AZ-104 Monitor and Maintain Azure Resources Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✗

  Restore the entire VM to a new instance

  Why it's wrong here

  A full VM restore to a new instance creates an entirely new virtual machine from the selected recovery point, including its complete OS and data disks. This is far more scope than the single deleted configuration file requires, and it forces you to reconfigure the environment, potentially changing the VM name, IP address, and attached resources. Azure Backup's file recovery feature mounts only the needed disk or folder from a recovery point, letting you copy the deleted file back with no new VM provisioning or network impact.

  When this WOULD be correct

  If the question asked for recovering a VM after a catastrophic failure where the VM is completely corrupted or deleted, and you need to restore the entire VM to a new instance with the latest backup, this option would be correct.

• ✓

  Use file recovery from the backup item

  Why this is correct

  File recovery lets an administrator mount the backup content and copy back only the deleted file or folder. That is the most efficient option when the VM itself is healthy and only a small set of files needs to be recovered. It avoids downtime and avoids replacing the whole virtual machine or disk set.

• ✗

  Create a new storage account and copy the file from there

  Why it's wrong here

  Creating a new storage account provisions an Azure Storage resource for blobs, files, queues, or tables, none of which are mounted as the guest OS disk of the VM. Unless the deleted configuration file was originally copied to Azure Files or Blob Storage, a new storage account will not contain the file, and it cannot access the data stored inside the VM backup. The correct recovery path is to mount the backup's virtual hard disk through Azure Backup item-level recovery and copy the file directly from that VHD, not to create unrelated storage.

  When this WOULD be correct

  If the question asked for a method to store backup files for long-term retention or to copy a file from an existing storage account to another location, then creating a new storage account and copying the file would be correct.

• ✗

  Enable a resource lock on the VM

  Why it's wrong here

  A resource lock on the VM operates at the Azure Resource Manager control plane, preventing accidental deletion or modification of the VM resource itself; it has no effect on the file system inside the guest OS. Deleting a file through Windows Explorer or a process running in the VM is a data-plane operation that a lock does not intercept. Therefore, enabling a lock is a valid preventative measure for future deletions, but it cannot retrieve a file that was already removed from the VM's disk.

  When this WOULD be correct

  A question asks: 'An administrator wants to prevent accidental deletion of a critical production VM. Which action should be taken?' In that scenario, enabling a resource lock (specifically a delete lock) on the VM resource would be the correct answer.

Option-by-option analysis

Why each answer is right or wrong

Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The AZ-104 exam frequently reuses these exact scenarios with slightly different constraints.

Analysis generated from the official AZ-104blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”

Go deeper

Related to this question