Microsoft Azure-104 Practice Questions: Test Your Azure Administrator Knowledge!

The AZ-104: Microsoft Azure Administrator certification exam is a must-have for IT professionals seeking to manage cloud services, including storage, networking, computing, and security, in Microsoft Azure. Whether you’re just starting or finalizing your exam prep, this list of 25 exam-oriented multiple-choice questions (MCQs) will help you assess your readiness and identify key focus areas.

Q1. Which Azure service is primarily used to host virtual machines?

A. Azure Functions
B. Azure Virtual Machines
C. Azure Kubernetes Service
D. Azure DevOps
Correct Answer: B. Azure Virtual Machines
Explanation: Azure Virtual Machines allow users to deploy and manage virtualised Windows or Linux servers in Azure.

Q2. What is the default replication strategy of Azure Storage Accounts?

A. GRS
B. ZRS
C. LRS
D. RA-GRS
Correct Answer: C. LRS
Explanation: Locally redundant storage (LRS) is the default replication method that copies data three times within a single region.

Q3. Which tool is used to manage Azure resources from the command line?

A. Azure DevOps
B. Power BI
C. Azure CLI
D. Azure AD Connect
Correct Answer: C. Azure CLI
Explanation: Azure CLI is a command-line tool that enables users to manage Azure resources using scripting.

Q4. Which role allows full access to all Azure resources, including user management?

A. Contributor
B. Owner
C. Reader
D. User Access Administrator
Correct Answer: B. Owner
Explanation: The Owner role has full access to manage all resources, including assigning roles to others.

Q5. What is the purpose of Azure Resource Groups?

A. Isolate virtual networks
B. Apply compliance policies
C. Organize and manage related resources
D. Provide identity authentication
Correct Answer: C. Organize and manage related resources
Explanation: Resource groups logically group Azure resources for easier management, deployment, and monitoring.

Q6. Which service is best for hosting a modern web app with built-in scaling?

A. Azure Web Apps
B. Azure Blob Storage
C. Azure SQL
D. Azure DevTest Labs
Correct Answer: A. Azure Web Apps
Explanation: Azure Web Apps is a PaaS service for hosting scalable web applications without managing infrastructure.

Q7. Which Azure service provides firewall protection for your virtual network?

A. Azure Front Door
B. Azure Firewall
C. Network Security Group (NSG)
D. Application Gateway
Correct Answer: B. Azure Firewall
Explanation: Azure Firewall is a managed network security service that provides traffic filtering for virtual networks.

Q8. How is access to Azure resources controlled?

A. Access Control List (ACL)
B. Azure RBAC
C. Group Policy Objects
D. Azure DNS
Correct Answer: B. Azure RBAC
Explanation: Role-Based Access Control (RBAC) defines who can access resources and what actions they can perform.

Q9. What is the Azure service used for identity and access management?

A. Azure Key Vault
B. Azure Active Directory
C. Azure DevOps
D. Azure App Gateway
Correct Answer: B. Azure Active Directory
Explanation: Azure AD provides identity management and access control capabilities across Azure services.

Q10. Which Azure solution automates recurring cloud tasks, such as VM shutdowns?

A. Azure Monitor
B. Azure Scheduler
C. Azure Logic Apps
D. Azure Automation
Correct Answer: D. Azure Automation
Explanation: Azure Automation allows you to automate cloud tasks such as starting or stopping VMs based on schedules.

Q11. What command lists all available Azure subscriptions in Azure CLI?

A. AZ account list
B. AZ resource show
C. AZ group list
D. AZ list accounts
Correct Answer: A. az account list
Explanation: This command retrieves a list of all Azure subscriptions associated with your login account.

Q12. What does NSG stand for in Azure networking?

A. Network Security Guard
B. Network Server Gateway
C. Network Security Group
D. Netflow Security Gateway
Correct Answer: C. Network Security Group
Explanation: NSGs are used to filter inbound and outbound traffic to network interfaces, VMs, and subnets.

