AZ-304 Practice Test

AZ-304 Practice Test practice questions, page 3 of 10, with answer review and explanations.

Question 11

You have an Azure subscription that contains 300 Azure virtual machines that run Windows Server 2019. You need to centrally monitor all warning events in the System logs of the virtual machines. What should you include in the solution? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

Question 12

You have an Azure SQL database named DB1 that contains multiple tables. You need to improve the performance of DB1. The solution must minimize administrative effort. What should you use?

  1. automatic tuning
  2. Azure Advisor
  3. Azure Monitor
  4. Query Performance Insight

Question 13

You need to recommend a solution to generate a monthly report of all the new Azure Resource Manager resource deployments in your subscription. What should you include in the recommendation?

  1. Azure Advisor
  2. Azure Analysis Services
  3. Azure Monitor action groups
  4. Azure Log Analytics

Question 14

Your company provides customer support for multiple Azure subscriptions and third-party hosting providers. You are designing a centralized monitoring solution. The solution must provide the following services: ✑ Collect log and diagnostic data from all the third-party hosting providers into a centralized repository. ✑ Collect log and diagnostic data from all the subscriptions into a centralized repository. ✑ Automatically analyze log data and detect threats. ✑ Provide automatic responses to known events. Which Azure service should you include in the solution?

  1. Azure Sentinel
  2. Azure Log Analytics
  3. Azure Monitor
  4. Azure Application Insights

Question 15

You are designing an Azure resource deployment that will use Azure Resource Manager templates. The deployment will use Azure Key Vault to store secrets. You need to recommend a solution to meet the following requirements: ✑ Prevent the IT staff that will perform the deployment from retrieving the secrets directly from Key Vault. ✑ Use the principle of least privilege. Which two actions should you recommend? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

  1. Create a Key Vault access policy that allows all get key permissions, get secret permissions, and get certificate permissions.
  2. From Access policies in Key Vault, enable access to the Azure Resource Manager for template deployment.
  3. Create a Key Vault access policy that allows all list key permissions, list secret permissions, and list certificate permissions.
  4. Assign the IT staff a custom role that includes the Microsoft.KeyVault/Vaults/Deploy/Action permission.
  5. Assign the Key Vault Contributor role to the IT staff.