{"id":11771,"date":"2026-09-14T12:02:39","date_gmt":"2026-09-14T12:02:39","guid":{"rendered":"https:\/\/www.examlabs.com\/certification\/?p=11771"},"modified":"2026-09-14T12:02:39","modified_gmt":"2026-09-14T12:02:39","slug":"microsoft-az-104-practice-test-questions-and-exam-dumps-part-2-q21-40","status":"publish","type":"post","link":"https:\/\/www.examlabs.com\/certification\/microsoft-az-104-practice-test-questions-and-exam-dumps-part-2-q21-40\/","title":{"rendered":"Microsoft AZ-104 Practice Test Questions and Exam Dumps Part 2 Q21-40"},"content":{"rendered":"

View Full\u00a0Microsoft AZ-104 Exam Dumps<\/a>\u00a0and Practice Test Dumps.<\/b><\/h2>\n

 <\/p>\n

Question 21<\/b><\/h3>\n

Which Azure service allows administrators to create and manage DNS zones for domain name resolution?<\/b><\/p>\n

    \n
  1. Azure DNS<\/span><\/li>\n
  2. Azure Monitor<\/span><\/li>\n
  3. Azure Bastion<\/span><\/li>\n
  4. Azure Policy<\/span><\/li>\n<\/ol>\n

    Correct Answer: 1<\/b><\/p>\n

    Explanation<\/b><\/p>\n

    Azure DNS is a hosting service for DNS domains that provides name resolution using Microsoft Azure infrastructure. Administrators can create DNS zones and records such as A, AAAA, CNAME, MX, and TXT records. Azure DNS can be used to manage DNS records for domains without maintaining dedicated DNS servers. Azure Monitor is used for monitoring, Azure Bastion provides secure VM access, and Azure Policy manages governance. Therefore, Azure DNS is the correct service for hosting and managing DNS zones in Azure.<\/span><\/p>\n

    Question 22<\/b><\/h3>\n

    Which Azure feature allows a virtual machine to remain available if a hardware failure occurs within a datacenter?<\/b><\/p>\n

      \n
    1. Availability Set<\/span><\/li>\n
    2. Resource Group<\/span><\/li>\n
    3. Management Group<\/span><\/li>\n
    4. Resource Lock<\/span><\/li>\n<\/ol>\n

      Correct Answer: 1<\/b><\/p>\n

      Explanation<\/b><\/p>\n

      An Availability Set helps protect virtual machines from localized hardware failures and planned maintenance events within an Azure datacenter. Virtual machines placed in an availability set are distributed across fault domains and update domains. Fault domains help separate VMs across different physical hardware, while update domains help control how maintenance is performed. Resource Groups organize resources, Management Groups organize subscriptions, and Resource Locks protect resources. Therefore, Availability Set is the correct choice for improving VM availability within a datacenter.<\/span><\/p>\n

      Question 23<\/b><\/h3>\n

      Which Azure feature provides physically separate locations within an Azure region for improved resiliency?<\/b><\/p>\n

        \n
      1. Resource Groups<\/span><\/li>\n
      2. Availability Zones<\/span><\/li>\n
      3. Management Groups<\/span><\/li>\n
      4. Subnets<\/span><\/li>\n<\/ol>\n

        Correct Answer: 2<\/b><\/p>\n

        Explanation<\/b><\/p>\n

        Availability Zones are physically separate locations within an Azure region. Each zone has independent power, cooling, and networking infrastructure, helping protect applications from datacenter-level failures. Administrators can deploy supported resources across multiple availability zones to improve resiliency and availability. Resource Groups organize resources, Management Groups organize subscriptions, and subnets divide virtual networks. Therefore, Availability Zones are the correct choice when an organization needs protection against failures affecting an individual datacenter within an Azure region.<\/span><\/p>\n

        Question 24<\/b><\/h3>\n

        Which Azure networking component divides an Azure Virtual Network into smaller network segments?<\/b><\/p>\n

          \n
        1. Network Security Group<\/span><\/li>\n
        2. Subnet<\/span><\/li>\n
        3. Load Balancer<\/span><\/li>\n
        4. Route Table<\/span><\/li>\n<\/ol>\n

