AZ-104 (Azure Administration)
Quiz by Mukesh Kumar Sharma
Feel free to use or edit a copy
includes Teacher and Student dashboards
Measure skillsfrom any curriculum
Tag the questions with any skills you have. Your dashboard will track each student's mastery of each skill.
- edit the questions
- save a copy for later
- start a class game
- automatically assign follow-up activities based on students’ scores
- assign as homework
- share a link with colleagues
- print as a bubble sheet
- Q1
You are planning to deploy an Ubuntu Server virtual machine to your company's Azure subscription.You are required to implement a custom deployment that includes adding a particular trusted root certification authority (CA).Which of the following should you use to create the virtual machine?You are planning to deploy an Ubuntu Server virtual machine to your company's Azure subscription.You are required to implement a custom deployment that includes adding a particular trusted root certification authority (CA).Which of the following should you use to create the virtual machine?
The Create-AzVM cmdlet
The az vm create command
he New-AzureRmVm cmdle
The New-AzVM cmdlet
120s - Q2
Your company has a Microsoft Azure subscription.The company has datacenters in Los Angeles and New York.You are configuring the two datacenters as geo-clustered sites for site resiliency.You need to recommend an Azure storage redundancy option.You have the following data storage requirements:
✑ Data must be stored on multiple nodes.
✑ Data must be stored on nodes in separate geographic locations.
✑ Data can be read from the secondary location as well as from the primary location.
Which of the following Azure stored redundancy options should you recommend?
Zone-redundant storage (ZRS)
Geo-redundant storageGeo-redundant storage (GRS)
Read-Access geo-redundant storage (RA- GRS)
Locally redundant storage (LRS)
120s - Q3
Your company has virtual machines (VMs) hosted in Microsoft Azure. The VMs are located in a single Azure virtual network named VNet1.The company has users that work remotely. The remote workers require access to the VMs on VNet1.You need to provide access for the remote workers.What should you do?
Configure a Site-to-Site (S2S) VPN.
Configure a VNet-toVNet VPN.
Configure a Point-to-Site (P2S) VPN
Configure DirectAccess on a Windows Server 2012 server VM.
120s - Q4
Your company's Azure subscription includes Azure virtual machines (VMs) that run Windows Server 2016.One of the VMs is backed up every day using Azure Backup Instant Restore.When the VM becomes infected with data encrypting ransomware, you are required to restore the VM.Which of the following actions should you take?
You should restore the VM after deleting the infected VM
You should restore the VM to any VM within the company's subscription.
You should restore the VM to a new Azure VM
You should restore the VM to an on-premise Windows device.
120s - Q5
You have an Azure Active Directory (Azure AD) tenant that contains 5,000 user accounts.You create a new user account named AdminUser1.You need to assign the User administrator administrative role to AdminUser1.What should you do from the user account properties?
From the Directory User role blade, modify the directory role
From the Groups blade, invite the user account to a new group
From the Licenses blade, assign a new license
From Directory User blade invite as guest
120s - Q6
Your team is working on a project where you need to deploy a web application that supports
multiple programming languages and frameworks. You want a service that provides built-in
support for .NET, Node.js, Python, and PHP. Which Azure service is best suited for this
scenario?
Azure Virtual Machines (VMs)
Azure App Service (Web App)
Azure Functions
Azure Kubernetes Service (AKS)
120s - Q7
Your organization is adopting containerization to package and deploy applications. You need a
secure and private repository for storing Docker container images. What Azure service provides
a private container registry with role-based access control (RBAC)?
Azure App Service (Web App)
Azure Container Instances
Azure Kubernetes Service (AKS)
Azure Container Registry
120s - Q8
You have an Azure Active Directory (Azure AD) tenant named contosocloud.onmicrosoft.com.Your company has a public DNS zone for contoso.com.You add contoso.com as a custom domain name to Azure AD.You need to ensure that Azure can verify the domain name.Which type of DNS record should you create?
MX
PTR
CNAME
NSEC
120s - Q9
What kind of group account can you create so you can apply the same permissions to all group members?
Security group
Microsoft Entra bulk group.
Microsoft 365 group.
Device Group
60s - Q10
Which Microsoft Entra role enables a user to manage all groups in your Teams tenants, and also assign other admin roles?
Global administrator.
Security administrator.
User administrator.
Application Adminstrator
60s - Q11
How can you ensure that only cost-effective virtual machine SKU sizes are deployed?
Periodically inspect the deployment to see which SKU sizes are used
Create an Azure RBAC role that defines the allowed virtual machine SKU sizes
Create a policy in Azure Policy that specifies the allowed SKU sizes
All of the above
60s - Q12
Which of the following changes between access tiers happens immediately?
Archive to Hot
Archive to cold
Archive to Cool
Hot to cool
60s - Q13
How long are Azure Monitor activity logs kept?
90 days
2 Years
20 days
365 days
60s - Q14
How does Azure Monitor organize log data in Log analytics work space
with Table
with Event Queues
with text file
with Message Queues
60s - Q15
Which of the following statements about Azure virtual networks is correct?
Azure virtual networks enable communication between Azure resources and on premise.
we can't associate NSG to a subnet of Azure virtual network
Azure virtual networks can't be configured to communicate with on-premises resources
Each virtual network has only one subnet.
60s