Microsoft AZ-104 exam revealed answer (P. 42)

Question 411

You have five Azure virtual machines that run Windows Server 2016. The virtual machines are configured as web servers.
You have an Azure load balancer named LB1 that provides load balancing services for the virtual machines.
You need to ensure that visitors are serviced by the same web server for each request.
What should you configure?

A. Session persistence to Client IP and protocol

B. Protocol to UDP

C. Session persistence to None

D. Floating IP (direct server return) to Enabled

Reference:
https://docs.microsoft.com/en-us/azure/load-balancer/load-balancer-distribution-mode?tabs=azure-portal

Question 412

You have an Azure subscription that uses the public IP addresses shown in the following table.

You need to create a public Azure Standard Load Balancer.
Which public IP addresses can you use?

A. IP1, IP2, and IP3

B. IP2 only

C. IP3 only

D. IP1 and IP3 only

Matching SKUs are required for load balancer and public IP resources. You can't have a mixture of Basic SKU resources and standard SKU resources.
Reference:
https://docs.microsoft.com/en-us/azure/virtual-network/ip-services/public-ip-addresses

Question 413

You have an Azure subscription.
You are deploying an Azure Kubernetes Service (AKS) cluster that will contain multiple pods. The pods will use kubernet networking.
You need to restrict network traffic between the pods.
What should you configure on the AKS cluster?

A. the Azure network policy

B. the Calico network policy

C. pod security policies

D. an application security group

Reference:
https://docs.microsoft.com/en-us/azure/aks/use-network-policies

Question 414

HOTSPOT -
You have an Azure subscription that contains a virtual network named VNet1. VNet1 uses an IP address space of 10.0.0.0/16 and contains the VPN Gateway and subnets in the following table:

Subnet1 contains a virtual appliance named VM1 that operates as a router.
You create a routing table named RT1.
You need to route all inbound traffic from the VPN gateway to VNet1 through VM1.
How should you configure RT1? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Image AZ-104_414R.jpg related to the Microsoft AZ-104 Exam

Question 415

You have five Azure virtual machines that run Windows Server 2016. The virtual machines are configured as web servers.
You have an Azure load balancer named LB1 that provides load balancing services for the virtual machines.
You need to ensure that visitors are serviced by the same web server for each request.
What should you configure?

A. Floating IP (direct server return) to Enabled

B. Floating IP (direct server return) to Disabled

C. a health probe

D. Session persistence to Client IP and Protocol

With Sticky Sessions when a client starts a session on one of your web servers, session stays on that specific server. To configure An Azure Load-Balancer For
Sticky Sessions set Session persistence to Client IP.
On the following image you can see sticky session configuration:

AZ-104_415E.jpg related to the Microsoft AZ-104 Exam

Note:
There are several versions of this question in the exam. The question can have other incorrect answer options, including the following:
1. Idle Time-out (minutes) to 20
2. Protocol to UDP
Reference:
https://cloudopszone.com/configure-azure-load-balancer-for-sticky-sessions/

Question 416

HOTSPOT -
You have an Azure subscription that contains the virtual machines shown in the following table:

VM1 and VM2 use public IP addresses. From Windows Server 2019 on VM1 and VM2, you allow inbound Remote Desktop connections.
Subnet1 and Subnet2 are in a virtual network named VNET1.
The subscription contains two network security groups (NSGs) named NSG1 and NSG2. NSG1 uses only the default rules.
NSG2 uses the default rules and the following custom incoming rule:
- Priority: 100
- Name: Rule1
- Port: 3389
- Protocol: TCP
- Source: Any
- Destination: Any
- Action: Allow
NSG1 is associated to Subnet1. NSG2 is associated to the network interface of VM2.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

Image AZ-104_416R.png related to the Microsoft AZ-104 Exam

Question 417

You have an on-premises network that contains a database server named dbserver1.
You have an Azure subscription.
You plan to deploy three Azure virtual machines. Each virtual machine will be deployed to a separate availability zone.
You need to configure an Azure VPN gateway for a site-to-site VPN. The solution must ensure that the virtual machines can connect to dbserver1.
Which type of public IP address SKU and assignment should you use for the gateway?

A. a basic SKU and a static IP address assignment

B. a standard SKU and a static IP address assignment

C. a basic SKU and a dynamic IP address assignment

VPN gateway supports only Dynamic.
Note: VPN gateway requires a public IP address for its configuration. A public IP address is used as the external connection point of the VPN.
Specify in the values for Public IP address. These settings specify the public IP address object that gets associated to the VPN gateway. The public IP address is dynamically assigned to this object when the VPN gateway is created. The only time the Public IP address changes is when the gateway is deleted and re- created.
Reference:
https://docs.microsoft.com/en-us/azure/vpn-gateway/tutorial-site-to-site-portal

Question 418

HOTSPOT -
You have the Azure virtual machines shown in the following table.

VNET1, VNET2, and VNET3 are peered.

VNET1 and VNET2 are linked to an Azure private DNS zone named contoso.com that contains the records shown in the following table.

The virtual networks are configured to use the DNS servers shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

Image AZ-104_418R.jpg related to the Microsoft AZ-104 Exam

Box 1: Yes -
VM1 is in VNET1. In VNET1 Server1 resolves to 131.107.3.3

AZ-104_418E.jpg related to the Microsoft AZ-104 Exam

Box 2: No -
VM2 is in VNET2. VNET2 uses custom DNS server 192.168.05
Box 3: Yes

Question 419

HOTSPOT -
You have two Azure virtual machines as shown in the following table.

