AZ-104 Official Practice Test – Part 4

Welcome to the AZ-104 Official Practice Test – Part 4.

In this part, I have given my detailed explanations of the 10 official questions from Microsoft. Unlike on the Microsoft website, the explanations include screenshots to help you prepare for the AZ-104 exam.

That said, these tests are very simple, and they should only be used to brush up on the basics. The real exam would rarely be this easy. To get more rigorous practice and even in-depth knowledge, check out my AZ-104 practice tests.

Once done, check out the AZ-104 questions Part -5 and the accompanying AZ-104 Practice Test video.

An Azure Container app can have multiple containers. The sidecar containers work in tandem with the main container providing additional functionality and services. For example, you can have a sidecar container that runs a background process to refresh a cache used by the primary app container in a shared volume.

A very similar requirement is given in the question. So, Option D is the correct answer.

Reference Link:https://learn.microsoft.com/en-us/azure/container-apps/containers#sidecar-containers

The init containers prepare the environment for the main container to start its execution. They handle tasks such as fetching data or performing one-time setup actions. Option B is incorrect.

Reference Link:https://learn.microsoft.com/en-us/azure/container-apps/containers#init-containers

---

Since we need to create a job, not start a job, we can ignore options C and D.

Reference Link: https://learn.microsoft.com/en-us/azure/container-apps/jobs

There are three types of job triggers: Manual, Schedule, and Event. Since we need to create a job that performs a task when a new message is added to a queue, the job trigger type will be Event. Option A is the correct answer.

Reference Link: https://learn.microsoft.com/en-us/azure/container-apps/jobs

---

An A record maps a domain name to an IP address. A CNAME record maps a domain name to another domain name.

For web apps, you create a CNAME that maps the first domain name users see in the browser to the second domain name to look up the address. For example, here I mapped the custom domain www.testusers.org to the azurewebsites.net domain name provided by Azure App Service.

If the IP address change, only the A record needs to be updated. A CNAME is still valid. Option B is the correct answer.

Reference Link: https://learn.microsoft.com/en-us/training/modules/configure-azure-app-services/8-create-custom-domain-names

---

The SAS token that you generate has several required and optional parameters.

For example, the SignedServices (ss) is a required parameter that specifies the signed services that are accessible with the account SAS. Since we selected only Blob and File as Allowed services, the value of ss is bf.

The SignedResourceTypes (srt) is also a required parameter that specifies the resource types that are accessible with the account SAS. Since we selected only Container as the Allowed resource types, the value of srt is c.

The SignedPermissions (sp) is also a required parameter that specifies the permissions available with the SAS. Since we selected only Read and Write permissions, the value of sp is rw.

If you continue the analysis, you will realize that the SAS token is a mix of both required and optional parameters.

Of the given options, only SignedResourceTypes and SignedServices are required. SignedIP and SignedStart are optional parameters. Option B and C are the correct answers.

Reference Link: https://learn.microsoft.com/en-us/rest/api/storageservices/create-account-sas#specify-the-account-sas-parameters

---

Data Lake Storage capabilities are supported in either the Standard general-purpose v2 storage account or the Premium block blob storage account.

To unlock Data Lake Storage capabilities in these types of storage accounts, select the Enable hierarchical namespace checkbox in the Advanced tab.

Reference Link: https://learn.microsoft.com/en-us/azure/storage/blobs/create-data-lake-storage-account#choose-a-storage-account-type

---

Zone-redundant storage replicates your storage account synchronously across three Azure availability zones in the primary region. Option D is the correct answer.

Reference Link: https://learn.microsoft.com/en-us/azure/storage/common/storage-redundancy#zone-redundant-storage

None of the other storage redundancies replicate the data across availability zones. LRS replicates your data within a single data center.

Reference Link: https://learn.microsoft.com/en-us/azure/storage/common/storage-redundancy#locally-redundant-storage

And GRS replicates the data to a secondary region.

