AZ-104 Monitor and Maintain Azure Resources Practice Question
Exhibit
Recovery Services vault: vault-prod-backup Protected item: vm-app01 Last successful backup: 2026-04-24 23:00 Recovery point type: Crash consistent Restore goal: quarterly validation test with no impact to production Available restore targets: same region, alternate resource group, alternate VNet
Based on the exhibit, the team wants to validate that a protected Azure VM can be recovered without affecting production. Which restore approach best meets the requirement?
⚠ Common exam trap
Many exam-takers confuse 'Replace existing VM' with a non-disruptive test, not realizing that this option directly modifies the production VM's disks and metadata, which would cause downtime and data loss if the test fails.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Restore the VM to a separate resource group or test environment from the latest recovery point.
Restoring the VM to a separate resource group or test environment from the latest recovery point creates an isolated copy of the VM that does not interact with production resources. This approach validates recoverability without risking production name conflicts, IP address overlaps, or accidental data modification. Azure Backup's restore-to-new-location option explicitly supports this isolation by allowing you to choose a different resource group, virtual network, and storage account.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Use Replace existing VM so the test uses the production name and disks.
Why it's wrong here
Using 'Replace existing' during restore would overwrite the production VM's disks with the backup copies, meaning the validation test is being performed against the live workload—any misconfiguration or boot failure would directly impact users and could cause data loss if the replacement blocks or detaches existing disks. This approach also defeats the purpose of a recovery test, because it risks destroying the current production state before confirming the backup is trustworthy, and it requires taking the VM offline, which violates the need for an isolated, non-disruptive validation. The correct practice is to restore to a new, separate VM so production remains untouched and the test can be discarded after verification.
When this WOULD be correct
This option would be correct if the requirement were to quickly restore a VM to its original state to fix a production issue, and the team explicitly wants to replace the existing VM with the backup data.
- ✓
Restore the VM to a separate resource group or test environment from the latest recovery point.
Why this is correct
Restoring the VM to a separate resource group or isolated test environment from the latest recovery point creates a fully independent copy of the VM, including its managed disks, network interfaces, and boot state, without any dependency on the production resource locks or network conflicts. This is the approved method for backup validation because it exercises the entire restore pipeline—reading the Recovery Services vault data, reconstructing the VM ARM template, and provisioning new resources—while leaving the original VM untouched. The team can then perform boot tests, application checks, and connectivity verifications on this restored instance, and tear it down without risk to production.
- ✗
Export a snapshot and assume that proves the VM can boot successfully.
Why it's wrong here
Exporting a snapshot only extracts a VHD or managed disk image at the block level; it does not validate that the VM's OS can boot, that the application services start correctly, or that the restored disk will attach to a functional VM configuration. A snapshot alone lacks the VM-level metadata (hardware profile, network interfaces, boot diagnostics) that Azure restore re-creates, so a successful export gives only superficial confidence and misses common failures like corrupted boot sectors, driver mismatches, or missing disk signatures that only appear during an actual boot. The requirement is to prove recoverability, and only a full restore test can do that.
When this WOULD be correct
This option would be correct if the requirement were to create a portable disk copy for manual attachment to another VM for data extraction, without needing to validate full VM boot or application functionality.
- ✗
Enable Site Recovery failover, because backup restore and failover are identical.
Why it's wrong here
Azure Site Recovery (ASR) is a disaster-recovery service that continuously replicates VM disks to a secondary region and performs failover, which is fundamentally different from backing up snapshots to a Recovery Services vault for point-in-time restore. A failover test in ASR validates replication health and the ability to run a replicated copy in the DR site, but it does not validate the integrity of the backup chain, the ability to restore to a specific recovery point, or the behavior of the actual backup restore process. Moreover, ASR and Azure Backup are separate services with different SLAs and data handling—backup restore and failover are not interchangeable, so enabling ASR would not satisfy the requirement to test that the protected VM's backups can be restored successfully.
When this WOULD be correct
If the requirement were to test disaster recovery failover in a non-production environment using an isolated test network, then enabling Site Recovery failover to a separate recovery site would be correct.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The AZ-104 exam frequently reuses these exact scenarios with slightly different constraints.
✓Restore the VM to a separate resource group or test environment from the latest recovery point.Correct answer▾
Why this is correct
Restoring the VM to a separate resource group or isolated test environment from the latest recovery point creates a fully independent copy of the VM, including its managed disks, network interfaces, and boot state, without any dependency on the production resource locks or network conflicts. This is the approved method for backup validation because it exercises the entire restore pipeline—reading the Recovery Services vault data, reconstructing the VM ARM template, and provisioning new resources—while leaving the original VM untouched. The team can then perform boot tests, application checks, and connectivity verifications on this restored instance, and tear it down without risk to production.
✗Use Replace existing VM so the test uses the production name and disks.Wrong answer — click to see why▾
Why this is wrong here
Using 'Replace existing VM' would overwrite the production VM with the restored data, which directly impacts production and violates the requirement to avoid affecting production.
★ When this WOULD be the correct answer
This option would be correct if the requirement were to quickly restore a VM to its original state to fix a production issue, and the team explicitly wants to replace the existing VM with the backup data.
Why candidates choose this
Candidates may think 'Replace existing VM' is a quick way to test recovery without realizing it actually modifies the production VM, confusing a restore operation with a non-disruptive validation test.
✗Export a snapshot and assume that proves the VM can boot successfully.Wrong answer — click to see why▾
Why this is wrong here
Exporting a snapshot only captures the disk state at a point in time, but does not validate that the VM can boot or that applications are functional; it lacks the restore and boot verification steps required to confirm recoverability without impacting production.
★ When this WOULD be the correct answer
This option would be correct if the requirement were to create a portable disk copy for manual attachment to another VM for data extraction, without needing to validate full VM boot or application functionality.
Why candidates choose this
Candidates may mistakenly believe that a snapshot is sufficient to prove recoverability, overlooking the need for a full restore and boot test to validate the backup's integrity and the VM's operability.
✗Enable Site Recovery failover, because backup restore and failover are identical.Wrong answer — click to see why▾
Why this is wrong here
Site Recovery failover is designed for disaster recovery and would impact production by failing over the VM, whereas the requirement is to validate recovery without affecting production.
★ When this WOULD be the correct answer
If the requirement were to test disaster recovery failover in a non-production environment using an isolated test network, then enabling Site Recovery failover to a separate recovery site would be correct.
Why candidates choose this
Candidates may confuse backup restore with Site Recovery failover, thinking both are interchangeable for recovery validation, but failover is intended for actual disaster scenarios, not non-disruptive testing.
Analysis generated from the official AZ-104blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Go deeper
Related to this question
Learn chapter
Managed Identities for Azure Resources
Key term
Storage account
A cloud storage account is a container that holds a set of cloud storage services and their data, providing a unique namespace and access policies for storing and managing unstructured data.
Key term
Azure Backup
Azure Backup is a cloud-based service from Microsoft that protects your data by creating and storing backups of files, folders, virtual machines, databases, and entire servers in the Azure cloud.
About these practice questions
This AZ-104 question is part of Courseiva's 1,049-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-104 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-104 exam.