{"id":11790,"date":"2026-09-14T12:09:22","date_gmt":"2026-09-14T12:09:22","guid":{"rendered":"https:\/\/www.examlabs.com\/certification\/?p=11790"},"modified":"2026-09-14T12:09:22","modified_gmt":"2026-09-14T12:09:22","slug":"microsoft-az-104-practice-test-questions-and-exam-dumps-part-10-q181-200","status":"publish","type":"post","link":"https:\/\/www.examlabs.com\/certification\/microsoft-az-104-practice-test-questions-and-exam-dumps-part-10-q181-200\/","title":{"rendered":"Microsoft AZ-104 Practice Test Questions and Exam Dumps Part 10 Q181-200"},"content":{"rendered":"

View Full\u00a0Microsoft AZ-104 Exam Dumps<\/a>\u00a0and Practice Test Dumps.<\/b><\/h2>\n

 <\/p>\n

Question 181<\/b><\/h3>\n

You need to automatically deploy a configuration to resources whenever they are created if the configuration is missing. Which Azure Policy effect should you use?<\/b><\/p>\n

    \n
  1. Audit<\/span><\/li>\n
  2. Deny<\/span><\/li>\n
  3. DeployIfNotExists<\/span><\/li>\n
  4. Disabled<\/span><\/li>\n<\/ol>\n

    Correct Answer: 3<\/b><\/p>\n

    Explanation<\/b><\/p>\n

    The DeployIfNotExists effect can deploy related resources or configurations when a resource does not meet a defined condition. It is useful for enforcing configurations automatically after a resource is created or updated. Audit only reports noncompliance, while Deny prevents a noncompliant deployment from occurring. Disabled turns the policy off. Therefore, DeployIfNotExists is the appropriate policy effect when Azure should automatically deploy a required configuration if it does not already exist.<\/span><\/p>\n

    Question 182<\/b><\/h3>\n

    You need to automatically add a required property to Azure resource deployments when it is missing. Which Azure Policy effect should you consider?<\/b><\/p>\n

      \n
    1. Modify<\/span><\/li>\n
    2. Audit<\/span><\/li>\n
    3. Deny<\/span><\/li>\n
    4. Disabled<\/span><\/li>\n<\/ol>\n

      Correct Answer: 1<\/b><\/p>\n

      Explanation<\/b><\/p>\n

      The Modify effect allows Azure Policy to modify supported resource properties during resource creation or update. It can be used for governance requirements such as adding or changing tags and other supported properties. Audit only reports compliance status, Deny blocks noncompliant requests, and Disabled prevents the policy from being evaluated. Therefore, Modify is the appropriate policy effect when a required resource property needs to be automatically added or changed.<\/span><\/p>\n

      Question 183<\/b><\/h3>\n

      You need to organize resources by project, department, or environment and use the information for cost reporting. Which Azure feature should you use?<\/b><\/p>\n

        \n
      1. Tags<\/span><\/li>\n
      2. Availability Zones<\/span><\/li>\n
      3. Network Interfaces<\/span><\/li>\n
      4. Private Endpoints<\/span><\/li>\n<\/ol>\n

        Correct Answer: 1<\/b><\/p>\n

        Explanation<\/b><\/p>\n

        Azure tags are name-value pairs that can be assigned to resources to organize and categorize them. Common tagging scenarios include identifying projects, departments, environments, owners, or cost centers. Tags can also be used to filter and group information when analyzing Azure costs. Availability Zones provide physical separation, Network Interfaces connect resources to networks, and Private Endpoints provide private connectivity. Therefore, tags are the correct feature for organizing resources and supporting cost-management analysis.<\/span><\/p>\n

        Question 184<\/b><\/h3>\n

        You need to identify which Azure resources are associated with a specific department using resource metadata. Which feature should you query?<\/b><\/p>\n

          \n
        1. Tags<\/span><\/li>\n
        2. Resource Locks<\/span><\/li>\n
        3. Availability Sets<\/span><\/li>\n
        4. Network Security Groups<\/span><\/li>\n<\/ol>\n

