{"id":3403,"date":"2021-11-05T15:37:46","date_gmt":"2021-11-05T07:37:46","guid":{"rendered":"https:\/\/blog.spotodumps.com\/?p=3403"},"modified":"2021-11-05T15:37:46","modified_gmt":"2021-11-05T07:37:46","slug":"free-valid-microsoft-az-304-practice-exam-questions-answers-spoto","status":"publish","type":"post","link":"https:\/\/blog.spotodumps.com\/index.php\/2021\/11\/05\/free-valid-microsoft-az-304-practice-exam-questions-answers-spoto\/","title":{"rendered":"Free & Valid Microsoft AZ-304 Practice Exam Questions & Answers! SPOTO"},"content":{"rendered":"

If you’re looking to advance your abilities and gain certification as an Azure Solutions Architect, the AZ-304<\/a> is a great option. There are two main instances in which this qualification would be very beneficial to you.<\/p>\n

\"\"<\/a><\/p>\n

\"\"<\/a><\/p>\n

Question 1<\/strong>
\nYou need to create an Azure Storage account that uses a custom encryption key.
\nWhat do you need to implement the encryption?
\nA. a certificate issued by an integrated certification authority (CA) and stored in Azure Key Vault
\nB. a managed identity that is configured to access the storage account
\nC. an Azure Active Directory Premium subscription
\nD. an Azure key vault in the same Azure region as the storage account<\/p>\n

Answer :<\/strong> A<\/p>\n

 <\/p>\n

Question 2<\/strong>
\nHOTSPOT –
\nYou plan to create an Azure environment that will have a root management group and five child management groups. Each child management group will contain five Azure subscriptions. You plan to have between 10 and 30 resource groups in each subscription.
\nYou need to design a solution for the planned environment. The solution must meet the following requirements:
\nPrevent users who are assigned the Owner role for the subscriptions from deleting the resource groups from their respective subscription.<\/p>\n

 <\/p>\n

\u2711 Ensure that you can update RBAC role assignments across all the subscriptions and resource groups.
\n\u2711 Minimize administrative effort.
\nWhat should you include in the solution? To answer, select the appropriate options in the answer area.
\nNOTE: Each correct selection is worth one point.
\nHot Area:<\/p>\n

\"image-1\"<\/p>\n

Answer :<\/strong><\/p>\n

\"image-2\"<\/p>\n

Question 3<\/strong>
\nYour company has the divisions shown in the following table.<\/p>\n

\"image-3\"<\/p>\n

Sub1 contains an Azure web app that runs an ASP.NET application named App1. App1 uses the Microsoft identity platform (v2.0) to handle user authentication.
\nUsers from east.contoso.com can authenticate to App1.
\nYou need to recommend a solution to allow users from west.contoso.com to authenticate to App1.
\nWhat should you recommend for the west.contoso.com Azure AD tenant?
\nA. a conditional access policy
\nB. pass-through authentication
\nC. guest accounts
\nD. an app registration<\/p>\n

Answer :<\/strong> D<\/p>\n

 <\/p>\n

Question 4<\/strong>
\nYou have an Azure Active Directory (Azure AD) tenant named contoso.com that has a security group named Group1. Group1 is configured for assigned membership. Group1 has 50 members, including 20 guest users.
\nYou need to recommend a solution for evaluating the membership of Group1. The solution must meet the following requirements:
\n\u2711 The evaluation must be repeated automatically every three months.
\n\u2711 Every member must be able to report whether they need to be in Group1.
\n\u2711 Users who report that they do not need to be in Group1 must be removed from Group1 automatically.
\n\u2711 Users who do not report whether they need to be in Group1 must be removed from Group1 automatically.
\nWhat should you include in the recommendation?
\nA. Change the Membership type of Group1 to Dynamic User.
\nB. Implement Azure AD Privileged Identity Management.
\nC. Implement Azure AD Identity Protection.
\nD. Create an access review.<\/p>\n

