Azure Administrator Associate (AZ-104) - Full Practice Exam 1

1. A Bicep file declares one resource that references another resource's symbolic name. How is the deployment dependency normally determined?
2. A business needs to replicate supported Azure VMs to another region and orchestrate failover after a regional outage. Which service is the primary fit?
3. A deployIfNotExists policy assignment is intended to remediate existing resources. Which two elements are typically required for remediation? Select TWO.
4. A developer can create virtual machines in a resource group but receives authorization errors when assigning Azure roles. Which additional permission is specifically needed?
5. A disaster-recovery team wants to exercise a replicated application without interrupting the production source. Which operation is designed for a controlled recovery exercise?
6. A help desk wants eligible users to reset forgotten passwords without opening a support ticket. Which Entra capability should the administrator configure?
7. A new Windows VM needs a persistent disk for application data. The administrator must avoid losing data when the VM moves to another host. Which storage location should be used?
8. A policy with an audit effect finds storage accounts with an undesired setting. What does this effect do by itself?
9. A process overwrites a block blob several times daily. Operations needs to restore the content from before an unwanted overwrite. Which capability is designed to retain previous blob states?
10. A production web app uses an App Service tier that supports deployment slots. The team wants to warm up a new release and then switch traffic using a swap. What should it create?
11. A project owner has Contributor on a resource group. A CanNotDelete lock exists on the group. What happens when the owner attempts to delete a contained storage account through Azure Resource Manager?
12. A stateless web tier must add VM instances when average CPU remains high and remove them when demand falls. What should be configured?
13. A storage private endpoint exists, but clients resolve the normal storage hostname to a public address. What should the administrator investigate?
14. A subnet must send traffic for a specific remote prefix through a network virtual appliance. What should be associated with the subnet?
15. A supplier employee must collaborate using the supplier's existing work identity. The administrator wants an external user in the company's Entra directory. Which feature best fits?
16. A support group must restart virtual machines in one resource group without assigning access to other users. Which built-in role and scope best fit?
17. A team must deploy the same infrastructure to test and production while using different resource names and sizes. Which approach best supports repeatability?
18. A team needs a private registry for container images deployed by Azure workloads. Which service should it provision?
19. A team needs notification at 80% of its monthly Azure budget. It must not accidentally stop production workloads. What should it configure first?
20. A team needs scheduled recovery points for an Azure VM with defined retention. Which service configuration directly addresses this need?
21. A team selects ZRS for a supported storage account. Which failure boundary is addressed by the replication topology?
22. A team wants a managed container platform for HTTP microservices with revisions and event-driven scaling without managing a Kubernetes cluster. Which service best fits?
23. A user belongs to a group with Reader at subscription scope and directly has Contributor on one resource group. What access does the user normally have in that resource group, assuming no deny assignments?
24. A user has Contributor on a storage account but cannot read blobs through Entra authentication. What is the most appropriate additional role for read-only blob access?
25. A VM is running, but an Azure Load Balancer stops sending it new connections. Which setting should be examined first to determine whether the backend is considered healthy?
26. A VM's subnet NSG allows inbound HTTPS, but its network-interface NSG denies that traffic. What is required for a new inbound HTTPS connection to succeed through both layers?
27. A Windows client cannot mount an Azure SMB file share over the internet, although authentication is correct. Which outbound port should be checked first for the SMB connection?
28. Administrators need browser-based RDP or SSH to Azure VMs without exposing those VMs with public IP addresses. Which service should they evaluate?
29. An administrator must recover accidentally deleted blobs during a defined retention window. Which feature should have been enabled before deletion?
30. An administrator must run a short-lived container task without provisioning a virtual machine or operating a cluster. No revision-based microservice platform is needed. Which service is a direct fit?
31. An administrator must synchronize a local directory to a Blob container from a scheduled command-line process. Which tool is intended for bulk Azure Storage transfer?
32. An administrator needs supported Azure resource logs sent to a Log Analytics workspace. Which resource configuration should be created?
33. An allowed-locations policy with a deny effect is assigned to a subscription. A deployment requests a non-exempt resource in a prohibited region. What is the expected result?
34. An App Service application uses different database connection strings in production and staging. The strings must stay with their environments during a slot swap. How should they be configured?
35. An App Service custom domain has been verified. It must serve HTTPS using the organization's eligible certificate. Which TWO configuration steps are required? Select TWO.
36. An App Service plan supports autoscale. The administrator wants more web worker instances under sustained load. Which operation represents scaling out?
37. An application needs temporary read access to one blob. The team wants delegated access signed using Entra credentials rather than the account key. Which mechanism should it use?
38. An application uses storage account keys. Operations needs to rotate credentials with minimal interruption. What is the supported general approach?
39. An engineer needs to count error records by computer over the last hour in Azure Monitor Logs. Which query language should be used?
40. An enterprise must apply the same Azure policy to all current and future subscriptions in its production hierarchy. Where should it assign the policy?
41. An NSG has an inbound deny rule at priority 100 and an allow rule at priority 200 matching the same new TCP connection. What is the result?
42. Finance expects every resource to inherit a CostCenter tag simply because the resource group has that tag. What should the administrator explain?
43. Logs must automatically move to a cooler supported tier after 30 days and be deleted after 365 days. What should an administrator configure?
44. Multiple alert rules should notify the same operations team and invoke the same supported automation action. Which reusable object should they reference?
45. Operations needs recurring visibility into reachability and latency between a VM and a remote endpoint. Which Network Watcher capability is designed for this?
46. Several clients use service SAS tokens linked to the same stored access policy. The administrator needs to revoke them together. What should be changed?
47. Several peered VNets must resolve records in one Azure Private DNS zone. What configuration explicitly enables zone resolution from each VNet?
48. Two VM instances must tolerate failure of one datacenter group within a region that supports zones. Which placement should the administrator configure?
49. Two VNets have overlapping address spaces. An administrator attempts ordinary VNet peering between them. What should be corrected first?
50. VNet A is peered with B, and B is peered with C. No transit solution is configured. Can a VM in A reach C solely through these peerings?

Comments — 0