Microsoft Azure Administrator Free Sample Questions

Description

Covers day-to-day Azure administration: Microsoft Entra identities and governance, storage accounts, virtual machines and containers, virtual networking, and monitoring and backup.

20 free sample questions417 in the full practice test

Try simulator

AZ-104 Sample Questions

  1. Question 1

    You are the global administrator for an Azure Active Directory (Azure AD) tenant that has several subscriptions.
    You need to create a report that lists all the resources for the tenant.
    Solution: You run the New-AzureADUserAppRoleAssignment Windows PowerShell cmdlet.
    Does this meet the goal?

    Answer and explanation

    Correct answer: B

    The New-AzureADUserAppRoleAssignment cmdlet is used to assign users to application roles in Azure AD, not to create reports listing resources across subscriptions. To list all resources for a tenant, you would use Azure Resource Graph queries, PowerShell commands like Get-AzResource, or Azure portal reporting features.

  2. Question 2

    You are the global administrator for an Azure Active Directory (Azure AD) tenant that has several subscriptions.
    You need to create a report that lists all the resources for the tenant.
    Solution: You open the Azure portal and modify the properties of the Azure AD tenant.
    Does this meet the goal?

    Answer and explanation

    Correct answer: B

    This solution does not create resource reports across subscriptions.

  3. Question 3

    You are the global administrator for an Azure Active Directory (Azure AD) tenant that has several subscriptions.
    You need to create a report that lists all the resources for the tenant.
    Solution: You open the Azure portal and modify the profile settings of your account.
    Does this meet the goal?

    Answer and explanation

    Correct answer: B

    Modifying profile settings does not create comprehensive resource reports.

  4. Question 4

    Your company has serval departments. Each department has a number of virtual machines (VMs).
    The company has an Azure subscription that contains a resource group named RG1.
    All VMs are located in RG1.
    You want to associate each VM with its respective department.
    What should you do?

    Answer and explanation

    Correct answer: A

    Azure resource tags are key-value pairs that help organize and categorize resources by department, project, or other business criteria. Tags can be applied to VMs to associate them with their respective departments for billing, management, and reporting purposes. Reference: https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-using-tags

  5. Question 5

    Your company has an Azure Active Directory (Azure AD) subscription.
    You want to implement an Azure AD conditional access policy.
    The policy must be configured to require members of the Global Administrators group to use Multi- Factor Authentication and an Azure AD-joined device when they connect to Azure AD from untrusted locations.
    Solution: You access the multi-factor authentication page to alter the user settings.
    Does the solution meet the goal?

    Answer and explanation

    Correct answer: B

    Conditional access requires Azure AD Premium licensing for full functionality.

  6. Question 6

    Your company has an Azure Active Directory (Azure AD) subscription.
    You want to implement an Azure AD conditional access policy.
    The policy must be configured to require members of the Global Administrators group to use Multi- Factor Authentication and an Azure AD-joined device when they connect to Azure AD from untrusted locations.
    Solution: You access the Azure portal to alter the session control of the Azure AD conditional access policy.
    Does the solution meet the goal?

    Answer and explanation

    Correct answer: B

    Azure conditional access policies can require MFA and device compliance for specific groups like Global Administrators.

  7. Question 7

    Your company has an Azure Active Directory (Azure AD) subscription.
    You want to implement an Azure AD conditional access policy.
    The policy must be configured to require members of the Global Administrators group to use Multi- Factor Authentication and an Azure AD-joined device when they connect to Azure AD from untrusted locations.
    Solution: You access the Azure portal to alter the grant control of the Azure AD conditional access
    policy.
    Does the solution meet the goal?

    Answer and explanation

    Correct answer: A

    This configuration will properly enforce MFA requirements for the Global Administrators group when accessing Azure resources.

  8. Question 8

    You are planning to deploy an Ubuntu Server virtual machine to your company’s Azure subscription.
    You are required to implement a custom deployment that includes adding a particular trusted root certification authority (CA).
    Which of the following should you use to create the virtual machine?

    Answer and explanation

    Correct answer: A

    The Create-AzVM cmdlet can deploy Ubuntu VMs with custom configurations including trusted root CAs. You can use cloud-init scripts with the -CustomData parameter to install custom certificates during VM deployment. Reference: https://docs.microsoft.com/en-us/azure/virtual-machines/linux/tutorial-automate-vm-deployment

  9. Question 9

    Your company makes use of Multi-Factor Authentication for when users are not in the office. The Per Authentication option has been configured as the usage model.
    After the acquisition of a smaller business and the addition of the new staff to Azure Active Directory (Azure AD) obtains a different company and adding the new employees to Azure Active Directory (Azure AD), you are informed that these employees should also make use of Multi- Factor Authentication.
    To achieve this, the Per Enabled User setting must be set for the usage model.
    Solution: You reconfigure the existing usage model via the Azure portal.
    Does the solution meet the goal?

    Answer and explanation

    Correct answer: B

    Explanation:
    Since it is not possible to change the usage model of an existing provider as it is right now, you have to create a new one and reactivate your existing server with activation credentials from the new provider. -
    Reference:
    https://365lab.net/2015/04/11/switch-usage-model-in-azure-multi-factor-authentication-server/

  10. Question 10

    Your company’s Azure solution makes use of Multi-Factor Authentication for when users are not in the office. The Per Authentication option has been configured as the usage model.
    After the acquisition of a smaller business and the addition of the new staff to Azure Active Directory (Azure AD) obtains a different company and adding the new employees to Azure Active Directory (Azure AD), you are informed that these employees should also make use of Multi- Factor Authentication.
    To achieve this, the Per Enabled User setting must be set for the usage model.
    Solution: You reconfigure the existing usage model via the Azure CLI.
    Does the solution meet the goal?

    Answer and explanation

    Correct answer: B

    Explanation:Since it is not possible to change the usage model of an existing provider as it is right now, you have to create a new one and reactivate your existing server with activation credentials from the new provider. -
    Reference:
    https://365lab.net/2015/04/11/switch-usage-model-in-azure-multi-factor-authentication-server/

Register free for 10 more questions

Or unlock all 417 AZ-104 questions with explanations, timed mode and flashcards.