MicrosoftAssociate levelAZ-104

AZ-104 exam dumps: 289 free Azure Administrator Associate practice questions

Free AZ-104 practice questions for the Microsoft Certified: Azure Administrator Associate exam, with the correct answer and a full explanation for every option. Read the first 10 below, browse all 289 by number, or take a timed practice exam.

Question bank last updated January 2025

Start timed practice exam Browse all 289 questions

Free AZ-104 practice questions

Questions 1 to 10 of 289

Pick an answer before you open the explanation. Each question also has its own page with a permalink.

AZ-104 Question 1

Single answer

You are an Azure Administrator for an organization using Microsoft Entra ID. You need to create a group that automatically adds members whenever a user’s Department attribute is set to 'Finance.' Which group membership configuration in Microsoft Entra ID should you use to achieve this objective?

  1. A

    Assigned membership

  2. B

    Dynamic device membership

  3. C

    Dynamic user membership

  4. D

    Self-service group management

Show answer and explanation

Correct answer: C

Explanation

Dynamic user membership is the correct choice because it uses attribute-based rules (e.g., Department) to automatically manage group membership without manual intervention.

  • A. Incorrect.

    This option requires you to manually add or remove users, which does not fulfill the requirement of automatic membership based on an attribute.

  • B. Incorrect.

    Dynamic device membership applies rules to devices rather than to users, so it won't meet the requirement of automatically adding users based on the Department attribute.

  • C. Correct.

    Dynamic user membership lets you create a membership rule based on user attributes such as Department, enabling automated user addition or removal.

  • D. Incorrect.

    Self-service group management allows users to request membership in groups, but it does not automatically add or remove users based on attributes.

AZ-104 Question 2

Single answer

You are an Azure Administrator for a company that uses Microsoft Entra for identity management. The HR department requests that any new user hired into the 'Sales' department is automatically added to the 'SalesTeam' group without requiring manual updates. Which action should you take to ensure these users are instantly assigned to the correct group upon hire?

  1. A

    Edit the 'SalesTeam' group membership to require approval-based joining for all new hires

  2. B

    Define a dynamic membership rule that adds members with Department set to 'Sales' to the 'SalesTeam' group

  3. C

    Convert the 'SalesTeam' group into a Microsoft 365 group and enable self-service membership

  4. D

    Create a script to run nightly that queries each new user’s department and updates group membership

Show answer and explanation

Correct answer: B

Explanation

Dynamic membership in Microsoft Entra (Azure AD) automatically assigns users to groups based on their user attributes, such as Department. Defining a rule that checks whether the Department attribute is set to 'Sales' ensures all new 'Sales' employees are added to the 'SalesTeam' group without manual intervention.

  • A. Incorrect.

    Approval-based joining only allows users to request membership but doesn’t automate assignment based on user attributes, so it’s not suitable for automatic assignment.

  • B. Correct.

    A dynamic membership rule in Microsoft Entra (Azure AD) uses a user’s department or other attributes to grant or remove group membership automatically.

  • C. Incorrect.

    Changing the group type to a Microsoft 365 group and enabling self-service membership would still require users to manually join, which does not meet the requirement for automatic assignment.

  • D. Incorrect.

    While scripting could theoretically manage membership, it requires ongoing maintenance and does not leverage native Azure AD dynamic membership capabilities, making it less efficient and more prone to error.

AZ-104 Question 3

Single answer

Your company recently hired several employees who need immediate access to a corporate application protected by a Microsoft Entra security group. You want the group's membership to be updated automatically based on each new employee's department attribute in Microsoft Entra ID. Which group membership type should you configure to ensure that all new employees in the 'Sales' department are automatically added to this group?

  1. A

    Assigned group membership

  2. B

    Dynamic user membership

  3. C

    Dynamic device membership

  4. D

    Microsoft 365 group membership

Show answer and explanation

Correct answer: B

Explanation

Dynamic user membership in Microsoft Entra ID lets you define rules based on user attributes. When a new employee in the 'Sales' department is created, the attribute-based membership rule automatically adds the user to the group, removing the need for manual intervention.

  • A. Incorrect.

    Assigned group membership requires manual addition or removal of members, which does not suit the automatic requirement.

  • B. Correct.

    Dynamic user membership automatically adds or removes user accounts based on defined user attributes, fulfilling the scenario’s requirement.

  • C. Incorrect.

    Dynamic device membership filters devices, not user attributes, so it would not automatically add employees based on their department.

  • D. Incorrect.

    Microsoft 365 group membership is primarily for collaboration scenarios, and it does not inherently automate user addition based on attributes.

AZ-104 Question 4

Single answer

You are an Azure Administrator for Contoso. The organization wants to simplify user access for newly created user accounts so that new hires immediately have the correct permissions and resources. You need to create a group in Azure Active Directory that automatically includes all new user accounts as soon as they are created. Which membership type should you choose?

  1. A

    Assigned membership

  2. B

    Dynamic user membership

  3. C

    Dynamic device membership

  4. D

    Microsoft 365 group

Show answer and explanation

Correct answer: B

Explanation

Dynamic user membership automatically includes new user accounts in a group based on user attributes. This meets the requirement of having new hires immediately gain access without manual intervention.

  • A. Incorrect.

    Requires manual addition and removal of members, so it will not automatically include new users.

  • B. Correct.

    Automatically adds users to the group based on their user attributes, making it ideal for immediately including new hires.

  • C. Incorrect.

    Relies on device attributes rather than user attributes, so it's not suitable for automatically including new user accounts.

  • D. Incorrect.

    Primarily used for collaboration scenarios (mailbox, calendar). It does not automatically add new user accounts based on their attributes.

