AZ-104 Knowledge Check Exam
Questions & Answers (Grade A+)
A new project has several resources that need to be administered
together. Which of the following would be a good solution?
A. Azure templates
B. Azure resource groups
C. Azure subscriptions -
correct answer ✅B
Which of the following would be good example of when to use a
resource lock?
A. A ExpressRoute circuit with connectivity back to the on-premises
network.
B. A non-production virtual machine used to test occasional
application builds.
C. A storage account used to temporarily store images processed in
a development environment. -
correct answer ✅A
Which of the following features doesn't apply to resource groups?
A. Resources can only be in one resource group
B. Role-based access control can be applied to a resource group
,AZ-104 Knowledge Check Exam
Questions & Answers (Grade A+)
C. Resource groups can be nested. -
correct answer ✅C
What is an Azure Resource Manager template?
A. A series of Azure CLI commands to deploy infrastructure to
Azure.
B. A JavaScript Object Notation (JSON) file that defines the
infrastructure and configuration for the deployment.
C. A script used by the Azure Resource Manager to manage the
Azure storage account. -
correct answer ✅B
Which of the following is an element in the template schema?
A. Includes
B. Scripts
C. Outputs -
correct answer ✅C
What happens if the same template is run a second time?
A. Azure Resource Manager will deploy new resources as copies of
the previously deployed resources.
,AZ-104 Knowledge Check Exam
Questions & Answers (Grade A+)
B. Azure Resource Manager won't make any changes to the
deployed resources.
C. Azure Resource Manager will delete the previously deployed
resources and redeploy them. -
correct answer ✅B
Your users want to sign-in to devices, apps, and services from
anywhere. They want to sign-in using an organizational work or
school account instead of a personal account. You must ensure
corporate assets are protected and that devices meet standards for
security and compliance. Specifically, you need to be able to enable
or disable a device. What should you do? Select one.
A. Enable the device in Azure AD.
B. Join the device to Azure AD.
C. Register the device with Azure AD. -
correct answer ✅B
A dedicated and trusted instance of Azure AD is referred to as:
A. An Azure tenant
B. An Azure identity
C. An Azure account -
correct answer ✅A
, AZ-104 Knowledge Check Exam
Questions & Answers (Grade A+)
You are configuring Self-service Password Reset. Which of the
following is not a validation method? Select one.
A. An email notification.
B. A text or code sent to a user's mobile or office phone.
C. A paging service.
D. A set of security questions -
correct answer ✅C
You are assigning Azure AD roles. Which role will allow the user to
manage all the groups in your Teams tenants and be able to assign
other administrator roles? Select one.
A. Password administrator
B. Security administrator
C. Global administrator -
correct answer ✅C
You would like to add a user who has a Microsoft account to your
subscription. Which type of user account is this? Select one.
A. Cloud identity
B. Directory-Synchronized identity
Questions & Answers (Grade A+)
A new project has several resources that need to be administered
together. Which of the following would be a good solution?
A. Azure templates
B. Azure resource groups
C. Azure subscriptions -
correct answer ✅B
Which of the following would be good example of when to use a
resource lock?
A. A ExpressRoute circuit with connectivity back to the on-premises
network.
B. A non-production virtual machine used to test occasional
application builds.
C. A storage account used to temporarily store images processed in
a development environment. -
correct answer ✅A
Which of the following features doesn't apply to resource groups?
A. Resources can only be in one resource group
B. Role-based access control can be applied to a resource group
,AZ-104 Knowledge Check Exam
Questions & Answers (Grade A+)
C. Resource groups can be nested. -
correct answer ✅C
What is an Azure Resource Manager template?
A. A series of Azure CLI commands to deploy infrastructure to
Azure.
B. A JavaScript Object Notation (JSON) file that defines the
infrastructure and configuration for the deployment.
C. A script used by the Azure Resource Manager to manage the
Azure storage account. -
correct answer ✅B
Which of the following is an element in the template schema?
A. Includes
B. Scripts
C. Outputs -
correct answer ✅C
What happens if the same template is run a second time?
A. Azure Resource Manager will deploy new resources as copies of
the previously deployed resources.
,AZ-104 Knowledge Check Exam
Questions & Answers (Grade A+)
B. Azure Resource Manager won't make any changes to the
deployed resources.
C. Azure Resource Manager will delete the previously deployed
resources and redeploy them. -
correct answer ✅B
Your users want to sign-in to devices, apps, and services from
anywhere. They want to sign-in using an organizational work or
school account instead of a personal account. You must ensure
corporate assets are protected and that devices meet standards for
security and compliance. Specifically, you need to be able to enable
or disable a device. What should you do? Select one.
A. Enable the device in Azure AD.
B. Join the device to Azure AD.
C. Register the device with Azure AD. -
correct answer ✅B
A dedicated and trusted instance of Azure AD is referred to as:
A. An Azure tenant
B. An Azure identity
C. An Azure account -
correct answer ✅A
, AZ-104 Knowledge Check Exam
Questions & Answers (Grade A+)
You are configuring Self-service Password Reset. Which of the
following is not a validation method? Select one.
A. An email notification.
B. A text or code sent to a user's mobile or office phone.
C. A paging service.
D. A set of security questions -
correct answer ✅C
You are assigning Azure AD roles. Which role will allow the user to
manage all the groups in your Teams tenants and be able to assign
other administrator roles? Select one.
A. Password administrator
B. Security administrator
C. Global administrator -
correct answer ✅C
You would like to add a user who has a Microsoft account to your
subscription. Which type of user account is this? Select one.
A. Cloud identity
B. Directory-Synchronized identity
