1. Home
  2. Microsoft
  3. AZ-104

Microsoft AZ-104 Online Practice Questions and Exam Preparation

AZ-104 Exam Details

  • Exam Code
    :AZ-104
  • Exam Name
    :Microsoft Azure Administrator
  • Certification
    :Microsoft Certifications
  • Vendor
    :Microsoft
  • Total Questions
    :852 Q&As
  • Last Updated
    :May 28, 2026

Microsoft AZ-104 Online Questions & Answers

  • Question 201:

    You have an Azure subscription named Subscription1 that contains an Azure virtual network named VNet1. VNet1 connects to your on-premises network by using Azure ExpressRoute.

    You plan to prepare the environment for automatic failover in case of ExpressRoute failure.

    You need to connect VNet1 to the on-premises network by using a site-to-site VPN. The solution must minimize cost.

    Which three actions should you perform? Each correct answer presents part of the solution.

    NOTE: Each correct selection is worth one point.

    A. Create a local site VPN gateway.
    B. Create a VPN gateway that uses the VpnGw1 SKU.
    C. Create a VPN gateway that uses the Basic SKU.
    D. Create a gateway subnet.
    E. Create a connection.

  • Question 202:

    Your company has serval departments. Each department has a number of virtual machines (VMs).

    The company has an Azure subscription that contains a resource group named RG1.

    All VMs are located in RG1.

    You want to associate each VM with its respective department.

    What should you do?

    A. Create Azure Management Groups for each department.
    B. Create a resource group for each department.
    C. Assign tags to the virtual machines.
    D. Modify the settings of the virtual machines.

  • Question 203:

    HOTSPOT

    You have an Azure subscription that contains the virtual networks shown in the following table.

    The subnets have the IP address spaces shown in the following table.

    You plan to create a container app named contapp1 in the East US Azure region.

    You need to create a container app environment named con-env1 that meets the following requirements:

    1. Uses its own virtual network.

    2. Uses its own subnet.

    3. Is connected to the smallest possible subnet.

    To which virtual networks can you connect con-env1, and which subnet mask should you use? To answer, select the appropriate options in the answer area.

    NOTE: Each correct selection is worth one point.

  • Question 204:

    You have an Azure subscription that contains a virtual machine named VM1.

    You plan to deploy an Azure Monitor alert rule that will trigger an alert when CPU usage on VM1 exceeds 80 percent.

    You need to ensure that the alert rule sends an email message to two users named User1 and User2.

    What should you create for Azure Monitor?

    A. an action group
    B. a mail-enabled security group
    C. a distribution group
    D. a Microsoft 365 group

  • Question 205:

    You have an on-premises network.

    You have an Azure subscription that contains three virtual networks named VNET1, VNET2, and VNET3. The virtual networks are peered and connected to the on-premises network. The subscription contains the virtual machines shown in the following table.

    You need to monitor connectivity between the virtual machines and the on-premises network by using Connection Monitor.

    What is the minimum number of connection monitors you should deploy?

    A. 1
    B. 2
    C. 3
    D. 4

  • Question 206:

    HOTSPOT

    Your network contains an Active Directory domain. The domain contains a user named User1. The domain is synced to Azure Active Directory (Azure AD) as shown in the following exhibit.

    Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic NOTE: Each correct selection is worth one point.

  • Question 207:

    Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

    After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

    You deploy an Azure Kubernetes Service (AKS) cluster named AKS1.

    You need to deploy a YAML file to AKS1.

    Solution: From Azure Cloud Shell, you run the kubectl client.

    Does this meet the goal?

    A. Yes
    B. No

  • Question 208:

    HOTSPOT

    You have an Azure subscription named Subscription1. You have a virtualization environment that contains the virtualization server in the following table.

    The virtual machines are configured as shown on the following table.

    All the virtual machines use basic disks. VM1 is protected by using BitLocker Drive Encryption (BitLocker). You plan to use Azure Site Recovery to migrate the virtual machines to Azure. Which virtual machines can you migrate? To answer, select the appropriate options in the answer area.

    NOTE: Each correct selection is worth one point.

  • Question 209:

    You have an Azure subscription that contains the resources shown in the following table.

    LB1 is configured as shown in the following table.

    You plan to create new inbound NAT rules that meet the following requirements:

    1. Provide Remote Desktop access to VM1 from the internet by using port 3389.

    2. Provide Remote Desktop access to VM2 from the internet by using port 3389.

    What should you create on LB1 before you can create the new inbound NAT rules?

    A. a frontend IP address
    B. a load balancing rule
    C. a health probe
    D. a backend pool

  • Question 210:

    Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.

    Your company has an Azure Active Directory (Azure AD) subscription.

    You want to implement an Azure AD conditional access policy.

    The policy must be configured to require members of the Global Administrators group to use Multi-Factor Authentication and an Azure AD-joined device when they connect to Azure AD from untrusted locations.

    Solution: You access the Azure portal to alter the grant control of the Azure AD conditional access policy.

    Does the solution meet the goal?

    A. Yes
    B. No

Related Exams:

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Microsoft exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your AZ-104 exam preparations and Microsoft certification application, do not hesitate to visit our Vcedump.com to find your solutions here.