          Correct Answer: 2<\/b><\/p>\n

          Explanation<\/b><\/p>\n

          A subnet divides an Azure Virtual Network into smaller logical network segments. Administrators can use multiple subnets to separate workloads and apply different networking rules to each segment. For example, web servers, application servers, and database servers can be placed into separate subnets. Network Security Groups control traffic, Load Balancer distributes network traffic, and Route Tables define routing behavior. Therefore, a subnet is the correct component for dividing an Azure Virtual Network into smaller network segments.<\/span><\/p>\n

          Question 25<\/b><\/h3>\n

          Which Azure networking feature controls inbound and outbound traffic to Azure resources using security rules?<\/b><\/p>\n

            \n
          1. Network Security Group<\/span><\/li>\n
          2. Azure DNS<\/span><\/li>\n
          3. Azure Advisor<\/span><\/li>\n
          4. Azure Backup<\/span><\/li>\n<\/ol>\n

            Correct Answer: 1<\/b><\/p>\n

            Explanation<\/b><\/p>\n

            A Network Security Group, or NSG, contains security rules that control inbound and outbound network traffic for Azure resources. Rules can allow or deny traffic based on parameters such as source, destination, port, and protocol. NSGs can be associated with subnets or network interfaces. Azure DNS handles name resolution, Azure Advisor provides recommendations, and Azure Backup protects data. Therefore, Network Security Group is the correct choice for controlling network traffic using security rules.<\/span><\/p>\n

            Question 26<\/b><\/h3>\n

            Which Azure service provides a dedicated private connection between an on-premises network and Azure through a connectivity provider?<\/b><\/p>\n

              \n
            1. Azure VPN Gateway<\/span><\/li>\n
            2. Azure ExpressRoute<\/span><\/li>\n
            3. Azure Load Balancer<\/span><\/li>\n
            4. Azure Traffic Manager<\/span><\/li>\n<\/ol>\n

              Correct Answer: 2<\/b><\/p>\n

              Explanation<\/b><\/p>\n

              Azure ExpressRoute provides a private connection between an organization’s on-premises network and Microsoft cloud services through an ExpressRoute connectivity provider. Traffic does not travel over the public internet, which can provide more predictable performance and enhanced privacy. Azure VPN Gateway uses encrypted connections over the internet or other supported paths, while Load Balancer distributes network traffic and Traffic Manager provides DNS-based traffic routing. Therefore, Azure ExpressRoute is the correct option for dedicated private connectivity between on-premises infrastructure and Azure.<\/span><\/p>\n

              Question 27<\/b><\/h3>\n

              Which Azure service creates encrypted connections between on-premises networks and Azure over the public internet?<\/b><\/p>\n

                \n
              1. Azure VPN Gateway<\/span><\/li>\n
              2. Azure Bastion<\/span><\/li>\n
              3. Azure DNS<\/span><\/li>\n
              4. Azure Front Door<\/span><\/li>\n<\/ol>\n

                Correct Answer: 1<\/b><\/p>\n

                Explanation<\/b><\/p>\n

                Azure VPN Gateway creates secure encrypted connections between Azure Virtual Networks and other networks, including on-premises environments. A site-to-site VPN can connect an organization’s network to Azure over the public internet while using encryption to protect the traffic. Azure Bastion is designed for secure administrative access to virtual machines, Azure DNS provides name resolution, and Azure Front Door manages global application traffic. Therefore, Azure VPN Gateway is the correct service for creating encrypted network connections between Azure and on-premises environments.<\/span><\/p>\n

                Question 28<\/b><\/h3>\n

                Which Azure service can monitor and diagnose network connectivity between Azure resources?<\/b><\/p>\n

                  \n
                1. Network Watcher<\/span><\/li>\n
                2. Azure Backup<\/span><\/li>\n
                3. Azure Policy<\/span><\/li>\n
                4. Azure Storage<\/span><\/li>\n<\/ol>\n

                  Correct Answer: 1<\/b><\/p>\n

                  Explanation<\/b><\/p>\n

                  Azure Network Watcher provides tools for monitoring, diagnosing, and troubleshooting network connectivity in Azure. It includes capabilities such as connection troubleshooting, IP flow verification, network topology visualization, and packet capture. These features help administrators identify connectivity problems and understand network behavior. Azure Backup focuses on data protection, Azure Policy handles governance, and Azure Storage provides storage services. Therefore, Network Watcher is the correct Azure service for diagnosing and monitoring network connectivity between Azure resources.<\/span><\/p>\n

