Microsoft AZ-104 Practice Test 26
Question 250
A planned host maintenance event reboots all VMs placed outside any availability design. What should be corrected?
- Inspect cloud-init configuration and logs for the guest image's custom-data processing.
- Move to a multi-zone or multi-region resiliency design where supported.
- Attach an appropriately sized persistent Azure managed data disk and mount it in the guest.
- Review deployment to availability sets or availability zones with appropriate redundancy.
Explanation
Correct Answer
D:Placement across distinct update domains can reduce simultaneous planned maintenance impact. Plain independent VMs may share risk.
Incorrect Answers
A:Passing user data to a VM is not identical to executing it. A compatible image and initialization configuration are required. This matters here because a planned host maintenance event reboots all VMs placed outside any availability design.
B:Availability sets reduce host-level correlated failures but do not create independent zonal or regional facilities.
C:Managed disks provide durable Azure storage tied to the VM, whereas temporary disks can lose data on deallocation or host events. This matters here because a planned host maintenance event reboots all VMs placed outside any availability design.
Question 251
A finance workload needs Azure compute replicas in physically separated facilities within one region. Which deployment option supports this?
- Check managed disk and other retained resource charges separately from VM compute.
- Create an availability set and place the supported VMs within it.
- Consider an eligible Azure capacity reservation group for supported VM sizes and regions.
- Place supported VM instances in different availability zones within the region.
Explanation
Correct Answer
D:Zones provide distinct facility-level fault isolation in supported regions. An availability set alone does not span separate zones. This matters here because a finance workload needs Azure compute replicas in physically separated facilities within one region. Which….
Incorrect Answers
A:Deallocation ends normal allocated compute charges but does not automatically delete attached managed disks or public IP resources. This matters here because a finance workload needs Azure compute replicas in physically separated facilities within one region. Which….
B:Availability sets distribute instances across fault and update domains inside a local datacenter failure boundary. They do not create cross-region replicas. This matters here because a finance workload needs Azure compute replicas in physically separated facilities within one region. Which….
C:Capacity reservations can secure capacity for specified VM size and zone/region combinations. They are separate from quotas and redundancy.
Question 252
An availability-set deployment loses all replicas during a full datacenter outage. Which design gap is present?
- Move to a multi-zone or multi-region resiliency design where supported.
- Create an availability set and place the supported VMs within it.
- Consider an eligible Azure capacity reservation group for supported VM sizes and regions.
- Verify tenant, subscription and resource-provider move limitations before changing ownership.
Explanation
Correct Answer
A:Availability sets reduce host-level correlated failures but do not create independent zonal or regional facilities. This matters here because an availability-set deployment loses all replicas during a full datacenter outage. Which design gap is present.
Incorrect Answers
B:Availability sets distribute instances across fault and update domains inside a local datacenter failure boundary. They do not create cross-region replicas. This matters here because an availability-set deployment loses all replicas during a full datacenter outage. Which design gap is present.
C:Capacity reservations can secure capacity for specified VM size and zone/region combinations. They are separate from quotas and redundancy. This matters here because an availability-set deployment loses all replicas during a full datacenter outage. Which design gap is present.
D:Supported cross-subscription moves depend on source and destination context, resource dependencies, policies and tenant constraints.
Question 253
A service needs an automatically scaled fleet of identical worker virtual machines. Which Azure resource is best suited?
- Apply the updated scale-set model explicitly to selected instances under the manual upgrade policy.
- Enable application health reporting and automatic instance repairs for the VM scale set.
- Ensure application state and load balancing support failover, not merely VM placement.
- Deploy an Azure Virtual Machine Scale Set with the required instance model.
Explanation
Correct Answer
D:VM scale sets manage consistent VM instances and support orchestration, updates and scaling. Managing each VM independently adds overhead.
Incorrect Answers
A:Manual upgrade mode does not automatically update all existing instances. The model and instance state can diverge until updates are requested.
B:Health probes or extensions provide a signal for repair actions. Repair policy can restart, reimage or replace unhealthy instances.
C:Infrastructure placement increases availability but cannot automatically make a single-host stateful app stateless. Health routing and data continuity are separate needs. This matters here because a service needs an automatically scaled fleet of identical worker virtual machines. Which Azure resource is best suited.
Question 254
A scale set remains at one instance while workload CPU climbs despite an available scale-out policy. What must be checked?
