1. Home
  2. Microsoft
  3. AZ-104

Microsoft AZ-104 Online Practice Questions and Exam Preparation

AZ-104 Exam Details

  • Exam Code
    :AZ-104
  • Exam Name
    :Microsoft Azure Administrator
  • Certification
    :Microsoft Certifications
  • Vendor
    :Microsoft
  • Total Questions
    :852 Q&As
  • Last Updated
    :May 28, 2026

Microsoft AZ-104 Online Questions & Answers

  • Question 391:

    You create a private endpoint for an Azure SQL Database in VNetA.

    You also create a private DNS zone named privatelink.database.windows.net and link it to VNetA.

    You peer VNetA with VNetB. Virtual machines in VNetB must resolve the SQL Database FQDN to the private endpoint IP address.

    A. Create a public DNS A record for the SQL Database name that points to the private endpoint IP
    B. Link the private DNS zone to VNetB
    C. Create an NSG rule that allows UDP 53 from VNetB to VNetA
    D. Enable Azure DNS proxy on the virtual network gateway in VNetA

  • Question 392:

    Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

    You have an app named App1 that is installed on two Azure virtual machines named VM1 and VM2. Connections to App1 are managed by using an Azure Load Balancer. The effective network security configurations for VM2 are shown in the following exhibit.

    You discover that connections to App1 from 131.107.100.50 over TCP port 443 fail. You verify that the Load Balancer rules are configured correctly.

    You need to ensure that connections to App1 can be established successfully from 131.107.100.50 over TCP port 443.

    Solution: You modify the priority of the Allow_131.107.100.50 inbound security rule.

    Does this meet the goal?

    A. Yes
    B. No

  • Question 393:

    DRAG DROP

    You have an on-premises network that you plan to connect to Azure by using a site-so-site VPN.

    In Azure, you have an Azure virtual network named VNet1 that uses an address space of 10.0.0.0/16 VNet1 contains a subnet named Subnet1 that uses an address space of 10.0.0.0/24.

    You need to create a site-to-site VPN to Azure.

    Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

    NOTE: More than one order of answer choice is correct. You will receive credit for any of the correct orders you select.

    Select and Place:

  • Question 394:

    You have a .NET Core application running in Azure App Services. You are expecting a huge influx of traffic to your application in the coming days.

    When your application experiences this spike in traffic, you want to detect any anomalies such as request errors or failed queries immediately.

    What service can you use to assure that you know about these types of errors related to your .NET application immediately?

    A. Application Insights Search
    B. Log analytics workspace
    C. Client-side monitoring
    D. Live Metrics Stream in Application Insights

  • Question 395:

    You deploy Azure virtual machines to three Azure regions

    Each region contains a virtual network. Each virtual network contains multiple subnets peered in a full mesh topology.

    Each subnet contains a network security group (NSG) that has defined rules.

    A user reports that he cannot use port 33000 to connect from a virtual machine in one region to a virtual machine in another region.

    Which two options can you use to diagnose the issue? Each correct answer presents a complete solution.

    NOTE: Each correct selection is worth one point.

    A. Azure Virtual Network Manager
    B. IP flow verify
    C. Azure Monitor Network Insights
    D. Connection troubleshoot
    E. elective security rules

  • Question 396:

    HOTSPOT

    You need to deploy two Azure web apps named WebApp1 and WebApp2. The web apps have the following requirements:

    1. WebApp1 must be able to use staging slots 2. WebApp2 must be able to access the resources located on an Azure virtual network

    What is the least costly plan that you can use to deploy each web app? To answer, select the appropriate options in the answer area.

    NOTE: Each correct selection is worth one point.

  • Question 397:

    Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

    After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

    You have an app named App1 that is installed on two Azure virtual machines named VM1 and VM2.

    Connections to App1 are managed by using an Azure Load Balancer.

    The effective network security configurations for VM2 are shown in the following exhibit.

    You discover that connections to App1 from 131.107.100.50 over TCP port 443 fail.

    You verify that the Load Balancer rules are configured correctly.

    You need to ensure that connections to App1 can be established successfully from 131.107.100.50 over TCP port 443.

    Solution: You create an inbound security rule that allows any traffic from the Azure Load Balancer source and has a priority of 150.

    A. Yes
    B. No

  • Question 398:

    You have an Azure App Service plan named AdatumASP1 that uses the P2v2 pricing tier. AdatumASP1 hosts Ml Azure web app named adatumwebapp1. You need to delegate the management of adatumwebapp1 to a group named Devs.

    Devs must be able to perform the following tasks:

    1. Add deployment slots.

    2. View the configuration of AdatumASP1.

    3. Modify the role assignment for adatumwebapp1.

    Which role should you assign to the Devs group?

    A. Owner
    B. Contributor
    C. Web Plan Contributor
    D. Website Contributor

  • Question 399:

    HOTSPOT

    You are evaluating the name resolution for the virtual machines after the planned implementation of the Azure networking infrastructure.

    For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  • Question 400:

    You set the multi-factor authentication status for a user named [email protected] to Enabled.

    Admin1 accesses the Azure portal by using a web browser.

    Which additional security verifications can Admin1 use when accessing the Azure portal?

    A. a phone call, a text message that contains a verification code, and a notification or a verification code sent from the Microsoft Authenticator app
    B. an app password, a text message that contains a verification code, and a notification sent from the Microsoft Authenticator app
    C. an app password, a text message that contains a verification code, and a verification code sent from the Microsoft Authenticator app
    D. a phone call, an email message that contains a verification code, and a text message that contains an app password

Related Exams:

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Microsoft exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your AZ-104 exam preparations and Microsoft certification application, do not hesitate to visit our Vcedump.com to find your solutions here.