View Full Microsoft AZ-104 Exam Dumps and Practice Test Dumps.

 

Question 241

Which Azure service provides a platform for hosting web applications without managing the underlying operating system?

1. Azure Virtual Machines
2. Azure Storage
3. Azure App Service
4. Azure Load Balancer

Correct Answer: 3

Explanation

Azure App Service is a managed platform for hosting web applications, REST APIs, and backend services. Microsoft manages much of the underlying infrastructure and operating system, allowing administrators to focus on the application. App Service supports several programming environments and provides features such as scaling, deployment options, and custom domains. Virtual Machines require more operating system management, making App Service a more managed hosting option.

Question 242

Which App Service feature allows an application to run multiple instances to handle increased demand?

1. Azure DNS
2. Resource Lock
3. Azure Policy
4. App Service Scaling

Correct Answer: 4

Explanation

App Service scaling allows an application to run with additional compute instances when more capacity is required. Scaling can be manual or configured using supported automatic scaling capabilities. Horizontal scaling increases the number of instances, helping applications handle additional traffic. This differs from vertical scaling, which changes the size or capabilities of an existing instance. Scaling improves application availability and performance during increased demand.

Question 243

Which Azure service is designed to execute code in response to events without requiring management of a dedicated server?

1. Azure Functions
2. Azure Virtual Machines
3. Azure Files
4. Azure Bastion

Correct Answer: 1

Explanation

Azure Functions is a serverless compute service designed to execute code in response to events. Functions can be triggered by timers, HTTP requests, queues, storage events, and other supported sources. Microsoft manages the underlying infrastructure, allowing developers and administrators to focus on the function code. This makes Azure Functions useful for automation, event processing, scheduled tasks, and lightweight application workloads.

Question 244

Which Azure service provides a fully managed platform for hosting containers as web applications?

1. Azure DNS
2. Azure App Service
3. Azure Monitor
4. Azure Key Vault

Correct Answer: 2

Explanation

Azure App Service supports containerized web applications while providing a managed application-hosting platform. Administrators can deploy supported container images without managing the underlying virtual machines. App Service handles much of the infrastructure management and provides features such as scaling, deployment settings, and application monitoring integration. Azure Container Instances and AKS are other container options, but App Service is particularly suited to managed web application hosting.

Question 245

Which Azure service provides a private connection from an Azure virtual network to Azure services without traversing the public internet?

1. Traffic Manager
2. Public IP
3. Azure DNS
4. Private Endpoint

Correct Answer: 4

Explanation

Azure Private Endpoint provides a private network interface in a virtual network that connects privately to supported Azure services. Traffic between the virtual network and the service can use a private IP address instead of the public internet. Private endpoints are commonly used to improve security and restrict access to services such as Storage, Key Vault, and Azure SQL Database.

Question 246

Which Azure service provides private DNS zones for resolving domain names within virtual networks?

1. Azure Load Balancer
2. Azure Firewall
3. Azure Private DNS
4. Azure Traffic Manager

Correct Answer: 3

Explanation

Azure Private DNS provides private DNS zones that can be used to resolve domain names within Azure virtual networks. It supports internal name resolution without requiring a public DNS service. Private DNS is especially useful with private endpoints, where applications need to resolve Azure service names to private IP addresses. Traffic Manager provides DNS-based traffic routing, while Load Balancer distributes network traffic.

Question 247

Which Azure networking feature connects two virtual networks so resources can communicate privately?

1. Virtual Network Peering
2. Azure DNS
3. Azure Bastion
4. Azure Front Door

Correct Answer: 1

Explanation

Virtual Network Peering connects Azure virtual networks so resources in those networks can communicate using private IP addresses. Peering can be configured between virtual networks in the same region or, using global peering, across regions. The networks remain separate resources but can exchange traffic through the Azure backbone. This provides private connectivity without requiring a VPN gateway for basic peering scenarios.

Question 248

Which Azure feature allows virtual networks in different Azure regions to communicate over the Microsoft backbone network?

1. Network Security Group
2. Azure DNS
3. Public IP
4. Global VNet Peering

Correct Answer: 4

Explanation

Global Virtual Network Peering connects virtual networks located in different Azure regions through the Microsoft backbone network. It allows resources in peered networks to communicate using private IP addresses. This can provide lower-latency private connectivity compared with routing traffic through the public internet. Standard VNet peering is commonly used within a region, while global peering extends this capability across regions.

Question 249

Which Azure networking service provides a dedicated private connection between an on-premises network and Azure?

1. Azure Bastion
2. Azure Traffic Manager
3. ExpressRoute
4. Azure Load Balancer

Correct Answer: 3

Explanation

Azure ExpressRoute provides a private connection between an organization’s on-premises network and Microsoft cloud services. The connection does not use the public internet for the primary network path. ExpressRoute is useful for organizations requiring predictable connectivity, higher bandwidth, or specific networking requirements. Azure VPN Gateway can also connect on-premises networks to Azure, but it generally uses encrypted connections over the internet.

Question 250

Which Azure service provides encrypted site-to-site connectivity between an on-premises network and an Azure virtual network over the internet?

1. Azure DNS
2. Azure VPN Gateway
3. Azure Bastion
4. Azure Advisor

Correct Answer: 2

Explanation

Azure VPN Gateway provides encrypted VPN connectivity between Azure virtual networks and external networks. A site-to-site VPN can connect an organization’s on-premises network to an Azure virtual network through an IPsec/IKE tunnel over the internet. This provides secure connectivity without requiring a dedicated ExpressRoute circuit. VPN Gateway can also support point-to-site connections for individual client devices.

