, including the department. Once the users are imported with the department attribute correctly populated, they will automatically be added to the relevant dynamic groups based on the membership rules you set.

NEW QUESTION 746
You have an Azure subscription that contains a storage account named storage1. You need to ensure that the access keys for storage1 rotate automatically. What should you configure?

A.    a backup vault
B.    redundancy for storage1
C.    lifecycle management for storage1
D.    an Azure key vault
E.    a Recovery Services vault

Answer: D
Explanation:
Azure Key Vault is a service that helps manage secrets, keys, and certificates. You can store and manage your storage account keys securely in Key Vault and use its features to automate key rotation.

NEW QUESTION 747
You have a Microsoft Entra tenant named contoso.com. You collaborate with an external partner named fabrikam.com. You plan to invite users in fabrikam.com to the contoso.com tenant. You need to ensure that invitations can be sent only to fabrikam.com users. What should you do in the Microsoft Entra admin center?

A.    From Cross-tenant access settings, configure the Tenant restrictions settings.
B.    From Cross-tenant access settings, configure the Microsoft cloud settings.
C.    From External collaboration settings, configure the Guest user access restrictions settings.
D.    From External collaboration settings, configure the Collaboration restrictions settings.

Answer: D
Explanation:
Collaboration restrictions settings in Microsoft Entra (formerly Azure AD) are specifically designed to control which external domains can be invited as guests.

NEW QUESTION 748
You have an Azure subscription that contains a storage account named storage1. The storage1 account contains blob data. You need to assign a role to a user named User1 to ensure that the user can access the blob data in storage1. The role assignment must support conditions. Which two roles can you assign to User1? (Each correct answer presents a complete solution. Choose two.)

A.    Owner
B.    Storage Account Contributor
C.    Storage Account Backup Contributor
D.    Storage Blob Data Contributor
E.    Storage Blob Data Owner
F.    Storage Blob Delegator

Answer: DE
Explanation:
– Storage Blob Data Contributor: Grants read, write, and delete access to blob data.
– Storage Blob Data Owner: Grants full access to blob data, including the ability to manage access permissions.

NEW QUESTION 749
You have an Azure subscription that contains a storage account named storage. The storage account contains a blob that stores images. Client access to storage1 is granted by using a shared access signature (SAS). You need to ensure that users receive a warning message when they generate a SAS that exceeds a seven-day time period. What should you do for storage?

A.    Enable a read-only lock.
B.    Configure an alert rule.
C.    Add a lifecycle management rule.
D.    Set Allow recommended upper limit for shared access signature (SAS) expiry interval to Enabled.

Answer: D
Explanation:
1. Sign in to the Azure portal: Ensure you have the necessary administrative privileges.
2. Navigate to the Storage Account: Go to Storage accounts and select the storage account named storage.
3. Configure the SAS Expiration Policy:
– In the storage account settings, go to Configuration.
– Under Shared access signature (SAS) settings, find the SAS expiration policy.
– Set the Recommended upper limit for SAS expiration to 7 day.

NEW QUESTION 750
You have an Azure subscription. You plan to create an Azure container registry named ContReg1. You need to ensure that you can push and pull signed images for ContReg1. What should you do for ContReg1?

A.    Enable encryption by using a customer-managed key.
B.    Create a connected registry.
C.    Add a token.
D.    Enable content trust.

Answer: D
Explanation:
Content trust in Azure Container Registry allows you to sign images, ensuring their integrity and authenticity when they are pushed and pulled.

NEW QUESTION 751
You plan to deploy several Azure virtual machines that will run Windows Server 2022 in a virtual machine scale set by using an Azure Resource Manager template. You need to ensure that NGINX is available on all the virtual machines after they are deployed. What should you use?

A.    Azure Custom Script Extension
B.    Deployment Center in Azure App Service
C.    Microsoft Entra Application Proxy
D.    the Publish-AzVMDscConfiguration cmdlet

Answer: A

NEW QUESTION 752
You have an Azure subscription. You plan to deploy a container. You need to recommend which Azure services can scale the container automatically. What should you recommend?

A.    Azure Container Apps only.
B.    Azure Container Instances only.
C.    Azure Container Apps or Azure App Service only.
D.    Azure Container Instances or Azure App Service only.
E.    Azure Container Apps, Azure Container Instances, or Azure App Service.

Answer: C
Explanation:
To scale containers automatically, the following Azure services support this feature:
– Azure Container Apps: Supports automatic horizontal scaling through declarative scaling rules1.
– Azure App Service: Supports automatic scaling for web apps, including those deployed as containers.

NEW QUESTION 753
You have a Standard Azure App Service plan named Plan1. You need to ensure that Plan1 will scale automatically when the CPU usage of the web app exceeds 80 percent. What should you select for Plan1?

