Exam AZ-104: Microsoft Azure Administrator

Exam AZ-104: Microsoft Azure Administrator What Steps are involved in shipping data to Azure Correct Answer: 1 - Prepare Hard drives 2 - Create import Job 3 - Ship drives to Az Dc 4 - Update Tracking 5 - Verify ...

Exam AZ-104: Microsoft Azure Administrator What Steps are involved in shipping data to Azure Correct Answer: 1 - Prepare Hard drives 2 - Create import Job 3 - Ship drives to Az Dc 4 - Update Tracking 5 - Verify the data upload. Is IPV6 to IPV6 communication is supported without load balancer? True or False Correct Answer: True, to have ipv6 communitication between vnets you need and internal load balancer What effect is evaluated first in Azure Policy A- Append B- Disabled C- Deny D - Audit Correct Answer: B - Disabled How do you enable auto scale on basic web app Correct Answer: Change to standard Enable autscale create Scale rule When using az ad user create, what parameters are needed Correct Answer: UPN, DisplayName and Password What is the restore period of an Azure AD user? A- 30 B- 60 c - 90 d - Can't restore Correct Answer: A - 30 days What are actions and not actions Correct Answer: actions = allowable permissions on Role definition Not acctions = Denied permissions How are NotActions used in a role definition? A - NotActions are subtracted from the Actions to define the list of permissible operations. B- NotActions are consulted after Actions to deny access to a specific operation. C - NotActions allow you to specify a single operation that is not allowed. Correct Answer: A - NotActions are subtracted from the Actions to define the list of permissible operations. What tool would you use to monitor Subnets? Correct Answer: Network security group (NSG) flow logging What Role is needed to manage access to Azure Resources? A - Co-administrator B - Owner C - User Access Administrator D - Contributor Correct Answer: User Access Administrator Pubilc IP assigned to the Nic will take precedence over one on the Load balancer? True or False Correct Answer: True How many SNAT ports allocated to a Load public IP address Correct Answer: 1024 How is outbound Public traffic used on basic load balancers? Correct Answer: All IPs took into consideration but one used. standard all are used at the same time What steps are involved in creating an Azure Bastion? Correct Answer: 1) Create Subnet named Azure bastion subnet /27? 2)Create Bastion 3) Connect to VM1 using azure portal In Kubernetes can a POD share Managed Disks? Yes or No Correct Answer: Yes Azure Files Main steps involved in Registering DNS with Azure Correct Answer: Purchase from Registrar Configure Forward Lookup zone Point NS records to Azure DNS 5 steps to create Azure File Share in powershell Correct Answer: New-StorageAccount - Create storage account Get-StorageAccountKeys - grab keys New-AzureStorageContext - login keys etc New-AzureStorageShare - create share CMDKEY - stores access keys New-PSDrive - maps drive When creating an Azure Bastion, What are the 3 main requirements? Correct Answer: Subnet must be called AzureBastionSubnet and created first CIDR min /27 or larger Standard SKU static IP What are the minimum permissions for an Azure Bastion? Correct Answer: Reader role on the VM Reader role on the NIC with private IP of the VM Reader role on Azure Bastion resource What can Azure AD role, User Administrator do? Correct Answer: Manage all aspects of users and groups, including support tickets Monitoring service tickers resetting passwords What can Azure AD role, Billing Administrator do? Correct Answer: make purchases manage subscriptions support ticket monitor service health. What command would you use to list permissions of a role? Correct Answer: az role definition list --name Get-AzRoleDefinition A Basic IP SKU can support availability zones True or False Correct Answer: False Name several services that don't work over Global vent peering Correct Answer: VM behind Load balancers VMSS behind basic load balancers Redis cache Application gateway