2025 Microsoft Azure Administrator Exam AZ 104
Exam New Latest Version with All Questions and
Answers and Rationales
Question 1 Your company has an Azure subscription. You need to configure a conditional access
policy to require Multi-Factor Authentication (MFA) for Global Administrators from untrusted
locations. Which Azure portal setting should you modify?
A. User settings in the MFA page
B. Session control in the conditional access policy
C. Grant control in the conditional access policy
D. Authentication methods in Azure AD Correct Answer: C
Rationale: Conditional access policies are configured in the Azure portal under Azure AD >
Security > Conditional Access. The Grant control setting allows you to require MFA for specific
users (e.g., Global Administrators) from untrusted locations.
Question 2You need to deploy an Ubuntu Server VM in Azure with a custom trusted root
certification authority (CA). Which command should you use?
A. New-AzureRmVm
B. New-AzVM
C. Create-AzVM
D. az vm create Correct Answer: D
Rationale: The az vm create command in Azure CLI is used to deploy a VM with custom
configurations, such as adding a trusted root CA. The other options are either outdated (New-
AzureRmVm) or incorrect (New-AzVM, Create-AzVM).
Question 3Which Azure service is BEST for storing and managing large amounts of unstructured
data with low-latency access?
A. Azure Blob Storage
B. Azure Table Storage
C. Azure Queue Storage
D. Azure File Storage Correct Answer: A
Rationale: Azure Blob Storage is designed for storing large amounts of unstructured data (e.g.,
images, videos) with low-latency access, ideal for scalable applications.
Question 4You need to copy files from an on-premises network to an Azure Storage account
named "StorageAcct1" using AzCopy. Which storage services can you use? (Select TWO)
A. Blob Storage
B. Table Storage
C. Queue Storage
D. File Storage Correct Answers: A, D
Rationale: AzCopy supports copying data to Azure Blob Storage and Azure File Storage. Table
and Queue Storage are not supported by AzCopy.
Question 5A company wants to monitor VM performance using Azure Monitor. Which feature
, provides insights into CPU and memory usage?
A. Azure Monitor Logs
B. Azure Monitor Insights
C. Azure Log Analytics
D. Azure Advisor Correct Answer: B
Rationale: Azure Monitor Insights provides detailed metrics and visualizations for VM
performance, including CPU and memory usage.
Question 6Which Azure CLI command lists all virtual networks in a subscription?
A. az network vnet list
B. az network list-vnet
C. az vnet list
D. az network vnet show Correct Answer: A
Rationale: The az network vnet list command retrieves all virtual networks in the current Azure
subscription.
Question 7You need to secure an Azure storage account with private access only. Which feature
should you configure?
A. Public network access
B. Service endpoints
C. Shared access signatures (SAS)
D. Private endpoints Correct Answer: D
Rationale: Private endpoints provide secure, private connectivity to Azure storage accounts,
restricting access to within a virtual network.
Question 8A company wants to ensure high availability for a web application. Which Azure
service should you use to distribute traffic across multiple VMs?
A. Azure Firewall
B. Azure Load Balancer
C. Azure Application Gateway
D. Azure Traffic Manager Correct Answer: B
Rationale: Azure Load Balancer distributes traffic across multiple VMs within a region, ensuring
high availability.
Question 9Which Azure service provides a managed Kubernetes cluster for containerized
applications?
A. Azure Container Instances
B. Azure Kubernetes Service (AKS)
C. Azure App Service
D. Azure Container Apps Correct Answer: B
Rationale: AKS is a managed Kubernetes service for deploying and managing containerized
applications.
Question 10You need to implement Azure Backup for a VM. Which resource is required to store
backups?
A. Recovery Services Vault
Exam New Latest Version with All Questions and
Answers and Rationales
Question 1 Your company has an Azure subscription. You need to configure a conditional access
policy to require Multi-Factor Authentication (MFA) for Global Administrators from untrusted
locations. Which Azure portal setting should you modify?
A. User settings in the MFA page
B. Session control in the conditional access policy
C. Grant control in the conditional access policy
D. Authentication methods in Azure AD Correct Answer: C
Rationale: Conditional access policies are configured in the Azure portal under Azure AD >
Security > Conditional Access. The Grant control setting allows you to require MFA for specific
users (e.g., Global Administrators) from untrusted locations.
Question 2You need to deploy an Ubuntu Server VM in Azure with a custom trusted root
certification authority (CA). Which command should you use?
A. New-AzureRmVm
B. New-AzVM
C. Create-AzVM
D. az vm create Correct Answer: D
Rationale: The az vm create command in Azure CLI is used to deploy a VM with custom
configurations, such as adding a trusted root CA. The other options are either outdated (New-
AzureRmVm) or incorrect (New-AzVM, Create-AzVM).
Question 3Which Azure service is BEST for storing and managing large amounts of unstructured
data with low-latency access?
A. Azure Blob Storage
B. Azure Table Storage
C. Azure Queue Storage
D. Azure File Storage Correct Answer: A
Rationale: Azure Blob Storage is designed for storing large amounts of unstructured data (e.g.,
images, videos) with low-latency access, ideal for scalable applications.
Question 4You need to copy files from an on-premises network to an Azure Storage account
named "StorageAcct1" using AzCopy. Which storage services can you use? (Select TWO)
A. Blob Storage
B. Table Storage
C. Queue Storage
D. File Storage Correct Answers: A, D
Rationale: AzCopy supports copying data to Azure Blob Storage and Azure File Storage. Table
and Queue Storage are not supported by AzCopy.
Question 5A company wants to monitor VM performance using Azure Monitor. Which feature
, provides insights into CPU and memory usage?
A. Azure Monitor Logs
B. Azure Monitor Insights
C. Azure Log Analytics
D. Azure Advisor Correct Answer: B
Rationale: Azure Monitor Insights provides detailed metrics and visualizations for VM
performance, including CPU and memory usage.
Question 6Which Azure CLI command lists all virtual networks in a subscription?
A. az network vnet list
B. az network list-vnet
C. az vnet list
D. az network vnet show Correct Answer: A
Rationale: The az network vnet list command retrieves all virtual networks in the current Azure
subscription.
Question 7You need to secure an Azure storage account with private access only. Which feature
should you configure?
A. Public network access
B. Service endpoints
C. Shared access signatures (SAS)
D. Private endpoints Correct Answer: D
Rationale: Private endpoints provide secure, private connectivity to Azure storage accounts,
restricting access to within a virtual network.
Question 8A company wants to ensure high availability for a web application. Which Azure
service should you use to distribute traffic across multiple VMs?
A. Azure Firewall
B. Azure Load Balancer
C. Azure Application Gateway
D. Azure Traffic Manager Correct Answer: B
Rationale: Azure Load Balancer distributes traffic across multiple VMs within a region, ensuring
high availability.
Question 9Which Azure service provides a managed Kubernetes cluster for containerized
applications?
A. Azure Container Instances
B. Azure Kubernetes Service (AKS)
C. Azure App Service
D. Azure Container Apps Correct Answer: B
Rationale: AKS is a managed Kubernetes service for deploying and managing containerized
applications.
Question 10You need to implement Azure Backup for a VM. Which resource is required to store
backups?
A. Recovery Services Vault
