View Full Microsoft AZ-104 Exam Dumps and Practice Test Dumps.

 

Question 101

You need to create a new Azure resource group by using Azure CLI. Which command should you use?

1. az resource create-group
2. az group create
3. az rg new
4. az resource-group create

Correct Answer: 2

Explanation

The az group create command is used with Azure CLI to create a new resource group. The command requires a resource group name and usually a location, such as az group create –name MyResourceGroup –location eastus. Resource groups provide a logical container for managing related Azure resources. The other commands are not valid Azure CLI commands for creating resource groups. Therefore, az group create is the correct command when you need to create a resource group through Azure CLI.

Question 102

You need to create an Azure resource group by using Azure PowerShell. Which command should you use?

1. Add-AzResourceGroup
2. Set-AzResourceGroup
3. Create-AzResourceGroup
4. New-AzResourceGroup

Correct Answer: 4

Explanation

New-AzResourceGroup is the Azure PowerShell cmdlet used to create a new resource group. It typically requires the resource group name and Azure region. For example, an administrator can use New-AzResourceGroup -Name MyResourceGroup -Location EastUS. Set-AzResourceGroup is used to modify an existing resource group, while the other listed commands are not valid cmdlets for creating one. Therefore, New-AzResourceGroup is the correct Azure PowerShell command for creating a resource group.

Question 103

You need to deploy multiple Azure resources repeatedly using a declarative configuration file. Which Azure service should you use?

1. Azure Advisor
2. Azure Service Health
3. Azure Resource Manager templates
4. Azure Monitor

Correct Answer: 3

Explanation

Azure Resource Manager templates, commonly called ARM templates, allow administrators to define Azure infrastructure declaratively in JSON files. The template describes the resources, configurations, dependencies, and properties required for deployment. This approach provides repeatable and consistent infrastructure deployments. Azure Advisor provides recommendations, Azure Monitor handles monitoring and telemetry, and Service Health provides information about Azure service issues. Therefore, ARM templates are the correct choice when multiple Azure resources need to be deployed repeatedly using a declarative configuration.

Question 104

You need to ensure that a virtual machine automatically shuts down every night to reduce costs. Which feature should you configure?

1. Azure Backup
2. Azure VM Auto-shutdown
3. Azure Resource Lock
4. Azure Advisor

Correct Answer: 2

Explanation

Azure VM Auto-shutdown allows administrators to configure a scheduled time for a virtual machine to shut down automatically. This is especially useful for development and test VMs that do not need to run continuously. Automatically stopping unused VMs can help reduce compute costs. Azure Backup protects data, Advisor provides recommendations, and Resource Locks protect resources from accidental changes or deletion. Therefore, VM Auto-shutdown is the appropriate feature when a virtual machine should automatically stop at a specific time each day.

Question 105

You need to store messages temporarily so that an application can process them asynchronously. Which Azure Storage service should you use?

1. Azure Queue Storage
2. Azure Files
3. Azure Blob Storage
4. Azure Table Storage

Correct Answer: 1

Explanation

Azure Queue Storage is designed for storing large numbers of messages that can be processed asynchronously. It allows application components to communicate without requiring them to operate at the same time. For example, a web application can place tasks in a queue while a background service processes them later. Blob Storage is intended for unstructured objects, Table Storage provides NoSQL key-value storage, and Azure Files provides shared file storage. Therefore, Azure Queue Storage is the correct option for asynchronous message processing.

Question 106

You need to store structured NoSQL data using partition keys and row keys. Which Azure service should you use?

1. Azure Queue Storage
2. Azure Files
3. Azure Managed Disks
4. Azure Table Storage

Correct Answer: 4

Explanation

Azure Table Storage provides a NoSQL key-value data store designed for structured, non-relational data. Each entity uses properties and is organized using partition keys and row keys. It is useful for applications that need large amounts of structured data without requiring a relational database schema. Queue Storage is designed for messages, Azure Files provides shared file storage, and Managed Disks provide persistent storage for virtual machines. Therefore, Azure Table Storage is the correct service for data organized with partition keys and row keys.

Question 107

You need to protect Azure Blob Storage data from accidental deletion for a specific retention period. Which feature should you enable?

1. Network Security Group
2. Blob soft delete
3. Azure Firewall
4. Azure DDoS Protection

Correct Answer: 2

Explanation

Blob soft delete allows deleted or overwritten blobs to remain recoverable for a configured retention period. This feature helps protect storage data from accidental deletion or unintended overwrites. During the retention period, administrators can restore the deleted data when necessary. Network Security Groups control network traffic, DDoS Protection helps defend against distributed denial-of-service attacks, and Azure Firewall provides network security. Therefore, Blob soft delete is the correct feature for protecting blobs against accidental deletion.

