View Full Microsoft AZ-104 Exam Dumps and Practice Test Dumps.

 

Question 41

Which Azure service provides a managed platform for hosting web applications without requiring administrators to manage the underlying operating system?

1. Azure Storage
2. Azure App Service
3. Azure Virtual Network
4. Azure Virtual Machines

Correct Answer: 2

Explanation

Azure App Service is a fully managed platform designed for hosting web applications, APIs, and other supported application workloads. It handles much of the underlying infrastructure management, allowing administrators to focus on application configuration and deployment. Azure Virtual Machines require more operating system and infrastructure management. Azure Virtual Network provides networking capabilities, while Azure Storage is designed for storing data. Therefore, Azure App Service is the correct choice when an organization wants to host web applications without managing the underlying operating system.

Question 42

Which Azure feature allows administrators to automatically increase or decrease App Service instances based on demand?

1. Azure Policy
2. Resource Locks
3. Azure DNS
4. App Service Scale

Correct Answer: 4

Explanation

App Service scaling allows administrators to increase or decrease the number of instances running an application based on workload requirements. Scaling can help applications handle increased traffic while avoiding unnecessary resource usage during periods of lower demand. Azure App Service supports different scaling approaches depending on the pricing tier and configuration. Azure DNS handles name resolution, Azure Policy provides governance, and Resource Locks protect resources from accidental changes. Therefore, App Service Scale is the correct choice for adjusting application instances according to demand.

Question 43

Which Azure service allows applications to securely store passwords, certificates, keys, and other secrets?

1. Azure Monitor
2. Azure Bastion
3. Azure Key Vault
4. Azure Storage

Correct Answer: 3

Explanation

Azure Key Vault is a managed service designed to securely store and manage secrets, cryptographic keys, certificates, and other sensitive information. Applications and administrators can retrieve protected values from Key Vault instead of storing passwords or keys directly in application code or configuration files. This improves security and simplifies secret management. Azure Storage provides data storage, Azure Monitor provides monitoring capabilities, and Azure Bastion provides secure VM access. Therefore, Azure Key Vault is the correct service for securely managing sensitive information.

Question 44

Which Azure service provides centralized management of secrets and supports access through Microsoft Entra identities?

1. Azure Key Vault
2. Azure Advisor
3. Azure Load Balancer
4. Azure DNS

Correct Answer: 1

Explanation

Azure Key Vault supports secure storage and management of sensitive information such as passwords, secrets, certificates, and cryptographic keys. Access to Key Vault resources can be controlled through Microsoft Entra ID and Azure role-based access control. This allows organizations to grant applications or administrators only the permissions they require. Azure Load Balancer manages network traffic, Azure DNS provides DNS services, and Azure Advisor provides recommendations. Therefore, Azure Key Vault is the appropriate service for centralized and secure secret management.

Question 45

Which Azure service provides a globally distributed entry point for web applications with application acceleration capabilities?

1. Azure VPN Gateway
2. Azure Front Door
3. Azure Backup
4. Azure Files

Correct Answer: 2

Explanation

Azure Front Door provides a global entry point for web applications and can improve application availability, performance, and security. It uses Microsoft’s global edge network to route client requests toward appropriate backend services. Front Door supports capabilities such as global routing, caching, and web application security features depending on configuration. Azure Files provides file shares, Azure Backup protects workloads, and Azure VPN Gateway provides secure network connectivity. Therefore, Azure Front Door is the correct choice for globally distributed web application traffic management.

Question 46

Which Azure service distributes DNS-based application traffic across multiple Azure regions?

1. Azure Bastion
2. Azure Files
3. Azure Key Vault
4. Azure Traffic Manager

Correct Answer: 4

Explanation

Azure Traffic Manager is a DNS-based traffic routing service that can direct users to application endpoints based on configured routing methods. It can help distribute traffic across endpoints in different Azure regions and improve application availability. Traffic Manager operates at the DNS level rather than directly proxying application traffic. Azure Bastion provides secure VM access, Key Vault manages secrets, and Azure Files provides file storage. Therefore, Azure Traffic Manager is the correct service for DNS-based traffic distribution across regions.

Question 47

Which Azure service provides centralized storage for application telemetry, logs, and performance data?

