Microsoft AZ-104 Exam Dumps, Practice Test Questions

100% Latest & Updated Microsoft AZ-104 Practice Test Questions, Exam Dumps & Verified Answers!
30 Days Free Updates, Instant Download!

Microsoft AZ-104 Premium Bundle
$79.97
$59.98

AZ-104 Premium Bundle

  • Premium File: 606 Questions & Answers. Last update: Nov 5, 2026
  • Training Course: 132 Video Lectures
  • Study Guide: 458 Pages
  • Latest Questions
  • 100% Accurate Answers
  • Fast Exam Updates

AZ-104 Premium Bundle

Microsoft AZ-104 Premium Bundle
  • Premium File: 606 Questions & Answers. Last update: Nov 5, 2026
  • Training Course: 132 Video Lectures
  • Study Guide: 458 Pages
  • Latest Questions
  • 100% Accurate Answers
  • Fast Exam Updates
$79.97
$59.98

Microsoft AZ-104 Practice Test 86

Question 850

A Connection Monitor dashboard shows a test group in status Not Running after an engineer disabled it during scheduled maintenance. An incident playbook interprets this as packet-loss failure and pages the network operations team. What status interpretation and corrective action should the playbook apply?

  1. Not Running means RTT exceeded the warning threshold; increase the threshold without changing the test group.
  2. Not Running means exactly 100% of TCP checks failed; replace the destination IP to clear the failed state.
  3. Not Running means Azure Monitor action groups have no email receivers; add an email to start network probing.
  4. Not Running is the disabled test-group state, not evidence of a failed network path; re-enable the group before evaluating connectivity results.

Explanation

Correct Answer

D:

Microsoft defines Not Running for a Connection Monitor test disabled by disabling its test group. Treat this as an intentional monitoring suspension or configuration issue, not a sampled loss event. Re-enable the appropriate group after maintenance and await fresh test results before interpreting reachability.

Incorrect Answers

A:

Threshold exceedance is associated with a Warning or Fail evaluation when tests are running. A disabled group is not executing checks and cannot supply a meaningful RTT failure measurement regardless of threshold changes.

B:

When connectivity checks run and all fail, the test can produce Fail under the documented threshold logic. Not Running is instead the state for a disabled test group, so changing a destination would be the wrong first response.

C:

Action groups govern alert notifications, not whether Connection Monitor executes a test group. An empty receiver list may affect paging but cannot explain why the test itself is explicitly in the disabled state.

Question 851

An administrator must protect several ordinary Azure virtual machines in one region with scheduled backups and managed recovery points, without building a custom disk-copy script. Which Azure Backup resource is used for this supported VM backup workflow?

  1. A Recovery Services vault
  2. Take an unmanaged disk snapshot manually before every maintenance window
  3. Use Azure Site Recovery replication without configuring an Azure Backup vault
  4. Create a Backup vault intended for workload types other than standard Azure VM backup

Explanation

Correct Answer

A:

A Recovery Services vault stores and manages protected Azure VM recovery points together with assigned backup policies. It is the standard Azure Backup management resource for the VM protection workflow.

Incorrect Answers

B:

Manual snapshots may preserve a disk state but do not provide the managed policy-driven Azure VM backup and recovery-point lifecycle required for several protected machines.

C:

Site Recovery targets disaster recovery and failover continuity. It is not a substitute for scheduled Azure VM backup recovery points with retention policies.

D:

Different Azure Backup vault classes support different protected data sources. The ordinary Azure VM backup flow in this scenario uses a Recovery Services vault.

Question 852

An administrator wants to protect an Azure VM using Azure Backup and already has a Recovery Services vault in a different Azure region. The service reports the VM cannot be selected for ordinary regional VM backup with that vault. What should be checked?

  1. Switch the existing out-of-region vault to zone-redundant storage, which makes all Azure VMs in other regions eligible for its ordinary backup policy
  2. Use an appropriate Recovery Services vault in the same region as the VM for supported Azure VM backup
  3. Change the vault resource group’s metadata location to the VM’s region and assume the existing Recovery Services vault moves there automatically
  4. Enable Cross Region Restore on the out-of-region vault and assume it permits directly enrolling VMs from the paired region into primary Azure VM backup

Explanation

Correct Answer

B:

Azure VM backup uses regional vault/resource placement rules. The vault generally must reside in the VM’s region for that protection association.

Incorrect Answers

A:

Zone-redundant vault storage concerns replication within a region, not whether Azure VM protection can be enrolled from another region. Changing storage redundancy cannot overcome the supported vault/VM co-region eligibility rule. Protect this VM using an appropriate vault in the VM’s region.

C:

A resource group’s own location stores management metadata; moving or renaming that management container does not automatically relocate an existing vault resource or its backup data. The platform evaluates the vault resource region for VM protection. Create or use a suitable co-regional vault rather than editing resource-group metadata.

