Microsoft AZ-104 Exam Dumps, Practice Test Questions

100% Latest & Updated Microsoft AZ-104 Practice Test Questions, Exam Dumps & Verified Answers!
30 Days Free Updates, Instant Download!

Microsoft AZ-104 Premium Bundle
$79.97
$59.98

AZ-104 Premium Bundle

  • Premium File: 606 Questions & Answers. Last update: Nov 5, 2026
  • Training Course: 132 Video Lectures
  • Study Guide: 458 Pages
  • Latest Questions
  • 100% Accurate Answers
  • Fast Exam Updates

AZ-104 Premium Bundle

Microsoft AZ-104 Premium Bundle
  • Premium File: 606 Questions & Answers. Last update: Nov 5, 2026
  • Training Course: 132 Video Lectures
  • Study Guide: 458 Pages
  • Latest Questions
  • 100% Accurate Answers
  • Fast Exam Updates
$79.97
$59.98

Microsoft AZ-104 Practice Test 30

Question 290

An organization invokes an unplanned customer-managed failover on a GRS storage account after a regional outage. The secondary becomes primary and data access resumes. The team expects the account to remain GRS automatically. What redundancy state must they plan for after this unplanned failover?

  1. Assume no redundant copies remain because LRS means zero replication
  2. Delete the storage account and recreate it in the failed region to restore GRS
  3. Treat the new primary as locally redundant until geo-redundancy is explicitly reconfigured when supported
  4. Assume synchronous geo-replication resumes instantly to the original primary

Explanation

Correct Answer

C:

An unplanned account failover promotes replicated data in the secondary region and typically results in LRS redundancy there. Re-establishing a geographically redundant secondary copy is a separate recovery action.

Incorrect Answers

A:

LRS maintains copies within the local data center/region; it is not a single unprotected physical disk. The missing layer is geographic redundancy.

B:

Recreating the storage account risks losing the recovered data and does not make the failed region available. The supported operation is to plan re-replication after failover.

D:

Unplanned failover does not immediately recreate the former cross-region redundancy. The original region may remain unavailable and asynchronous geo copy requires reconfiguration and time.

Question 291

A GRS account's primary region is degraded and the disaster recovery team is considering an unplanned failover. Recent writes may not yet exist in the secondary. Which account property provides a meaningful boundary for possible lost updates?

  1. Check only the storage account's access tier and assume Hot guarantees zero data loss
  2. Use the most recent primary-region storage availability metric timestamp as the last successfully replicated write time
  3. Use the primary account's latest successful PUT request time as proof that the same write has already reached the secondary
  4. Check the account's Last Sync Time and compare it with the last successful application writes

Explanation

Correct Answer

D:

Geo replication is asynchronous. Last Sync Time identifies the last known consistent point in the secondary copy and helps estimate writes at risk if it is promoted prematurely.

Incorrect Answers

A:

Access tiers affect cost and latency for blobs, not the geo-replication lag. Hot does not remove the asynchronous RPO of a GRS account.

B:

Availability metrics describe service availability, not the point through which writes were synchronized to the secondary. Last Sync Time is the replication watermark for estimating potential RPO exposure.

C:

A successful primary write can precede asynchronous geo-replication. The primary request timestamp alone cannot prove secondary replication; compare it with the account's Last Sync Time.

Question 292

A customer needs to move a supported geo-replicated storage account's active primary from one healthy region to its paired secondary for a planned maintenance event. Management wants to avoid losing acknowledged writes. Which failover mode should they choose where the feature is supported?

  1. Choose a supported customer-managed planned failover rather than an unplanned failover
  2. Choose unplanned failover because it always waits for every pending write
  3. Delete the primary storage account endpoint and recreate a new account with the same name
  4. Change the Blob default tier to Cool before making the secondary writable

Explanation

Correct Answer

A:

Planned failover waits for pending data synchronization before switching roles, reducing the risk of losing acknowledged primary writes. Support and redundancy prerequisites must be verified for the account.

Incorrect Answers

B:

Unplanned failover is designed for emergencies and can promote an asynchronously lagging copy. It may lose updates that have not reached the secondary.

