Pre-Winter Sale Discount 60% Offer - Ends in 0d 00h 00m 00s - Coupon code: brite60

ExamsBrite Dumps

Microsoft Azure Administrator Question and Answers

Microsoft Azure Administrator

Last Update Oct 20, 2025
Total Questions : 425

We are offering FREE AZ-104 Microsoft exam questions. All you do is to just go and sign up. Give your details, prepare AZ-104 free exam questions and then go for complete pool of Microsoft Azure Administrator test questions that will help you more.

AZ-104 pdf

AZ-104 PDF

$46  $114.99
AZ-104 Engine

AZ-104 Testing Engine

$54  $134.99
AZ-104 PDF + Engine

AZ-104 PDF + Testing Engine

$70  $174.99
Questions 1

You need to add VM1 and VM2 to the backend poo! of LB1. What should you do first?

Options:

A.  

Create a new NSG and associate the NSG to VNET1/Subnet1.

B.  

Connect VM2 to VNET1/Subnet1.

C.  

Redeploy VM1 and VM2 to the same availability zone.

D.  

Redeploy VM1 and VM2 to the same availability set.

Discussion 0
Questions 2

You need to identify which storage account to use for the flow logging of IP traffic from VM5. The solution must meet the retention requirements.

Which storage account should you identify?

Options:

A.  

storage4

B.  

storage1

C.  

storage2

D.  

storage3

Discussion 0
Questions 3

You need to create storage5. The solution must support the planned changes.

Which type of storage account should you use, and which account should you configure as the destination storage account? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Discussion 0
Questions 4

You need to configure Azure Backup to back up the file shares and virtual machines.

What is the minimum number of Recovery Services vaults and backup policies you should create? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Discussion 0
Questions 5

You need to configure the alerts for VM1 and VM2 to meet the technical requirements.

Which three actions should you perform in sequence? To answer, move all actions from the list of actions to the answer area and arrange them in the correct order.

Options:

Discussion 0
Questions 6

You have the Azure management groups shown in the following table.

You add Azure subscriptions to the management groups as shown in the following table.

You create the Azure policies shown in the following table.

For each of the following statements, select Yes it the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Options:

Discussion 0
Questions 7

You have a pay-as-you-go Azure subscription that contains the virtual machines shown in the following table.

You create the budget shown in the following exhibit.

The AG1 action group contains a user named admin@contoso.com only.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

NOTE: Each correct selection is worth one point.

Options:

Discussion 0
Questions 8

You need to ensure that User1 can create initiative definitions, and User4 can assign initiatives to RG2. The solution must meet the technical requirements.

Which role should you assign to each user? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Discussion 0
Questions 9

You need to ensure that you can grant Group4 Azure RBAC read-only permissions to all the A2ure file shares. What should you do?

Options:

A.  

On storagel and storage4, change the Account kind type to StorageV2 (general purpose v2).

B.  

Recreate storage2 and set Hierarchical namespace to Enabled.

C.  

On storage2, enable identity-based access for the file shares.

D.  

Create a shared access signature (SAS) for storagel, storage2, and storage4.

Discussion 0
Questions 10

You implement the planned changes for NSG1 and NSG2.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Options:

Discussion 0
Questions 11

You have an Azure subscription that contains the storage accounts shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

NOTE: Each correct selection is worth one point.

Options:

Discussion 0
Questions 12

Your company purchases a new Azure subscription.

You create a file named Deploy json as shown in the following exhibit

You connect to the subscription and run the following cmdlet:

New-AzDeployment -Location westus -TemplateFile “deploy.json”"

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

Options:

Discussion 0
Questions 13

You have an Azure subscription that contains an Azure Backup vault named Backup1, a Recovery Services vault named Recovery1, and the resources shown in the following table.

You plan to back up the resources.

Which resource can be backed up to Backup1, and which resource can be backed up to Recovery1? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Discussion 0
Questions 14

You have an Azure subscription that contains the resources shown in the following table

In Azure Cloud Shell, you need to create a virtual machine by using an Azure Resource Manager (ARM) template.