          Correct Answer: 1<\/b><\/p>\n

          Explanation<\/b><\/p>\n

          Tags provide metadata that can identify attributes such as department, project, owner, or environment. Administrators can use tags to search, filter, organize, and report on Azure resources. Resource Locks protect resources from deletion or modification, Availability Sets improve VM availability, and Network Security Groups control network traffic. Therefore, tags are the appropriate feature when resource metadata must be used to identify resources belonging to a specific department.<\/span><\/p>\n

          Question 185<\/b><\/h3>\n

          You need to create an alert when a virtual machine becomes unavailable. Which Azure Monitor feature can detect changes in resource health or availability?<\/b><\/p>\n

            \n
          1. Alert rule<\/span><\/li>\n
          2. Resource Lock<\/span><\/li>\n
          3. Azure Policy<\/span><\/li>\n
          4. Management Group<\/span><\/li>\n<\/ol>\n

            Correct Answer: 1<\/b><\/p>\n

            Explanation<\/b><\/p>\n

            Azure Monitor alert rules can evaluate resource metrics, logs, activity information, and other supported signals to identify conditions that require attention. Administrators can configure alerts for availability-related conditions and associate them with appropriate action groups for notifications. Resource Locks protect resources, Azure Policy enforces governance, and Management Groups organize subscriptions. Therefore, an Azure Monitor alert rule is the appropriate feature for detecting and responding to VM availability problems.<\/span><\/p>\n

            Question 186<\/b><\/h3>\n

            You need to determine which user created or deleted an Azure resource. Which Azure log should you examine?<\/b><\/p>\n

              \n
            1. Activity Log<\/span><\/li>\n
            2. Metrics<\/span><\/li>\n
            3. DNS Logs<\/span><\/li>\n
            4. Storage Access Tier<\/span><\/li>\n<\/ol>\n

              Correct Answer: 1<\/b><\/p>\n

              Explanation<\/b><\/p>\n

              The Azure Activity Log records subscription-level events related to resource management operations. It can provide information about operations such as resource creation, modification, and deletion, including details about who initiated the operation. Metrics contain numerical performance data, while DNS logs and storage access tiers serve different purposes. Therefore, the Activity Log is the correct source when you need to determine which user or service performed a management operation on an Azure resource.<\/span><\/p>\n

              Question 187<\/b><\/h3>\n

              You need to retain Azure Activity Log data for long-term analysis beyond the normal retention period. Which destination can you configure?<\/b><\/p>\n

                \n
              1. Log Analytics workspace<\/span><\/li>\n
              2. Availability Set<\/span><\/li>\n
              3. Network Security Group<\/span><\/li>\n
              4. Public IP Address<\/span><\/li>\n<\/ol>\n

                Correct Answer: 1<\/b><\/p>\n

                Explanation<\/b><\/p>\n

                Azure Activity Logs can be sent to a Log Analytics workspace for centralized storage and analysis. This allows administrators to query activity data over a longer period and combine it with other logs for operational, security, and auditing purposes. Availability Sets improve VM availability, NSGs control network traffic, and Public IP addresses provide internet connectivity. Therefore, a Log Analytics workspace is the appropriate destination for centralized and extended analysis of Activity Log data.<\/span><\/p>\n

                Question 188<\/b><\/h3>\n

                You need to monitor changes made to Azure resources and identify the operations performed by administrators. Which Azure feature should you use?<\/b><\/p>\n

                  \n
                1. Activity Log<\/span><\/li>\n
                2. Azure Pricing Calculator<\/span><\/li>\n
                3. Azure DNS<\/span><\/li>\n
                4. Azure Files<\/span><\/li>\n<\/ol>\n

                  Correct Answer: 2<\/b><\/p>\n

                  Explanation<\/b><\/p>\n

                  The Azure Activity Log provides information about management operations performed on Azure resources at the subscription level. It can be used to investigate changes such as creating, updating, or deleting resources and can help identify the user, service, or application responsible for an operation. Pricing Calculator estimates costs, Azure DNS provides DNS hosting, and Azure Files provides managed file shares. Therefore, the Activity Log is the correct feature for reviewing administrative changes and resource management operations.<\/span><\/p>\n

                  Question 189<\/b><\/h3>\n

                  You need to create an alert when a resource is deleted from an Azure subscription. Which Azure Monitor signal should you use?<\/b><\/p>\n

