Online Access Free AZ-104 Exam Questions

You have an Azure subscription that contains the Azure container instances shown in the following table.
Name \| Location \| Image
container1 \| East US \| Windows
container2 \| West US \| Windows
container3 \| East US \| Linux
You create a storage account that contains a file share named storage1 in the East US Azure region.
You need to mount storage1 to the container instances.
To which container instances can you mount storage1?

• A.container1, container2, and container3
• B.container1 and container3 only
• C.container3 only
• D.container1 and container2 only
• E.container1 only

You have an Azure virtual machine named VM1. VM1 was deployed by using a custom Azure Resource Manager template named ARM1.json.
You receive a notification that VM1 will be affected by maintenance.
You need to move VM1 to a different host immediately.
Solution: From the resource group blade, move VM1 to another resource group.
Does this meet the goal?

• A.Yes
• B.No

You have an Azure subscription that contains a virtual network named VNet1. VNet1 contains four subnets named Gateway, Perimeter. NVA and Production.
The NVA subnet contains two network virtual appliances (NVAs) that will perform network traffic inspection between the Perimeter subnet and the Production subnet.
You need to implement an Azure load balancer for the NVAs. The solution must meet the following requirements:
* The NVAs must run in an active-active configuration that uses automatic failover.
* The toad balancer must load balance traffic to two services on the Production subnet. The services have different IP addresses.
Which three actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

• A.Deploy a basic load balancer.
• B.Add two load balancing rules that have HA Ports and Floating IP enabled.
• C.Deploy a standard load balancer.
• D.Add two load balancing rules that have HA Ports enabled and Floating IP disabled.
• E.Add a frontend IP configuration, a backend pool, and a health probe.
• F.Add a frontend IP configuration, two backend pools, and a health probe.

You deploy an Azure Kubernetes Service (AKS) cluster that has the network profile shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

Exhibit

Exhibit

Correct Answer:

Explanation:
Detailed Explanation
In an AKS cluster using the Basic (Kubenet) network plugin, three distinct address ranges serve different purposes and this is a frequently tested distinction. The Pod CIDR (10.244.0.0/16) is the private address range from which individual pods - the containers running inside them - receive their IP addresses; because Kubenet does not assign a routable VNet IP directly to each pod (unlike Azure CNI), pods draw addresses from this separate, cluster-internal range, and traffic is then NATed to the node ' s VNet IP for connectivity outside the cluster. The Service CIDR (10.0.0.0/16) is a separate, virtual address range used only for stable ClusterIP addresses assigned to Kubernetes Service objects (which load-balance across the pods backing them) - this range is not routable and exists purely for internal service discovery, with kube-proxy programming the actual routing. The Docker bridge CIDR is an internal Docker networking address unrelated to either pods or services directly. Containers therefore draw from the Pod CIDR (10.244.0.0/16), and Services draw from the Service CIDR (10.0.0.0/16).
Official Reference
Network concepts for applications in AKS (Kubenet) - https://learn.microsoft.com/en-us/azure/aks/concepts- network-legacy-cni

You have an Azure AD tenant that is linked to 10 Azure subscriptions.
You need to centrally monitor user activity across all the subscriptions.
What should you use?

• A.access reviews
• B.Log Analytics workspace
• C.Activity log filters
• D.Azure Application Insights Profiler