Microsoft AZ-104 Exam Dumps, Practice Test Questions

100% Latest & Updated Microsoft AZ-104 Practice Test Questions, Exam Dumps & Verified Answers!
30 Days Free Updates, Instant Download!

Microsoft AZ-104 Premium Bundle
$79.97
$59.98

AZ-104 Premium Bundle

  • Premium File: 606 Questions & Answers. Last update: Nov 5, 2026
  • Training Course: 132 Video Lectures
  • Study Guide: 458 Pages
  • Latest Questions
  • 100% Accurate Answers
  • Fast Exam Updates

AZ-104 Premium Bundle

Microsoft AZ-104 Premium Bundle
  • Premium File: 606 Questions & Answers. Last update: Nov 5, 2026
  • Training Course: 132 Video Lectures
  • Study Guide: 458 Pages
  • Latest Questions
  • 100% Accurate Answers
  • Fast Exam Updates
$79.97
$59.98

Microsoft AZ-104 Practice Test 48

Question 470

An administrator created a Standard public IP resource named pip-tracker in West US and wants an Azure-managed, human-readable FQDN for its public IPv4 address without buying or administering a separate public DNS zone. The desired DNS label `tracking-app` is not used by any other public IP in that location. Which configuration supplies this mapping?

  1. Set the public IP resource's domain name label to tracking-app, producing tracking-app.westus.cloudapp.azure.com
  2. Set tracking-app as the DNS server label on the VM network interface rather than as the public IP resource's domain-name label
  3. Rename the resource group to tracking-app, since Resource Manager group names are published automatically as DNS A records
  4. Create an NSG rule named tracking-app and expect NSG rule names to resolve to the public IP

Explanation

Correct Answer

A:

Azure Public IP resources support an optional DNS domain name label. Azure-managed DNS then maps domainnamelabel.location.cloudapp.azure.com to the public address, and the label must be unique in its location. This fits the requested FQDN without operating a separate public DNS zone. It is a naming feature, not network access authorization.

Incorrect Answers

B:

A VM NIC's DNS server configuration affects the guest's name-resolution behavior, not publication of an Azure-managed cloudapp.azure.com FQDN. The requested regional DNS label belongs on the public IP resource.

C:

Azure resource-group names are management identifiers inside a subscription, not automatic public hostnames. Renaming the group is not supported in place and would not register an A record in cloudapp.azure.com. The public IP's domain-name-label property is the appropriate DNS configuration point.

D:

An NSG rule filters traffic by addresses, ports, protocol and priority. Its descriptive rule name doesn't publish an Azure-managed DNS record or modify an IP resource's hostname. Even after setting the correct label, the workload still needs suitable network permissions and a listening service.

Question 471

A finance team uses Azure managed data disks on running VMs. A security review finds that users with disk-export permissions can request a temporary disk SAS and download a VHD. The team must block export of a specific disk resource without altering the files stored on the attached disk or stopping the workload. Which resource control addresses the unwanted export path?

  1. Set NetworkAccessPolicy to DenyAll on the managed disk or snapshot that must not be exported
  2. Remove the VM from its availability set so export operations can no longer create a disk SAS
  3. Enable a ReadOnly filesystem mount inside the guest OS while leaving the disk network access policy unchanged
  4. Add a deny rule to the VM subnet NSG for TCP port 3389, which blocks all control-plane disk downloads

Explanation

Correct Answer

A:

The disk or snapshot NetworkAccessPolicy value DenyAll prevents the managed disk resource from being exported, including the external VHD download path. This is a disk-level network transfer restriction; it does not rewrite the bytes already present in the virtual disk or require guest data to be reimaged.

Incorrect Answers

B:

The availability set helps distribute virtual machines across underlying fault and update domains. It is unrelated to authorization or network transfer policy for a managed disk SAS. Moving the VM would risk availability without preventing disk content export.

C:

Guest filesystem permissions affect operations by processes inside the virtual machine, not privileged Azure control-plane disk export. A user with export permissions could still request disk access even if the filesystem is mounted read-only inside the guest.

D:

An NSG filters network flows at a NIC or subnet. The Azure managed disk export API and disk SAS are not controlled by a VM inbound RDP rule; blocking TCP 3389 leaves the disk resource’s external export path available.

Question 472

A virtual machine stops responding after a suspected Azure host placement problem. An administrator chooses the Azure VM 'Reapply' operation instead of 'Redeploy'. What important difference should the team expect when deciding which operation tests a new physical host?

  1. Use Redeploy when the goal is to move the VM to a different Azure host; Reapply is a different guest/model synchronization operation
  2. Increase the guest application timeout and treat it as a host migration operation
  3. Restart the guest operating system and assume it necessarily moves the VM to another Azure physical host
  4. Repeat Reapply on the current VM until Azure automatically selects a new physical host

Explanation

Correct Answer

A:

Reapply asks the platform to apply the VM's configuration again on its current placement. Redeploy changes physical host placement and therefore has distinct downtime and temporary-disk implications, which matter for host-level faults.

