Azure Administrator AZ-104 Practice - 60 Free Exam Questions

Q: How many questions are in this practice set?

This practice set contains 60 questions with detailed explanations.

Q: What topics does this practice cover?

It covers the key topics and question types for Microsoft Azure Administrator AZ-104, including vocabulary, grammar, reading, and practical test skills.

Q: Are there explanations for every question?

Yes, every question includes a clear explanation so you can understand the correct answer and learn from mistakes.

Q: Can I save my progress and mistakes?

Your wrong answers, favorites, scores, and study streak are saved in your browser, so you can review them on the same device.

Q: What practice modes are available?

You can practice randomly, take a timed mock exam, filter by difficulty, type, and topic, search questions, and review wrong answers.

Question 1

Which Azure service provides centralized identity and access management for users and applications?

Select an answer Azure PolicyMicrosoft Entra IDAzure DNSAzure Firewall

Question 2

Which mechanism controls access to Azure resources by assigning roles to users or groups?

Select an answer Azure RBACNetwork Security GroupsAzure FirewallApplication Gateway

Question 3

Which built-in RBAC role grants full access to manage all resources in a scope?

Select an answer ReaderContributorUser Access AdministratorOwner

Question 4

Which Azure service enforces compliance rules such as requiring specific resource locations or tags?

Select an answer Azure BackupTraffic ManagerAzure PolicyAzure Monitor

Question 5

What is a management group used for?

Select an answer Filtering network trafficRunning container workloadsOrganizing subscriptions and applying governance at scaleStoring virtual machine disks

Question 6

Which Microsoft Entra ID feature provides just-in-time privileged role activation?

Select an answer Privileged Identity ManagementSelf-service password resetEnterprise applicationsIdentity Protection

Question 7

What is a Microsoft Entra ID tenant?

Select an answer A resource groupA dedicated instance of the identity directory for an organizationA virtual networkA storage account

Question 8

Which feature requires additional verification before a user can sign in?

Select an answer Azure AdvisorCost ManagementResource GraphConditional Access

Question 9

What is an Azure subscription?

Select an answer A DNS zoneA virtual networkA backup vaultA billing and resource boundary for Azure services

Question 10

What is a resource group?

Select an answer A backup policyA logical container for related Azure resourcesA group of users in Entra IDA set of network rules

Question 11

Which log records management actions such as who created or deleted a resource?

Select an answer Activity logApplication Insights tracesDiagnostic logsAzure AD sign-in logs

Question 12

Which RBAC role provides read-only access to resources?

Select an answer OwnerAdministratorReaderContributor

Question 13

Which Azure service provides highly durable object storage for unstructured data?

Select an answer Azure Blob StorageAzure Table StorageAzure FilesAzure Queue Storage

Question 14

Which blob access tier is best for data that is accessed frequently?

Select an answer CoolArchivePremiumHot

Question 15

Which blob access tier has the lowest storage cost but the highest retrieval cost and longest access time?

Select an answer Transaction optimizedArchiveHotCool

Question 16

Which Azure storage service provides file shares accessible over SMB?

Select an answer Queue StorageDisk StorageAzure FilesBlob Storage

Question 17

Which Azure storage solution is a NoSQL key-value store?

Select an answer Data LakeTable StorageSQL DatabaseCosmos DB

Question 18

What does a shared access signature (SAS) provide?

Select an answer Delegated, time-limited access to storage resourcesA permanent public URLA DNS recordA firewall rule

Question 19

Which feature encrypts data at rest in Azure Storage by default?

Select an answer Azure FirewallPrivate LinkNetwork Security GroupsStorage Service Encryption

Question 20

Which storage replication option copies data to a secondary region?

Select an answer Zone-redundant storageNo replicationGeo-redundant storageLocally redundant storage

Question 21

Which storage replication option is the least expensive and keeps copies in one data center?

Select an answer Zone-redundant storageRead-access geo-redundant storageLocally redundant storageGeo-redundant storage

Question 22

Which command-line tool is designed for copying data to and from Azure Storage?

Select an answer AzCopyAzure PowerShellkubectlsqlcmd

Question 23

Which Azure service provides a managed relational database?

Select an answer Queue StorageAzure SQL DatabaseBlob StorageTable Storage

Question 24

Which storage account kind supports blobs, files, queues, and tables together?

Select an answer BlobStorageFileStorageBlockBlobStorageStorageV2

Question 25

Which Azure service provides infrastructure as a service virtual machines?

Select an answer Azure FunctionsApp ServiceContainer InstancesAzure Virtual Machines

Question 26

Which Azure service scales a group of identical VMs based on demand?

Select an answer Traffic ManagerVirtual Machine Scale SetsAvailability SetsLoad Balancer

Question 27

Which Azure service runs containers without requiring you to manage virtual machines?

Select an answer Azure Container InstancesAzure Kubernetes ServiceVirtual Machine Scale SetsApp Service

Question 28

Which Azure service provides managed Kubernetes orchestration?