C:

Deleting/recreating the resource is not a controlled role switch and can destroy existing data. It does not guarantee consistent replication to a new account.

D:

Blob tiering does not synchronize outstanding cross-region writes or implement failover. It changes storage economics rather than replication state.

Question 293

An application is allowed to read from the secondary replica of an RA-GRS account before disaster recovery is invoked. The client uses the ordinary primary blob endpoint and cannot force a read from the secondary. What endpoint form should it use for supported secondary reads?

  1. Append a secondary=true parameter to requests sent to the ordinary primary Blob hostname
  2. Use the documented secondary service endpoint hostname, typically including the -secondary suffix
  3. Use the primary write endpoint with a new SAS permission called Secondary
  4. Switch the account from RA-GRS to GRS while continuing to send every Blob request to the original primary endpoint, expecting reads to use the secondary automatically

Explanation

Correct Answer

B:

RA-GRS exposes read-only secondary endpoints for supported services. Requests to the primary hostname do not automatically become secondary reads simply because the account has read-access geo redundancy.

Incorrect Answers

A:

The Azure Blob endpoint does not select its asynchronously replicated secondary by interpreting a generic secondary=true query-string switch. RA-GRS read access uses the service-specific secondary hostname; retaining the primary hostname still targets primary-region service access.

C:

Secondary routing is an endpoint choice, not a new blob SAS permission bit. A valid SAS alone cannot select a different replication region.

D:

GRS does not expose the secondary for direct read access, and the primary hostname still targets the primary region. Under RA-GRS the client must use the service-specific -secondary endpoint for supported secondary reads.

Question 294

A finance team downgrades an existing storage account from RA-GRS to GRS to remove application read access to the geo-secondary. They expect the bill to drop to the GRS rate immediately on the change date. Which Azure Storage billing nuance should be included in the estimate?

  1. Removing read access to the secondary means the account is billed as RA-GRS for an additional 30 days after conversion
  2. Removing RA automatically deletes the account's entire primary-region dataset and ends all storage charges
  3. GRS and RA-GRS have identical charges by definition because both replicate to the same paired region
  4. The change starts a mandatory 30-day application outage because both the primary and secondary endpoints disappear

Explanation

Correct Answer

A:

Azure Storage documentation notes a transition billing rule: when read access to the secondary is removed by converting RA-GRS to GRS or LRS, RA-GRS billing continues for an additional 30 days. The workload may lose the secondary read endpoint earlier, so finance must separate feature availability from the billing transition.

Incorrect Answers

B:

The RA toggle affects the redundancy configuration and secondary read capability, not automatic primary data deletion. Even if the secondary read endpoint becomes unavailable, the account remains responsible for storing its primary data and corresponding replication. Ending every storage charge would be unsupported.

C:

RA-GRS adds read access to the geographic secondary, which is a separately priced capability. The fact that both products maintain geographic replication does not imply identical rates or no transition charge. Budgeting needs to include the explicit temporary RA-GRS billing rule after removing read access.

D:

The change is not a mandatory account failover or documented month-long service shutdown. Applications should use the appropriate primary endpoints and handle secondary read behavior, but the 30-day period refers to billing after RA removal. It is not a prescribed outage duration.

Question 295

A customer uses a geo-redundant storage account and wants to choose an arbitrary global region for its secondary replica solely by editing the account's redundancy setting. Can standard GRS provide that placement choice?

  1. Specify any region name in the SAS token to move the storage replica
  2. Change the resource-group location to the desired arbitrary secondary region
  3. Add a public IP address in the desired region and expect GRS to replicate there
  4. Plan around Azure's supported paired secondary region for the account's primary region

Explanation

Correct Answer

D:

Standard GRS/GZRS placement is determined by Azure region pairing and supported replication geography. The customer cannot treat the geo secondary as a freely selectable destination through a simple setting.

Incorrect Answers

A:

SAS controls data authorization and does not choose geographic redundancy topology. A client token has no authority to relocate the managed secondary copy.

