View Full Microsoft AZ-104 Exam Dumps and Practice Test Dumps.

 

Question 61

Which Azure service provides a managed platform for running containerized applications without directly managing virtual machines?

1. Azure DNS
2. Azure Files
3. Azure Backup
4. Azure Container Instances

Correct Answer: 4

Explanation

Azure Container Instances, or ACI, provides a managed way to run containers in Azure without requiring administrators to manage virtual machines or an underlying container orchestration platform. It is suitable for short-lived workloads, simple applications, batch jobs, and development scenarios. Azure DNS provides DNS services, Azure Files provides managed file shares, and Azure Backup provides data protection capabilities. Therefore, Azure Container Instances is the correct choice when an organization needs to run containers without managing virtual machine infrastructure.

Question 62

Which Azure service is designed to manage and orchestrate large groups of containers?

1. Azure Files
2. Azure Kubernetes Service
3. Azure Advisor
4. Azure DNS

Correct Answer: 2

Explanation

Azure Kubernetes Service, or AKS, is a managed Kubernetes service designed to deploy, manage, and scale containerized applications. It provides Kubernetes control-plane management while allowing organizations to focus on workloads and application operations. AKS supports capabilities such as scaling, networking, monitoring, and integration with other Azure services. Azure Files provides file storage, Azure DNS handles DNS services, and Azure Advisor provides recommendations. Therefore, Azure Kubernetes Service is the correct choice for managing and orchestrating containerized workloads at scale.

Question 63

Which Azure feature allows administrators to move a resource between resource groups?

1. Azure Monitor
2. Azure DNS
3. Resource Move
4. Azure Bastion

Correct Answer: 3

Explanation

Azure supports moving eligible resources between resource groups and, in many cases, between subscriptions. Resource movement can help organizations reorganize resources according to projects, departments, environments, or management requirements. Administrators must verify that the resource type supports movement and understand any dependencies before performing the operation. Azure Monitor provides monitoring, Azure Bastion provides secure VM access, and Azure DNS provides DNS management. Therefore, Resource Move is the appropriate feature for relocating supported resources between resource groups.

Question 64

Which Azure feature can be used to automatically shut down a virtual machine at a scheduled time?

1. Auto-shutdown
2. Azure DNS
3. Resource Lock
4. Availability Set

Correct Answer: 1

Explanation

The Auto-shutdown feature allows administrators to configure a virtual machine to automatically shut down at a specified time. It can help reduce unnecessary compute costs, especially for development, testing, or training environments that do not need to operate continuously. Availability Sets are designed to improve VM availability, Azure DNS provides name resolution, and Resource Locks protect resources from accidental changes. Therefore, Auto-shutdown is the correct feature for scheduling a virtual machine to shut down automatically.

Question 65

Which Azure storage service is best suited for asynchronous messaging between application components?

1. Azure Blob Storage
2. Azure Files
3. Azure Table Storage
4. Azure Queue Storage

Correct Answer: 4

Explanation

Azure Queue Storage provides a simple messaging system that allows application components to communicate asynchronously. Messages can be stored in a queue until a receiving application is ready to process them. This approach helps separate application components and can improve scalability by allowing workloads to process messages independently. Blob Storage is intended for object data, Azure Files provides managed file shares, and Table Storage provides NoSQL key-value storage. Therefore, Azure Queue Storage is the correct service for asynchronous messaging between application components.

Question 66

Which Azure storage service provides a NoSQL key-value store for large amounts of structured data?

1. Azure Blob Storage
2. Azure Table Storage
3. Azure Queue Storage
4. Azure Files

Correct Answer: 2

Explanation

Azure Table Storage provides a NoSQL key-value store designed for large amounts of structured, non-relational data. It is useful for applications that need simple and scalable storage without the relational features of a traditional database. Data is organized into entities and properties rather than rows and columns managed through a relational database engine. Blob Storage handles unstructured objects, Azure Files provides file shares, and Queue Storage stores messages. Therefore, Azure Table Storage is the correct choice for NoSQL key-value data.

Question 67

Which Azure storage feature allows administrators to restore blob data to an earlier point in time?

