AZ-104 RENEWAL EXAM (COMPREHENSIVE VERSION) (2025/2026) COMPREHENSIVE
QUESTIONS AND VERIFIED DETAILED SOLUTIONS ( MULTIPLE CHOICES) |100%
CORRECT!!
Question 1
You have an Azure subscription named Subscription1. You deploy a Linux virtual machine
named VM1 to Subscription1. You need to monitor the metrics and the logs of VM1. What
should you use?
A) Azure HDInsight
B. Linux Diagnostic Extension (LAD) 3.0
C) The AzurePerformanceDiagnostics extension
D) Azure Analysis Services
E) Microsoft Sentinel
Correct Answer: B) Linux Diagnostic Extension (LAD) 3.0
Rationale: The Linux Diagnostic Extension (LAD) is specifically designed to collect health
metrics and logs from Linux virtual machines and transfer them to Azure Storage or Event
Hubs. Azure Performance Diagnostics is focused on Windows performance issues, and
HDInsight/Analysis Services are data processing and analytics platforms, not VM
monitoring agents.
Question 2
You plan to deploy three Azure virtual machines named VM1, VM2, and VM3. The virtual
machines will host a web app named App1. You need to ensure that at least two virtual machines
are available if a single Azure datacenter becomes unavailable. What should you deploy?
A) All three virtual machines in a single Availability Zone
B) All virtual machines in a single Availability Set
C) Each virtual machine in a separate Availability Zone
D) Each virtual machine in a separate Availability Set
E) All virtual machines in a single Proximity Placement Group
Correct Answer: C) Each virtual machine in a separate Availability Zone
Rationale: Availability Zones (AZs) protect against the failure of an entire datacenter by
placing resources in physically separate locations within an Azure region. Availability Sets
only protect against rack-level hardware failures or maintenance within a single datacenter.
Placing them in separate AZs ensures that even if one datacenter goes down, the others
remain operational.
Question 3
You have an Azure virtual machine named VM1 that runs Windows Server 2019. You save VM1
as a template named Template1 to the Azure Resource Manager library. You plan to deploy a
virtual machine named VM2 from Template1. What can you configure during the deployment of
VM2?
A) Operating system
B) Administrator username
, 2
C) Virtual machine size
D) Resource group
E) Backup schedule
Correct Answer: B) Administrator username
Rationale: When deploying from a customized template (image), parameters like the admin
username, password, and public keys are configurable via the ARM template deployment
wizard. The OS type is fixed within the image itself, while the size and resource group are
infrastructure properties defined at the time of creation, but the username is specifically
the user-defined parameter for OS access.
Question 4
You have an Azure subscription that contains an Azure virtual machine named VM1. VM1 runs a
financial reporting app named App1 that does not support multiple active instances. At the end of
each month, CPU usage for VM1 peaks. You need to create a scheduled runbook to increase the
processor performance of VM1 at the end of each month. What task should you include in the
runbook?
A) Add the Azure Performance Diagnostics agent to VM1
B) Modify the VM size property of VM1
C) Add VM1 to a scale set
D) Increase the vCPU quota for the subscription
E) Add a Desired State Configuration (DSC) extension to VM1
Correct Answer: B) Modify the VM size property of VM1
Rationale: To increase CPU performance for a single instance that cannot be scaled
horizontally (as stated in the prompt), you must perform vertical scaling. This is achieved
by changing the VM size (SKU) to a larger instance (e.g., from D2s_v3 to D4s_v3).
Automation Runbooks can use PowerShell to change the 'HardwareProfile.vmSize'
property.
Question 5
You have an Azure subscription that contains 10 virtual networks. You need to ensure that when
a Network Security Group (NSG) is created, it automatically blocks TCP port 8080 between the
virtual networks. You configure a custom policy definition and assign it to the subscription. Does
this meet the goal?