1. Azure Bastion
2. Azure Files
3. Log Analytics Workspace
4. Azure DNS

Correct Answer: 3

Explanation

A Log Analytics workspace provides a centralized location for collecting, storing, and analyzing log data from Azure resources, applications, and other supported sources. Administrators can use queries to investigate events, troubleshoot issues, and analyze resource behavior. Log Analytics is closely integrated with Azure Monitor and supports advanced log analysis through Kusto Query Language. Azure Files provides file shares, Azure DNS manages DNS records, and Azure Bastion provides secure VM access. Therefore, Log Analytics Workspace is the correct choice for centralized log collection and analysis.

Question 48

Which Azure feature allows administrators to execute Azure CLI commands through a browser without installing the CLI locally?

1. Azure Cloud Shell
2. Azure Advisor
3. Azure Policy
4. Azure Resource Group

Correct Answer: 1

Explanation

Azure Cloud Shell provides a browser-accessible command-line environment that includes Azure CLI and Azure PowerShell. Administrators can use Cloud Shell directly from the Azure portal to create, manage, and configure Azure resources. This eliminates the need to install command-line tools on a local computer. Azure Resource Groups organize resources, Azure Policy provides governance, and Azure Advisor offers recommendations. Therefore, Azure Cloud Shell is the correct option for executing Azure CLI commands through a browser.

Question 49

Which Azure CLI command is commonly used to create a new resource group?

1. az storage list
2. az network delete
3. az vm start
4. az group create

Correct Answer: 4

Explanation

The az group create command is used with Azure CLI to create a new Azure resource group. A resource group provides a logical container for managing related Azure resources. The command normally requires a resource group name and an Azure region. Commands such as az vm start are used for virtual machine operations, while other commands manage storage or networking resources. Therefore, az group create is the correct command when an administrator needs to create a new resource group using Azure CLI.

Question 50

Which Azure PowerShell command is commonly used to create a new resource group?

1. Start-AzVM
2. New-AzResourceGroup
3. Get-AzStorageAccount
4. Remove-AzNetworkInterface

Correct Answer: 2

Explanation

The New-AzResourceGroup cmdlet is used in Azure PowerShell to create a new Azure resource group. Administrators can specify the resource group name and Azure region when creating it. Resource groups provide logical containers for related Azure resources and simplify management, permissions, deployment, and lifecycle operations. Other Azure PowerShell cmdlets perform different tasks, such as starting virtual machines or retrieving storage accounts. Therefore, New-AzResourceGroup is the correct cmdlet for creating a resource group.

Question 51

Which Azure service provides centralized management for Azure resources through a graphical web interface?

1. Azure Storage
2. Azure DNS
3. Azure Portal
4. Azure Bastion

Correct Answer: 3

Explanation

The Azure portal is a web-based graphical interface that allows administrators to create, configure, monitor, and manage Azure resources. It provides access to services such as virtual machines, storage accounts, virtual networks, databases, and monitoring tools. Administrators can also manage subscriptions, resource groups, policies, and access permissions through the portal. Azure Bastion provides secure VM connectivity, Azure DNS handles domain name resolution, and Azure Storage provides data storage. Therefore, Azure Portal is the correct choice for graphical Azure resource management.

Question 52

Which Azure service can automatically deploy applications from supported source repositories and development pipelines?

1. Azure Network Watcher
2. Azure Resource Lock
3. Azure DNS
4. Azure App Service

Correct Answer: 4

Explanation

Azure App Service supports continuous deployment and integration with various source control systems and development tools. Applications can be deployed from supported repositories and automated development pipelines, helping organizations streamline application delivery. App Service manages much of the underlying infrastructure, allowing teams to focus on application deployment and configuration. Azure DNS provides DNS management, Network Watcher handles network diagnostics, and Resource Locks protect resources. Therefore, Azure App Service is the correct choice for automated application deployment through supported development workflows.

Question 53

Which Azure service provides a managed container registry for storing and managing container images?

1. Azure Container Registry
2. Azure Monitor
3. Azure Files
4. Azure SQL Database

Correct Answer: 1

Explanation

Azure Container Registry, or ACR, is a managed private registry service for storing and managing container images and related artifacts. It integrates with Azure services and development workflows, allowing organizations to securely store container images before deploying them to supported container platforms. Azure Files provides managed file shares, Azure SQL Database provides relational database services, and Azure Monitor provides monitoring capabilities. Therefore, Azure Container Registry is the correct service for storing and managing private container images in Azure.

Question 54

Which Azure service provides a serverless platform for running event-driven code without managing virtual machines?