                  Question 29<\/b><\/h3>\n

                  Which Azure storage redundancy option replicates data synchronously across three availability zones in the primary region?<\/b><\/p>\n

                    \n
                  1. Locally Redundant Storage<\/span><\/li>\n
                  2. Zone-Redundant Storage<\/span><\/li>\n
                  3. Geo-Redundant Storage<\/span><\/li>\n
                  4. Read-Access Geo-Redundant Storage<\/span><\/li>\n<\/ol>\n

                    Correct Answer: 2<\/b><\/p>\n

                    Explanation<\/b><\/p>\n

                    Zone-Redundant Storage, or ZRS, synchronously replicates data across multiple availability zones within the primary Azure region. This provides protection against failures affecting an individual availability zone while keeping data within the same region. Locally Redundant Storage maintains copies within a single datacenter, while Geo-Redundant Storage replicates data to a secondary region. Read-Access Geo-Redundant Storage additionally provides read access to the secondary region. Therefore, ZRS is the correct choice for synchronous replication across availability zones.<\/span><\/p>\n

                    Question 30<\/b><\/h3>\n

                    Which Azure storage redundancy option provides replication to a secondary geographic region?<\/b><\/p>\n

                      \n
                    1. LRS<\/span><\/li>\n
                    2. ZRS<\/span><\/li>\n
                    3. GRS<\/span><\/li>\n
                    4. Premium SSD<\/span><\/li>\n<\/ol>\n

                      Correct Answer: 3<\/b><\/p>\n

                      Explanation<\/b><\/p>\n

                      Geo-Redundant Storage, or GRS, replicates Azure Storage data to a secondary geographic region that is hundreds of miles away from the primary region. This helps protect data against major regional disasters or outages. Locally Redundant Storage keeps copies within a single datacenter, while Zone-Redundant Storage distributes copies across availability zones in the primary region. Premium SSD is a storage performance option rather than a geographic redundancy model. Therefore, GRS is the correct option for replication to a secondary region.<\/span><\/p>\n

                      Question 31<\/b><\/h3>\n

                      Which Azure storage access tier is generally appropriate for data that is accessed frequently?<\/b><\/p>\n

                        \n
                      1. Archive<\/span><\/li>\n
                      2. Cool<\/span><\/li>\n
                      3. Hot<\/span><\/li>\n
                      4. Offline<\/span><\/li>\n<\/ol>\n

                        Correct Answer: 3<\/b><\/p>\n

                        Explanation<\/b><\/p>\n

                        The Hot access tier is designed for data that is accessed frequently. It generally provides lower access costs compared with less frequently accessed tiers, although storage costs can be higher. The Cool tier is intended for data that is accessed less frequently, while the Archive tier is designed for data that is rarely accessed and requires longer retrieval times. Therefore, when an organization expects frequent access to stored data, the Hot access tier is generally the most appropriate choice.<\/span><\/p>\n

                        Question 32<\/b><\/h3>\n

                        Which Azure storage access tier is intended for data that is rarely accessed and can tolerate longer retrieval times?<\/b><\/p>\n

                          \n
                        1. Hot<\/span><\/li>\n
                        2. Cool<\/span><\/li>\n
                        3. Archive<\/span><\/li>\n
                        4. Premium<\/span><\/li>\n<\/ol>\n

                          Correct Answer: 3<\/b><\/p>\n

                          Explanation<\/b><\/p>\n

                          The Archive access tier is designed for long-term storage of data that is rarely accessed. It offers lower storage costs but has higher data retrieval costs and requires rehydration before archived data can be accessed normally. This makes it suitable for records, backups, and other information that must be retained but is unlikely to be accessed frequently. The Hot tier is intended for frequent access, while Cool is suitable for infrequent access. Therefore, Archive is the correct choice for rarely accessed long-term data.<\/span><\/p>\n

                          Question 33<\/b><\/h3>\n

                          Which Azure service provides a managed relational database based on Microsoft SQL Server?<\/b><\/p>\n

                            \n
                          1. Azure Cosmos DB<\/span><\/li>\n
                          2. Azure SQL Database<\/span><\/li>\n
                          3. Azure Blob Storage<\/span><\/li>\n
                          4. Azure Table Storage<\/span><\/li>\n<\/ol>\n

