AZ-104 Azure Administrator Associate Practice Questions

1100 exam-accurate questions with explanations

info

Free Sample Questions

Showing 10 of 1100 questions. Get full access to all questions, detailed explanations, and study materials.

Manage Azure identities and governance

Case study — project Falcon: Environment: test Primary constraint: minimize operational risk and avoid over-permissioning. Requirement: You need a governance hierarchy so that policy assignments apply to multiple subscriptions owned by Research. Which resource should you create?

A A virtual network peering

B A management group and place the subscriptions beneath it check_circle

C A storage account container

D An availability set

lightbulb

Explanation

Difficulty: Hard. Management groups allow governance settings such as policy and RBAC to inherit across subscriptions. Trap: A resource group exists inside a subscription and cannot govern multiple subscriptions.

Implement and manage storage

You are reviewing resources in rg-aurora-test-0985. The team wants a supportable solution with the smallest reasonable scope. Blobs are rarely accessed but must be retrieved immediately when requested. Which access tier is generally the best choice?

A Hot only

B Premium file share

C Archive

D Cool check_circle

lightbulb

Explanation

Difficulty: Medium. The Cool tier is intended for infrequently accessed data while keeping it online for immediate retrieval. Trap: Archive is offline and requires rehydration before data can be read.

Deploy and manage Azure compute resources

Security policy requires temporary disks and disk caches for vm-catalog-staging-1590 to be encrypted at the host. Which VM capability should you enable?

A Encryption at host check_circle

B Accelerated networking

C Boot diagnostics only

D Azure Bastion only

lightbulb

Explanation

Difficulty: Easy. Encryption at host encrypts data on the VM host, including temporary disks and disk caches. Trap: Disk encryption at the managed-disk layer alone does not specifically address host-side cache and temporary-disk encryption.

Implement and manage virtual networking

During a design review for project Falcon, the current configuration does not meet the operational requirement. You need Azure to host the public DNS zone for orders1767.contoso.com. Which Azure resource is required?

A A VM scale set

B A Recovery Services vault

C An Azure DNS public zone and the required records check_circle

D An NSG only

lightbulb

Explanation

Difficulty: Medium. Azure DNS public zones host authoritative DNS records for public domains after delegation is configured. Trap: An NSG filters traffic and cannot host DNS records.

Monitor and maintain Azure resources

The Platform team is preparing a production change for the analytics platform. The solution must meet the stated requirement without granting broader access than necessary. During a planned maintenance window, you want existing alert rules to continue evaluating but suppress notifications for resources in rg-summit-prod-1955. What is the best configuration?

A An alert processing rule check_circle

B A CanNotDelete resource lock

C A blob snapshot

D Delete every alert rule and recreate it later

lightbulb

Explanation

Difficulty: Medium. Alert processing rules can suppress or modify actions for alerts during maintenance without deleting the alert rules. Trap: Deleting alerts removes monitoring configuration and creates unnecessary rework.

Manage Azure identities and governance

Change request CHG-80883 applies to subscription sub-support-10. The implementation should use an Azure-native capability and avoid unnecessary administration. The Research department needs access to a resource group. Membership must automatically follow each user's department attribute. Which resource should you create?

A A Microsoft 365 group with assigned membership

B An administrative unit with assigned membership

C An Azure resource group with a tag

D A Microsoft Entra security group with dynamic user membership check_circle

lightbulb

Explanation

Difficulty: Medium. A dynamic Microsoft Entra security group can evaluate user attributes such as department and maintain membership automatically. Trap: An assigned group requires manual maintenance and does not satisfy the automatic-membership requirement.

Implement and manage storage

Users frequently overwrite blobs and need to restore an earlier value of the same blob. Which capability should you enable?

A An Azure Bastion host

B Public anonymous access

C A load balancer health probe

D Blob versioning check_circle

lightbulb

Explanation

Difficulty: Easy. Blob versioning automatically preserves previous versions when blobs are modified. Trap: Soft delete primarily handles deletion; versioning is the direct feature for overwritten blob content.

Deploy and manage Azure compute resources

While configuring the production environment, you review this requirement: A stateless web tier must automatically add and remove identically configured VM instances based on demand. Which Azure service is the best fit?

A A Recovery Services vault only

B A management group

C Azure Virtual Machine Scale Sets check_circle

D Azure Files snapshots

lightbulb

Explanation

Difficulty: Easy. VM scale sets manage groups of similar VM instances and support autoscaling. Trap: Availability sets improve resilience but do not automatically scale the number of VM instances.

Implement and manage virtual networking

During a design review for project Helios, the current configuration does not meet the operational requirement. An internet-facing load balancer requires a stable frontend address. Which resource should you create?

A A private DNS zone only

B A user-assigned managed identity

C A public IP address check_circle

D A Recovery Services vault

lightbulb

Explanation

Difficulty: Medium. A public load balancer frontend uses a public IP resource for internet-facing traffic. Trap: A private IP is appropriate for an internal load balancer but not an internet-facing frontend.

Monitor and maintain Azure resources

During a design review for project Falcon, the current configuration does not meet the operational requirement. During a planned maintenance window, you want existing alert rules to continue evaluating but suppress notifications for resources in rg-summit-prod-1955. Which change meets the requirement?

A A CanNotDelete resource lock

B A blob snapshot

C Delete every alert rule and recreate it later

D An alert processing rule check_circle

lightbulb

Explanation

Get all 1100 questions

Full access includes all questions, detailed explanations, PDF downloads, and timed mock exams.

quiz Start Free Practice download Free PDF