How should you complete the command? To answer, select the appropriate options in the answer area,

NOTE: Each correct selection is worth one point.

Options:

Discussion 0
Questions 15

You have an Azure subscription that contains the resources shown in the following table.

LB1 is configured as shown in the following table.

You plan to create new inbound NAT rules that meet the following requirements:

Provide Remote Desktop access to VM2 from the internet by using port 3389.

Options:

A.  

A frontend IP address

B.  

A health probe

C.  

A load balancing rule

D.  

A backend pool

Discussion 0
Questions 16

You have an Azure App Service app named App1 that contains two running instances.

You have an autoscale rule configured as shown in the following exhibit.

For the Instance limits scale condition setting, you set Maximum to 5.

During a 30-minute period, App1 uses 80 percent of the available memory.

What is the maximum number of instances for App1 during the 30-minute period?

Options:

A.  

2

B.  

3

C.  

4

D.  

5

Discussion 0
Questions 17

You have an Azure Storage account named storage1.

For storage 1. you create an encryption scope named Scope1.

Which storage types can you encrypt by using Scope1?

Options:

A.  

file shares only

B.  

containers only

C.  

file shares and containers only

D.  

containers and tables only

E.  

file shares, containers, and tables only

F.  

file shares, containers, tables, and queues

Discussion 0
Questions 18

You have an Azure subscription.

You plan to use an Azure Resource Manager template to deploy a virtual network named VNET1 that will use Azure Bastion.

How should you complete the template? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Discussion 0
Questions 19

You have an Azure subscription that contains the virtual machines shown in the following table.

VM1 and VM2 use public IP addresses. From Windows Server 2019 on VM1 and VM2, you allow inbound Remote Desktop connections.

Subnet1 and Subnet2 are in a virtual network named VNET1.

The subscription contains two network security groups (NSGs) named NSG1 and NSG2. NSG1 uses only the default rules.

NSG2 uses the default rules and the following custom incoming rule;

• Priority: 100

• Name: Rule1

• Port: 3389

• Protocol: TCP

• Source: Any

• Destination: Any

• Action: Allow

NSG1 is associated to Subnet! NSG2 is associated to the network interface of VM2.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Options:

Discussion 0
Questions 20

You have an Azure subscription that contains an Azure Storage account.

You plan to copy an on-premises virtual machine image to a container named vmimages.

You need to create the container for the planned image.

Which command should you run? To answer, select the appropriate options in the answer area.

NOTE Each correct selection is worth one point.

Options:

Discussion 0
Questions 21

You have an Azure subscription. The subscription contains virtual machines that run Windows Server.

You have a data collection rule (DCR) named Rule1

You plan to use the Azure Monitor Agent to collect events from Windows System event logs.

You only need to collect system events that have an ID of 1001.

Which type of query should you use for the data source in Rulel?

Options:

A.  

SQL

B.  

KQL

C.  

XPath

Discussion 0
Questions 22

You implement the planned changes for NSG1 and NSG2.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Options:

Discussion 0
Questions 23

You discover that VM3 does NOT meet the technical requirements.

You need to verify whether the issue relates to the NSGs.

What should you use?

Options:

A.  

Diagram in VNet1

B.  

the security recommendations in Azure Advisor

C.  

Diagnostic settings in Azure Monitor

D.  

Diagnose and solve problems in Traffic Manager Profiles

E.  

IP flow verify in Azure Network Watcher

Discussion 0
Questions 24

You need to the appropriate sizes for the Azure virtual for Server2.

What should you do? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Discussion 0
Questions 25

You need to meet the technical requirement for VM4.

What should you create and configure?

Options:

A.  

an Azure Notification Hub

B.  

an Azure Event Hub

C.  

an Azure Logic App

D.  

an Azure services Bus

Discussion 0
Questions 26

You need to recommend a solution to automate the configuration for the finance department users. The solution must meet the technical requirements.

