Microsoft AZ-104 exam interactive answer (P. 55)

Question 541

You discover that VM3 does NOT meet the technical requirements.
You need to verify whether the issue relates to the NSGs.
What should you use?

Scenario: Contoso must meet technical requirements including:
Ensure that VM3 can establish outbound connections over TCP port 8080 to the applications servers in the Montreal office.
IP flow verify checks if a packet is allowed or denied to or from a virtual machine. The information consists of direction, protocol, local IP, remote IP, local port, and remote port. If the packet is denied by a security group, the name of the rule that denied the packet is returned. While any source or destination IP can be chosen,
IP flow verify helps administrators quickly diagnose connectivity issues from or to the internet and from or to the on-premises environment.
Reference:
https://docs.microsoft.com/en-us/azure/network-watcher/network-watcher-ip-flow-verify-overview

Question 542

You need to ensure that VM1 can communicate with VM4. The solution must minimize the administrative effort.
What should you do?

Reference:
https://docs.microsoft.com/en-us/azure/vpn-gateway/tutorial-site-to-site-portal

Question 543

HOTSPOT -
You need to meet the connection requirements for the New York office.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Image AZ-104_543R.png related to the Microsoft AZ-104 Exam

Box 1: Create a virtual network gateway and a local network gateway.
Azure VPN gateway. The VPN gateway service enables you to connect the VNet to the on-premises network through a VPN appliance. For more information, see
Connect an on-premises network to a Microsoft Azure virtual network. The VPN gateway includes the following elements:
- Virtual network gateway. A resource that provides a virtual VPN appliance for the VNet. It is responsible for routing traffic from the on-premises network to the
VNet.
- Local network gateway. An abstraction of the on-premises VPN appliance. Network traffic from the cloud application to the on-premises network is routed through this gateway.
- Connection. The connection has properties that specify the connection type (IPSec) and the key shared with the on-premises VPN appliance to encrypt traffic.
- Gateway subnet. The virtual network gateway is held in its own subnet, which is subject to various requirements, described in the Recommendations section below.
Box 2: Configure a site-to-site VPN connection
On premises create a site-to-site connection for the virtual network gateway and the local network gateway.

AZ-104_543E.jpg related to the Microsoft AZ-104 Exam

Scenario: Connect the New York office to VNet1 over the Internet by using an encrypted connection.
Incorrect Answers:
Azure ExpressRoute: Established between your network and Azure, through an ExpressRoute partner. This connection is private. Traffic does not go over the internet.
Reference:
https://docs.microsoft.com/en-us/azure/architecture/reference-architectures/hybrid-networking/vpn

Question 544

HOTSPOT -
You need to recommend a solution for App1. The solution must meet the technical requirements.
What should you include in the recommendation? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Image AZ-104_544R.jpg related to the Microsoft AZ-104 Exam

This reference architecture shows how to deploy VMs and a virtual network configured for an N-tier application, using SQL Server on Windows for the data tier.

AZ-104_544E.png related to the Microsoft AZ-104 Exam

Scenario: You have a public-facing application named App1. App1 is comprised of the following three tiers:
- A SQL database
- A web front end
- A processing middle tier
Each tier is comprised of five virtual machines. Users access the web front end by using HTTPS only.
Technical requirements include:
- Move all the virtual machines for App1 to Azure.
- Minimize the number of open ports between the App1 tiers.
Reference:
https://docs.microsoft.com/en-us/azure/architecture/reference-architectures/n-tier/n-tier-sql-server

Question 545

You are planning the move of App1 to Azure.
You create a network security group (NSG).
You need to recommend a solution to provide users with access to App1.
What should you recommend?

Incoming and the web server subnet only, as users access the web front end by using HTTPS only.
Note Scenario: You have a public-facing application named App1. App1 is comprised of the following three tiers:
- A SQL database
- A web front end
- A processing middle tier
Each tier is comprised of five virtual machines. Users access the web front end by using HTTPS only.

