Amazon
Avaya
Checkpoint
Cisco®
CompTIA
CrowdStrike
EC-Council
EXIN
Fortinet
Google
ISC
ISC2
ITIL®
Juniper
Microsoft
Okta
Palo Alto Networks
Salesforce
All Vendors
  1. Home
  2. Microsoft
  3. AZ-104

Microsoft AZ-104 Exam (page: 6)
Microsoft Azure Administrator
Updated on: 02-Jan-2026

Viewing Page 6 of 69
AZ-104 PDF 553 Questions

HOTSPOT (Drag and Drop is not supported)
You have an Azure subscription that is linked to a Microsoft Entra tenant. The tenant contains two users named User1 and User2.
The subscription contains the resources shown in the following table.


The subscription contains the alert rules shown in the following table.


The users perform the following action:
User1 creates a new virtual disk and attaches the disk to VM1
User2 creates a new resource tag and assigns the tag to RG1 and VM1
Which alert rules are triggered by each user? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:



Box 1: Only Alert2 is triggered.
User1 creates a new virtual disk and attaches the disk to VM1.
Alert2 (All administrative operations on VM1) is triggered. The scope is VM1. Alert1 will not be triggered. The scope is RG1.
Box 2: Alert1 and Alerts are triggered.
User2 creates a new resource tag and assigns the tag to RG1 and VM1
Both alerts are triggered, as the two actions applies to each scope respectively.


Reference:

https://learn.microsoft.com/en-us/azure/azure-monitor/alerts/alerts-processing-rules?tabs=portal



You have an Azure subscription that contains eight virtual machines and the resources shown in the following table.


You need to configure access for VNET1. The solution must meet the following requirements:
• The virtual machines connected to VNET1 must be able to communicate with the virtual machines connected to VNET2 by using the Microsoft backbone.
• The virtual machines connected to VNET1 must be able to access storage1, storage2, and Microsoft Entra ID by using the Microsoft backbone.
What is the minimum number of service endpoints you should add to VNET1?

  1. 1
  2. 2
  3. 3
  4. 5

Answer(s): B



You need to configure an Azure web app named contoso.azurewebsites.net to host www.contoso.com. What should you do first?

  1. Create A records named www.contoso.com and asuid.contoso.com.
  2. Create a TXT record named asuid that contains the domain verification ID.
  3. Create a CNAME record named asuid that contains the domain verification ID.
  4. Create a TXT record named www.contoso.com that has a value of contoso.azurewebsites.net.

Answer(s): B



You have an Azure subscription that contains 10 network security groups (NSGs), 10 virtual machines, and a Log Analytics workspace named Workspace1. Each NSG is connected to a virtual machine.
You need to configure an Azure Monitor Network Insights alert that will be triggered when suspicious network traffic is detected.
What should you do first?

  1. Deploy Connection Monitor.
  2. Configure data collection endpoints.
  3. Configure a private link.
  4. Configure NSG flow logs.

Answer(s): D

Explanation:

Azure Monitor Network Insights is structured around these key components of monitoring:
Topology
Network health and metrics Connectivity
Traffic
Diagnostic Toolkit
Traffic
The Traffic tab provides access to all NSGs configured for NSG flow logs and Traffic Analytics for the selected set of subscriptions, grouped by location. The search functionality provided on this tab enables you to identify the NSGs configured for the searched IP address. You can search for any IP address in your environment. The tiled regional view will display all NSGs along with the NSG flow logs and Traffic Analytics configuration status.
The Alert box on the right side of the page provides a view of all Traffic Analytics workspace-based alerts across all subscriptions. Select the alert counts to go to a detailed alerts page.
Why use Flow Logs?
It is vital to monitor, manage, and know your own network for uncompromised security, compliance, and performance. Knowing your own environment is of paramount importance to protect and optimize it. You often need to know the current state of the network, who is connecting, where they're connecting from, which ports are open to the internet, expected network behavior, irregular network behavior, and sudden rises in traffic.


Reference:

https://learn.microsoft.com/en-us/azure/network-watcher/network-insights-overview



HOTSPOT (Drag and Drop is not supported)
You have an Azure subscription named Sub1 that contains the resources shown in the following table.


