Courseiva
Monitor and Maintain Azure ResourceseasyMultiple SelectObjective-mapped

AZ-104 Monitor and Maintain Azure Resources Practice Question

Which two settings can you configure in an Azure Backup policy for a virtual machine? Select two.

⚠ Common exam trap

Candidates often confuse Azure Backup policy settings with other Azure resource configurations, such as networking or IP addressing, because the exam often includes distractor options from different domains (networking, security, compute) to test whether you know the exact scope of a backup policy.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Backup schedule

An Azure Backup policy for a virtual machine includes a 'Backup schedule' setting that defines how often (e.g., daily or weekly) and at what time the backup job runs. This schedule controls the frequency of recovery point creation, which is essential for meeting recovery point objectives (RPOs).

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Backup schedule

    Why this is correct

    The backup schedule determines how and when the Azure Backup service initiates a recovery point creation for the protected resource. You can choose between daily and weekly frequencies, and specify the exact time of day or day of week for the backup job to run. This setting is a core policy component because it directly controls the recovery point objective (RPO) for your data protection SLA. Without a configured schedule, the policy cannot automate backup execution.

  • Retention period

    Why this is correct

    The retention period specifies how long recovered points are stored before being automatically purged by Azure Backup. It can be configured based on different tiers, such as daily, weekly, monthly, and yearly retention points, each with its own duration. This setting is essential for balancing compliance requirements against storage costs, as longer retention increases storage consumption and associated charges. It also determines how far back in time you can restore your data.

  • Virtual network peering

    Why it's wrong here

    Virtual network peering is a networking configuration that connects two Azure virtual networks, enabling traffic flow between them over the Microsoft backbone. It is configured at the virtual network level, not within an Azure Backup policy, and has zero impact on when or how backups are taken. Peering is often used to connect workloads across VNets for private communication, but it does not participate in the backup or restore lifecycle. Therefore, it is not a settable option in a backup policy.

    When this WOULD be correct

    In a question about configuring connectivity between virtual networks, such as 'Which setting allows resources in different VNets to communicate?', virtual network peering would be the correct answer.

  • Network security group rules

    Why it's wrong here

    Network security group (NSG) rules filter and allow or deny network traffic to and from Azure resources by source/destination IP, port, and protocol. They are applied at the subnet or network interface level to protect resources, not to govern backup policy settings. While NSGs can be configured to restrict access to a backup vault or to VM endpoints, they do not control the timing or retention of backup jobs. Hence, they are not among the configurable settings in an Azure Backup policy.

    When this WOULD be correct

    This option would be correct in a question about configuring network security for a VM, such as 'Which resource can you use to filter network traffic to and from Azure resources?'

  • Public IP allocation

    Why it's wrong here

    Public IP allocation refers to how an Azure public IP address is assigned to a resource, either dynamically or statically, and is managed under networking settings. It affects the inbound and outbound connectivity of a virtual machine or load balancer, but it is unrelated to backup operations. Azure Backup does not require or use public IP addresses to schedule or store recovery points, as backup data is transferred to Recovery Services vaults over encrypted channels. Thus, it cannot be modified through a backup policy.

    When this WOULD be correct

    In a question about configuring a virtual machine's network interface, 'Public IP allocation' would be correct when asking which settings can be configured for a NIC, such as static vs. dynamic allocation.

Option-by-option analysis

Why each answer is right or wrong

Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The AZ-104 exam frequently reuses these exact scenarios with slightly different constraints.

Backup scheduleCorrect answer

Why this is correct

The backup schedule determines how and when the Azure Backup service initiates a recovery point creation for the protected resource. You can choose between daily and weekly frequencies, and specify the exact time of day or day of week for the backup job to run. This setting is a core policy component because it directly controls the recovery point objective (RPO) for your data protection SLA. Without a configured schedule, the policy cannot automate backup execution.

Virtual network peeringWrong answer — click to see why

Why this is wrong here

Azure Backup policies for virtual machines only include backup schedule and retention period settings; virtual network peering is a networking configuration unrelated to backup policies.

★ When this WOULD be the correct answer

In a question about configuring connectivity between virtual networks, such as 'Which setting allows resources in different VNets to communicate?', virtual network peering would be the correct answer.

Why candidates choose this

Candidates may confuse backup policies with broader VM configuration settings, mistakenly thinking network-related options like peering are part of backup policy configuration.

Network security group rulesWrong answer — click to see why

Why this is wrong here

Network security group rules are not configurable within an Azure Backup policy; they control inbound/outbound traffic to the VM, not backup settings.

★ When this WOULD be the correct answer

This option would be correct in a question about configuring network security for a VM, such as 'Which resource can you use to filter network traffic to and from Azure resources?'

Why candidates choose this

Candidates may confuse backup policies with general VM configuration settings, thinking NSG rules are part of backup protection.

Public IP allocationWrong answer — click to see why

Why this is wrong here

Public IP allocation is a setting for network interfaces, not for Azure Backup policies. Backup policies only control backup schedule and retention, not IP configuration.

★ When this WOULD be the correct answer

In a question about configuring a virtual machine's network interface, 'Public IP allocation' would be correct when asking which settings can be configured for a NIC, such as static vs. dynamic allocation.

Why candidates choose this

Candidates may confuse backup policy settings with general VM configuration settings, mistakenly thinking that IP-related options are part of backup policies.

Analysis generated from the official AZ-104blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”

About these practice questions

This AZ-104 question is part of Courseiva's 1,049-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This AZ-104 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-104 exam.