A release team needs to deploy the same hardened Windows image to VMs in three regions. They must keep approved versions, replicate images to each region, and be able to roll back to an earlier approved version without uploading a new VHD. What should they use as the image source?

A managed disk snapshot captured from one reference VM

Snapshots capture disk state, but they do not provide managed multi-region image versioning.

A single unmanaged VHD stored in a storage account

A VHD is harder to govern and does not provide the same versioning or regional distribution model.

A custom script extension that installs the operating system settings after deployment

Extensions configure software after deployment, but they are not image sources for the VM OS itself.

What does this AZ-104 question test?

Static NAT maps one inside address to one outside address.

What is the correct answer to this question?

The correct answer is: An Azure Compute Gallery image definition with image versions — Azure Compute Gallery is the right source because it lets the team define a reusable image, publish versioned builds, and replicate those versions to multiple regions. That gives the release team a clean rollback path to a previous approved version without re-uploading the base VHD. It is the preferred enterprise approach when the same hardened image must be deployed repeatedly at scale. Why others are wrong: A snapshot is useful for point-in-time recovery, but it does not give structured image lifecycle management across regions. A single unmanaged VHD is operationally fragile and lacks native version governance. A custom script extension can add software after provisioning, but it cannot replace the operating system image source or its versioning model.

What should I do if I get this AZ-104 question wrong?

Then try more questions from the same exam bank and focus on understanding why the wrong options are tempting.