After a bad script ran, one file at C:\Finance\Q4.xlsx was deleted from a Windows VM. The VM is still running, and the team wants only that file restored without replacing the operating system disk or restarting the VM. What should the administrator use from Azure Backup?

Restore the entire VM to a new instance so the deleted file comes back automatically.

This restores far more than needed and can disrupt a running workload unnecessarily.

Restore the managed disks and replace the existing disks on the running VM.

Disk restore is broader than required and would replace current data on the VM.

Use Azure Monitor logs to reconstruct the file because the backup vault stores telemetry.

Monitor logs are not a file recovery mechanism and cannot restore deleted file contents.

What does this AZ-104 question test?

Static NAT maps one inside address to one outside address.

What is the correct answer to this question?

The correct answer is: Perform a file-level restore from the recovery point and copy only the missing file back. — Azure Backup provides file-level restore for Windows and Linux VM backups when only one file or folder must be recovered. The recovery point is mounted so the administrator can copy back the missing file while leaving the VM's current disks, applications, and running state unchanged. This is the best fit when the workload is healthy except for a specific accidental deletion. It avoids the cost and disruption of full-VM or disk replacement. Why others are wrong: Restoring the whole VM or its disks is much broader than necessary and risks overwriting current good data. Azure Monitor is for telemetry and alerting, not for reconstructing deleted file content. None of those alternatives provides the targeted, low-impact recovery that file-level restore does.

What should I do if I get this AZ-104 question wrong?

Then try more questions from the same exam bank and focus on understanding why the wrong options are tempting.