Microsoft Azure Administrator: AZ-104

Correct Answer: E

Owner: An owner can configure peering.

A Global administrator can configure peering.

Network Contributor:

The accounts you use to work with virtual network peering must be assigned to the following roles:

1.

Network Contributor: For a virtual network deployed through Resource Manager.

2.

Classic Network Contributor: For a virtual network deployed through the classic deployment model.

Reference:

https://docs.microsoft.com/en-us/azure/cloud-adoption-framework/govern/resource- consistency/governance-multiple-teams

Correct Answer: D

You can use either a CNAME record or an A record to map a custom DNS name to App Service.

Reference: https://docs.microsoft.com/en-us/Azure/app-service/app-service-web-tutorial-custom-domain

Correct Answer: A

In order to read secrets from a key vault, you need to have a vault created and give your app permission to access it.

Create a key vault by following the Key Vault quickstart.

Create a managed identity for your application.

Key vault references use the app's system-assigned identity by default, but you can specify a user-assigned identity.

Authorize read access to secrets your key vault for the managed identity you created earlier. How you do it depends on the permissions model of your key vault:

Azure role-based access control: Assign the Key Vault Secrets User role to the managed identity. For instructions, see Provide access to Key Vault keys, certificates, and secrets with an Azure role-based access control. Vault access policy:

Assign the Get secrets permission to the managed identity. For instructions, see Assign a Key Vault access policy.

https://learn.microsoft.com/en-us/azure/app-service/app-service-key-vault-references?tabs=azure-cli