AZ-104 Question 5

Single answer

You are an Azure Administrator at a marketing firm using Azure Active Directory (Azure AD) to manage identity. The HR department requests a group that automatically includes all user accounts with the 'Marketing' department attribute so that it can be used to secure resources in Azure. Which group type in Azure AD best meets these requirements?

  1. A

    Microsoft 365 group with assigned membership

  2. B

    Security group with assigned membership

  3. C

    Security group with dynamic user membership

  4. D

    Microsoft 365 group with dynamic device membership

Show answer and explanation

Correct answer: C

Explanation

To automatically add members based on user attributes in Azure AD, you need a dynamic group configured for users rather than devices. A security group with dynamic user membership ensures that user accounts are added or removed based on defined attribute rules, fulfilling the HR department’s request.

  • A. Incorrect.

    Does not automatically add the relevant users since it's assigned membership

  • B. Incorrect.

    Does not automatically add the relevant users since it's assigned membership

  • C. Correct.

    Automatically adds or removes users based on specified user attribute rules

  • D. Incorrect.

    Intended for device objects, not for user objects

AZ-104 Question 6

Single answer

You are an Azure Administrator at an organization acquiring 50 new employees from a recently acquired company. You want to create their user accounts in Azure Active Directory and automatically add them all to a new group that has existing RBAC assignments for multiple resources in your subscription. Which is the most efficient method to accomplish these tasks in the Azure portal with minimal administrative overhead?

  1. A

    Create each user individually using the New user option in the Azure portal and then manually add each user to the new group

  2. B

    Use the Bulk create feature in Azure AD, providing a CSV file with both user information and group membership details

  3. C

    Execute a PowerShell script to create user accounts and group assignments separately for each user

  4. D

    Rely on the Azure CLI to interactively prompt for each user’s details and then manually assign the new group

Show answer and explanation

Correct answer: B

Explanation

Utilizing the Bulk create feature in the Azure AD portal streamlines the process by allowing you to upload a CSV file containing both user attributes and group membership. This eliminates the need for repetitive manual steps or additional scripting when onboarding multiple new employees at the same time.

  • A. Incorrect.

    Manually creating each user and then adding them to the group one at a time is very time-consuming, especially for 50 users, and is not the most efficient approach in the portal.

  • B. Correct.

    Using the Bulk create feature for user creation in Azure AD with a properly formatted CSV file allows you to specify user details and group membership in one process, making this approach the most efficient for large imports.

  • C. Incorrect.

    While PowerShell can automate user creation, it still requires you to write and execute scripts, and it involves separate steps for group assignments. This is less straightforward than using the built-in Bulk create option in the portal.

  • D. Incorrect.

    Manually responding to prompts for each user’s details via the Azure CLI defeats the purpose of automation and bulk user creation, especially when handling many users.

AZ-104 Question 7

Select 2

You are an Azure Administrator for Contoso. Your organization plans to assign Microsoft 365 E3 licenses to 50 new employees. However, you discover that their 'Usage location' property must be set before the licenses can be assigned. You want to update this property for all 50 users in a single operation. Which of the following methods can you use to accomplish this task? (Choose two options.)

  1. A

    Use Azure AD PowerShell to run a script that updates the usage location property for multiple users at once

  2. B

    Use the Azure portal to select each user individually and manually update the usage location property

  3. C

    Use the Microsoft 365 admin center to run a bulk update by uploading a CSV file

  4. D

    Create a dynamic Azure AD group that automatically sets the usage location for all members

Show answer and explanation

Correct answers: A, C

Explanation

To update the required 'Usage location' for multiple users at once, you can either use Azure AD PowerShell scripts or the Microsoft 365 admin center's bulk update via CSV. Dynamic groups only help manage group membership based on user attributes; they do not alter user properties themselves, and manually updating each user does not fulfill the requirement of a single, efficient operation.

  • A. Correct.

    Azure AD PowerShell supports batch scripting to modify attributes such as usage location for several users simultaneously

  • B. Incorrect.

    Selecting each user individually does not meet the requirement of a single operation for all 50 users

  • C. Correct.

    The Microsoft 365 admin center allows for bulk updates using a CSV file, enabling a single operation for multiple users

  • D. Incorrect.

    Dynamic groups cannot set user attributes; they only assign membership based on existing attributes

AZ-104 Question 8

Single answer

Your company uses Azure Active Directory to manage users and groups. You have created a new dynamic security group that uses a rule to automatically include employees whose Department property is set to 'Sales.' However, newly created users in the 'Sales' department are not added to the group, and you confirm that the department is correctly set in each user’s profile. Which step should you take to ensure that new users are successfully added to the group?

  1. A

    Convert the group from a security group to a Microsoft 365 group

  2. B

    Enable a service principal for department-based assignment

  3. C

    Create a custom extension attribute to store the Department property

  4. D

    Verify that your membership rule references the correct Department attribute name

Show answer and explanation

Correct answer: D

Explanation

When configuring an Azure AD dynamic security group, the primary issue often lies in how the membership rule is constructed. Department is a native user property in Azure AD, so no additional extension attributes or group type changes are typically required. Verifying the rule uses the correct attribute and syntax for ‘Department’ resolves the issue of users not being added to the group.

  • A. Incorrect.

    Changing the group type to a Microsoft 365 group is not directly related to the issue of users not being added to the group by a Department-based rule.

  • B. Incorrect.

    Enabling a service principal for department-based assignment is not required for dynamic membership based on user attributes in Azure AD.

  • C. Incorrect.

    A custom extension attribute is only needed if you are referencing an attribute not natively available in Azure AD; Department is a built-in attribute, so no custom attribute is required.

  • D. Correct.

    Azure AD dynamic membership rules rely on the correct attribute name. Ensuring that the membership rule specifically references the built-in 'department' attribute (and not a misspelling or unrelated field) is the key step.

