Amazon
Anthropic
Avaya
Cisco
CompTIA
CrowdStrike
EC-Council
EXIN
Fortinet
Google
ISC
ISC2
ITIL
Juniper
Microsoft
NVIDIA
Okta
Palo Alto Networks
Salesforce
SAP
All Vendors

Microsoft Azure Administrator AZ-104 Dumps in PDF

Free Microsoft AZ-104 Real Questions (page: 4)

AZ-104 PDF — 586 Questions

You have the Azure virtual machines shown in the following table:


You have a Recovery Services vault that protects VM1 and VM2. You need to protect VM3 and VM4 by using Recovery Services. What should you do first?

  1. Create a new Recovery Services vault
  2. Create a storage account
  3. Configure the extensions for VM3 and VM4
  4. Create a new backup policy

Answer(s): A

Explanation:

A Recovery Services vault is a storage entity in Azure that houses data. The data is typically copies of data, or configuration information for virtual machines (VMs), workloads, servers, or workstations. You can use Recovery Services vaults to hold backup data for various Azure services


Reference:

https://docs.microsoft.com/en-us/azure/site-recovery/azure-to-azure-tutorial-enable-replicatio



HOTSPOT (Drag and Drop is not supported)
You purchase a new Azure subscription named Subscription1.
You create a virtual machine named VM1 in Subscription1. VM1 is not protected by Azure Backup.
You need to protect VM1 by using Azure Backup. Backups must be created at 01:00 and stored for 30 days. What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:


Box 1: A Recovery Services vault
You can set up a Recovery Services vault and configure backup for multiple Azure VMs.
Box 2: A backup policy
In Choose backup policy, do one of the following:
Leave the default policy. This backs up the VM once a day at the time specified, and retains backups in the vault for 30 days.
Select an existing backup policy if you have one.
Create a new policy, and define the policy settings.


Reference:

https://docs.microsoft.com/en-us/azure/backup/backup-azure-vms-first-look-arm



You have an Azure virtual machine named VM1. Azure collects events from VM1.
You are creating an alert rule in Azure Monitor to notify an administrator when an error is logged in the System event log of VM1.
Which target resource should you monitor in the alert rule?

  1. virtual machine extension
  2. virtual machine
  3. metric alert
  4. Azure Log Analytics workspace

Answer(s): D

Explanation:

For the first step to create the new alert tule, under the Create Alert section, you are going to select your Log Analytics workspace as the resource, since this is a log based alert signal.


Reference:

https://docs.microsoft.com/en-us/windows-server/storage/storage-spaces/configure-azure-monitor



You have a Recovery Services vault named RSV1. RSV1 has a backup policy that retains instant snapshots for five days and daily backup for 14 days.
RSV1 performs daily backups of VM1. VM1 hosts a static website that was updated eight days ago. You need to recover VM1 to a point eight days ago. The solution must minimize downtime.
What should you do first?

  1. Deallocate VM1.
  2. Restore VM1 by using the Replace existing restore configuration option.
  3. Delete VM1.
  4. Restore VM1 by using the Create new restore configuration option.

Answer(s): D



HOTSPOT (Drag and Drop is not supported)
You have an Azure subscription that contains the resources shown in the following table.


You plan to create a data collection rule named DCR1 in Azure Monitor.
Which resources can you set as data sources in DCR1, and which resources can you set as destinations in DCR1? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:



Box 1: VM1 only
A virtual machine may have an association to multiple DCRs, and a DCR may have multiple virtual machines associated to it.
In the Resources tab, add the resources (virtual machines, virtual machine scale sets, Arc for servers) that should have the Data Collection Rule applied.
Box 2: Workspace1 only
On the Destination tab, add one or more destinations for the data source. You can select multiple destinations of same of different types, for instance multiple Log Analytics workspaces (i.e. "multi-homing").
Note: The Data Collection Rules (or DCR) improve on a few key areas of data collection from VMs including like better control and scoping of data collection (e.g. collect from a subset of VMs for a single workspace), collect once and send to both Log Analytics and Azure Monitor Metrics, send to multiple workspaces (multi- homing for Linux), improved Windows event filtering, and improved extension management.


Reference:

https://docs.microsoft.com/en-us/azure/azure-monitor/agents/data-collection-rule-azure-monitor- agent



HOTSPOT (Drag and Drop is not supported)
You have the role assignment file shown in the following exhibit.


Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:



HOTSPOT (Drag and Drop is not supported)
You have the following custom role-based access control (RBAC) role.


For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:



HOTSPOT (Drag and Drop is not supported)
You have an Azure subscription that contains the resources shown in the following table.


NSG1 is configured as shown in the following exhibit.


For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:



PDF
Viewing page 4 of 69

Share your comments for Microsoft AZ-104 exam with other users:

A
AI Tutor Explanation
7/21/2026 5:23:40 PM

Question 366:
Question 366 asks how to apply an Application Security Group (ASG1) to VM1. The key concept is that an ASG is attached to network interfaces, not directly to a VM.

