AZ-104 RENEWAL FINAL PAPER 2025/2026 QUESTIONS
WITH ANSWERS GRADED A+
QUESTION 1
You have an Azure subscription named Subscription1.
You deploy a Linux virtual machine named VM1 to Subscription1.
You need to monitor the metrics and the logs of VM1.
What should you use?
A. Azure HDInsight
B. Linux Diagnostic Extension (LAD) 3.0
C. the AzurePerformanceDiagnostics extension
D. Azure Analysis Services - ✔✔B
✔✔QUESTION 2
You plan to deploy three Azure virtual machines named VM1, VM2, and VM3. The
virtual
machines will host a web app named App1.
You need to ensure that at least two virtual machines are available if a single Azure
datacenter
becomes unavailable.
What should you deploy?
A. all three virtual machines in a single Availability Zone
B. all virtual machines in a single Availability Set
C. each virtual machine in a separate Availability Zone
D. each virtual machine in a separate Availability Set - ✔✔B
✔✔QUESTION 3
You have an Azure virtual machine named VM1 that runs Windows Server 2019.
You save VM1 as a template named Template1 to the Azure Resource Manager library.
You plan to deploy a virtual machine named VM2 from Template1.
What can you configure during the deployment of VM2?
A. operating system
B. administrator username
C. virtual machine size
D. resource group - ✔✔B
✔✔QUESTION 4
You have an Azure subscription that contains an Azure virtual machine named VM1.
VM1 runs a
financial reporting app named App1 that does not support multiple active instances.
At the end of each month, CPU usage for VM1 peaks when App1 runs.
You need to create a scheduled runbook to increase the processor performance of VM1
at the
end of each month.
,What task should you include in the runbook?
A. Add the Azure Performance Diagnostics agent to VM1.
B. Modify the VM size property of VM1.
C. Add VM1 to a scale set.
D. Increase the vCPU quota for the subscription.
E. Add a Desired State Configuration (DSC) extension to VM1. - ✔✔E
✔✔QUESTION 5
Note: This question is part of a series of questions
You have an Azure subscription that contains 10 virtual networks. The virtual networks
are hosted
in separate resource groups.
Another administrator plans to create several network security groups (NSGs) in the
subscription.
You need to ensure that when an NSG is created, it automatically blocks TCP port 8080
between the virtual networks.
Solution: You configure a custom policy definition, and then you assign the policy to the
subscription.
Does this meet the goal?
A. Yes
B. No - ✔✔A
✔✔QUESTION 6
You have two Azure virtual networks named VNet1 and VNet2. VNet1 contains an
Azure virtual
machine named VM1. VNet2 contains an Azure virtual machine named VM2.
VM1 hosts a frontend application that connects to VM2 to retrieve data.
Users report that the frontend application is slower than usual.
You need to view the average round-trip time (RTT) of the packets from VM1 to VM2.
Which Azure Network Watcher feature should you use?
A. IP flow verify
B. Connection troubleshoot
C. Connection monitor
D. NSG flow logs - ✔✔C
✔✔QUESTION 7
You have an Azure subscription that has a Recovery Services vault named Vault1. The
subscription contains the virtual machines shown in the following table:
NAME---Operating System---Auto-Shutdown
VM1---WIndows Server 2012 R2---Off
VM2---WIndows Server 2016---19:00
VM3---Ubuntu Server 18.04LTS---Off
VM4---WIndows 10---19:00
You plan to schedule backups to occur every night at 23:00.
Which virtual machines can you back up by using Azure Backup?
A. VM1 and VM3 only
,B. VM1, VM2, VM3 and VM4
C. VM1 and VM2 only
D. VM1 only - ✔✔B
✔✔QUESTION 8
You have the Azure virtual machines shown in the following table:
NAME---Azure Region
VM1---West Europe
VM2---West Europe
VM3---North Europe
VM4---North Europe
You have a Recovery Services vault that protects VM1 and VM2.
You need to protect VM3 and VM4 by using Recovery Services.
What should you do first?
A. Create a new Recovery Services vault
B. Create a storage account
C. Configure the extensions for VM3 and VM4
D. Create a new backup policy - ✔✔A
✔✔QUESTION 9
Note: This question is part of a series of questions
You have an Azure subscription that contains the following users in an Azure Active
Directory
tenant named contoso.onmicrosoft.com:
NAME---Role---Scope
User1---Global Administrator---Azure Active Directory
User2--Global Administrator---Azure Active Directory
User3---User Administrator---Azure Active Directory
User4---Owner---Azure Subscription
User1 creates a new Azure Active Directory tenant named
external.contoso.onmicrosoft.com.