                    \n
                  1. Activity Log<\/span><\/li>\n
                  2. Platform Metric<\/span><\/li>\n
                  3. Storage Access Tier<\/span><\/li>\n
                  4. DNS Zone<\/span><\/li>\n<\/ol>\n

                    Correct Answer: 1<\/b><\/p>\n

                    Explanation<\/b><\/p>\n

                    The Activity Log records management operations such as resource deletion. Azure Monitor can use Activity Log events as alert signals, allowing administrators to configure alerts for specific operations or resource types. This can help organizations quickly detect unexpected resource deletions and investigate them. Platform metrics measure resource performance, storage access tiers control blob storage costs and access characteristics, and DNS zones handle name resolution. Therefore, Activity Log is the correct signal for creating alerts related to resource deletion events.<\/span><\/p>\n

                    Question 190<\/b><\/h3>\n

                    You need to create a reusable collection of Azure resources that can be deployed consistently for multiple environments. Which technology should you use?<\/b><\/p>\n

                      \n
                    1. Azure Resource Manager templates<\/span><\/li>\n
                    2. Azure Service Health<\/span><\/li>\n
                    3. Azure Monitor Alerts<\/span><\/li>\n
                    4. Azure Advisor<\/span><\/li>\n<\/ol>\n

                      Correct Answer: 3<\/b><\/p>\n

                      Explanation<\/b><\/p>\n

                      Azure Resource Manager templates allow infrastructure to be described declaratively and deployed repeatedly. A template can define virtual networks, virtual machines, storage accounts, and other resources along with their configurations and dependencies. The same template can be reused for development, testing, and production environments with appropriate parameter values. Service Health provides platform status information, Monitor Alerts detect conditions, and Advisor provides recommendations. Therefore, Azure Resource Manager templates are the correct choice for repeatable infrastructure deployments.<\/span><\/p>\n

                      Question 191<\/b><\/h3>\n

                      You need to pass different values such as region names and VM sizes into an ARM template during deployment. Which ARM template feature should you use?<\/b><\/p>\n

                        \n
                      1. Parameters<\/span><\/li>\n
                      2. Tags<\/span><\/li>\n
                      3. Locks<\/span><\/li>\n
                      4. Outputs<\/span><\/li>\n<\/ol>\n

                        Correct Answer: 1<\/b><\/p>\n

                        Explanation<\/b><\/p>\n

                        ARM template parameters allow deployment values to be supplied at deployment time rather than hard-coded into the template. For example, a template can define parameters for the Azure region, VM size, resource names, or administrator settings. This makes the template reusable across different environments and configurations. Tags provide metadata, locks protect resources, and outputs return information after deployment. Therefore, parameters are the correct ARM template feature for supplying variable deployment values.<\/span><\/p>\n

                        Question 192<\/b><\/h3>\n

                        You need an ARM template to return the resource ID of a newly deployed resource after deployment. Which template section should you use?<\/b><\/p>\n

                          \n
                        1. Outputs<\/span><\/li>\n
                        2. Parameters<\/span><\/li>\n
                        3. Variables<\/span><\/li>\n
                        4. Resources<\/span><\/li>\n<\/ol>\n

                          Correct Answer: 1<\/b><\/p>\n

                          Explanation<\/b><\/p>\n

                          The Outputs section of an ARM template returns values after deployment has completed. It can provide information such as resource IDs, hostnames, connection details, or other calculated values that may be needed by administrators or automation processes. Parameters accept deployment inputs, variables store reusable values inside the template, and Resources defines the resources to deploy. Therefore, the Outputs section is the correct choice when a deployment needs to return a resource ID or another resulting value.<\/span><\/p>\n

                          Question 193<\/b><\/h3>\n

                          You need to simplify repeated values in an ARM template and avoid defining the same expression multiple times. Which template feature should you use?<\/b><\/p>\n

                            \n
                          1. Variables<\/span><\/li>\n
                          2. Outputs<\/span><\/li>\n
                          3. Resource Locks<\/span><\/li>\n
                          4. Tags<\/span><\/li>\n<\/ol>\n