B:

Resource-group metadata location does not control the storage account's geo-replication partner. The account's redundancy SKU and region pairing are separate.

C:

Public IP resources provide networking endpoints, not managed Azure Storage replica placement. They do not create a secondary storage region.

Question 296

A VM uses a customer-specified Azure Storage account for boot-diagnostics screenshots. The account is zone-redundant (ZRS), and VM deployment reports StorageAccountTypeNotSupported. The application must retain ZRS for its actual blob workload; operators only need supported boot diagnostics. What should they change?

  1. Change the VM's boot-diagnostics configuration to use a managed storage account rather than this custom ZRS account
  2. Grant the VM's system-assigned identity Storage Blob Data Contributor on the same ZRS account
  3. Upgrade the custom ZRS account to geo-zone-redundant storage (GZRS) without changing boot-diagnostics settings
  4. Add a private endpoint to the custom ZRS storage account and keep the existing diagnostics-profile storage URI

Explanation

Correct Answer

A:

Managed boot diagnostics is the supported path when a customer-chosen ZRS account causes this boot-diagnostics storage-type error. It lets Azure manage diagnostic screenshot and serial-log storage separately from the application's data account, so application blobs retain zone redundancy. This changes only the diagnostic destination, not the VM's OS disk or network configuration. Verify the managed diagnostics setting is enabled after deployment.

Incorrect Answers

B:

A data-plane Blob Contributor assignment can authorize blob operations by an identity, but it does not change whether the boot-diagnostics feature accepts a custom storage account's replication type. Here the error identifies an unsupported ZRS storage-account type, not an authorization denial. Adding permissions leaves the incompatible diagnostics-profile target in place and does not resolve VM boot diagnostics initialization.

C:

GZRS introduces both zone and geo redundancy for supported storage workloads, but it is still zone-redundant storage and does not make the custom account an eligible boot-diagnostics destination. The requirement is to keep zone protection for application blobs while fixing boot diagnostics, not to change their disaster-recovery replication SKU. Increasing redundancy adds complexity without correcting the unsupported storage-type dependency.

D:

Private endpoints alter the way a client reaches the storage data endpoint and may be appropriate when the challenge is network isolation. In this question the diagnostics service rejects the storage-account type before a private-network path could solve anything. Retaining the same custom ZRS URI leaves the documented boot-diagnostics incompatibility unresolved; use managed diagnostics storage instead.

Question 297

A geo-redundant Azure Storage account is used as the source in an active Blob object-replication policy. During regional recovery planning, an administrator tries to initiate a customer-managed unplanned account failover; the operation is blocked. The team is prepared to suspend object replication during emergency recovery. Which prerequisite should they address?

  1. Change the account from GRS to RA-GRS; the read-access variant automatically overrides an object-replication conflict
  2. Grant the disaster-recovery team Storage Blob Data Owner at subscription scope while leaving replication policies active
  3. Remove the conflicting object-replication policy involving this account, assess other feature blockers, and then retry a supported customer-managed failover
  4. Increase the Blob soft-delete retention interval so object-replication policies no longer block account failover

Explanation

Correct Answer

C:

Microsoft documents object-replication policy participation as a blocker to customer-managed account failover for either source or destination accounts. Because this team accepts suspending replication, remove the interfering policy, confirm other failover prerequisites, and then initiate the supported failover. This is different from the post-failover task of restoring geo redundancy after the new primary becomes LRS; it resolves a pre-failover compatibility condition.

Incorrect Answers

A:

RA-GRS permits read access to the secondary endpoint before failover when replication catches up, but adding read access does not override feature-level restrictions. A storage account participating as source or destination in Blob object replication cannot undergo customer-managed failover while that policy conflicts. The scenario asks how to remove the explicit prerequisite blocker, not how to change secondary-read visibility.

B:

Storage Blob Data Owner governs permitted data-plane operations such as reading, writing, deleting, and certain ACL management. Customer-managed account failover is a storage-account management operation with separate prerequisites and feature compatibility checks. Elevating the responder's blob access does not disable active object-replication policies; it also grants broader blob permissions without addressing the failure message.

