100% Latest & Updated Microsoft AZ-104 Practice Test Questions, Exam Dumps & Verified Answers!
30 Days Free Updates, Instant Download!
Question 890
An Azure VM backup in a Recovery Services vault has an eligible vault-tier recovery point. The vault allows Cross Subscription Restore, the target subscription is in the same tenant and the restore operator has the required roles. The restore wizard nevertheless returns UserErrorCrossSubscriptionRestoreInvalidTargetSubscription. What target-side prerequisite should be checked?
- Register the Microsoft.RecoveryServices resource provider in the destination Azure subscription before retrying the supported restore
- Replace the target subscription by a new Azure availability set; provider registration is controlled by VM placement
- Remove the Azure Backup recovery point from vault storage and create a snapshot-only local backup
- Disable Cross Subscription Restore on the vault so that the wizard can select the target subscription automatically
Explanation
Correct Answer
A:Microsoft documents that UserErrorCrossSubscriptionRestoreInvalidTargetSubscription indicates the destination subscription is not registered with the Azure Recovery Services resource provider. Register the provider in the target subscription, confirm permissions and vault settings, and retry the cross-subscription restore. The chosen recovery point and tenant are already eligible in this scenario.
Incorrect Answers
B:Availability sets spread VMs across update and fault domains for availability. They are not a control-plane substitute for subscription-level resource provider registration. Changing VM placement will not make Azure Recovery Services accept a destination subscription that is missing the provider.
C:A snapshot-only recovery point cannot replace the eligible vault-tier recovery point for a cross-subscription destination. Deleting backup history risks data protection and does nothing to register required service providers in the destination subscription.
D:Disabling the vault’s Cross Subscription Restore capability explicitly prevents the requested operation to another subscription. The problem is not an overly permissive setting but a missing subscription-level registration; disabling CSR would add a second blocker rather than resolve the provider error.
Question 891
A team restores an Azure VM as a new VM from a recovery point recorded before it was resized. The original VM's current size was increased after that backup. The restored VM unexpectedly has the old SKU. What does this reveal about the restore configuration?
- Change the old recovery point's captured VM-size property after creating the restored VM
- Change the VM backup policy after the restore to reference the newer VM size and expect the historical recovery point to be rewritten
- Choose a Recovery Services vault with higher redundancy and assume the VM's recovered compute size changes to its newer SKU
- Expect the restored VM to use the source VM SKU captured at the chosen recovery point and resize the restored workload separately if necessary
Explanation
Correct Answer
D:An alternate-location VM restore uses the machine configuration stored with its selected backup point. Later SKU changes to the production VM do not retroactively modify that recovery point's VM size.
Incorrect Answers
A:Recovery points represent historical backed-up state and are not edited to reflect later VM mutations. Update the restored VM through a supported VM resize process instead.
B:Backup policies control scheduling and retention rather than retroactively editing a recovery point's captured VM configuration. Resize the restored VM as a separate Azure management operation.
C:Vault redundancy determines backup-data resilience, not the Azure VM SKU captured at an older recovery point. Restore uses the recorded VM configuration subject to support, and a later VM resize is separate.
Question 892
A company replicates a critical Azure VM to a secondary region using Azure Site Recovery. Before declaring the disaster recovery runbook ready, the team must test whether the replicated VM can start in an isolated test network without disrupting normal primary-region production. Which action is appropriate?
- Run an Azure Site Recovery test failover into the isolated test VNet
- Trigger an unplanned production failover immediately
- Run a planned production failover to the secondary region during normal business hours
- Inspect replication status only without booting any recovery VM
Explanation
Correct Answer
A:Test failover validates recovery-point usability and startup in an isolated test environment without committing the protected workload to a production failover. The team can then clean up the test.
Incorrect Answers
B:An unplanned production failover is a disaster operation that can interrupt or relocate the workload. It is not the safest way to test readiness while production must remain active.
C:A planned failover affects live workload placement and is not equivalent to an isolated non-disruptive test. The production environment must remain operational.
D:Healthy replication indicators do not establish that an application boots or works in the target network. Test failover provides practical validation.