You need to create new user accounts in external.contoso.onmicrosoft.com.
Solution: You instruct User2 to create the user accounts.
Does that meet the goal?
A. Yes
B. No - ✔✔A
✔✔QUESTION 10
Note: This question is part of a series of questions
You have an Azure subscription that contains the following users in an Azure Active
Directory
tenant named contoso.onmicrosoft.com:
NAME---Role---Scope
User1---Global Administrator---Azure Active Directory
User2--Global Administrator---Azure Active Directory
User3---User Administrator---Azure Active Directory
, User4---Owner---Azure Subscription
User1 creates a new Azure Active Directory tenant named
external.contoso.onmicrosoft.com.
You need to create new user accounts in external.contoso.onmicrosoft.com.
Solution: You instruct User4 to create the user accounts.
Does that meet the goal?
A. Yes
B. No - ✔✔B
✔✔QUESTION 11
Note: This question is part of a series of questions
You have an Azure subscription that contains the following users in an Azure Active
Directory
tenant named contoso.onmicrosoft.com:
NAME---Role---Scope
User1---Global Administrator---Azure Active Directory
User2--Global Administrator---Azure Active Directory
User3---User Administrator---Azure Active Directory
User4---Owner---Azure Subscription
User1 creates a new Azure Active Directory tenant named
external.contoso.onmicrosoft.com.
You need to create new user accounts in external.contoso.onmicrosoft.com.
Solution: You instruct User3 to create the user accounts.
Does that meet the goal?
A. Yes
B. No - ✔✔B
✔✔QUESTION 12
You have an Azure subscription that contains an Azure Active Directory (Azure AD)
tenant
named contoso.com and an Azure Kubernetes Service (AKS) cluster named AKS1.
An administrator reports that she is unable to grant access to AKS1 to the users in
contoso.com.
You need to ensure that access to AKS1 can be granted to the contoso.com users.
What should you do first?
A. From contoso.com, modify the Organization relationships settings.
B. From contoso.com, create an OAuth 2.0 authorization endpoint.
C. Recreate AKS1.
D. From AKS1, create a namespace. - ✔✔B
✔✔QUESTION 13
You have a Microsoft 365 tenant and an Azure Active Directory (Azure AD) tenant
named
contoso.com.
You plan to grant three users named User1, User2, and User3 access to a temporary
Microsoft
WITH ANSWERS GRADED A+
QUESTION 1
You have an Azure subscription named Subscription1.
You deploy a Linux virtual machine named VM1 to Subscription1.
You need to monitor the metrics and the logs of VM1.
What should you use?
A. Azure HDInsight
B. Linux Diagnostic Extension (LAD) 3.0
C. the AzurePerformanceDiagnostics extension
D. Azure Analysis Services - ✔✔B
✔✔QUESTION 2
You plan to deploy three Azure virtual machines named VM1, VM2, and VM3. The
virtual
machines will host a web app named App1.
You need to ensure that at least two virtual machines are available if a single Azure
datacenter
becomes unavailable.
What should you deploy?
A. all three virtual machines in a single Availability Zone
B. all virtual machines in a single Availability Set
C. each virtual machine in a separate Availability Zone
D. each virtual machine in a separate Availability Set - ✔✔B
✔✔QUESTION 3
You have an Azure virtual machine named VM1 that runs Windows Server 2019.
You save VM1 as a template named Template1 to the Azure Resource Manager library.
You plan to deploy a virtual machine named VM2 from Template1.
What can you configure during the deployment of VM2?
A. operating system
B. administrator username
C. virtual machine size
D. resource group - ✔✔B
✔✔QUESTION 4
You have an Azure subscription that contains an Azure virtual machine named VM1.
VM1 runs a
financial reporting app named App1 that does not support multiple active instances.
At the end of each month, CPU usage for VM1 peaks when App1 runs.
You need to create a scheduled runbook to increase the processor performance of VM1
at the
end of each month.
,What task should you include in the runbook?
A. Add the Azure Performance Diagnostics agent to VM1.
B. Modify the VM size property of VM1.
C. Add VM1 to a scale set.
D. Increase the vCPU quota for the subscription.
E. Add a Desired State Configuration (DSC) extension to VM1. - ✔✔E
✔✔QUESTION 5
Note: This question is part of a series of questions
You have an Azure subscription that contains 10 virtual networks. The virtual networks
are hosted
in separate resource groups.
Another administrator plans to create several network security groups (NSGs) in the
subscription.
You need to ensure that when an NSG is created, it automatically blocks TCP port 8080
between the virtual networks.
