完美的Microsoft AZ-104最新考古題是行業領先材料＆值得信賴的AZ-104證照指南

nuxibe

posted on 3 years ago — updated on 1 second ago

42
views

AZ-104最新考古題,AZ-104證照指南,最新AZ-104題庫資訊,最新AZ-104題庫資源,AZ-104參考資料, 完美的Microsoft AZ-104最新考古題是行業領先材料＆值得信賴的AZ-104證照指南

P.S. PDFExamDumps在Google Drive上分享了免費的、最新的AZ-104考試題庫：https://drive.google.com/open?id=1x32SPDY4579J_R_oMzGf4OYwhZbjVz-I

現在世界上有很多 IT人才，IT行業競爭激烈。所以很多IT人才會選擇參加相關的IT認證考試來提高自己在IT行業中的地位。AZ-104 考試就是Microsoft的一個很重要的認證考試，但是很多IT專業人員要想拿到Microsoft 認證證書，他們就必須得通過考試。

Microsoft AZ-104 考試是為想成為認證 Azure 管理員的個人而設計的。此考試測試候選人在管理 Azure 資源、實施和管理儲存解決方案、配置和管理虛擬網路以及管理 Azure 身分識別和治理方面的知識和技能。它旨在為有 Azure 服務工作經驗並對雲計算概念有基本理解的個人提供認證。

Microsoft AZ-104 考試大綱：

主題	簡介
主題 1	Manage Membership to configure cost management Create, manage, move resources, or remove resource group rotation groups
主題 2	Explain registration tasks Manage multiple directories Configure resource locking
主題 3	Data Management Azure Storage Create a shared access signature Manage storage accounts
主題 4	Azure Identity Management and Management Configure Igure self-service password reset
主題 5	Settings Manage device settings Apply bulk user update Manage Azure AD objects
主題 6	Automate the deployment and configuration of virtual machines High availability configuration
主題 7	Moving virtual machines from one resource group to another Publish and create a metric group
主題 8	Configure Azure AD authentication for the storage account Create a group administration group
主題 9	Configure large binary digit storage layers Configure Igure Azure Big Data Storage
主題 10	Configure network access for storage accounts Storage implementation and management
主題 11	Create and configure K Azure Governorate Service (AKS) Create and configure the Service plan for the Plan application
主題 12	Create Azure files and Azure Blob storage Create and configure the Azure File Sync service
主題 13	Install and use Azure Storage Explorer Export from Azure functionality
主題 14	Automate configuration management with extension-specific script extensions Create Azure file sharing
主題 15	Configure the VM for high availability and scalability Deploy and manage Azure account resources
主題 16	Manage group users and group properties Create group users and groups Configure joining Azure AD
主題 17	Ure Azure Repository Replication Application Create and configure storage accounts

>> AZ-104最新考古題 <<

100%專業的AZ-104最新考古題，最好的考試資料幫助妳快速通過AZ-104考試

我們PDFExamDumps Microsoft的AZ-104考試的問題包含了完整的無限制的轉儲，所以你很容易的通過考試，不管你是通過你的產品合格證或是其他當今流行的身份驗證，完美的展現PDFExamDumps Microsoft的AZ-104考試培訓資料的長處，這不僅僅是依靠，也是指導，這其實是最好的，你可以使用PDFExamDumps Microsoft的AZ-104考試培訓資料裏的問題和答案通過考試，獲得Microsoft的AZ-104考試認證。

Microsoft AZ-104考試是一個重要的認證，適用於希望證明自己在管理和管理Microsoft Azure服務方面具有知識和技能的個人。該考試旨在驗證候選人在實施、監視和維護Azure解決方案方面的專業知識，包括計算、存儲、網絡和安全服務。成功完成AZ-104考試表明候選人具備成為認證Microsoft Azure管理員所需的必要技能。

最新的 Microsoft Azure Administrator Associate AZ-104 免費考試真題 (Q474-Q479):

問題 #474
You have an Azure subscription that contains an Azure Directory (Azure AD) tenant named contoso.com. The tenant is synced to the on-premises Active Directory domain. The domain contains the users shown in the following table.

