.png)
1. You have an Azure Storage account named storage1.
You have to create the following encryption scopes for storage:
- Scope1 that has an encryption type of Microsoft-managed keys
- Scope2 that has an encryption type of Customer-managed keys
Which storage services can be used with Scope2?
2. blob, file, table and queue
3. blob only
4. file only
5. table and queue only
Correct Answer: 2. blob, file, table and queue
2. You have an Azure subscription that contains a virtual machine named VM1 and a storage account named storage1.
You need to ensure that VM1 can access storage1 by using a private IP address.
what should you use?
1. a point to site (P2S) connection
2. A service endpoint
3. a VPN gateway
4. the Azure Front Door Service
Correct Answer: 2. A service endpoint
3. You have an Azure subscription and You plan to run a data warehouse in an Azure virtual machine named VM1.
You need to ensure that VM1 is optimized for running a data warehouse.
Which VM type should you use for VM1?
1. Compute optimize (F-Series)
2. General purpose (D-Series)
3. High-performance computing (H-Series)
4. Memory optimized (M-Series)
5. Storage optimized (Ls-Series)
Correct Answer: 4. Memory optimized (M-Series)
4. You have a Microsoft Entra tenant named contoso.com that contains a user named Ben Smith.
You configure Password protection for contoso.com that includes the following Custom banned password settings:
1. C0nt0s0123
2. CONTOSO123
3. Conto123so
4. FgRs01
Correct Answer: 4. FgRs01
5. You have an Azure storage account that contains a blob container named container1.
You need to configure access to container1.
Which authorization types can you use?
1. Microsoft Entra ID only
2. Microsoft Entra ID, shared access signature or certificate only
3. Microsoft Entra ID, storage key or shared access signature only
4. Microsoft Entra ID, storage key, shared access signature or certificate
5. Storage key or shared access signature only
Correct Answer: 3. Microsoft Entra ID, storage key or shared access signature only
6. You have an Azure subscription. You plan to use fault domains.
From which Azure resource can you configure the fault domains?
1. Availability set
2. Virtual machine
3. Virtual machine scale set
4. Virtual network
Correct Answer: 1. Availability set
7. You have a Microsoft Entra tenant that uses Microsoft Entra Connect to sync with an Active Directory Domain Services (AD DS) domain.
You need to ensure that users can reset their AD DS password from the Azure portal. The users must be able to use two methods to reset their password.
Which two actions should you perform? Each correct answer presents part of the solution.
1. From Password reset in the Azure portal, configure the Authentication methods settings.
2. From Password reset in the Azure portal, configure the Notifications settings.
3. From Password reset in the Azure portal, configure the Registration settings.
4. Run Microsoft Entra Connect and select Device writeback.
5. Run Microsoft Entra Connect and select Password writeback.
Correct Answer: 1. From Password reset in the Azure portal, configure the Authentication methods settings. and 5. Run Microsoft Entra Connect and select Password writeback.
8. You have a Microsoft Entra tenant. You create a new user named User1. You need to assign a Microsoft 365 E5 license to User1.
Which user attribute should be configured for User1 before you can assign the license?
Select only one answer.
1. First name
2. Last name
3. Other email address
4. Usage location
5. User type
Correct Answer: 4. Usage location
9. Your Microsoft Entra tenant and on-premises Active Directory domain contain multiple users.
You need to configure self-service password reset (SSPR) password writeback functionality. The solution must minimize costs.
Which Microsoft Entra ID edition should you use?
Select only one answer.
1. Microsoft Entra ID Free
2. Microsoft Entra ID P1
3. Microsoft Entra ID P2
Correct Answer: 2. Microsoft Entra ID P1
.png&description=Top Azure 104 Certification Renewal Questions Answered: The Ultimate cheat Sheet Set 1){kind=link}