[13-Oct-2020 Update] Exam AZ-104 VCE Dumps and AZ-104 PDF Dumps from PassLeader

Valid AZ-104 Dumps shared by PassLeader for Helping Passing AZ-104 Exam! PassLeader now offer the newest AZ-104 VCE dumps and AZ-104 PDF dumps, the PassLeader AZ-104 exam questions have been updated and ANSWERS have been corrected, get the newest PassLeader AZ-104 dumps with VCE and PDF here: https://www.passleader.com/az-104.html (310 Q&As Dumps –> 421 Q&As Dumps –> 436 Q&As Dumps)

BTW, DOWNLOAD part of PassLeader AZ-104 dumps from Cloud Storage: https://drive.google.com/open?id=1ms1PBdUaeBViEHIq26Ry2_bjnBBmO9PL

NEW QUESTION 295
You have an Azure subscription. You have 100 Azure virtual machines. You need to quickly identify underutilized virtual machines that can have their service tier changed to a less expensive offering. Which blade should you use?

A.    Monitor
B.    Advisor
C.    Metrics
D.    Customer insights

Answer: B
Explanation:
Advisor helps you optimize and reduce your overall Azure spend by identifying idle and underutilized resources. You can get cost recommendations from the Cost tab on the Advisor dashboard.
https://docs.microsoft.com/en-us/azure/advisor/advisor-cost-recommendations

NEW QUESTION 296
You download an Azure Resource Manager template based on an existing virtual machine. The template will be used to deploy 100 virtual machines. You need to modify the template to reference an administrative password. You must prevent the password from being stored in plain text. What should you create to store the password?

A.    an Azure Key Vault and an access policy
B.    an Azure Storage account and an access policy
C.    a Recovery Services vault and a backup policy
D.    Azure Active Directory (AD) Identity Protection and an Azure policy

Answer: A
Explanation:
You can use a template that allows you to deploy a simple Windows VM by retrieving the password that is stored in a Key Vault. Therefore, the password is never put in plain text in the template parameter file.
https://azure.microsoft.com/en-us/resources/templates/101-vm-secure-password/

NEW QUESTION 297
You plan to automate the deployment of a virtual machine scale set that uses the Windows Server 2016 Datacenter image. You need to ensure that when the scale set virtual machines are provisioned, they have web server components installed. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

A.    Upload a configuration script.
B.    Create an automation account.
C.    Create an Azure policy.
D.    Modify the extensionProfile section of the Azure Resource Manager template.
E.    Create a new virtual scale set in the Azure portal.

Answer: DE
Explanation:
Virtual Machine Scale Sets can be used with the Azure Desired State Configuration (DSC) extension handler. Virtual machine scale sets provide a way to deploy and manage large numbers of virtual machines, and can elastically scale in and out in response to load. DSC is used to configure the VMs as they come online so they are running the production software.
https://docs.microsoft.com/en-us/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-dsc

NEW QUESTION 298
You create an App Service plan named Plan1 and an Azure web app named webapp1. You discover that the option to create a staging slot is unavailable. You need to create a staging slot for Plan1. What should you do first?

A.    From Plan1, scale up the App Service plan.
B.    From webapp1, modify the Application settings.
C.    From webapp1, add a custom domain.
D.    From Plan1, scale out the App Service plan.

Answer: A
Explanation:
The app must be running in the Standard, Premium, or Isolated tier in order for you to enable multiple deployment slots. If the app isn’t already in the Standard, Premium, or Isolated tier, you receive a message that indicates the supported tiers for enabling staged publishing. At this point, you have the option to select Upgrade and go to the Scale tab of your app before continuing. Scale up: Get more CPU, memory, disk space, and extra features like dedicated virtual machines (VMs), custom domains and certificates, staging slots, autoscaling, and more.
Incorrect:
Not D: Scale out: increase the number of VM instances that run your app. You can scale out to as many as 30 instances.
https://docs.microsoft.com/en-us/azure/app-service/deploy-staging-slots
https://docs.microsoft.com/en-us/azure/app-service/manage-scale-up

NEW QUESTION 299
You plan to move a distributed on-premises app named App1 to an Azure subscription. After the planned move, App1 will be hosted on several Azure virtual machines. You need to ensure that App1 always runs on at least eight virtual machines during planned Azure maintenance. What should you create?

A.    one virtual machine scale set that has 10 virtual machines instances
B.    one Availability Set that has three fault domains and one update domain
C.    one Availability Set that has 10 update domains and one fault domain
D.    one virtual machine scale set that has 12 virtual machines instances

Answer: C
Explanation:
An update domain is a logical group of underlying hardware that can undergo maintenance or be rebooted at the same time. As you create VMs within an availability set, the Azure platform automatically distributes your VMs across these update domains. This approach ensures that at least one instance of your application always remains running as the Azure platform undergoes periodic maintenance.
http://www.thatlazyadmin.com/azure-fault-update-domains/

NEW QUESTION 300
You have an Azure virtual machine named VM1 that runs Windows Server 2016. You need to create an alert in Azure when more than two error events are logged to the System event log on VM1 within an hour.
Solution: You create an event subscription on VM1. You create an alert in Azure Monitor and specify VM1 as the source.
Does this meet the goal?

