AZ-104 Monitor and Maintain Azure Resources Practice Question
A company wants to enable backup for an Azure virtual machine and later restore the VM if needed. Which Azure service should the administrator use to manage the backup plan and restores?
⚠ Common exam trap
It's easy for candidates to confuse Azure Backup (which uses Recovery Services vault) with Azure Site Recovery (which also uses a Recovery Services vault but for disaster recovery replication, not backup), leading them to incorrectly select a different service or misunderstand the vault's dual role.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Recovery Services vault
The Recovery Services vault is the correct Azure service for managing backup plans and restores for Azure virtual machines. It provides a centralized management interface for configuring backup policies, performing on-demand backups, and initiating restore operations to recover VMs to a specific point in time.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Azure Monitor
Why it's wrong here
Azure Monitor is a telemetry platform that ingests metrics, activity logs, and resource diagnostics, then provides alerting, dashboarding, and the Log Analytics query engine for that data. It does not configure or store backup recovery points; at most, a vault's backup health and job status can be streamed into Azure Monitor for visibility. Since your goal is to enable backup and later restore a VM, Azure Monitor can only observe that process, never execute it.
When this WOULD be correct
Azure Monitor would be correct if the question asked about collecting and analyzing performance metrics, logs, or setting up alerts for a virtual machine, rather than backup and restore operations.
- ✓
Recovery Services vault
Why this is correct
A Recovery Services vault is the dedicated Azure entity that stores backup data and recovery points, and its console is where you configure VM backup policies, trigger on-demand backups, and restore VMs from a chosen recovery point. It uses the Azure Backup service under the hood, which coordinates the VM snapshot and vault-level storage. Because the restore workflow — including disk replacement and VM re-creation — is initiated from this vault, it is the only service among these that actually enables backup and restores for an Azure VM.
- ✗
Log Analytics workspace
Why it's wrong here
A Log Analytics workspace is a centralized repository for log and performance data collected from multiple sources, including Azure resources, and it is where you write Kusto queries to analyze that data. It does not host VM recovery points or snapshot metadata, and it cannot be used to restore a virtual machine from a backup. Even if backup reports are exported to a workspace, the actual backup and restore operations remain exclusively within the Recovery Services vault.
When this WOULD be correct
A Log Analytics workspace would be the correct answer for a question about collecting and analyzing diagnostic logs and metrics from Azure resources, such as monitoring VM performance or security events, where the administrator needs to query log data.
- ✗
Azure Front Door
Why it's wrong here
Azure Front Door is an application delivery and global load-balancing service that routes HTTP/HTTPS traffic and provides edge acceleration, caching, and SSL termination. It operates at the network edge and has no interaction with VM disk state, snapshot scheduling, or recovery point storage, so it cannot perform backup or restore actions. Its purpose is to improve availability and performance, whereas enabling backup and restoring a VM is a data-protection function handled by Azure Backup.
When this WOULD be correct
An administrator needs to provide high availability and low-latency access to a web application by distributing traffic across multiple Azure regions. Azure Front Door would be the correct service to configure global load balancing and failover.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The AZ-104 exam frequently reuses these exact scenarios with slightly different constraints.
✓Recovery Services vaultCorrect answer▾
Why this is correct
A Recovery Services vault is the dedicated Azure entity that stores backup data and recovery points, and its console is where you configure VM backup policies, trigger on-demand backups, and restore VMs from a chosen recovery point. It uses the Azure Backup service under the hood, which coordinates the VM snapshot and vault-level storage. Because the restore workflow — including disk replacement and VM re-creation — is initiated from this vault, it is the only service among these that actually enables backup and restores for an Azure VM.
✗Azure MonitorWrong answer — click to see why▾
Why this is wrong here
Azure Monitor is a monitoring and diagnostics service, not a backup and restore solution. It cannot manage backup plans or perform VM restores.
★ When this WOULD be the correct answer
Azure Monitor would be correct if the question asked about collecting and analyzing performance metrics, logs, or setting up alerts for a virtual machine, rather than backup and restore operations.
Why candidates choose this
Candidates may confuse Azure Monitor's ability to track VM health and performance with backup management, assuming it also handles data protection.
✗Log Analytics workspaceWrong answer — click to see why▾
Why this is wrong here
Log Analytics workspace is used for collecting and analyzing telemetry data, not for managing VM backup plans or restores. Backup and restore operations for Azure VMs are managed through a Recovery Services vault.
★ When this WOULD be the correct answer
A Log Analytics workspace would be the correct answer for a question about collecting and analyzing diagnostic logs and metrics from Azure resources, such as monitoring VM performance or security events, where the administrator needs to query log data.
Why candidates choose this
Candidates may confuse Log Analytics with backup because both involve data management and are part of Azure's monitoring and management suite, leading them to incorrectly assume Log Analytics can handle backup tasks.
✗Azure Front DoorWrong answer — click to see why▾
Why this is wrong here
Azure Front Door is a global load balancer and application delivery service, not a backup or restore solution. It does not provide backup plans or VM restore capabilities.
★ When this WOULD be the correct answer
An administrator needs to provide high availability and low-latency access to a web application by distributing traffic across multiple Azure regions. Azure Front Door would be the correct service to configure global load balancing and failover.
Why candidates choose this
Candidates may confuse Azure Front Door with Azure Backup or Site Recovery due to the word 'Front' implying a management interface, or they might think it offers some form of data protection through its global presence.
Analysis generated from the official AZ-104blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Go deeper
Related to this question
Learn chapter
Privileged Identity Management (PIM)
Key term
Azure virtual machine
An Azure virtual machine is a software-based emulation of a physical computer that runs in Microsoft's cloud, allowing you to deploy and manage applications without owning the hardware.
Key term
Recovery Services vault
A Recovery Services vault is a secure storage container in Microsoft Azure that holds backup data and replication settings for virtual machines, databases, and other cloud resources, enabling you to restore them if something goes wrong.
About these practice questions
Courseiva writes every AZ-104 question from scratch — 1,049 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-104 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-104 exam.