50 az 104 practice test Practice Questions: Question Bank 2025

You are managing Azure subscriptions for your organization. You need to ensure that all resources created in a specific subscription are automatically tagged with a 'CostCenter' tag. If a resource is created without this tag, the creation should be denied. What should you implement?

Your company has an Azure Storage account that contains blob data accessed by multiple applications. You need to ensure that one specific application can only read blobs but cannot modify or delete them. The solution must follow the principle of least privilege. What should you assign to the application's managed identity?

You deploy an Azure virtual machine running Windows Server. After deployment, you discover that the VM cannot connect to the internet. You verify that the VM has a private IP address and is deployed in a subnet. What is the most likely cause of the connectivity issue?

You manage several Azure virtual machines that host production workloads. You need to receive an alert when any VM's CPU usage exceeds 85% for more than 10 minutes. What should you configure?

Your organization has multiple Azure subscriptions. You need to apply a consistent set of policies across all subscriptions to enforce naming conventions, allowed resource types, and required tags. The solution must minimize administrative effort. What should you do?

You have an Azure Storage account configured with the Hot access tier. You notice that a large amount of blob data has not been accessed in over 90 days. You need to automatically move this data to a more cost-effective tier without manual intervention. What should you configure?

You are deploying a web application that consists of multiple Azure VMs behind an Azure Load Balancer. The application must remain available even if one VM fails. You configure a health probe on the load balancer. After deployment, you notice that traffic is still being sent to an unhealthy VM. What is the most likely cause?

You have an Azure virtual network with multiple subnets. You need to ensure that traffic between Subnet A and Subnet B is inspected by a network virtual appliance (NVA) for security purposes, while traffic within Subnet A should flow normally. What should you configure?

Your company uses Azure AD for identity management. You have a requirement to allow users to reset their own passwords and unlock their accounts without contacting the helpdesk, but only for users who are members of specific security groups. Additionally, you must ensure that password resets require two forms of authentication. What should you implement?

You manage an Azure subscription containing multiple resource groups. Each resource group contains VMs for different departments. You need to ensure that the Finance department VMs can be started and stopped by the Finance team, but the Finance team should not be able to modify VM configurations, delete VMs, or access VMs in other departments. You must use built-in roles. What should you do?

You need to configure Azure Storage Account replication to ensure data is replicated to a secondary region and can be read from the secondary region at all times. Which redundancy option should you select?

Your organization has multiple Azure subscriptions. You need to ensure that virtual machines can only be created in specific Azure regions to comply with data residency requirements. What should you implement?

You are configuring backup for Azure VMs using Azure Backup. The VMs contain mission-critical databases that require point-in-time recovery with minimal data loss. What is the minimum backup frequency you can configure for Azure VM backups?

You have deployed an Azure VM Scale Set with 10 instances. You need to update the application on all instances without causing downtime. The update must be applied gradually, and you want to control how many instances are updated at once. What should you configure?

Your company hosts a web application in Azure that must be accessible only from the corporate network with IP range 203.0.113.0/24. Users report they cannot access the application from the office. You verify the application is running. Where should you check and configure access restrictions?

You need to delegate the ability to reset passwords and manage group memberships to the helpdesk team without granting them full administrative access. Which Azure AD role should you assign?

You have an Azure Storage Account with a container that stores archived logs. You need to minimize storage costs while keeping the data accessible for compliance purposes. The logs are rarely accessed but must be retained for 7 years. Which access tier should you configure?

You are configuring network connectivity between two virtual networks VNet1 in East US and VNet2 in West Europe. Both VNets have non-overlapping address spaces. You need to enable resources in both VNets to communicate directly with each other using private IP addresses. What should you configure?

You manage an Azure VM running a business-critical application. The VM experiences a sudden performance degradation. You need to identify if the issue is caused by CPU, memory, disk, or network bottlenecks. You have not previously configured any monitoring. What should you do first to diagnose the issue?

Your organization uses Azure AD with multiple custom domains. You need to ensure that when new users are created without specifying a domain, they are automatically assigned to the contoso.com domain instead of the default onmicrosoft.com domain. What should you configure?

You are managing Azure subscriptions for your organization. You need to prevent users from creating virtual machines in the East US region across all subscriptions while still allowing VM creation in other regions. What should you implement?

Your company has an Azure Storage account that contains critical business data. You need to ensure that deleted blobs can be recovered within 14 days and that blob versions are maintained. Which feature should you enable?

You have deployed a web application on an Azure VM scale set. During peak hours, the application experiences high CPU usage and you need to automatically scale out when average CPU exceeds 75% for 10 minutes. What should you configure?

Your organization has a virtual network with multiple subnets. You need to ensure that traffic between the web tier subnet and the database tier subnet is logged and analyzed for security compliance. The solution must minimize administrative overhead. What should you implement?

You are monitoring an Azure App Service web application. Users report intermittent slow response times. You need to identify the root cause by examining detailed performance metrics and request traces. What should you enable?

Your company has multiple Azure subscriptions managed by different departments. You need to implement a solution that allows centralized billing, delegated access management per subscription, and the ability to apply policies across all subscriptions. What should you create?

You have an Azure Storage account with a container storing 500 GB of log files. Files older than 90 days are rarely accessed but must be retained for 7 years for compliance. You need to minimize storage costs while maintaining compliance. What should you do?