Question 893
A data center move is scheduled for a known maintenance window. Production applications can be shut down cleanly, and the team wants to minimize data loss while intentionally switching replicated workloads to the recovery site. Which Site Recovery operation fits?
- A test failover in an isolated network as the production cutover itself
- Run Site Recovery reprotect against the source workload before any failover, expecting it to perform the planned production cutover automatically
- A planned failover following the documented shutdown and replication synchronization procedure
- An unplanned failover assuming the primary site is unreachable
Explanation
Correct Answer
C:Planned failover is used for deliberate cutover while the source is available. Coordination allows the service to synchronize data where supported before starting the workload at the destination.
Incorrect Answers
A:Test failover validates recovery without actually moving the protected production traffic. It is not a substitute for the real planned cutover.
B:Reprotect configures reverse replication or protection after a failover in supported recovery workflows; it does not initiate a clean planned failover from the still-running primary site. Use the scheduled planned-failover procedure with source shutdown and synchronization instead.
D:Unplanned failover is intended for an unexpected primary outage. It can accept a less recent recovery point when clean source coordination is unavailable.
Question 894
An organization failed over protected Azure VMs to a secondary region during an outage. The original region is restored, and operations wants to prepare for an eventual return without discarding changes made in the secondary region. Which Site Recovery step is important?
- Reprotect the recovered workloads so replication can be established in the reverse direction where supported
- Rename the secondary-region resource group and assume changes replicate backward automatically
- Delete all secondary VM disks before any reverse synchronization
- Disable Site Recovery permanently and rely on subscription Reader permissions
Explanation
Correct Answer
A:Reprotect prepares reverse replication after failover, helping capture changes made at the recovery site before a subsequent planned failback. Directly switching back without this step risks stale data.
Incorrect Answers
B:Changing a name does not establish a replication channel from the recovery region to the restored primary region.
C:Deleting the active recovered disks would destroy the very changes that need protection and could interrupt the production workload.
D:Reader access provides visibility, not replication. Disabling protection does not prepare data-consistent failback.
Question 895
A three-tier app has a database VM, an API VM, and a public web VM. During a Site Recovery failover, database services must start before the API, which must start before the web tier. Which configuration captures this orchestrated dependency?
- Enable Azure Site Recovery separately for each VM but leave their failovers uncoordinated
- Create a Site Recovery network mapping for all three tiers and assume it controls their boot order
- Put all protected VMs in a single recovery plan group with no sequencing or scripts
- An Azure Site Recovery recovery plan with ordered groups and appropriate automation
Explanation
Correct Answer
D:A recovery plan can group machines in an ordered failover sequence and invoke automation scripts or runbooks around recovery, allowing dependencies to come online in the intended order.
Incorrect Answers
A:Per-VM replication can recover machines, but it does not encode the database-to-API-to-web startup order across the dependency chain.
B:Network mappings choose target virtual networks, not a per-tier failover sequence with dependency automation.
C:A single parallel recovery group does not enforce the required database, then API, then web startup dependencies.
Question 896
An Azure Site Recovery replication policy protects VMs from East US to West US. A test failover brought up replicas on an unexpected target network, breaking application integration tests. What should the DR administrator review before another exercise?
- Change only the target VM size and leave the current Site Recovery VNet mapping intact
- Set source-to-target VNet network mapping and target subnet settings for the protected VMs
- Change the VM source subnet NSG without reviewing target network mappings
- Create an isolated test VNet but do not associate it with the Site Recovery test-failover configuration
Explanation
Correct Answer
B:Site Recovery network mapping and target subnet/IP configuration determine the replica network in the recovery region. Correcting mappings addresses misplaced test VMs without changing the source workloads.
Incorrect Answers
A:Sizing may affect recovery feasibility but does not determine which target VNet/subnet receives the replica NICs in a failover.
C:Source security rules do not select the recovery region network and may introduce a new production connectivity issue.
D:The mere existence of a VNet does not ensure replicas use it. Mapping and test-failover network selection must reference the intended target.
Question 897
An organization finishes Azure Site Recovery production failover and validates that the application runs correctly in the recovery region. They now want to finalize the recovery point selection rather than allowing another recovery point to be chosen during this failover. Which Site Recovery action is relevant?