Answer :<\/strong> A<\/p>\n

 <\/p>\n

Question 5<\/strong>
\nYour company purchases an app named App1.
\nYou need to recommend a solution to ensure that App1 can read and modify access reviews.
\nWhat should you recommend?
\nA. From API Management services, publish the API of App1, and then delegate permissions to the Microsoft Graph API.
\nB. From the Azure Active Directory admin center, register App1. From the Access control (IAM) blade, delegate permissions.
\nC. From the Azure Active Directory admin center, register App1, and then delegate permissions to the Microsoft Graph API.
\nD. From API Management services, publish the API of App1. From the Access control (IAM) blade, delegate permissions.<\/p>\n

Answer :<\/strong> B<\/p>\n

 <\/p>\n

\"\"<\/a><\/p>\n

 <\/p>\n

Question 6<\/strong>
\nYou have 200 resource groups across 20 Azure subscriptions.
\nYour company\u05d2\u20ac\u2122s security policy states that the security administrator must verify all assignments of the Owner role for the subscriptions and resource groups once a month. All assignments that are not approved by the security administrator must be removed automatically. The security administrator must be prompted every month to perform the verification.
\nWhat should you use to implement the security policy?
\nA. Identity Secure Score in Azure Security Center
\nB. Access reviews in Identity Governance
\nC. the user risk policy in Azure Active Directory (Azure AD) Identity Protection
\nD. role assignments in Azure Active Directory (Azure AD) Privileged Identity Management (PIM)<\/p>\n

Answer :<\/strong> B<\/p>\n

 <\/p>\n

Question 7<\/strong>
\nNote: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
\nAfter you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
\nYour company has deployed several virtual machines (VMs) on-premises and to Azure. Azure ExpressRoute has been deployed and configured for on-premises to Azure connectivity.
\nSeveral VMs are exhibiting network connectivity issues.
\nYou need to analyze the network traffic to determine whether packets are being allowed or denied to the VMs.
\nSolution: Use Azure Network Watcher to run IP flow verify to analyze the network traffic.
\nDoes the solution meet the goal?
\nA. Yes
\nB. No<\/p>\n

Answer :<\/strong> A<\/p>\n

 <\/p>\n

Question 8<\/strong>
\nNote: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
\nAfter you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
\nYour company has deployed several virtual machines (VMs) on-premises and to Azure. Azure ExpressRoute has been deployed and configured for on-premises to Azure connectivity.
\nSeveral VMs are exhibiting network connectivity issues.
\nYou need to analyze the network traffic to determine whether packets are being allowed or denied to the VMs.
\nSolution: Use the Azure Advisor to analyze the network traffic.
\nDoes the solution meet the goal?
\nA. Yes
\nB. No<\/p>\n

Answer :<\/strong> B<\/p>\n

 <\/p>\n

Question 9<\/strong><\/p>\n

You have 500 Azure web apps in the same Azure region. The apps use a premium Azure key vault for authentication.
\nA developer reports that some authentication requests are being throttled.
\nYou need to recommend a solution to increase the available throughput of the key vault. The solution must minimize costs.
\nWhat should you recommend?
\nA. Change the pricing tier.
\nB. Configure geo-replication.
\nC. Configure load balancing for the apps.
\nD. Increase the number of key vaults in the subscription.<\/p>\n

Answer :<\/strong> D<\/p>\n

 <\/p>\n

Question 10<\/strong>
\nHOTSPOT –
\nYou have an Azure Active Directory (Azure AD) tenant.
\nYou plan to use Azure Monitor to monitor user sign-ins and generate alerts based on specific user sign-in events.
\nYou need to recommend a solution to trigger the alerts based on the events.
\nWhat should you include in the recommendation? To answer, select the appropriate options in the answer area.
\nNOTE: Each correct selection is worth one point.
\nHot Area:<\/p>\n

\"image-4\"<\/p>\n

 <\/p>\n

Answer :<\/strong><\/p>\n

\"image-5\"<\/p>\n

 <\/p>\n

Conclusion<\/strong><\/h2>\n

SPOTO dumps<\/a> will be the most beneficial option for people who need aid with their preparation. When you take the SPOTO Dumps Exam using our Verified Exam Questions, you\u2019ll notice that every question on the test matches to the SPOTO Dumps.<\/p>\n

\"\"<\/a><\/p>\n

Latest SPOTO Candidates Pass Feedback<\/strong><\/h2>\n