AZ-104 Monitor and Maintain Azure Resources Practice Question
You need to view recommendations about underutilized virtual machines, security improvements, and cost-saving opportunities in Azure. Which service should you use?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Azure Advisor
Azure Advisor provides personalized best-practice recommendations related to reliability, security, performance, operational excellence, and cost.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Azure Advisor
Why this is correct
Azure Advisor is the correct service for viewing recommendations about underutilized virtual machines. It continuously analyzes your resource configuration and telemetry, such as CPU and network utilization, to provide personalized best practices across cost, security, reliability, and performance. For VMs that are idle or have low usage over a 14-day period, Advisor generates specific recommendations to right-size or shut down the machine, making it the appropriate tool for optimization guidance.
- ✗
Azure Policy
Why it's wrong here
Azure Policy is a governance service that enforces organizational rules and compliance by applying policies at resource creation or update time, such as requiring specific VM sizes or tags. While it can deny or audit non-compliant resources, it does not analyze historical CPU, memory, or network usage patterns to identify underutilized VMs. Its purpose is to ensure resources conform to standards, not to provide cost or performance optimization recommendations based on telemetry.
When this WOULD be correct
When a question asks how to enforce tagging rules, restrict resource types, or audit compliance with corporate policies across Azure subscriptions, Azure Policy is the correct service.
- ✗
Network Watcher
Why it's wrong here
Network Watcher is focused on network-level diagnostics, providing tools like IP flow verify, connection troubleshoot, NSG diagnostics, and packet capture to help identify connectivity and security rule issues. It does not evaluate compute resource utilization such as CPU or memory percentage, nor does it assess whether a VM is underutilized from a compute perspective. Its metrics and logs are network-centric and do not cover overall VM performance optimization.
When this WOULD be correct
When the question asks for a service to monitor network performance, diagnose connectivity issues, or capture network traffic between VMs in Azure.
- ✗
Azure Backup
Why it's wrong here
Azure Backup is a data protection service that performs scheduled backups of VMs and other workloads, enabling restore and disaster recovery capabilities. It tracks backup health, recovery points, and retention but does not monitor ongoing compute utilization or cost efficiency of running VMs. Since its objective is safeguarding data and ensuring recoverability, it is unrelated to analyzing VM utilization for optimization recommendations.
When this WOULD be correct
When the question asks for a service to protect data and restore it in case of failure or disaster, such as 'You need to ensure virtual machine data is recoverable after accidental deletion.'
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The AZ-104 exam frequently reuses these exact scenarios with slightly different constraints.
✓Azure AdvisorCorrect answer▾
Why this is correct
Azure Advisor is the correct service for viewing recommendations about underutilized virtual machines. It continuously analyzes your resource configuration and telemetry, such as CPU and network utilization, to provide personalized best practices across cost, security, reliability, and performance. For VMs that are idle or have low usage over a 14-day period, Advisor generates specific recommendations to right-size or shut down the machine, making it the appropriate tool for optimization guidance.
✗Azure PolicyWrong answer — click to see why▾
Why this is wrong here
Azure Policy is used to enforce organizational standards and assess compliance, not to provide recommendations on underutilized resources, security improvements, or cost savings.
★ When this WOULD be the correct answer
When a question asks how to enforce tagging rules, restrict resource types, or audit compliance with corporate policies across Azure subscriptions, Azure Policy is the correct service.
Why candidates choose this
Candidates may confuse policy enforcement with advisory recommendations, thinking that policies can also suggest improvements, but Azure Policy only enforces rules, not provides proactive advice.
✗Network WatcherWrong answer — click to see why▾
Why this is wrong here
Network Watcher provides network monitoring and diagnostics (e.g., packet capture, topology), not recommendations on underutilized VMs, security improvements, or cost savings.
★ When this WOULD be the correct answer
When the question asks for a service to monitor network performance, diagnose connectivity issues, or capture network traffic between VMs in Azure.
Why candidates choose this
Candidates may confuse network monitoring with general Azure monitoring and assume Network Watcher offers broader recommendations, or they think 'underutilized VMs' relates to network usage.
✗Azure BackupWrong answer — click to see why▾
Why this is wrong here
Azure Backup is a service for backing up data and workloads, not for providing recommendations on underutilized resources, security improvements, or cost savings.
★ When this WOULD be the correct answer
When the question asks for a service to protect data and restore it in case of failure or disaster, such as 'You need to ensure virtual machine data is recoverable after accidental deletion.'
Why candidates choose this
Candidates may confuse Azure Backup with Azure Advisor because both are related to management and optimization, but Backup focuses on data protection rather than recommendations.
Analysis generated from the official AZ-104blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Go deeper
Related to this question
Learn chapter
Managed Identities for Azure Resources
Key term
Azure Advisor
Azure Advisor is a free, personalized cloud consultant that continuously analyzes your Azure resources and provides best practice recommendations to optimize for reliability, security, performance, operational excellence, and cost.
Key term
Security
Security in IT is the practice of protecting systems, networks, and data from unauthorized access, damage, or theft.
About these practice questions
This AZ-104 question is part of Courseiva's 1,049-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-104 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-104 exam.