- Run Reprotect in place of committing the selected failover recovery point
- Run a second unplanned failover just to save the current recovery-point choice
- Commit the failover after confirming the recovered workload is acceptable
- Run Reprotect before committing failover and assume it automatically commits the currently selected recovery point
Explanation
Correct Answer
C:Committing a failover finalizes the recovery decision for that operation. Reprotection is a separate later step that configures ongoing replication in the appropriate direction.
Incorrect Answers
A:Reprotect configures ongoing reverse-direction replication. It is not the action that finalizes the chosen failover point after the application is validated.
B:Another failover is a new recovery event rather than committing the already successful recovery decision.
D:Reprotect is a separate replication-direction operation performed after the recovered environment is accepted. Commit explicitly finalizes the chosen failover recovery point, and Reprotect doesn't replace that acceptance step.
Question 898
After a successful Site Recovery test failover, an administrator finds temporary drill VMs still running in an isolated recovery VNet. The organization wants to conclude the exercise without switching production or stopping normal replication. What should happen next?
- Commit a production failover to finalize the test
- Delete the primary production VM because the recovery VM now exists
- Disable all replication and remove the recovery plan immediately
- Run Cleanup test failover and record the test results
Explanation
Correct Answer
D:The test-failover cleanup operation removes test-only resources and records observations while leaving the production workload and normal protection workflow in place.
Incorrect Answers
A:A production commit is part of actual disaster-recovery cutover, not routine cleanup of an isolated drill. It would change live operations unnecessarily.
B:The original VM should continue serving production during a test. Deleting it would turn a controlled exercise into a real outage.
C:Disabling replication eliminates the future recovery capability and is not the supported post-test cleanup procedure.
Question 899
A backup administrator sees a long-term increase in failed scheduled protection jobs across several Azure workloads. The team wants one place to inspect backup health and failures rather than relying only on VM CPU metrics. Which Azure capability should it use?
- Azure Backup monitoring and alerts for backup jobs
- Monitor only VM CPU and memory availability for the protected machines
- Review Azure Advisor recommendations without inspecting backup job history
- Inspect only Recovery Services vault capacity metrics without examining job failures
Explanation
Correct Answer
A:Azure Backup monitoring surfaces backup job states and health findings, with suitable alerts and reporting for protection failures. It focuses on backup operations rather than unrelated machine performance.
Incorrect Answers
B:Healthy VM performance says little about whether backup jobs actually completed. A job can fail while the VM itself remains operational.
C:Advisor guidance can identify opportunities but does not replace operational backup-job failure status and configured backup health alerts.
D:Vault capacity consumption does not identify failed scheduled jobs across the protected workloads. The team needs backup-health and job-result telemetry.
Question 900
A large organization maintains many backup vaults and Recovery Services vaults. Executives want a consolidated report of backup jobs, protected instances, and usage trends across selected scopes rather than opening each vault individually. Which reporting path should the operations team evaluate?
- Export Azure subscription Activity Log records and treat those management events as a complete cross-vault backup job and protected-instance report
- Azure Backup Reports using the supported Log Analytics-based reporting configuration
- Use the VM Insights CPU and memory workbook to infer the backup status of every protected instance
- Export each backup policy definition and treat the configured schedule as proof that its historical backup jobs succeeded
Explanation
Correct Answer
B:Azure Backup Reports can consolidate supported protection, job, and usage information across configured vaults using the supported Log Analytics reporting data. Configure the relevant vault diagnostics, workspace and reporting scope; merely keeping backup policies is not a cross-vault analytics solution.
Incorrect Answers
A:The Activity Log captures resource-management events, not the protected-item and backup workload reporting model across selected vaults. It cannot substitute for the Backup Reports dataset needed for job, instance and usage trends.
C:Guest performance monitoring shows VM resource utilization, not the required backup job history, protected-item coverage or vault storage trends. A functioning VM can still have missed or failing backup jobs.
D:A backup policy describes intended scheduling and retention but cannot establish the actual outcome of individual jobs or historical protected-instance usage. Cross-vault oversight requires real protection telemetry and a reporting path, not policy definitions alone.
Microsoft Azure Administrator (AZ-104) Practice Tests