Select an answer Service FabricBatchAzure Kubernetes ServiceContainer Instances

Question 29

Which Azure service runs code without provisioning servers?

Select an answer Azure FunctionsVirtual MachinesDedicated HostsAvailability Sets

Question 30

Which Azure service provides managed virtual desktops and apps?

Select an answer Azure BastionApp ServiceRemote Desktop GatewayAzure Virtual Desktop

Question 31

What is an availability set designed to protect against?

Select an answer DNS failuresFailures within a data center by spreading VMs across fault and update domainsRegion-wide outagesStorage account key leaks

Question 32

What is an availability zone?

Select an answer A DNS zoneA backup scheduleA physically separate location within an Azure regionA logical container for resources

Question 33

Which Azure service distributes traffic at Layer 4 to virtual machines?

Select an answer Front DoorAzure Load BalancerApplication GatewayTraffic Manager

Question 34

Which Azure service routes and protects HTTP/HTTPS traffic at Layer 7?

Select an answer Application GatewayLoad BalancerVPN GatewayAzure DNS

Question 35

Which managed disk type offers the lowest latency for performance-sensitive workloads?

Select an answer Standard HDDStandard SSDUltra DiskPremium SSD

Question 36

Which Azure service is a fully managed platform for hosting web apps and APIs?

Select an answer Container InstancesFunctionsApp ServiceVirtual Machines

Question 37

What is an Azure virtual network used for?

Select an answer Managing user identitiesEnforcing backup policiesProviding isolated networking for Azure resourcesStoring virtual machine disks

Question 38

What is a subnet?

Select an answer A segment of a virtual network IP address rangeA backup copy of a VMA DNS recordA resource group

Question 39

Which Azure service provides DNS hosting and name resolution?

Select an answer Private LinkAzure DNSTraffic ManagerFront Door

Question 40

Which object filters traffic between subnets or to VMs using allow and deny rules?

Select an answer Azure PolicyResource groupStorage accountNetwork Security Group

Question 41

Which Azure capability protects web applications from common attacks such as SQL injection?

Select an answer Azure FirewallBastionPrivate LinkAzure Web Application Firewall

Question 42

Which Azure feature connects two virtual networks privately?

Select an answer Network WatcherVNet peeringAzure DNSPublic IP

Question 43

Which Azure service connects an on-premises network to Azure over an encrypted site-to-site tunnel?

Select an answer VPN GatewayExpressRouteAzure BastionApplication Gateway

Question 44

What is Azure Bastion used for?

Select an answer Backing up databasesFiltering DNS queriesSecure browser-based RDP and SSH access to VMs without public IPsHosting web applications

Question 45

Which Azure service distributes traffic across endpoints in different regions using DNS?

Select an answer Traffic ManagerLoad BalancerApplication GatewayAzure CDN

Question 46

Which service caches static content at edge locations for faster delivery?

Select an answer Traffic ManagerVPN GatewayAzure DNSAzure CDN

Question 47

Which Azure service collects metrics, logs, and alerts from resources in one place?

Select an answer Azure Cost ManagementAzure MonitorAzure PolicyAzure Backup

Question 48

Which Azure Monitor component lets you query log data with KQL?

Select an answer WorkbooksAlertsLog AnalyticsMetrics Explorer

Question 49

Which feature triggers actions when a metric or log condition is met?

Select an answer Resource locksAlertsDiagnostic settingsTags

Question 50

Which Azure service provides backup and restore for Azure resources?

Select an answer Azure BackupSite RecoverySnapshot StorageAzure Monitor

Question 51

Which Azure service replicates workloads to another region for disaster recovery?

Select an answer Azure BackupLog AnalyticsTraffic ManagerAzure Site Recovery

Question 52

Which Azure resource stores backups and supports restore operations?

Select an answer DNS zoneResource groupRecovery Services vaultLog Analytics workspace

Question 53

Which service helps you query and explore resources across subscriptions?

Select an answer Cost ManagementAzure AdvisorAzure Resource GraphAzure Monitor

Question 54

Which Azure service provides best-practice recommendations for reliability, security, and cost?

Select an answer Azure AdvisorAzure PolicyAzure BlueprintsService Health

Question 55

What does a diagnostic setting do?

Select an answer Changes RBAC rolesRoutes resource logs and metrics to destinations such as Log AnalyticsDeletes unused resourcesCreates a new subscription

Question 56

Which Azure service helps you create budgets and monitor spending?

Select an answer Azure AdvisorService HealthResource GraphCost Management + Billing

Question 57

Which of the following are valid Azure RBAC built-in roles? Select all that apply.

Select an answer OwnerContributorReaderSuperAdmin

Question 58

Which of the following are Azure storage services? Select all that apply.

Select an answer Blob StorageAzure FilesQueue StorageAzure DNS

Question 59

An availability set protects VMs against a region-wide outage.

Select an answer FalseTrue

Question 60

Match each Azure service to its main purpose.

Load BalancerApplication GatewayAzure BackupAzure Monitor