AZ-104-KR 무료 덤프문제 온라인 액세스

다음 그림에 표시된 사용자 정의 역할을 구성합니다.

그래픽에 제시된 정보를 바탕으로 각 문장을 완성하는 답변 선택을 선택하려면 드롭다운 메뉴를 사용하세요.
참고: 정답 1개당 1점입니다.

정답:

Explanation:
To ensure users can sign in to virtual machines that are assigned role1, modify the actions section.
To ensure that role1 can be assigned only to a resource group named RG1, modify the assignableScopes section.
In Azure Role-Based Access Control (RBAC), a custom role defines a collection of permissions that specify what actions a user or service principal can perform and the scope to which these permissions apply. The JSON definition of a custom role contains key properties including:
* actions: Lists the management operations permitted (e.g., "Microsoft.Compute/virtualMachines/*" allows control over VMs).
* notActions: Explicitly denies certain operations that would otherwise be allowed.
* dataActions: Lists operations on data within a resource (e.g., blob reads/writes).
* assignableScopes: Defines the scopes (subscriptions, resource groups, or resources) where the custom role can be assigned.
According to Microsoft Azure Administrator documentation, if you want to ensure that users assigned a role can sign in to virtual machines, you must include the appropriate sign-in permissions in the actions section.
Specifically, you would add:
"Microsoft.Compute/virtualMachines/login/action"
This grants sign-in access to the VM via Azure RBAC.
Furthermore, if you want to restrict the scope of where the custom role can be assigned - for example, to a specific resource group like RG1 - you must define that restriction within the assignableScopes section. For example:
"assignableScopes": [
"/subscriptions/{subscriptionId}/resourceGroups/RG1"
]
This ensures that the custom role is only visible and assignable within that resource group, preventing assignments at subscription or management group levels.
These definitions align with official Microsoft RBAC schema guidelines described in Azure Role Definitions and Custom Roles Overview for Azure Resource Manager.

contoso.com이라는 Azure Directory(Azure AD) 테넌트가 포함된 Azure 구독이 있습니다.
테넌트는 온-프레미스 Active Directory 도메인과 동기화됩니다. 해당 도메인에는 다음 표에 표시된 사용자가 포함되어 있습니다.

모든 사용자에 대해 셀프 서비스 비밀번호 재설정(SSPR)을 활성화하고 SSPR이 다음 인증 방법을 사용하도록 구성합니다.
재설정에 필요한 방법 수: 2
사용자에게 제공되는 방법: 휴대폰, 보안 질문
등록에 필요한 질문 수: 3
재설정에 필요한 질문 수: 3
다음 보안 질문을 선택하세요:
당신이 가장 좋아하는 음식은 무엇입니까?
첫 직장은 어느 도시였나요?
당신의 첫 번째 애완동물의 이름은 무엇이었나요?
다음 각 문장에 대해, 문장이 사실이라면 '예'를 선택하세요. 그렇지 않으면 '아니요'를 선택하세요.
참고: 정답 하나당 1점입니다.

정답:

Explanation:
No, No, Yes
In Microsoft Azure Active Directory (Azure AD), the Self-Service Password Reset (SSPR) feature allows users to securely reset their passwords using preconfigured authentication methods. The configuration in this scenario specifies:
* Number of methods required to reset: 2
* Available methods: Mobile phone and Security questions
* Number of questions required to register: 3
* Number of questions required to reset: 3
However, the key detail lies in the user types and roles involved:
* SecAdmin1 (Security Administrator) and BillAdmin1 (Billing Administrator) are Azure AD administrators.
* Azure AD documentation explicitly states that administrative accounts (users with Azure AD admin roles such as Global Administrator, Security Administrator, Billing Administrator, or other privileged roles) cannot use security questions as an authentication method for SSPR.
* Admins are required to use stronger methods, such as phone, email, or app-based authentication (MFA-enabled).
* Therefore, both SecAdmin1 and BillAdmin1 will not use security questions for password reset.
* User1 (Reports reader) is a standard user, not an administrator.
* Standard users can use security questions as one of their authentication methods.
* Since security questions are enabled and three questions are required to reset the password, User1 must answer all three - including "What was the name of your first pet?" Thus, according to Azure AD SSPR policy as covered in the Microsoft Learn AZ-104 study guide and official documentation under "Self-service password reset for administrators" and "Authentication methods in Azure Active Directory", only non-administrative users can use security questions for SSPR.

