AZ-104 Deploy and Manage Azure Compute Practice Test 9 — 15 Questions

Question 1

Match each Azure VM access feature to the task it supports.

Accepted Answer

Azure Bastion: Provides secure RDP/SSH to VMs without public IP. Azure Bastion provides secure RDP/SSH without public IP; JIT restricts port access; NSGs filter traffic; Microsoft Entra ID authentication enables identity-based login; Private Link ensures private connectivity; Firewall offers centralized control.

Answer

Azure AD authentication: Provides secure RDP/SSH without public IP

Answer

Private Link: Manages firewall rules centrally

Question 2

Based on the exhibit, what should the administrator do to meet the performance requirement without rebuilding the server?

Accepted Answer

Resize the VM to a larger SKU that provides more vCPU and RAM.. Resizing the VM to a larger SKU with more vCPU and RAM directly addresses the performance requirement by providing additional compute and memory resources to the existing server without requiring a rebuild. This is the correct approach because the VM's current SKU is insufficient for the workload, and Azure allows resizing within the same hardware family or to a compatible series, preserving the OS and application state.

Answer

Attach an additional data disk and move the application binaries to it.

Answer

Redeploy the VM from a different marketplace image.

Answer

Place the VM in an availability set to spread processing across hosts.

Question 3

A container group must run an image from a private Azure Container Registry without embedding registry credentials in the deployment. The same authentication method should be reusable by future container groups, and the application must continue to work if the container group is recreated. Which identity approach should the administrator use?

Accepted Answer

A user-assigned managed identity assigned to the container group.. A user-assigned managed identity (B) is the correct approach because it is a persistent Microsoft Entra ID identity that can be pre-created and assigned to any number of container groups. It decouples the identity from the container group's lifecycle, so if the container group is recreated, the same identity can be reassigned without reconfiguration. The container group uses this identity to authenticate to ACR via Microsoft Entra ID token-based authentication, eliminating the need to embed registry credentials.

Answer

A system-assigned managed identity for the container group.

Answer

An ACR admin username and password stored in the container image.

Answer

A shared access signature token passed as an environment variable.

Question 4

Based on the exhibit, what should the administrator do next so the VM can use the extra capacity on the resized data disk?

Accepted Answer

Extend the partition or file system inside the VM.. After resizing a managed disk in Azure, the additional capacity is allocated at the Azure platform level but is not automatically available to the operating system. The administrator must extend the partition or file system inside the VM using tools like Diskpart (Windows) or fdisk/resize2fs (Linux) to make the new space usable. This is a standard post-resize step because the OS still sees the original partition boundaries.

Answer

Resize the managed disk again in Azure.

Answer

Detach the disk and attach it to another VM.

Answer

Create a new virtual machine from the disk.

Question 5

A data disk was accidentally deleted from a VM. You have a snapshot of that disk from before the deletion. What should you create first to restore the data with minimal impact to the VM's OS disk?

Accepted Answer

A new managed disk from the snapshot. A is correct because creating a new managed disk from the snapshot is the direct and minimal-impact method to restore the deleted data disk. Once the new managed disk is created, you can attach it to the existing VM without affecting the OS disk or requiring a VM rebuild. This approach avoids any downtime beyond the brief attachment operation.

Answer

A new virtual machine

Answer

A new availability set

Answer

A larger VM size

Question 6

A line-of-business app runs on a single Azure VM in a region that supports availability zones. The business wants the VM to keep running if one datacenter in the region becomes unavailable. Which deployment choice best meets this requirement?

Accepted Answer

Availability zone. An availability zone is a physically separate datacenter within an Azure region, with independent power, cooling, and networking. Deploying the VM to a specific zone ensures it remains operational if another zone's datacenter fails, meeting the requirement for single-VM resilience against a datacenter outage.

Answer

Availability set

Answer

Proximity placement group

Answer

Virtual machine scale set

Question 7

An application needs more data disk capacity, but the VM can keep using the same managed disk. Which two statements are true when you resize a managed data disk? Select two.

Accepted Answer

You can increase the managed disk size without redeploying the VM.. Azure managed disks support online resizing: you can increase the size of a managed data disk while the VM remains running, without any need to stop, deallocate, or redeploy the VM. This is possible because the underlying Azure storage infrastructure can extend the virtual hard disk (VHD) file without disrupting the VM's I/O operations. After the resize, the guest OS sees the new capacity, but the partition and filesystem must be extended manually.

Answer

You must create a brand-new VM before resizing the disk.

Answer

Resizing a disk always shrinks it back to a smaller size.

Answer

The VM size must always change whenever disk capacity changes.

Question 8

A container group runs a one-time import job that writes data to an external system. If the job succeeds, the container must stop and stay stopped. If the job fails, it should automatically retry by restarting. Which restart policy should the administrator choose?

Accepted Answer

OnFailure. The OnFailure restart policy is correct because it instructs Azure Container Instances (ACI) to restart the container only when the process exits with a non-zero exit code, indicating failure. For a one-time import job that must stop permanently on success (exit code 0) and retry on failure, OnFailure matches this exact behavior without unnecessary restarts.

