AZ104: Quiz 2

You have an Azure subscription named Subscription1 that contains a virtual network named VNet1. VNet1 is in a resource group named RG1.Subscription1 has a user named User1. User1 has the following roles:

✑ Reader

✑ Security Admin

✑ Security Reader

You need to ensure that User1 can assign the Reader role for VNet1 to other users. What should you do?

• Remove User1 from the Security Reader and Reader roles for Subscription1.

• Assign User1 the User Access Administrator role for VNet1.

• Assign User1 the Network Contributor role for VNet1.

• Assign User1 the Network Contributor role for RG1.

You have an Azure Active Directory (Azure AD) tenant named contosocloud.onmicrosoft.com. Your company has a public DNS zone for contoso.com.

You add contoso.com as a custom domain name to Azure AD. You need to ensure that Azure can verify the domain name.Which type of DNS record should you create?

• MX

• NSEC

• PTR

• RRSIG

You have an Azure subscription named Subscription1 that contains an Azure Log Analytics workspace named Workspace1. You need to view the error events from a table named Event. Which query should you run in Workspace1?

• Get-Event Event | where {$_.EventType == "error"}

• search in (Event) "error"

• select * from Event where EventType == "error"

• search in (Event) * | where EventType -eq "error"

You have an Azure subscription. Users access the resources in the subscription from either home or from customer sites. From home, users must establish a point-to-site VPN to access the Azure resources. The users on the customer sites access the Azure resources by using site-to-site VPNs. You have a line-of-business-app named App1 that runs on several Azure virtual machine. The virtual machines run Windows Server 2016. You need to ensure that the connections to App1 are spread across all the virtual machines.

What are two possible Azure services that you can use? Each correct answer presents a complete solution.

• An internal Load Balancer

• a public load balancer

• an Azure Content Delivery Network (CDN)

• Traffic Manager

• an Azure Application Gateway

You have an Azure subscription. You have 100 Azure virtual machines. You need to quickly identify underutilized virtual machines that can have their service tier changed to a less expensive offering. Which blade should you use

• Monitor

• Advisor

• Metrics

• Customer insights

You have an Azure subscription linked to an Azure Active Directory tenant. The tenant includes a user account named User1. You need to ensure that User1 can assign a policy to the tenant root management group. What should you do?

• Assign the Owner role for the Azure Subscription to User1, and then modify the default conditional access policies.

• Assign the Owner role for the Azure subscription to User1, and then instruct User1 to configure access management for Azure resources.

• Assign the Global administrator role to User1, and then instruct User1 to configure access management for Azure resources.

• Create a new management group and delegate User1 as the owner of the new management group.

You have an Azure subscription that contains a user named User1.You need to ensure that User1 can deploy virtual machines and manage virtual networks. The solution must use the principle of least privilege. Which role-based access control (RBAC) role should you assign to User1?

• Owner

• Virtual Machine Contributor

• Contributor

• Virtual Machine Administrator Login

You have an Azure DNS zone named adatum.com.You need to delegate a subdomain named research.adatum.com to a different DNS server in Azure.What should you do?

• Create an NS record named research in the adatum.com zone.

• Create a PTR record named research in the adatum.com zone.

• Modify the SOA record of adatum.com.

• Create an A record named *.research in the adatum.com zone.

You have a registered DNS domain named contoso.com.You create a public Azure DNS zone named contoso.com.You need to ensure that records created in the contoso.com zone are resolvable from the internet.What should you do?

• Create NS records in contoso.com.

• Modify the SOA record in the DNS domain registrar.

• Create the SOA record in contoso.com.

• Modify the NS records in the DNS domain registrar.

You have an Azure Storage account named storage1 that contains a blob container named container1.You need to prevent new content added to container1 from being modified for one year.What should you configure?

• the access tier

• an access policy

• the Access control (IAM) settings

• the access level