EarnYourCert
ES EN
All exams › AZ-104
Microsoft Certified Associate

AZ-104 Practice Exam: Microsoft Azure Administrator

Azure administration: identities and governance, storage, compute resources, virtual networking, and monitoring and maintenance. 569 original questions with detailed explanations, smart review and progress tracking. Independent prep resource, not affiliated with Microsoft.

Start the free practice exam →
569
Questions
50
Per exam
70%
Pass mark
5
Domains

AZ-104 exam domains

Manage Azure identities and governance
20-25%
Implement and manage storage
15-20%
Deploy and manage Azure compute resources
20-25%
Implement and manage virtual networking
15-20%
Monitor and maintain Azure resources
10-15%

Why practice with EarnYourCert

Detailed explanations on every question, not just the right answer.
Smart spaced-repetition review (SRS) to reinforce what you get wrong.
Progress tracking per domain and over time.
Free to start, no sign-up required.

AZ-104 sample questions

Five real questions from our 569-question bank. Try to answer before revealing the solution.

1. What is the maximum number of levels of depth (not counting the root management group) supported by the Azure management group hierarchy?

  1. 6 levels
  2. There is no limit
  3. 10 levels
  4. 2 levels
Show answer

Correct answer: A. Azure supports up to 6 levels of depth in the management group hierarchy, not counting the root level or the level of individual subscriptions.

2. What is a 'snapshot' of a blob in Azure Storage?

  1. A lifecycle management policy that moves the blob to a cheaper tier after a period without access
  2. A read-only copy of the blob's state at a given point in time, explicitly created by the user
  3. An automatic hourly backup performed without user intervention or any configuration option
  4. A type of storage account optimized for frequent access to small blobs
Show answer

Correct answer: B. A blob snapshot is a read-only copy of the blob as it was at the time the snapshot was created; it is explicitly created (for example, via AzCopy, PowerShell, or the portal) and can be used to restore earlier versions.

3. Which authentication method is recommended for an Azure Container Instance to pull images from Azure Container Registry more securely, avoiding the use of admin user credentials?

  1. A managed identity with an RBAC role such as AcrPull assigned on the registry
  2. Use only anonymous public access to the registry, with no authentication at all
  3. Enable the admin user and share its password with the team
  4. Share the subscription key with developers for use in the pipeline
Show answer

Correct answer: A. It is recommended to use a managed identity with the 'AcrPull' RBAC role assigned on the registry, allowing ACI to authenticate securely without handling static admin user credentials.

4. What happens to inbound traffic toward a VM behind an Azure Standard Load Balancer if no NSG rule is configured on the network interface or subnet?

  1. Traffic is allowed, as Standard Load Balancer inherits permissive rules from the Basic balancer
  2. Traffic is blocked, as Standard Load Balancer is secure by default and requires NSGs to explicitly allow traffic
  3. Traffic is only blocked if the balancer has the 'Secure by default' option enabled
  4. Standard Load Balancer automatically allows traffic on ports configured in load balancing rules
Show answer

Correct answer: B. Azure Standard Load Balancer is secure by default: all Internet traffic to the backend is blocked unless an NSG rule explicitly allows it. Basic Load Balancer, in contrast, allows traffic by default. This difference is important for the AZ-104 exam.

5. An administrator configures an Azure Monitor metric alert for a VM. The rule has two conditions: CPU > 90% AND Available Memory < 1 GB. When will the alert fire?

  1. When either condition is met (OR logic)
  2. When both conditions are met simultaneously (AND logic)
  3. When CPU exceeds 90% for more than 5 minutes, regardless of memory
  4. It is not possible to combine two conditions in the same metric alert rule
Show answer

Correct answer: B. When multiple conditions are configured on an Azure Monitor metric alert rule, AND logic is used: the alert only fires when all conditions are simultaneously met. This allows creating more precise alerts that only trigger when a specific combination of conditions occurs.

Practice all 569 questions →

Frequently asked questions

How many questions does the AZ-104 practice exam have?

The question bank has 569 original questions. Each practice exam draws 50 questions weighted by domain, just like the official exam.

What's the passing score for AZ-104?

Microsoft's official AZ-104 exam requires a score equivalent to 70% to pass. We use the same threshold in our practice exams so you train under realistic conditions.

What domains does the AZ-104 exam cover?

Five domains: manage Azure identities and governance (20-25%), implement and manage storage (15-20%), deploy and manage Azure compute resources (20-25%), implement and manage virtual networking (15-20%), and monitor and maintain Azure resources (10-15%).

Is the AZ-104 practice exam free?

Yes, you can practice for free without signing up. Creating a free account adds progress tracking and smart review (SRS); the Pro tier removes daily question limits.

Are these the official Microsoft exam questions?

No. These are original questions written based on Microsoft's official "Skills measured" guide for AZ-104, not extracts from the real exam or "exam dumps".