1. Azure DNS
2. Azure Functions
3. Azure Virtual Machines
4. Azure Files

Correct Answer: 2

Explanation

Azure Functions is a serverless compute service that allows developers and administrators to run code in response to events without managing traditional virtual machines. Functions can be triggered by timers, HTTP requests, queues, messages, and other supported events. Azure automatically manages much of the underlying infrastructure and can scale function executions based on demand. Virtual Machines require infrastructure management, Azure Files provides file storage, and Azure DNS handles DNS services. Therefore, Azure Functions is the correct choice for serverless event-driven computing.

Question 55

Which Azure service can provide centralized monitoring and diagnostics for virtual machines?

1. Azure Key Vault
2. Azure Resource Lock
3. Azure Monitor
4. Azure DNS

Correct Answer: 3

Explanation

Azure Monitor provides monitoring and diagnostic capabilities for Azure virtual machines and other resources. Administrators can collect metrics and logs, create alerts, analyze performance, and investigate operational issues. VM monitoring can help identify problems involving CPU usage, memory, network activity, applications, and other resource conditions. Azure DNS manages DNS records, Key Vault protects secrets, and Resource Locks prevent unwanted changes. Therefore, Azure Monitor is the correct service for monitoring and diagnosing virtual machine performance and health.

Question 56

Which Azure feature allows administrators to assign permissions at the resource group level?

1. Azure Storage
2. Azure RBAC
3. Azure DNS
4. Azure Monitor

Correct Answer: 2

Explanation

Azure Role-Based Access Control allows administrators to assign permissions at different scopes, including management groups, subscriptions, resource groups, and individual resources. Assigning a role at the resource group level allows the permissions to apply to resources contained within that resource group, depending on the role and inheritance behavior. This supports the principle of granting users only the access required for their responsibilities. Azure DNS, Azure Monitor, and Azure Storage do not provide this general resource authorization framework. Therefore, Azure RBAC is correct.

Question 57

Which Azure role provides full access to resources while also allowing the user to assign access to other users?

1. User Access Administrator
2. Owner
3. Reader
4. Contributor

Correct Answer: 2

Explanation

The Owner role provides full management access to Azure resources and includes the ability to assign access permissions to other users. This makes Owner more powerful than Contributor, which can manage resources but does not normally allow assigning Azure RBAC roles. Reader can view resources without making changes, while User Access Administrator focuses on managing access permissions. Therefore, Owner is the correct answer when a user requires full resource management capabilities along with the ability to grant access to others.

Question 58

Which Azure role allows users to manage resources but does not allow them to assign Azure RBAC roles to other users?

1. User Access Administrator
2. Owner
3. Contributor
4. Reader

Correct Answer: 3

Explanation

The Contributor role allows users to create, modify, and delete Azure resources within the assigned scope. However, Contributor does not provide permission to assign Azure RBAC roles to other users. The Owner role includes both resource management and access management capabilities. Reader can only view resources, while User Access Administrator is primarily focused on managing user access. Therefore, Contributor is the correct choice when a user needs to manage resources but should not be able to grant access to other users.

Question 59

Which Azure role allows users to view Azure resources without making changes to them?

1. Owner
2. Reader
3. User Access Administrator
4. Contributor

Correct Answer: 2

Explanation

The Reader role provides read-only access to Azure resources. Users assigned this role can view resource configurations, settings, and other information but cannot create, modify, or delete resources. This role is useful for employees, auditors, or administrators who need visibility without requiring management permissions. Contributor provides broader resource management capabilities, Owner also includes access management, and User Access Administrator manages permissions. Therefore, Reader is the correct role for users who only need to view Azure resources.

Question 60

Which Azure service can help identify the effective network security rules applied to a virtual machine network interface?

1. Azure Advisor
2. Azure Key Vault
3. Azure Backup
4. Network Watcher

Correct Answer: 4

Explanation

Azure Network Watcher provides network diagnostic capabilities that help administrators troubleshoot connectivity and understand network security behavior. Its IP flow verification feature can help determine whether traffic to or from a virtual machine is allowed or denied by Network Security Group rules. This is useful when troubleshooting unexpected network connectivity problems. Azure Backup focuses on data protection, Azure Advisor provides recommendations, and Azure Key Vault manages secrets and keys. Therefore, Network Watcher is the correct service for investigating effective network security behavior.