AZ-104 Deploy and Manage Azure Compute Practice Test 11 — 15 Questions

Question 1

An operations team must administer Windows and Linux VMs that have no public IP addresses. They want to connect from a browser without installing a VPN client and without exposing RDP or SSH to the internet. Which Azure service should they deploy?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Azure Bastion. Azure Bastion provides secure, seamless RDP and SSH connectivity to virtual machines directly from the Azure portal over TLS, without requiring a public IP address on the VM, a VPN client, or exposing RDP/SSH ports to the internet. It uses a hardened bastion host inside the virtual network, proxying connections via the browser, which satisfies the requirement for browser-based access without additional client software.

Answer

Azure Load Balancer

Answer

VPN Gateway point-to-site only

Answer

Application Gateway

Question 2

A managed data disk was accidentally deleted from a VM. A snapshot taken the day before is still available. Which two actions should the administrator perform to recover the data? Select two.

Accepted Answer

Create a new managed disk from the snapshot.. A snapshot is a point-in-time, read-only copy of a managed disk. To recover the data, you must create a new managed disk from the snapshot using the `az disk create --source` command or the Azure portal. This new disk will contain the exact data as it existed when the snapshot was taken.

Answer

Mount the snapshot directly as a data disk.

Answer

Redeploy the VM and reinstall the operating system.

Answer

Delete the snapshot after verifying it exists.

Question 3

You are deploying a new Windows VM and want it to start with the same custom software and configuration that already exist on an approved production VM. What should you use as the source for the new VM?

Accepted Answer

A custom image. A custom image captures the exact OS configuration, installed software, and settings from a source VM, allowing you to deploy new VMs with identical customizations. Unlike a marketplace image, which provides only a generic OS, a custom image preserves all modifications made to the approved production VM, including applications and system tweaks.

Answer

A marketplace image

Answer

A snapshot of the OS disk

Answer

An availability set

Question 4

Based on the exhibit, which deployment change best meets the resilience requirement for the application VMs?

Accepted Answer

Place each VM in a different availability zone and keep the load balancer in front.. Deploying each VM into a different availability zone ensures that the VMs are physically separated across distinct data centers within an Azure region, protecting against zone-level failures. The load balancer in front distributes traffic across the VMs, providing high availability even if one zone goes offline. This meets the resilience requirement by eliminating a single point of failure at the data center level.

Answer

Keep both VMs in the same availability set to spread them across update domains only.

Answer

Deploy both VMs into a proximity placement group to reduce latency between them.

Answer

Move the VMs into a single availability set and add more managed disks for redundancy.

Question 5

Match each image or placement term to the administrator need it supports.

Accepted Answer

Availability Set: protects against rack failures. Availability Set protects against rack failures; Availability Zone protects against datacenter failures; Proximity Placement Group reduces latency; Scale Set provides auto-scaling; VNet isolates network; Load Balancer distributes traffic.

Answer

Scale Set: distributes traffic

Answer

VNet: provides auto-scaling

Answer

Load Balancer: isolates network

Question 6

Based on the exhibit, which deployment choice should the administrator use to keep the application available if one datacenter in the Azure region fails?

Accepted Answer

Deploy the VMs across separate availability zones.. Availability zones are physically separate datacenters within an Azure region, each with independent power, cooling, and networking. Deploying VMs across separate availability zones ensures that if one datacenter fails, the application remains available in the other zone, providing resilience against datacenter-level failures.

Answer

Place both VMs in the same availability set.

Answer

Use a proximity placement group for both VMs.

Answer

Use a larger VM size for each virtual machine.

Question 7

An application on an Azure VM needs more CPU and memory. The administrator wants to keep the same OS disk and installed apps, without redeploying the server. What should be done?

Accepted Answer

Resize the VM to a larger size. Resizing the VM (Option A) allows you to change the VM size to a SKU with more CPU and memory while preserving the OS disk, installed applications, and all data. This operation can be performed on a stopped (deallocated) VM and does not require redeployment or reimaging, making it the correct choice for scaling up resources without disruption to the existing configuration.

Answer

Reimage the VM

Answer

Move the VM into a different availability zone

Answer

Create a new storage account

Question 8

Two legacy application VMs must survive planned maintenance and a single host failure. The vendor requires both VMs to stay in the same region, and a datacenter outage is not part of the requirement. What should the administrator use?

Accepted Answer

An availability set that places the VMs in separate fault and update domains.. An availability set protects against planned maintenance and single host failures by placing VMs in separate fault domains (different physical hardware) and update domains (different maintenance windows). This ensures that during planned Azure maintenance, only one VM is rebooted at a time, and if a host fails, only VMs in that fault domain are affected. Since the requirement specifies a single host failure (not a datacenter outage) and both VMs must stay in the same region, an availability set is the correct choice.