A.    Automatic in the Scale out method settings.
B.    Rules Based in the Scale out method settings.
C.    Premium P1 in the Scale up (App Service plan) settings.
D.    Standard S1 in the Scale up (App Service plan) settings.
E.    Manual in the Scale out method settings.

Answer: B
Explanation:
In Azure Monitor, rules-based scaling in the scale-out method settings use metrics and schedules to determine when to add or remove resources to run an application. These rules include minimum and maximum resource levels, and when the conditions are met, one or more autoscale actions are triggered. For example, you can scale out an application by adding VMs when the average CPU usage per VM is above a certain percentage, or scale it back by removing VMs when CPU usage drops below a certain percentage.

NEW QUESTION 754
You have an Azure subscription. You create a routing table named RT1. You need to add a route to RT1 that specifies the next hop IP address. Which next hop type should you select?

A.    Internet.
B.    Virtual network gateway.
C.    Virtual network.
D.    Virtual appliance.

Answer: D

NEW QUESTION 755
You have an Azure virtual network named VNet1 that contains the following settings:
– IPv4 address space: 172.16.10.0/24
– Subnet name: Subnet1
– Subnet address range: 172.16.10.0/25
What is the maximum number of virtual machines that can connect to Subnet1?

A.    24
B.    25
C.    123
D.    128
E.    251

Answer: C
Explanation:
There are 32 bits available, under IP4, If you want to use 25 bits to define the network address, 32-25 means 7 bits are left for hosts and other stuff and 7 bits can represent 127 (64+32+16+8+4+2+1=127) hosts, but since you can’t use the top and the bottom ones as they are used for other purposes, that leaves 125 free IP address numbers for hosts. There is usually a Gateway address in there somewhere as well as the network address so (125-2=123) 123 VMs can be connect to /25 subnet.

NEW QUESTION 756
You have an Azure subscription that contains two peered virtual networks named VNet1 and VNet2. VNet1 has a VPN gateway that uses static routing. The on-premises network has a VPN connection that uses the VPN gateway of VNet1. You need to configure access for users on the on-premises network to connect to a virtual machine on VNet2. The solution must minimize costs. Which type of connectivity should you use?

A.    Azure Firewall with a private IP address.
B.    Service chaining and user-defined routes (UDRs).
C.    Azure Application Gateway.
D.    ExpressRoute circuits to VNet2.

Answer: B

NEW QUESTION 757
You have an Azure subscription that contains two peered virtual networks named VNet1 and VNet2. You have a Network Virtual Appliance (NVA) named NetVA1. You need to ensure that the traffic from VNet1 to VNet2 is inspected by using NetVA1. What should you use?

A.    a local network gateway
B.    a route table that has custom routes
C.    a service endpoint
D.    IP address reservations

Answer: B

NEW QUESTION 758
Drag and Drop
You have a Microsoft Entra tenant. You need to ensure that when a new Microsoft 365 group is created, the group name is automatically formatted as follows:
<Department><Group name>
Which three actions should you perform in sequence in the Microsoft Entra admin center? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
AZ-104-Exam-Dumps-7581

 

Answer:
AZ-104-Exam-Dumps-7582

 

NEW QUESTION 759
Hotspot
You have an Azure subscription that has the Azure container registries shown in the following table:
AZ-104-Exam-Dumps-7591

 

You plan to use ACR Tasks and configure private endpoint connections. Which container registries support ACR Tasks and private endpoints? (To answer, select the appropriate options in the answer area.)
AZ-104-Exam-Dumps-7592

 

Answer:
AZ-104-Exam-Dumps-7593

 

Explanation:
ContReg1 (Premium): Supports both ACR Tasks and private endpoints.
ContReg2 (Standard): Supports ACR Tasks but does not support private endpoints.
ContReg3 (Basic): Supports ACR Tasks but does not support private endpoints.

NEW QUESTION 760
Hotspot
You have an Azure subscription that uses Azure Container Instances. You have a computer that has Azure Command-Line Interface (CLI) and Docker installed. You create a container image named image1. You need to provision a new Azure container registry and add image1 to the registry. Which command should you run for each requirement? (To answer, select the options in the answer area.)
AZ-104-Exam-Dumps-7601

 

Answer:
AZ-104-Exam-Dumps-7602

 

NEW QUESTION 761
……


Get the newest PassLeader AZ-104 VCE dumps here: https://www.passleader.com/az-104.html (764 Q&As Dumps)

And, DOWNLOAD the newest PassLeader AZ-104 PDF dumps from Cloud Storage for free: https://drive.google.com/open?id=1ms1PBdUaeBViEHIq26Ry2_bjnBBmO9PL