AZ-104 Question 9

Single answer

You work as an Azure Administrator for Contoso, Inc. The HR department recently changed the reporting structure for 50 employees in the marketing department. You need to update each user’s manager property in Azure Active Directory to reflect the newly assigned manager and ensure these users are also members of a specific Azure AD security group. Which method provides the most efficient way to perform these changes in bulk?

  1. A

    Manually update each user profile in the Azure portal and add users to the group individually

  2. B

    Use the Azure AD PowerShell module to update the Manager attribute and assign group membership in bulk

  3. C

    Create a new dynamic security group that automatically assigns membership based on the users’ manager attribute

  4. D

    Enable Azure AD Premium P2 licenses for all users to automatically sync manager information from on-premises Active Directory

Show answer and explanation

Correct answer: B

Explanation

The Azure AD PowerShell module enables efficient bulk updates to user properties and security group memberships. It saves time and reduces the chance of errors compared to manual updates in the Azure portal.

  • A. Incorrect.

    Manually updating each user is time-consuming and error-prone, especially when dealing with large groups.

  • B. Correct.

    Using the Azure AD PowerShell module allows you to script and automate bulk changes efficiently, including updates to the Manager field and group membership.

  • C. Incorrect.

    Dynamic group membership can automate group assignments based on user attributes, but it does not update the Manager property for users.

  • D. Incorrect.

    Azure AD Premium P2 does not automatically update the manager attribute. License tiers do not replace the need to update user properties or to configure directory synchronization properly.

AZ-104 Question 10

Single answer

You are an Azure Administrator for a company that has recently hired a large number of new full-time employees. You want to ensure each new employee automatically receives a Microsoft 365 E5 license on their first day. You decide to use group-based licensing in Microsoft Entra ID to avoid manual overhead. Which approach should you implement to accomplish this goal?

  1. A

    Use a security group with dynamic membership to automatically assign licenses based on user attributes.

  2. B

    Manually assign licenses to each user by selecting them from the Azure portal.

  3. C

    Create a distribution group for all full-time employees, and enable licensing assignment through that group.

  4. D

    Require departmental managers to submit a change request form each time a license needs to be assigned.

Show answer and explanation

Correct answer: A

Explanation

Group-based licensing in Microsoft Entra ID allows you to automatically assign licenses to users by adding them to a group that has a specific license applied. A security group with dynamic membership is the most efficient solution for this scenario, as it uses user attributes to automatically add or remove employees from the group, thereby assigning or revoking licenses without manual intervention.

  • A. Correct.

    Using a security group with dynamic membership allows you to automatically add users based on attributes like job title or department, then assign licenses to the group.

  • B. Incorrect.

    Manually assigning licenses is time-consuming and prone to human error, especially when dealing with a large number of hires.

  • C. Incorrect.

    Distribution groups are for email distribution and cannot be used for license assignment in Microsoft Entra ID. You need a security or Microsoft 365 group for license assignment.

  • D. Incorrect.

    Relying on change requests is a manual process that defeats the purpose of automated license assignment in Microsoft Entra ID.

Timed practice exam

Take a AZ-104 practice test under exam conditions

60 questions in 60 minutes, drawn from this bank, with a score report and a per-question review when you finish.

Start timed exam

What the AZ-104 exam covers

Official Microsoft Certified: Azure Administrator Associate exam domains and weightings.

  • Manage Azure Identities and Governance

    20% of exam

  • Implement and Manage Storage

    15% of exam

  • Deploy and Manage Azure Compute Resources

    20% of exam

  • Implement and Manage Virtual Networking

    15% of exam

  • Monitor and Maintain Azure Resources

    10% of exam

All 289 AZ-104 practice questions

Every question has a page with the answer and explanation. Numbers are stable, so you can bookmark or share them.

