AZ-104 RENEWAL ACTUAL EXAMINATION
2026 QUESTIONS WITH ANSWERS GRADED
A+
⩥ What is an Azure Subscription? Answer: Billing and security
boundary:
• This is a billing container for your resources.
• You can also apply permissions via RBAC.
• Organizations normally use multiple subscriptions - dev/test/prod.
• Every subscription trusts a Microsoft Entra ID tenant.
⩥ What are Azure Resources? Answer: Is an item deployed onto Azure.
The resource is based on a service available on Azure.
Each resource has a resource ID, a location and properties and is a part
of a resource group.
⩥ What is an Azure Resource Group Answer: This is a logical container
that holds resources that you want to manage together.
You can apply governance aspects like RBAC, tags and locks onto
resource groups.
⩥ What are Azure regions? Answer: A specific Azure geography with
one or more datacenters.
,Regions also comprise of Availability zones. You can increase the
overall redundancy of your infrastructure by spreading the virtual
machines across Availability zones
⩥ What are NSGs? Answer: Network Security Groups that are Rules
that allow/deny traffic
⩥ Azure Disk Encryption Answer: Encrypts the disks inside the VM
using a a data-encryption key (DEK) stored in an Azure Key Vault. Can
target the OS Disk/data Disks and uses BitLocker on Windows and DM-
Crypt on Linux.
⩥ Availability Sets Answer: Keeps two or more VMs apart on different
fault domains (different racks/power/network) and update domains (host
patching).
If one rack fails or one update domain reboots, at least one VM stays up
There is no extra cost for the Availability set, you only pay for the virtual
machines.
⩥ Max number of Availability Sets Answer: You can have a maximum
of 3 fault domains and 20 update domains
⩥ Fault Doma in (FD) Answer: group sha ring power & network
Separate VMs to a void a single rack failure
,⩥ Update Domain (UD) Answer: group that reboots together during
planned host updates; only one updated at a time
⩥ Availability Zones Answer: Physically separate data centers inside a
region. Protects from data center-level failures
Zones need to be assigned at machine creation.
There is no extra cost for the Availability zone, but there is a data
transfer charge across zones
⩥ Virtual Machine Scale Set Answer: Lets you manage a fleet of VMs as
a single unit.
• You set the model (image/size/network), and the set can autoscale
based on load (CPU, requests, queue length)
⩥ Virtual Machine Scale Set Orchestration Modes Answer: Uniform and
flexible
⩥ Virtual Machine Scale Set - Uniform Answer: Identical instances
Scale set API manages instances. Supports LB health probe or App
Health extension for health.
Great for stateless workloads, simple autoscale, lower variance
⩥ Virtual Machine Scale Set - Flexible Answer: Manage instances more
like regular VMs; mixed sizes/spot/regular possible.
, Better for mixed roles, custom availability needs
⩥ Azure Web Apps Answer: Part of App Service—is Microsoft's
Platform as a Service (PaaS) for hosting web sites and APIs without
managing servers. • You pick a runtime—.NET, Node.js, Python, Java,
PHP—or bring your own container, and Azure handles the OS patching,
platform updates
⩥ Azure App Service Plans Answer: Free/Shared (F1/D1)
Dev/test only; limited CPU; no SLA; no custom SSL; no slots.
Basic (B)
Dedicated VMs, manual scale; limited features; typically, no deployment
slots/backups.
Standard (S)
Production entry; autoscale, deployment slots (~5), daily backups,
staging; VNet integration (outbound).
Premium v3
Faster compute, more instances, more slots (~20), zone-redundant
options, better scale, Private Endpoint for inbound
2026 QUESTIONS WITH ANSWERS GRADED
A+
⩥ What is an Azure Subscription? Answer: Billing and security
boundary:
• This is a billing container for your resources.
• You can also apply permissions via RBAC.
• Organizations normally use multiple subscriptions - dev/test/prod.
• Every subscription trusts a Microsoft Entra ID tenant.
⩥ What are Azure Resources? Answer: Is an item deployed onto Azure.
The resource is based on a service available on Azure.
Each resource has a resource ID, a location and properties and is a part
of a resource group.
⩥ What is an Azure Resource Group Answer: This is a logical container
that holds resources that you want to manage together.
You can apply governance aspects like RBAC, tags and locks onto
resource groups.
⩥ What are Azure regions? Answer: A specific Azure geography with
one or more datacenters.
,Regions also comprise of Availability zones. You can increase the
overall redundancy of your infrastructure by spreading the virtual
machines across Availability zones
⩥ What are NSGs? Answer: Network Security Groups that are Rules
that allow/deny traffic
⩥ Azure Disk Encryption Answer: Encrypts the disks inside the VM
using a a data-encryption key (DEK) stored in an Azure Key Vault. Can
target the OS Disk/data Disks and uses BitLocker on Windows and DM-
Crypt on Linux.
⩥ Availability Sets Answer: Keeps two or more VMs apart on different
fault domains (different racks/power/network) and update domains (host
patching).
If one rack fails or one update domain reboots, at least one VM stays up
There is no extra cost for the Availability set, you only pay for the virtual
machines.
⩥ Max number of Availability Sets Answer: You can have a maximum
of 3 fault domains and 20 update domains
⩥ Fault Doma in (FD) Answer: group sha ring power & network
Separate VMs to a void a single rack failure
,⩥ Update Domain (UD) Answer: group that reboots together during
planned host updates; only one updated at a time
⩥ Availability Zones Answer: Physically separate data centers inside a
region. Protects from data center-level failures
Zones need to be assigned at machine creation.
There is no extra cost for the Availability zone, but there is a data
transfer charge across zones
⩥ Virtual Machine Scale Set Answer: Lets you manage a fleet of VMs as
a single unit.
• You set the model (image/size/network), and the set can autoscale
based on load (CPU, requests, queue length)
⩥ Virtual Machine Scale Set Orchestration Modes Answer: Uniform and
flexible
⩥ Virtual Machine Scale Set - Uniform Answer: Identical instances
Scale set API manages instances. Supports LB health probe or App
Health extension for health.
Great for stateless workloads, simple autoscale, lower variance
⩥ Virtual Machine Scale Set - Flexible Answer: Manage instances more
like regular VMs; mixed sizes/spot/regular possible.
, Better for mixed roles, custom availability needs
⩥ Azure Web Apps Answer: Part of App Service—is Microsoft's
Platform as a Service (PaaS) for hosting web sites and APIs without
managing servers. • You pick a runtime—.NET, Node.js, Python, Java,
PHP—or bring your own container, and Azure handles the OS patching,
platform updates
⩥ Azure App Service Plans Answer: Free/Shared (F1/D1)
Dev/test only; limited CPU; no SLA; no custom SSL; no slots.
Basic (B)
Dedicated VMs, manual scale; limited features; typically, no deployment
slots/backups.
Standard (S)
Production entry; autoscale, deployment slots (~5), daily backups,
staging; VNet integration (outbound).
Premium v3
Faster compute, more instances, more slots (~20), zone-redundant
options, better scale, Private Endpoint for inbound
