AMAADOR ACADEMYالشهاداتالتحقق من شهادة

PRO-AZ104

الاختبار النهائي — مسؤول مايكروسوفت أزور AZ-104 (تحضير الامتحان)

أجب عن الأسئلة الـ55. تحتاج إلى 80% أو أكثر للنجاح. يمكنك إعادة المحاولة كلما أردت.

هذا الاختبار النهائي متاح بـالإنجليزية.

ادرس الدورة ←

السؤال 1You need 50 new employees to be able to reset their own passwords without contacting the help desk. The reset must require two verification methods. Which Microsoft Entra ID feature should you configure, and what is the minimum required for the reset?
السؤال 2Your organization uses dynamic membership groups. You want a group to automatically include every user whose department attribute equals 'Sales'. Which membership rule syntax is correct?
السؤال 3A device must be registered in Microsoft Entra ID so corporate users can sign in with their organizational accounts and the device is fully managed and joined to the cloud directory (no on-premises AD). Which join type should you use?
السؤال 4You must grant a contractor temporary read-only access to all resources in a single resource group, with no ability to modify or delete anything. Which built-in RBAC role assigned at the resource group scope is most appropriate?
السؤال 5A storage account holds blobs that are accessed frequently for the first 30 days, rarely between 30 and 90 days, and not at all after 90 days but must be retained. You want to minimize cost automatically. What should you configure?
السؤال 6You configured Azure File Sync. After syncing, you notice that frequently accessed files remain on the local Windows server while rarely used files become tiered pointers in the cloud. Which feature provides this behavior?
السؤال 7You must grant an external partner time-limited access to download a single blob without sharing your storage account keys, and the access must expire in 24 hours. Which approach best meets this requirement?
السؤال 8You need to run a single, short-lived containerized batch job that starts quickly, requires no orchestration, and bills only for the seconds it runs. Which Azure service is the best fit?
السؤال 9An AKS cluster's application pods need more compute as load grows, automatically adding worker nodes when pods cannot be scheduled due to insufficient resources. Which AKS feature should you enable?
السؤال 10You host several web apps on a single App Service plan. One app suddenly needs far more CPU and memory than the others, and you want to isolate it so its scaling does not affect the rest. What should you do?
السؤال 11You want to deploy a new version of a web app to a non-production endpoint, validate it, then swap it into production with no downtime and the ability to roll back instantly. Which App Service feature should you use?
السؤال 12You need to distribute inbound traffic across three VMs in the same region using a layer-4 (TCP/UDP) service that supports a public frontend IP and health probes, at the lowest cost. Which service should you choose?
السؤال 13Your web application must route incoming HTTPS requests to different backend pools based on the URL path (for example, /images to one pool and /api to another) and provide a web application firewall. Which service supports both?
السؤال 14You must direct users to the geographically closest of several regional endpoints using DNS-based routing, with automatic failover if an endpoint becomes unhealthy. Which Azure service provides this?
السؤال 15A new employee must be a member of the 'Sales' group, but the group is assigned (static) membership. The user already exists. What is the correct way to add them?
السؤال 16Your company uses Azure AD Connect to synchronize on-premises identities. You need passwords to be validated against on-premises Active Directory at sign-in without deploying ADFS, and without storing password hashes in the cloud. Which authentication method should you use?
السؤال 17An Azure Files SMB share must be accessible only from a specific virtual network and never over the public internet. Which combination achieves this?
السؤال 18You deployed an internal-only application across three backend VMs and need a layer-4 load balancer reachable only from inside the virtual network (no public IP). Which configuration meets this need?
السؤال 19An Application Gateway sits in front of a backend pool, but the health probe reports all backend instances as unhealthy even though the app responds on the VMs directly. Which is the most likely cause to investigate first?
السؤال 20You need to grant a team the ability to manage virtual machines in a single resource group, but they must not be able to assign roles to other users. Which built-in RBAC role should you assign at the resource group scope?
السؤال 21An organization has 50 subscriptions and wants to apply a single Azure Policy that enforces allowed resource locations across all of them, including any future subscriptions. Where should the policy be assigned?
السؤال 22A resource group contains a production SQL database. You must prevent anyone, including subscription owners, from deleting it, while still allowing configuration changes. Which lock should you apply?