  1. 1.You are an Azure Administrator for an organization using Microsoft Entra ID. You need to create a group that...
  2. 2.You are an Azure Administrator for a company that uses Microsoft Entra for identity management. The HR...
  3. 3.Your company recently hired several employees who need immediate access to a corporate application protected...
  4. 4.You are an Azure Administrator for Contoso. The organization wants to simplify user access for newly created...
  5. 5.You are an Azure Administrator at a marketing firm using Azure Active Directory (Azure AD) to manage...
  6. 6.You are an Azure Administrator at an organization acquiring 50 new employees from a recently acquired...
  7. 7.You are an Azure Administrator for Contoso. Your organization plans to assign Microsoft 365 E3 licenses to 50...
  8. 8.Your company uses Azure Active Directory to manage users and groups. You have created a new dynamic security...
  9. 9.You work as an Azure Administrator for Contoso, Inc. The HR department recently changed the reporting...
  10. 10.You are an Azure Administrator for a company that has recently hired a large number of new full-time...
  11. 11.You are an Azure Administrator for your organization. You have assigned group-based licenses for Microsoft...
  12. 12.You are an Azure Administrator for Contoso. Your organization uses Microsoft Entra ID to manage Microsoft 365...
  13. 13.You are an Azure Administrator for Contoso. The company is partnering with an external vendor, Fabrikam,...
  14. 14.You are the Azure Administrator for Contoso. A project requires collaboration with an external partner who...
  15. 15.You are an Azure Administrator for a company that frequently collaborates with external partners. You need to...
  16. 16.You are an Azure administrator for a company planning to introduce self-service password reset (SSPR) to a...
  17. 17.You are an Azure Administrator for a company that wants to enable Self-Service Password Reset (SSPR) only for...
  18. 18.You are an Azure Administrator responsible for configuring self-service password reset (SSPR) across your...
  19. 19.You are an Azure Administrator for a company that requires a group of developers to manage only the Virtual...
  20. 20.You are an Azure Administrator for Contoso. A team of developers should be able to create and manage only...
  21. 21.You are an Azure Administrator responsible for multiple resource groups. In one resource group, the security...
  22. 22.You need to grant a junior admin the ability to create, start, and stop virtual machines within a resource...
  23. 23.A new security consultant needs read-only access to all Azure resources in your subscriptions so they can...
  24. 24.You have been asked to grant a support engineer the ability to create and manage all Azure resources within a...
  25. 25.You are an Azure Administrator for Contoso. A developer named DevUser must be able to manage resources in the...
  26. 26.You manage an Azure subscription with multiple resource groups: Development, Test, and Production. You need...
  27. 27.Your organization has multiple resource groups within a single subscription. You have a user who needs to...
  28. 28.You are managing an Azure subscription with multiple resource groups. A user named John has been assigned the...
  29. 29.You manage an Azure subscription that contains several resource groups, including one named RG-Data. A user...
  30. 30.A user named Alex has been assigned the Reader role at the subscription level. However, Alex is also a member...
  31. 31.Your organization is using multiple Azure subscriptions to separate different cost centers. The finance...
  32. 32.Your organization has multiple Azure subscriptions, including one used for production. You need to enforce...
  33. 33.You are an Azure Administrator for a global retail organization that manages multiple Azure subscriptions....
  34. 34.Your organization requires that all newly deployed Azure resources must include a 'CostCenter' tag. You...
  35. 35.You are an Azure Administrator for Contoso. The company requires all resources in a particular subscription...
  36. 36.You are an Azure Administrator at Contoso. Your team has created a custom Azure Policy definition that...
  37. 37.You are an Azure Administrator for an e-commerce company. The development team frequently updates resources...
  38. 38.You manage an Azure resource group that hosts a critical Storage Account. The business requires that this...
  39. 39.You are an Azure Administrator for a company that has a resource group named 'DataRG' which contains a...
  40. 40.You are tasked with ensuring that all existing and newly created Azure resources within a specific resource...
  41. 41.You are an Azure Administrator for a company that has multiple subscriptions. The company wants to track...
  42. 42.You are managing multiple Azure resources across subscriptions. The finance department requires that all...
  43. 43.Your organization wants to ensure that all resources in a resource group named 'FinanceRG' include a...
  44. 44.You manage an Azure environment with multiple resource groups, including one named 'TestServicesRG' that...
  45. 45.You are an Azure Administrator for Contoso. You have been directed to ensure that all resources, both...
  46. 46.Your organization has consolidated multiple Azure subscriptions for different departments. You want to ensure...
  47. 47.Your organization manages multiple Azure subscriptions for different departments. You need to ensure that a...
  48. 48.Your organization has multiple Azure subscriptions and wants to ensure a standard set of Azure Policy...
  49. 49.You are an Azure administrator at an e-commerce company experiencing rising monthly Azure costs. You need to...
  50. 50.You administer multiple Azure subscriptions for different departments. The marketing team often exceeds its...
  51. 51.You are an Azure administrator for an e-commerce company. The company wants to set up an alert when their...
  52. 52.You are an Azure Administrator for Contoso, a global enterprise with multiple Azure subscriptions in your...
  53. 53.You are an Azure Administrator for a company that has multiple Azure subscriptions. The company wants to...
  54. 54.Your organization wants to implement a single, top-level hierarchy for all Azure subscriptions by creating a...
  55. 55.Your organization hosts a sensitive data container in an Azure Storage account. You’ve been asked to...
  56. 56.Your organization needs to share a Blob container externally for exactly 72 hours, allowing only read access...
  57. 57.Your company manages an Azure Storage account used to store large media files. You want to share the video...
  58. 58.You manage an Azure Storage account that must only be accessible from within an Azure Virtual Network (VNet)...
  59. 59.You administer an Azure Storage account that must only allow incoming connections from an Azure Virtual...
  60. 60.You manage an Azure Storage account named contosodata, which is currently accessible from all networks. A new...
  61. 61.Your organization runs a container in Azure Blob Storage which currently stores critical files. You need to...
  62. 62.You have a private container named 'media' in your Azure Storage account storing corporate training videos....
  63. 63.A company hosts a web application that needs to upload files to an Azure Blob Storage container. The goal is...
  64. 64.You are an Azure Administrator for a company that stores departmental data in different containers. A manager...
  65. 65.You need to grant a group of external consultants temporary read access to a container named...
  66. 66.You have an Azure Storage container that stores confidential documents. You need to grant temporary read...
  67. 67.You manage an Azure Storage account used by various internal applications. The primary access key for this...
  68. 68.You are the Azure Administrator for a company that uses a production Azure Storage account. The application...
  69. 69.Your organization’s security policy mandates periodic rotation of storage account access keys for an Azure...
  70. 70.Contoso Ltd. has an on-premises Active Directory domain and uses Azure File shares for file storage. They...
  71. 71.You are the Azure Administrator for Contoso. The company has an on-premises Active Directory domain synced...
  72. 72.You administer an Azure Storage account that must allow on-premises domain users to authenticate with their...
  73. 73.Your organization wants to store mission-critical data in an Azure Storage account with minimal downtime even...