D:

Cross Region Restore allows appropriately protected recovery points to be restored in a secondary region when the vault meets its replication prerequisites. It does not override the primary backup requirement that a protected Azure VM be in the same region as its Recovery Services vault. Choose a vault in the VM’s region for ordinary protection.

Question 853

A backup operator worries that a compromised administrator might delete a VM’s backup items and recovery points immediately. The organization wants a recovery window to undo such deletions. Which vault protection feature is specifically relevant?

  1. Configure Multi-User Authorization with Resource Guard and assume it provides a period in which already-deleted recovery points can be restored
  2. Enable a CanNotDelete management lock on the vault and assume it substitutes for recoverable soft deletion of backup items
  3. Increase the backup policy's scheduled recovery-point retention but leave backup soft delete disabled
  4. Enable and retain Azure Backup soft delete according to the required protection mode and retention

Explanation

Correct Answer

D:

Soft delete can retain eligible deleted backup data for an additional period, providing a safeguard against accidental or malicious deletion. The exact mode and retention policy should be verified.

Incorrect Answers

A:

MUA/Resource Guard adds authorization barriers to critical backup operations, but it is not a retention window for undoing a deletion that has occurred. Soft delete provides the requested recovery opportunity.

B:

Management locks restrict some management-plane operations but are not the same as soft delete retention for deleted protected items and recovery points. The question asks to recover after deletion, not only prevent a control-plane deletion.

C:

Ordinary retention governs expected backup history; it does not itself give a reversal window after an administrator deletes backup items/recovery points. Soft delete specifically preserves recoverability after supported deletion actions.

Question 854

A backup administrator is creating a new Recovery Services vault for critical Azure VMs. Corporate policy requires a specific backup storage redundancy choice. The vault is empty now. Why should the administrator decide that choice before enabling VM backup?

  1. Pick locally redundant backup storage without reviewing the required cross-region resilience
  2. Vault redundancy options may be constrained after backup items are protected
  3. Turn on VM backup first and change replication settings after data accumulates
  4. Assume the VM backup policy retention interval automatically selects the requested replication tier

Explanation

Correct Answer

B:

Backup vault replication settings have lifecycle restrictions once protection is enabled. Reviewing the intended durability model while the vault is empty avoids later configuration limitations.

Incorrect Answers

A:

LRS is a valid lower-cost option but may not meet the corporate geo-recovery requirement; the vault is the right time to assess the choice.

C:

Some vault replication settings become fixed or restricted after protection begins, so postponement can conflict with the required enterprise durability standard.

D:

Retention dictates how long restore points remain; redundancy controls how vault data is stored and must be configured separately.

Question 855

A finance application is retired, and its VM will be removed. Compliance requires retaining the existing Azure Backup recovery points until their policy retention expires, but scheduled future backups should stop. Which protection change should the operator choose?

  1. Set the existing recovery-point retention to zero days and turn off the alert
  2. Stop backup while retaining the existing backup data
  3. Choose Stop backup and delete backup data because the workload is retired
  4. Disable the backup schedule by deleting the Recovery Services vault

Explanation

Correct Answer

B:

Stopping scheduled protection while retaining backup data preserves already created restore points under the applicable retention behavior and avoids further backups of a retired VM.

Incorrect Answers

A:

Removing retention defeats the explicit preservation requirement even though it stops the appearance of old backup data.

C:

Stopping with deletion destroys restore points that compliance specifically requires retaining until their retention period is satisfied.

D:

The vault cannot safely be destroyed while protected data must remain. This is broader and more destructive than pausing protection.

Question 856

A Recovery Services vault contains regulated VM backups. An operator holding backup administration rights must not be able to reduce retention or delete protected data without a separately authorized security administrator. Which Azure Backup security feature fits?

  1. Lock the VM resource group with CanNotDelete but give full vault-level backup deletion rights
  2. Enable vault soft delete without an independent critical-operation approval process
  3. Multi-user authorization using a Resource Guard with separate control ownership
  4. Give the backup operator Backup Contributor and rely on that same principal to approve deletion

Explanation

Correct Answer

C:

Azure Backup multi-user authorization uses Resource Guard to require another authorized principal for designated critical operations, separating destructive backup control from routine administration.

Incorrect Answers

A:

An ARM lock on the VM resource group does not supply a separate approval check on backup vault critical operations.

B:

Soft delete improves recovery after deletion, but by itself is not the requested multi-party authorization before retention reduction or protected data destruction.

D:

Granting the same actor broad vault rights does not establish a second authorization boundary for destructive protected operations.

Question 857

A ransomware-resistant backup design needs to prevent ordinary vault operators from shortening retention or deleting protected recovery points while compliance retention is active. A team has already enabled soft delete but wants stronger prevention. Which additional security feature directly addresses this?