1. Blob Versioning
2. Storage Tiers
3. Blob Point-in-Time Restore
4. Azure Files

Correct Answer: 3

Explanation

Blob Point-in-Time Restore allows supported Azure Blob Storage data to be restored to a previous state within a configured retention period. This capability can help recover from accidental deletion, modification, or corruption of blob data. Blob Versioning maintains previous versions of blobs, but point-in-time restore provides a broader recovery mechanism for supported storage accounts. Azure Files provides managed file shares, while storage tiers control access and pricing characteristics. Therefore, Blob Point-in-Time Restore is the correct answer.

Question 68

Which Azure storage feature automatically maintains previous versions of blobs when they are modified or overwritten?

1. Blob Versioning
2. Archive Tier
3. Soft Delete
4. Azure Backup

Correct Answer: 1

Explanation

Blob Versioning automatically maintains previous versions of a blob when the blob is modified or overwritten. Each version can be identified and accessed separately, allowing administrators or applications to recover earlier content when necessary. This is useful for protecting against accidental changes and maintaining historical versions of data. Soft Delete provides protection against deletion, while Archive Tier is designed for long-term infrequently accessed data. Therefore, Blob Versioning is the correct feature for maintaining previous blob versions.

Question 69

Which Azure storage feature helps recover blobs that have been accidentally deleted?

1. Azure Traffic Manager
2. Network Watcher
3. Azure Advisor
4. Blob Soft Delete

Correct Answer: 4

Explanation

Blob Soft Delete provides protection against accidental deletion of blob data. When enabled, deleted blobs are retained for a configured period rather than being immediately and permanently removed. During the retention period, administrators can restore the deleted data. Azure Traffic Manager manages DNS-based traffic routing, Azure Advisor provides recommendations, and Network Watcher provides network diagnostics. Therefore, Blob Soft Delete is the correct feature for recovering accidentally deleted blob data during its retention period.

Question 70

Which Azure service provides managed disks for virtual machines?

1. Azure Front Door
2. Azure Managed Disks
3. Azure Monitor
4. Azure DNS

Correct Answer: 2

Explanation

Azure Managed Disks are storage volumes managed by Azure for use with virtual machines. Azure handles much of the underlying storage management, including placement and availability. Managed disks are available in different performance and redundancy options to support various workloads. Azure DNS provides domain name resolution, Azure Monitor handles monitoring, and Azure Front Door manages global application traffic. Therefore, Azure Managed Disks are the correct option when administrators need managed storage disks for Azure virtual machines.

Question 71

Which Azure managed disk type is designed for workloads requiring the highest disk performance?

1. Standard HDD
2. Standard SSD
3. Archive Storage
4. Premium SSD

Correct Answer: 4

Explanation

Premium SSD managed disks are designed for workloads that require high performance and low latency. They are commonly used for production applications, databases, and other workloads with demanding input/output requirements. Standard HDD provides lower-cost storage with lower performance, while Standard SSD provides a balance between performance and cost. Archive Storage is an access tier for certain data storage scenarios rather than a managed disk type. Therefore, Premium SSD is the correct choice for high-performance virtual machine disk workloads.

Question 72

Which Azure disk type generally provides the lowest-cost option for workloads with lower performance requirements?

1. Standard HDD
2. Premium SSD
3. Ultra Disk
4. Premium SSD v2

Correct Answer: 1

Explanation

Standard HDD managed disks generally provide a lower-cost storage option for workloads that do not require high disk performance. They are suitable for applications with lower input/output requirements where minimizing storage costs is more important than achieving high performance. Premium SSD and other premium disk types provide higher performance and lower latency but typically cost more. Therefore, Standard HDD is the correct choice when an organization wants economical disk storage for workloads with lower performance requirements.

Question 73

Which Azure feature allows administrators to assign a public IP address to a supported Azure resource?

1. Private Endpoint
2. Route Table
3. Public IP Address
4. Network Security Group

Correct Answer: 3

Explanation

An Azure Public IP address provides a publicly reachable IP address for supported Azure resources and networking components. It can be associated with resources such as network interfaces, load balancers, and other supported services. A Network Security Group controls traffic, a Route Table defines routing behavior, and a Private Endpoint provides private connectivity to supported services. Therefore, Public IP Address is the correct choice when an Azure resource needs a public network address.

Question 74

Which Azure networking feature is used to define custom routes for traffic within a virtual network?

