Objective 2.019% of exam

Implement and Manage Storage

AZ-104 Practice Questions

This domain covers Azure storage accounts, Blob, Files, Queue, Table, and Disk storage. The exam tests your ability to choose account types, configure replication and access tiers, secure data with SAS and Azure AD, and manage lifecycle policies. Expect scenario-based questions on CLI, PowerShell, and portal implementations, plus troubleshooting connectivity and performance issues.

Full Practice Test →All Objectives

What this objective tests

AZ-104 Implement and Manage Storage — Key Topics

Create and secure storage with az storage account create, choosing replication (LRS/ZRS/GRS) and access tiers (Hot/Cool/Archive); configure SAS tokens, Azure AD RBAC, lifecycle policies, and azcopy for Blob and Files. Get replication and tier selection right.

Configure storage account replication, access tiers, and lifecycle management policies.
Generate and secure shared access signatures (SAS) with stored access policies.
Implement Azure Files shares and sync with Azure File Sync.
Manage Azure Blob storage containers, snapshots, and soft delete settings.

Common exam traps

Where candidates lose marks on Implement and Manage Storage

⚠Confusing LRS, ZRS, GRS, and RA-GRS replication options and their supported services and regions.
⚠Forgetting that a stored access policy is required to revoke a service SAS or account SAS.
⚠Assuming Azure File Sync requires a premium file share or that it supports SMB 1.0.

AZ-104 Implement and Manage Storage — Practice Questions

30 questions from this objective · 19% of your AZ-104 exam

Question 2mediummultiple choice

Implement and Manage Storage

AZ-104 Implement and Manage Storage — Key Topics

Where candidates lose marks on Implement and Manage Storage

AZ-104 Implement and Manage Storage — Practice Questions

What should the administrator do to prevent anyone from changing the retention settings after validation?

Exhibit

Based on the exhibit, which redundancy setting should you choose before deploying the storage account?

Exhibit

A backup archive must survive a regional outage, and engineers need to read the secondary copy if the primary region is unavailable. Which two redundancy options meet both requirements? Select two.

A workload must keep storage available if one availability zone in the primary region fails. Geo-failover is optional, but the account must still meet the zone-failure requirement. Which two redundancy options satisfy this? Select two.

A legal department stores scanned contracts that are kept for compliance and are almost never opened. They want the lowest storage cost, and it is acceptable if files take time to become available before download. Which blob tier should you choose?

An employee accidentally deletes several folders from an Azure file share. The administrator must recover only those folders from yesterday, not roll back the whole share. What should the administrator use?

A 180-GB blob is in the Archive tier. A legal team needs the file available later today and expects to open it several times during review. Which two actions should the administrator take? Select two.

A 180-GB blob was moved to the Archive tier last week. A legal team now needs the file available later today for repeated review, and they are willing to pay more to shorten the wait. Which action should the administrator take first?

An on-premises ERP server connected to Azure through a site-to-site VPN must read and write blobs in a storage account by using the storage account's private IP address. Public network access must be blocked. Which storage configuration should the administrator implement?

A development team wants redundancy within the primary region but does not need replication to a secondary region. Which two Azure storage redundancy options meet this requirement? Select two.

A partner must upload files to one blob container for 12 hours. You do not want to share the storage account key. Which two temporary access methods can be used? Select two.

A finance team stores documents in Azure Storage. The account must survive a failure of one availability zone in the primary region and also remain available if the primary region becomes unavailable. Which two replication options meet this requirement? Select two.

A records team stores blobs that are read often during the first month and then rarely accessed later, but the files must stay online the whole time. Which two access tiers should they use for the active and inactive data sets? Select two.

A media archive contains video files that are accessed only a few times per year, but they must remain online and readable immediately whenever an investigator requests them. Which blob access tier should the administrator choose to minimize storage cost?

A team wants an Azure Storage account to be reachable only from one subnet, but they do not want to use a private endpoint. Which two configurations should they use? Select two.

A company wants a storage account that keeps a readable copy in the secondary region and lets read operations continue if the primary region becomes unavailable. Which two redundancy options meet this requirement? Select two.

A company wants a single storage account for blob containers, Azure Files shares, and blob lifecycle management rules. Which two statements about the required account are true? Select two.