  1. Add only a CanNotDelete ARM management lock to the backup vault resource
  2. Keep soft delete enabled but do not implement any additional preventive control
  3. Limit backup operators to Reader while leaving all other privileged accounts with normal destructive backup capability
  4. Enable and lock supported Azure Backup vault immutability after carefully validating retention policy

Explanation

Correct Answer

D:

Vault immutability prevents specified destructive backup operations during retention and can be locked. It complements soft delete, which provides recovery after deletion rather than blocking the deletion in the first place.

Incorrect Answers

A:

A resource deletion lock can protect the vault resource, but it does not enforce immutable recovery-point retention against all supported destructive backup operations inside the vault.

B:

Soft delete provides a recovery window after supported deletions, but the auditors require stronger prevention of premature deletion or retention reduction.

C:

Reducing one operator’s permissions is useful but does not enforce immutable retention against another compromised privileged vault operator.

Question 858

A production Azure VM needs several scheduled backup recovery points throughout each day rather than only one daily point. The team is enabling VM protection and choosing Standard or Enhanced policy. What should it evaluate?

  1. Standard policy, because it automatically performs hourly backups for every protected VM
  2. Increase the Standard policy daily retention period while keeping the daily backup frequency unchanged
  3. Enhanced Azure VM backup policy where supported, configured for multiple daily backups
  4. Enable VM backup instant restore and treat additional snapshots as automatically scheduled hourly vault backups

Explanation

Correct Answer

C:

Enhanced policy supports more frequent VM backup scheduling than Standard in supported scenarios. Selecting it with the required frequency supplies additional restore points within a day.

Incorrect Answers

A:

Standard VM backup policy ordinarily provides daily scheduling, not the multiple daily backups described. The chosen policy subtype must meet the frequency requirement.

B:

Longer retention preserves a daily recovery point for more days but does not produce several new recovery points within each day.

D:

Instant restore affects availability of snapshot-based restore, not a guarantee of multiple independently scheduled daily vault-protection jobs. Choose an Enhanced policy with the required schedule.

Question 859

A disaster recovery plan requires restoring a protected Azure VM in the vault’s paired region if the primary region is unavailable. The team has a Recovery Services vault and wants to know whether cross-region restore is available. What must it verify?

  1. Enable zone-redundant vault storage only and assume zone copies are independently accessible in the paired Azure region
  2. Enable the vault Cross Subscription Restore property and assume that this automatically replicates recovery points to a paired region
  3. The supported geo-redundant vault storage and Cross Region Restore feature eligibility and configuration
  4. Assume any locally redundant vault has an independently accessible paired-region recovery point

Explanation

Correct Answer

C:

Cross-region restore depends on the backup service’s supported regional replication and restore settings. Ordinary recovery points in a regionally scoped vault do not automatically guarantee paired-region restore capability.

Incorrect Answers

A:

ZRS distributes data across availability zones inside one region; it does not create the paired-region vault-tier replication that cross-region restore depends on. Zone resilience and disaster recovery into a different region solve different problems.

B:

Cross Subscription Restore controls supported restore destinations across subscriptions; it does not independently create secondary-region recovery points. Cross Region Restore requires the supported geo-redundant vault and eligible CRR configuration.

D:

LRS stores copies inside the primary region and does not inherently furnish a remote disaster recovery endpoint.

Question 860

An Azure VM is protected in a Recovery Services vault. The team wants to move the vault to another resource group without interrupting protection but is uncertain whether every protected workload supports that move. What should be established before performing the management operation?

  1. Check the official Recovery Services vault resource-move prerequisites for the protected workloads before attempting the move
  2. Move the vault by using the generic resource-group Move action without checking protected-item state or vault-move restrictions
  3. Move only the protected VM to the desired resource group and assume the Recovery Services vault automatically follows its dependent resource
  4. Export the vault backup policy and recreate the vault in another resource group while assuming historical recovery points transfer automatically

Explanation

Correct Answer

A:

A vault is not simply a passive resource-group label; it contains protected item and backup service relationships. Support for movement has workload and configuration restrictions that must be verified before the operator changes the management hierarchy.

Incorrect Answers

B:

Support for a Recovery Services vault move depends on specific prerequisites and protected workloads. A generic Move click without validating them can fail or interrupt the intended protection design.

C:

The vault is a separately managed resource with its own move requirements. Changing a protected VM resource-group association does not implicitly migrate the vault.

D:

Backup policies describe schedules and retention; exporting a policy does not move historical vault recovery points or satisfy resource-move requirements. Check the supported vault/workload conditions first.

Microsoft Azure Administrator (AZ-104) Practice Tests

UP

SPECIAL OFFER: GET 10% OFF

This is ONE TIME OFFER

ExamSnap Discount Offer
Enter Your Email Address to Receive Your 10% Off Discount Code

A confirmation link will be sent to this email address to verify your login. *We value your privacy. We will not rent or sell your email address.

Download Free Demo of VCE Exam Simulator

Experience Avanset VCE Exam Simulator for yourself.

Simply submit your e-mail address below to get started with our interactive software demo of your free trial.

Free Demo Limits: In the demo version you will be able to access only first 5 questions from exam.