AZ-104 Renewal Exam Questions and Answers
(2023 Updated) High-Quality Questions
1. You have an Azure web app named WebApp1 that uses the Publish option
"Docker container" on Windows. You need WebApp1 to use
the ASP.NET v4.7 runtime stack. Which setting should you modify?
• Region
• Operating system
• Publish
• Windows Plan
2. You have Azure Key Vault named KeyVault1 and an Azure App Service
named WebApp1. You need WebApp1 to access KeyVault1 using Azure AD
authentication. Which two settings can you configure on WebApp1 to achieve
this? (Select all that apply.)
• User assigned managed identity
• Application settings
• TLS/SSL
• System assigned managed identity
• App Service Authentication
3. You have an Azure web app named WebApp1. Backup options are
unavailable. What should you do first to enable backup?
• Modify the platform settings of WebApp1
• Modify the Application settings of WebApp1
• Scale up the app service plan
• Scale out the app service plan
,4. You have an Azure web app named Contoso2023. You add a deployment
slot named Slot1. You need to perform a deployment slot swap with preview.
What should you modify?
• Application settings for Contoso2023
• General settings for Contoso2023-Slot1
• Application settings for Contoso2023-Slot1
5. You plan to create an Azure container instance named container1 that uses
a Docker image named Image1. You need persistent storage. Which Azure
resources should you deploy?
• An Azure container registry only
• An Azure Storage account and a file share
• An Azure Storage account and a blob container
• A database only
6. You have an Azure container registry named Registry1. You enable the
admin user. Which username should you use to connect to Registry1 as an
admin user?
• root
• Registry1 (Note: Typically the registry name itself; but options given: root,
Admin, Administrator, Registry – correct is the registry name, here
"Registry1". However from typical exam, it's the registry name. I'll
use Registry1)
• Admin
• Administrator
7. You have an Azure subscription with a storage account named storage123
and a container instance named AppContainer. Virtual network VirtualNet4
has subnets: SubnetA (storage123 connected), SubnetB (AppContainer
connected), SubnetC (no resources). You plan to deploy an Azure container
instance named container5 to VirtualNet4. To which subnets can you deploy
container5?
• SubnetB only
, • SubnetC only
• SubnetB and SubnetC only
• SubnetA, SubnetB, and SubnetC
8. You have an Azure Storage account named storage1. You create encryption
scopes: Scope1 (Microsoft-managed keys), Scope2 (Customer-managed keys).
Which storage services can be used with Scope2?
• blob only
• file only
• blob and file only
• table and queue only
• blob, file, table, and queue
9. You have an Azure Storage account named storage1 with a file share
named share1. You have an on-premises Active Directory domain with a user
named User1. You need User1 to access share1 using SMB protocol. What
should you do?
• Provide User1 with a shared access signature (SAS) for storage1
• Configure the Access control (IAM) settings of storage1
• Configure Active Directory authentication for Azure Files and enable
identity-based access
• Provide User1 with the access key for storage1
10. You have an Azure Storage account named storage1 (Hot access tier).
Container container1 has lifecycle management rule: Move blob to cool
storage after 3 days; Move blob to archive storage after 5 days. On December
1, you create File1. On December 10, you rehydrate File1 and move it to Hot
tier. When will File1 be moved to archive storage?
• within 24 hours
• on December 15
• on December 18
• on January 1
, 11. You need to provide time-limited access to an Azure Storage account
named storage1. What should you use?
• an access key
• a role assignment
• an access policy
• a shared access signature (SAS)
12. You have an Azure virtual machine named VM1 running Windows Server
2019. You need to ensure that VM1 can access an Azure Storage account
using a private IP address. What should you configure?
• Service endpoint
• Private endpoint
• Firewall rule
• Virtual network peering
13. You have an Azure subscription that contains a resource group named
RG1. In RG1, you plan to deploy a virtual machine that requires a minimum
of 8 vCPUs and 32 GB RAM. Which VM size should you use?
• B2s
• D2s v3
• D4s v3
• A0
14. You have an Azure virtual network named VNet1 with an address space of
10.0.0.0/16. You need to create two subnets: Subnet1 with 500 usable IP
addresses and Subnet2 with 2000 usable IP addresses. Which subnet masks
should you use? (Select two)
• /23 for Subnet1
• /24 for Subnet1
• /21 for Subnet2
• /22 for Subnet2
(2023 Updated) High-Quality Questions
1. You have an Azure web app named WebApp1 that uses the Publish option
"Docker container" on Windows. You need WebApp1 to use
the ASP.NET v4.7 runtime stack. Which setting should you modify?