  74. 74.You manage an Azure Storage account used for storing critical business data. The data must remain highly...
  75. 75.You are managing an Azure Storage account that receives large amounts of data each day. After 30 days, the...
  76. 76.You are an Azure Administrator for Contoso. The company needs to create a new storage account to store large...
  77. 77.Your organization is deploying a global e-commerce application that must remain available even if the primary...
  78. 78.Your company recently created a new Azure Storage account to store sensitive data. The security policy states...
  79. 79.An e-commerce company is hosting mission-critical data in Azure. They require the highest availability and...
  80. 80.You run a mission-critical application that must stay online even if an entire Azure region goes offline. The...
  81. 81.Your company hosts a mission-critical application in Azure that must retain high availability even if the...
  82. 82.Your organization has two Azure Storage accounts in different regions: contososrc (the source) and contosodst...
  83. 83.You are an Azure Administrator at a multinational company. You have two Azure Storage accounts: 'sourceac' in...
  84. 84.You manage two standard General Purpose v2 storage accounts named sourceacc (East US) and destacc (West US)....
  85. 85.Contoso has created a new Azure Storage account to store sensitive corporate data. Due to compliance...
  86. 86.You are an Azure Administrator at Contoso. The company requires all data stored in a new Azure Storage...
  87. 87.You are the Azure Administrator for an organization that requires all data stored in Azure to be encrypted at...
  88. 88.You are an Azure Administrator at a company that has large video files stored on-premises. You need to upload...
  89. 89.You are an Azure administrator for your company. You need to migrate a set of large data files from an...
  90. 90.You are the Azure Administrator for Contoso. You need to move tens of thousands of backup files from an...
  91. 91.An organization with a hybrid environment wants to provide users with a shared folder that can be accessed...
  92. 92.You manage an Azure Storage account that hosts both an Azure file share and multiple Blob containers for your...
  93. 93.Your organization runs a Windows-based application that needs SMB file shares for regular file storage, while...
  94. 94.Your organization has created a standard General Purpose v2 storage account named contosoStorage to host file...
  95. 95.You have created an Azure file share named 'data-share' in a standard general-purpose v2 storage account. You...
  96. 96.You plan to create an Azure file share in your general-purpose v2 storage account so that on-premises users...
  97. 97.You need to create a new container in an existing Azure Storage account to store publicly accessible video...
  98. 98.Your company needs a new container within an existing Azure Storage account to store sensitive logs. The...
  99. 99.Your company requires that a newly created container in Azure Blob Storage store application logs so that...
  100. 100.You are an Azure Administrator for a company that stores application logs in Azure Blob Storage. The logs...
  101. 101.Your company stores large volumes of historical compliance data in an Azure Storage account with very...
  102. 102.You are an Azure Administrator for a financial services company required to store large volumes of...
  103. 103.You are the Azure administrator for a company that uses an Azure file share to store department documents....
  104. 104.You are an Azure Administrator for Contoso, which uses Azure Files to store critical project documents. After...
  105. 105.Your organization uses an Azure file share named 'SharedDocs' to store important documents. You need to...
  106. 106.You manage an Azure Storage account used by your team to store campaign assets. Assets older than 30 days...
  107. 107.You manage a storage account holding daily log files that must stay in the Hot tier for 30 days, then move...
  108. 108.You are the Azure Administrator for a financial services company. You manage a storage account that collects...
  109. 109.You manage an Azure Storage account that contains critical business documents in Blob Storage. Compliance...
  110. 110.You are an Azure Administrator for a company that stores critical financial reports in an Azure Storage...
  111. 111.You manage an Azure Storage account with a container holding frequently updated transaction files. The...
  112. 112.You are an Azure administrator for a company that wants to standardize deployments across dev, test, and...
  113. 113.You are an Azure administrator for an organization that needs to deploy a multi-tier application environment...
  114. 114.You manage an Azure environment where you need to deploy identical sets of resources (App Service, SQL...
  115. 115.You have a Bicep file that deploys a storage account. Part of the file is shown below: param storageSKU...
  116. 116.You are reviewing a Bicep file that deploys an Azure Web App. The file defines a parameter for the app’s SKU...
  117. 117.You are reviewing a Bicep file that deploys several resources to an existing resource group. The file...
  118. 118.You have updated an existing Azure Resource Manager (ARM) template to include a new parameter named 'vmCount'...
  119. 119.You are an Azure Administrator for a web application that was originally deployed via an Azure Resource...
  120. 120.Your company has an existing Azure Resource Manager (ARM) template that deploys a StandardLRS Storage Account...
  121. 121.You have an existing Bicep file that deploys an Azure Storage Account resource named 'stgAccount'. You need...
  122. 122.You have an existing Bicep file that declares a storage account resource with a hardcoded name. You want to...
  123. 123.You manage an existing Azure App Service through a Bicep file that deploys a Web App. Your security team now...
  124. 124.You are an Azure Administrator for Contoso. The company relies on Infrastructure as Code for all new resource...
  125. 125.You have created a Bicep file to deploy an Azure Virtual Network for different environments. The Bicep file...
  126. 126.You are an Azure Administrator for a company that has multiple environments (development, testing, and...
  127. 127.Your organization has deployed a set of Azure resources using the Azure Portal for a new project. You need to...
  128. 128.You are an Azure Administrator at Contoso. You have an existing resource group with a web app and a storage...
  129. 129.You have deployed several Azure resources, including a virtual machine, storage account, and virtual network,...
  130. 130.You need to create a new Windows Server virtual machine in Azure that will serve as a web server. The VM must...
  131. 131.You are deploying a new multi-tier application in Azure that must remain highly available even in the event...
  132. 132.Your development team needs to quickly deploy and tear down multiple Windows Server 2019 virtual machines in...
  133. 133.You are an Azure Administrator for Contoso. You need to create a new Linux virtual machine (VM) in the East...
  134. 134.You are an Azure Administrator tasked with creating a Windows Server 2022 Datacenter virtual machine in the...
  135. 135.You are deploying a new Ubuntu virtual machine in the East US region with an Availability Zone and want to...
  136. 136.You manage a Windows Server 2019 VM in Azure and want to enable Azure Disk Encryption using a custom key...
  137. 137.Your organization needs to encrypt both the OS disk and data disk of a Windows VM using Azure Disk...
  138. 138.You are an Azure Administrator for a large research firm. One of your production Windows VMs needs to have...
  139. 139.You are an Azure Administrator managing a Windows Server VM named 'ProdVM' in the East US region under...
  140. 140.You are an Azure Administrator responsible for a multi-tier application hosted in Azure. One of your Windows...
  141. 141.You manage an Azure virtual machine (VM1) in the East US region. The VM has managed disks and is connected to...
  142. 142.You manage an Azure subscription that runs a Windows Server VM (size: StandardD2sv3) in the East US region....
  143. 143.You have a Windows Server 2019 VM named 'SalesAppVM' running on a Standard DS2v2 size in the East US region....
  144. 144.You are an Azure Administrator managing an application running on a virtual machine that is part of an...
  145. 145.Your organization hosts a Windows Server VM in Azure with a 128GB OS disk (Standard SSD SKU). The application...