다음 표에는 App Service 계획이 나와 있습니다.

다음 표에 표시된 Azure 웹앱을 만들 계획입니다.

웹 앱에 사용할 수 있는 App Service 플랜을 파악해야 합니다.
무엇을 파악해야 할까요? 답변하려면 답변 영역에서 적절한 옵션을 선택하세요.
참고: 정답 하나당 1점입니다.

정답:

Explanation:

In Azure App Service, a Web App must be hosted in an App Service Plan (ASP) that meets three key compatibility conditions:
The App Service Plan and the Web App must be in the same region.
The operating system (Windows or Linux) of the App Service Plan must match the Web App type.
The runtime stack of the Web App must be supported on the App Service Plan's OS.
Let's apply these rules to the scenario:
# App Service Plans:
Name
Operating System
Location
ASP1
Windows
West US
ASP2
Windows
Central US
ASP3
Linux
West US
# Web Apps:
Name
Runtime Stack
Location
WebApp1
NET Core 3.0
West US
WebApp2
ASP.NET 4.7
West US
1## WebApp1 (.NET Core 3.0, West US)
Region requirement: Must use an App Service Plan in West US # # ASP1 and ASP3 qualify.
Runtime requirement: .NET Core 3.0 supports both Windows and Linux App Service Plans.
(Microsoft Learn: ".NET Core apps can run on both Windows and Linux App Service plans.")
# Therefore, WebApp1 can use ASP1 (Windows, West US) or ASP3 (Linux, West US).
# Answer: ASP1 and ASP3 only
2## WebApp2 (ASP.NET 4.7, West US)
Region requirement: Must be in West US # # ASP1 and ASP3 qualify.
Runtime requirement: ASP.NET 4.7 is a Windows-only framework; it cannot run on Linux App Service Plans.
(Microsoft Learn: "ASP.NET (non-Core) apps require a Windows-based App Service Plan.")
# Therefore, only ASP1 (Windows, West US) is compatible.
# Answer: ASP1 only
# Final Verified Answers:
Web App
Compatible App Service Plans
WebApp1
ASP1 and ASP3 only
WebApp2
ASP1 only
Microsoft Documentation Extract (Azure App Service):
"App Service plans must be in the same region as the web app."
"Windows App Service plans host ASP.NET, .NET Core, and Node.js apps."
"Linux App Service plans host .NET Core, Node.js, Python, PHP, Java, and custom containers."
".NET Framework (ASP.NET 4.x) applications can only run on Windows-based App Service plans." Hence, the verified and Microsoft-official answer is:
# WebApp1 # ASP1 and ASP3 only
# WebApp2 # ASP1 only

다음 표에는 Azure 가상 네트워크가 나와 있습니다.

VNet1에서 어떤 가상 네트워크에 피어링 연결을 설정할 수 있나요?

• A.VNet2전용
• B.VNet2 및 VNet3만 해당
• C.VNet2, VNet3 및 VNet4
• D.VNet3 및 VNet4만 해당

미국 서부 Azure 지역에 여러 개의 가상 머신이 포함된 Azure 구독이 있습니다.
가상 머신 트래픽을 모니터링하려면 Azure Network Watcher의 트래픽 분석을 사용해야 합니다.
어떤 두 가지 리소스를 만들어야 할까요? 각 정답은 해결책의 일부를 제시합니다.
참고: 정답 하나당 1점입니다.

• A.Log Analytics 작업 공간
• B.Microsoft Sentinel 작업 공간
• C.Azure Monitor 통합 문서
• D.Azure Monitor의 데이터 수집 규칙(OCR)
• E.저장 계정