Question 251

Which Azure resource controls inbound and outbound network traffic for resources in a virtual network?

1. Management Group
2. Availability Set
3. Resource Group
4. Network Security Group

Correct Answer: 4

Explanation

A Network Security Group, or NSG, contains security rules that allow or deny inbound and outbound network traffic. NSGs can be associated with subnets or network interfaces. Rules can evaluate factors such as source, destination, protocol, port, and direction. This allows administrators to control network access to Azure resources. Resource groups organize resources, while availability sets improve VM availability.

Question 252

Which NSG rule configuration allows inbound HTTPS traffic to a virtual machine?

1. TCP port 22
2. TCP port 443
3. TCP port 80
4. UDP port 53

Correct Answer: 2

Explanation

HTTPS normally uses TCP port 443. An NSG rule allowing inbound HTTPS traffic should therefore allow TCP traffic destined for port 443 from the required source. TCP port 22 is commonly used for SSH, TCP port 80 is used for HTTP, and UDP port 53 is commonly used for DNS queries. Correctly configuring NSG rules helps limit network access to only required services.

Question 253

Which Azure service helps diagnose network connectivity problems by testing whether traffic is allowed or denied?

1. Azure Advisor
2. Network Watcher IP Flow Verify
3. Azure Cost Management
4. Azure Service Health

Correct Answer: 2

Explanation

Network Watcher’s IP Flow Verify feature checks whether network traffic is allowed or denied for a specified source and destination. It evaluates applicable network security rules and helps administrators identify why traffic may not be reaching a resource. This is particularly useful when troubleshooting NSG configurations. Other Network Watcher features, such as Connection Monitor and packet capture, provide additional diagnostic capabilities.

Question 254

Which Network Watcher feature continuously monitors connectivity between endpoints?

1. IP Flow Verify
2. Packet Capture
3. Topology
4. Connection Monitor

Correct Answer: 4

Explanation

Network Watcher Connection Monitor provides continuous monitoring of network connectivity between endpoints. It can help administrators measure connectivity and identify network performance or availability issues. IP Flow Verify checks whether a particular traffic flow is allowed or denied, while Packet Capture collects network traffic for analysis. Connection Monitor is therefore the appropriate option for ongoing connectivity monitoring.

Question 255

Which Network Watcher feature captures network traffic from a virtual machine for troubleshooting?

1. Packet Capture
2. Connection Monitor
3. IP Flow Verify
4. Network Topology

Correct Answer: 1

Explanation

Network Watcher Packet Capture allows administrators to capture network traffic from an Azure virtual machine. Captured traffic can be analyzed to troubleshoot connectivity, application communication, and network behavior. IP Flow Verify determines whether traffic is permitted, while Connection Monitor evaluates connectivity between endpoints. Packet Capture is useful when administrators need detailed information about actual packets being sent or received.

Question 256

Which Azure service provides application delivery acceleration and global routing for web applications?

1. Azure Files
2. Azure Queue Storage
3. Azure Front Door
4. Azure Key Vault

Correct Answer: 3

Explanation

Azure Front Door is a global application delivery service that provides routing, acceleration, and security capabilities for web applications. It uses Microsoft’s global edge network to route client requests toward appropriate application endpoints. Front Door can also provide features such as web application firewall integration and health-based routing. Azure Files, Queue Storage, and Key Vault serve storage, messaging, and security purposes respectively.

Question 257

Which Azure service provides a managed web application firewall capability for protecting web applications from common attacks?

1. Azure Queue Storage
2. Azure Files
3. Azure Table Storage
4. Azure Web Application Firewall

Correct Answer: 4

Explanation

Azure Web Application Firewall, or WAF, helps protect web applications from common web-based attacks. It can inspect HTTP and HTTPS traffic and apply rules designed to detect and block malicious requests. WAF capabilities can be integrated with supported Azure services such as Application Gateway and Front Door. WAF is specifically designed for application-layer web traffic rather than general network traffic.

Question 258

Which Azure service provides centralized protection against distributed denial-of-service attacks?

1. Azure Advisor
2. Azure DDoS Protection
3. Azure Storage
4. Azure Resource Graph

Correct Answer: 2

Explanation

Azure DDoS Protection provides enhanced protection for Azure resources against distributed denial-of-service attacks. It helps protect applications and services by detecting and mitigating abnormal traffic patterns associated with DDoS attacks. Azure also provides basic DDoS protection for Azure services, while the dedicated DDoS Protection service provides additional capabilities for supported workloads. Advisor and Resource Graph serve different management purposes.

Question 259

Which Azure service provides a managed firewall for controlling and inspecting network traffic across Azure virtual networks?

1. Azure DNS
2. Azure Bastion
3. Azure Firewall
4. Azure Traffic Manager

Correct Answer: 3

Explanation

Azure Firewall is a managed, cloud-based network security service that can inspect and control traffic flowing through Azure networks. It supports network and application-level traffic filtering and can be centrally deployed for supported network architectures. Azure Firewall is different from NSGs, which provide security rules at the subnet or network-interface level. Bastion provides secure VM administration, while DNS handles name resolution.

Question 260

Which Azure service can distribute traffic across virtual machines and use health probes to identify healthy backend instances?

1. Azure Key Vault
2. Azure Policy
3. Azure Cost Management
4. Azure Load Balancer

Correct Answer: 4

Explanation

Azure Load Balancer distributes network traffic across backend resources such as virtual machines. Health probes determine whether backend instances are available to receive traffic. If an instance fails its configured health probe, the load balancer can stop sending new traffic to that instance until it becomes healthy again. This improves application availability and helps prevent traffic from being sent to unhealthy resources.