                            Correct Answer: 1<\/b><\/p>\n

                            Explanation<\/b><\/p>\n

                            ARM template variables allow commonly used values or expressions to be defined once and referenced multiple times throughout the template. This can make templates easier to maintain and reduce repeated expressions. Parameters are used for values supplied during deployment, while outputs return information after deployment. Resource Locks and tags are resource-management features rather than template constructs for storing reusable expressions. Therefore, variables are the correct feature for simplifying repeated values inside an ARM template.<\/span><\/p>\n

                            Question 194<\/b><\/h3>\n

                            You need to deploy Azure resources using a declarative infrastructure-as-code approach and manage deployments through Azure CLI. Which command can deploy an ARM template?<\/b><\/p>\n

                              \n
                            1. az deployment group create<\/span><\/li>\n
                            2. az template deploy<\/span><\/li>\n
                            3. az arm create<\/span><\/li>\n
                            4. az resource template<\/span><\/li>\n<\/ol>\n

                              Correct Answer: 1<\/b><\/p>\n

                              Explanation<\/b><\/p>\n

                              The Azure CLI command <\/span>az deployment group create<\/span> can be used to deploy an ARM template at the resource group scope. The command can specify a template file and parameters needed for the deployment. This provides a repeatable way to deploy infrastructure from the command line. The other listed commands are not valid Azure CLI commands for deploying ARM templates. Therefore, <\/span>az deployment group create<\/span> is the correct command for an ARM template deployment at resource group scope.<\/span><\/p>\n

                              Question 195<\/b><\/h3>\n

                              You need to deploy a resource group using Azure PowerShell. Which cmdlet should you use?<\/b><\/p>\n

                                \n
                              1. New-AzResourceGroup<\/span><\/li>\n
                              2. New-AzDeployment<\/span><\/li>\n
                              3. Set-AzResource<\/span><\/li>\n
                              4. Add-AzGroup<\/span><\/li>\n<\/ol>\n

                                Correct Answer: 1<\/b><\/p>\n

                                Explanation<\/b><\/p>\n

                                New-AzResourceGroup<\/span> creates a new Azure resource group using Azure PowerShell. The cmdlet typically requires a resource group name and Azure region. Resource groups are logical containers that help organize and manage related Azure resources. <\/span>New-AzDeployment<\/span> is associated with deployment operations rather than creating the resource group itself, while the other listed cmdlets are not appropriate for this task. Therefore, <\/span>New-AzResourceGroup<\/span> is the correct PowerShell cmdlet.<\/span><\/p>\n

                                Question 196<\/b><\/h3>\n

                                You need to execute Azure management commands without installing Azure CLI or Azure PowerShell on your local computer. Which option should you use?<\/b><\/p>\n

                                  \n
                                1. Azure Cloud Shell<\/span><\/li>\n
                                2. Azure Resource Lock<\/span><\/li>\n
                                3. Azure Advisor<\/span><\/li>\n
                                4. Azure Service Health<\/span><\/li>\n<\/ol>\n

                                  Correct Answer: 1<\/b><\/p>\n

                                  Explanation<\/b><\/p>\n

                                  Azure Cloud Shell provides a browser-based environment containing Azure CLI and Azure PowerShell. It allows administrators to execute management commands without installing these tools on their local computer. Cloud Shell is integrated into the Azure portal and provides a convenient environment for managing resources from different devices. Resource Locks protect resources, Advisor provides recommendations, and Service Health reports Azure service events. Therefore, Azure Cloud Shell is the correct option for running Azure management commands without local installation.<\/span><\/p>\n

                                  Question 197<\/b><\/h3>\n

                                  You need to manage Azure resources through a graphical interface instead of using command-line tools. Which Azure service should you use?<\/b><\/p>\n

                                    \n
                                  1. Azure Portal<\/span><\/li>\n
                                  2. Azure Cloud Shell<\/span><\/li>\n
                                  3. Azure CLI<\/span><\/li>\n
                                  4. Azure PowerShell<\/span><\/li>\n<\/ol>\n

