AZ-104 Questions And Answers With Complete
Solution 2022/2023
QUESTION 1
You have an Azure subscription named Subscription1.
You deploy a Linux virtual machine named VM1 to Subscription1.
You need to monitor the metrics and the logs of VM1.
What should you use?
A. Azure HDInsight
B. Linux Diagnostic Extension (LAD) 3.0
C. the Azure Performance Diagnostics extension
D. Azure Analysis Services Correct Answer: B
QUESTION 2
You plan to deploy three Azure virtual machines named VM1, VM2, and VM3. The virtual
machines will host a web app named App1.
You need to ensure that at least two virtual machines are available if a single Azure datacenter
becomes unavailable.
What should you deploy?
A. all three virtual machines in a single Availability Zone
B. all virtual machines in a single Availability Set
C. each virtual machine in a separate Availability Zone
D. each virtual machine in a separate Availability Set Correct Answer: B
QUESTION 3
You have an Azure virtual machine named VM1 that runs Windows Server 2019.
You save VM1 as a template named Template1 to the Azure Resource Manager library.
You plan to deploy a virtual machine named VM2 from Template1.
What can you configure during the deployment of VM2?
A. operating system
B. administrator username
C. virtual machine size
D. resource group Correct Answer: B
QUESTION 4
You have an Azure subscription that contains an Azure virtual machine named VM1. VM1 runs a
financial reporting app named App1 that does not support multiple active instances.
At the end of each month, CPU usage for VM1 peaks when App1 runs.
You need to create a scheduled runbook to increase the processor performance of VM1 at the
end of each month.
What task should you include in the runbook?
A. Add the Azure Performance Diagnostics agent to VM1.
B. Modify the VM size property of VM1.
C. Add VM1 to a scale set.
D. Increase the vCPU quota for the subscription.
E. Add a Desired State Configuration (DSC) extension to VM1. Correct Answer: E
,QUESTION 5
Note: This question is part of a series of questions
You have an Azure subscription that contains 10 virtual networks. The virtual networks are hosted
in separate resource groups.
Another administrator plans to create several network security groups (NSGs) in the subscription.
You need to ensure that when an NSG is created, it automatically blocks TCP port 8080 between the
virtual networks.
Solution: You configure a custom policy definition, and then you assign the policy to the
subscription.
Does this meet the goal?
A. Yes
B. No Correct Answer: A
QUESTION 6
You have two Azure virtual networks named VNet1 and VNet2. VNet1 contains an Azure virtual
machine named VM1. VNet2 contains an Azure virtual machine named VM2.
VM1 hosts a frontend application that connects to VM2 to retrieve data.
Users report that the frontend application is slower than usual.
You need to view the average round-trip time (RTT) of the packets from VM1 to VM2.
Which Azure Network Watcher feature should you use?
A. IP flow verify
B. Connection troubleshoot
C. Connection monitor
D. NSG flow logs Correct Answer: C
QUESTION 7
You have an Azure subscription that has a Recovery Services vault named Vault1. The
subscription contains the virtual machines shown in the following table:
NAME---Operating System---Auto-Shutdown
VM1---WIndows Server 2012 R2---Off
VM2---WIndows Server 2016---19:00
VM3---Ubuntu Server 18.04LTS---Off
VM4---WIndows 10---19:00
You plan to schedule backups to occur every night at 23:00.
Which virtual machines can you back up by using Azure Backup?
A. VM1 and VM3 only
B. VM1, VM2, VM3 and VM4
C. VM1 and VM2 only
D. VM1 only Correct Answer: B
QUESTION 8
You have the Azure virtual machines shown in the following table:
NAME---Azure Region
VM1---West Europe
VM2---West Europe
VM3---North Europe
VM4---North Europe
You have a Recovery Services vault that protects VM1 and VM2.
You need to protect VM3 and VM4 by using Recovery Services.
What should you do first?