Sub1 contains the following alert rule: Name: Alert1
Scope: All resource groups in Sub1
- Include all future resources
Condition: All administrative operations Actions: Action1
Sub1 contains the following alert processing rule: Name: Rule1
Scope: Sub1
Rule type: Suppress notifications Apply the rule: On a specific time
- Start: August 10, 2022
- End: August 13, 2022
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:



Box 1: Yes
The alert processing rule Rule1 suppresses notifications between August 10. 2022 and August 13. 2022. However:
Suppression: This action removes all the action groups from the affected fired alerts. So, the fired alerts won't invoke any of their action groups, not even at the end of the maintenance window. Those fired alerts will still be visible when you list your alerts in the portal, Azure Resource Graph, API, or PowerShell
Note: Alert processing rules allow you to apply processing on fired alerts. Alert processing rules are different from alert rules. Alert rules generate new alerts, while alert processing rules modify the fired alerts as they're being fired.
Use case, Suppress notifications during planned maintenance
Many customers set up a planned maintenance time for their resources, either on a one-time basis or on a regular schedule. The planned maintenance might cover a single resource, like a virtual machine, or multiple resources, like all virtual machines in a resource group. So, you might want to stop receiving alert notifications for those resources during the maintenance window.
Box 2: No
The alert action is suppressed.
Box 3: Yes
No suppression.


Reference:

https://learn.microsoft.com/en-us/azure/azure-monitor/alerts/alerts-processing-rules



You have an Azure subscription that contains a storage account named storage1 in the North Europe Azure region.
You need to ensure that when blob data is added to storage1, a secondary copy is created in the East US region. The solution must minimize administrative effort.
What should you configure?

  1. operational backup
  2. object replication
  3. geo-redundant storage (GRS)
  4. a lifecycle management rule

Answer(s): B



You have an Azure subscription that contains two Log Analytics workspaces named Workspace1 and Workspace2 and 100 virtual machines that run Windows Server.
You need to collect performance data and events from the virtual machines. The solution must meet the following requirements:
Logs must be sent to Workspace1 and Workspace 2. All Windows events must be captured.
All security events must be captured.
What should you install and configure on each virtual machine?

  1. the Azure Monitor agent
  2. the Windows Azure diagnostics extension (WAD)
  3. the Windows VM agent

Answer(s): A

Explanation:

Azure Monitor Agent (AMA) collects monitoring data from the guest operating system of Azure and hybrid virtual machines and delivers it to Azure Monitor for use by features, insights, and other services, such as Microsoft Sentinel and Microsoft Defender for Cloud. Azure Monitor Agent replaces all of Azure Monitor's legacy monitoring agents.
Azure Monitor Agent replaces the Azure Monitor legacy monitoring agents:
Log Analytics Agent: Sends data to a Log Analytics workspace and supports monitoring solutions. This is fully consolidated into Azure Monitor agent.
Telegraf agent
Diagnostics extension: Sends data to Azure Monitor Metrics (Windows only), Azure Event Hubs, and Azure Storage. This is not consolidated yet.


Reference:

https://learn.microsoft.com/en-us/azure/azure-monitor/agents/agents-overview



You have an Azure subscription that contains a virtual machine named VM1 and an Azure function named App1.
You need to create an alert rule that will run App1 if VM1 stops. What should you create for the alert rule?

  1. an application security group
  2. a security group that has dynamic device membership
  3. an action group
  4. an application group

Answer(s): C

Explanation:

One of the most common monitoring requirements for a virtual machine is to create an alert if it stops running. The best method for this is to create a metric alert rule in Azure Monitor using the VM availability metric which is currently in public preview.
Configure action group
The Actions page allows you to add one or more action groups to the alert rule. Action groups define a set of actions to take when an alert is fired such as sending an email or an SMS message.
Incorrect:
* Application group
An Application group is a collection of remote applications that you published within the Azure Virtual Desktop environment. You must associate the application group with a pooled host pool only.


Reference:

https://learn.microsoft.com/en-us/azure/azure-monitor/vm/tutorial-monitor-vm-alert-availability



Viewing Page 6 of 69



Share your comments for Microsoft AZ-104 exam with other users:

Alex 5/24/2025 12:54:15 AM

Can I trust to this source?
Anonymous