Azure Administrator (AZ-104) Exam
Questions and Answers ()
(Verified Answers).
1. Which Azure service provides proactive, actionable best practice
recommendations to improve performance, security, high availability, and cost
optimization?
A. Azure Monitor
B. Azure Security Center
C. Azure Advisor
D. Azure Policy
Answer: C. Azure Advisor
2. What is a collection of notification preferences used by Azure Monitor and Service
Health alerts to notify users and take corrective actions?
A. Action Group
B. Alert Rule
C. Initiative Definition
D. Policy Assignment
Answer: A. Action Group
3. What is a distributed network of servers that stores cached content on edge
servers close to end-users, typically used to deliver static content?
A. Azure Load Balancer
B. Azure Content Delivery Network
C. Azure Traffic Manager
D. Azure Front Door
Answer: B. Azure Content Delivery Network
4. Which Azure Monitor feature is an extensible Application Performance
Management (APM) service that automatically detects performance anomalies in live
web applications?
A. Azure Log Analytics
B. Azure Network Watcher
C. Application Insights
D. Azure Security Center
Answer: C. Application Insights
5. What contains a list of security rules that allow or deny inbound or outbound
network traffic, and can be associated with a subnet or network interface?
A. Azure Firewall
, B. Network Security Groups
C. Azure DDoS Protection
D. Virtual Network Gateway
Answer: B. Network Security Groups
6. Which storage redundancy option replicates data across three storage clusters in
a single region, each in its own availability zone?
A. Geo Redundant Storage
B. Local Redundant Storage
C. Read-Access Geo Redundant Storage
D. Zone Redundant Storage
Answer: D. Zone Redundant Storage
7. What is the default and recommended replication option that replicates data to a
secondary region hundreds of miles away from the primary region?
A. Zone Redundant Storage
B. Local Redundant Storage
C. Geo Redundant Storage
D. Read-Access Geo Redundant Storage
Answer: C. Geo Redundant Storage
8. Which encryption method uses a public key and private key pair, where a single
key cannot decrypt its own encrypted data?
A. Symmetric Encryption
B. Hashing
C. Asymmetric Encryption
D. Private-Key Encryption
Answer: C. Asymmetric Encryption
9. What is the process of establishing the identity of a person or service looking to
access a resource?
A. Authorization
B. Authentication
C. Role Assignment
D. Single Sign-On
Answer: B. Authentication
10. Which Azure service is a cloud-based identity service with built-in support for
synchronizing with on-premises Active Directory?
A. Azure Key Vault
B. Azure Active Directory
C. Azure Security Center
D. Azure Information Protection
Answer: B. Azure Active Directory
Questions and Answers ()
(Verified Answers).
1. Which Azure service provides proactive, actionable best practice
recommendations to improve performance, security, high availability, and cost
optimization?
A. Azure Monitor
B. Azure Security Center
C. Azure Advisor
D. Azure Policy
Answer: C. Azure Advisor
2. What is a collection of notification preferences used by Azure Monitor and Service
Health alerts to notify users and take corrective actions?
A. Action Group
B. Alert Rule
C. Initiative Definition
D. Policy Assignment
Answer: A. Action Group
3. What is a distributed network of servers that stores cached content on edge
servers close to end-users, typically used to deliver static content?
A. Azure Load Balancer
B. Azure Content Delivery Network
C. Azure Traffic Manager
D. Azure Front Door
Answer: B. Azure Content Delivery Network
4. Which Azure Monitor feature is an extensible Application Performance
Management (APM) service that automatically detects performance anomalies in live
web applications?
A. Azure Log Analytics
B. Azure Network Watcher
C. Application Insights
D. Azure Security Center
Answer: C. Application Insights
5. What contains a list of security rules that allow or deny inbound or outbound
network traffic, and can be associated with a subnet or network interface?
A. Azure Firewall
, B. Network Security Groups
C. Azure DDoS Protection
D. Virtual Network Gateway
Answer: B. Network Security Groups
6. Which storage redundancy option replicates data across three storage clusters in
a single region, each in its own availability zone?
A. Geo Redundant Storage
B. Local Redundant Storage
C. Read-Access Geo Redundant Storage
D. Zone Redundant Storage
Answer: D. Zone Redundant Storage
7. What is the default and recommended replication option that replicates data to a
secondary region hundreds of miles away from the primary region?
A. Zone Redundant Storage
B. Local Redundant Storage
C. Geo Redundant Storage
D. Read-Access Geo Redundant Storage
Answer: C. Geo Redundant Storage
8. Which encryption method uses a public key and private key pair, where a single
key cannot decrypt its own encrypted data?
A. Symmetric Encryption
B. Hashing
C. Asymmetric Encryption
D. Private-Key Encryption
Answer: C. Asymmetric Encryption
9. What is the process of establishing the identity of a person or service looking to
access a resource?
A. Authorization
B. Authentication
C. Role Assignment
D. Single Sign-On
Answer: B. Authentication
10. Which Azure service is a cloud-based identity service with built-in support for
synchronizing with on-premises Active Directory?
A. Azure Key Vault
B. Azure Active Directory
C. Azure Security Center
D. Azure Information Protection
Answer: B. Azure Active Directory
