Amazon
Anthropic
Avaya
Cisco
CompTIA
CrowdStrike
EC-Council
EXIN
Fortinet
Google
ISC
ISC2
ITIL
Juniper
Microsoft
NVIDIA
Okta
Palo Alto Networks
Salesforce
SAP
All Vendors

Microsoft Azure Administrator AZ-104 Dumps in PDF

Free Microsoft AZ-104 Real Questions (page: 2)

AZ-104 PDF — 586 Questions

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.
Your company has a Microsoft SQL Server Always On availability group configured on their Azure virtual machines (VMs).
You need to configure an Azure internal load balancer as a listener for the availability group. Solution: You set Session persistence to Client IP.
Does the solution meet the goal?

  1. Yes
  2. No

Answer(s): B

Explanation:


Reference:

https://docs.microsoft.com/en-us/azure/virtual-machines/windows/sql/virtual-machines-windows-portal-sql- alwayson-int-listener



Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.
Your company has a Microsoft SQL Server Always On availability group configured on their Azure virtual machines (VMs).
You need to configure an Azure internal load balancer as a listener for the availability group. Solution: You enable Floating IP.
Does the solution meet the goal?

  1. Yes
  2. No

Answer(s): A



Your company has two on-premises servers named SRV01 and SRV02. Developers have created an application that runs on SRV01. The application calls a service on SRV02 by IP address.
You plan to migrate the application on Azure virtual machines (VMs). You have configured two VMs on a single subnet in an Azure virtual network.
You need to configure the two VMs with static internal IP addresses. What should you do?

  1. Run the New-AzureRMVMConfig PowerShell cmdlet.
  2. Run the Set-AzureSubnet PowerShell cmdlet.
  3. Modify the VM properties in the Azure Management Portal.
  4. Modify the IP properties in Windows Network and Sharing Center.
  5. Run the Set-AzureStaticVNetIP PowerShell cmdlet.

Answer(s): E

Explanation:

Specify a static internal IP for a previously created VM
If you want to set a static IP address for a VM that you previously created, you can do so by using the following cmdlets. If you already set an IP address for the VM and you want to change it to a different IP address, you’ll need to remove the existing static IP address before running these cmdlets. See the instructions below to remove a static IP.
For this procedure, you’ll use the Update-AzureVM cmdlet. The Update-AzureVM cmdlet restarts the VM as part of the update process. The DIP that you specify will be assigned after the VM restarts. In this example, we set the IP address for VM2, which is located in cloud service StaticDemo.
Get-AzureVM -ServiceName StaticDemo -Name VM2 | Set-AzureStaticVNetIP -IPAddress 192.168.4.7 | Update-AzureVM



Your company has an Azure Active Directory (Azure AD) subscription.
You need to deploy five virtual machines (VMs) to your company’s virtual network subnet.
The VMs will each have both a public and private IP address. Inbound and outbound security rules for all of these virtual machines must be identical.
Which of the following is the least amount of network interfaces needed for this configuration?

  1. 5
  2. 10
  3. 20
  4. 40

Answer(s): A



Your company has an Azure Active Directory (Azure AD) subscription.
You need to deploy five virtual machines (VMs) to your company’s virtual network subnet.
The VMs will each have both a public and private IP address. Inbound and outbound security rules for all of these virtual machines must be identical.
Which of the following is the least amount of security groups needed for this configuration?

  1. 4
  2. 3
  3. 2
  4. 1

Answer(s): D



Your company’s Azure subscription includes Azure virtual machines (VMs) that run Windows Server 2016. One of the VMs is backed up every day using Azure Backup Instant Restore.
When the VM becomes infected with data encrypting ransomware, you decide to recover the VM’s files. Which of the following is TRUE in this scenario?

  1. You can only recover the files to the infected VM.
  2. You can recover the files to any VM within the company’s subscription.
  3. You can only recover the files to a new VM.
  4. You will not be able to recover the files.

Answer(s): B



Your company’s Azure subscription includes Azure virtual machines (VMs) that run Windows Server 2016. One of the VMs is backed up every day using Azure Backup Instant Restore.
When the VM becomes infected with data encrypting ransomware, you are required to restore the VM. Which of the following actions should you take?

  1. You should restore the VM after deleting the infected VM.
  2. You should restore the VM to any VM within the company’s subscription.
  3. You should restore the VM to a new Azure VM.
  4. You should restore the VM to an on-premise Windows device.

Answer(s): C



You administer a solution in Azure that is currently having performance issues.
You need to find the cause of the performance issues pertaining to metrics on the Azure infrastructure. Which of the following is the tool you should use?

  1. Azure Traffic Analytics
  2. Azure Monitor
  3. Azure Activity Log
  4. Azure Advisor

Answer(s): B

Explanation:

Metrics in Azure Monitor are stored in a time-series database which is optimized for analyzing time-stamped data. This makes metrics particularly suited for alerting and fast detection of issues.


Reference:

https://docs.microsoft.com/en-us/azure/azure-monitor/platform/data-platform



PDF
Viewing page 2 of 69

Share your comments for Microsoft AZ-104 exam with other users:

A
AI Tutor Explanation
7/21/2026 5:23:40 PM

Question 366:
Question 366 asks how to apply an Application Security Group (ASG1) to VM1. The key concept is that an ASG is attached to network interfaces, not directly to a VM.