Answer

Always

Answer

Never

Answer

Manual

Question 9

An operations team maintains a hardened Windows Server image with application prerequisites and monitoring tools already installed. They want to deploy future VMs from the same versioned image in multiple subscriptions and promote a new build only after testing. Which Azure feature should they use?

Accepted Answer

An Azure Compute Gallery image version. An Azure Compute Gallery (formerly Shared Image Gallery) allows you to store and manage multiple versions of a custom VM image, replicate them across regions, and share them across subscriptions. This enables the team to maintain a hardened, versioned image, deploy VMs from it in multiple subscriptions, and promote a new build only after testing by creating a new image version.

Answer

A managed disk snapshot created from one of the VMs

Answer

A custom script extension installed during VM provisioning

Answer

An availability set containing the VMs

Question 10

An administrator has already increased the size of a managed data disk attached to a running Windows VM. Azure now shows the larger disk size, but the application still cannot use the new capacity. What should the administrator do next?

Accepted Answer

Expand the partition or volume inside the guest operating system.. When a managed data disk attached to a running Windows VM is resized in Azure, the underlying virtual hard disk (VHD) expands, but the guest operating system does not automatically recognize the new unallocated space. The administrator must use the Disk Management tool (diskmgmt.msc) or the diskpart command to extend the volume or partition into the unallocated space. This is a standard operating system task, not an Azure control-plane action.

Answer

Detach the disk, shrink it, and reattach it to refresh the filesystem.

Answer

Convert the data disk to a shared disk so Windows can auto-detect the size increase.

Answer

Redeploy the virtual machine to apply the new disk size.

Question 11

You deploy a Windows VM with an ARM template. During the first boot, it must install IIS, copy application files from storage, and run a bootstrap script. Which Azure feature should you add to the deployment?

Accepted Answer

A VM extension such as Custom Script Extension. The Custom Script Extension (CSE) is the correct Azure feature to use because it allows you to execute PowerShell or Bash scripts on a Windows or Linux VM during first boot. By adding the CSE to your ARM template, you can automate the installation of IIS, copy application files from Azure Storage (using the `fileUris` property), and run a bootstrap script after the OS is provisioned, ensuring the VM is fully configured without manual intervention.

Answer

An availability set

Answer

A managed disk snapshot

Answer

A public IP address

Question 12

Based on the exhibit, which Azure feature should the administrator use to install software and run the bootstrap script during VM provisioning?

Accepted Answer

Azure VM Custom Script Extension. The Azure VM Custom Script Extension (CSE) is the correct feature because it allows the administrator to execute scripts (such as installing software or running a bootstrap script) during VM provisioning or after the VM is running. The extension downloads the script from Azure Storage or a public URL and executes it using the local system account, making it ideal for post-deployment configuration tasks.

Answer

A network security group rule allowing RDP from the Internet

Answer

An availability set with two fault domains

Answer

A managed disk snapshot restored as the operating system disk

Question 13

Based on the exhibit, which image source should the administrator use to deploy the same approved server build again?

Accepted Answer

A custom image stored in Azure Compute Gallery.. A custom image stored in Azure Compute Gallery (formerly Shared Image Gallery) is the correct choice because it allows the administrator to capture a generalized VM image that includes the exact OS configuration, applications, and settings of the approved server build. This image can then be used repeatedly to deploy identical VMs, ensuring consistency across deployments. Azure Compute Gallery supports versioning and replication across regions, making it the ideal solution for maintaining and distributing a standardized server build.

Answer

A public marketplace Windows Server image.

Answer

A snapshot of the VM operating system disk.

Answer

A temporary disk attached to the VM.

Question 14

Based on the exhibit, what should the administrator configure so the container group can pull the private image without storing registry credentials?

Accepted Answer

Assign a managed identity to the container group and grant it AcrPull on the registry.. Azure Container Groups support managed identities, which allow the container group to authenticate to Azure Container Registry (ACR) without storing any credentials. By assigning a system-assigned or user-assigned managed identity to the container group and granting it the AcrPull role on the registry, the container runtime can use Microsoft Entra ID authentication to pull the private image. This eliminates the need to store registry admin credentials or SAS tokens in the container configuration.

Answer

Store the ACR admin account password in a container environment variable.

Answer

Use a SAS token for the container image reference.

Answer

Place the registry in the same resource group as the container group.

Question 15

Based on the exhibit, which restart policy should be configured for the container group?

Accepted Answer

Never. The container group in the exhibit is configured with a restart policy of 'Never' because it is designed to run a batch job that should execute once and then terminate. Azure Container Instances supports three restart policies: Always, OnFailure, and Never. Since the task is a one-time job, 'Never' ensures the container does not restart after completion, which is the correct choice for a single-run workload.

Answer

Always

Answer

OnFailure

Answer

UnlessStopped