blog.cloudthat.

com

Sample Questions for Microsoft

Azure Administrator AZ-104
Certification Exam
Anusha Shanbhag

9-11 minutes

October 28, 2020 | Comments(2) |

Hello Readers, here are some sample questions for Microsoft

Azure Administrator AZ-104 Certification Exam.

You can answer the multiple-choice questions, verify the correct

answer at the end, appear for the exam, and grab your
certificate quickly.

Here goes the Quiz:

1. Which among the following is the correct Azure CLI cmdlet to

 create a Network Security Group (NSG)?
a. az sec nsg update
b. az nsg create
c. az network nsg create
d. az security nsg create

2. You are assigning Azure AD roles. Which role will allow the user
to manage all the groups in your Team’s tenants and be able to
assign other administrator roles? Select one.
a. Global Administrator
b. Password Administrator
c. Security Administrator
d. User Administrator

3. You would like to categorize resources and billing for different

departments like IT and HR. The billing needs to be
consolidated across multiple resource groups and you need to
ensure everyone complies with the solution. What should you
do? {Choose two to complete a solution}.
a. Create tags for each department
b. Create a billing group for each department
c. Create an Azure policy
d. Add the groups into a single resource group
e. Create a subscription account rule

4. Which of the following best describes the format of an Azure

Resource Manager template? Select one.
a. A markdown document with a pointer table
b. A JSON document with key-value pairs
c. A TXT document with key-value pairs
d. An XML document with element-value pairs

5. Your company has an existing Azure tenant named

alpineskihouse.onmicrosoft.com. The company wants to start
 using alpineskihouse.com for its Azure resources. You add a
custom domain to Azure. Now, you need to add a DNS record to
prepare for verifying the custom domain. Which two of the
following record types could you create?
a. Add a PTR record to the DNS zone
b. Add a TXT record to the DNS zone
c. Add an MX record to the DNS zone
d. Add d an SRV record to the DNS zone
e. Add a CNAME record to the DNS zone

6. Your company is preparing to implement a Site-to-Site VPN to

Microsoft Azure. You are selected to plan and implement the
VPN. Currently, you have an Azure subscription, an Azure
virtual network, and an Azure gateway subnet. You need to
prepare the on-premises environment and Microsoft Azure to
meet the prerequisites of the Site-to-Site VPN. Later, you will
create a VPN connection and test it. What should you do? (Each
answer presents part of the solution. Select three.
a. Obtain a VPN device for the on-premises environment.
b. Obtain a VPN device for the Azure environment.
c. Create a virtual network gateway (VPN) and the local network
gateway in Azure
d. Create a virtual network gateway (ExpressRoute) in Azure
e. Obtain a public IPv4 IP address without NAT for the VPN
device
f. Obtain a public IPv4 IP address behind NAT for the VPN
device

7. Which load balancing strategy does the Application Gateway

implement? Select one.
a. Distributes requests to each available server in a backend
pool, in turn, round-robin.
b. Distributes requests to the server in the backend pool with the
 lightest load.
c. Polls each server in the backend pool in turn and sends the
request to the first server that responds.
d. Uses one server in the backend pool until that server reaches
50% load, then moves to the next server.

8. Your company is building an app in Azure. The app has the

following storage requirements:
->Storage must be reachable programmatically through a REST
API.
->Storage must be globally redundant.
->Storage must be accessible privately within the company’s
Azure environment.
-> Storage must be optimal for unstructured data.
Which type of Azure storage should you use for the app? Select
one.
a. Azure Data Lake store
b. Azure Table Storage
c. Azure Blob Storage
d. Azure File Storage

