COURSE CODE: AZ-104-TOPIC
EXAM DATE TIME ALLOWED
COURSE TITLE: Azure Administrator — Topic Questions 2026/2027
— / — / —— 120 Minutes
INSTRUCTOR: —
◇
AZ-104 — Topic-Based Questions 2026/2027
Azure Administrator Associate Examination
ALL QUESTIONS ARE COMPULSORY
A MULTIPLE CHOICE QUESTIONS (100 Marks)
Choose the single best answer for each question. Write the correct letter in the space provided.
1. You want to associate each VM in RG1 with its respective department. What should you do?
A. Assign tags to the virtual machines
B. Move VMs to separate resource groups
C. Configure locks on the VMs
D. Apply Azure Policy
◆
✦ CORRECT ANSWER: A. Assign tags to the virtual machines
Rationale: Tags enable cost center/department attribution for billing and management without changing resource groups.
2. To require MFA and Azure AD-joined device for Global Admins from untrusted locations, you alter
user settings in the MFA page. Does this meet the goal?
A. Yes
B. No
◆
✦ CORRECT ANSWER: B. No
Rationale: Conditional Access policies must be configured, not per-user MFA settings. Session control alone does not enforce
grant requirements.
, 3. You alter the session control of the Azure AD conditional access policy. Does this meet the goal?
A. Yes
B. No
◆
✦ CORRECT ANSWER: B. No
Rationale: Grant controls (not session controls) enforce MFA and device compliance requirements.
4. You alter the grant control of the Azure AD conditional access policy. Does this meet the goal?
A. Yes
B. No
◆
✦ CORRECT ANSWER: A. Yes
Rationale: Grant controls define the requirements (MFA, compliant device) that must be met to allow access.
5. You need to deploy an Ubuntu Server VM with a custom trusted root CA. Which cmdlet should you
use?
A. New-AzVM
B. Set-AzVMCustomScriptExtension
C. Add-AzVhd
D. New-AzureRmVM
◆
✦ CORRECT ANSWER: A. New-AzVM
Rationale: New-AzVM is the current cmdlet for creating Azure VMs. Custom script extensions can add certificates post-
deployment.
6. You reconfigure the MFA usage model via Azure portal to change Per Authentication to Per Enabled
User. Does this meet the goal?
A. Yes
B. No
◆
✦ CORRECT ANSWER: B. No
Rationale: MFA usage models cannot be changed on existing providers. A new MFA provider with the desired model must be
created.
EXAM DATE TIME ALLOWED
COURSE TITLE: Azure Administrator — Topic Questions 2026/2027
— / — / —— 120 Minutes
INSTRUCTOR: —
◇
AZ-104 — Topic-Based Questions 2026/2027
Azure Administrator Associate Examination
ALL QUESTIONS ARE COMPULSORY
A MULTIPLE CHOICE QUESTIONS (100 Marks)
Choose the single best answer for each question. Write the correct letter in the space provided.
1. You want to associate each VM in RG1 with its respective department. What should you do?
A. Assign tags to the virtual machines
B. Move VMs to separate resource groups
C. Configure locks on the VMs
D. Apply Azure Policy
◆
✦ CORRECT ANSWER: A. Assign tags to the virtual machines
Rationale: Tags enable cost center/department attribution for billing and management without changing resource groups.
2. To require MFA and Azure AD-joined device for Global Admins from untrusted locations, you alter
user settings in the MFA page. Does this meet the goal?
A. Yes
B. No
◆
✦ CORRECT ANSWER: B. No
Rationale: Conditional Access policies must be configured, not per-user MFA settings. Session control alone does not enforce
grant requirements.
, 3. You alter the session control of the Azure AD conditional access policy. Does this meet the goal?
A. Yes
B. No
◆
✦ CORRECT ANSWER: B. No
Rationale: Grant controls (not session controls) enforce MFA and device compliance requirements.
4. You alter the grant control of the Azure AD conditional access policy. Does this meet the goal?
A. Yes
B. No
◆
✦ CORRECT ANSWER: A. Yes
Rationale: Grant controls define the requirements (MFA, compliant device) that must be met to allow access.
5. You need to deploy an Ubuntu Server VM with a custom trusted root CA. Which cmdlet should you
use?
A. New-AzVM
B. Set-AzVMCustomScriptExtension
C. Add-AzVhd
D. New-AzureRmVM
◆
✦ CORRECT ANSWER: A. New-AzVM
Rationale: New-AzVM is the current cmdlet for creating Azure VMs. Custom script extensions can add certificates post-
deployment.
6. You reconfigure the MFA usage model via Azure portal to change Per Authentication to Per Enabled
User. Does this meet the goal?
A. Yes
B. No
◆
✦ CORRECT ANSWER: B. No
Rationale: MFA usage models cannot be changed on existing providers. A new MFA provider with the desired model must be
created.
