COURSE CODE: AZ-104 EXAM TIME
COURSE TITLE: Microsoft Azure Administrator — Comprehensive DATE ALLOWED
Practice Examination —/—/ 120
INSTRUCTOR: — —— Minutes
◇
Microsoft Azure — AZ-104
Azure Administrator Comprehensive Practice Examination
ALL QUESTIONS ARE COMPULSORY
A MULTIPLE CHOICE QUESTIONS (200 Marks)
Choose the single best answer for each question. Write the correct letter (A, B, C, or D) in the space provided.
1. You need to synchronise files from an on-premises file server to an Azure File Share. Which
tool should you use?
A. Azure Storage Explorer
B. Azure File Sync
C. Azure Data Factory
D. AzCopy
✦ CORRECT ANSWER: B — Azure File Sync.
Azure File Sync is specifically designed to centralise file shares in Azure whilst maintaining the flexibility of an on-
premises file server. It synchronises files bi-directionally between Windows Server and Azure File Shares, enabling
multi-site access, cloud tiering, and backup integration. AzCopy is a copy utility; Storage Explorer is a GUI
management tool; Data Factory is for orchestration workflows.
,2. Your team prefers using a graphical user interface to manage and transfer data between
Azure Storage accounts. Which tool should they use?
A. AzCopy
B. Azure Storage Explorer
C. Azure Data Factory
D. Azure CLI
✦ CORRECT ANSWER: B — Azure Storage Explorer.
Azure Storage Explorer is a free standalone GUI application that allows users to easily manage Azure storage
accounts, upload/download blobs, manage file shares, and work with queues and tables. AzCopy is a command-
line tool; Azure CLI is command-line; Data Factory is for automated orchestration.
3. You need an automated data transfer workflow to move data between multiple Azure
services and on-premises systems. Which tool should you use?
A. Azure Storage Explorer
B. Azure Data Factory
C. AzCopy
D. Azure File Sync
✦ CORRECT ANSWER: B — Azure Data Factory.
Azure Data Factory is a fully managed, serverless data integration service that enables automated, scheduled data
movement and transformation workflows between Azure services and on-premises data sources. It is designed for
ETL/ELT processes at enterprise scale.
,4. Pym Technologies needs to create a virtual network (VNet) to host their new application
servers in the East US region. Which solution should they use?
A. Create a new VNet using the Azure portal and specify the address space
B. Set up a public IP address for each server
C. Deploy a VPN Gateway
D. Configure an Azure Load Balancer
✦ CORRECT ANSWER: A — Create a new VNet using the Azure portal and specify the address space.
Creating a VNet is the foundational step for hosting resources in Azure — it defines a private IP address space (CIDR
block) in which subnets can be created. Public IPs are not needed for internal servers; a VPN Gateway is for hybrid
connectivity; a Load Balancer distributes traffic but does not create the network.
5. Contoso Ltd. needs to segment their VNet into multiple subnets. What is the first step they
should take?
A. Create a Network Security Group (NSG)
B. Define subnet address ranges within the existing VNet address space
C. Set up a VPN Gateway
D. Assign a public IP address to each subnet
✦ CORRECT ANSWER: B — Define subnet address ranges within the existing VNet address space.
Subnets are created by carving out portions of the VNet's address space. Each subnet must have a unique address
range that is a subset of the VNet address space. NSGs filter traffic after subnets exist; VPN Gateways and public IPs
are unrelated to subnet creation.
, 6. Wayne Enterprises needs secure, reliable connectivity between their on-premises data
centre and Azure resources. Which solution should they use?
A. ExpressRoute
B. Site-to-Site VPN
C. Point-to-Site VPN
D. Public Internet
✦ CORRECT ANSWER: A — ExpressRoute.
ExpressRoute provides a dedicated, private connection between on-premises infrastructure and Azure data centres
— bypassing the public internet. It offers higher reliability, predictable latency, and up to 100 Gbps bandwidth. Site-
to-Site VPN is secure but traverses the public internet with variable performance. Point-to-Site VPN is for individual
clients, not entire networks.
7. LexCorp wants to control inbound and outbound traffic to their VMs in Azure. What should
they use?
A. Network Security Groups (NSGs)
B. Azure Firewall
C. Application Gateway
D. VPN Gateway
✦ CORRECT ANSWER: A — Network Security Groups (NSGs).
NSGs contain security rules that filter network traffic (allow/deny) based on 5-tuple parameters: source IP,
destination IP, source port, destination port, and protocol. They are applied at the subnet or NIC level. Azure
Firewall is a managed, centralised service for broader network security. Application Gateway is for load balancing;
VPN Gateway is for connectivity.