Q13. What is the smallest unit of computing in Azure?

A. Resource Group
B. Azure Region
C. Virtual Machine
D. Availability Zone
Correct Answer: C. Virtual Machine
Explanation: A Virtual Machine is the smallest deployable compute unit that you manage in Azure.

Q14. Which storage tier is best suited for infrequently accessed data?

A. Premium
B. Hot
C. Cool
D. Archive
Correct Answer: D. Archive
Explanation: Archive storage offers the lowest cost and is ideal for rarely accessed data like long-term backups.

Q15. What command creates a new resource group in Azure CLI?

A. az group new
B. az group create
C. az resource create
D. az new group
Correct Answer: B. az group create
Explanation: This command creates a new resource group with a specified name and region.

Q16. What feature allows automatic scaling of Azure App Services?

A. Azure Scale Sets
B. Auto-Grow
C. App Gateway
D. Autoscale
Correct Answer: D. Autoscale
Explanation: Autoscale automatically adjusts the number of app instances based on demand.

Q17. Which monitoring tool allows custom dashboards in Azure?

A. Azure Security Center
B. Azure Advisor
C. Azure Monitor
D. Azure Log Analytics
Correct Answer: C. Azure Monitor
Explanation: Azure Monitor collects, analyzes, and acts on telemetry data, with custom dashboards for insights.

Q18. How do you ensure VM availability during Azure region failures?

A. Use Availability Sets
B. Use Azure Site Recovery
C. Use a single Availability Zone
D. Use Azure Load Balancer only
Correct Answer: B. Use Azure Site Recovery
Explanation: Azure Site Recovery replicates VMs across regions for disaster recovery and high availability.

Q19. What is the main benefit of Azure Tags?

A. Enforce security
B. Categorize resources
C. Optimize billing
D. Upgrade services
Correct Answer: B. Categorize resources
Explanation: Tags help you group and categorize resources for cost management and organization.

Q20. How do you ensure the high availability of a VM in the same region?

A. Use an Availability Set
B. Use a Resource Group
C. Use ExpressRoute
D. Use App Gateway
Correct Answer: A. Use an Availability Set
Explanation: Availability Sets ensure VMs are distributed across fault and update domains in the same region.

Q21. Which service is best for managing secrets and connection strings?

A. Azure DevTest Labs
B. Azure Vault
C. Azure Key Vault
D. Azure Config Store
Correct Answer: C. Azure Key Vault
Explanation: Azure Key Vault securely stores and manages sensitive data like secrets, keys, and certificates.

Q22. Which protocol is used by Azure Bastion to provide secure access?

A. SSH
B. HTTPS
C. RDP
D. HTML5 over TLS
Correct Answer: D. HTML5 over TLS
Explanation: Azure Bastion uses HTML5 over TLS to provide secure RDP/SSH sessions directly in the browser.

Q23. Which type of IP is dynamic and changes upon restart?

A. Static IP
B. Public IP
C. Private IP
D. Dynamic IP
Correct Answer: D. Dynamic IP
Explanation: Dynamic IPs are assigned by Azure and may change each time a resource is restarted.

Q24. What is the purpose of Azure Policy?

A. Encrypt data
B. Manage billing
C. Enforce compliance rules
D. Monitor VMs
Correct Answer: C. Enforce compliance rules

Explanation: Azure Policy helps enforce standards and evaluate resource compliance across your environment.

Q25. What is the default port used by RDP in Azure VMs?

A. 3389
B. 22
C. 443
D. 80
Correct Answer: A. 3389
Explanation: Port 3389 is the default port used by the Remote Desktop Protocol (RDP) to connect to Windows VMs.

Conclusion

Mastering the Microsoft AZ-104 exam requires hands-on experience and focused revision. These 25 practice questions are designed to reflect real exam topics and help you reinforce your understanding of Azure administration. By reviewing both the correct answers and explanations, you’ll be able to spot weak areas and gain the confidence you need to succeed. For more AZ-104 study material, expert tips, and updates, follow TrainingX.