HOTSPOT (Drag and Drop is not supported)You have an Azure subscription named Subscription1. Subscription1 contains a virtual machine named VM1. You install and configure a web server and a DNS server on VM1.VM1 has the effective network security rules shown in the following exhibit:Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.NOTE: Each correct selection is worth one point.Hot Area:
Answer(s): A
Box 1:Rule2 blocks ports 50-60, which includes port 53, the DNS port. Internet users can reach to the Web server, since it uses port 80.Box 2:If Rule2 is removed internet users can reach the DNS server as well.Note: Rules are processed in priority order, with lower numbers processed before higher numbers, because lower numbers have higher priority. Once traffic matches a rule, processing stops. As a result, any rules that exist with lower priorities (higher numbers) that have the same attributes as rules with higher priorities are not processed.
https://docs.microsoft.com/en-us/azure/virtual-network/security-overview
You plan to deploy three Azure virtual machines named VM1, VM2, and VM3. The virtual machines will host a web app named App1.You need to ensure that at least two virtual machines are available if a single Azure datacenter becomes unavailable.What should you deploy?
Answer(s): C
Use availability zones to protect from datacenter level failures. Reference:https://docs.microsoft.com/en-us/azure/virtual-machines/windows/manage-availability https://docs.microsoft.com/en-us/azure/virtual-machines/windows/tutorial-availability-sets
You have an Azure virtual machine named VM1 that runs Windows Server 2019.You save VM1 as a template named Template1 to the Azure Resource Manager library. You plan to deploy a virtual machine named VM2 from Template1.What can you configure during the deployment of VM2?
Answer(s): D
You have an Azure subscription that contains an Azure virtual machine named VM1. VM1 runs a financial reporting app named App1 that does not support multiple active instances.At the end of each month, CPU usage for VM1 peaks when App1 runs.You need to create a scheduled runbook to increase the processor performance of VM1 at the end of each month.What task should you include in the runbook?
Answer(s): B
https://docs.microsoft.com/en-us/azure/automation/automation-quickstart-dsc-configuration
You plan to deploy several Azure virtual machines that will run Windows Server 2019 in a virtual machine scale set by using an Azure Resource Manager template.You need to ensure that NGINX is available on all the virtual machines after they are deployed. What should you use?
For this question these are the correct answers:* a Desired State Configuration (DSC) extensionAzure Custom Script ExtensionFor this question these are the incorrect answers:* a Microsoft Intune device configuration profile* Deployment Center in Azure App Servicethe New-AzConfigurationAssignment cmdletThe question can have other incorrect answer options, including the following:* a Microsoft Endpoint Manager device configuration profile* the Publish-AzVMDscConfiguration cmdlet* Microsoft Entra Application Proxy* Azure Application Insights* Deployment Center in Azure App Service* Microsoft Entra Application Proxy* the New-AzConfigurationAssignment cmdlet* the Publish-AzVMDscConfiguration cmdleta Microsoft Intune device configuration profileExplanations for correct answers:Azure Custom Script ExtensionAzure virtual machine extensions are small packages that run post-deployment configuration and automation on Azure virtual machines.In the following example, the Azure CLI is used to deploy a custom script extension to an existing virtual machine, which installs a Nginx webserver.az vm extension set \--resource-group myResourceGroup \--vm-name myVM --name customScript \--publisher Microsoft.Azure.Extensions \--settings '{"commandToExecute": "apt-get install -y nginx"}* a Desired State Configuration (DSC) extensionThe PowerShell DSC Extension for Windows is published and supported by Microsoft. The extension uploads and applies a PowerShell DSC Configuration on an Azure VM. The DSC Extension calls into PowerShell DSC to enact the received DSC configuration on the VM.Note 1: Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Note 2:Create Custom Script Extension definitionWhen you define a virtual machine scale set with an Azure template, the Microsoft.Compute/ virtualMachineScaleSets resource provider can include a section on extensions. The extensionsProfile details what is applied to the VM instances in a scale set. To use the Custom Script Extension, you specify a publisher of Microsoft.Azure.Extensions and a type of CustomScript.The fileUris property is used to define the source install scripts or packages. To start the install process, the required scripts are defined in commandToExecute. The following example defines a sample script from GitHub that installs and configures the NGINX web server:"extensionProfile": { "extensions": [{"name": "AppInstall", "properties": {"publisher": "Microsoft.Azure.Extensions", "type": "CustomScript", "typeHandlerVersion": "2.0", "autoUpgradeMinorVersion": true, "settings": {"fileUris": ["https://raw.githubusercontent.com/Azure-Samples/compute-automation-configurations/master/automate_nginx.sh"],"commandToExecute": "bash automate_nginx.sh"}}}]}
https://docs.microsoft.com/en-us/azure/architecture/framework/devops/automation-configuration
HOTSPOT (Drag and Drop is not supported)You deploy an Azure Kubernetes Service (AKS) cluster that has the network profile shown in the following exhibit.Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.NOTE: Each correct selection is worth one point.Hot Area:
Box 1: 10.244.0.0/16The Pod CIDR.Note: The --pod-cidr should be a large address space that isn't in use elsewhere in your network environment. This range includes any on-premises network ranges if you connect, or plan to connect, your Azure virtual networks using Express Route or a Site-to-Site VPN connection.This address range must be large enough to accommodate the number of nodes that you expect to scale up to. You can't change this address range once the cluster is deployed if you need more addresses for additional nodes.Box 2: 10.0.0.0/16The --service-cidr is used to assign internal services in the AKS cluster an IP address. Reference:https://docs.microsoft.com/en-us/azure/aks/configure-kubenet
HOTSPOT (Drag and Drop is not supported)You have the App Service plan shown in the following exhibit.The scale-in settings for the App Service plan are configured as shown in the following exhibit.The scale out rule is configured with the same duration and cool down tile as the scale in rule.Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.NOTE: Each correct selection is worth one point.Hot Area:
Box 1: 5The maximum 5 will kept as the CPU Usage >= 30. Box 2: 3As soon as the average CPU usage drops below 30%, the count will decrease by 1. After the 5 minute cool- down it will decrease by another 1, reaching 3.
https://docs.microsoft.com/en-us/azure/azure-monitor/learn/tutorial-autoscale-performance-schedule
You have an Azure virtual machine named VM1 that runs Windows Server 2019. The VM was deployed using default drive settings.You sign in to VM1 as a user named User1 and perform the following actions: Create files on drive C.Create files on drive D.Modify the screen saver timeout. Change the desktop background.You plan to redeploy VM1.Which changes will be lost after you redeploy VM1?
Post your Comments and Discuss Microsoft AZ-104 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AZ-104 content, but please register or login to continue.