Free · No account needed · No credit card

AZ-104 Practice Test

1,170 questions with instant explanations, domain breakdown, and wrong-answer analysis. Built for the real exam.

Instant feedback after each answer
Full explanations included
Domain score breakdown
Real exam: 120 min
Pass mark: 700%

Sample questions with explanations

This is exactly what you see during practice — question, options, and a full explanation after you answer.

Q1Implement and Manage Virtual Networkingmedium
Full explanation →

A network team wants to send diagnostic logs from an Azure VPN gateway to a Log Analytics workspace. Which command should be used to configure this?

ASet-AzVpnGateway -LoggingConfiguration
New-AzDiagnosticSetting -ResourceId $gw.Id -WorkspaceId $ws.IdCorrect
CSet-AzVNetGateway -DiagnosticLogging
DAdd-AzLogAnalyticsSolution

The correct command is 'New-AzDiagnosticSetting -ResourceId $gw.Id -WorkspaceId $ws.Id' (option B) because it creates a diagnostic setting for the specified Azure resource (VPN gateway) to stream logs to the specified Log Analytics workspace. This is the Azure-native way to forwa…Read full explanation

Q2Implement and Manage Virtual Networkinghard
Full explanation →

Which statement best explains the value of enabling both centralized logging and strong access controls on network devices?

Access controls reduce unauthorized use, and centralized logging improves visibility and investigation.Correct
BBoth features do the exact same job, so using both is redundant.
CCentralized logging removes the need for any authentication.
DStrong access control makes log timestamps irrelevant.

Enabling centralized logging (e.g., syslog) on network devices provides a single, tamper-evident repository for all device events, which is critical for post-incident forensic analysis and compliance auditing. Strong access controls (e.g., RBAC, ACLs, 802.1X) directly prevent una…Read full explanation

Q3Implement and Manage Virtual Networkingmedium
Full explanation →

Which statement best explains why centralized logging is valuable in security operations?

It improves visibility by collecting events from multiple devices in one place for review and investigation.Correct
BIt guarantees that no unauthorized action can occur.
CIt replaces the need for NTP and authentication.
DIt automatically assigns IP addresses to monitoring systems.

Centralized logging aggregates security events (e.g., Windows Event Log, syslog, Azure Activity Log) from multiple sources into a single repository like Azure Log Analytics or a SIEM. This consolidation enables security analysts to correlate events across devices, detect patterns…Read full explanation

Untimed Practice

Answer at your own pace. Explanation and domain tag shown immediately after each answer.

Timed Practice

Countdown timer starts immediately. Results and domain scores shown at the end — just like the real exam.

Why practice here?

Full explanations on every question

Not just the right answer — you get exactly why each wrong option is wrong, so you learn the concept, not the answer.

Domain score breakdown

After each session see your score by exam domain so you know exactly where to focus study time.

100% free, forever

No subscription, no trial, no email wall. Start a session in under 10 seconds.

Exam-style questions

Scenario-based, precise wording, realistic distractors — written to match what you actually see on exam day.

← All AZ-104 questionsAZ-104 exam guideStudy guidePractice by domain