FREE Microsoft Azure Administrator AZ-104 MCQ Questions and Answers

Question 1

Azure Active Directory (Azure AD) and Microsoft 365 tenants for your business go by contoso.com.
The business uses multiple Azure Files shares.
Each share of the corporation is allocated to a distinct division.
All users have data in the department property in Azure AD.
The departmental file sharing must be accessible to the users.
Which two categories of groups ought you employ?

Accepted Answer

a security group that uses the dynamic membership type

Answer

a Microsoft 365 group that uses the assigned membership type

Answer

a distribution group that uses the dynamic membership type

Answer

a security group that uses the assigned membership type

Question 2

You have a tenant called contoso.com in your production Azure Active Directory (Azure AD). You deploy a development Azure Active Directory (AD) tenant and provide the development tenant with several unique administrative roles. The roles must be copied to the production tenant. What ought you start with?

Accepted Answer

From the development tenant, export the custom roles to JSON.

Answer

From the production tenant, create an administrative unit.

Answer

From the production tenant, create a new custom role.

Answer

From the development tenant, perform a backup.

Question 3

Several Azure runbooks are included with your Azure subscription. The runbooks provide reports each night while they run. Authentication credentials are kept in the runbooks as variables. You must swap out the current authentication method with a more secure one. What ought you use?

Accepted Answer

Azure Key Vault

Answer

Azure Active Directory (Azure AD) Identity Protection

Answer

An administrative unit

Answer

An access policy

Question 4

You have a virtual machine called VM1 in your Azure subscription. Volume encryption is necessary for VM1's operating system and data drives. You create vault1 as the name of an Azure key vault. You must set up vault1 for volume encryption to enable Azure Disk Encryption. Which setting for vault1 should you change?

Accepted Answer

Access policies

Answer

Keys

Answer

Security

Answer

Secrets

Question 5

You have a tenant called contoso.com in Azure Active Directory (Azure AD). It would help if you ensured that User1 has access to the tenant's set of settings. It must be impossible for User1 to alter any settings. Which role ought should you provide User1?

Accepted Answer

Global reader

Answer

Directory reader

Answer

Security reader

Answer

Reports reader

Question 6

You have VM1, a virtual computer in Azure. The identical parameters as VM1 must be used to generate five more virtual machines. The answer must guarantee that VM1 is always accessible. You open the blade for VM1 from the Azure portal. What ought you to do now?

Accepted Answer

Select Export template

Answer

Select Capture

Answer

Select Availability and scaling

Answer

Select Redeploy + reapply

Question 7

After moving the application to Azure, you must make sure to establish the backup solution. For this need, which of the following would you develop first?

Accepted Answer

Create a recovery services vault

Answer

Create an Azure Backup Server

Answer

Create a recovery plan

Answer

Create a backup policy