Skip to main content This browser is no longer supported. Show
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support. AZ-104 Microsoft Azure Administrator Sample Exam Questions
In this articlePLEASE COMPLETE THIS SURVEY (https://aka.ms/samplequestions) Microsoft is exploring the possibility of providing sample questions as an exam preparation resource, and we would like your feedback. While we prefer that you complete the survey after taking the exam, you may complete it at any time. Thank You! User GuideThese sample questions are intended to showcase the difficulty of the questions that you are likely to experience on this exam. These questions are not the same as what you will see on the exam nor is this document illustrative of the length of the exam or its complexity (e.g., you may see additional question types, multiple case studies, and possibly labs). These questions are examples only to give you insight into the difficulty of the exam and help you determine if additional preparation is required. For each question, the answer, a rationale, and a URL that will link you to additional information is provided immediately below it. QuestionsQuestion # 1 (Multiple Choice)Your company has a Microsoft 365 tenant and an Azure Active Directory (Azure AD) tenant named contoso.com. The company uses several Azure Files shares. Each share is assigned to a different department at the company. The department attribute in Azure AD is populated for all users. You need to ensure that the users can access the departmental file shares. The solution must minimize administrative effort. Which two types of groups should you use? Each correct presents a complete solution. A. a security group that uses the dynamic membership type
Question # 2 (Multiple Choice)You have an Azure Active Directory (Azure AD) tenant named contoso.com. You need to ensure that a user named User1 can review all the settings of the tenant. User1 must be prevented from changing any settings. Which role should you assign to User1? A. Directory readers
Question # 3 (Multiple Choice)You have a production Azure Active Directory (Azure AD) tenant named contoso.com. You deploy a development Azure Active Directory (AD) tenant, and then you create several custom administrative roles in the development tenant. You need to copy the roles to the production tenant. What should you do first? A. From the development tenant, export the custom roles to JSON.
Question # 4 (Multiple Choice)You have an Azure subscription that contains several hundred virtual machines. You plan to create an Azure Monitor action rule that triggers when a virtual machine uses more than 80% of processor resources for five minutes. You need to specify the recipient of the action rule notification. What should you create? A. Action group
Question # 5 (Multiple Choice)Your company has 10 different departments. You have an Azure subscription that contains several hundred virtual machines. The users of each department use only their department’s virtual machines. You plan to apply resource tags for each department to the virtual machines. Which two solutions should you use? Each correct presents a complete solution. A. PowerShell
Question # 6 (Multiple Choice)You have an Azure subscription that contains the storage accounts shown in the following table.
You need to identify which storage accounts can be switched to geo-redundant storage (GRS). Which storage accounts should you identify? A. storage1 only
Question # 7 (Multiple Choice)You have an Azure subscription. You plan to deploy multiple Azure virtual machines by using an Azure Resource Manager (ARM) template. You need to securely store the credentials that will be used for the deployment. What should you use? A. Azure Active Directory (Azure AD) Identity Protection
Question # 8 (Multiple Choice)You have a resource group named RG1 that contains several unused resources. You need to use the Azure CLI to remove RG1 and all its resources, without requiring a confirmation. Which command should you use? A. az group delete --name rg1 --no-wait --yes
Question # 9 (Multiple Choice)You have an Azure virtual machine named VM1. You need to create five additional virtual machines that have the same configurations as VM1. The solution must ensure that VM1 remains available. From the Azure portal, you open the blade for VM1. What should you do next? A. Select Capture.
Question # 10 (Multiple Choice)You have an Azure subscription that contains an Azure App Service web app named webapp1. Webapp1 uses a domain name of webapp1.azurewebsites.net. You need to add a custom domain named www.contoso.com to webapp1. You verify the domain ownership. Which DNS record should you use next? A. SRV
Question # 11 (Multiple Choice)You have an Azure subscription that contains a virtual machine named VM1. VM1 requires volume encryption for its operating system and data disks. You create an Azure key vault named vault1. You need to configure vault1 to support Azure Disk Encryption for volume encryption. Which setting should you modify for vault1? A. Keys
Question # 12 (Multiple Choice)You have an Azure subscription that contains the resources shown in the following table.
Which two resources can you back up to a Recovery Services vault? Each correct presents part of the solution. A. VM1
Case StudyOverviewContoso, Ltd. is a consulting company. The company has a main office in Vancouver and branch offices in Seattle and New York. Existing EnvironmentAzure EnvironmentContoso has two Azure subscriptions named ContosoSub1 and ContosoSub2. ContosoSub1 has the resource group shown in the following table.
ResourceGroup1 contains the resources shown in the following table.
ContosoSub2 has the resource group shown in the following table.
ResourceGroup2 contains the resources shown in the following table.
Contoso has an Azure Active Directory (Azure AD) tenant named contoso.com that contains the user accounts shown in the following table.
Azure Storage EnvironmentContosoSub1 contains the storage accounts shown in the following table.
Contoso has the Recovery Service vaults shown in the following table.
Problem Statement
RequirementsPlanned ChangesContoso plans to implement the following changes:
Technical RequirementsContoso must meet the following technical requirements:
Security RequirementsContoso must meet the following security requirements:
Question # 13 (Multiple Choice)Answer the following question based on the information presented in the case study. Which administrator can implement the planned changes for the new employees? A. Admin1 only
Question # 14 (Multiple Choice)Answer the following question based on the information presented in the case study. You need to implement the planned changes for User1 and User2. What should you do first? A. Create two new resource groups.
Question # 15 (Multiple Choice)Answer the following question based on the information presented in the case study. You need to implement the planned changes for Disk1. What should you do first? A. Add ContosoSub1 and ContosoSub2 to a new management group.
Question # 16 (Multiple Choice)Answer the following question based on the information presented in the case study. Which storage accounts meet the technical requirements? A. contosostorage1 and contosostorage4 only
Question # 17 (Multiple Choice)Answer the following question based on the information presented in the case study. You need to address the issue that relates to contosostorage2. The solution must meet the security requirements. What should you do? A. Set a rotation reminder for the access keys.
Question # 18 (Multiple Choice)Answer the following question based on the information presented in the case study. You need to implement the planned changes for Vnet1 and Vnet2. What should you do first? A. Move Vnet1 to the East US Azure region.
Question # 19 (Multiple Choice)Answer the following question based on the information presented in the case study. Before you deploy DevVM1, you need to consider the technical and security requirements. What should you do to ensure that access to DevVM1 is secure? A. Install the Remote Desktop client on all the devices that will connect to DevVM1.
Question # 20 (Multiple Choice)Answer the following question based on the information presented in the case study. You need to resolve the issue that relates to the replication costs for backups. Which Recovery Services vault can be configured to use locally-redundant storage (LRS) replication? A. Rsv1 only
What data should be backed up before troubleshooting a customer's computer choose two?1. Internet explorer favorites files. 2. Documents that are created by the customer.
Which two types of data should be backed up before troubleshooting a computer for a customer choose two Internet Explorer Favorites files?BIOS system filedriver files for the hard diskInternet Explorer favorites files**Windows operating system filesdocuments that are created by the customer**Explanation:Only customer created data is necessary for backup as a precaution to the troubleshooting process.
Which types of data should be backed up before troubleshooting?(Choose two.) Explanation: Only customer created data is necessary for backup as a precaution to the troubleshooting process.
Which two types of data should be?There are two general types of data – quantitative and qualitative and both are equally important. You use both types to demonstrate effectiveness, importance or value.
|