HOTSPOT (Drag and Drop is not supported)You have an Azure Storage account named storage1 that has the Blob service properties shown in the following exhibit.On January 1, you add blobs to storage1 as shown in the following table.You perform the actions shown in the following table.For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Each correct selection is worth one point.Hot Area:
Answer(s): A
Box 1: NoNo - You are charged an early deletion penalty for File1.Soft delete (45 days) is enabled. File1 is in the Hot tier.File1 is only 5 days old when it is soft deleted. There will be no charges.Important Note:In an account that has soft delete enabled, a blob is considered deleted after it is deleted and retention period expires. Until that period expires, the blob is only soft-deleted and is not subject to the early deletion penalty.Box 2: NoNo - You are charged an early deletion penalty for File2.Soft delete (45 days) is enabled. File2 is in the Cool tier.File2 is only 15 days old when it is moved. There will be no charges.Box 3: YesYes - You are charged an early deletion penalty for File3.Soft delete (45 days) is enabled. File3 is in the Archive tier.File3 is 90+ days old when it is rehydrated. There will be charges.Note Archive tier:Data must remain in the archive tier for at least 180 days or be subject to an early deletion charge.Note:Blobs are subject to an early deletion penalty if they are deleted, overwritten or moved to a different tier before the minimum number of days required by the tier have transpired. For example, a blob in the cool tier in a general-purpose v2 account is subject to an early deletion penalty if it's deleted or moved to a different tier before 30 days has elapsed. For a blob in the cold tier, the deletion penalty applies if it's deleted or moved to a different tier before 90 days has elapsed. This charge is prorated. For example, if a blob is moved to the cool tier and then deleted after 21 days, you'll be charged an early deletion fee equivalent to 9 (30 minus 21) days of storing that blob in the cool tier. Early deletion charges also occur if the entire object is rewritten through any operation (i.e. Put Blob, Put Block List, or Copy Blob) within the specified time window.
https://learn.microsoft.com/en-us/azure/storage/blobs/access-tiers-overview
You have an Azure subscription.You plan to create a storage account named storage1. You need to configure a deny assignment for storage1. What should you use?
Answer(s): D
The only way to create a deny assignment is through Azure blueprints, and this can only be done when the resource is created. The resource locks protecting against other subscription Owners cannot be applied to existing resources, only new ones.Deny assignments block users from performing specific Azure resource actions even if a role assignment grants them access. But you need add this protection in the blueprint definitions of resources created by an Azure Resource Manager template artifact, and the Blueprint resource lock is set during blueprint assignment.
https://learn.microsoft.com/en-us/answers/questions/1108981/deny-assignment
HOTSPOT (Drag and Drop is not supported)You have an Azure subscription named SubscriptionIn Subscription1, you create an Azure file share named share1.You create a shared access signature (SAS) named SAS1 as shown in the following exhibit.To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.Hot Area:
Box 1: will be prompted for credentialsIf on January 2, 2025, you run Microsoft Azure Storage Explorer on a computer that has an IP address of 193.77.134.1, you can use the SAS1 to connect to the storage account, you….You can only access the storage account. We see:Allowed services: BlobAllowed resource types: Blank [No resource type is allowed. No Service, No Container, No Object] Allowed IP addresses: Blank [This allows access from every IP address]Allowed permisions: BlankBox 2: will have no accessIf on January 2, 2025, you run the net use command on a computer that has an IP address of 193.77.134.50, and you use SAS1 as the password to connect to share1, you….Allowed services does not include File. Note:A Shared Access Signature (SAS) is a URI that grants limited access to Azure Storage resources, allowing you to delegate access without sharing your account key. SAS tokens can be configured to restrict access by IP address, protocol, and specific services.At a high level, here's how SAS tokens work:Your application submits the SAS token to Azure Storage as part of a REST API request.The storage service verifies that the SAS is valid and then the request is authorized. If the SAS token is deemed invalid, the request is declined, and the error code 403 (Forbidden) is returned.Azure Blob Storage offers three resource types:Storage accounts provide a unique namespace in Azure for your data.Data storage containers are located in storage accounts and organize sets of blobs (files, text, or images). Blobs are located in containers and store text and binary data such as files, text, and images.The Allowed IP addresses field is optional and specifies an IP address or a range of IP addresses from which to accept requests. If the request IP address doesn't match the IP address or address range specified on the SAS token, authorization fails.