D:

Blob soft delete protects accidentally deleted blobs within a retention window, which is valuable for recovery from logical deletion or overwrite. It does not turn off Azure Storage object replication or remove the documented failover incompatibility. Increasing the retention period might increase storage costs and delay deletion but leaves the feature-level blocker that prevents the requested account failover.

Question 298

A data platform needs to asynchronously copy newly written and updated block blobs from a source account in one region to a separate destination storage account under a rule that selects particular containers. The administrator is preparing Azure Blob object replication. What prerequisite configuration is required?

  1. Enable blob versioning on both accounts and change feed on the source account
  2. Enable change feed only on the destination and disable source versioning
  3. Configure ZRS on both accounts and assume this creates a cross-account replication policy
  4. Enable a storage account ReadOnly lock and expect it to transport block blobs

Explanation

Correct Answer

A:

Object replication uses source change feed and blob versioning on both source and destination accounts to identify and copy eligible versions through the policy. These features are explicit prerequisites.

Incorrect Answers

B:

The source needs change tracking, and both endpoints need versioning. Configuring destination change feed alone omits the required source event record.

C:

ZRS replicates within availability zones for a single account and is not a configurable cross-account object replication policy.

D:

A management-plane lock can constrain configuration but does not implement asynchronous object transport between storage accounts.

Question 299

A policy copies supported block blob versions between Azure Storage accounts by object replication. One newly created source blob is written directly to the archive access tier. The operator expects immediate replication but observes none. Which limitation best explains this result?

  1. Archived blobs cannot be replicated by Blob object replication while in the archive tier
  2. The destination must be the same resource group as the source account for replication
  3. Object replication supports only Azure Files SMB shares, not block blobs
  4. The source account must be assigned a Microsoft Entra tenant Global Administrator

Explanation

Correct Answer

A:

Blob object replication does not replicate archived blobs. The access tier is a data-state constraint, so the operator must review the source tier and eligible policy conditions.

Incorrect Answers

B:

Cross-account replication can span relevant accounts and regions; matching resource-group membership is not the reason an archive-tier blob is skipped.

C:

The service is specifically designed for supported block blobs, not Azure Files SMB. The content type is appropriate; its archive state is the problem.

D:

Directory-wide administrator privileges do not change object replication support for archived content. The missing behavior is a storage feature limitation.

Question 300

A team wants to replicate block blob changes automatically from one Azure Storage account to another account across regions. It has already enabled blob versioning and change feed as required. What remaining configuration establishes the source-to-destination mapping?

  1. Enable the source change feed and destination versioning without defining the source and destination container pair in a replication policy
  2. Configure a destination lifecycle management policy to copy new source versions into the target container
  3. Create an object replication policy identifying the source and destination containers
  4. Create a Geo-redundant storage account and assume its paired-region replica is the separate destination account named in this requirement

Explanation

Correct Answer

C:

Object replication requires a policy/rule linking source and destination containers in compatible accounts. Versioning and change feed alone do not specify where a particular blob change should be copied.

Incorrect Answers

A:

Versioning and change feed are prerequisites but not the rule mapping. Object replication requires a policy defining the eligible source and destination containers.

B:

Blob lifecycle management transitions or deletes objects by policy; it does not define cross-account object replication mappings. A source-to-destination object replication policy is required.

D:

GRS supplies platform-managed asynchronous durability replicas, not a configured independent object-replication policy between the two named storage accounts and containers.

Microsoft Azure Administrator (AZ-104) Practice Tests

UP

SPECIAL OFFER: GET 10% OFF

This is ONE TIME OFFER

ExamSnap Discount Offer
Enter Your Email Address to Receive Your 10% Off Discount Code

A confirmation link will be sent to this email address to verify your login. *We value your privacy. We will not rent or sell your email address.

Download Free Demo of VCE Exam Simulator

Experience Avanset VCE Exam Simulator for yourself.

Simply submit your e-mail address below to get started with our interactive software demo of your free trial.

Free Demo Limits: In the demo version you will be able to access only first 5 questions from exam.