AZ-104 RENEWAL EXAM 2025:
COMPREHENSIVE QUESTIONS, VERIFIED
SOLUTIONS & DETAILED STUDY GUIDE
SECTION 1: MANAGE AZURE IDENTITIES AND GOVERNANCE (20-25%)
1. You have an Azure subscription named Subscription1. You deploy a Linux virtual
machine named VM1 to Subscription1. You need to monitor the metrics and the logs of
VM1. What should you use?
A. Azure HDInsight
B. Linux Diagnostic Extension (LAD) 3.0
C. the AzurePerformanceDiagnostics extension
D. Azure Analysis Services
Answer: B
2. You have an Azure Active Directory (Azure AD) tenant that contains 5,000 user accounts.
You create a new user account named AdminUser1. You need to assign the User
administrator administrative role to AdminUser1. What should you do from the user
account properties?
A. From the Licenses blade, assign a new license
,B. From the Directory role blade, modify the directory role
C. From the Groups blade, invite the user account to a new group
D. From the Authentication methods blade, configure multi-factor authentication
Answer: B
3. You have an Azure subscription that contains the following users in an Azure Active
Directory tenant named contoso.onmicrosoft.com:
Name Role Scope
User1 Global Administrator Azure Active Directory
User2 Global Administrator Azure Active Directory
User3 User Administrator Azure Active Directory
User4 Owner Azure Subscription
User1 creates a new Azure Active Directory tenant named
external.contoso.onmicrosoft.com. You need to create new user accounts in
external.contoso.onmicrosoft.com.
Solution: You instruct User2 to create the user accounts. Does this meet the goal?
A. Yes
B. No
Answer: B
4. You have an Azure subscription that contains the following users in an Azure Active
Directory tenant named contoso.onmicrosoft.com:
,Name Role Scope
User1 Global Administrator Azure Active Directory
User2 Global Administrator Azure Active Directory
User3 User Administrator Azure Active Directory
User4 Owner Azure Subscription
User1 creates a new Azure Active Directory tenant named
external.contoso.onmicrosoft.com. You need to create new user accounts in
external.contoso.onmicrosoft.com.
Solution: You instruct User3 to create the user accounts. Does this meet the goal?
A. Yes
B. No
Answer: B
5. You have an Azure subscription that contains the following users in an Azure Active
Directory tenant named contoso.onmicrosoft.com:
Name Role Scope
User1 Global Administrator Azure Active Directory
User2 Global Administrator Azure Active Directory
User3 User Administrator Azure Active Directory
User4 Owner Azure Subscription
, User1 creates a new Azure Active Directory tenant named
external.contoso.onmicrosoft.com. You need to create new user accounts in
external.contoso.onmicrosoft.com.
Solution: You instruct User4 to create the user accounts. Does this meet the goal?
A. Yes
B. No
Answer: B
6. You have a Microsoft 365 tenant and an Azure Active Directory (Azure AD) tenant named
contoso.com. You plan to grant three users named User1, User2, and User3 access to a
temporary Microsoft SharePoint document library named Library1. You need to create
groups for the users. The solution must ensure that the groups are deleted after 180 days.
Which two groups should you create? Each correct answer presents a complete solution.
A. an Office 365 group that uses the Assigned membership type
B. a Security group that uses the Assigned membership type
C. an Office 365 group that uses the Dynamic User membership type
D. a Security group that uses the Dynamic User membership type
E. a Security group that uses the Dynamic Device membership type
Answer: A, C
7. What major directory roles are available in Azure AD? (Choose 3 answers)
A. User
COMPREHENSIVE QUESTIONS, VERIFIED
SOLUTIONS & DETAILED STUDY GUIDE
SECTION 1: MANAGE AZURE IDENTITIES AND GOVERNANCE (20-25%)
1. You have an Azure subscription named Subscription1. You deploy a Linux virtual
machine named VM1 to Subscription1. You need to monitor the metrics and the logs of
VM1. What should you use?
A. Azure HDInsight
B. Linux Diagnostic Extension (LAD) 3.0
C. the AzurePerformanceDiagnostics extension
D. Azure Analysis Services
Answer: B
2. You have an Azure Active Directory (Azure AD) tenant that contains 5,000 user accounts.
You create a new user account named AdminUser1. You need to assign the User
administrator administrative role to AdminUser1. What should you do from the user
account properties?
A. From the Licenses blade, assign a new license
,B. From the Directory role blade, modify the directory role
C. From the Groups blade, invite the user account to a new group
D. From the Authentication methods blade, configure multi-factor authentication
Answer: B
3. You have an Azure subscription that contains the following users in an Azure Active
Directory tenant named contoso.onmicrosoft.com:
Name Role Scope
User1 Global Administrator Azure Active Directory
User2 Global Administrator Azure Active Directory
User3 User Administrator Azure Active Directory
User4 Owner Azure Subscription
User1 creates a new Azure Active Directory tenant named
external.contoso.onmicrosoft.com. You need to create new user accounts in
external.contoso.onmicrosoft.com.
Solution: You instruct User2 to create the user accounts. Does this meet the goal?
A. Yes
B. No
Answer: B
4. You have an Azure subscription that contains the following users in an Azure Active
Directory tenant named contoso.onmicrosoft.com:
,Name Role Scope
User1 Global Administrator Azure Active Directory
User2 Global Administrator Azure Active Directory
User3 User Administrator Azure Active Directory
User4 Owner Azure Subscription
User1 creates a new Azure Active Directory tenant named
external.contoso.onmicrosoft.com. You need to create new user accounts in
external.contoso.onmicrosoft.com.
Solution: You instruct User3 to create the user accounts. Does this meet the goal?
A. Yes
B. No
Answer: B
5. You have an Azure subscription that contains the following users in an Azure Active
Directory tenant named contoso.onmicrosoft.com:
Name Role Scope
User1 Global Administrator Azure Active Directory
User2 Global Administrator Azure Active Directory
User3 User Administrator Azure Active Directory
User4 Owner Azure Subscription
, User1 creates a new Azure Active Directory tenant named
external.contoso.onmicrosoft.com. You need to create new user accounts in
external.contoso.onmicrosoft.com.
Solution: You instruct User4 to create the user accounts. Does this meet the goal?
A. Yes
B. No
Answer: B
6. You have a Microsoft 365 tenant and an Azure Active Directory (Azure AD) tenant named
contoso.com. You plan to grant three users named User1, User2, and User3 access to a
temporary Microsoft SharePoint document library named Library1. You need to create
groups for the users. The solution must ensure that the groups are deleted after 180 days.
Which two groups should you create? Each correct answer presents a complete solution.
A. an Office 365 group that uses the Assigned membership type
B. a Security group that uses the Assigned membership type
C. an Office 365 group that uses the Dynamic User membership type
D. a Security group that uses the Dynamic User membership type
E. a Security group that uses the Dynamic Device membership type
Answer: A, C
7. What major directory roles are available in Azure AD? (Choose 3 answers)
A. User
