AZ-104 Azure Administrator Exam Questions – Cloud
Page | 1
Infrastructure, Security, Storage, and Virtual Machines
(Verified)
Description: This document includes verified exam questions for the Microsoft AZ-
104 Azure Administrator certification. Topics include resource groups, Active
Directory integration, MFA policies, VM deployment, storage redundancy, backups,
and networking. With updated answers, it serves as a complete preparation guide
for students and IT professionals seeking the Azure Administrator credential.
What are Resource Groups? - answer✔✔A container that holds related resources
for an Azure solution. Includes those resources (VMs, app services, storage account),
that you want to manage as a group. Web developers cannot access Application
Insights, in order to implement insutrumentation, use web tests, and set up alerts -
how do you allow them to do these things? - answer✔✔Assign Component
Contributor role to the resource group sAMAccountName for an Active Directory
user is too long - how do you fix this? - answer✔✔Change the name to less than
20 characters with only letters and numbers and apostrophes Company has several
departments, with multiple VMs in each, and resource group RG1 - how do you
, associate each VM to its department - answer✔✔Assign tags How would you
make sure members of an Azure group need to use MFA and an Azure AD joined
Page | 2 device when connecting from untrusted locations? - answer✔✔New Conditional
Access Policy -> Select Users or workload identities under Assignments -> verify Users
and Groups is selected -> select users/ groups as required. Choose Windows Azure
Service Management API so it applies to sign-in events. Under "Grant" select Grant
Access + require MFA + require device to be marked as compliant And finally enable
the policy + press "Create" Which cmdlet allows a custom deployment of a linux
server? - answer✔✔Az VM Create allows for the optional tag of "--custom-data"
which allows parsing a cloud init yml file. How do you inject a certificate from Key
Vault? - answer✔✔Create Key Vault -> generate certificate and store -> prepare
certificate -> create secure cloud-init config that includes the lines required to gather
certificate secrets. How do you change the usage model setting for Azure AD? -
answer✔✔You can't change the usage model of an existing provider. You must
delete and lose config settings then create a new one and reactivate the existing
server with activation credentials from the new provider. How would you replicate a
new on-prem Active Directory change to Azure AD? - answer✔✔Use: Start-
ADSyncSyncCycle -PolicyType Delta to synchronise only recent changes - assuming
the initial was already done Can also use Azure AD Connect if installed:
Synchronisation Service -> connectors -> actions/ run policytype initial will do a full
sync which can take a while for large directories - it is usually done when you have
, changed Azure AD Connect Configuration What is the NetLogon service on a domain
controller? - answer✔✔Handles authenticating users in to the domain. Can also
do logging of Netlogon events Which Azure storage redundancy would you
Page | 3
recommend with these requirements: Data must be stored on multiple nodes Data
must be stored on nodes in separate geographic locations Data can be read for the
secondary location as well as the primary at any time - answer✔✔Read only geo-
redundant storage This is like geo-redundant storage but the second location can
also be read from even if the primary has not done a failover to it. What are the
features of Locally-redundant storage? - answer✔✔Lowest cost option 11 nines 3
copies of the data on 3 separate machines in the same data centre. What are the
features of Zone-redundant storage? - answer✔✔Replication between 3 different
availability zones in the same region Each zone has separate power, cooling, and
networking 12 nines Recommended: transient fault handling, implement retry
policies with exponential back-off How do you view the ARM template used to
deploy a VM and Azure Storage account? - answer✔✔Use the Resource Group
blade -> select resources with checkboxes -> export template Resizing a VM in an
availability set fails. How do you resize it? - answer✔✔Stop all VMs in the
availability set, resize, restart one by one This is because the hardware of that VM
does not support the new size and new hardware must be dedicated upon a reboot
When attaching a data disk from one VM to another, how would you do this while
keeping the VMs offline for as little time as possible? - answer✔✔Detach the disk,
Page | 1
Infrastructure, Security, Storage, and Virtual Machines
(Verified)
Description: This document includes verified exam questions for the Microsoft AZ-
104 Azure Administrator certification. Topics include resource groups, Active
Directory integration, MFA policies, VM deployment, storage redundancy, backups,
and networking. With updated answers, it serves as a complete preparation guide
for students and IT professionals seeking the Azure Administrator credential.
What are Resource Groups? - answer✔✔A container that holds related resources
for an Azure solution. Includes those resources (VMs, app services, storage account),
that you want to manage as a group. Web developers cannot access Application
Insights, in order to implement insutrumentation, use web tests, and set up alerts -
how do you allow them to do these things? - answer✔✔Assign Component
Contributor role to the resource group sAMAccountName for an Active Directory
user is too long - how do you fix this? - answer✔✔Change the name to less than
20 characters with only letters and numbers and apostrophes Company has several
departments, with multiple VMs in each, and resource group RG1 - how do you
, associate each VM to its department - answer✔✔Assign tags How would you
make sure members of an Azure group need to use MFA and an Azure AD joined
Page | 2 device when connecting from untrusted locations? - answer✔✔New Conditional
Access Policy -> Select Users or workload identities under Assignments -> verify Users
and Groups is selected -> select users/ groups as required. Choose Windows Azure
Service Management API so it applies to sign-in events. Under "Grant" select Grant
Access + require MFA + require device to be marked as compliant And finally enable
the policy + press "Create" Which cmdlet allows a custom deployment of a linux
server? - answer✔✔Az VM Create allows for the optional tag of "--custom-data"
which allows parsing a cloud init yml file. How do you inject a certificate from Key
Vault? - answer✔✔Create Key Vault -> generate certificate and store -> prepare
certificate -> create secure cloud-init config that includes the lines required to gather
certificate secrets. How do you change the usage model setting for Azure AD? -
answer✔✔You can't change the usage model of an existing provider. You must
delete and lose config settings then create a new one and reactivate the existing
server with activation credentials from the new provider. How would you replicate a
new on-prem Active Directory change to Azure AD? - answer✔✔Use: Start-
ADSyncSyncCycle -PolicyType Delta to synchronise only recent changes - assuming
the initial was already done Can also use Azure AD Connect if installed:
Synchronisation Service -> connectors -> actions/ run policytype initial will do a full
sync which can take a while for large directories - it is usually done when you have
, changed Azure AD Connect Configuration What is the NetLogon service on a domain
controller? - answer✔✔Handles authenticating users in to the domain. Can also
do logging of Netlogon events Which Azure storage redundancy would you
Page | 3
recommend with these requirements: Data must be stored on multiple nodes Data
must be stored on nodes in separate geographic locations Data can be read for the
secondary location as well as the primary at any time - answer✔✔Read only geo-
redundant storage This is like geo-redundant storage but the second location can
also be read from even if the primary has not done a failover to it. What are the
features of Locally-redundant storage? - answer✔✔Lowest cost option 11 nines 3
copies of the data on 3 separate machines in the same data centre. What are the
features of Zone-redundant storage? - answer✔✔Replication between 3 different
availability zones in the same region Each zone has separate power, cooling, and
networking 12 nines Recommended: transient fault handling, implement retry
policies with exponential back-off How do you view the ARM template used to
deploy a VM and Azure Storage account? - answer✔✔Use the Resource Group
blade -> select resources with checkboxes -> export template Resizing a VM in an
availability set fails. How do you resize it? - answer✔✔Stop all VMs in the
availability set, resize, restart one by one This is because the hardware of that VM
does not support the new size and new hardware must be dedicated upon a reboot
When attaching a data disk from one VM to another, how would you do this while
keeping the VMs offline for as little time as possible? - answer✔✔Detach the disk,