https://learn.microsoft.com/en-us/azure/ai-services/language-service/native-document-support/shared-access- signatures
HOTSPOT (Drag and Drop is not supported)You have an Azure subscription that contains a virtual machine named VM1 and an Azure Blob Storage account named account1.Account1 contains a container named blob1. VM1 hosts an app that accesses blob1.You need to recommend a backup solution for VM1 and blob1. The solution must minimize costs.What should you include in the recommendation? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.Hot Area:
Box 1: Microsoft System Center Data Protection Manager (DPM) For VM1Microsoft System Center Data Protection Manager (DPM) is a software product that provides centralized backup and recovery for enterprise-class workloads in a Microsoft Windows environment. It helps businesses with their BCDR (Business Continuity and Disaster Recovery) strategy by backing up and restoring data, and ensuring application consistency.Application-Aware Protection:DPM can back up and recover Microsoft applications like SQL Server, Exchange, and SharePoint, ensuring data consistency.Virtual Machine Backup:DPM supports backing up Hyper-V and VMware virtual machines, including entire VMs or individual application components.Box 2: An Azure Backup vault For blob1* An Azure Backup vaultTo backup an Azure Blob Storage container, you can use Azure Backup to perform operational or vaulted backups. For operational backups, you can enable the backup within the storage account's data protection settings, associating a backup vault and policy. For vaulted backups, you can retain data for up to 10 years and restore it to a different storage account.Purpose:Designed for Azure Backup, offering streamlined backup management for specific workloads. Supports:Azure Backup for newer workloads like Azure Blob, Azure Database for PostgreSQL, and other workloads that Azure Backup will support.Incorrect:* A Recovery Services vault Purpose:Provides a central hub for managing both backup and disaster recovery for various workloads.Supports:Azure Backup (VMs, SQL, SAP HANA, Files), and Azure Site Recovery (replication and failover of VMs and workloads).
https://learn.microsoft.com/en-us/system-center/dpm/dpm-overview
You have an Azure subscription that contains the storage accounts shown in the following table.You need to deploy an app named App1 that requires blob storage in the Hot access tier. Which storage accounts can you use for App1?
Answer(s): E
In Azure Blob Storage, the "Hot" access tier is used for data that is accessed or modified frequently. This tier offers the highest storage cost but the lowest access cost, making it suitable for frequently accessed datasets or applications with high read/write demands. Block blobs, page blobs, and file shares can all be stored in the Hot access tier.A standard storage account (general-purpose v2) can also be used with the Hot access tier for blob data in Azure. In fact, a new general-purpose v2 storage account is created with the Hot access tier by default. You can also specify Hot as the access tier when upgrading from a general-purpose v1 storage account.
You need to implement a backup solution for App1 after the application is moved. What should you create first?
A Recovery Services vault is a logical container that stores the backup data for each protected resource, such as Azure VMs. When the backup job for a protected resource runs, it creates a recovery point inside the Recovery Services vault.Scenario:There are three application tiers, each with five virtual machines. Move all the virtual machines for App1 to Azure.Ensure that all the virtual machines for App1 are protected by backups.
https://docs.microsoft.com/en-us/azure/backup/quick-backup-vm-portal
You need to move the blueprint files to Azure. What should you do?
Answer(s): B
Azure Storage Explorer is a free tool from Microsoft that allows you to work with Azure Storage data on Windows, macOS, and Linux. You can use it to upload and download data from Azure blob storage.Scenario:Planned Changes include: move the existing product blueprint files to Azure Blob storage. Technical Requirements include: Copy the blueprint files to Azure over the Internet.
https://docs.microsoft.com/en-us/azure/machine-learning/team-data-science-process/move-data-to-azure-blob- using-azure-storage-explorer
HOTSPOT (Drag and Drop is not supported)You need to identify the storage requirements for Contoso.For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Each correct selection is worth one point.Hot Area:
Box 1: YesContoso is moving the existing product blueprint files to Azure Blob storage.Use unmanaged standard storage for the hard disks of the virtual machines. We use Page Blobs for these. Box 2: NoBox 3: No
Post your Comments and Discuss Microsoft AZ-104 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AZ-104 content, but please register or login to continue.