,A. Create a new Recovery Services vault
B. Create a storage account
C. Configure the extensions for VM3 and VM4
D. Create a new backup policy Correct Answer: A
QUESTION 9
Note: This question is part of a series of questions
You have an Azure subscription that contains the following users in an Azure Active Directory
tenant named contoso.onmicrosoft.com:
NAME---Role---Scope
User1---Global Administrator---Azure Active Directory
User2--Global Administrator---Azure Active Directory
User3---User Administrator---Azure Active Directory
User4---Owner---Azure Subscription
User1 creates a new Azure Active Directory tenant named external.contoso.onmicrosoft.com.
You need to create new user accounts in external.contoso.onmicrosoft.com.
Solution: You instruct User2 to create the user accounts.
Does that meet the goal?
A. Yes
B. No Correct Answer: A
QUESTION 10
Note: This question is part of a series of questions
You have an Azure subscription that contains the following users in an Azure Active Directory
tenant named contoso.onmicrosoft.com:
NAME---Role---Scope
User1---Global Administrator---Azure Active Directory
User2--Global Administrator---Azure Active Directory
User3---User Administrator---Azure Active Directory
User4---Owner---Azure Subscription
User1 creates a new Azure Active Directory tenant named external.contoso.onmicrosoft.com.
You need to create new user accounts in external.contoso.onmicrosoft.com.
Solution: You instruct User4 to create the user accounts.
Does that meet the goal?
A. Yes
B. No Correct Answer: B
QUESTION 11
Note: This question is part of a series of questions
You have an Azure subscription that contains the following users in an Azure Active Directory
tenant named contoso.onmicrosoft.com:
NAME---Role---Scope
User1---Global Administrator---Azure Active Directory
User2--Global Administrator---Azure Active Directory
User3---User Administrator---Azure Active Directory
User4---Owner---Azure Subscription
User1 creates a new Azure Active Directory tenant named external.contoso.onmicrosoft.com.
You need to create new user accounts in external.contoso.onmicrosoft.com.
Solution: You instruct User3 to create the user accounts.
Does that meet the goal?
, A. Yes
B. No Correct Answer: B
QUESTION 12
You have an Azure subscription that contains an Azure Active Directory (Azure AD) tenant
named contoso.com and an Azure Kubernetes Service (AKS) cluster named AKS1.
An administrator reports that she is unable to grant access to AKS1 to the users in contoso.com.
You need to ensure that access to AKS1 can be granted to the contoso.com users.
What should you do first?
A. From contoso.com, modify the Organization relationships settings.
B. From contoso.com, create an OAuth 2.0 authorization endpoint.
C. Recreate AKS1.
D. From AKS1, create a namespace. Correct Answer: B
QUESTION 13
You have a Microsoft 365 tenant and an Azure Active Directory (Azure AD) tenant named
contoso.com.
You plan to grant three users named User1, User2, and User3 access to a temporary Microsoft
SharePoint document library named Library1.
You need to create groups for the users. The solution must ensure that the groups are deleted after
180 days.
Which two groups should you create? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
A. an Office 365 group that uses the Assigned membership type
B. a Security group that uses the Assigned membership type
C. an Office 365 group that uses the Dynamic User membership type
D. a Security group that uses the Dynamic User membership type
E. a Security group that uses the Dynamic Device membership type Correct Answer: AC
QUESTION 14
You have an Azure policy as shown in the following exhibit: (see pdf)
What is the effect of the policy?
A. You are prevented from creating Azure SQL servers anywhere in Subscription 1.
B. You can create Azure SQL servers in ContosoRG1 only.
C. You are prevented from creating Azure SQL Servers in ContosoRG1 only.
D. You can create Azure SQL servers in any resource group within Subscription 1. Correct Answer: B
QUESTION 15
You have an Azure subscription named AZPT1 that contains the resources shown in the following
table:
NAME---TYPE
storage1---Azure Storage Account
VNET1---Virtual network
VM1---Azure virtual machine
VM1Managed---Managed disk for VM1
RVAULT1---Recovery Services vault for the site recovery of VM1
You create a new Azure subscription named AZPT2.
You need to identify which resources can be moved to AZPT2.