                            Correct Answer: 2<\/b><\/p>\n

                            Explanation<\/b><\/p>\n

                            Azure SQL Database is a fully managed relational database service based on the Microsoft SQL Server database engine. It provides features such as automated backups, high availability, scaling options, and built-in security capabilities. Administrators do not need to manage the underlying operating system or database server infrastructure in the same way as with a traditional virtual machine. Azure Cosmos DB is a globally distributed NoSQL database, while Blob and Table Storage provide different storage models. Therefore, Azure SQL Database is the correct answer.<\/span><\/p>\n

                            Question 34<\/b><\/h3>\n

                            Which Azure service is a globally distributed NoSQL database designed for low-latency access?<\/b><\/p>\n

                              \n
                            1. Azure SQL Database<\/span><\/li>\n
                            2. Azure Cosmos DB<\/span><\/li>\n
                            3. Azure Files<\/span><\/li>\n
                            4. Azure Queue Storage<\/span><\/li>\n<\/ol>\n

                              Correct Answer: 2<\/b><\/p>\n

                              Explanation<\/b><\/p>\n

                              Azure Cosmos DB is a fully managed NoSQL database service designed for globally distributed applications that require low-latency access and high availability. It supports multiple data models and provides capabilities for distributing data across Azure regions. Azure SQL Database is a relational database service, Azure Files provides managed file shares, and Azure Queue Storage is designed for asynchronous messaging. Therefore, Azure Cosmos DB is the correct choice for applications that require a globally distributed NoSQL database with low-latency access.<\/span><\/p>\n

                              Question 35<\/b><\/h3>\n

                              Which Azure service allows administrators to deploy resources using declarative infrastructure templates?<\/b><\/p>\n

                                \n
                              1. Azure Resource Manager<\/span><\/li>\n
                              2. Azure Bastion<\/span><\/li>\n
                              3. Azure DNS<\/span><\/li>\n
                              4. Azure Monitor<\/span><\/li>\n<\/ol>\n

                                Correct Answer: 1<\/b><\/p>\n

                                Explanation<\/b><\/p>\n

                                Azure Resource Manager supports declarative infrastructure deployment through technologies such as ARM templates and Bicep. Administrators can define the desired configuration of Azure resources in a template and deploy that configuration consistently. This approach helps automate deployments and reduces configuration errors. Azure Bastion provides secure VM access, Azure DNS handles DNS services, and Azure Monitor provides monitoring capabilities. Therefore, Azure Resource Manager is the correct choice for deploying Azure resources through declarative infrastructure templates.<\/span><\/p>\n

                                Question 36<\/b><\/h3>\n

                                Which Azure service helps estimate the cost of Azure resources before deployment?<\/b><\/p>\n

                                  \n
                                1. Azure Pricing Calculator<\/span><\/li>\n
                                2. Azure Monitor<\/span><\/li>\n
                                3. Azure Advisor<\/span><\/li>\n
                                4. Azure Policy<\/span><\/li>\n<\/ol>\n

                                  Correct Answer: 1<\/b><\/p>\n

                                  Explanation<\/b><\/p>\n

                                  The Azure Pricing Calculator helps organizations estimate the expected cost of Azure services before deploying resources. Users can select services, configurations, quantities, and usage assumptions to calculate an estimated monthly cost. This is useful when planning cloud deployments and comparing different configurations. Azure Monitor focuses on monitoring, Azure Advisor provides optimization recommendations, and Azure Policy manages governance. Therefore, Azure Pricing Calculator is the correct tool for estimating Azure resource costs before deployment.<\/span><\/p>\n

                                  Question 37<\/b><\/h3>\n

                                  Which Azure service helps organizations analyze and manage their Azure spending?<\/b><\/p>\n

                                    \n
                                  1. Microsoft Cost Management<\/span><\/li>\n
                                  2. Azure DNS<\/span><\/li>\n
                                  3. Azure Bastion<\/span><\/li>\n
                                  4. Azure Files<\/span><\/li>\n<\/ol>\n

                                    Correct Answer: 1<\/b><\/p>\n

                                    Explanation<\/b><\/p>\n

                                    Microsoft Cost Management provides tools for analyzing, monitoring, and managing cloud spending. Administrators can review costs, create budgets, analyze spending patterns, and identify areas where expenses can be optimized. This helps organizations maintain financial control over their Azure environments. Azure DNS provides DNS services, Azure Bastion provides secure VM connectivity, and Azure Files provides managed file shares. Therefore, Microsoft Cost Management is the correct choice for monitoring and managing Azure spending.<\/span><\/p>\n