9. You are researching Microsoft Azure for your company. The

company is considering deploying Windows-based VMs in
Azure. However, before moving forward, the management team
has asked you to research the costs associated with Azure
VMs. You need to document the configuration options that are
likely to save the company money on their Azure VMs. Which
options should you document? (Each answer presents part of
the solution. Select four.
a. Use HDD instead of SSD for VM storage
b. Use unmanaged premium storage instead of managed
standard storage
c. Bring your own Windows custom images.
 d. Use different Azure regions
e. Use the least powerful VMs that meet your requirements
f. Place all VMs in the same resource group
g. Bring your own Windows license for each VM

10. The objectives for Lab Scenario:

In this lab, you will:
-> Task 1: Provision of the lab environment
-> Task 2: Create and configure an Azure Log Analytics
workspace and Azure Automation-based solutions.
-> Task 3: Review default monitoring settings of Azure virtual
machines.
-> Task 4: Configure Azure virtual machine diagnostic settings.
-> Task 5: Review Azure Monitor functionality.
-> Task 6: Review Azure Log Analytics functionality.

Now that you have reviewed the sample questions, check if your
answers are correct or not. Remember, the passing percentage
is 70% for you to get certified for the Azure Administrator
Associate AZ-104 exam.

Correct Answers:

1. c.
Explanation: We can control network traffic to resources in a
virtual network using a network security group. ‘az network nsg’
create is used to create a network security group.
2. a.
Explanation: Global administrator. Only the global administrator
can manage groups across tenants and assign other
administrator roles.
3. a & c.
Explanation: Create tags for each department and create Azure
policy. You should create a tag with a key: value pair like
department: HR. You can then create an Azure policy that
requires the tag to be applied before a resource is created.
4. d.
Explanation: A JSON document with key-value pairs. An Azure
Resource Template is a JSON document with key-value pairs.
5. b & c.
Explanation: By default, Azure will prompt you to create a
custom TXT record in your DNS zone to verify a custom
domain. Optionally, you can use an MX record instead. The
result is the same. Other record types are not supported
6. a, c & e:
Explanation: The prerequisites for a Site-to-Site VPN are having
a compatible VPN device on-premises, having a public IPv4 IP
without NAT on the on-premises VPN device, and creating a
VPN gateway and local network gateway in Azure. IPv6 is not
supported for VPNs. ExpressRoute is a different setup and not
part of a Site-to-Site VPN.
7. a.
Explanation: The Application Gateway distributes requests to
each available server in the backend pool using the round-robin
method.
8. c.
Explanation: Azure Blob Storage is optimal for unstructured data
and meets the requirements for the company’s app. Azure Data
Lake supports some of the requirements, such as unstructured
data and REST API access. However, Azure Data Lake is
geared for analytics workloads and is only available as locally
redundant (multiple copies of data in a single Azure region).
9. a,d,e & g:
Explanation: In this scenario, you need to document which of
the options presented are likely to save the company money for
their Azure VMs. While this isn’t an exhaustive list, the correct
money-saving configuration options are: Use HDD instead of
SSD, use different Azure regions, use the least powerful VMs
that meet your requirements, and bring your own Windows
license (instead of paying for a license with the VM). The other
options usually increase costs.
10. This is a lab scenario and you need to evaluate Azure
functionality that would provide insight into the performance and
configuration of Azure resources, focusing on Azure virtual
machines. To accomplish this, you intend to examine the
capabilities of Azure Monitor, including Log Analytics. Consult
with your instructor on how to access the lab instructions and
lab environment (if provided).

Also, more sample questions are coming up, so keep checking.

A comprehensive study guide to help you with your AZ-104

certification preparation is available to get you started.

Disclaimer: These questions are NOT appearing in the

certification exam. I personally or CloudThat do not have any
official tie-up with Microsoft regarding the certification or the kind
of questions asked. These are my best guesses for the kind of
questions to expect with Microsoft in general and with the
examination.

Special thanks to Shyla for co-authoring this blog.

If you want to get trained on AZ-104, check out the course link
here.

Check out the TestPrep material here.

Feel free to drop any questions in the comment box, I would

love to address them. I hope you enjoyed the article. Best of
luck!