A storage account has public network access disabled. A VM in VNet-Prod must reach Blob storage by using the storage account name, but nslookup from the VM still returns the public endpoint address. What should the administrator do?

A backup job from an Azure service must write to a storage account that has the network firewall set to deny all public traffic. The team does not want to create a private endpoint for this workload. What should the administrator enable?

Your company plans to migrate on-premises file shares to Azure Files. You need to choose the appropriate Azure Files configuration for different scenarios. Which three of the following statements are correct? (Choose three.)

You are configuring Azure File Sync on a Windows Server to synchronize a file share hosted on an Azure storage account. You need to ensure that the server can connect to the storage account and that the sync service can access the file share. Which two actions should you perform? (Choose two.)

All AZ-104 Objectives

Implement and Manage Storage

AZ-104 Implement and Manage Storage — Key Topics

Where candidates lose marks on Implement and Manage Storage

AZ-104 Implement and Manage Storage — Practice Questions

What should the administrator do to prevent anyone from changing the retention settings after validation?

Exhibit

Based on the exhibit, which redundancy setting should you choose before deploying the storage account?

Exhibit

A backup archive must survive a regional outage, and engineers need to read the secondary copy if the primary region is unavailable. Which two redundancy options meet both requirements? Select two.

A workload must keep storage available if one availability zone in the primary region fails. Geo-failover is optional, but the account must still meet the zone-failure requirement. Which two redundancy options satisfy this? Select two.

A legal department stores scanned contracts that are kept for compliance and are almost never opened. They want the lowest storage cost, and it is acceptable if files take time to become available before download. Which blob tier should you choose?

An employee accidentally deletes several folders from an Azure file share. The administrator must recover only those folders from yesterday, not roll back the whole share. What should the administrator use?

A 180-GB blob is in the Archive tier. A legal team needs the file available later today and expects to open it several times during review. Which two actions should the administrator take? Select two.

A 180-GB blob was moved to the Archive tier last week. A legal team now needs the file available later today for repeated review, and they are willing to pay more to shorten the wait. Which action should the administrator take first?

An on-premises ERP server connected to Azure through a site-to-site VPN must read and write blobs in a storage account by using the storage account's private IP address. Public network access must be blocked. Which storage configuration should the administrator implement?

A development team wants redundancy within the primary region but does not need replication to a secondary region. Which two Azure storage redundancy options meet this requirement? Select two.

A partner must upload files to one blob container for 12 hours. You do not want to share the storage account key. Which two temporary access methods can be used? Select two.

A finance team stores documents in Azure Storage. The account must survive a failure of one availability zone in the primary region and also remain available if the primary region becomes unavailable. Which two replication options meet this requirement? Select two.

A records team stores blobs that are read often during the first month and then rarely accessed later, but the files must stay online the whole time. Which two access tiers should they use for the active and inactive data sets? Select two.

A media archive contains video files that are accessed only a few times per year, but they must remain online and readable immediately whenever an investigator requests them. Which blob access tier should the administrator choose to minimize storage cost?

A team wants an Azure Storage account to be reachable only from one subnet, but they do not want to use a private endpoint. Which two configurations should they use? Select two.

A company wants a storage account that keeps a readable copy in the secondary region and lets read operations continue if the primary region becomes unavailable. Which two redundancy options meet this requirement? Select two.

A company wants a single storage account for blob containers, Azure Files shares, and blob lifecycle management rules. Which two statements about the required account are true? Select two.

A storage account has public network access disabled. A VM in VNet-Prod must reach Blob storage by using the storage account name, but nslookup from the VM still returns the public endpoint address. What should the administrator do?

A backup job from an Azure service must write to a storage account that has the network firewall set to deny all public traffic. The team does not want to create a private endpoint for this workload. What should the administrator enable?

Your company plans to migrate on-premises file shares to Azure Files. You need to choose the appropriate Azure Files configuration for different scenarios. Which three of the following statements are correct? (Choose three.)

You are configuring Azure File Sync on a Windows Server to synchronize a file share hosted on an Azure storage account. You need to ensure that the server can connect to the storage account and that the sync service can access the file share. Which two actions should you perform? (Choose two.)

All AZ-104 Objectives