AZ 104
Microsoft Azure Administrator
Latest Mock Exam
2025
©2025
, Questions on Managing Azure Identities and Governance
Question 1 (Multiple Choice)
When designing an Azure environment, which feature is most critical to
enforce granular access control across resources?
A) Azure Arc
B) Unified Role-Based Access Control (RBAC)
C) Azure Monitor
D) Virtual Network Service Endpoints
Correct ANS:
B) Unified Role-Based Access Control (RBAC)
Rationale:
RBAC enables administrators to assign permissions based on roles at
different scopes (subscription, resource group, resource) so that users
receive only the access necessary for their responsibilities, ensuring
secure and efficient governance.
---
Question 2 (Fill-in-the-Blank)
In Azure Active Directory, the process of granting temporary, elevated
privileges on an as-needed basis is managed through __________.
Correct ANS:
Privileged Identity Management (PIM)
Rationale:
PIM minimizes security risks by allowing just‑in‑time access to sensitive
resources and reducing the attack surface through time‑limited role
assignments.
©2025
,---
Question 3 (True/False)
True/False: Azure Policy is primarily used to assign roles and permissions
for user access to resources.
Correct ANS:
False
Rationale:
Azure Policy is focused on enforcing organizational standards and
assessing compliance, not on providing access control (which is handled
by RBAC). It ensures that resource configurations adhere to defined rules.
---
Question 4 (Multiple Response)
Select all features that contribute directly to managing identities and
governance in Azure:
A) Role-Based Access Control (RBAC)
B) Azure Policy
C) Azure Monitor
D) Privileged Identity Management (PIM)
Correct ANSs:
A, B, D
Rationale:
RBAC, Azure Policy, and PIM are central to managing identities and
governance by controlling access, enforcing compliance, and managing
privileged roles. Azure Monitor, while valuable for performance and
diagnostics, does not directly manage access or policy.
---
©2025
, Question 5 (Multiple Choice)
Which tool helps organizations deploy a repeatable set of resources,
including defined policies, role assignments, and resource templates to
ensure consistent governance?
A) Azure Blueprints
B) Azure DevOps
C) Azure Automation
D) Azure Resource Manager Templates
Correct ANS:
A) Azure Blueprints
Rationale:
Azure Blueprints allow for the bundling of artifacts like policies, roles, and
ARM templates into a single package, making the process of replicating a
governed environment across subscriptions more streamlined.
---
Questions on Implementing and Managing Storage
Question 6 (Multiple Choice)
What feature of an Azure Storage Account ensures that all data transfers
occur over a secure channel?
A) Blob Tiering
B) Secure Transfer Required
C) Geo-Redundancy
D) Storage Account Keys
Correct ANS:
B) Secure Transfer Required
Rationale:
Enabling "Secure Transfer Required" forces all access to the storage
account to use HTTPS, thereby ensuring that data in transit is encrypted
©2025
Microsoft Azure Administrator
Latest Mock Exam
2025
©2025
, Questions on Managing Azure Identities and Governance
Question 1 (Multiple Choice)
When designing an Azure environment, which feature is most critical to
enforce granular access control across resources?
A) Azure Arc
B) Unified Role-Based Access Control (RBAC)
C) Azure Monitor
D) Virtual Network Service Endpoints
Correct ANS:
B) Unified Role-Based Access Control (RBAC)
Rationale:
RBAC enables administrators to assign permissions based on roles at
different scopes (subscription, resource group, resource) so that users
receive only the access necessary for their responsibilities, ensuring
secure and efficient governance.
---
Question 2 (Fill-in-the-Blank)
In Azure Active Directory, the process of granting temporary, elevated
privileges on an as-needed basis is managed through __________.
Correct ANS:
Privileged Identity Management (PIM)
Rationale:
PIM minimizes security risks by allowing just‑in‑time access to sensitive
resources and reducing the attack surface through time‑limited role
assignments.
©2025
,---
Question 3 (True/False)
True/False: Azure Policy is primarily used to assign roles and permissions
for user access to resources.
Correct ANS:
False
Rationale:
Azure Policy is focused on enforcing organizational standards and
assessing compliance, not on providing access control (which is handled
by RBAC). It ensures that resource configurations adhere to defined rules.
---
Question 4 (Multiple Response)
Select all features that contribute directly to managing identities and
governance in Azure:
A) Role-Based Access Control (RBAC)
B) Azure Policy
C) Azure Monitor
D) Privileged Identity Management (PIM)
Correct ANSs:
A, B, D
Rationale:
RBAC, Azure Policy, and PIM are central to managing identities and
governance by controlling access, enforcing compliance, and managing
privileged roles. Azure Monitor, while valuable for performance and
diagnostics, does not directly manage access or policy.
---
©2025
, Question 5 (Multiple Choice)
Which tool helps organizations deploy a repeatable set of resources,
including defined policies, role assignments, and resource templates to
ensure consistent governance?
A) Azure Blueprints
B) Azure DevOps
C) Azure Automation
D) Azure Resource Manager Templates
Correct ANS:
A) Azure Blueprints
Rationale:
Azure Blueprints allow for the bundling of artifacts like policies, roles, and
ARM templates into a single package, making the process of replicating a
governed environment across subscriptions more streamlined.
---
Questions on Implementing and Managing Storage
Question 6 (Multiple Choice)
What feature of an Azure Storage Account ensures that all data transfers
occur over a secure channel?
A) Blob Tiering
B) Secure Transfer Required
C) Geo-Redundancy
D) Storage Account Keys
Correct ANS:
B) Secure Transfer Required
Rationale:
Enabling "Secure Transfer Required" forces all access to the storage
account to use HTTPS, thereby ensuring that data in transit is encrypted
©2025