A.    Yes
B.    No

Answer: B
Explanation:
Instead: You create an Azure Log Analytics workspace and configure the data settings. You install the Microsoft Monitoring Agent on VM1. You create an alert in Azure Monitor and specify the Log Analytics workspace as the source.
https://docs.microsoft.com/en-us/azure/azure-monitor/platform/agents-overview

NEW QUESTION 301
You have an Azure virtual machine named VM1. VM1 was deployed by using a custom Azure Resource Manager template named ARM1.json. You receive a notification that VM1 will be affected by maintenance. You need to move VM1 to a different host immediately.
Solution: From the Redeploy blade, you click Redeploy.
Does this meet the goal?

A.    Yes
B.    No

Answer: A
Explanation:
When you redeploy a VM, it moves the VM to a new node within the Azure infrastructure and then powers it back on, retaining all your configuration options and associated resources.
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/redeploy-to-new-node

NEW QUESTION 302
You have an Azure web app named webapp1. You have a virtual network named VNET1 and an Azure virtual machine named VM1 that hosts a MySQL database. VM1 connects to VNET1. You need to ensure that webapp1 can access the data hosted on VM1. What should you do?

A.    Deploy an internal load balancer.
B.    Peer VNET1 to another virtual network.
C.    Connect webapp1 to VNET1.
D.    Deploy an Azure Application Gateway.

Answer: D

NEW QUESTION 303
You have the Azure virtual network named VNet1 that contains a subnet named Subnet1. Subnet1 contains three Azure virtual machines. Each virtual machine has a public IP address. The virtual machines host several applications that are accessible over port 443 to users on the Internet. Your on-premises network has a site-to-site VPN connection to VNet1. You discover that the virtual machines can be accessed by using the Remote Desktop Protocol (RDP) from the Internet and from the on-premises network. You need to prevent RDP access to the virtual machines from the Internet, unless the RDP connection is established from the on-premises network. The solution must ensure that all the applications can still be accessed by the Internet users. What should you do?

A.    Modify the address space of the local network gateway.
B.    Create a deny rule in a network security group (NSG) that is linked to Subnet1.
C.    Remove the public IP addresses from the virtual machines.
D.    Modify the address space of Subnet1.

Answer: B
Explanation:
You can use a site-to-site VPN to connect your on-premises network to an Azure virtual network. Users on your on-premises network connect by using the RDP or SSH protocol over the site-to-site VPN connection. You don’t have to allow direct RDP or SSH access over the internet.
https://docs.microsoft.com/en-us/azure/security/fundamentals/network-best-practices

NEW QUESTION 304
You have an Azure subscription named Subscription1 that contains an Azure virtual network named VNet1. VNet1 connects to your on-premises network by using Azure ExpressRoute. You plan to prepare the environment for automatic failover in case of ExpressRoute failure. You need to connect VNet1 to the on-premises network by using a site-to-site VPN. The solution must minimize cost. Which three actions should you perform? (Each correct answer presents part of the solution. Choose three.)

A.    Create a connection.
B.    Create a local site VPN gateway.
C.    Create a VPN gateway that uses the VpnGw1 SKU.
D.    Create a gateway subnet.
E.    Create a VPN gateway that uses the Basic SKU.

Answer: ADE
Explanation:
https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-site-to-site-resource-manager-portal

NEW QUESTION 305
Your company has a main office in London that contains 100 client computers. Three years ago, you migrated to Azure Active Directory (Azure AD). The company’s security policy states that all personal devices and corporate-owned devices must be registered or joined to Azure AD. A remote user named User1 is unable to join a personal device to Azure AD from a home network. You verify that User1 was able to join devices to Azure AD in the past. You need to ensure that User1 can join the device to Azure AD. What should you do?

A.    Assign the User administrator role to User1.
B.    From the Device settings blade, modify the Maximum number of devices per user setting.
C.    Create a point-to-site VPN from the home network of User1 to Azure.
D.    From the Device settings blade, modify the Users may join devices to Azure AD setting.

Answer: B
Explanation:
The Maximum number of devices setting enables you to select the maximum number of devices that a user can have in Azure AD. If a user reaches this quota, they will not be able to add additional devices until one or more of the existing devices are removed.
Incorrect:
Not C: Azure AD Join enables users to join their devices to Active Directory from anywhere as long as they have connectivity with the Internet.
Not D: The Users may join devices to Azure AD setting enables you to select the users who can join devices to Azure AD. Options are All, Selected and None. The default is All.
https://docs.microsoft.com/en-us/azure/active-directory/devices/device-management-azure-portal
http://techgenix.com/pros-and-cons-azure-ad-join/

NEW QUESTION 306
……


Get the newest PassLeader AZ-104 VCE dumps here: https://www.passleader.com/az-104.html (310 Q&As Dumps –> 421 Q&As Dumps –> 436 Q&As Dumps)

And, DOWNLOAD the newest PassLeader AZ-104 PDF dumps from Cloud Storage for free: https://drive.google.com/open?id=1ms1PBdUaeBViEHIq26Ry2_bjnBBmO9PL