  • Correct answer: A. Associate NIC1 to ASG1
  • Why: An ASG is used to group NICs so NSG rules can target the group. To apply ASG1 to VM1, you must attach VM1’s NIC (NIC1) to ASG1. Merely modifying the ASG’s properties or modifying NSG1 does not attach the VM’s NIC to the ASG.
  • Why others are wrong:
- B: “Modify the properties of ASG1” does not attach it to the NIC. - C: “Modify the properties of NSG1” changes NSG settings, but not ASG associations.
Quick note:
  • After associating NIC1 with ASG1, you can reference ASG1 in NSG rules as a source or destination to control traffic for VM1’s NIC. Example commands (CLI) or portal steps involve adding the NIC to the ASG.

Harare, Zimbabwe
A
AI Tutor Explanation
7/20/2026 9:43:58 AM

Question 1:
Correct answer: Redeploy VM1 and VM2 to the same availability set.
Why:

  • A Basic Load Balancer’s backend pool must consist of VMs that are in the same Availability Set. If VM1 and VM2 are in different AVSets (or one isn’t in an AVSet), you can’t add both to LB1’s backend pool. Redeploying/moving both VMs into the same Availability Set resolves this.
  • If you needed cross-AVSet load balancing, you would use a Standard Load Balancer instead.

What to do next (high level):
  • Create or choose a single Availability Set.
  • Move VM1 and VM2 into that AVSet.
  • Add both VMs to LB1’s backend pool.

Harare, Zimbabwe
A
AI Tutor Explanation
7/18/2026 4:50:31 PM

Question 1:
Here’s a targeted explanation of Question 1.

  • The scenario: You’re deploying several new VMs on on-prem Hyper-V (Windows Server 2012 R2). You’ve got PowerShell scripts to configure VMs after deployment and want them to run automatically on each new VM.

  • Options brief:
- SetupComplete.cmd in %windir%\setup\scripts - A GPO to run as logon scripts - A GPO to run as startup scripts - Put the scripts on a new VHD
  • Why A is the best choice here:
- SetupComplete.cmd runs during Windows Setup (after the OS is installed and before the first logon). If you base new VMs on a generalized image, the script will execute automatically on first boot, ensuring the VM is configured right away without requiring domain login or user interaction. - GPO startup/logon scripts require the machine to be domain-joined and the GPO to be processed at boot or user logon, which adds timing and dependency considerations and may not run reliably during first boot from a generalized image. - Putting scripts on a VHD won’t automatically execute anything unless you explicitly configure a startup process, which is less reliable than using SetupComplete.cmd for first-boot customization.
  • Implementation tip:
- Place a file named SetupComplete.cmd in %WINDIR%\Setup\Scripts\ with your PowerShell commands (calling powershell.exe -NoProfile -ExecutionPolicy Bypass -File YourScript.ps1, for example). This file runs once when Windows Setup completes on each new VM created from your image.
Note: The explanation in the provided ans

Harare, Zimbabwe
A
AI Tutor Explanation
6/22/2026 5:20:17 AM

Question 1:
The best solution is A: Configure a SetupComplete.cmd batch file in the %windir%\setup\scripts directory.
Why this is correct:

  • SetupComplete.cmd runs automatically during Windows setup after OS deployment from a generalized image. When you create new VMs from that image, the script executes on first boot, applying your post-deployment configuration without requiring user interaction.
  • This approach is appropriate for on-prem Hyper-V environments where you’re building and deploying VMs from a prepared image.

Why the other options are less suitable:
  • B (logon scripts): Run only after a user logs on; not guaranteed for first boot or for machines without interactive logon.
  • C (startup scripts via GPO): Can run at startup, but requires domain policy application and may run multiple times or fail if the machine isn’t in a ready state.
  • D (place scripts in a new VHD): Not a scalable or automated method; requires manual steps and doesn’t ensure consistent execution on every new VM.

Note: The provided explanation in the bank references a Azure VM Custom Script Extension, which is not applicable to on-prem Hyper-V. That extension is for Azure VMs, not for local Hyper-V deployments.

Lagos, Nigeria
A
Anonymous User
4/15/2026 4:42:07 AM

Question 528:

  • Correct answer: NSG flow logs for NSG1 (Option B)

  • Why:
- Traffic Analytics uses NSG flow logs to analyze traffic patterns. You must have NSG flow logs enabled for the NSGs you want to monitor. - An Azure Log Analytics workspace is also required to store and query the traffic data. - Network Watcher must be available in the subscription for traffic analytics to function.
  • What to configure (brief steps):
- Ensure Network Watcher is enabled in the East US region (for the subscription/region). - Enable NSG flow logs on NSG1. - Ensure a Log Analytics workspace exists and is accessible (read/write) so Traffic Analytics can store and query logs.
  • Why other options aren’t correct:
- “Diagnostic settings for VM1” or “Diagnostic settings for NSG1” alone don’t guarantee flow logs are captured and sent to Log Analytics, which Traffic Analytics relies on. - “Insights for VM1” is not how Traffic Analytics collects traffic data.

Hamburg, Germany
D
Don
4/11/2026 5:36:42 AM

Recommend using AI for Solutions rather the Answer(s) submitted here

Hamburg, Germany
A
Alex
5/24/2025 12:54:15 AM

Can I trust to this source?

Anonymous
AI Tutor 👋 I’m here to help!