1. Azure DNS
2. Public IP Address
3. Network Security Group
4. Route Table

Correct Answer: 4

Explanation

Azure Route Tables, also known as user-defined route tables, allow administrators to define custom routes for network traffic. They can be associated with subnets to control how traffic is directed toward specific destinations. This is useful for scenarios involving network appliances, custom routing paths, or controlled traffic flows. Network Security Groups control traffic permissions, Azure DNS manages name resolution, and Public IP addresses provide public network addressing. Therefore, Route Table is the correct choice for defining custom network routes.

Question 75

Which Azure feature allows administrators to associate a private IP address with a network interface?

1. Azure Advisor
2. Network Interface
3. Traffic Manager
4. Azure DNS

Correct Answer: 2

Explanation

An Azure Network Interface, or NIC, connects a virtual machine to an Azure Virtual Network. It can have private IP addresses and can also be associated with public IP addresses when required. Network interfaces are responsible for providing network connectivity to virtual machines and can be configured with security and routing-related settings. Azure DNS manages DNS records, Traffic Manager provides DNS-based traffic routing, and Azure Advisor provides recommendations. Therefore, Network Interface is the correct choice for connecting a VM to a virtual network and assigning IP configuration.

Question 76

Which Azure service provides a private DNS zone that can resolve domain names within an Azure Virtual Network?

1. Azure Load Balancer
2. Azure Private DNS
3. Azure Front Door
4. Azure Traffic Manager

Correct Answer: 2

Explanation

Azure Private DNS provides private DNS zones that allow domain name resolution within Azure Virtual Networks. It can be used to create custom internal DNS names without exposing them to the public internet. Private DNS zones can also be integrated with virtual networks to provide name resolution for connected resources. Traffic Manager provides DNS-based traffic routing, Front Door manages global application traffic, and Load Balancer distributes network traffic. Therefore, Azure Private DNS is the correct service for private DNS name resolution.

Question 77

Which Azure networking service provides a managed firewall with centralized network security capabilities?

1. Azure Backup
2. Azure DNS
3. Azure Firewall
4. Azure Files

Correct Answer: 3

Explanation

Azure Firewall is a managed, cloud-based network security service that provides centralized traffic filtering and security capabilities for Azure networks. It can control network and application traffic using configured rules and can be integrated into hub-and-spoke network architectures. Azure Files provides file shares, Azure Backup protects workloads, and Azure DNS manages domain name resolution. Therefore, Azure Firewall is the correct service when an organization needs a centralized managed firewall for Azure network traffic.

Question 78

Which Azure feature provides a dedicated public IP address that can remain associated with a resource even when the resource is stopped or restarted?

1. Static Public IP
2. Route Table
3. Network Security Group
4. Dynamic Private IP

Correct Answer: 1

Explanation

A static public IP address is designed to remain assigned to a resource until it is explicitly disassociated or deleted. This is useful when an application or service requires a predictable public IP address for DNS records, firewall rules, or external integrations. Dynamic IP addresses may change when resources are stopped or deallocated, depending on the configuration and resource type. Network Security Groups control traffic, while Route Tables manage routing. Therefore, Static Public IP is the correct choice when a consistent public IP address is required.

Question 79

Which Azure service can provide centralized protection against distributed denial-of-service attacks on Azure resources?

1. Azure Advisor
2. Azure DDoS Protection
3. Azure DNS
4. Azure Files

Correct Answer: 2

Explanation

Azure DDoS Protection provides dedicated protection against distributed denial-of-service attacks targeting Azure resources. It helps detect and mitigate attacks that attempt to overwhelm network resources with excessive traffic. Azure DDoS Protection can be integrated with Azure Virtual Networks and supported public-facing resources. Azure DNS handles DNS services, Azure Files provides managed file storage, and Azure Advisor provides recommendations. Therefore, Azure DDoS Protection is the correct service for enhancing protection against distributed denial-of-service attacks.

Question 80

Which Azure service allows administrators to monitor the health and availability of Azure services across regions?

1. Azure Storage
2. Azure Bastion
3. Azure Service Health
4. Azure Key Vault

Correct Answer: 3

Explanation

Azure Service Health provides personalized information about Azure service incidents, planned maintenance, and health advisories that may affect an organization’s resources. It helps administrators understand service issues relevant to their Azure environment and take appropriate action. Azure Storage provides data storage, Azure Key Vault manages secrets and keys, and Azure Bastion provides secure VM access. Therefore, Azure Service Health is the correct choice for monitoring Azure service health and receiving information about incidents or maintenance.