Instant Access Microsoft.AZ-104.v2026-05-15.q807 Actual Practice Test Engine for Free (Page 4)

40%off

AZ-104 Premium Dumps

Latest AZ-104 Exam Premium Dumps provide by TrainingQuiz.com to help you Passing AZ-104 Exam! TrainingQuiz.com offers the updated AZ-104 exam dumps, the TrainingQuiz.com AZ-104 exam questions has been updated to correct Answer. Get the latest TrainingQuiz.com AZ-104 pdf dumps with Exam Engine here:

(832 Q&As Dumps, 40%OFF Special Discount: DumpsDB)

Question 11

You have an Azure virtual machine that runs Windows Server 2019 and has the following configurations:
* Name: VM1
* Location: West US
* Connected to: VNET1
* Private IP address: 10.1.0.4
* Public IP address: 52.186.85.63
* DNS suffix in Windows Server: Adatum.com
You create the Azure DNS zones shown in the following table.

You need to identify which DNS zones you can link to VNET1 and the DNS zones to which VM1 can automatically register.
Which zones should you identify? To answer, select the appropriate options in the answer area.

Question 12

You have an Azure Active Directory (Azure AD) tenant named adatum.com. Adatum.com contains the groups in the following table.

You create two user accounts that are configured as shown in the following table.

To which groups do User1 and User2 belong? To answer. select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Question 13

You plan to move a distributed on-premises app named App1 to an Azure subscription.
After the planned move, App1 will be hosted on several Azure virtual machines.
You need to ensure that App1 always runs on at least eight virtual machines during planned Azure maintenance.
What should you create?

A.one virtual machine scale set that has 12 virtual machines instances
B.one Availability Set that has 10 update domains and one fault domain
C.one Availability Set that has three fault domains and one update domain
D.one virtual machine scale set that has 10 virtual machines instances

Question 14

You have the Azure virtual machines shown in the following table.

VNET1 is linked to a private DNS zone named contoso.com that contains the records shown in the following table.

You need to ping VM2 from VM1.
Which DNS names can you use to ping VM2?

A.comp2.contoso.com and comp4.contoso.com only
B.comp1.contoso.com, comp2.contoso.com, comp3.contoso.com, and comp4.contoso.com
C.comp2.contoso.com only
D.comp1.contoso.com and comp2.contoso.com only
E.comp1.contoso.com, comp2.contoso.com, and comp4.contoso.com only

Question 15

You have an Azure subscription that contains a storage account named storageacct1234 and two users named User1 and User2.
You assign User1 the roles shown in the following exhibit.

Which two actions can User1 perform? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.

A.View file shares in storageacct1234.
B.Upload blob data to storageacct1234.
C.Assign roles to User2 for storageacctl234.
D.View blob data in storageacctl234.
E.Modify the firewall of storageacct1234.

Correct Answer: B,D

n this scenario, User1 has two role assignments:
* Reader (Inherited from Resource Group scope)
* Scope: Resource Group (inherited)
* Permission type: Read-only access
* Allows User1 to view the configuration and properties of Azure resources within the resource group (including the storage account).
* However, it does not allow data operations, such as reading or writing blob contents.
* Storage Blob Data Contributor (Assigned at "This resource" level)
* Scope: storageacct1234 (this resource)
* Permission type: Data access for blob content
* Allows read, write, and delete operations on blob data in the storage account.
According to Microsoft Azure built-in roles documentation:
* Reader role: "View Azure resources but cannot make any changes."
* Storage Blob Data Contributor role: "Grants read, write, and delete permissions to Azure Storage blob containers and data." This means:
* User1 can upload blobs because the Storage Blob Data Contributor role provides write permissions.
* User1 can view blob data because the same role provides read access to blob content.
* User1 cannot assign roles (no RBAC management rights, as the role doesn't include Microsoft.
Authorization/* actions).
* User1 cannot modify the firewall or network settings of the storage account - those actions require Contributor or Owner roles at the management plane level.
* User1 can view file shares under the storage account metadata due to Reader access but cannot access data within them because that requires Storage File Data SMB Share Reader/Contributor permissions (different data plane).
# Final Verified Answers:
* B. Upload blob data to storageacct1234
* D. View blob data in storageacct1234
Summary (from Microsoft Role Documentation Extracts):
* Storage Blob Data Contributor = Can read/write/delete blob data (Data Plane)
* Reader = Can view Azure resource configuration (Management Plane)
* No permission to assign roles or modify security/firewall settings.