You create the Azure DNS zones shown in the following table.

You perform the following actions:
- ׀¢׀¾ fabrikam.com, you add a virtual network link to vnet1 and enable auto registration.
- For contoso.com, you assign vm1 and vm2 the Owner role.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

Image AZ-104_419R.jpg related to the Microsoft AZ-104 Exam

Box 1: Yes -
The DNS zone uses the Public IP address of vm1.
Box 2: Yes -
Fabrikam.com is a Private DNS zone. The private IP address is used.
Note: The Azure DNS private zones auto registration feature manages DNS records for virtual machines deployed in a virtual network. When you link a virtual network with a private DNS zone with this setting enabled, a DNS record gets created for each virtual machine deployed in the virtual network.
For each virtual machine, an A record and a PTR record are created. DNS records for newly deployed virtual machines are also automatically created in the linked private DNS zone.
Note: If you use Azure Provided DNS then appropriate DNS suffix will be automatically applied to your virtual machines. For all other options you must either use
Fully Qualified Domain Names (FQDN) or manually apply appropriate DNS suffix to your virtual machines.
Box 3: Yes -
Reference:
https://docs.microsoft.com/en-us/azure/dns/dns-zones-records
https://docs.microsoft.com/en-us/azure/virtual-network/virtual-networks-name-resolution-for-vms-and-role-instances

Question 420

You have an on-premises datacenter and an Azure subscription.
You plan to connect the datacenter to Azure by using ExpressRoute.
You need to deploy an ExpressRoute gateway. The solution must meet the following requirements:
- Support up to 10 Gbps of traffic.
- Support availability zones.
- Support FastPath.
- Minimize costs.
Which SKU should you deploy?

A. ERGw1AZ

B. ERGw2

C. ErGw3

D. ErGw3AZ

ErGw3Az supports FastPath.
The following table shows the features supported across each gateway type.

AZ-104_420E.png related to the Microsoft AZ-104 Exam

Note: ExpressRoute virtual network gateways can use the following SKUs:
Standard -
HighPerformance -
UltraPerformance -
ErGw1Az -
ErGw2Az -
ErGw3Az -
Reference:
https://docs.microsoft.com/en-us/azure/expressroute/expressroute-about-virtual-network-gateways

Win IT Exam with Last Dumps 2024

Microsoft AZ-104 Exam

Page 42/55

Viewing Questions 411 420 out of 549 Questions

A. Session persistence to Client IP and protocol

B. Protocol to UDP

C. Session persistence to None

D. Floating IP (direct server return) to Enabled

You have an Azure subscription that uses the public IP addresses shown in the following table.

You need to create a public Azure Standard Load Balancer.
Which public IP addresses can you use?

A. IP1, IP2, and IP3

B. IP2 only

C. IP3 only

D. IP1 and IP3 only

You have an Azure subscription.
You are deploying an Azure Kubernetes Service (AKS) cluster that will contain multiple pods. The pods will use kubernet networking.
You need to restrict network traffic between the pods.
What should you configure on the AKS cluster?

A. the Azure network policy

B. the Calico network policy

C. pod security policies

D. an application security group

A. Floating IP (direct server return) to Enabled

B. Floating IP (direct server return) to Disabled

C. a health probe

D. Session persistence to Client IP and Protocol

A. a basic SKU and a static IP address assignment

B. a standard SKU and a static IP address assignment

C. a basic SKU and a dynamic IP address assignment

A. ERGw1AZ

B. ERGw2

C. ErGw3

D. ErGw3AZ

Win IT Exam with Last Dumps 2024

Microsoft AZ-104 Exam

Page 42/55

Viewing Questions 411 420 out of 549 Questions

A. Session persistence to Client IP and protocol

B. Protocol to UDP

C. Session persistence to None

D. Floating IP (direct server return) to Enabled

You have an Azure subscription that uses the public IP addresses shown in the following table.You need to create a public Azure Standard Load Balancer.Which public IP addresses can you use?

A. IP1, IP2, and IP3

B. IP2 only

C. IP3 only

D. IP1 and IP3 only

You have an Azure subscription.You are deploying an Azure Kubernetes Service (AKS) cluster that will contain multiple pods. The pods will use kubernet networking.You need to restrict network traffic between the pods.What should you configure on the AKS cluster?

A. the Azure network policy

B. the Calico network policy

C. pod security policies

D. an application security group

A. Floating IP (direct server return) to Enabled

B. Floating IP (direct server return) to Disabled

C. a health probe

D. Session persistence to Client IP and Protocol

A. a basic SKU and a static IP address assignment

B. a standard SKU and a static IP address assignment

C. a basic SKU and a dynamic IP address assignment

A. ERGw1AZ

B. ERGw2

C. ErGw3

D. ErGw3AZ

You have an Azure subscription that uses the public IP addresses shown in the following table.

You need to create a public Azure Standard Load Balancer.
Which public IP addresses can you use?

You have an Azure subscription.
You are deploying an Azure Kubernetes Service (AKS) cluster that will contain multiple pods. The pods will use kubernet networking.
You need to restrict network traffic between the pods.
What should you configure on the AKS cluster?