COURSE CODE: AZ-104 EXAM
DATE TIME
COURSE TITLE: Microsoft Azure Administrator — Key Concepts & ALLOWED
Workflows —/—/
90 Minutes
INSTRUCTOR: — ——
◇
Microsoft Azure — AZ-104
Key Concepts & Workflows Examination
ALL QUESTIONS ARE COMPULSORY
A MULTIPLE CHOICE QUESTIONS (200 Marks)
Choose the single best answer for each question. Write the correct letter (A, B, C, or D) in the space provided.
1. What are the core components needed to create most Azure resources?
A. A subscription, resource group, name, region, and size/tier/SKU selection
B. A virtual network, subnet, NSG, and public IP address
C. A management group, policy assignment, and role definition
D. A DNS zone, A record, and custom domain name
✦ CORRECT ANSWER: A — A subscription, resource group, name, region, and size/tier/SKU selection.
When creating virtually any Azure resource — whether a virtual machine, storage account, SQL database, or web
app — the creation wizard requires you to specify: the subscription (billing scope), resource group (logical
container), a unique name, the Azure region, and a pricing tier/SKU that determines capability and cost. These are
the universal foundational components.
,2. What is a resource group in Azure?
A. A regional boundary that restricts where resources can be deployed
B. A logical management container for Azure resources, not a regional boundary
C. A security boundary that isolates resources from other subscriptions
D. A billing container that determines the cost of all included resources
✦ CORRECT ANSWER: B — A logical management container for Azure resources, not a regional boundary.
A resource group is a logical container that holds related Azure resources. It is not a regional boundary — a resource
group can contain resources from multiple regions. It is not a security boundary, though it does serve as a scope for
RBAC assignments. It groups resources for management, deployment, and billing organisation, but does not restrict
regional placement.
3. What does SKU/tier/size typically reflect in Azure?
A. The location where the resource is deployed
B. Capability, pricing, or performance
C. The resource group membership
D. The DNS name of the resource
✦ CORRECT ANSWER: B — Capability, pricing, or performance.
SKU (Stock Keeping Unit), tier, and size selections across Azure resources — from VMs to App Service plans to
storage accounts — determine the capabilities available (e.g., premium features, SLA guarantees), the performance
characteristics (CPU, memory, IOPS), and the associated pricing. This is the primary lever for scaling resources up or
down.
, 4. What is the difference between public and private endpoints in Azure?
A. Public endpoints are free; private endpoints have associated costs
B. Public means internet-reachable; private means internal access via VNet or VPN
C. Public endpoints use IPv6; private endpoints use IPv4
D. Public endpoints are more secure than private endpoints
✦ CORRECT ANSWER: B — Public means internet-reachable; private means internal access via VNet or VPN.
A public endpoint exposes a resource to the internet via a publicly routable IP address. A private endpoint assigns a
private IP address from a VNet to the resource, making it accessible only within that VNet, peered VNets, or through
VPN/ExpressRoute connections. Private endpoints provide enhanced security by keeping traffic off the public
internet.
5. What is the difference between managed and unmanaged services in Azure?
A. Managed services cost more than unmanaged services
B. Managed services are handled by Azure; unmanaged services require manual handling
C. Managed services run on Linux; unmanaged services run on Windows
D. Managed services are only available in premium subscriptions
✦ CORRECT ANSWER: B — Managed services are handled by Azure; unmanaged services require manual
handling.
Managed services (e.g., Azure SQL Database, App Service) abstract away the underlying infrastructure — Azure
handles patching, updates, and high availability. Unmanaged services (e.g., IaaS VMs) require the administrator to
manage the operating system, patches, and configuration. This distinction is central to the shared responsibility
model.
DATE TIME
COURSE TITLE: Microsoft Azure Administrator — Key Concepts & ALLOWED
Workflows —/—/
90 Minutes
INSTRUCTOR: — ——
◇
Microsoft Azure — AZ-104
Key Concepts & Workflows Examination
ALL QUESTIONS ARE COMPULSORY
A MULTIPLE CHOICE QUESTIONS (200 Marks)
Choose the single best answer for each question. Write the correct letter (A, B, C, or D) in the space provided.
1. What are the core components needed to create most Azure resources?
A. A subscription, resource group, name, region, and size/tier/SKU selection
B. A virtual network, subnet, NSG, and public IP address
C. A management group, policy assignment, and role definition
D. A DNS zone, A record, and custom domain name
✦ CORRECT ANSWER: A — A subscription, resource group, name, region, and size/tier/SKU selection.
When creating virtually any Azure resource — whether a virtual machine, storage account, SQL database, or web
app — the creation wizard requires you to specify: the subscription (billing scope), resource group (logical
container), a unique name, the Azure region, and a pricing tier/SKU that determines capability and cost. These are
the universal foundational components.
,2. What is a resource group in Azure?
A. A regional boundary that restricts where resources can be deployed
B. A logical management container for Azure resources, not a regional boundary
C. A security boundary that isolates resources from other subscriptions
D. A billing container that determines the cost of all included resources
✦ CORRECT ANSWER: B — A logical management container for Azure resources, not a regional boundary.
A resource group is a logical container that holds related Azure resources. It is not a regional boundary — a resource
group can contain resources from multiple regions. It is not a security boundary, though it does serve as a scope for
RBAC assignments. It groups resources for management, deployment, and billing organisation, but does not restrict
regional placement.
3. What does SKU/tier/size typically reflect in Azure?
A. The location where the resource is deployed
B. Capability, pricing, or performance
C. The resource group membership
D. The DNS name of the resource
✦ CORRECT ANSWER: B — Capability, pricing, or performance.
SKU (Stock Keeping Unit), tier, and size selections across Azure resources — from VMs to App Service plans to
storage accounts — determine the capabilities available (e.g., premium features, SLA guarantees), the performance
characteristics (CPU, memory, IOPS), and the associated pricing. This is the primary lever for scaling resources up or
down.
, 4. What is the difference between public and private endpoints in Azure?
A. Public endpoints are free; private endpoints have associated costs
B. Public means internet-reachable; private means internal access via VNet or VPN
C. Public endpoints use IPv6; private endpoints use IPv4
D. Public endpoints are more secure than private endpoints
✦ CORRECT ANSWER: B — Public means internet-reachable; private means internal access via VNet or VPN.
A public endpoint exposes a resource to the internet via a publicly routable IP address. A private endpoint assigns a
private IP address from a VNet to the resource, making it accessible only within that VNet, peered VNets, or through
VPN/ExpressRoute connections. Private endpoints provide enhanced security by keeping traffic off the public
internet.
5. What is the difference between managed and unmanaged services in Azure?
A. Managed services cost more than unmanaged services
B. Managed services are handled by Azure; unmanaged services require manual handling
C. Managed services run on Linux; unmanaged services run on Windows
D. Managed services are only available in premium subscriptions
✦ CORRECT ANSWER: B — Managed services are handled by Azure; unmanaged services require manual
handling.
Managed services (e.g., Azure SQL Database, App Service) abstract away the underlying infrastructure — Azure
handles patching, updates, and high availability. Unmanaged services (e.g., IaaS VMs) require the administrator to
manage the operating system, patches, and configuration. This distinction is central to the shared responsibility
model.
