AZ-104 Deploy and Manage Azure Compute Practice Question
After applying a custom image, a VM restarts to a black screen and never reaches the sign-in prompt. The administrator wants the fastest way to inspect the boot process without connecting to the guest OS. What should be used?
⚠ Common exam trap
Watch out — candidates often confuse Azure Advisor's 'diagnostic' recommendations with actual boot diagnostics, or assume Managed Identity can somehow 'log in' to inspect the OS, when only Boot Diagnostics provides host-level, out-of-band boot visibility.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Boot diagnostics
Boot diagnostics captures serial console output and screenshots of the VM during the boot process, allowing you to inspect boot failures like a black screen without needing to connect to the guest OS. This is the fastest method because it provides immediate, out-of-band access to boot logs and visual state, even when the OS is unresponsive.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Azure Advisor
Why it's wrong here
Azure Advisor is a personalized recommendation engine that aggregates Azure Monitor metrics, configuration inventory, and usage telemetry to suggest improvements in cost, performance, reliability, operational excellence, and security (e.g., underutilized VMs, expensive disks, unprotected resources). It performs periodic, aggregate-level evaluation of resource health and configurations, not on-demand forensic inspection of a single VM's boot sequence, and it does not record or replay console output or boot-time screenshots. A black screen immediately after applying a custom image is a transient boot-time failure that Advisor's batch-driven analysis neither correlates with the specific image event nor exposes as a diagnostic log.
When this WOULD be correct
When an administrator needs to review personalized recommendations to optimize Azure resources for high availability, security, or cost, and the question specifically asks for a service that provides proactive guidance based on Azure best practices.
- ✓
Boot diagnostics
Why this is correct
Boot diagnostics captures console output and screenshots from the VM startup process. When a VM fails before reaching the sign-in screen, this is often the fastest place to look for boot errors, driver issues, or configuration problems. It gives administrators visibility into what happened before the operating system completed startup, without requiring guest access.
- ✗
Managed identity
Why it's wrong here
Managed identities give an Azure VM a service-principal identity in Azure Active Directory, allowing code in the guest to authenticate to Azure Key Vault, Storage, or other Azure services via the instance metadata service (IMDS) token endpoint without storing secrets. This authentication mechanism exists purely for granting controlled access to external resources; it has no diagnostic telemetry, no access to the Hyper-V host, and no ability to read the VM's boot console or serial output. Therefore, while a managed identity might help the VM's OS contact services after a successful boot, it provides zero insight into a black screen caused by a faulty custom image.
When this WOULD be correct
An administrator needs to grant a VM access to Azure Key Vault secrets without using service principals or shared secrets. Managed identity would be the correct answer to enable secure authentication.
- ✗
Azure Policy
Why it's wrong here
Azure Policy is a governance and compliance service that evaluates Azure resource configurations against rules for allowed locations, tags, SKUs, or resource types, then audits, denies, or remediates noncompliant resources. It operates at the Azure Resource Manager control plane and cannot access the guest OS, so it never captures console output, serial logs, or boot screenshots. Even if a policy were misapplied to a VM, the black screen after custom-image boot is an OS-level startup failure that lies entirely outside Policy's evaluation scope.
When this WOULD be correct
An exam question asks: 'You need to ensure that all VMs in a subscription are deployed only in specific regions. Which feature should you use?' Azure Policy would be correct for enforcing such compliance rules.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The AZ-104 exam frequently reuses these exact scenarios with slightly different constraints.
✓Boot diagnosticsCorrect answer▾
Why this is correct
Boot diagnostics captures console output and screenshots from the VM startup process. When a VM fails before reaching the sign-in screen, this is often the fastest place to look for boot errors, driver issues, or configuration problems. It gives administrators visibility into what happened before the operating system completed startup, without requiring guest access.
✗Azure AdvisorWrong answer — click to see why▾
Why this is wrong here
Azure Advisor provides recommendations for best practices in cost, security, reliability, and performance, but it does not offer real-time boot process inspection or console output for a VM that fails to boot.
★ When this WOULD be the correct answer
When an administrator needs to review personalized recommendations to optimize Azure resources for high availability, security, or cost, and the question specifically asks for a service that provides proactive guidance based on Azure best practices.
Why candidates choose this
Candidates may confuse Azure Advisor's monitoring and recommendation capabilities with the ability to diagnose boot issues, assuming it can provide insights into VM startup problems.
✗Managed identityWrong answer — click to see why▾
Why this is wrong here
Managed identity is used for authenticating to Azure resources without storing credentials, not for inspecting VM boot processes or diagnosing boot failures.
★ When this WOULD be the correct answer
An administrator needs to grant a VM access to Azure Key Vault secrets without using service principals or shared secrets. Managed identity would be the correct answer to enable secure authentication.
Why candidates choose this
Candidates may confuse 'identity' with 'diagnostics' or think that managed identity can be used to access boot logs, but it has no role in boot process inspection.
✗Azure PolicyWrong answer — click to see why▾
Why this is wrong here
Azure Policy is used to enforce organizational standards and assess compliance, not to inspect boot processes or diagnose VM startup issues. It cannot provide boot-level logs or screenshots.
★ When this WOULD be the correct answer
An exam question asks: 'You need to ensure that all VMs in a subscription are deployed only in specific regions. Which feature should you use?' Azure Policy would be correct for enforcing such compliance rules.
Why candidates choose this
Candidates may confuse Azure Policy with diagnostic tools because both involve 'policy' or 'rules,' leading them to think it can help troubleshoot boot failures.
Analysis generated from the official AZ-104blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Go deeper
Related to this question
About these practice questions
Courseiva writes every AZ-104 question from scratch — 1,049 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-104 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-104 exam.