Exam AZ-104 All Questions

View all questions & answers for the AZ-104 exam

Exam AZ-104 topic 5 question 36 discussion

Actual exam question from Microsoft's AZ-104

Question #: 36
Topic #: 5

You have an Azure subscription named Subscription1. Subscription1 contains a virtual machine named VM1.
You have a computer named Computer1 that runs Windows 10. Computer1 is connected to the Internet.
You add a network interface named vm1173 to VM1 as shown in the exhibit. (Click the Exhibit tab.)

From Computer1, you attempt to connect to VM1 by using Remote Desktop, but the connection fails.
You need to establish a Remote Desktop connection to VM1.
What should you do first?

A. Change the priority of the RDP rule
B. Attach a network interface
C. Delete the DenyAllInBound rule
D. Start VM1

Show Suggested Answer

Suggested Answer: D 🗳️

by Raakezz at Dec. 5, 2020, 12:41 p.m.

Comments

Submit Cancel

prashantjoge

Highly Voted 4 years, 6 months ago

nevertheless a stupid question

upvoted 207 times

j777

3 years, 4 months ago

So, if you're so smart what are you doing on this site?

upvoted 40 times

GreenTick

5 months, 2 weeks ago

stupid reply.

upvoted 3 times

...

rupayan87

2 years, 7 months ago

I wonder how moderators approve these comments in the first place that has no value to add

upvoted 19 times

ki01

1 year, 6 months ago

the same way the approved about 100 comments on this exam from some guy telling to email him to get the "real questions" :). there is no moderation, there's probably just a hold to give the illusion that someone looks at these before "approving".

upvoted 6 times

...

Takloy

3 years, 6 months ago

The more stupid questions they give, the higher chances of passing the exam!

upvoted 53 times

JD908

2 years ago

If only the exam had mostly questions like "You'd like to start using Azure but you don't have a computer. You go out and buy a cat does this solve the issue?"

upvoted 19 times

Kalzonee3611

1 year, 8 months ago

YES (upvote correct answer) :D:D

upvoted 6 times

...

tgrimm

1 year, 12 months ago

LOL. Too funny!

upvoted 2 times

...

Codelawdepp

1 year, 10 months ago

Error number 1: Plug not inserted. As an administrator, you must also be capable of solving the simplest everyday puzzles and not assume others possess your own technical skills. ;-)

upvoted 5 times

...

mlantonis

Highly Voted 4 years, 1 month ago

Correct Answer: D Αny resource with a dynamically assigned public IP address will display the 'name' you gave it when the resource it is assigned to is offline. A static address will be shown regardless of the resource state. This means that we need to start the VM1. A: RDP rule has the highest priority. priority. B: The network interface has already been added to VM1. C: DenyAllInBound has really low priority. Reference: https://docs.microsoft.com/en-us/azure/virtual-network/security-overview

upvoted 180 times

alsmk2

10 months, 1 week ago

Great explanation, but seriously, what a daft question.

upvoted 3 times

...

Pupils

1 year, 1 month ago

Good Answer

upvoted 1 times

...

Allfreen

3 years, 4 months ago

Good Explanation

upvoted 3 times

...

nkhan19

2 years, 11 months ago

Excellent observation !

upvoted 2 times

...

Load full discussion...

...

[Removed]

Most Recent 8 months, 4 weeks ago

Selected Answer: D

D is correct

upvoted 1 times

...

c5ad307

1 year, 4 months ago

How do I even know if the VM is already started or not? No info is given. It's just the only answer that makes sense

upvoted 6 times

...

Cobster98

1 year, 12 months ago

It says is "running windows 10" which makes me believe the vm is started. Also, there is no mention of what subnet or network your computer is on, only that it has internet access, should there not be a public IP attached to this network interface??

upvoted 1 times

...

NaniCynic

2 years ago

VM does not work in O-F-F mode: Agree with answer D

upvoted 1 times

...

garmatey

2 years, 2 months ago

So what exactly is the "DenyAllInBound" rule doing?

upvoted 1 times

ki01

1 year, 6 months ago

exactly as it sounds. denies everything coming in. In general, it is desired that firewall would block everything that isn't approved. so the idea of that rule is that you create other rules with higher priority ( lower number) which allow specific traffic that you want. for example RDP and internet connections. when traffic comes in it gets evaluated from the top priority to bottom until a rule is found that allows it or denies it in particular. so if there is a rule to allow rdp at the top, the RDP traffic comes in, the NSG goes through the list, finds the RDP rule first and stops reading other rules because it already got a pass. vice versa if there wasnt an RDP rule, the NSG would check all of the rules until it reached DenyALL and deny the connection based on that. to put it simply, the denyall rule at the end is put in so you wouldn't have to type out a couple of hundred different ports that you want to block and instead would need to allow just a couple of ports that you do actually need

upvoted 2 times

...

Rams_84zO6n

2 years, 2 months ago

Selected Answer: D

"Computer1 is connected to the Internet." - that threw me off a bit. So it is configured to connect to internet but at this point is not actually connected to internet because it is not running? never mind. Only D seems the be best option compared to other options.

upvoted 1 times

...

morito

2 years, 3 months ago

Selected Answer: D

This question can be answered by rule of elimination: A. Change the priority of the RDP rule --> Priority is already lowest so no need B. Attach a network interface --> Question states its already attached so no need C. Delete the DenyAllInBound rule --> Obviously never to that, but it would also not solve this because it has lowest priority by default D. Start VM1 --> Remains as the only viable option

upvoted 7 times

...

_fvt

2 years, 5 months ago

Selected Answer: D

Correct Answer: D You need to stop the VM before attaching a network interface, so starting the VM is the first you should do after attaching it: https://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-network-interface-vm And anyways the other proposed answers are wrong: A: wrong: RDP rule is correct and have Higher Priority than the Deny one. B: wrong: We already have a network interface with a public IP attached and the correct NSG allowing RDP, adding another one will not solve our issue. C: wrong: You cannot delete a default rule, and this rule is a default one. And in all cases this rule have lower priority than the RDP one so not an issue.

upvoted 5 times

...

matejka

2 years, 7 months ago

It's really important to know that IP address is displayed as a name rather than numerical representation for a not running machine. A funny question indeed.

upvoted 7 times

MOSES3009

1 year, 7 months ago

if the Ip were static, was displayed, and you not know if VM is started or stopped. When IP is dynamic, it cannot be displayed, cause will be random assigned, WHEN VM is started. That is the indicator that the VM is stopped.

upvoted 1 times

...

EmnCours

2 years, 10 months ago

Selected Answer: D

Correct Answer: D

upvoted 1 times

...

Lazylinux

3 years ago

Selected Answer: D

D is correct

upvoted 1 times

...

atilla

3 years, 3 months ago

Selected Answer: D

for C , you cannot delete the given rules D is correct

upvoted 1 times

...

ron_azenkot

3 years, 5 months ago

look i am no expert but i am pretty sure that to use something you need to start it answer is d

upvoted 2 times

...

Sharathjogi

3 years, 5 months ago

Wow...common..question has to be like this :)

upvoted 1 times

...

TheBody

3 years, 6 months ago

This is not a question about knowing an obscure fact about whether a public IP address shows when a VM is on or off, it's a pure problem solving question. The RDP rule already has the highest priority so it can't be A or C. The question states the network interface has been added and that's shown in the exhibit so it can't be B. That leaves D. And if the virtual machine is not switched on then the symptom described(can't connect via RDP) would be present. Even in Azure checking that stuff is plugged in and turned on is a good first troubleshooting step.

upvoted 8 times

...

Load full discussion...