A) Yes
B) No
C) Partially, only for new Resource Groups
D) Only if the NSGs are in a specific region
E) No, because policies cannot affect NSG rules
Correct Answer: A) Yes
Rationale: Azure Policy is used to enforce standards across resources. A policy can be
, 3
defined to "Deny" the creation of an NSG if it does not contain a specific security rule, or it
can use "DeployIfNotExists" to automatically create the required rule to block port 8080.
Assigning this to the subscription scope ensures it applies to all 10 virtual networks.
Question 6
Users report that a frontend application on VM1 is slower than usual when connecting to VM2 in
VNet2. You need to view the average round-trip time (RTT) of the packets from VM1 to VM2.
Which Azure Network Watcher feature should you use?
A) IP flow verify
B) Connection troubleshoot
C) Connection monitor
D) NSG flow logs
E) Packet capture
Correct Answer: C) Connection monitor
Rationale: Connection Monitor provides endpoint-to-endpoint monitoring for connectivity
and latency (RTT). It allows you to see performance metrics over time. IP flow verify only
checks if a packet is allowed or denied, and Connection Troubleshoot is a one-time check
rather than a monitoring tool for average RTT.
Question 7
You have four VMs (VM1-VM4) with different OS types and auto-shutdown schedules. You
plan nightly backups at 23:00. Which virtual machines can you back up using Azure Backup?
A) VM1 and VM3 only
B) VM1, VM2, VM3, and VM4
C) VM1 and VM2 only
D) VM1 only
E) None, as auto-shutdown interferes with backup
Correct Answer: B) VM1, VM2, VM3, and VM4
Rationale: Azure Backup supports both Windows and Linux OS. Auto-shutdown schedules
do not prevent backups. If a VM is shut down, Azure Backup performs a "File-system
consistent" backup for Linux or an "Application-consistent" backup for Windows if it's
running, or a "Crash-consistent" backup if it's powered off.
Question 8
You have a Recovery Services vault protecting VM1 and VM2 in West Europe. You need to
protect VM3 and VM4 in North Europe. What should you do first?
A) Create a new Recovery Services vault
B) Create a storage account
C) Configure the extensions for VM3 and VM4
D) Create a new backup policy
E) Move VM3 and VM4 to West Europe
QUESTIONS AND VERIFIED DETAILED SOLUTIONS ( MULTIPLE CHOICES) |100%
CORRECT!!
Question 1
You have an Azure subscription named Subscription1. You deploy a Linux virtual machine
named VM1 to Subscription1. You need to monitor the metrics and the logs of VM1. What
should you use?
A) Azure HDInsight
B. Linux Diagnostic Extension (LAD) 3.0
C) The AzurePerformanceDiagnostics extension
D) Azure Analysis Services
E) Microsoft Sentinel
Correct Answer: B) Linux Diagnostic Extension (LAD) 3.0
Rationale: The Linux Diagnostic Extension (LAD) is specifically designed to collect health
metrics and logs from Linux virtual machines and transfer them to Azure Storage or Event
Hubs. Azure Performance Diagnostics is focused on Windows performance issues, and
HDInsight/Analysis Services are data processing and analytics platforms, not VM
monitoring agents.
Question 2
You plan to deploy three Azure virtual machines named VM1, VM2, and VM3. The virtual
machines will host a web app named App1. You need to ensure that at least two virtual machines
are available if a single Azure datacenter becomes unavailable. What should you deploy?
A) All three virtual machines in a single Availability Zone
B) All virtual machines in a single Availability Set
C) Each virtual machine in a separate Availability Zone
D) Each virtual machine in a separate Availability Set
E) All virtual machines in a single Proximity Placement Group
Correct Answer: C) Each virtual machine in a separate Availability Zone
Rationale: Availability Zones (AZs) protect against the failure of an entire datacenter by
placing resources in physically separate locations within an Azure region. Availability Sets
only protect against rack-level hardware failures or maintenance within a single datacenter.
Placing them in separate AZs ensures that even if one datacenter goes down, the others
remain operational.
Question 3
You have an Azure virtual machine named VM1 that runs Windows Server 2019. You save VM1
as a template named Template1 to the Azure Resource Manager library. You plan to deploy a
virtual machine named VM2 from Template1. What can you configure during the deployment of
VM2?