                                    Question 38<\/b><\/h3>\n

                                    Which Azure feature can notify administrators when Azure spending reaches a predefined budget threshold?<\/b><\/p>\n

                                      \n
                                    1. Azure Monitor<\/span><\/li>\n
                                    2. Cost Management Budgets<\/span><\/li>\n
                                    3. Azure Bastion<\/span><\/li>\n
                                    4. Network Watcher<\/span><\/li>\n<\/ol>\n

                                      Correct Answer: 2<\/b><\/p>\n

                                      Explanation<\/b><\/p>\n

                                      Cost Management Budgets allow organizations to define spending limits and receive notifications when actual or forecasted costs reach specified thresholds. Administrators can configure budget amounts and alert percentages to help monitor spending before costs exceed planned limits. Azure Monitor is designed for resource and application monitoring, Azure Bastion provides secure VM access, and Network Watcher handles network diagnostics. Therefore, Cost Management Budgets are the correct choice for receiving notifications when Azure spending approaches a predefined limit.<\/span><\/p>\n

                                      Question 39<\/b><\/h3>\n

                                      Which Azure service provides recommendations to help identify underutilized resources and reduce unnecessary costs?<\/b><\/p>\n

                                        \n
                                      1. Azure Advisor<\/span><\/li>\n
                                      2. Azure DNS<\/span><\/li>\n
                                      3. Azure Backup<\/span><\/li>\n
                                      4. Azure Files<\/span><\/li>\n<\/ol>\n

                                        Correct Answer: 1<\/b><\/p>\n

                                        Explanation<\/b><\/p>\n

                                        Azure Advisor provides personalized recommendations that can help organizations optimize their Azure environment. Its cost recommendations can identify resources that may be underutilized or oversized and suggest ways to reduce unnecessary spending. Advisor also provides recommendations related to security, reliability, performance, and operational excellence. Azure DNS manages DNS records, Azure Backup protects workloads, and Azure Files provides cloud file shares. Therefore, Azure Advisor is the correct service for identifying potential cost-saving opportunities and improving resource utilization.<\/span><\/p>\n

                                        Question 40<\/b><\/h3>\n

                                        Which Azure service provides a way to run commands and scripts directly from the Azure portal for managing resources?<\/b><\/p>\n

                                          \n
                                        1. Azure Cloud Shell<\/span><\/li>\n
                                        2. Azure Load Balancer<\/span><\/li>\n
                                        3. Azure Storage<\/span><\/li>\n
                                        4. Azure Traffic Manager<\/span><\/li>\n<\/ol>\n

                                          Correct Answer: 1<\/b><\/p>\n

                                          Explanation<\/b><\/p>\n

                                          Azure Cloud Shell provides an interactive command-line environment accessible through the Azure portal. It supports both Azure PowerShell and Azure CLI, allowing administrators to manage Azure resources without installing command-line tools locally. Cloud Shell is useful for running commands, scripts, and administrative tasks from a browser. Azure Load Balancer distributes network traffic, Azure Storage provides storage services, and Azure Traffic Manager routes traffic using DNS. Therefore, Azure Cloud Shell is the correct choice for running management commands and scripts directly from the Azure portal.<\/span><\/p>\n

                                           <\/p>\n","protected":false},"excerpt":{"rendered":"

                                          View Full\u00a0Microsoft AZ-104 Exam Dumps\u00a0and Practice Test Dumps.   Question 21 Which Azure service allows administrators to create and manage DNS zones for domain name resolution? Azure DNS Azure Monitor Azure Bastion Azure Policy Correct Answer: 1 Explanation Azure DNS is a hosting service for DNS domains that provides name resolution using Microsoft Azure infrastructure. […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1648,1647],"tags":[],"_links":{"self":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/11771"}],"collection":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/comments?post=11771"}],"version-history":[{"count":1,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/11771\/revisions"}],"predecessor-version":[{"id":11772,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/11771\/revisions\/11772"}],"wp:attachment":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/media?parent=11771"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/categories?post=11771"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/tags?post=11771"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}