Reference Link: https://learn.microsoft.com/en-us/azure/storage/common/storage-redundancy#geo-redundant-storage

---

You can configure a time-based immutable policy in your storage account and set the Retention interval to 180 days.

This ensures that the content in the container can be created, but not modified or deleted for the retention duration.

Reference Link: https://learn.microsoft.com/en-us/azure/storage/blobs/immutable-storage-overview

Option D is the correct answer.

Change feed provides transaction logs of all the changes that occur to the blobs in your storage account.

Option C is incorrect.

Reference Link: https://learn.microsoft.com/en-us/azure/storage/blobs/storage-blob-change-feed

Lifecycle management offers a rule-based policy to transition your data to other access tiers (hot, cold, archive) at the end of the data’s lifecycle. Option B is incorrect.

Reference Link: https://learn.microsoft.com/en-us/azure/storage/blobs/lifecycle-management-policy-configure

An Azure role, whether custom or in-built will grant/block certain permissions when assigned to the user. Although assigning a custom role to users can ensure certain behavior, you cannot set any retention period for a custom role.

Reference Link: https://learn.microsoft.com/en-us/azure/role-based-access-control/custom-roles

---

To ensure the file share can support large files, use the Set-AzStorageAccount command with the EnableLargeFileShare parameter.

Reference Link: https://learn.microsoft.com/en-us/powershell/module/az.storage/set-azstorageaccount#-enablelargefileshare

Option B is one of the correct answers.

The New-AzRmStorageShare command creates a new file share. Per the question, we need to increase the capacity of the existing file share. So, we do not need to create a new file share. Option A is incorrect.

Reference Link: https://learn.microsoft.com/en-us/powershell/module/az.storage/new-azrmstorageshare

We can increase the storage capacity of the file share up to 100 TiB using the command Update-AzRmStorageShare. Option D is the other correct answer.

Reference Link: https://learn.microsoft.com/en-us/powershell/module/az.storage/update-azrmstorageshare

There is no need to change the storage redundancy of the storage account to Read Access GRS. Option C is incorrect.

---

Even without knowing many PowerShell commands, questions like these can be easy to answer. A PowerShell command is composed of verbs like New, Add, etc., The verb New creates a new resource. The verb Add adds a resource to an existing resource or container.

Reference Link: https://learn.microsoft.com/en-us/powershell/scripting/developer/cmdlet/approved-verbs-for-windows-powershell-commands#new-vs-add

So, to upload a virtual hard disk from an on-premises machine to Azure, use the Add-AzVhd PowerShell command.

Reference Link: https://learn.microsoft.com/en-us/powershell/module/az.compute/add-azvhd

https://learn.microsoft.com/en-us/azure/virtual-machines/windows/disks-upload-vhd-to-managed-disk-powershell#use-add-azvhd-1

Option A is the correct answer.

The PowerShell command New-AzVM is used to create a new virtual machine. Option D is incorrect.

Reference Link: https://learn.microsoft.com/en-us/powershell/module/az.compute/new-azvm

The PowerShell command New-AzDisk is used to create a managed disk. Option C is incorrect.

Reference Link: https://learn.microsoft.com/en-us/powershell/module/az.compute/new-azdisk

The PowerShell command New-AzDataShare creates an Azure data share within an existing data share account. Option B is incorrect.

Reference Link: https://learn.microsoft.com/en-us/powershell/module/az.datashare/new-azdatashare

---

You can create a Shared access signature with specific access to specific services in a storage account. You can also set when the access ends for the user using the SAS

Option A is the correct answer.

You cannot automatically expire access key access after 24 hours. All you can do is rotate the key manually, which is not a great solution. Option B is incorrect.

---

Check out my AZ-104 practice tests (with discount code).

Follow Me to Receive Updates on the AZ-104 Exam

• youtube channel ravikirans
• facebook page ravikirans
• linkedin page ravikirans

---

Want to be notified as soon as I post? Subscribe to the RSS feed / leave your email address in the subscribe section. Share the article to your social networks with the below links so it can benefit others.

Share the AZ-104 Tests in Your Network