Which resources should you identify?
Solution 2022/2023
QUESTION 1
You have an Azure subscription named Subscription1.
You deploy a Linux virtual machine named VM1 to Subscription1.
You need to monitor the metrics and the logs of VM1.
What should you use?
A. Azure HDInsight
B. Linux Diagnostic Extension (LAD) 3.0
C. the Azure Performance Diagnostics extension
D. Azure Analysis Services Correct Answer: B
QUESTION 2
You plan to deploy three Azure virtual machines named VM1, VM2, and VM3. The virtual
machines will host a web app named App1.
You need to ensure that at least two virtual machines are available if a single Azure datacenter
becomes unavailable.
What should you deploy?
A. all three virtual machines in a single Availability Zone
B. all virtual machines in a single Availability Set
C. each virtual machine in a separate Availability Zone
D. each virtual machine in a separate Availability Set Correct Answer: B
QUESTION 3
You have an Azure virtual machine named VM1 that runs Windows Server 2019.
You save VM1 as a template named Template1 to the Azure Resource Manager library.
You plan to deploy a virtual machine named VM2 from Template1.
What can you configure during the deployment of VM2?
A. operating system
B. administrator username
C. virtual machine size
D. resource group Correct Answer: B
QUESTION 4
You have an Azure subscription that contains an Azure virtual machine named VM1. VM1 runs a
financial reporting app named App1 that does not support multiple active instances.
At the end of each month, CPU usage for VM1 peaks when App1 runs.
You need to create a scheduled runbook to increase the processor performance of VM1 at the
end of each month.
What task should you include in the runbook?
A. Add the Azure Performance Diagnostics agent to VM1.
B. Modify the VM size property of VM1.
C. Add VM1 to a scale set.
D. Increase the vCPU quota for the subscription.
E. Add a Desired State Configuration (DSC) extension to VM1. Correct Answer: E
,QUESTION 5
Note: This question is part of a series of questions
You have an Azure subscription that contains 10 virtual networks. The virtual networks are hosted
in separate resource groups.
Another administrator plans to create several network security groups (NSGs) in the subscription.
You need to ensure that when an NSG is created, it automatically blocks TCP port 8080 between the
virtual networks.
Solution: You configure a custom policy definition, and then you assign the policy to the
subscription.
Does this meet the goal?
A. Yes
B. No Correct Answer: A
QUESTION 6
You have two Azure virtual networks named VNet1 and VNet2. VNet1 contains an Azure virtual
machine named VM1. VNet2 contains an Azure virtual machine named VM2.
VM1 hosts a frontend application that connects to VM2 to retrieve data.
Users report that the frontend application is slower than usual.
You need to view the average round-trip time (RTT) of the packets from VM1 to VM2.
Which Azure Network Watcher feature should you use?
A. IP flow verify
B. Connection troubleshoot
C. Connection monitor
D. NSG flow logs Correct Answer: C
QUESTION 7
You have an Azure subscription that has a Recovery Services vault named Vault1. The
subscription contains the virtual machines shown in the following table:
NAME---Operating System---Auto-Shutdown
VM1---WIndows Server 2012 R2---Off
VM2---WIndows Server 2016---19:00
VM3---Ubuntu Server 18.04LTS---Off
VM4---WIndows 10---19:00
You plan to schedule backups to occur every night at 23:00.
Which virtual machines can you back up by using Azure Backup?
A. VM1 and VM3 only
B. VM1, VM2, VM3 and VM4
C. VM1 and VM2 only
D. VM1 only Correct Answer: B
QUESTION 8
You have the Azure virtual machines shown in the following table:
NAME---Azure Region
VM1---West Europe
VM2---West Europe
VM3---North Europe
VM4---North Europe
You have a Recovery Services vault that protects VM1 and VM2.
You need to protect VM3 and VM4 by using Recovery Services.
What should you do first?