Question 546

HOTSPOT -
You implement the planned changes for NSG1 and NSG2.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

Image AZ-104_546R.jpg related to the Microsoft AZ-104 Exam

Box 1: No -
NSG2 blocks RDP to VM2 -
Box 2: Yes -
ICMP is not blocked -
Box 3: No -
NSG2 blocks RDP from VM2 -
Reference:
https://docs.microsoft.com/en-us/azure/virtual-network/network-security-group-how-it-works

Question 547

You need to add VM1 and VM2 to the backend pool of LB1.
What should you do first?

VM1 is already in VNET1/Subnet1.
VM2 is on VNET1/Subnet2, and must be moved to VNET1/Subnet1.
Note:
Create an internal Basic Azure Load Balancer named LB1 and connect the load balancer to VNET1/Subnet1

AZ-104_547E.png related to the Microsoft AZ-104 Exam

Reference:
https://docs.microsoft.com/en-us/azure/load-balancer/quickstart-load-balancer-standard-internal-portal

Question 548

You need to ensure that VM1 can communicate with VM4. The solution must minimize administrative effort.
What should you do?

Question 549

HOTSPOT -
You need to implement Role1.
Which command should you run before you create Role1? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Image AZ-104_549R.png related to the Microsoft AZ-104 Exam

Win IT Exam with Last Dumps 2024

Microsoft AZ-104 Exam

Page 55/55

Viewing Questions 541 549 out of 549 Questions

You discover that VM3 does NOT meet the technical requirements.
You need to verify whether the issue relates to the NSGs.
What should you use?

You need to ensure that VM1 can communicate with VM4. The solution must minimize the administrative effort.
What should you do?

HOTSPOT -
You need to meet the connection requirements for the New York office.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

HOTSPOT -
You need to recommend a solution for App1. The solution must meet the technical requirements.
What should you include in the recommendation? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

You are planning the move of App1 to Azure.
You create a network security group (NSG).
You need to recommend a solution to provide users with access to App1.
What should you recommend?

HOTSPOT -
You implement the planned changes for NSG1 and NSG2.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

You need to add VM1 and VM2 to the backend pool of LB1.
What should you do first?

You need to ensure that VM1 can communicate with VM4. The solution must minimize administrative effort.
What should you do?

HOTSPOT -
You need to implement Role1.
Which command should you run before you create Role1? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Win IT Exam with Last Dumps 2024

Microsoft AZ-104 Exam

Page 55/55

Viewing Questions 541 549 out of 549 Questions

You discover that VM3 does NOT meet the technical requirements.You need to verify whether the issue relates to the NSGs.What should you use?

You need to ensure that VM1 can communicate with VM4. The solution must minimize the administrative effort.What should you do?

HOTSPOT -You need to meet the connection requirements for the New York office.What should you do? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.Hot Area:

HOTSPOT -You need to recommend a solution for App1. The solution must meet the technical requirements.What should you include in the recommendation? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.Hot Area:

You are planning the move of App1 to Azure.You create a network security group (NSG).You need to recommend a solution to provide users with access to App1.What should you recommend?

HOTSPOT -You implement the planned changes for NSG1 and NSG2.For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Each correct selection is worth one point.Hot Area:

You need to add VM1 and VM2 to the backend pool of LB1.What should you do first?

You need to ensure that VM1 can communicate with VM4. The solution must minimize administrative effort.What should you do?

HOTSPOT -You need to implement Role1.Which command should you run before you create Role1? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.Hot Area:

You discover that VM3 does NOT meet the technical requirements.
You need to verify whether the issue relates to the NSGs.
What should you use?

You need to ensure that VM1 can communicate with VM4. The solution must minimize the administrative effort.
What should you do?

HOTSPOT -
You need to meet the connection requirements for the New York office.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

HOTSPOT -
You need to recommend a solution for App1. The solution must meet the technical requirements.
What should you include in the recommendation? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

You are planning the move of App1 to Azure.
You create a network security group (NSG).
You need to recommend a solution to provide users with access to App1.
What should you recommend?

HOTSPOT -
You implement the planned changes for NSG1 and NSG2.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

You need to add VM1 and VM2 to the backend pool of LB1.
What should you do first?

You need to ensure that VM1 can communicate with VM4. The solution must minimize administrative effort.
What should you do?

HOTSPOT -
You need to implement Role1.
Which command should you run before you create Role1? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area: