AZ-104 Online Practice Questions and Answers

Correct Answer:

Correct Answer:

Box 1: 10.244.0.0/16

The Pod CIDR.

Note: The --pod-cidr should be a large address space that isn't in use elsewhere in your network environment. This range includes any on-premises network ranges if you connect, or plan to connect, your Azure virtual networks using Express

Route or a Site-to-Site VPN connection.

This address range must be large enough to accommodate the number of nodes that you expect to scale up to. You can't change this address range once the cluster is deployed if you need more addresses for additional nodes.

Box 2: 10.0.0.0/16

The --service-cidr is used to assign internal services in the AKS cluster an IP address.

Reference:

https://docs.microsoft.com/en-us/azure/aks/configure-kubenet

Correct Answer:

Box 1: Yes

You can move storage

Box 2: No

You can't move to a new resource group a NIC that is attached to a virtual machine.

Box 3: No

Azure Public IPs are region specific and can't be moved from one region to another.

Reference:

https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/move-support-resources

https://docs.microsoft.com/en-us/azure/virtual-network/move-across-regions-publicip-powershell

Correct Answer:

Correct Answer: B

When moving a virtual network, you must also move its dependent resources. For example, you must move gateways with the virtual network. VM W10, which is in Vnet1, is not a dependent resource. Incorrect Answers:

A: Managed disks don't support move.

C: Virtual networks (classic) can't be moved.

D: Virtual machines with the managed disks cannot be moved.

References:

https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-move- resources#virtual-machines-limitations

Correct Answer: A

When you connect a Windows device with Azure AD using an Azure AD join, Azure AD adds the following security principles to the local administrators group on the device:

1.

The Azure AD global administrator role

2.

The Azure AD device administrator role

3.

The user performing the Azure AD join

In the Azure portal, you can manage the device administrator role on the Devices page. To open the Devices page:

1.

Sign in to your Azure portal as a global administrator or device administrator.

2.

On the left navbar, click Azure Active Directory.

3.

In the Manage section, click Devices.

4.

On the Devices page, click Device settings.

5.

To modify the device administrator role, configure Additional local administrators on Azure AD joined devices.

References: https://docs.microsoft.com/en-us/azure/active-directory/devices/assign-local-admin

Correct Answer: C

No one is given default access to the root management group. Azure AD Global Administrators are the only users that can elevate themselves to gain access. Once they have access to the root management group, the global administrators can assign any Azure role to other users to manage it. Reference: https://docs.microsoft.com/en-us/azure/governance/management-groups/overview#important-facts-about-the-root-management-group https://docs.microsoft.com/en-us/azure/governance/management-groups/overview

Correct Answer: B

https://learn.microsoft.com/en-us/azure/virtual-network/ip-services/public-ip-addresses#at-a-glance Azure Firewall

-Dynamic IPv4: No

-Static IPv4: Yes

-Dynamic IPv6: No

-Static IPv6: No

https://learn.microsoft.com/en-us/azure/virtual-network/ip-services/configure-public-ip-firewall Azure Firewall is a cloud-based network security service that protects your Azure Virtual Network resources. Azure Firewall requires at least one public static IP address to be configured. This IP or set of IPs are used as the external connection point to the firewall. Azure Firewall supports standard SKU public IP addresses. Basic SKU public IP address and public IP prefixes aren't supported.

Correct Answer: A

Through Network Insights, you can view topological maps and health dashboards containing important ExpressRoute information without needing to complete any extra setup.

Reference: https://learn.microsoft.com/en-us/azure/expressroute/expressroute-network-insights

Correct Answer: A