  146. 146.You are an Azure administrator for a financial services company. One of your VMs is experiencing performance...
  147. 147.You have a Linux virtual machine in Azure with a 512 GB data disk that is nearly out of space. You want to...
  148. 148.You are responsible for deploying a three-tier web application in Azure. The application must remain...
  149. 149.You are running a three-tier application on three Linux virtual machines in the West Europe region. The...
  150. 150.You are planning to deploy multiple virtual machines for a new line-of-business application in Azure. The...
  151. 151.You are deploying an Azure Virtual Machine Scale Set for a critical web application that experiences...
  152. 152.You manage a virtual machine scale set (VMSS) hosting a stateless web application with fluctuating user...
  153. 153.You are deploying a new Azure Virtual Machine Scale Set to support a CPU-intensive back-end service for an...
  154. 154.You need to containerize a custom web application and deploy it in Azure using an image stored in a private...
  155. 155.Your company has developed a custom web application container image stored on Docker Hub. You are tasked with...
  156. 156.You work for a company that needs to run an internal application in a container, accessible through a custom...
  157. 157.Your company wants to reduce latency by replicating container images to multiple Azure regions. You are...
  158. 158.Your organization has deployed an Azure Container Registry in one region. You need to replicate Docker images...
  159. 159.You are an Azure Administrator overseeing a containerized application deployment. Your development team wants...
  160. 160.You have a container image named vantageco.azurecr.io/myapp:latest stored in a private Azure Container...
  161. 161.You are an Azure Administrator. You need to run a private container image from Azure Container Registry in...
  162. 162.You are configuring an Azure Container Instance to run a container that processes images from Azure Blob...
  163. 163.You are tasked with deploying a containerized Node.js application to Azure Container Apps. The container...
  164. 164.You are deploying a containerized web application to Azure Container Apps. The container listens on port 80...
  165. 165.You have a containerized application that processes messages from an Azure Storage queue. You plan to deploy...
  166. 166.You have deployed a microservices application in Azure Container Apps that experiences significant CPU usage...
  167. 167.Your organization is launching a new containerized web application that experiences unpredictable spikes in...
  168. 168.Your organization runs a set of containerized microservices that experience unpredictable spikes in traffic....
  169. 169.You have created an Azure App Service Web App for a .NET Core application. The development team wants to test...
  170. 170.Your organization runs a production web application on an Azure App Service configured on the Standard tier....
  171. 171.You are an Azure Administrator for a manufacturing company that wants to host a .NET Core web application in...
  172. 172.You are an Azure Administrator for a healthcare startup that needs to deploy a new web application supporting...
  173. 173.You are deploying a web application in Azure that requires a custom domain, SSL support, and the ability to...
  174. 174.Your organization is deploying a mission-critical web application in Azure. You need to provision an App...
  175. 175.You manage an Azure App Service hosting a busy e-commerce application experiencing unpredictable traffic...
  176. 176.You manage an Azure App Service plan for a web application that experiences unpredictable traffic spikes. The...
  177. 177.You manage an Azure App Service hosting a mission-critical web application. The application experiences...
  178. 178.You have been tasked with creating a production-ready Node.js web application in Azure. The application must...
  179. 179.Your company has an eCommerce web application that requires a staging slot to test new releases before...
  180. 180.You are creating a new Azure Web App in the Azure portal for an internal line-of-business application. The...
  181. 181.You manage an Azure App Service hosting a web application on a custom domain. You have obtained a wildcard...
  182. 182.You have an Azure App Service named WebAppProd that uses a custom domain (www.contoso.com). You want to...
  183. 183.You have deployed a web application to Azure App Service that must meet strict compliance requirements. You...
  184. 184.You are an Azure Administrator for a retail company. The marketing team wants to map the custom domain name...
  185. 185.You have an Azure App Service named myapp.azurewebsites.net and a custom domain contoso.com registered with a...
  186. 186.You manage an Azure App Service named contosoapp.azurewebsites.net. You have a custom domain named...
  187. 187.You have a web app running in a Standard-tier App Service plan. The development team wants you to configure...
  188. 188.You manage an Azure Web App named 'mywebapp' running under the Standard tier. The development team wants to...
  189. 189.Your company hosts a .NET web application on Azure App Service, which also uses an Azure SQL Database. You...
  190. 190.You manage an Azure Web App that must securely connect to an Azure SQL Database without sending traffic over...
  191. 191.You manage an Azure App Service hosting an application that needs to securely access a back-end SQL database...
  192. 192.You are an Azure Administrator for a company that hosts a web application using Azure App Service. The...
  193. 193.You have an Azure Web App named 'ContosoApp' running in the Production slot, and you have created a Staging...
  194. 194.You manage an Azure App Service named contoso-webapp. The application has a single deployment slot called...
  195. 195.You are an Azure Administrator managing a web application hosted in an Azure App Service. Your team wants to...
  196. 196.Your organization has created an Azure Virtual Network named VNet1 containing two subnets, SubnetA and...
  197. 197.You have an Azure virtual network (VNet) with two subnets: SubnetA (hosting a web application) and SubnetB...
  198. 198.Your organization has two virtual networks in different subscriptions within the same Azure region. You need...
  199. 199.You are configuring a new Azure Virtual Network named VNet1 with three subnets: front-end, middle-tier, and...
  200. 200.You have created a new virtual network (VNet) in Azure with an address space of 10.1.0.0/16. The VNet already...
  201. 201.You have an existing Azure virtual network (VNet) named VNet1 with an address space of 10.0.0.0/16....
  202. 202.You have two virtual networks, VNET1 and VNET2, in separate regions. VNET1 hosts a network virtual appliance...
  203. 203.You manage an Azure environment with two separate virtual networks: VNet1 (which has a VPN gateway) and...
  204. 204.You manage an Azure environment that includes two virtual networks (VNetA and VNetB) in different...
  205. 205.You are an Azure Administrator for a company that hosts a web application on a virtual machine. The...
  206. 206.Your company hosts a web application on multiple Azure VMs placed behind an Azure Load Balancer. You notice...
  207. 207.You are managing a multi-tier application hosted in Azure that requires a single consistent public IP address...
  208. 208.You have a virtual network with multiple subnets. You want to route traffic from the front-end subnet to a...
  209. 209.You have created a route table with a user-defined route that directs all outbound traffic (0.0.0.0/0) to a...
  210. 210.You manage an Azure Virtual Network that includes multiple subnets, including Subnet A hosting a set of VMs....
  211. 211.You have an Azure VM named VM1 in a subnet secured by a Network Security Group (NSG). VM1 can ping the...
  212. 212.You have deployed a new Azure VM in a subnet that routes all outbound traffic through a Network Virtual...
  213. 213.You have deployed a new Azure virtual machine (VM) within a virtual network that hosts multiple subnets. This...
  214. 214.You are an Azure Administrator for Contoso. You have a private virtual network hosting several Windows and...
  215. 215.You have an Azure VM running a web application on port 443 within a single virtual network (VNet). All...
  216. 216.You are an Azure Administrator for Contoso. The company uses an ExpressRoute connection to reach an Azure...
