az 104 practice test Practice Exam: Test Your Knowledge 2025

Your organization needs to ensure that users can reset their own passwords without contacting the help desk. The solution must minimize administrative overhead and costs. What should you implement?

You are configuring role-based access control (RBAC) for your Azure subscription. A developer needs permission to create and manage virtual machines but should not be able to grant access to other users. Which built-in role should you assign?

Your company has multiple Azure subscriptions across different departments. You need to apply consistent tagging policies and ensure compliance across all subscriptions. What should you implement?

You need to delegate the ability to manage resource groups and resources within a specific resource group to a team, but they should not be able to modify network security groups (NSGs). The solution must follow the principle of least privilege. What should you do?

You need to configure Azure Storage to automatically move blobs that have not been modified in 90 days to the Cool access tier, and delete blobs after 365 days. What should you implement?

Your application requires shared file storage that can be accessed simultaneously by multiple Azure VMs running Windows Server. The solution must support SMB protocol. Which Azure storage solution should you use?

You are configuring an Azure Storage account that will store sensitive financial data. You need to ensure that data is encrypted with customer-managed keys stored in Azure Key Vault, and the storage account should deny access from all public networks except specific IP addresses. What should you configure?

You need to deploy a virtual machine in Azure. The VM must automatically shut down every night at 10 PM to save costs and start at 7 AM on weekdays. What is the most efficient solution?

Your company runs a web application on Azure VMs behind an Azure Load Balancer. Users report intermittent connection timeouts. You need to diagnose which backend VM instances are failing health checks. What should you review?

You are deploying multiple Azure VMs that must have identical configurations including installed software, settings, and security updates. The solution must minimize deployment time and ensure consistency. What should you use?

Your organization uses Azure Virtual Machine Scale Sets for a web application. During peak hours, you need the scale set to automatically add instances when average CPU usage exceeds 75% across all instances, and scale in when CPU usage drops below 25%. The scaling should be gradual and prevent rapid fluctuations. What should you configure?

You need to connect two Azure virtual networks located in different regions so that resources in each VNet can communicate privately. What should you implement?

Your company has an Azure virtual network with multiple subnets. You need to ensure that VMs in the database subnet can only receive traffic from VMs in the application subnet on port 1433, and all other inbound traffic should be denied. What should you configure?

You have an Azure virtual network with on-premises connectivity via ExpressRoute. You need to force all internet-bound traffic from Azure VMs to route through your on-premises firewall for inspection before reaching the internet. What should you configure?

You need to monitor the performance of Azure VMs and receive alerts when available memory drops below 10%. The solution must collect and analyze performance metrics. What should you configure?

Your organization needs to be notified when any Azure resource is deleted or when configuration changes are made to network security groups. What should you implement?

You manage an Azure subscription containing 50 resource groups across multiple regions. You need to prevent anyone from accidentally deleting a specific resource group containing production databases. However, authorized users should still be able to modify and add resources within the resource group. What should you apply?

You are implementing backup for Azure VMs. The backup policy requires daily backups with retention of 30 daily recovery points, 4 weekly recovery points, and 12 monthly recovery points. Where should you configure this policy?

You need to provide secure access to files in an Azure Storage account to an external partner for 30 days. The partner should have read-only access to a specific container without requiring an Azure account. The solution must automatically expire after 30 days. What should you create?

Your company has deployed a multi-tier application across multiple Azure VMs with a web tier, application tier, and database tier. You need to ensure that if the primary region fails, the application can failover to a secondary region with minimal data loss and downtime. The solution must be cost-effective and automated. What should you implement?