Solution: You configure a custom policy definition, and then you assign the policy to the
subscription.
Does this meet the goal?
A. Yes
B. No - ✔✔A
✔✔QUESTION 6
You have two Azure virtual networks named VNet1 and VNet2. VNet1 contains an
Azure virtual
machine named VM1. VNet2 contains an Azure virtual machine named VM2.
VM1 hosts a frontend application that connects to VM2 to retrieve data.
Users report that the frontend application is slower than usual.
You need to view the average round-trip time (RTT) of the packets from VM1 to VM2.
Which Azure Network Watcher feature should you use?
A. IP flow verify
B. Connection troubleshoot
C. Connection monitor
D. NSG flow logs - ✔✔C
✔✔QUESTION 7
You have an Azure subscription that has a Recovery Services vault named Vault1. The
subscription contains the virtual machines shown in the following table:
NAME---Operating System---Auto-Shutdown
VM1---WIndows Server 2012 R2---Off
VM2---WIndows Server 2016---19:00
VM3---Ubuntu Server 18.04LTS---Off
VM4---WIndows 10---19:00
You plan to schedule backups to occur every night at 23:00.
Which virtual machines can you back up by using Azure Backup?
A. VM1 and VM3 only
,B. VM1, VM2, VM3 and VM4
C. VM1 and VM2 only
D. VM1 only - ✔✔B
✔✔QUESTION 8
You have the Azure virtual machines shown in the following table:
NAME---Azure Region
VM1---West Europe
VM2---West Europe
VM3---North Europe
VM4---North Europe
You have a Recovery Services vault that protects VM1 and VM2.
You need to protect VM3 and VM4 by using Recovery Services.
What should you do first?
A. Create a new Recovery Services vault
B. Create a storage account
C. Configure the extensions for VM3 and VM4
D. Create a new backup policy - ✔✔A
✔✔QUESTION 9
Note: This question is part of a series of questions
You have an Azure subscription that contains the following users in an Azure Active
Directory
tenant named contoso.onmicrosoft.com:
NAME---Role---Scope
User1---Global Administrator---Azure Active Directory
User2--Global Administrator---Azure Active Directory
User3---User Administrator---Azure Active Directory
User4---Owner---Azure Subscription
User1 creates a new Azure Active Directory tenant named
external.contoso.onmicrosoft.com.
You need to create new user accounts in external.contoso.onmicrosoft.com.
Solution: You instruct User2 to create the user accounts.
Does that meet the goal?
A. Yes
B. No - ✔✔A
✔✔QUESTION 10
Note: This question is part of a series of questions
You have an Azure subscription that contains the following users in an Azure Active
Directory
tenant named contoso.onmicrosoft.com:
NAME---Role---Scope
User1---Global Administrator---Azure Active Directory
User2--Global Administrator---Azure Active Directory
User3---User Administrator---Azure Active Directory
, User4---Owner---Azure Subscription
User1 creates a new Azure Active Directory tenant named
external.contoso.onmicrosoft.com.
You need to create new user accounts in external.contoso.onmicrosoft.com.
Solution: You instruct User4 to create the user accounts.
Does that meet the goal?
A. Yes
B. No - ✔✔B
✔✔QUESTION 11
Note: This question is part of a series of questions
You have an Azure subscription that contains the following users in an Azure Active
Directory
tenant named contoso.onmicrosoft.com:
NAME---Role---Scope
User1---Global Administrator---Azure Active Directory
User2--Global Administrator---Azure Active Directory
User3---User Administrator---Azure Active Directory
User4---Owner---Azure Subscription
User1 creates a new Azure Active Directory tenant named
external.contoso.onmicrosoft.com.
You need to create new user accounts in external.contoso.onmicrosoft.com.
Solution: You instruct User3 to create the user accounts.
Does that meet the goal?
A. Yes
B. No - ✔✔B
✔✔QUESTION 12
You have an Azure subscription that contains an Azure Active Directory (Azure AD)
tenant
named contoso.com and an Azure Kubernetes Service (AKS) cluster named AKS1.
An administrator reports that she is unable to grant access to AKS1 to the users in
contoso.com.
You need to ensure that access to AKS1 can be granted to the contoso.com users.
What should you do first?
A. From contoso.com, modify the Organization relationships settings.
B. From contoso.com, create an OAuth 2.0 authorization endpoint.
C. Recreate AKS1.
D. From AKS1, create a namespace. - ✔✔B
✔✔QUESTION 13
You have a Microsoft 365 tenant and an Azure Active Directory (Azure AD) tenant
named
contoso.com.
You plan to grant three users named User1, User2, and User3 access to a temporary
Microsoft