,A. Create a new Recovery Services vault
B. Create a storage account
C. Configure the extensions for VM3 and VM4
D. Create a new backup policy Correct Answer: A
QUESTION 9
Note: This question is part of a series of questions
You have an Azure subscription that contains the following users in an Azure Active Directory
tenant named contoso.onmicrosoft.com:
NAME---Role---Scope
User1---Global Administrator---Azure Active Directory
User2--Global Administrator---Azure Active Directory
User3---User Administrator---Azure Active Directory
User4---Owner---Azure Subscription
User1 creates a new Azure Active Directory tenant named external.contoso.onmicrosoft.com.
You need to create new user accounts in external.contoso.onmicrosoft.com.
Solution: You instruct User2 to create the user accounts.
Does that meet the goal?
A. Yes
B. No Correct Answer: A
QUESTION 10
Note: This question is part of a series of questions
You have an Azure subscription that contains the following users in an Azure Active Directory
tenant named contoso.onmicrosoft.com:
NAME---Role---Scope
User1---Global Administrator---Azure Active Directory
User2--Global Administrator---Azure Active Directory
User3---User Administrator---Azure Active Directory
User4---Owner---Azure Subscription
User1 creates a new Azure Active Directory tenant named external.contoso.onmicrosoft.com.
You need to create new user accounts in external.contoso.onmicrosoft.com.
Solution: You instruct User4 to create the user accounts.
Does that meet the goal?
A. Yes
B. No Correct Answer: B
QUESTION 11
Note: This question is part of a series of questions
You have an Azure subscription that contains the following users in an Azure Active Directory
tenant named contoso.onmicrosoft.com:
NAME---Role---Scope
User1---Global Administrator---Azure Active Directory
User2--Global Administrator---Azure Active Directory
User3---User Administrator---Azure Active Directory
User4---Owner---Azure Subscription
User1 creates a new Azure Active Directory tenant named external.contoso.onmicrosoft.com.
You need to create new user accounts in external.contoso.onmicrosoft.com.
Solution: You instruct User3 to create the user accounts.
Does that meet the goal?
, A. Yes
B. No Correct Answer: B
QUESTION 12
You have an Azure subscription that contains an Azure Active Directory (Azure AD) tenant
named contoso.com and an Azure Kubernetes Service (AKS) cluster named AKS1.
An administrator reports that she is unable to grant access to AKS1 to the users in contoso.com.
You need to ensure that access to AKS1 can be granted to the contoso.com users.
What should you do first?
A. From contoso.com, modify the Organization relationships settings.
B. From contoso.com, create an OAuth 2.0 authorization endpoint.
C. Recreate AKS1.
D. From AKS1, create a namespace. Correct Answer: B
QUESTION 13
You have a Microsoft 365 tenant and an Azure Active Directory (Azure AD) tenant named
contoso.com.
You plan to grant three users named User1, User2, and User3 access to a temporary Microsoft
SharePoint document library named Library1.
You need to create groups for the users. The solution must ensure that the groups are deleted after
180 days.
Which two groups should you create? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
A. an Office 365 group that uses the Assigned membership type
B. a Security group that uses the Assigned membership type
C. an Office 365 group that uses the Dynamic User membership type
D. a Security group that uses the Dynamic User membership type
E. a Security group that uses the Dynamic Device membership type Correct Answer: AC
QUESTION 14
You have an Azure policy as shown in the following exhibit: (see pdf)
What is the effect of the policy?
A. You are prevented from creating Azure SQL servers anywhere in Subscription 1.
B. You can create Azure SQL servers in ContosoRG1 only.
C. You are prevented from creating Azure SQL Servers in ContosoRG1 only.
D. You can create Azure SQL servers in any resource group within Subscription 1. Correct Answer: B
QUESTION 15
You have an Azure subscription named AZPT1 that contains the resources shown in the following
table:
NAME---TYPE
storage1---Azure Storage Account
VNET1---Virtual network
VM1---Azure virtual machine
VM1Managed---Managed disk for VM1
RVAULT1---Recovery Services vault for the site recovery of VM1
You create a new Azure subscription named AZPT2.
You need to identify which resources can be moved to AZPT2.
Which resources should you identify?