  217. 217.You have a virtual network (VNet) containing multiple subnets for web and database virtual machines (VMs)....
  218. 218.You manage an Azure environment that hosts multiple virtual machines (VMs) for different workloads in the...
  219. 219.You have deployed several virtual machines to a single subnet in an Azure Virtual Network. All these VMs are...
  220. 220.You have an Azure VM running a custom web service on TCP port 8080. The VM is in a subnet associated with an...
  221. 221.Your company requires inbound HTTPS traffic (TCP port 443) from an on-premises network to reach an Azure VM....
  222. 222.An Azure administrator configures a network security group (NSG) named NSG-Subnet on a subnet to allow...
  223. 223.You are an Azure Administrator for an organization that wants to enable secure RDP and SSH connections to...
  224. 224.You are administering a new deployment in Azure where multiple Windows and Linux virtual machines need to be...
  225. 225.Your organization has an Azure virtual network (VNet) in the East US region with an address space of...
  226. 226.You manage an Azure environment that hosts a web application in Azure App Service and an Azure SQL Database....
  227. 227.You are the Azure Administrator for Contoso. You have an Azure web app running in a subnet within your...
  228. 228.You manage a virtual network (VNet) that hosts several Azure VMs in a single subnet. You also have an Azure...
  229. 229.You are an Azure Administrator for an online retail company. The company’s Azure environment includes a...
  230. 230.You have configured a private endpoint for an Azure Storage account to restrict access to your internal...
  231. 231.You have successfully created a Private Endpoint for an Azure Storage account in a virtual network (VNet)....
  232. 232.Your company hosts a custom internal web application on a set of Azure virtual machines within the same...
  233. 233.Your organization hosts a multi-tier application in Azure and uses a Public Load Balancer to distribute...
  234. 234.You are an Azure Administrator for a company that hosts multiple internal apps on Azure Virtual Machines, all...
  235. 235.You have a custom domain named contosostorage.com and an Azure Storage account named contosostorage that...
  236. 236.Your company has a custom domain name (for example, contoso.com) registered with an external provider. You...
  237. 237.You manage the contoso.com DNS zone in Azure. Your company wants a partner organization to independently...
  238. 238.You manage a multi-tier application in Azure. The front-end VMs should connect to a set of backend VMs that...
  239. 239.Your company is deploying a multi-tier web application in Azure. The front-end needs to be publicly...
  240. 240.You manage an Azure environment hosting a multi-tier application. The web front-end VMs reside in a public...
  241. 241.You are an Azure Administrator for an e-commerce application that uses an Azure Load Balancer to distribute...
  242. 242.You have configured a public Azure Load Balancer with two virtual machines in the backend pool. The health...
  243. 243.You have configured a Standard Azure Load Balancer to distribute inbound requests across two Linux VMs in a...
  244. 244.You are an Azure Administrator for Fabrikam, Inc., which hosts multiple Azure VMs and Azure App Service web...
  245. 245.You have an Azure virtual machine (VM) running a critical application. You need Azure Monitor to...
  246. 246.You manage an Azure environment with multiple resource groups in two subscriptions and need to centrally...
  247. 247.You are an Azure administrator overseeing a busy e-commerce Azure VM hosting a web API. Recently, the API's...
  248. 248.You manage an Azure Kubernetes Service (AKS) cluster hosting a busy e-commerce application. Customers are...
  249. 249.You are the Azure Administrator for a mission-critical application running on multiple Windows virtual...
  250. 250.You manage an Azure App Service and need to collect and retain diagnostic logs for long-term analysis. You...
  251. 251.Your company runs a line-of-business web application on Azure App Service. A new compliance requirement...
  252. 252.Your company requires you to retain Azure Storage account logs for 60 days in a Log Analytics workspace,...
  253. 253.You are an Azure Administrator for a company whose Windows-based virtual machines send event logs to a Log...
  254. 254.You are the Azure Administrator for an application that sends all HTTP request logs to Azure Monitor. The app...
  255. 255.You manage a multi-subscription Azure environment hosting a distributed containerized application. You need...
  256. 256.Your company has a critical web application deployed in Azure App Service. You want to configure an alert...
  257. 257.You are an Azure Administrator for a critical web application running on multiple Azure VMs. You need to be...
  258. 258.Your company hosts several virtual machines in a resource group named ProductionRG. You want to be notified...
  259. 259.You are the Azure Administrator for an e-commerce application consisting of multiple Windows and Linux VMs, a...
  260. 260.Your team wants to track real-time performance metrics for their Azure virtual machines, while also...
  261. 261.A company is migrating their on-premises environment to Azure and has created multiple Windows and Linux VMs,...
  262. 262.A multi-tier application is deployed across two Azure VMs: one in the West Europe region and another in the...
  263. 263.You have two virtual machines (VMs) in the same region. You want to verify connectivity and measure latency...
  264. 264.You manage several Azure VMs in East US, and users report intermittent connectivity problems when these VMs...
  265. 265.Your organization runs multiple Azure virtual machines and requires that each VM backup is recoverable even...
  266. 266.You are an Azure Administrator for an e-commerce company that hosts a critical application on an Azure VM...
  267. 267.You are an Azure Administrator for Contoso, Inc. They have a critical line-of-business application running on...
  268. 268.You are an Azure Administrator for Contoso. You need to create a new Recovery Services vault in the East US...
  269. 269.You manage an Azure subscription with virtual machines (VMs) running in both the East US and West US regions....
  270. 270.You are managing multiple Azure virtual machines hosted in the East US region for your company’s production...
  271. 271.Your organization needs to protect both on-premises Windows Server workloads and Azure VMs using Azure...
  272. 272.Your company runs multiple Windows and Linux VMs in the East US region. You want to back up these VMs using...
  273. 273.Your organization has multiple Azure VMs running in the East US region. You have been tasked with...
  274. 274.Your organization runs several Azure VMs hosting critical workloads. You need to back up these VMs to an...
  275. 275.You have deployed multiple Windows and Linux VMs in Azure that must be backed up daily with a retention...
  276. 276.You have an Azure VM hosting critical financial data. You need to create a backup policy that performs daily...
  277. 277.You are an Azure Administrator for a company that hosts a mission-critical application on an Azure VM. A...
  278. 278.You are the Azure Administrator for a manufacturing company. One of your Azure VMs running a critical...
  279. 279.You are responsible for an Azure VM named VM1 hosting an application with critical data. The VM is protected...
  280. 280.You are an Azure Administrator for a company that hosts a critical application in a VM in the East US region....
  281. 281.Your organization hosts a critical web application on several Windows-based Azure Virtual Machines in the...
  282. 282.You are an Azure Administrator for a large retail company. You have multiple Azure VMs running in the East US...
  283. 283.Your primary Azure region hosting production workloads has experienced a critical outage, and you need to...
  284. 284.During a regional outage in your primary Azure region, you need to fail over your replicated virtual machines...
  285. 285.Your primary region has experienced a critical outage, making it completely unavailable. You need to bring...
  286. 286.Your organization protects a large number of Azure VMs using Azure Backup within a Recovery Services vault....
  287. 287.Your organization uses Azure Backup via a Recovery Services vault to protect several Azure virtual machines....
  288. 288.You are an Azure Administrator for an organization using Azure Backup to protect multiple Azure virtual...
  289. 289.

