Easy & Quick Way To Pass Your Any Certification Exam.
Our Microsoft AZ-104 dumps are key to get success. More than 80000+ success stories.
Clients Passed Microsoft AZ-104 Exam Today
Passing score in Real Microsoft AZ-104 Exam
Questions were from our given AZ-104 dumps
Dumpsspot offers the best AZ-104 exam dumps that comes with 100% valid questions and answers. With the help of our trained team of professionals, the AZ-104 Dumps PDF carries the highest quality. Our course pack is affordable and guarantees a 98% to 100% passing rate for exam. Our AZ-104 test questions are specially designed for people who want to pass the exam in a very short time.
Most of our customers choose Dumpsspot's AZ-104 study guide that contains questions and answers that help them to pass the exam on the first try. Out of them, many have passed the exam with a passing rate of 98% to 100% by just training online.
Dumpsspot puts the best AZ-104 Dumps question and answers forward for the students who want to clear the exam in their first go. We provide a guarantee of 100% assurance. You will not have to worry about passing the exam because we are here to take care of that.
You need to recommend a solution to automate the configuration for the finance department users. The solution must meet the technical requirements.What should you include in the recommended?
A. Azure AP B2C
B. Azure AD Identity Protection
C. an Azure logic app and the Microsoft Identity Management (MIM) client
D. dynamic groups and conditional access policies
You discover that VM3 does NOT meet the technical requirements.You need to verify whether the issue relates to the NSGs.What should you use?
A. Diagram in VNet1
B. the security recommendations in Azure Advisor
C. Diagnostic settings in Azure Monitor
D. Diagnose and solve problems in Traffic Manager Profiles
E. IP flow verify in Azure Network Watcher
You need to meet the technical requirement for VM4.What should you create and configure?
A. an Azure Notification Hub
B. an Azure Event Hub
C. an Azure Logic App
D. an Azure services Bus
You need to ensure that VM1 can communicate with VM4. The solution must minimizeadministrative effort.What should you do?
A. Create 2 user-defined route from VNET1 to VNET3.
B. Assign VM4 an IP address of 10.0.1.5/24.
C. Establish peering between VNET1 and VNET3.
D. Create an NSG and associate the NSG to VMI and VM4.
You need to resolve the licensing issue before you attempt to assign the license again.What should you do?
A. From the Groups blade, invite the user accounts to a new group.
B. From the Profile blade, modify the usage location.
C. From the Directory role blade, modify the directory role.
You need to prepare the environment to meet the authentication requirements.Which two actions should you perform? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.
A. Allow inbound TCP port 8080 to the domain controllers in the Miami office.
B. Addhttp://autogon.microsoftazuread-sso.com to the intranet zone of each client computer in the Miami office.
C. Join the client computers in the Miami office to Azure AD.
D. Install the Active Directory Federation Services (AD FS) role on a domain controller in the Miami office.
E. Install Azure AD Connect on a server in the Miami office and enable Pass-through Authentication.
You need to resolve the Active Directory issue.What should you do?
A. From Active Directory Users and Computers, select the user accounts, and then modify the User Principal Name value.
B. Run idfix.exe, and then use the Edit action.
C. From Active Directory Domains and Trusts, modify the list of UPN suffixes.
D. From Azure AD Connect, modify the outbound synchronization rule.
You need to define a custom domain name for Azure AD to support the planned infrastructure.Which domain name should you use?
A. Join the client computers in the Miami office to Azure AD.
B. Add http://autologon.microsoftazuread-sso.com to the intranet zone of each client computer in the Miami office.
C. Allow inbound TCP port 8080 to the domain controllers in the Miami office.
D. Install Azure AD Connect on a server in the Miami office and enable Pass-through Authentication
E. Install the Active Directory Federation Services (AD FS) role on a domain controller in he Miami office.
Which blade should you instruct the finance department auditors to use?
A. invoices
B. partner information
C. cost analysis
D. External services
Which blade should you instruct the finance department auditors to use?
A. Partner information
B. Overview
C. Payment methods
D. Invoices
You need to define a custom domain name for Azure AD to support the planned infrastructure.Which domain name should you use?
A. ad.humongousinsurance.com
B. humongousinsurance.onmicrosoft.com
C. humongousinsurance.local
D. humongousinsurance.com
You need to prepare the environment to meet the authentication requirements.Which two actions should you perform? Each correct answer presents part of the solution.NOTE Each correct selection is worth one point.
A. Azure Active Directory (AD) Identity Protection and an Azure policy
B. a Recovery Services vault and a backup policy
C. an Azure Key Vault and an access policy
D. an Azure Storage account and an access policy
You need to move the blueprint files to Azure.What should you do?
A. Generate a shared access signature (SAS). Map a drive, and then copy the files by using File Explorer.
B. Use the Azure Import/Export service.
C. Generate an access key. Map a drive, and then copy the files by using File Explorer.
D. Use Azure Storage Explorer to copy the files.
You need to meet the user requirement for Admin1.What should you do?
A. From the Subscriptions blade, select the subscription, and then modify the Properties.
B. From the Subscriptions blade, select the subscription, and then modify the Access control (IAM) settings.
C. From the Azure Active Directory blade, modify the Properties.
D. From the Azure Active Directory blade, modify the Groups.
You need to recommend an identify solution that meets the technical requirements. What should you recommend?
A. federated single-on (SSO) and Active Directory Federation Services (AD FS)
B. password hash synchronization and single sign-on (SSO)
C. cloud-only user accounts
D. Pass-through Authentication and single sign-on (SSO)
You need to implement a backup solution for App1 after the application is moved.What should you create first?