You enable self-service password reset (SSPR) for all users and configure SSPR to have the following authentication methods:
Number of methods required to reset: 2
Methods available to users: Mobile phone, Security questions
Number of questions required to register: 3
Number of questions required to reset: 3
You select the following security questions:
What is your favorite food?
In what city was your first job?
What was the name of your first pet?
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

答案：

解題說明：

Reference:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-sspr-deployment

問題 #475
You have an Azure subscription that contains the virtual machines shown in the following table.

VM1 and VM2 use public IP addresses. From Windows Server 2019 on VM1 and VM2, you allow inbound Remote Desktop connections.
Subnet1 and Subnet2 are in a virtual network named VNET1.
The subscription contains two network security groups (NSGs) named NSG1 and NSG2. NSG1 uses only the default rules.
NSG2 uses the default and the following custom incoming rule:
Priority: 100
Name: Rule1
Port: 3389
Protocol: TCP
Source: Any
Destination: Any
Action: Allow
NSG1 connects to Subnet1. NSG2 connects to the network interface of VM2.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.

答案：

解題說明：

Reference:
https://docs.microsoft.com/en-us/azure/virtual-machines/troubleshooting/troubleshoot-rdp-connection

問題 #476
You have an Azure subscription named Subscription1. Subscription1 contains a virtual machine named VM1.
You install and configure a web server and a DNS server on VM1.
VM1 has the effective network security rules shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

答案：

解題說明：

Explanation

問題 #477
You have an Azure Active Directory (Azure AD) tenant.
All administrators must enter a verification code to access the Azure portal.
You need to ensure that the administrators can access the Azure portal only from your on-premises network.
What should you configure?

A. the multi-factor authentication service settings.
B. an Azure AD Identity Protection user risk policy.
C. the default for all the roles in Azure AD Privileged Identity Management
D. an Azure AD Identity Protection sign-in risk policy

答案：A

解題說明：
Explanation
the multi-factor authentication service settings - Correct choice
There are two criterias mentioned in the question.
1. MFA required
2. Access from only a specific geographic region/IP range.
To satisfy both the requirements you need MFA with location conditional access. Please note to achieve this configuration you need to have AD Premium account for Conditional Access policy.
Navigate to Active Directory --> Security --> Conditional Access --> Named Location. Here you can create a policy with location (on-premise IP range) and enable MFA. This will satisfy the requirements.

an Azure AD Identity Protection user risk policy - Incorrect choice
In the Identity Protection, there are three (3) protection policies- User Risk, Sign-In Risk & MFA Registration.
None of those in which you can enable a location (on-prem IP Range) requirement in any blade.
the default for all the roles in Azure AD Privileged Identity Management - Incorrect choice This option will not help you to restrict the users to access only form on prem.
an Azure AD Identity Protection sign-in risk policy - Incorrect choice
In the Identity Protection, there are three (3) protection policies- User Risk, Sign-In Risk & MFA Registration.
None of those in which you can enable a location (on-prem IP Range) requirement in any blade.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/location-condition

問題 #478
You have a sync group that has the endpoints shown in the following table.

Cloud tiering is enabled for Endpoint3.
You add a file named File1 to Endpoint1 and a file named File2 to Endpoint2.
You need to identify on which endpoints File1 and File2 will be available within 24 hours of adding the files.
What should you identify? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

答案：

解題說明：

Explanation

File1: Endpoint3 only
Cloud Tiering: A switch to enable or disable cloud tiering. When enabled, cloud tiering will tier files to your Azure file shares. This converts on-premises file shares into a cache, rather than a complete copy of the dataset, to help you manage space efficiency on your server. With cloud tiering, infrequently used or accessed files can be tiered to Azure Files.
File2: Endpoint1, Endpoint2, and Endpoint3
References:
https://docs.microsoft.com/en-us/azure/storage/files/storage-sync-cloud-tiering