AZ-104 Practice Test 34 — 15 Questions

Question 1

A backup operations team exports Recovery Services vault logs to Log Analytics. They need a query that returns only failed backup jobs from the last 24 hours and displays just the vault name, protected item name, and error description. Which two KQL operators should the query include? Select two.

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

where. The `where` operator filters the Log Analytics data to include only rows where the backup job status equals 'Failed' and the timestamp falls within the last 24 hours. This is essential for narrowing down the dataset to the specific failed jobs the team needs.

Answer

summarize

Answer

join

Answer

extend

Question 2

You need to ensure that all new resources deployed to a subscription automatically receive a CostCenter tag with a default value if the tag is omitted during deployment. Which Azure governance feature should you use?

Accepted Answer

An Azure Policy with an append or modify effect. Azure Policy with an append or modify effect can automatically add a CostCenter tag with a default value to resources that are missing it during deployment. The append effect adds the tag and value at creation time, while the modify effect (using a 'addOrReplace' operation) can also update existing resources. This ensures governance compliance without manual intervention.

Answer

A resource lock

Answer

A management group lock

Answer

A custom RBAC role

Question 3

A storage account named stfinance01 contains critical data. Administrators must still be able to read and modify the data, but no one should be able to delete the storage account accidentally. What should you configure?

Accepted Answer

A CanNotDelete lock on stfinance01.. A CanNotDelete lock on stfinance01 prevents the storage account from being deleted while still allowing administrators to read and modify data. This lock type blocks delete operations at the resource level, but does not restrict read or write access, which is exactly what the requirement specifies.

Answer

A ReadOnly lock on stfinance01.

Answer

A policy assignment that audits storage accounts.

Answer

An NSG rule denying outbound traffic from the subnet.

Question 4

A production VM needs an email and SMS notification when CPU percentage stays above 80 percent for five minutes. Which two Azure Monitor components should the administrator configure? Select two.

Accepted Answer

Action group. A Metric alert rule monitors the VM’s CPU percentage metric and triggers when the condition (above 80% for 5 minutes) is met. An Action group defines the notification actions (email and SMS) that are executed when the alert fires. Together, they enable the required notification workflow.

Answer

Azure Policy assignment

Answer

Recovery Services vault

Answer

Log Analytics workspace

Question 5

You need to assign the same RBAC role to 15 administrators so they can manage backups for several virtual machines. You want to minimize ongoing administrative effort when membership changes. What should you use?

Accepted Answer

A Microsoft Entra group and a single role assignment to the group.. Assigning a single RBAC role to a Microsoft Entra group allows you to manage permissions centrally. When membership changes, you only need to add or remove users from the group, and the role assignment automatically applies to the new members. This minimizes ongoing administrative effort compared to managing individual role assignments.

Answer

A separate custom role assignment for each administrator.

Answer

A resource lock on every virtual machine.

Answer

A policy exemption for the administrators.

Question 6

Which two statements about Azure Backup soft delete are correct? Select two.

Accepted Answer

Deleted backup data is retained for a grace period. Azure Backup soft delete ensures that deleted backup data is not immediately purged but retained for a default grace period of 14 days. This allows recovery of accidentally deleted backup items, such as Recovery Services vault backup data, without data loss. Option A is correct because the grace period is a core feature of soft delete.

Answer

It permanently deletes backups immediately

Answer

It changes the VM to a different availability zone

Answer

It only applies to Azure Policy assignments

Question 7

Match each Recovery Services vault setting or feature to the behavior an administrator should expect after changing it.

Accepted Answer

Changing replication to GRS: Replicates all existing recovery points. Changing replication to GRS replicates all existing recovery points. Soft delete retains deleted data for 14 days. Changing storage replication after backup requires reconfiguration. Custom managed identity grants specific resource access. Diagnostics settings send logs to Log Analytics. Cross Region Restore enables restore in paired region with GRS.

Answer

Cross Region Restore: Sends logs to Log Analytics

Answer

Diagnostics settings: Enables restore in paired region with GRS

Question 8

Match each blob tier or protection feature to the correct description.

Accepted Answer

Hot: Optimized for frequent access, low latency, highest storage cost, no access cost.. The hot, cool, and archive tiers differ in access frequency and cost structure. Soft delete, immutable storage, and point-in-time restore are protection features that prevent data loss or tampering.

Answer

Hot: Optimized for infrequent access, moderate latency.

Answer

Cool: Optimized for rare access, high latency.

Question 9

A response team is designing notification paths for Azure Monitor alerts. Match each action group receiver or action to the outcome it provides.

Accepted Answer

Email: Sends email notifications to specified recipients.. Email/SMS/Push/Voice are direct notifications; ITSM connector creates tickets; Automation runbook runs scripts; Webhook sends to external services like Teams; Push notifications target mobile apps.

Answer

Automation runbook: Sends HTTP POST to an external service endpoint.

Answer

Webhook: Runs a script in Azure Automation.

Question 10

During a compliance review, the team must distinguish what each Azure Monitor object can and cannot do. Match each object to its primary operational scope.

Accepted Answer

Metrics: Collects numeric time-series data for performance and health.. Metrics collect numeric time-series data; Logs collect text logs for querying; Application Insights monitors web apps; Activity Log records subscription events; Diagnostic Logs capture resource logs; Service Health provides service incident info.

Answer

Activity Log: Captures resource-level logs from Azure resources.

Answer

Diagnostic Logs: Records subscription-level events and operations.

Answer

Service Health: Monitors web applications and provides diagnostics.

Question 11

An operations lead must choose the right Azure Monitor target for each requirement. Match each requirement to the Azure component that best satisfies it.

Accepted Answer

Metrics Explorer: Shows real-time metrics. Metrics Explorer shows real-time metrics; Action Groups define notification actions; Log Analytics Workspace stores and queries logs; Alert Rules define conditions; Workbooks provide visualizations.

Answer

Log Analytics Workspace: Provides visualizations

Answer

Workbooks: Stores and queries logs

Question 12

A VM was corrupted and the team wants to recover it from Azure Backup without using the original damaged disks. Which two restore targets are supported? Select two.

Accepted Answer

Create a new virtual machine. Azure Backup supports restoring a VM to a new virtual machine directly from the recovery point, which creates a new VM with the same configuration and data without using the original damaged disks. This is a common restore workflow when the original VM is corrupted or inaccessible.

Answer

Change the subscription automatically

Answer

Replace the Recovery Services vault name

Answer

Rebuild the virtual network

Question 13

You want to group subscriptions for Finance, HR, and Engineering so you can apply governance consistently at a higher level. What should you create?

Accepted Answer

Management groups. Management groups are the correct choice because they allow you to organize Azure subscriptions into a hierarchy for applying governance policies, role-based access control (RBAC), and cost management consistently across multiple subscriptions. By creating a management group hierarchy (e.g., Finance, HR, Engineering), you can assign Azure Policy initiatives or RBAC roles at the management group level, which are inherited by all subscriptions within that group. This provides a scalable and centralized governance model without needing to configure each subscription individually.

Answer

Resource groups

Answer