What should you include in the recommended?

Options:

A.  

Azure AP B2C

B.  

Azure AD Identity Protection

C.  

an Azure logic app and the Microsoft Identity Management (MIM) client

D.  

dynamic groups and conditional access policies

Discussion 0
Questions 27

You manage two Azure subscriptions named Subscription 1 and Subscription2.

Subscription! has following virtual networks:

The virtual networks contain the following subnets:

Subscnption2 contains the following virtual network:

- Name: VNETA

• Address space: 10.10.128.0/17

• Region: Canada Central

VNETA contains the following subnets:

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Options:

Discussion 0
Questions 28

You need to implement Role1.

Which command should you run before you create Role1? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Discussion 0
Questions 29

You need to meet the connection requirements for the New York office.

What should you do? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Discussion 0
Questions 30

You need to ensure that VM1 can communicate with VM4. The solution must minimize administrative effort.

What should you do?

Options:

A.  

Create a user-defined route from VNET1 to VNET3.

B.  

Assign VM4 an IP address of 10.0.1.5/24.

C.  

Establish peering between VNET1 and VNET3.

D.  

Create an NSG and associate the NSG to VMI and VM4.

Discussion 0
Questions 31

You are evaluating the connectivity between the virtual machines after the planned implementation of the Azure networking infrastructure.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

Options:

Discussion 0
Questions 32

You need to prepare the environment to meet the authentication requirements.

Which two actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

Options:

A.  

Allow inbound TCP port 8080 to the domain controllers in the Miami office.

B.  

Add http://autogon.microsoftazuread-sso.com to the intranet zone of each client computer in the Miamioffice.

C.  

Join the client computers in the Miami office to Azure AD.

D.  

Install the Active Directory Federation Services (AD FS) role on a domain controller in the Miami office.

E.  

Install Azure AD Connect on a server in the Miami office and enable Pass-through Authentication.

Discussion 0
Questions 33

You need to define a custom domain name for Azure AD to support the planned infrastructure.

Which domain name should you use?

Options:

A.  

Join the client computers in the Miami office to Azure AD.

B.  

Add http://autologon.microsoftazuread-sso.com to the intranet zone of each client computer in the Miami office.

C.  

Allow inbound TCP port 8080 to the domain controllers in the Miami office.

D.  

Install Azure AD Connect on a server in the Miami office and enable Pass-through Authentication

E.  

Install the Active Directory Federation Services (AD FS) role on a domain controller in the Miami office.

Discussion 0
Questions 34

You need to define a custom domain name for Azure AD to support the planned infrastructure.

Which domain name should you use?

Options:

A.  

ad.humongousinsurance.com

B.  

humongousinsurance.onmicrosoft.com

C.  

humongousinsurance.local

D.  

humongousinsurance.com

Discussion 0
Questions 35

You need to prepare the environment to meet the authentication requirements.

Which two actions should you perform? Each correct answer presents part of the solution.

NOTE Each correct selection is worth one point.

Options:

A.  

Azure Active Directory (AD) Identity Protection and an Azure policy

B.  

a Recovery Services vault and a backup policy

C.  

an Azure Key Vault and an access policy

D.  

an Azure Storage account and an access policy

Discussion 0
Questions 36

You need to implement a backup solution for App1 after the application is moved.

What should you create first?

Options:

A.  

a recovery plan

B.  

an Azure Backup Server

C.  

a backup policy

D.  

a Recovery Services vault

Discussion 0
Questions 37

You need to recommend a solution for App1. The solution must meet the technical requirements. What should you include in the recommendation? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Discussion 0
Questions 38

You need to recommend an identify solution that meets the technical requirements.

What should you recommend?

Options:

A.  

federated single-on (SSO) and Active Directory Federation Services (AD FS)

B.  

password hash synchronization and single sign-on (SSO)

C.  

cloud-only user accounts

D.  

