AZ-104 Monitor and Maintain Azure Resources Practice Question
A file server VM is corrupted after a bad change. The team needs to recover the whole machine to the latest recovery point, not just one file. Which restore workflow should they use?
⚠ Common exam trap
Candidates often confuse 'File and folder recovery' (which is for granular file-level restore) with full VM recovery, or mistakenly think modifying the backup policy can retroactively restore a corrupted VM.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Restore virtual machine
Azure Backup's 'Restore virtual machine' workflow creates a new VM from the latest recovery point, restoring the entire machine state including OS, applications, and data. This is the appropriate method when the goal is to recover the full VM after corruption, as it uses the VM-level restore point stored in the Recovery Services vault.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Restore virtual machine
Why this is correct
Restore virtual machine is the correct action because Azure Backup stores application-consistent recovery points of the entire VM, and the 'Restore VM' workflow redeploys a full virtual machine from a selected restore point. This directly repairs the corrupted VM by replacing its complete OS disk, data disks, and configuration, either by creating a restored VM or by performing an original location restore after stopping the affected VM. It is the only option that addresses the full corruption of the server.
- ✗
File and folder recovery
Why it's wrong here
File and folder recovery is insufficient because it only mounts a selected recovery point as an iSCSI/network file share, allowing you to copy individual files or folders back onto the VM. It cannot restore the Windows/BSD system state, registry, installed roles, boot files, or the underlying disk structure, so a badly corrupted VM would not be recovered to a bootable state. This workflow is meant for granular data retrieval, not whole-machine remediation.
When this WOULD be correct
This option would be correct if the question asked to restore a specific file or folder from a VM backup without recovering the entire VM, such as recovering a deleted document from a file server backup.
- ✗
Modify the backup policy
Why it's wrong here
Modifying the backup policy changes the future schedule, retention duration, or snapshot frequency for VM backups, and it has no effect on previously stored recovery points or on restoring the current corrupted machine. It cannot rebuild the lost or corrupted system files because it does not act on existing data; it only governs when new backups are taken and how long they are kept. Even a correctly adjusted policy would require an existing recovery point to restore from, so this option fails to address the immediate need.
When this WOULD be correct
If the question were 'The team wants to ensure backups are taken every 4 hours instead of daily, which workflow should they use?', then modifying the backup policy would be correct.
- ✗
Create an action group
Why it's wrong here
Creating an action group is unrelated to recovery because action groups are part of Azure Monitor and simply define who to notify (via email, SMS, webhook, etc.) and what actions to take, such as running an automation runbook or sending an alert, when a metric or log alert is triggered. They trigger notifications or automated response workflows, but they have no ability to roll back a virtual machine to a previous disk state or restore deleted or corrupted system files. This option is for alerting the team, not for fixing the corruption.
When this WOULD be correct
When the question asks: 'You need to send an email notification to the operations team whenever a backup job fails. Which Azure resource should you configure?' In that scenario, creating an action group and linking it to an alert rule is the correct answer.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The AZ-104 exam frequently reuses these exact scenarios with slightly different constraints.
✓Restore virtual machineCorrect answer▾
Why this is correct
Restore virtual machine is the correct action because Azure Backup stores application-consistent recovery points of the entire VM, and the 'Restore VM' workflow redeploys a full virtual machine from a selected restore point. This directly repairs the corrupted VM by replacing its complete OS disk, data disks, and configuration, either by creating a restored VM or by performing an original location restore after stopping the affected VM. It is the only option that addresses the full corruption of the server.
✗File and folder recoveryWrong answer — click to see why▾
Why this is wrong here
The question specifies recovering the whole machine to the latest recovery point, not just one file. File and folder recovery only restores individual files or folders, not the entire VM.
★ When this WOULD be the correct answer
This option would be correct if the question asked to restore a specific file or folder from a VM backup without recovering the entire VM, such as recovering a deleted document from a file server backup.
Why candidates choose this
Candidates may confuse the granular file recovery capability with full VM restore, or they might think file-level recovery is sufficient when the question explicitly requires full machine recovery.
✗Modify the backup policyWrong answer — click to see why▾
Why this is wrong here
Modifying the backup policy changes future backup schedules or retention, but does not recover an existing corrupted VM. The question asks for recovery, not configuration changes.
★ When this WOULD be the correct answer
If the question were 'The team wants to ensure backups are taken every 4 hours instead of daily, which workflow should they use?', then modifying the backup policy would be correct.
Why candidates choose this
Candidates may confuse backup policy management with recovery operations, thinking that adjusting the policy could somehow trigger a restore or fix the corruption.
✗Create an action groupWrong answer — click to see why▾
Why this is wrong here
An action group is used to define responses to Azure Monitor alerts (e.g., email, SMS, webhook), not for restoring a VM from backup. It does not initiate or manage recovery workflows.
★ When this WOULD be the correct answer
When the question asks: 'You need to send an email notification to the operations team whenever a backup job fails. Which Azure resource should you configure?' In that scenario, creating an action group and linking it to an alert rule is the correct answer.
Why candidates choose this
Candidates may confuse 'action' with 'restore action' or think that an action group can trigger a restore process, especially if they have limited experience with Azure backup and monitoring services.
Analysis generated from the official AZ-104blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Go deeper
Related to this question
Learn chapter
Managed Identities for Azure Resources
Key term
Azure Backup
Azure Backup is a cloud-based service from Microsoft that protects your data by creating and storing backups of files, folders, virtual machines, databases, and entire servers in the Azure cloud.
Key term
Recovery Services vault
A Recovery Services vault is a secure storage container in Microsoft Azure that holds backup data and replication settings for virtual machines, databases, and other cloud resources, enabling you to restore them if something goes wrong.
About these practice questions
This AZ-104 question is part of Courseiva's 1,049-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-104 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-104 exam.