COURSE TITLE: Microsoft Azure Administrator — Comprehensive DATE ALLOWED
Practice Examination —/—/ 120
INSTRUCTOR: — —— Minutes
◇
Microsoft Azure — AZ-104
Azure Administrator Comprehensive Practice Examination
ALL QUESTIONS ARE COMPULSORY
A MULTIPLE CHOICE QUESTIONS (200 Marks)
Choose the single best answer for each question. Write the correct letter (A, B, C, or D) in the space provided.
1. You need to synchronise files from an on-premises file server to an Azure File Share. Which
tool should you use?
A. Azure Storage Explorer
B. Azure File Sync
C. Azure Data Factory
D. AzCopy
✦ CORRECT ANSWER: B — Azure File Sync.
Azure File Sync is specifically designed to centralise file shares in Azure whilst maintaining the flexibility of an on-
premises file server. It synchronises files bi-directionally between Windows Server and Azure File Shares, enabling
multi-site access, cloud tiering, and backup integration. AzCopy is a copy utility; Storage Explorer is a GUI
management tool; Data Factory is for orchestration workflows.
,2. Your team prefers using a graphical user interface to manage and transfer data between
Azure Storage accounts. Which tool should they use?
A. AzCopy
B. Azure Storage Explorer
C. Azure Data Factory
D. Azure CLI
✦ CORRECT ANSWER: B — Azure Storage Explorer.
Azure Storage Explorer is a free standalone GUI application that allows users to easily manage Azure storage
accounts, upload/download blobs, manage file shares, and work with queues and tables. AzCopy is a command-
line tool; Azure CLI is command-line; Data Factory is for automated orchestration.
3. You need an automated data transfer workflow to move data between multiple Azure
services and on-premises systems. Which tool should you use?
A. Azure Storage Explorer
B. Azure Data Factory
C. AzCopy
D. Azure File Sync
✦ CORRECT ANSWER: B — Azure Data Factory.
Azure Data Factory is a fully managed, serverless data integration service that enables automated, scheduled data
movement and transformation workflows between Azure services and on-premises data sources. It is designed for
ETL/ELT processes at enterprise scale.
,4. Pym Technologies needs to create a virtual network (VNet) to host their new application
servers in the East US region. Which solution should they use?
A. Create a new VNet using the Azure portal and specify the address space
B. Set up a public IP address for each server
C. Deploy a VPN Gateway
D. Configure an Azure Load Balancer
✦ CORRECT ANSWER: A — Create a new VNet using the Azure portal and specify the address space.
Creating a VNet is the foundational step for hosting resources in Azure — it defines a private IP address space (CIDR
block) in which subnets can be created. Public IPs are not needed for internal servers; a VPN Gateway is for hybrid
connectivity; a Load Balancer distributes traffic but does not create the network.
5. Contoso Ltd. needs to segment their VNet into multiple subnets. What is the first step they
should take?
A. Create a Network Security Group (NSG)
B. Define subnet address ranges within the existing VNet address space
C. Set up a VPN Gateway
D. Assign a public IP address to each subnet
✦ CORRECT ANSWER: B — Define subnet address ranges within the existing VNet address space.
Subnets are created by carving out portions of the VNet's address space. Each subnet must have a unique address
range that is a subset of the VNet address space. NSGs filter traffic after subnets exist; VPN Gateways and public IPs
are unrelated to subnet creation.
, 6. Wayne Enterprises needs secure, reliable connectivity between their on-premises data
centre and Azure resources. Which solution should they use?
A. ExpressRoute
B. Site-to-Site VPN
C. Point-to-Site VPN
D. Public Internet
✦ CORRECT ANSWER: A — ExpressRoute.
ExpressRoute provides a dedicated, private connection between on-premises infrastructure and Azure data centres
— bypassing the public internet. It offers higher reliability, predictable latency, and up to 100 Gbps bandwidth. Site-
to-Site VPN is secure but traverses the public internet with variable performance. Point-to-Site VPN is for individual
clients, not entire networks.
7. LexCorp wants to control inbound and outbound traffic to their VMs in Azure. What should
they use?
A. Network Security Groups (NSGs)
B. Azure Firewall
C. Application Gateway
D. VPN Gateway
✦ CORRECT ANSWER: A — Network Security Groups (NSGs).
NSGs contain security rules that filter network traffic (allow/deny) based on 5-tuple parameters: source IP,
destination IP, source port, destination port, and protocol. They are applied at the subnet or NIC level. Azure
Firewall is a managed, centralised service for broader network security. Application Gateway is for load balancing;
VPN Gateway is for connectivity.
