ESTUDY
AZ-104 QUESTIONS WITH 100%
CORRECT ANSWERS
QUESTION 1
You have an Azure subscription called Subscription1 and a Linux virtual machine called VM1
deployed to it. You need to monitor VM1’s metrics and logs. Which tool should you use?
A. Azure HDInsight
B. Linux Diagnostic Extension (LAD) 3.0
C. AzurePerformanceDiagnostics extension
D. Azure Analysis Services
✔ Answer: B
QUESTION 2
You’re planning to deploy three Azure virtual machines named VM1, VM2, and VM3 to host a web
app. You need to ensure at least two virtual machines remain available if an Azure datacenter goes
offline. How should you set up these virtual machines?
A. All in one Availability Zone
B. All in one Availability Set
C. Each in a separate Availability Zone
D. Each in a separate Availability Set
✔ Answer: B
QUESTION 3
You have a Windows Server 2019 virtual machine named VM1 saved as a template called Template1
in the Azure Resource Manager library. When you deploy a new VM named VM2 from Template1,
which option can you configure during the setup?
A. Operating System
B. Administrator Username
C. Virtual Machine Size
D. Resource Group
✔ Answer: B
,ESTUDY
QUESTION 4
VM1 is running a financial app, App1, which uses high CPU at month-end. To boost VM1’s processor
performance monthly, what should you include in a scheduled runbook?
A. Add the Azure Performance Diagnostics agent to VM1
B. Modify VM1's size property
C. Add VM1 to a scale set
D. Increase the vCPU quota
E. Add a Desired State Configuration (DSC) extension to VM1
✔ Answer: E
QUESTION 5
You need to automatically block TCP port 8080 between virtual networks when a Network Security
Group (NSG) is created. Will configuring a custom policy and assigning it to the subscription meet
this requirement?
A. Yes
B. No
✔ Answer: A
QUESTION 6
In Azure, you need to check the average round-trip time (RTT) for packets from VM1 to VM2. Which
Azure Network Watcher feature should you use?
A. IP Flow Verify
B. Connection Troubleshoot
C. Connection Monitor
D. NSG Flow Logs
✔ Answer: C
QUESTION 7
You plan to back up virtual machines nightly at 11:00 PM using Azure Backup. Which of the
following VMs can be backed up?
VM Name OS Auto-Shutdown Time
VM1 Windows Server 2012 R2 Off
,ESTUDY
VM Name OS Auto-Shutdown Time
VM2 Windows Server 2016 19:00
VM3 Ubuntu Server 18.04 LTS Off
VM4 Windows 10 19:00
A. VM1 and VM3 only
B. All VMs: VM1, VM2, VM3, and VM4
C. VM1 and VM2 only
D. VM1 only
✔ Answer: B
QUESTION 8
You have a Recovery Services vault protecting VM1 and VM2. You need to add VM3 and VM4 to this
protection. What should you do first?
A. Create a new Recovery Services vault
B. Create a storage account
C. Configure the extensions for VM3 and VM4
D. Create a new backup policy
✔ Answer: A
QUESTION 9
User1 created a new Azure AD tenant, external.contoso.onmicrosoft.com. Can User2 create user
accounts in this new tenant?
A. Yes
B. No
✔ Answer: A
QUESTION 10
Given the same scenario in Question 9, will instructing User4 to create the user accounts meet the
goal?
A. Yes
B. No
✔ Answer: B
, ESTUDY
QUESTION 11
Will instructing User3 to create user accounts in external.contoso.onmicrosoft.com meet the goal?
A. Yes
B. No
✔ Answer: B
QUESTION 12
An administrator is unable to grant users in contoso.com access to an Azure Kubernetes Service
(AKS) cluster named AKS1. What should you do first?
A. Modify Organization relationships settings in contoso.com
B. Create an OAuth 2.0 authorization endpoint in contoso.com
C. Recreate AKS1
D. Create a namespace in AKS1
✔ Answer: B
QUESTION 13
You need to create groups for three users to access a temporary SharePoint library and ensure the
groups are deleted after 180 days. Which two group types should you create? (Select two)
A. Office 365 group with Assigned membership
B. Security group with Assigned membership
C. Office 365 group with Dynamic User membership
D. Security group with Dynamic User membership
E. Security group with Dynamic Device membership
✔ Answer: A, C
QUESTION 14
Given the Azure policy below, what is its effect?