A. a recovery plan
B. an Azure Backup Server
C. a backup policy
D. a Recovery Services vault
You are planning the move of App1 to Azure.You create a network security group (NSG).You need to recommend a solution to provide users with access to App1.What should you recommend?
A. Create an outgoing security rule for port 443 from the Internet. Associate the NSG to all the subnets.
B. Create an incoming security rule for port 443 from the Internet. Associate the NSG to all the subnets.
C. Create an incoming security rule for port 443 from the Internet. Associate the NSG to the subnet that contains the web servers.
D. Create an outgoing security rule for port 443 from the Internet. Associate the NSG to the subnet that contains the web servers.
You download an Azure Resource Manager template based on an existing virtual machine. The template will be used to deploy 100 virtual machines.You need to modify the template to reference an administrative password. You must prevent the password from being stored in plain text.What should you create to store the password?
A. Azure Active Directory (AD) Identity Protection and an Azure policy
B. a Recovery Services vault and a backup policy
C. an Azure Key Vault and an access policy
D. an Azure Storage account and an access policy
You have a Microsoft 365 tenant and an Azure Active Directory (Azure AD) tenant named contoso.com.You plan to grant three users named User1, User2, and User3 access to a temporary Microsoft SharePoint document library named Library1.You need to create groups for the users. The solution must ensure that the groups are deleted automatically after 180 days.Which two groups should you create? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point.
A. a Security group that uses the Assigned membership type
B. an Office 365 group that uses the Assigned membership type
C. an Office 365 group that uses the Dynamic User membership type
D. a Security group that uses the Dynamic User membership type
E. a Security group that uses the Dynamic Device membership type
You have an Azure virtual machine named VM1.Azure collects events from VM1.You are creating an alert rule in Azure Monitor to notify an administrator when an error is logged in theSystem event log of VM1.You need to specify which resource type to monitor.What should you specify?
A. metric alert
B. Azure Log Analytics workspace
C. virtual machine
D. virtual machine extension
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have a computer named Computer1 that has a point-to-site VPN connection to an Azure virtual network named VNet1. The point-to-site connection uses a self-signed certificate.From Azure, you download and install the VPN client configuration package on a computer named Computer2.You need to ensure that you can establish a point-to-site VPN connection to VNet1 from Computer2.Solution: You modify the Azure Active Directory (Azure AD) authentication policies.Does this meet this goal?
A. Yes
B. No
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have an Azure Active Directory (Azure AD) tenant named Adatum and an Azure Subscription named Subscription1. Adatum contains a group named Developers. Subscription1 contains a resource group named Dev.You need to provide the Developers group with the ability to create Azure logic apps in the Dev resource group.Solution: On Dev, you assign the Logic App Contributor role to the Developers group.Does this meet the goal?
A. Yes
B. No
You plan to use the Azure Import/Export service to copy files to a storage account.Which two files should you create before you prepare the drives for the import job? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.
A. an XML manifest file
B. a driveset CSV file
C. a dataset CSV file
D. a PowerShell PS1 file
E. a JSON configuration file
You have an Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com.The User administrator role is assigned to a user named Admin1.An external partner has a Microsoft account that uses the user1@outlook.com sign in.Admin1 attempts to invite the external partner to sign in to the Azure AD tenant and receives the following errormessage: “Unable to invite user user1@outlook.com – Generic authorization exception.”You need to ensure that Admin1 can invite the external partner to sign in to the Azure AD tenant.What should you do?
A. From the Roles and administrators blade, assign the Security administrator role to Admin1.
B. From the Organizational relationships blade, add an identity provider.
C. From the Custom domain names blade, add a custom domain.
D. From the Users blade, modify the External collaboration settings.
You have an Azure virtual machine named VM1.You use Azure Backup to create a backup of VM1 named Backup1.After creating Backup1, you perform the following changes to VM1:Modify the size of VM1.Copy a file named Budget.xls to a folder named Data.Reset the password for the built-in administrator account.Add a data disk to VM1.An administrator uses the Replace existing option to restore VM1 from Backup1.You need to ensure that all the changes to VM1 are restored.Which change should you perform again?
A. Modify the size of VM1.
B. Add a data disk.
C. Reset the password for the built-in administrator account.
D. Copy Budget.xls to Data.
You have an Azure Active Directory (Azure AD) tenant named contoso.com. Multi-factor authentication (MFA) is enabled for all users.You need to provide users with the ability to bypass MFA for 10 days on devices to which they have successfully signed in by using MFA.What should you do?
A. From the multi-factor authentication page, configure the users’ settings.
B. From Azure AD, create a conditional access policy.
C. From the multi-factor authentication page, configure the service settings.
D. From the MFA blade in Azure AD, configure the MFA Server settings.
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have an Azure subscription that contains the following resources:A virtual network that has a subnet named Subnet1Two network security groups (NSGs) named NSG-VM1 and NSG-Subnet1A virtual machine named VM1 that has the required Windows Server configurations to allow Remote Desktop connectionsNSG-Subnet1 has the default inbound security rules only.NSG-VM1 has the default inbound security rules and the following custom inbound security rule:Priority: 100Source: AnySource port range: *Destination: *Destination port range: 3389Protocol: UDPAction: AllowVM1 connects to Subnet1. NSG1-VM1 is associated to the network interface of VM1. NSG-Subnet1 is associated to Subnet1.You need to be able to establish Remote Desktop connections from the internet to VM1.Solution: You modify the custom rule for NSG-VM1 to use the internet as a source and TCP as a protocol.Does this meet the goal?
A. Yes
B. No