AZ-104 exam dumps FAQ

Are these AZ-104 dumps real exam questions?

No. These are original practice questions written to the Microsoft Certified: Azure Administrator Associate exam objectives, not questions copied from a live exam. Memorising leaked questions violates Microsoft's candidate agreement and stops working the moment the question pool rotates. Use this bank to check your understanding of each domain and to find the topics you still need to study.

How many AZ-104 practice questions are there?

289 questions, each with the correct answer, an explanation of the answer, and a note on why every other option is wrong. The first 10 are on this page and every question has its own page linked below.

Are the AZ-104 exam dumps free?

Yes. Every question, answer and explanation on this page and the linked question pages is free to read without an account. A free HydraNode account adds timed practice exams, scoring and progress tracking across attempts.

How do I take a timed AZ-104 practice test?

Sign in and start the Microsoft Certified: Azure Administrator Associate exam on HydraNode. A session gives you 60 questions drawn from this bank in 60 minutes, then a score report with a per-question review.

What topics does the AZ-104 exam cover?

The official exam domains are: Manage Azure Identities and Governance; Implement and Manage Storage; Deploy and Manage Azure Compute Resources; Implement and Manage Virtual Networking; Monitor and Maintain Azure Resources.

More Microsoft exam dumps

All Microsoft exams
AZ-305243 questions

Azure Solutions Architect Expert exam dumps

Designing Microsoft Azure Infrastructure Solutions

AZ-700310 questions

Azure Network Engineer Associate exam dumps

Designing and Implementing Microsoft Azure Networking Solutions

AZ-400306 questions

Azure DevOps Engineer Expert exam dumps

Designing and Implementing Microsoft DevOps Solutions

AI-102493 questions

Azure AI Engineer Associate exam dumps

Designing and Implementing a Microsoft Azure AI Solution

AI-900286 questions

Azure AI Fundamentals exam dumps

Microsoft Azure AI Fundamentals

AZ-500273 questions

Azure Security Engineer Associate exam dumps

Microsoft Azure Security Technologies