A. No Azure SQL servers can be created in Subscription 1.
B. Azure SQL servers can only be created in ContosoRG1.
C. Azure SQL servers cannot be created in ContosoRG1 only.
D. Azure SQL servers can be created in any resource group within Subscription 1.
✔ Answer: B
AZ-104 QUESTIONS WITH 100%
CORRECT ANSWERS
QUESTION 1
You have an Azure subscription called Subscription1 and a Linux virtual machine called VM1
deployed to it. You need to monitor VM1’s metrics and logs. Which tool should you use?
A. Azure HDInsight
B. Linux Diagnostic Extension (LAD) 3.0
C. AzurePerformanceDiagnostics extension
D. Azure Analysis Services
✔ Answer: B
QUESTION 2
You’re planning to deploy three Azure virtual machines named VM1, VM2, and VM3 to host a web
app. You need to ensure at least two virtual machines remain available if an Azure datacenter goes
offline. How should you set up these virtual machines?
A. All in one Availability Zone
B. All in one Availability Set
C. Each in a separate Availability Zone
D. Each in a separate Availability Set
✔ Answer: B
QUESTION 3
You have a Windows Server 2019 virtual machine named VM1 saved as a template called Template1
in the Azure Resource Manager library. When you deploy a new VM named VM2 from Template1,
which option can you configure during the setup?
A. Operating System
B. Administrator Username
C. Virtual Machine Size
D. Resource Group
✔ Answer: B
,ESTUDY
QUESTION 4
VM1 is running a financial app, App1, which uses high CPU at month-end. To boost VM1’s processor
performance monthly, what should you include in a scheduled runbook?
A. Add the Azure Performance Diagnostics agent to VM1
B. Modify VM1's size property
C. Add VM1 to a scale set
D. Increase the vCPU quota
E. Add a Desired State Configuration (DSC) extension to VM1
✔ Answer: E
QUESTION 5
You need to automatically block TCP port 8080 between virtual networks when a Network Security
Group (NSG) is created. Will configuring a custom policy and assigning it to the subscription meet
this requirement?
A. Yes
B. No
✔ Answer: A
QUESTION 6
In Azure, you need to check the average round-trip time (RTT) for packets from VM1 to VM2. Which
Azure Network Watcher feature should you use?
A. IP Flow Verify
B. Connection Troubleshoot
C. Connection Monitor
D. NSG Flow Logs
✔ Answer: C
QUESTION 7
You plan to back up virtual machines nightly at 11:00 PM using Azure Backup. Which of the
following VMs can be backed up?
VM Name OS Auto-Shutdown Time
VM1 Windows Server 2012 R2 Off
,ESTUDY
VM Name OS Auto-Shutdown Time
VM2 Windows Server 2016 19:00
VM3 Ubuntu Server 18.04 LTS Off
VM4 Windows 10 19:00
A. VM1 and VM3 only
B. All VMs: VM1, VM2, VM3, and VM4
C. VM1 and VM2 only
D. VM1 only
✔ Answer: B
QUESTION 8
You have a Recovery Services vault protecting VM1 and VM2. You need to add VM3 and VM4 to this
protection. What should you do first?
A. Create a new Recovery Services vault
B. Create a storage account
C. Configure the extensions for VM3 and VM4
D. Create a new backup policy
✔ Answer: A
QUESTION 9
User1 created a new Azure AD tenant, external.contoso.onmicrosoft.com. Can User2 create user
accounts in this new tenant?
A. Yes
B. No
✔ Answer: A
QUESTION 10
Given the same scenario in Question 9, will instructing User4 to create the user accounts meet the
goal?
A. Yes
B. No
✔ Answer: B
, ESTUDY
QUESTION 11
Will instructing User3 to create user accounts in external.contoso.onmicrosoft.com meet the goal?
A. Yes
B. No
✔ Answer: B
QUESTION 12
An administrator is unable to grant users in contoso.com access to an Azure Kubernetes Service
(AKS) cluster named AKS1. What should you do first?
A. Modify Organization relationships settings in contoso.com
B. Create an OAuth 2.0 authorization endpoint in contoso.com
C. Recreate AKS1
D. Create a namespace in AKS1
✔ Answer: B
QUESTION 13
You need to create groups for three users to access a temporary SharePoint library and ensure the
groups are deleted after 180 days. Which two group types should you create? (Select two)
A. Office 365 group with Assigned membership
B. Security group with Assigned membership
C. Office 365 group with Dynamic User membership
D. Security group with Dynamic User membership
E. Security group with Dynamic Device membership
✔ Answer: A, C
QUESTION 14
Given the Azure policy below, what is its effect?
A. No Azure SQL servers can be created in Subscription 1.
B. Azure SQL servers can only be created in ContosoRG1.
C. Azure SQL servers cannot be created in ContosoRG1 only.
D. Azure SQL servers can be created in any resource group within Subscription 1.
✔ Answer: B