• Region
• Operating system
• Publish
• Windows Plan
2. You have Azure Key Vault named KeyVault1 and an Azure App Service
named WebApp1. You need WebApp1 to access KeyVault1 using Azure AD
authentication. Which two settings can you configure on WebApp1 to achieve
this? (Select all that apply.)
• User assigned managed identity
• Application settings
• TLS/SSL
• System assigned managed identity
• App Service Authentication
3. You have an Azure web app named WebApp1. Backup options are
unavailable. What should you do first to enable backup?
• Modify the platform settings of WebApp1
• Modify the Application settings of WebApp1
• Scale up the app service plan
• Scale out the app service plan
,4. You have an Azure web app named Contoso2023. You add a deployment
slot named Slot1. You need to perform a deployment slot swap with preview.
What should you modify?
• Application settings for Contoso2023
• General settings for Contoso2023-Slot1
• Application settings for Contoso2023-Slot1
5. You plan to create an Azure container instance named container1 that uses
a Docker image named Image1. You need persistent storage. Which Azure
resources should you deploy?
• An Azure container registry only
• An Azure Storage account and a file share
• An Azure Storage account and a blob container
• A database only
6. You have an Azure container registry named Registry1. You enable the
admin user. Which username should you use to connect to Registry1 as an
admin user?
• root
• Registry1 (Note: Typically the registry name itself; but options given: root,
Admin, Administrator, Registry – correct is the registry name, here
"Registry1". However from typical exam, it's the registry name. I'll
use Registry1)
• Admin
• Administrator
7. You have an Azure subscription with a storage account named storage123
and a container instance named AppContainer. Virtual network VirtualNet4
has subnets: SubnetA (storage123 connected), SubnetB (AppContainer
connected), SubnetC (no resources). You plan to deploy an Azure container
instance named container5 to VirtualNet4. To which subnets can you deploy
container5?
• SubnetB only
, • SubnetC only
• SubnetB and SubnetC only
• SubnetA, SubnetB, and SubnetC
8. You have an Azure Storage account named storage1. You create encryption
scopes: Scope1 (Microsoft-managed keys), Scope2 (Customer-managed keys).
Which storage services can be used with Scope2?
• blob only
• file only
• blob and file only
• table and queue only
• blob, file, table, and queue
9. You have an Azure Storage account named storage1 with a file share
named share1. You have an on-premises Active Directory domain with a user
named User1. You need User1 to access share1 using SMB protocol. What
should you do?
• Provide User1 with a shared access signature (SAS) for storage1
• Configure the Access control (IAM) settings of storage1
• Configure Active Directory authentication for Azure Files and enable
identity-based access
• Provide User1 with the access key for storage1
10. You have an Azure Storage account named storage1 (Hot access tier).
Container container1 has lifecycle management rule: Move blob to cool
storage after 3 days; Move blob to archive storage after 5 days. On December
1, you create File1. On December 10, you rehydrate File1 and move it to Hot
tier. When will File1 be moved to archive storage?
• within 24 hours
• on December 15
• on December 18
• on January 1
, 11. You need to provide time-limited access to an Azure Storage account
named storage1. What should you use?
• an access key
• a role assignment
• an access policy
• a shared access signature (SAS)
12. You have an Azure virtual machine named VM1 running Windows Server
2019. You need to ensure that VM1 can access an Azure Storage account
using a private IP address. What should you configure?
• Service endpoint
• Private endpoint
• Firewall rule
• Virtual network peering
13. You have an Azure subscription that contains a resource group named
RG1. In RG1, you plan to deploy a virtual machine that requires a minimum
of 8 vCPUs and 32 GB RAM. Which VM size should you use?
• B2s
• D2s v3
• D4s v3
• A0
14. You have an Azure virtual network named VNet1 with an address space of
10.0.0.0/16. You need to create two subnets: Subnet1 with 500 usable IP
addresses and Subnet2 with 2000 usable IP addresses. Which subnet masks
should you use? (Select two)
• /23 for Subnet1
• /24 for Subnet1
• /21 for Subnet2
• /22 for Subnet2
