AZ-104 Monitor and Maintain Azure Resources Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✓

  In the Recovery Services vault backup jobs

  Why this is correct

  The Recovery Services vault's Backup Jobs blade is the dedicated monitoring surface for Azure Backup operations, listing every scheduled or ad-hoc backup with its current status (InProgress, Completed, or Failed). This view allows you to filter by job type, time range, and protected item, and it provides detailed error messages for troubleshooting. It is the authoritative place to confirm that a backup operation has succeeded.

• ✗

  In the VM's network security group

  Why it's wrong here

  An NSG (network security group) is a filtering component that controls inbound and outbound network traffic to a VM or subnet using allow/deny rules. It does not interact with the Azure Backup service and therefore has no concept of backup job status, nor does it expose backup success or failure data. Checking an NSG can only verify network access, not backup operations.

  When this WOULD be correct

  If the question were about verifying that backup traffic is allowed through the network, or troubleshooting connectivity issues for backup, checking NSG rules would be correct. For example: 'An administrator configures Azure Backup and needs to ensure that the VM can communicate with the Azure Backup service. Where should the administrator verify that outbound traffic is permitted?'

• ✗

  In the VM's availability set

  Why it's wrong here

  An availability set is a logical grouping of VMs that distributes instances across fault domains and update domains to protect against hardware failures and planned maintenance. Its function is to improve resiliency and uptime, not to report on backup operations. The availability set contains no monitoring or job-history capabilities relevant to Azure Backup.

  When this WOULD be correct

  When the question asks about ensuring VM redundancy during planned maintenance or about distributing VMs across fault domains and update domains to meet an availability SLA, the availability set would be the correct answer.

• ✗

  In the subscription activity log only

  Why it's wrong here

  The subscription activity log records control-plane (Azure Resource Manager) operations such as creating a vault, enabling backup, or assigning permissions, but it does not capture the data-plane status of each backup job execution. While you might see a read of a backup configuration, backup job outputs (success/failure, duration, errors) are maintained inside the Recovery Services vault. Relying only on the activity log would miss the detailed and current backup job status that the vault provides.

  When this WOULD be correct

  If the question asked where to check for the deletion of a backup policy or the creation of a Recovery Services vault, the subscription activity log would be the correct place to audit such resource-level operations.

Option-by-option analysis

Why each answer is right or wrong

Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The AZ-104 exam frequently reuses these exact scenarios with slightly different constraints.

Analysis generated from the official AZ-104blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”

Go deeper

Related to this question