Sample Questions for Microsoft Azure Administrator AZ-104 Certification Exam

Hello Readers, here are some sample questions for Microsoft Azure Administrator AZ-104 Certification Exam.

You can answer the multiple-choice questions, verify the correct answer at the end, appear for the exam, and grab your certificate quickly.

Here goes the Quiz:

1. Which among the following is the correct Azure CLI cmdlet to create a Network Security Group (NSG)?
   a. az sec nsg update
   b. az nsg create
   c. az network nsg create
   d. az security nsg create
2. You are assigning Azure AD roles. Which role will allow the user to manage all the groups in your Team’s tenants and be able to assign other administrator roles? Select one.
   a. Global Administrator
   b. Password Administrator
   c. Security Administrator
   d. User Administrator
3. You would like to categorize resources and billing for different departments like IT and HR. The billing needs to be consolidated across multiple resource groups and you need to ensure everyone complies with the solution. What should you do? {Choose two to complete a solution}.
   a. Create tags for each department
   b. Create a billing group for each department
   c. Create an Azure policy
   d. Add the groups into a single resource group
   e. Create a subscription account rule
4. Which of the following best describes the format of an Azure Resource Manager template? Select one.
   a. A markdown document with a pointer table
   b. A JSON document with key-value pairs
   c. A TXT document with key-value pairs
   d. An XML document with element-value pairs
5. Your company has an existing Azure tenant named alpineskihouse.onmicrosoft.com. The company wants to start using alpineskihouse.com for its Azure resources. You add a custom domain to Azure. Now, you need to add a DNS record to prepare for verifying the custom domain. Which two of the following record types could you create?
   a. Add a PTR record to the DNS zone
   b. Add a TXT record to the DNS zone
   c. Add an MX record to the DNS zone
   d. Add d an SRV record to the DNS zone
   e. Add a CNAME record to the DNS zone
6. Your company is preparing to implement a Site-to-Site VPN to Microsoft Azure. You are selected to plan and implement the VPN. Currently, you have an Azure subscription, an Azure virtual network, and an Azure gateway subnet. You need to prepare the on-premises environment and Microsoft Azure to meet the prerequisites of the Site-to-Site VPN. Later, you will create a VPN connection and test it. What should you do? (Each answer presents part of the solution. Select three.
   a. Obtain a VPN device for the on-premises environment.
   b. Obtain a VPN device for the Azure environment.
   c. Create a virtual network gateway (VPN) and the local network gateway in Azure
   d. Create a virtual network gateway (ExpressRoute) in Azure
   e. Obtain a public IPv4 IP address without NAT for the VPN device
   f. Obtain a public IPv4 IP address behind NAT for the VPN device
7. Which load balancing strategy does the Application Gateway implement? Select one.
   a. Distributes requests to each available server in a backend pool, in turn, round-robin.
   b. Distributes requests to the server in the backend pool with the lightest load.
   c. Polls each server in the backend pool in turn and sends the request to the first server that responds.
   d. Uses one server in the backend pool until that server reaches 50% load, then moves to the next server.
8. Your company is building an app in Azure. The app has the following storage requirements:
   ->Storage must be reachable programmatically through a REST API.
   ->Storage must be globally redundant.
   ->Storage must be accessible privately within the company’s Azure environment.
   -> Storage must be optimal for unstructured data.
   Which type of Azure storage should you use for the app? Select one.
   a. Azure Data Lake store
   b. Azure Table Storage
   c. Azure Blob Storage
   d. Azure File Storage
9. You are researching Microsoft Azure for your company. The company is considering deploying Windows-based VMs in Azure. However, before moving forward, the management team has asked you to research the costs associated with Azure VMs. You need to document the configuration options that are likely to save the company money on their Azure VMs. Which options should you document? (Each answer presents part of the solution. Select four.
   a. Use HDD instead of SSD for VM storage
   b. Use unmanaged premium storage instead of managed standard storage
   c. Bring your own Windows custom images.
   d. Use different Azure regions
   e. Use the least powerful VMs that meet your requirements
   f. Place all VMs in the same resource group
   g. Bring your own Windows license for each VM
10. The objectives for Lab Scenario:
    In this lab, you will:
    -> Task 1: Provision of the lab environment
    -> Task 2: Create and configure an Azure Log Analytics workspace and Azure Automation-based solutions.
    -> Task 3: Review default monitoring settings of Azure virtual machines.
    -> Task 4: Configure Azure virtual machine diagnostic settings.
    -> Task 5: Review Azure Monitor functionality.
    -> Task 6: Review Azure Log Analytics functionality.

Now that you have reviewed the sample questions, check if your answers are correct or not. Remember, the passing percentage is 70% for you to get certified for the Azure Administrator Associate AZ-104 exam.

Correct Answers:

1. c.
Explanation: We can control network traffic to resources in a virtual network using a network security group. ‘az network nsg’ create is used to create a network security group.
2. a.
Explanation: Global administrator. Only the global administrator can manage groups across tenants and assign other administrator roles.
3. a & c.
Explanation: Create tags for each department and create Azure policy. You should create a tag with a key: value pair like department: HR. You can then create an Azure policy that requires the tag to be applied before a resource is created.
4. b.
Explanation: A JSON document with key-value pairs. An Azure Resource Template is a JSON document with key-value pairs.
5. b & c.
Explanation: By default, Azure will prompt you to create a custom TXT record in your DNS zone to verify a custom domain. Optionally, you can use an MX record instead. The result is the same. Other record types are not supported
6. a, c & e:
Explanation: The prerequisites for a Site-to-Site VPN are having a compatible VPN device on-premises, having a public IPv4 IP without NAT on the on-premises VPN device, and creating a VPN gateway and local network gateway in Azure. IPv6 is not supported for VPNs. ExpressRoute is a different setup and not part of a Site-to-Site VPN.
7. a.
Explanation: The Application Gateway distributes requests to each available server in the backend pool using the round-robin method.
8. c.
Explanation: Azure Blob Storage is optimal for unstructured data and meets the requirements for the company’s app. Azure Data Lake supports some of the requirements, such as unstructured data and REST API access. However, Azure Data Lake is geared for analytics workloads and is only available as locally redundant (multiple copies of data in a single Azure region).
9. a,d,e & g:
Explanation: In this scenario, you need to document which of the options presented are likely to save the company money for their Azure VMs. While this isn’t an exhaustive list, the correct money-saving configuration options are: Use HDD instead of SSD, use different Azure regions, use the least powerful VMs that meet your requirements, and bring your own Windows license (instead of paying for a license with the VM). The other options usually increase costs.
10. This is a lab scenario and you need to evaluate Azure functionality that would provide insight into the performance and configuration of Azure resources, focusing on Azure virtual machines. To accomplish this, you intend to examine the capabilities of Azure Monitor, including Log Analytics. Consult with your instructor on how to access the lab instructions and lab environment (if provided).

Also, more sample questions are coming up, so keep checking.

A comprehensive study guide to help you with your AZ-104 certification preparation is available to get you started.

Disclaimer: These questions are NOT appearing in the certification exam. I personally or CloudThat do not have any official tie-up with Microsoft regarding the certification or the kind of questions asked. These are my best guesses for the kind of questions to expect with Microsoft in general and with the examination.

Special thanks to Shyla for co-authoring this blog.

If you want to get trained on AZ-104, check out the course link here.

Check out the TestPrep material here.

Feel free to drop any questions in the comment box, I would love to address them. I hope you enjoyed the article. Best of luck!