A) Operating system
B) Administrator username
, 2
C) Virtual machine size
D) Resource group
E) Backup schedule
Correct Answer: B) Administrator username
Rationale: When deploying from a customized template (image), parameters like the admin
username, password, and public keys are configurable via the ARM template deployment
wizard. The OS type is fixed within the image itself, while the size and resource group are
infrastructure properties defined at the time of creation, but the username is specifically
the user-defined parameter for OS access.
Question 4
You have an Azure subscription that contains an Azure virtual machine named VM1. VM1 runs a
financial reporting app named App1 that does not support multiple active instances. At the end of
each month, CPU usage for VM1 peaks. You need to create a scheduled runbook to increase the
processor performance of VM1 at the end of each month. What task should you include in the
runbook?
A) Add the Azure Performance Diagnostics agent to VM1
B) Modify the VM size property of VM1
C) Add VM1 to a scale set
D) Increase the vCPU quota for the subscription
E) Add a Desired State Configuration (DSC) extension to VM1
Correct Answer: B) Modify the VM size property of VM1
Rationale: To increase CPU performance for a single instance that cannot be scaled
horizontally (as stated in the prompt), you must perform vertical scaling. This is achieved
by changing the VM size (SKU) to a larger instance (e.g., from D2s_v3 to D4s_v3).
Automation Runbooks can use PowerShell to change the 'HardwareProfile.vmSize'
property.
Question 5
You have an Azure subscription that contains 10 virtual networks. You need to ensure that when
a Network Security Group (NSG) is created, it automatically blocks TCP port 8080 between the
virtual networks. You configure a custom policy definition and assign it to the subscription. Does
this meet the goal?
A) Yes
B) No
C) Partially, only for new Resource Groups
D) Only if the NSGs are in a specific region
E) No, because policies cannot affect NSG rules
Correct Answer: A) Yes
Rationale: Azure Policy is used to enforce standards across resources. A policy can be
, 3
defined to "Deny" the creation of an NSG if it does not contain a specific security rule, or it
can use "DeployIfNotExists" to automatically create the required rule to block port 8080.
Assigning this to the subscription scope ensures it applies to all 10 virtual networks.
Question 6
Users report that a frontend application on VM1 is slower than usual when connecting to VM2 in
VNet2. You need to view the average round-trip time (RTT) of the packets from VM1 to VM2.
Which Azure Network Watcher feature should you use?
A) IP flow verify
B) Connection troubleshoot
C) Connection monitor
D) NSG flow logs
E) Packet capture
Correct Answer: C) Connection monitor
Rationale: Connection Monitor provides endpoint-to-endpoint monitoring for connectivity
and latency (RTT). It allows you to see performance metrics over time. IP flow verify only
checks if a packet is allowed or denied, and Connection Troubleshoot is a one-time check
rather than a monitoring tool for average RTT.
Question 7
You have four VMs (VM1-VM4) with different OS types and auto-shutdown schedules. You
plan nightly backups at 23:00. Which virtual machines can you back up using Azure Backup?
A) VM1 and VM3 only
B) VM1, VM2, VM3, and VM4
C) VM1 and VM2 only
D) VM1 only
E) None, as auto-shutdown interferes with backup
Correct Answer: B) VM1, VM2, VM3, and VM4
Rationale: Azure Backup supports both Windows and Linux OS. Auto-shutdown schedules
do not prevent backups. If a VM is shut down, Azure Backup performs a "File-system
consistent" backup for Linux or an "Application-consistent" backup for Windows if it's
running, or a "Crash-consistent" backup if it's powered off.
Question 8
You have a Recovery Services vault protecting VM1 and VM2 in West Europe. You need to
protect VM3 and VM4 in North Europe. What should you do first?
A) Create a new Recovery Services vault
B) Create a storage account
C) Configure the extensions for VM3 and VM4
D) Create a new backup policy
E) Move VM3 and VM4 to West Europe