Incorrect Answers

B:

Changing an application timeout does not direct the Azure fabric to relocate the virtual machine. Host-placement troubleshooting requires an appropriate compute lifecycle operation.

C:

A normal guest restart doesn't guarantee Azure host relocation. Redeploy reallocates the VM on different host infrastructure when host placement is the suspected issue; Reapply only reapplies the VM model.

D:

Reapply reconciles VM configuration with the platform but is not a host-migration operation. Repeating it does not establish that the VM moved to fresh fabric, while Redeploy is the operation designed to change host placement.

Question 473

Two critical application VMs must survive failure of a single datacenter availability zone in one Azure region. The region supports availability zones, and the application can operate on either VM. Which placement provides the clearest protection against a full-zone outage?

  1. Put both VMs in one availability zone
  2. Place the VMs in separate availability zones
  3. Put both VMs in one availability set in a single datacenter
  4. Place both instances in separate fault domains of a single availability set and assume full-zone resilience

Explanation

Correct Answer

B:

Placing independent VM instances across availability zones separates their power, networking, and cooling failure domains. The application can continue on the surviving zone when one fails.

Incorrect Answers

A:

Two instances in one zone can become unavailable together when that entire zone fails. Redundant VM count alone does not create zonal diversity.

C:

An availability set separates fault and update domains within its supported infrastructure, but it is not the same as deliberately distributing VMs across availability zones against a whole-zone disaster.

D:

Availability sets distribute fault and update domains but do not explicitly place instances in independent availability zones. A full-zone outage remains outside the claimed placement guarantee.

Question 474

An older application consists of three VMs in one Azure availability set. Administrators want planned host maintenance to avoid restarting every VM concurrently within the set. Which availability-set concept directly addresses the maintenance scheduling?

  1. Update domains
  2. Availability zones
  3. Fault domains
  4. Proximity placement groups

Explanation

Correct Answer

A:

Update domains are groups of VMs that can be restarted together during platform maintenance. Azure sequences planned maintenance across update domains rather than restarting all update domains simultaneously.

Incorrect Answers

B:

An availability zone describes a physically separate failure domain, not the maintenance grouping that sequences host restarts among VMs in an availability set.

C:

Fault domains help separate underlying infrastructure failure risks but are not the specific grouping used to schedule planned platform maintenance restarts.

D:

Proximity placement groups improve placement latency for related compute resources. They do not govern the availability set’s planned-maintenance restart order.

Question 475

A line-of-business application operates on two VMs in one datacenter region but cannot yet span availability zones. An engineer must reduce the risk that a single rack or power failure takes out both instances. Which Azure placement mechanism is designed for this?

  1. Deploy the VMs into a common availability set so Azure distributes them across fault domains
  2. Keep both VMs on the same physical host for easier patching
  3. Use one larger VM with twice the RAM instead of the two instances
  4. Create two different DNS A records but keep the application on one VM

Explanation

Correct Answer

A:

An availability set spreads VMs across fault domains representing shared infrastructure failures. Separate instances still must be designed for application-level redundancy.

Incorrect Answers

B:

Shared host placement increases correlated failure risk. It does not create separate fault domains for resiliency.

C:

A single VM increases vertical capacity but remains a single compute failure point. It does not provide infrastructure-level redundancy.

D:

Multiple DNS records do not create a second independent compute instance. The sole running VM remains the single point of failure.

Question 476

A high-frequency service uses two Azure VMs in the same region. Its measured bottleneck is inter-VM latency and it prefers them physically near each other. The requirement is not to guarantee multi-zone outage survival. Which placement feature should the team examine?

  1. Put both VMs into separate availability zones for the lowest possible host-to-host latency
  2. Assign both VMs to the same availability set to guarantee minimum physical distance
  3. Put the two VMs into the same resource group and add a Placement=Near tag, assuming Azure treats the tag as a physical co-location command
  4. A proximity placement group for the supported VM resources

Explanation

Correct Answer

D:

A proximity placement group provides a placement constraint to encourage supported compute resources to be physically close, improving low-latency communication. It is not a substitute for zone-level resilience.

Incorrect Answers

A:

Availability zones are failure-isolation boundaries. Spreading machines across zones can improve outage resilience but does not target physical proximity or minimum latency.

B:

An availability set spreads VMs across fault/update domains for resilience; it is not a guarantee that hosts will be as close together as a proximity placement group targets.

C:

Resource groups and tags are management constructs; a shared tag does not request low-latency physical placement. A supported proximity placement group is the Azure feature specifically intended to guide nearby compute placement.

Question 477

A legacy Azure availability set was created with five update domains. Months later, the operator wants to change that existing set to use ten update domains as a simple property edit. Which constraint should be considered before planning the change?

  1. Scale out the existing set by five VMs and the configured update-domain count automatically doubles
  2. Edit the update-domain number separately on each VM’s availability settings, leaving the existing availability set resource unchanged
  3. The fault-domain and update-domain settings cannot be changed on an existing availability set
  4. Modify only the VM guest operating systems and Azure changes the host update-domain count

Explanation

Correct Answer

C:

Azure assigns fault and update domains using settings established at availability-set creation. They cannot be edited afterward; changing the planned placement architecture requires a separate migration design.