Pass-through Authentication and single sign-on (SSO)

Discussion 0
Questions 39

You are planning the move of App1 to Azure.

You create a network security group (NSG).

You need to recommend a solution to provide users with access to App1.

What should you recommend?

Options:

A.  

Create an outgoing security rule for port 443 from the Internet. Associate the NSG to all the subnets.

B.  

Create an incoming security rule for port 443 from the Internet. Associate the NSG to all the subnets.

C.  

Create an incoming security rule for port 443 from the Internet. Associate the NSG to the subnet that contains the web servers.

D.  

Create an outgoing security rule for port 443 from the Internet. Associate the NSG to the subnet that contains the web servers.

Discussion 0
Questions 40

You need to configure the Device settings to meet the technical requirements and the user requirements.

Which two settings should you modify? To answer, select the appropriate settings in the answer area.

Options:

Discussion 0
Questions 41

You need to meet the user requirement for Admin1.

What should you do?

Options:

A.  

From the Subscriptions blade, select the subscription, and then modify the Properties.

B.  

From the Subscriptions blade, select the subscription, and then modify the Access control (IAM) settings.

C.  

From the Azure Active Directory blade, modify the Properties.

D.  

From the Azure Active Directory blade, modify the Groups.

Discussion 0
Questions 42

You need to implement the planned changes for DCR1. Which type of query should you use?

Options:

A.  

WQL

B.  

T-SQL

C.  

XPath

D.  

KQL

Discussion 0
Questions 43

You need to move the blueprint files to Azure.

What should you do?

Options:

A.  

Generate a shared access signature (SAS). Map a drive, and then copy the files by using File Explorer.

B.  

Use the Azure Import/Export service.

C.  

Generate an access key. Map a drive, and then copy the files by using File Explorer.

D.  

Use Azure Storage Explorer to copy the files.

Discussion 0
Questions 44

You need to identify the storage requirements for Contoso.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Options:

Discussion 0
Questions 45

You implement the planned changes for Scope1.

You need to ensure that Scope1 meets the technical requirements.

What can you encrypt by using Scope1?

Options:

A.  

containers and blobs in storage2 only

B.  

containers and blobs in storage1 and storage2

C.  

containers, blobs, and file shares in storage2 only

D.  

containers, blobs, and file shares in storage1 and storage2

E.  

containers, blobs, file shares, queues, and tables in storage2 only

Discussion 0
Questions 46

You need to implement the planned changes for the new containers.

Which Azure services can you use for each image? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Discussion 0
Questions 47

You implement the planned changes for cont2.

What is the maximum number of additional access policies you can create for cont2? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Discussion 0
Questions 48

You need to configure Azure Backup to meet the technical requirements for cont1 and share1.

To what should you set the backup frequency for each resource? To answer, select the appropriate options in the answer area.  

NOTE: Each correct selection is worth one point.  

Options:

Discussion 0
Questions 49

You need to implement the planned changes for User1.

Which roles should you assign to User1, and for which resources? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Discussion 0
Questions 50

You need to configure encryption for the virtual machines. The solution must meet the technical requirements.

Which virtual machines can you encrypt?

Options:

A.  

VM1 and VM3

B.  

VM2 and VM3

C.  

VM2 and VM4

D.  

VM4 and VM5

Discussion 0
Questions 51

You need to configure WebApp1 to meet the technical requirements.

Which certificate can you use from Vault1?

Options:

A.  

Cert1 only

B.  

Cert1 or Cert2 only

C.  

Cert1 or Cert3 only

D.  

Cert3 or Cert4 only

E.  

Cert1, Cert2, Cert3, or Cert4

Discussion 0
Questions 52

You need to implement the planned changes for the storage account content. Which containers and file shares can you use to organize the content?

Options:

A.  

share1 only

B.  

cont1 and share1 only

C.  

share1 and share2 only

D.  

cont1, share1, and share2 only

E.  

cont1, cont2, share1, and share2

Discussion 0