Question 108

You need persistent block-level storage for an Azure virtual machine. Which Azure service should you use?

1. Azure Queue Storage
2. Azure DNS
3. Azure Managed Disks
4. Azure Files

Correct Answer: 3

Explanation

Azure Managed Disks provide persistent block-level storage for Azure virtual machines. Azure manages the underlying storage account infrastructure, simplifying disk management and improving scalability and reliability. Managed Disks are available in several performance tiers, including Standard HDD, Standard SSD, and Premium SSD. Queue Storage is used for messages, Azure Files provides shared file storage, and Azure DNS provides name resolution. Therefore, Azure Managed Disks are the appropriate storage option when a VM requires persistent block-level storage.

Question 109

You need high-performance disk storage for a production virtual machine that has demanding I/O workloads. Which disk type should you choose?

1. Standard GRS Storage
2. Standard HDD
3. Archive Blob Storage
4. Premium SSD

Correct Answer: 4

Explanation

Premium SSD managed disks provide high-performance and low-latency storage for workloads that require demanding disk I/O. They are commonly used for production applications, databases, and other workloads where disk performance is important. Standard HDD disks are more economical but provide lower performance and are generally better suited to less demanding workloads. Archive Blob Storage is designed for rarely accessed object data, while GRS refers to storage redundancy. Therefore, Premium SSD is the best choice for a production VM requiring high disk performance.

Question 110

You need to allow a virtual machine to communicate with the internet using an assigned IPv4 address. Which Azure resource should you configure?

1. Network Security Group
2. Public IP address
3. Private Endpoint
4. Route Table

Correct Answer: 2

Explanation

An Azure Public IP address provides an internet-routable IP address that can be associated with supported Azure resources such as network interfaces, load balancers, and gateways. A VM can use a public IP when external connectivity is required, subject to network security rules. An NSG controls allowed traffic, while a route table determines traffic paths. A Private Endpoint provides private connectivity to supported Azure services. Therefore, a Public IP address is the appropriate resource when a VM needs direct internet-facing connectivity.

Question 111

You need to control how network traffic is routed between Azure subnets and virtual networks. Which Azure feature should you configure?

1. Azure Advisor
2. Route Table
3. Azure Backup
4. Network Security Group

Correct Answer: 2

Explanation

Azure Route Tables, also called user-defined routes, allow administrators to control how network traffic is routed within virtual networks. Custom routes can direct traffic to destinations such as virtual appliances, gateways, or other network paths. Network Security Groups control whether traffic is allowed or denied, but they do not determine the route traffic follows. Azure Advisor provides recommendations, while Azure Backup protects data. Therefore, a Route Table is the correct feature when custom network traffic routing is required.

Question 112

You need to resolve private domain names from resources inside an Azure virtual network. Which service should you use?

1. Azure Front Door
2. Azure Load Balancer
3. Azure Private DNS
4. Azure Traffic Manager

Correct Answer: 3

Explanation

Azure Private DNS provides name resolution for private domain names within Azure virtual networks. It allows applications and resources to resolve internal DNS records without exposing those records publicly. This is useful for private endpoints and internal applications that require private name resolution. Traffic Manager provides DNS-based global traffic distribution, Front Door provides global application delivery, and Load Balancer distributes network traffic. Therefore, Azure Private DNS is the correct service for resolving private domain names within a virtual network.

Question 113

You need centralized network security that can inspect and filter traffic between networks and provide application-level rules. Which Azure service should you use?

1. Azure Storage
2. Azure Advisor
3. Azure DNS
4. Azure Firewall

Correct Answer: 4

Explanation

Azure Firewall is a managed, cloud-based network security service that provides centralized traffic filtering and monitoring. It supports network and application-level rules and can control traffic between virtual networks, on-premises environments, and the internet. Azure DNS handles name resolution, Storage provides data storage, and Advisor provides recommendations. Network Security Groups are useful for subnet and network interface traffic control, but Azure Firewall provides broader centralized security capabilities. Therefore, Azure Firewall is the correct service for centralized network traffic inspection and filtering.

Question 114

You need to protect an Azure application from distributed denial-of-service attacks targeting its public IP resources. Which service should you use?

