AZ-104 ADMINISTRATOR

Domain Wise Practice

Choose a specific exam domain to focus your practice.

Manage Azure Identities and Governance

369 questions • 19 sets

Choose a Set

Implement and Manage Storage

173 questions • 9 sets

Choose a Set

Deploy and Manage Compute Resources

277 questions • 14 sets

Choose a Set

Implement and Manage Virtual Networking

156 questions • 8 sets

Choose a Set

Monitor and Maintain Azure Resources

112 questions • 6 sets

Choose a Set

Sample AZ-104 questions with explanations

Use these examples to check how the topics are tested. Read the explanation for every option you were unsure about, then start a scored practice set above.

Question 1 Deploy and manage Azure compute resources

Which Azure VM family is memory optimized?

  • ○ B-series
  • ○ D-series
  • ○ F-series
  • ✓ E-series
Answer: D. E-series
E-series is correct.
Question 2 Implement and manage storage

Which Azure service/feature is transactions?

  • ○ Operations
  • ○ Requests
  • ○ Queries
  • ✓ Transactions
Answer: D. Transactions
Transactions is correct.
Question 3 Implement and manage virtual networking

Which networking service network security group?

  • ✓ NSG
  • ○ VNet
  • ○ Load Balancer
  • ○ ExpressRoute
Answer: A. NSG
NSG: Network security group.
Question 4 Manage Azure identities and governance

Which Azure service/feature is AD Connect sync?

  • ○ AD FS
  • ○ Seamless SSO
  • ○ Cloud Sync
  • ✓ AD Connect Sync
Answer: D. AD Connect Sync
AD Connect Sync is correct.
Question 5 Monitor and maintain Azure resources

Which Azure service/feature is Log Profiles?

  • ✓ Log Profiles
  • ○ Activity Logs
  • ○ Audit Logs
  • ○ Diagnostics
Answer: A. Log Profiles
Log Profiles is correct.
Question 6 Deploy and manage Azure compute resources

Which Azure compute concept is fault domains?

  • ✓ Availability Set
  • ○ Availability Zone
  • ○ Proximity Placement Group
  • ○ Dedicated Host
Answer: A. Availability Set
Availability Set is correct.
Question 7 Implement and manage storage

Which Azure service/feature is operations?

  • ✓ Operations
  • ○ Queries
  • ○ Requests
  • ○ Transactions
Answer: A. Operations
Operations is correct.
Question 8 Implement and manage virtual networking

Which Azure networking service segment of a vnet and is used for ip range allocation and isolation?

  • ○ Azure Firewall
  • ○ Virtual Network (VNet)
  • ○ Network Security Group
  • ✓ Subnet
Answer: D. Subnet
Subnet: Segment of a VNet. Use: IP range allocation and isolation.
Question 9 Manage Azure identities and governance

An organization needs to delegate administration of a specific resource group to a vendor without giving access to other resources. Which approach is BEST?

  • ○ Add the vendor to the subscription owner role
  • ✓ Assign RBAC at the resource group scope
  • ○ Share the subscription administrator password
  • ○ Use management groups
Answer: B. Assign RBAC at the resource group scope
RBAC at the resource group scope limits permissions to only that resource group. Subscription owner access is too broad, sharing passwords violates security, and management groups are for organizing subscriptions.
Question 10 Monitor and maintain Azure resources Choose 2

You are designing diagnostic settings for an Azure virtual machine to send all available platform metrics and logs to a Log Analytics workspace for comprehensive monitoring. (Choose TWO). Which of the following data sources can be sent to Log Analytics by configuring the diagnostic settings on the VM resource?

  • ○ Guest OS performance counters
  • ✓ Boot diagnostics logs
  • ✓ VM serial console logs
  • ○ Windows Event Logs from the guest OS
  • ○ NSG flow logs for the VM's network interface
Answer: B. Boot diagnostics logs | C. VM serial console logs
B and C are correct. When configuring diagnostic settings on an Azure VM resource (not the guest OS), you can send platform-level logs and metrics. Boot diagnostics logs (B) and Serial console logs (C) are platform logs that can be routed to a Log Analytics workspace via the VM's diagnostic settings. A and D are incorrect. Guest OS performance counters and Windows Event Logs are guest-level diagnostics, which are collected by the Log Analytics agent (MMA/AMA) or the Azure Diagnostics extension, not by the resource-level diagnostic settings for the VM. E is incorrect. NSG flow logs are configured on the Network Security Group resource itself, not on the VM. While the logs can be sent to a Log Analytics workspace, this is done via the NSG's diagnostic settings, not the VM's.
Question 11 Deploy and manage Azure compute resources

Which Azure compute is interruptible?

  • ○ Dedicated
  • ○ Reserved
  • ✓ Spot VM
  • ○ Pay-as-you-go
Answer: C. Spot VM
Spot VM is correct. This concept is important for the certification exam and appears in scenario-based questions testing your understanding of when and how to apply it.
Question 12 Implement and manage storage

Which Azure storage tier is 30+ days infrequent?

  • ✓ Cool
  • ○ Archive
  • ○ Premium
  • ○ Hot
Answer: A. Cool
Cool is correct. This concept is important for the certification exam and appears in scenario-based questions testing your understanding of when and how to apply it.
Question 13 Implement and manage virtual networking

Which Azure route is custom collection?

  • ✓ Route table
  • ○ System route
  • ○ BGP
  • ○ UDR
Answer: A. Route table
Route table is correct.
Question 14 Manage Azure identities and governance

Which Azure service/feature is reserved instances?

  • ○ Savings Plan
  • ○ Spot
  • ○ PAYG
  • ✓ Reserved Instances
Answer: D. Reserved Instances
Reserved Instances is correct.
Question 15 Monitor and maintain Azure resources

Which Azure monitoring service query and analyze logs with kql?

  • ✓ Log Analytics
  • ○ Service Health
  • ○ Application Insights
  • ○ Azure Monitor Alerts
Answer: A. Log Analytics
Log Analytics: Query and analyze logs with KQL.

Open the full AZ-104 question-and-answer guide