You manage an Azure VM running a business-critical application. The VM has a 512 GB OS disk and a 2 TB data disk. You need to implement a backup solution that provides recovery point objectives (RPO) of 4 hours and retains backups for 30 days. What is the most cost-effective solution?

Your company has an on-premises network connected to Azure via ExpressRoute. You need to ensure that Azure VMs in a spoke virtual network can access on-premises resources while preventing direct internet access from these VMs. The solution must allow outbound internet access through a centralized security appliance in a hub virtual network. What should you configure?

You are troubleshooting performance issues with an Azure SQL Database. You need to identify queries that are consuming the most DTUs and causing performance degradation. The solution must provide historical query performance data. What should you use?

Your company has deployed a web application across multiple Azure VMs behind an Azure Load Balancer. Users report intermittent connectivity issues. You need to verify that the VMs are responding to health probes correctly. Which Azure Load Balancer metric should you examine first?

You need to configure Azure Storage to automatically move blob data from the Hot access tier to the Cool access tier after 60 days of no modification, and then to Archive tier after 180 days. What should you implement?

A development team needs to deploy Azure VMs that will be used for testing purposes only during business hours (8 AM to 6 PM, Monday to Friday). You need to minimize costs while ensuring VMs are available when needed. What solution should you recommend?

You are managing an Azure subscription with multiple resource groups. You need to ensure that all resources created in the subscription automatically receive tags for 'CostCenter' and 'Environment'. Users should not be able to create resources without these tags. What should you implement?

Your company has an Azure VM running a critical application. You need to ensure that you receive an alert when the VM's CPU usage exceeds 85% for more than 10 minutes. The alert should trigger an email to the operations team. What should you configure?

You have an Azure Storage account with several blob containers. Your security team requires that all data must be encrypted at rest using customer-managed keys stored in Azure Key Vault. You also need to ensure that the storage account can access the key vault. What should you configure first on the storage account?

You manage an Azure virtual network with multiple subnets. You need to ensure that VMs in subnet A can communicate with VMs in subnet B, but VMs in subnet C cannot initiate connections to subnet A. VMs in subnet A should be able to respond to connections initiated from subnet C. What should you implement?

Your organization uses Azure AD Connect to synchronize on-premises Active Directory with Azure AD. Users report that password changes made on-premises are not reflecting in Azure AD for up to 30 minutes. You need to reduce this synchronization delay to less than 5 minutes. What should you do?

You are designing a disaster recovery solution for an Azure VM that hosts a critical database application. The solution must provide a Recovery Time Objective (RTO) of 15 minutes and a Recovery Point Objective (RPO) of 5 minutes. The VM is located in the East US region. Which solution meets these requirements with the least administrative effort?

Your company has deployed an application across multiple Azure subscriptions. You need to implement a governance solution that ensures all subscriptions comply with corporate policies including allowed VM sizes, required tags, and prohibited Azure regions. The solution must also provide a compliance dashboard showing adherence across all subscriptions. What should you implement?

Your organization has deployed Azure Policy to enforce tagging requirements across all resource groups. However, developers report that they cannot create new storage accounts in a specific resource group, even though they have Contributor permissions. The error message indicates a policy violation. What should you do to identify the blocking policy?

You need to configure Azure Files to allow on-premises users to access file shares using their Active Directory Domain Services (AD DS) credentials without requiring Azure AD Connect. The solution must support ACL permissions at the file and directory level. What should you implement?

A company runs a web application on Azure VMs behind an Azure Load Balancer. Users report intermittent connection failures. You discover that the health probe is marking healthy VMs as unhealthy. The application takes 15 seconds to initialize after the VM starts. What should you configure to resolve this issue?

You manage an Azure subscription with multiple resource groups containing development and production resources. You need to prevent any resources in the production resource group from being accidentally deleted, while still allowing authorized users to modify resource configurations. What should you implement?

Your company has a VM scale set running a stateless web application. During peak hours, CPU utilization reaches 90% and users experience slow response times. You need to configure automatic scaling based on CPU metrics. The solution must scale out when average CPU exceeds 75% and scale in when it drops below 25%. What should you configure?

You have an Azure Storage account with a container storing 500 GB of blob data. You need to implement a lifecycle management policy that moves blobs to Cool tier after 30 days of no modification and deletes blobs after 180 days. Archived audit logs should be moved to Archive tier after 90 days. What should you do?

A company has Azure VMs in multiple regions. You need to implement a monitoring solution that collects performance data, logs, and security events from all VMs, and creates alerts when disk space falls below 10%. The solution must require minimal ongoing management. What should you implement?

Your organization uses Azure AD Privileged Identity Management (PIM) to manage privileged roles. A user needs temporary Global Administrator access for a maintenance window scheduled in 3 days. The user should automatically receive the role at the scheduled time and lose access after 4 hours. What should you configure?

You have two Azure virtual networks: VNet1 in East US and VNet2 in West Europe. Both VNets have non-overlapping address spaces. You need to enable VM-to-VM communication between the VNets with the lowest latency and highest bandwidth. The solution must not traverse the public internet. What should you implement?

You manage an Azure VM that hosts a critical database. The VM uses managed disks with Premium SSD. You need to implement a backup solution that provides point-in-time recovery with RPO of 4 hours, retains daily backups for 30 days, and monthly backups for 12 months. The solution must minimize administrative effort. What should you do?