Back to guides
AZ-104 Sample Preview
Microsoft Azure Administrator
200 original Azure administration scenarios with answers, explanations, exam tips, and a seven-day revision plan. Preview a few representative questions below before buying the complete protected PDF.
Sample 1. A company must apply least privilege to one resource group. What should be configured?
- Azure RBAC assignment at the resource group scope
- Owner access at tenant root
- A public storage container
- A billing export
Answer: A - RBAC at the narrowest practical scope limits unnecessary access.
Sample 2. Which Azure service is best for storing secrets and certificates?
- Azure Key Vault
- Azure Blob Storage public container
- Azure DNS
- Azure Cost Management
Answer: A - Key Vault is designed for controlled storage of secrets, keys, and certificates.
Sample 3. A web app needs managed hosting without direct VM management. Which service fits?
- Azure App Service
- Route table
- Recovery Services vault
- Network security group only
Answer: A - App Service hosts web apps and APIs as a managed platform.
Sample 4. A team wants to enforce allowed regions for deployments. What should they use?
- Azure Policy
- A virtual machine extension
- A storage SAS token
- A DNS CNAME record
Answer: A - Azure Policy evaluates resources against governance rules such as allowed locations.
Sample 5. Which tool helps query operational logs from Azure resources?
- Log Analytics workspace
- Management group only
- Public IP prefix
- App registration secret
Answer: A - Log Analytics supports centralized log collection and Kusto queries.
