AZ-104 Renewal Actual Exam Questions (60 Questions) | – Edition 100% Verified Answers | Updated Content | A+ Grade Guaranteed |
Microsoft Certified: Azure Administrator Associate
Introduction This file contains 60 fully verified and up-to-date questions from the – -104 Renewal Exam. Aligned with the latest Microsoft Azure Administrator Associate objectives, it ensures mastery of essential skills in managing cloud infrastructure, services, and governance within Azure.
Topics Covered:
• Azure Identity and Access Management (IAM) • Role-Based Access Control (RBAC) • Azure Storage Solutions • Virtual Machines and Compute Management • Virtual Networks and Network Security • Monitoring, Logging, and Alerts • Backup, Recovery, and High Availability • Azure Resource Governance (Policies, Blueprints, Tags) • Cost Management and Performance Optimization All correct answers are marked in bold and green. Detailed explanations are included where necessary to enhance understanding and reinforce key Azure administration concepts.Exam Questions and Answers Question 1 Question: You need to assign a user read-only access to all resources in an Azure subscription. Which RBAC role should you assign?
- Contributor
- Reader
- Owner
- User Access Administrator
- Blob access tier
- Lifecycle management rule 1 / 2
Rationale: The Reader role provides read-only access to all resources in a subscription without permission to modify them.Question 2 Question: Your company has an Azure Storage account. You need to configure a lifecycle management policy to move blobs to cool storage after 30 days. Which setting should you configure?
- Blob versioning
- Access control (IAM)
- Azure Monitor
- Azure Backup
- Azure Site Recovery
- Azure Policy
Rationale: Lifecycle management rules automate the transition of blobs to cool storage based on conditions like age.Question 3 Question: You deploy a virtual machine (VM) in Azure. You need to ensure the VM is backed up daily. Which service should you use?
Rationale: Azure Backup provides automated daily backups for VMs, ensuring data
protection and recovery.Question 4 Question: You need to restrict access to a virtual network to specific IP ranges. Which feature should you configure?
- Network interface card
- Network security group
- Virtual network gateway
- Application gateway
Rationale: Network security groups (NSGs) allow you to define rules to restrict traffic based on IP ranges.Question 5 Case Study: Your company has an Azure subscription with multiple VMs. You need to tag all VMs by department for cost tracking.
Question: Which actions should you take? Select all that apply.
- Use Azure Policy to enforce tagging
- Apply tags to VMs in the Azure portal
- Use Azure Resource Manager templates
- Modify the VM operating system
- Azure Backup
- Azure Monitor
- Azure Advisor
- Azure Security Center
- / 2
Rationale: Tags can be applied via the Azure portal or ARM templates. Azure Policy ensures compliance but doesn’t apply tags directly.Question 6 Question: You need to monitor CPU usage for an Azure VM and alert if it exceeds 80%.Which service should you use?