1. Azure Queue Storage
2. Azure DDoS Protection
3. Azure Bastion
4. Azure Table Storage

Correct Answer: 2

Explanation

Azure DDoS Protection helps protect Azure resources from distributed denial-of-service attacks. It provides enhanced protection for public IP resources and can help detect and mitigate attacks designed to overwhelm applications with excessive network traffic. Azure Queue Storage and Table Storage are data services, while Azure Bastion provides secure administrative access to virtual machines. Therefore, Azure DDoS Protection is the appropriate service when the primary requirement is protecting public-facing Azure resources from DDoS attacks.

Question 115

You need to view information about Azure service outages, planned maintenance, and health advisories that may affect your resources. Which service should you use?

1. Azure Policy
2. Azure Files
3. Azure Service Health
4. Azure Cost Management

Correct Answer: 3

Explanation

Azure Service Health provides personalized information about Azure service issues that may affect your resources. It includes information about service incidents, planned maintenance, health advisories, and other events. This allows administrators to understand whether an Azure platform issue may be affecting their workloads. Cost Management focuses on spending, Azure Policy handles governance, and Azure Files provides shared file storage. Therefore, Azure Service Health is the correct service for monitoring Azure service health events relevant to your environment.

Question 116

You need to distribute incoming application traffic across multiple virtual machines in the same Azure region. Which service should you use?

1. Azure Load Balancer
2. Azure Policy
3. Azure DNS
4. Azure Traffic Manager

Correct Answer: 1

Explanation

Azure Load Balancer distributes incoming network traffic across multiple backend resources such as virtual machines. It operates at the transport layer and can provide high availability by directing traffic only to healthy instances. Azure Traffic Manager uses DNS to distribute traffic between endpoints, often across regions, while Azure DNS provides name resolution. Azure Policy is a governance service. Therefore, Azure Load Balancer is the appropriate choice for distributing incoming network traffic across multiple VMs.

Question 117

You need to distribute user requests between application endpoints located in different Azure regions based on performance. Which service should you use?

1. Azure Queue Storage
2. Azure Traffic Manager
3. Azure Managed Disks
4. Azure Bastion

Correct Answer: 2

Explanation

Azure Traffic Manager is a DNS-based traffic distribution service that can direct users to different application endpoints according to routing methods such as performance, priority, weighted, or geographic routing. The performance routing method directs users toward an endpoint with lower network latency. This makes Traffic Manager useful for applications deployed across multiple Azure regions. Managed Disks provide VM storage, Bastion provides secure VM administration, and Queue Storage handles messages. Therefore, Azure Traffic Manager is the correct choice.

Question 118

You need to collect detailed logs from Azure resources and query them using a centralized workspace. Which Azure service should you use?

1. Azure DNS
2. Azure Resource Lock
3. Log Analytics workspace
4. Azure Load Balancer

Correct Answer: 3

Explanation

A Log Analytics workspace stores and organizes log data collected from Azure resources, applications, and other supported sources. Administrators can use queries to analyze the collected data and investigate performance, security, and operational issues. Log Analytics is closely integrated with Azure Monitor and provides a centralized location for log analysis. Azure DNS manages name resolution, Load Balancer distributes traffic, and Resource Locks protect resources from accidental deletion or modification. Therefore, a Log Analytics workspace is the correct choice for centralized log collection and querying.

Question 119

You need to allow a user to manage Azure resources but not assign permissions to other users. Which role should you assign at the resource group scope?

1. Owner
2. User Access Administrator
3. Reader
4. Contributor

Correct Answer: 4

Explanation

The Contributor role allows a user to create, modify, and delete Azure resources within the assigned scope. However, Contributor does not include permission to assign Azure RBAC roles to other users. This makes it suitable when someone needs to manage resources but should not manage access permissions. Reader only provides viewing capabilities, while Owner includes full resource management and role-assignment permissions. User Access Administrator focuses on managing access. Therefore, Contributor is the appropriate role for this requirement.

Question 120

You need to prevent users from deploying resources outside approved Azure regions. Which Azure service should you configure?

1. Azure Monitor
2. Azure Backup
3. Azure Policy
4. Azure Advisor

Correct Answer: 3

Explanation

Azure Policy can enforce organizational requirements such as restricting resource deployments to approved Azure regions. An administrator can create or assign a policy that denies deployments when the selected location is not included in the organization’s approved list. This provides centralized governance across subscriptions and resource groups. Azure Monitor is used for monitoring, Advisor provides recommendations, and Azure Backup protects data and workloads. Therefore, Azure Policy is the correct service for preventing users from deploying resources outside approved Azure regions.