az 104 practice test Intermediate Practice Exam: Medium Difficulty 2025

Your organization has multiple Azure subscriptions and needs to ensure that all virtual machines across these subscriptions comply with a naming convention that starts with 'VM-' followed by the department code. Developers should be prevented from creating VMs that don't follow this pattern. What should you implement?

You are managing a storage account that contains critical business data. The compliance team requires that all data modifications and deletions be tracked for audit purposes, and deleted blobs must be recoverable for 30 days. Which combination of features should you configure?

Your company has an Azure AD tenant with 500 users. The security team wants to enforce multi-factor authentication only for users who sign in from outside the corporate network or access sensitive applications. Administrative accounts should always require MFA. What is the most efficient approach?

You deploy a web application on an Azure VM that needs to access Azure Key Vault to retrieve secrets. You want to implement this access without storing any credentials in the application code or configuration files. What should you configure?

Your application running on Azure Virtual Machines needs to store large amounts of unstructured log data that will be accessed frequently for the first 30 days, then rarely accessed for up to 1 year, after which it can be deleted. What is the most cost-effective storage solution?

You need to deploy a highly available web application across two Azure regions. The application should automatically failover to the secondary region if the primary region becomes unavailable. Traffic should normally be routed to the primary region. Which Azure service should you configure?

Your company has a virtual machine that runs a business-critical application. The VM must be restored within 1 hour if it fails, and you need to retain recovery points for 30 days. The VM has a 500 GB managed disk. What backup solution should you implement?

You have an Azure Virtual Network with multiple subnets. A subnet named 'DatabaseSubnet' contains virtual machines running SQL Server. You need to ensure that only VMs in the 'AppSubnet' can connect to the database VMs on port 1433, and no other network traffic should reach DatabaseSubnet. What should you configure?

Your development team reports that a web application running on an Azure VM Scale Set is experiencing performance issues during peak hours. You need to identify the root cause. The application metrics show high response times, but you're unsure if it's CPU, memory, disk, or network related. What should you do first?

You are deploying a multi-tier application with web servers in one availability set and database servers in another availability set within the same region. To minimize latency between tiers while maintaining high availability, what additional configuration should you implement?