Courseiva
Monitor and Maintain Azure ResourcesmediumMultiple ChoiceObjective-mapped

AZ-104 Monitor and Maintain Azure Resources Practice Question

A Recovery Services vault currently keeps daily Azure VM recovery points for 7 days. The business changes the requirement to keep daily recovery points for 30 days. Where should the administrator change the setting?

⚠ Common exam trap

Watch out — candidates often confuse backup retention settings with storage lifecycle management or Azure Policy, assuming that retention can be controlled at the disk or subscription level, when in fact it is exclusively managed through the backup policy linked to the Recovery Services vault.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

In the backup policy associated with the Recovery Services vault.

The retention duration for Azure VM backups is configured within the backup policy that is associated with the Recovery Services vault. By modifying the backup policy (either the default policy or a custom policy), the administrator can change the retention setting from 7 days to 30 days for daily recovery points. This policy directly controls how long backup snapshots are retained, and the change takes effect for all VMs linked to that policy.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • In the VM's network interface settings, because backup retention follows the NIC configuration.

    Why it's wrong here

    The network interface on a VM controls properties such as IP address assignment, DNS settings, network security group association, and accelerated networking. Backup retention is a property of the backup policy that governs how long recovery points are kept in the Recovery Services vault, and it is completely independent of any NIC configuration. Altering NIC settings may change network connectivity or performance, but it has no effect on the schedule, number, or retention duration of backup recovery points. Thus, retention cannot be modified through the VM's network interface settings.

    When this WOULD be correct

    If the question asked about configuring network security group (NSG) rules or IP address settings for a VM, then the NIC settings would be the correct place to change those configurations.

  • In the backup policy associated with the Recovery Services vault.

    Why this is correct

    Retention settings for Azure VM backups are controlled in the backup policy within the Recovery Services vault. The policy defines how often backups occur and how long recovery points are retained. To move from 7 days to 30 days of daily retention, the administrator updates the backup policy and applies it to the protected VM. This is the correct place because retention is a vault-level backup behavior, not a VM networking or storage setting.

  • In Azure Policy, by assigning a retention compliance initiative to the subscription.

    Why it's wrong here

    Azure Policy is an governance service that can audit or enforce organizational standards across resources using effects like deny, audit, append, or deployIfNotExists. While you could create a custom policy to deploy a backup policy with a specific retention period, that policy would only create or update the backup policy resource—it is not the actual configuration location for retention. The retention duration for Azure VM backups is always defined directly in the backup policy associated with the Recovery Services vault, not by assigning an Azure Policy initiative. In this scenario, the administrator must edit the existing backup policy in the vault itself, not apply a policy at the subscription level.

    When this WOULD be correct

    An exam scenario where an organization needs to enforce a minimum backup retention period across all subscriptions using a custom Azure Policy initiative that audits or deploys backup policies with specific retention settings.

  • In a storage account lifecycle rule attached to the VM disks.

    Why it's wrong here

    Storage account lifecycle rules apply only to blobs in a storage account, enabling automatic tiering or deletion based on age. Azure VM backup recovery points are stored in the Recovery Services vault, not in the storage account that holds the VM's disks, and managed disks are not directly subject to blob lifecycle policies. Even if you were using unmanaged disks, a lifecycle rule would affect the blob data of the disk, not the backup snapshots or recovery points in the vault. Therefore, configuring a lifecycle rule on the VM's storage account cannot change backup retention.

    When this WOULD be correct

    For a question about automatically deleting or archiving old VM disk snapshots stored in a storage account (not Recovery Services vault), a lifecycle rule would be the correct setting.

Option-by-option analysis

Why each answer is right or wrong

Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The AZ-104 exam frequently reuses these exact scenarios with slightly different constraints.

In the backup policy associated with the Recovery Services vault.Correct answer

Why this is correct

Retention settings for Azure VM backups are controlled in the backup policy within the Recovery Services vault. The policy defines how often backups occur and how long recovery points are retained. To move from 7 days to 30 days of daily retention, the administrator updates the backup policy and applies it to the protected VM. This is the correct place because retention is a vault-level backup behavior, not a VM networking or storage setting.

In the VM's network interface settings, because backup retention follows the NIC configuration.Wrong answer — click to see why

Why this is wrong here

Backup retention settings are configured in the backup policy, not in the VM's network interface. The NIC controls network connectivity, not backup retention.

★ When this WOULD be the correct answer

If the question asked about configuring network security group (NSG) rules or IP address settings for a VM, then the NIC settings would be the correct place to change those configurations.

Why candidates choose this

Candidates may confuse network interface settings with backup settings because both are part of VM configuration, or they might think retention is tied to the VM's network path.

In Azure Policy, by assigning a retention compliance initiative to the subscription.Wrong answer — click to see why

Why this is wrong here

Azure Policy can enforce compliance rules but does not directly configure backup retention for Recovery Services vaults; retention is set within the backup policy itself.

★ When this WOULD be the correct answer

An exam scenario where an organization needs to enforce a minimum backup retention period across all subscriptions using a custom Azure Policy initiative that audits or deploys backup policies with specific retention settings.

Why candidates choose this

Candidates may confuse Azure Policy's compliance enforcement capabilities with the operational setting of backup retention, thinking a policy can directly change retention duration without modifying the backup policy.

In a storage account lifecycle rule attached to the VM disks.Wrong answer — click to see why

Why this is wrong here

Azure VM backup retention is configured in the backup policy, not in storage account lifecycle rules. Lifecycle rules manage blob storage tiers or deletion, not Recovery Services vault backup retention.

★ When this WOULD be the correct answer

For a question about automatically deleting or archiving old VM disk snapshots stored in a storage account (not Recovery Services vault), a lifecycle rule would be the correct setting.

Why candidates choose this

Candidates may confuse backup retention with storage lifecycle management, thinking that extending retention requires a rule on the underlying disk storage rather than the backup policy.

Analysis generated from the official AZ-104blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”

About these practice questions

Courseiva writes every AZ-104 question from scratch — 1,049 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This AZ-104 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-104 exam.