                                    Correct Answer: 1<\/b><\/p>\n

                                    Explanation<\/b><\/p>\n

                                    The Azure Portal is a web-based graphical user interface for creating, configuring, monitoring, and managing Azure resources. Administrators can use the portal to deploy virtual machines, configure networking, manage storage, assign permissions, and review monitoring information. Azure Cloud Shell, Azure CLI, and Azure PowerShell provide command-line management options instead. Therefore, Azure Portal is the correct choice when Azure resources need to be managed through a graphical interface.<\/span><\/p>\n

                                    Question 198<\/b><\/h3>\n

                                    You need to create a new resource group using Azure CLI and specify its Azure region. Which command structure is correct?<\/b><\/p>\n

                                      \n
                                    1. az group create –name MyRG –location eastus<\/span><\/li>\n
                                    2. az resource create –group MyRG –region eastus<\/span><\/li>\n
                                    3. az group new –name MyRG –region eastus<\/span><\/li>\n
                                    4. az resource-group create MyRG eastus<\/span><\/li>\n<\/ol>\n

                                      Correct Answer: 1<\/b><\/p>\n

                                      Explanation<\/b><\/p>\n

                                      The Azure CLI command <\/span>az group create –name MyRG –location eastus<\/span> creates a resource group named MyRG in the East US region. The <\/span>az group create<\/span> command is the standard Azure CLI command for creating resource groups, while <\/span>–name<\/span> specifies the resource group name and <\/span>–location<\/span> specifies its location. The other command structures are not valid Azure CLI syntax for this operation. Therefore, option 1 is the correct command.<\/span><\/p>\n

                                      Question 199<\/b><\/h3>\n

                                      You need to assign Azure RBAC permissions only to resources inside a particular resource group. At which scope should you assign the role?<\/b><\/p>\n

                                        \n
                                      1. Resource group<\/span><\/li>\n
                                      2. Management group<\/span><\/li>\n
                                      3. Subscription<\/span><\/li>\n
                                      4. Tenant<\/span><\/li>\n<\/ol>\n

                                        Correct Answer: 1<\/b><\/p>\n

                                        Explanation<\/b><\/p>\n

                                        Assigning an Azure RBAC role at the resource group scope limits the role assignment to resources within that resource group, subject to Azure RBAC inheritance behavior. This is useful when users need permissions for a specific application or project but should not have access across the entire subscription. A subscription scope applies permissions more broadly, while a management group can affect multiple subscriptions. Therefore, the resource group scope is the most appropriate choice when access should be limited to resources within one resource group.<\/span><\/p>\n

                                        Question 200<\/b><\/h3>\n

                                        You need to assign a user read-only permissions across all resources in an Azure subscription. Which scope should you use for the Reader role?<\/b><\/p>\n

                                          \n
                                        1. Individual resource<\/span><\/li>\n
                                        2. Resource group<\/span><\/li>\n
                                        3. Subscription<\/span><\/li>\n
                                        4. Network interface<\/span><\/li>\n<\/ol>\n

                                          Correct Answer: 3<\/b><\/p>\n

                                          Explanation<\/b><\/p>\n

                                          Assigning the Reader role at the subscription scope provides read-only access to resources throughout that subscription, subject to role inheritance and other access controls. This is useful when an administrator or auditor needs visibility across the entire subscription without being able to modify resources. Assigning the role at an individual resource or resource group would limit the scope of access. A network interface is a resource rather than an appropriate broad RBAC scope. Therefore, the subscription scope is the correct choice.<\/span><\/p>\n

                                           <\/p>\n","protected":false},"excerpt":{"rendered":"

                                          View Full\u00a0Microsoft AZ-104 Exam Dumps\u00a0and Practice Test Dumps.   Question 181 You need to automatically deploy a configuration to resources whenever they are created if the configuration is missing. Which Azure Policy effect should you use? Audit Deny DeployIfNotExists Disabled Correct Answer: 3 Explanation The DeployIfNotExists effect can deploy related resources or configurations when a […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1648,1647],"tags":[],"_links":{"self":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/11790"}],"collection":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/comments?post=11790"}],"version-history":[{"count":1,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/11790\/revisions"}],"predecessor-version":[{"id":11791,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/11790\/revisions\/11791"}],"wp:attachment":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/media?parent=11790"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/categories?post=11790"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/tags?post=11790"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}