السؤال 23You want to track Azure spending by department and have costs automatically grouped in Cost Management reports. What is the recommended approach?
السؤال 24You need to deploy three VMs that must remain available during planned Azure datacenter maintenance and unplanned hardware failures within a single datacenter, without using multiple zones. What should you place them in?
السؤال 25A VM was created in an availability set. You later realize you want zone-level resiliency instead. What must you do?
السؤال 26You need a managed disk for a database workload that requires consistent high IOPS and the lowest latency. Which disk type should you choose?
السؤال 27You are deploying a VM and want to standardize on a specific configuration of OS, installed software, and settings for repeatable deployments across regions. What should you use?
السؤال 28Two VNets in the same region are peered. VMs in VNet A cannot reach VMs in VNet B even though peering shows Connected. What is the most likely cause?
السؤال 29You are designing the address space for a VNet of 10.10.0.0/16 and need a subnet that supports approximately 250 usable hosts. Which subnet prefix is most appropriate?
السؤال 30You must connect an on-premises datacenter to an Azure VNet over an encrypted tunnel across the public internet, with the lowest cost. Which service should you deploy?
السؤال 31A company requires a private, dedicated, high-bandwidth connection to Azure that does not traverse the public internet and offers an SLA. Which option meets these needs?
السؤال 32You need to provide name resolution within an Azure VNet for custom domain records and resolve private endpoints, without managing your own DNS servers. What should you use?
السؤال 33An enterprise has many branch offices and multiple VNets across regions and wants a hub-and-spoke transit network managed centrally by Microsoft with optimized any-to-any connectivity. Which service is designed for this?
السؤال 34You want all resources in a subscription to automatically inherit a tag named environment with the value production if it is missing at creation time. Which Azure Policy effect should the policy use?
السؤال 35You created a VPN Gateway but on-premises traffic cannot reach a specific subnet that hosts the gateway. Which dedicated subnet is required for the VPN Gateway to function?
السؤال 36A subscription owner accidentally moved a VM to a new resource group and now wants to apply governance so that only approved VM SKUs can be deployed going forward. Which tool enforces allowed SKUs at deployment?
السؤال 37You peer VNet A (hub) with VNet B and VNet C (spokes). VNet B needs to reach VNet C, but they are not peered directly. What must you configure on the hub peerings to enable spoke-to-spoke traffic through the hub?
السؤال 38You need to grant a partner read-only access to a single blob container for 7 days without sharing your account keys. What should you create?
السؤال 39Your storage account uses GRS. You want read access to data in the secondary region even when the primary is available. Which redundancy option do you change to?
السؤال 40After you rotate the storage account's key1, applications using a SAS token signed with key1 stop working. Why?
السؤال 41You must ensure a storage account can only be reached from a specific VNet subnet and not the public internet. What do you configure?
السؤال 42A Virtual Machine Scale Set must add instances when average CPU exceeds 70% for 10 minutes. What do you configure?
السؤال 43You want every new VM in a scale set to automatically run a configuration script at provisioning. Which mechanism do you use?
السؤال 44A scale set is set to manual scale with 4 instances. You change capacity to 2. What happens to the application?
السؤال 45You want to securely RDP to VMs that have no public IP, without deploying a jump box. Which service do you deploy?
السؤال 46Two NSGs apply to traffic to a VM: one on the subnet and one on the NIC. A rule on the subnet denies port 3389 but the NIC NSG allows it for inbound. What is the result?
السؤال 47You want to write NSG rules referencing groups of VMs (e.g., web tier, db tier) instead of explicit IPs. What should you use?
السؤال 48You need centralized, stateful outbound filtering with FQDN and threat intelligence rules across multiple VNets. Which service fits?
السؤال 49You want to access an Azure SQL Database over a private IP from your VNet, keeping traffic off the public internet. What do you configure?
السؤال 50You must be alerted when a VM's average CPU exceeds 90% over 5 minutes and trigger an email. What do you create in Azure Monitor?
السؤال 51You need to run KQL queries across logs collected from many VMs and resources. Where must those logs be sent?
السؤال 52You want to protect Azure VMs with scheduled backups and retention managed centrally. Which resource do you use?
السؤال 53Your DR plan requires replicating Azure VMs to a secondary region with orchestrated failover. Which service do you configure?
السؤال 54You enabled soft delete and want a deleted Azure VM backup to still be recoverable. Where is the recovery point retained?
السؤال 55You want a single alert that fires when a custom log query returns more than 5 errors in 15 minutes. Which alert type do you use?