Answer

Availability zones with one VM in each zone.

Answer

A virtual machine scale set in a single zone.

Answer

A proximity placement group for both VMs.

Question 9

A team needs to deploy 25 identical Ubuntu VMs every month from source control. The deployment must be repeatable, and each VM must include a system-assigned managed identity at creation time. Which approach should be used?

Accepted Answer

A Bicep template deployment.. A Bicep template is an Infrastructure as Code (IaC) solution that declaratively defines Azure resources, including VMs with system-assigned managed identities. It ensures repeatable, version-controlled deployments of 25 identical Ubuntu VMs every month, meeting the requirements for automation and identity assignment at creation time.

Answer

Azure portal manual creation of each VM.

Answer

An Azure Policy assignment at the subscription level.

Answer

An Azure Monitor alert rule that triggers VM creation.

Question 10

Based on the exhibit, which OS disk option best fits a development VM that is rebuilt often and does not need the disk contents to survive deallocation?

Accepted Answer

An ephemeral OS disk.. An ephemeral OS disk is created on the local VM host and not stored in Azure Storage, so it provides lower latency and is automatically deleted when the VM is deallocated. This makes it ideal for development VMs that are rebuilt often and do not require disk persistence across deallocations.

Answer

A Standard HDD managed OS disk.

Answer

A premium managed data disk used as the OS disk.

Answer

A shared disk attached to multiple VMs.

Question 11

A team deploys a Linux VM that must read secrets from Azure Key Vault without storing any usernames, passwords, or client secrets on the VM. What should the administrator enable on the VM?

Accepted Answer

A system-assigned managed identity. A system-assigned managed identity enables the Linux VM to authenticate to Azure Key Vault without any stored credentials. Azure automatically creates a service principal in Entra ID for the VM, and the VM can obtain an access token from the Azure Instance Metadata Service (IMDS) endpoint (169.254.169.254) to authenticate to Key Vault. This eliminates the need to store usernames, passwords, or client secrets on the VM.

Answer

A storage account access key

Answer

A service endpoint on the VM subnet

Answer

A user account in Entra ID with a stored password

Question 12

A production application runs on three Azure VMs in the same region. The business requires the service to stay available if one entire datacenter in the region becomes unavailable because of a power or network outage. Which configuration best meets the requirement?

Accepted Answer

Deploy the VMs across availability zones.. Availability Zones are physically separate datacenters within an Azure region, each with independent power, cooling, and networking. By deploying VMs across three zones, the application can survive the failure of an entire datacenter because the other zones remain operational. This meets the requirement for high availability against a full datacenter outage.

Answer

Place the VMs in the same availability set.

Answer

Use a proximity placement group for the VMs.

Answer

Attach the VMs to the same Azure Load Balancer backend pool.

Question 13

A production application runs on three Azure VMs in a region that supports availability zones. The business wants the application to remain available if one datacenter in the region fails. What should the administrator use?

Accepted Answer

Availability zones. Availability zones are physically separate datacenters within an Azure region, each with independent power, cooling, and networking. Deploying the three VMs across different zones ensures that if one datacenter fails, the application remains available because the other zones continue to operate. This directly meets the requirement for resilience against a single datacenter failure.

Answer

An availability set

Answer

A managed disk snapshot

Answer

A proximity placement group

Question 14

An operations team must deploy 20 identical application VMs every sprint from source control and wants the deployment definition to be readable and repeatable. Which approach should they use?

Accepted Answer

Use a Bicep template stored in source control. B is correct because Bicep is a domain-specific language (DSL) for deploying Azure resources declaratively. Storing a Bicep template in source control ensures the deployment definition is readable (using concise syntax) and repeatable (via idempotent deployments), meeting the team's requirement for 20 identical VMs every sprint.

Answer

Manually create each VM in the Azure portal

Answer

Capture a screenshot of the portal settings for future reference

Answer

Use Azure Policy to create the VMs automatically

Question 15

The operations team wants 3 to 8 identical Linux VM instances, with more instances added when average CPU stays above 70 percent for 10 minutes and removed when load falls. Which three settings should be configured? Select three.

Accepted Answer

Use a virtual machine scale set for the identical application instances.. A virtual machine scale set (VMSS) is the correct Azure service for deploying and managing a group of identical, load-balanced Linux VMs that can automatically scale in and out based on demand. It supports autoscaling rules that adjust the instance count within a defined range, meeting the requirement for 3 to 8 identical instances with automatic addition when average CPU exceeds 70% for 10 minutes and removal when load falls.

Answer

Place the VMs in an availability set instead of using a scale set.

Answer

Clone the VM manually whenever CPU rises and remove clones by hand later.