  • Correct answer: A. Associate NIC1 to ASG1
  • Why: An ASG is used to group NICs so NSG rules can target the group. To apply ASG1 to VM1, you must attach VM1’s NIC (NIC1) to ASG1. Merely modifying the ASG’s properties or modifying NSG1 does not attach the VM’s NIC to the ASG.
  • Why others are wrong:
- B: “Modify the properties of ASG1” does not attach it to the NIC. - C: “Modify the properties of NSG1” changes NSG settings, but not ASG associations.
Quick note:
  • After associating NIC1 with ASG1, you can reference ASG1 in NSG rules as a source or destination to control traffic for VM1’s NIC. Example commands (CLI) or portal steps involve adding the NIC to the ASG.

Harare, Zimbabwe
A
AI Tutor Explanation
7/20/2026 9:43:58 AM

Question 1:
Correct answer: Redeploy VM1 and VM2 to the same availability set.
Why:

  • A Basic Load Balancer’s backend pool must consist of VMs that are in the same Availability Set. If VM1 and VM2 are in different AVSets (or one isn’t in an AVSet), you can’t add both to LB1’s backend pool. Redeploying/moving both VMs into the same Availability Set resolves this.
  • If you needed cross-AVSet load balancing, you would use a Standard Load Balancer instead.

What to do next (high level):
  • Create or choose a single Availability Set.
  • Move VM1 and VM2 into that AVSet.
  • Add both VMs to LB1’s backend pool.

Harare, Zimbabwe
A
AI Tutor Explanation
7/18/2026 4:50:31 PM

Question 1:
Here’s a targeted explanation of Question 1.

  • The scenario: You’re deploying several new VMs on on-prem Hyper-V (Windows Server 2012 R2). You’ve got PowerShell scripts to configure VMs after deployment and want them to run automatically on each new VM.

  • Options brief:
- SetupComplete.cmd in %windir%\setup\scripts - A GPO to run as logon scripts - A GPO to run as startup scripts - Put the scripts on a new VHD
  • Why A is the best choice here:
- SetupComplete.cmd runs during Windows Setup (after the OS is installed and before the first logon). If you base new VMs on a generalized image, the script will execute automatically on first boot, ensuring the VM is configured right away without requiring domain login or user interaction. - GPO startup/logon scripts require the machine to be domain-joined and the GPO to be processed at boot or user logon, which adds timing and dependency considerations and may not run reliably during first boot from a generalized image. - Putting scripts on a VHD won’t automatically execute anything unless you explicitly configure a startup process, which is less reliable than using SetupComplete.cmd for first-boot customization.
  • Implementation tip:
- Place a file named SetupComplete.cmd in %WINDIR%\Setup\Scripts\ with your PowerShell commands (calling powershell.exe -NoProfile -ExecutionPolicy Bypass -File YourScript.ps1, for example). This file runs once when Windows Setup completes on each new VM created from your image.
Note: The explanation in the provided ans

Harare, Zimbabwe
A
AI Tutor Explanation
6/22/2026 5:20:17 AM

Question 1:
The best solution is A: Configure a SetupComplete.cmd batch file in the %windir%\setup\scripts directory.
Why this is correct:

  • SetupComplete.cmd runs automatically during Windows setup after OS deployment from a generalized image. When you create new VMs from that image, the script executes on first boot, applying your post-deployment configuration without requiring user interaction.
  • This approach is appropriate for on-prem Hyper-V environments where you’re building and deploying VMs from a prepared image.

Why the other options are less suitable:
  • B (logon scripts): Run only after a user logs on; not guaranteed for first boot or for machines without interactive logon.
  • C (startup scripts via GPO): Can run at startup, but requires domain policy application and may run multiple times or fail if the machine isn’t in a ready state.
  • D (place scripts in a new VHD): Not a scalable or automated method; requires manual steps and doesn’t ensure consistent execution on every new VM.

Note: The provided explanation in the bank references a Azure VM Custom Script Extension, which is not applicable to on-prem Hyper-V. That extension is for Azure VMs, not for local Hyper-V deployments.

Lagos, Nigeria
A
Anonymous User
4/15/2026 4:42:07 AM

Question 528:

  • Correct answer: NSG flow logs for NSG1 (Option B)

  • Why:
- Traffic Analytics uses NSG flow logs to analyze traffic patterns. You must have NSG flow logs enabled for the NSGs you want to monitor. - An Azure Log Analytics workspace is also required to store and query the traffic data. - Network Watcher must be available in the subscription for traffic analytics to function.
  • What to configure (brief steps):
- Ensure Network Watcher is enabled in the East US region (for the subscription/region). - Enable NSG flow logs on NSG1. - Ensure a Log Analytics workspace exists and is accessible (read/write) so Traffic Analytics can store and query logs.
  • Why other options aren’t correct:
- “Diagnostic settings for VM1” or “Diagnostic settings for NSG1” alone don’t guarantee flow logs are captured and sent to Log Analytics, which Traffic Analytics relies on. - “Insights for VM1” is not how Traffic Analytics collects traffic data.

Hamburg, Germany
D
Don
4/11/2026 5:36:42 AM

Recommend using AI for Solutions rather the Answer(s) submitted here

Hamburg, Germany
A
Alex
5/24/2025 12:54:15 AM

Can I trust to this source?

Anonymous
AI Tutor 👋 I’m here to help!