Incorrect Answers

A:

Adding instances distributes them among the configured update domains; it does not increase the number of domains selected when the set was created.

B:

Fault and update domains are platform placement dimensions governed by the availability set configuration, not per-VM user-editable numbers that can be increased afterward. The operator cannot change an existing set from five to ten update domains by editing its member VMs. A new placement/migration design is required if the original topology no longer meets needs.

D:

Guest operating-system configuration has no authority to modify the platform placement-domain count of an Azure resource.

Question 478

An application team requires two different Azure VM sizes to run as close together as possible. It creates a proximity placement group, but one size proves unavailable in any data center that supports the other. Which planning feature should have revealed this placement incompatibility?

  1. Increase the number of update domains in an existing availability set until the sizes appear
  2. Configure different availability zones for each VM and assume their physical proximity is guaranteed
  3. Create additional recovery points in Azure Backup for both VMs before retrying placement
  4. Specify intended VM sizes in the proximity placement group intent and verify that at least one data center supports all of them

Explanation

Correct Answer

D:

The optional intent field lists the VM sizes expected in the proximity placement group; a create or update succeeds only when a data center can support that combination. It prevents a design that cannot satisfy co-location.

Incorrect Answers

A:

Availability-set update domains control maintenance sequencing and their count does not increase the available hardware families in a colocated data center.

B:

Spreading VMs across zones provides failure isolation, not strict physical co-location or lowest latency. A proximity placement group has specific placement constraints.

C:

Backup recovery points protect workload data but do not affect where Azure compute capacity is physically available for VM allocation.

Question 479

Two VMs were originally created outside an availability set. An administrator creates a new availability set and plans to assign the existing VMs to it by editing their properties without recreating them. What constraint applies?

  1. Stop and deallocate each existing VM, then set availabilitySet.id on the same VM resource without recreation.
  2. Use Azure Resource Mover to attach both existing standalone VMs directly to the new availability set while preserving the existing VM resources
  3. Existing VMs cannot simply be moved into an availability set after creation; plan supported recreation or redeployment
  4. Move the standalone VMs into the availability set's resource group and assume the shared resource group establishes host fault-domain placement.

Explanation

Correct Answer

C:

Availability-set membership is determined during VM creation. Resilience migration requires a supported rebuild strategy, not a property toggle on an already deployed standalone VM.

Incorrect Answers

A:

Simply deallocating an existing standalone VM does not permit an in-place change to its availability-set membership. Placement is established at VM creation; supported conversion requires deleting and recreating the VM resource with correctly preserved disk and network resources.

B:

Resource Mover supports documented resource-migration scenarios; it does not provide an in-place switch that adds already-created standalone VM resources to an availability set. Supported recreation/redeployment is needed for that placement choice.

D:

Resource-group membership is a management boundary, not an availability-set relationship. Moving an existing VM into that resource group leaves its deployment placement unchanged; it still needs supported recreation to join the set.

Question 480

An administrator places two VMs in zones 1 and 2 and also keeps their dependent database on a single-zone VM in zone 1. A zone-1 incident still interrupts the application. What architectural weakness remains?

  1. Two VMs in different zones always make every connected service zone redundant
  2. Add a zone-redundant public load balancer to the two web VMs while leaving the database on its sole zone-1 VM
  3. Enable Azure Site Recovery only for the zone-1 web VM and leave the sole database VM without a tested cross-zone recovery arrangement
  4. The application still depends on a single-zone database despite spreading only the web-tier VMs

Explanation

Correct Answer

D:

Availability-zone resilience is end-to-end. Spreading one stateless tier cannot keep the service available if a required stateful dependency remains wholly inside the failed zone.

Incorrect Answers

A:

Zone selection affects those VM resources, not automatically the database or external dependencies. The single-zone database is still a failure point.

B:

A zone-redundant frontend can keep routing to healthy web instances after a zone loss, but it cannot make a database that exists only in zone 1 available. The required stateful backend still fails and interrupts the application; that dependency needs a cross-zone resilience design.

C:

Protecting the web VM helps recover a stateless tier, but the application still requires its stateful database in the failed zone. Without a resilient or recoverable database dependency and tested failover, the service remains unavailable despite other recovery features.

Microsoft Azure Administrator (AZ-104) Practice Tests

UP

SPECIAL OFFER: GET 10% OFF

This is ONE TIME OFFER

ExamSnap Discount Offer
Enter Your Email Address to Receive Your 10% Off Discount Code

A confirmation link will be sent to this email address to verify your login. *We value your privacy. We will not rent or sell your email address.

Download Free Demo of VCE Exam Simulator

Experience Avanset VCE Exam Simulator for yourself.

Simply submit your e-mail address below to get started with our interactive software demo of your free trial.

Free Demo Limits: In the demo version you will be able to access only first 5 questions from exam.