AZ-104 Monitor and Maintain Azure Resources Practice Question
Your operations team needs to receive a Microsoft Teams or email notification whenever a production application becomes unavailable. You have already created an availability test in Azure Monitor. What should you configure next?
⚠ Common exam trap
Candidates often think an availability test alone sends notifications, but Azure Monitor requires an explicit alert rule linked to an action group to trigger any notification action.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
A metric or log alert rule linked to an action group
An availability test in Azure Monitor detects when an application is unavailable, but it does not inherently trigger notifications. To send a Teams or email alert, you must create a metric or log alert rule that references the availability test's results and link it to an action group, which defines the notification actions (e.g., email, SMS, webhook to Teams). This is the standard Azure Monitor workflow for proactive incident response.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
A metric or log alert rule linked to an action group
Why this is correct
A metric or log alert rule is the required notification mechanism because it continuously monitors Azure resource metrics or log queries and fires when a threshold or pattern is breached. When the rule activates, it invokes an action group that contains notification endpoints such as a Teams webhook, email, or SMS, thereby delivering the alert to your operations team. Without an action group, the alert rule exists but cannot reach anyone, so the two must be linked together to satisfy the requirement.
- ✗
A management group
Why it's wrong here
A management group is a hierarchical container used to organize multiple Azure subscriptions, apply policy or RBAC assignments at scale, and provide structured governance across an entire organization. It exists purely in the management and control plane, and it has no monitoring, alerting, or notification features that could send messages to a Teams channel. While it may help manage the environment where the operations team works, it cannot deliver the required alert notification.
When this WOULD be correct
When the question asks about organizing subscriptions into a hierarchy for applying governance policies or role-based access control across an enterprise, a management group would be the correct answer.
- ✗
A resource lock
Why it's wrong here
A resource lock is an Azure governance control that prevents accidental deletion or modification of a resource at the subscription, resource group, or resource level. It applies a deny effect on all management plane operations, but it produces no telemetry, emits no events, and has no integrated capability to send notifications such as Teams messages. Its purpose is to protect resources from unwanted changes, not to signal failures or operational issues, so it cannot meet the notification requirement.
- ✗
A private endpoint
Why it's wrong here
A private endpoint is a network interface that uses a private IP address from your virtual network to securely access an Azure service, such as a storage account or SQL database, over the Microsoft backbone. It is a connectivity feature designed to keep traffic off the public internet and does not evaluate resource health, perform log searches, or generate any form of alert. Since it has no relationship to monitoring or notification pipelines, it cannot send a Teams message to the operations team.
When this WOULD be correct
You need to ensure that an Azure App Service web app is accessible only from a specific virtual network, without exposing it to the public internet. In that case, you would configure a private endpoint for the web app.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The AZ-104 exam frequently reuses these exact scenarios with slightly different constraints.
✓A metric or log alert rule linked to an action groupCorrect answer▾
Why this is correct
A metric or log alert rule is the required notification mechanism because it continuously monitors Azure resource metrics or log queries and fires when a threshold or pattern is breached. When the rule activates, it invokes an action group that contains notification endpoints such as a Teams webhook, email, or SMS, thereby delivering the alert to your operations team. Without an action group, the alert rule exists but cannot reach anyone, so the two must be linked together to satisfy the requirement.
✗A management groupWrong answer — click to see why▾
Why this is wrong here
A management group is used for organizing and managing access, policies, and compliance across multiple Azure subscriptions, not for sending notifications about application availability.
★ When this WOULD be the correct answer
When the question asks about organizing subscriptions into a hierarchy for applying governance policies or role-based access control across an enterprise, a management group would be the correct answer.
Why candidates choose this
Candidates might confuse management groups with action groups or think that management groups can be used to configure notifications at scale, but they serve a different purpose in Azure governance.
✗A private endpointWrong answer — click to see why▾
Why this is wrong here
A private endpoint is used to securely connect to Azure services over a private network, not to send notifications for application unavailability. It does not trigger alerts or integrate with action groups.
★ When this WOULD be the correct answer
You need to ensure that an Azure App Service web app is accessible only from a specific virtual network, without exposing it to the public internet. In that case, you would configure a private endpoint for the web app.
Why candidates choose this
Candidates may confuse private endpoints with monitoring or notification features, thinking they provide a direct, secure channel for alerts, but they are actually a networking component for private connectivity.
Analysis generated from the official AZ-104blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Go deeper
Related to this question
Learn chapter
Managed Identities for Azure Resources
Key term
Availability
Availability is the measure of how often a system or service is operational and accessible when needed, typically expressed as a percentage of uptime.
Key term
Action group
An Action group is a collection of notification and automation settings that defines how an Azure Monitor alert responds when triggered, such as who gets emailed, which phone numbers get called, or which automated tasks run.
About these practice questions
This AZ-104 question is part of Courseiva's 1,049-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-104 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-104 exam.