- Enable application health reporting and automatic instance repairs for the VM scale set.
- Ensure application state and load balancing support failover, not merely VM placement.
- Review autoscale rule metrics, thresholds, cooldown and minimum/maximum capacity.
- Check the VM size's aggregate disk IOPS and throughput limits.
Explanation
Correct Answer
C:Autoscale decisions depend on configured evaluation and capacity limits. A scale set does not scale automatically just because it exists.
Incorrect Answers
A:Health probes or extensions provide a signal for repair actions. Repair policy can restart, reimage or replace unhealthy instances. This matters here because a scale set remains at one instance while workload CPU climbs despite an available scale-out policy.
B:Infrastructure placement increases availability but cannot automatically make a single-host stateful app stateless. Health routing and data continuity are separate needs. This matters here because a scale set remains at one instance while workload CPU climbs despite an available scale-out policy.
D:Disk performance can be capped by both individual disk SKUs and total VM throughput. Faster disks cannot exceed the host capability.
Question 255
A VM scale set must detect an unhealthy application instance and replace it under a supported repair policy. What should be configured?
- Apply the updated scale-set model explicitly to selected instances under the manual upgrade policy.
- Use a suitable VM scale set upgrade policy with health-aware rollout controls.
- Set the OS disk deletion option to detach or retain as appropriate before deleting the VM.
- Enable application health reporting and automatic instance repairs for the VM scale set.
Explanation
Correct Answer
D:Health probes or extensions provide a signal for repair actions. Repair policy can restart, reimage or replace unhealthy instances. This matters here because a VM scale set must detect an unhealthy application instance and replace it under a supported repair policy.
Incorrect Answers
A:Manual upgrade mode does not automatically update all existing instances. The model and instance state can diverge until updates are requested. This matters here because a VM scale set must detect an unhealthy application instance and replace it under a supported repair policy.
B:Scale-set upgrade policies determine how instance model changes are applied. Health gates and batch sizes reduce rollout risk.
C:Disk delete options determine whether eligible managed disks are removed with the VM. A retained disk preserves content for investigation.
Question 256
Instances report healthy at the VM power state level but the app is not serving requests. What should monitor app health?
- Increase the managed data disk capacity and use that as the only health signal for the application's HTTP endpoint.
- Direct new connections to healthy backend instances rather than the failed VM.
- Recheck accelerated-networking compatibility of the target VM SKU and NIC state.
- Use an application health extension or load-balancer health probe with an appropriate endpoint.
Explanation
Correct Answer
D:Power-on state is not proof of application readiness. Health integration should observe the workload rather than only VM provisioning state.
Incorrect Answers
A:Available disk space does not indicate whether the service process is responding or ready for traffic. Configure an application-aware probe or health extension that tests the workload endpoint itself.
B:Load balancer health probing can remove unhealthy backend targets. A single healthy VM may still be a capacity limitation.
C:Not every VM SKU supports accelerated networking. A resize can change which NIC features are available.
Question 257
A build service needs to publish signed images but must not manage all registry settings. Which role capability applies?
- Give the build identity a pull-only repository role and assume it can publish new signed image artifacts.
- Enable internal Container Apps ingress instead of granting the build pipeline its required registry push rights.
- Use the shared network namespace of one container group when localhost coordination is required.
- Grant appropriately scoped AcrPush or repository writer privileges to the build identity.
Explanation
Correct Answer
D:Push permissions allow publishing image content while avoiding registry admin credentials. Use repository scope where supported. This matters here because a build service needs to publish signed images but must not manage all registry settings. Which role capability applies.
Incorrect Answers
A:Pull roles allow artifact reads, not publishing. A supported repository writer or AcrPush authorization is needed for controlled push operations.
B:Inbound request exposure has no bearing on image artifact publishing. The build identity needs the correct ACR writer permission.
C:Localhost is scoped to the container group's network environment. Separate groups have different network identities.
Question 258
A CI job can pull a registry image but its push receives unauthorized. What should be reviewed?
- Use versioned Container Apps revisions and controlled traffic splitting.
- Verify the identity has registry pull rights at the appropriate ACR scope.
- Inspect the build principal's ACR write permissions and repository scope.
- Grant AcrPull or an applicable repository-level pull permission to its identity.
Explanation
Correct Answer
C:Read-only registry credentials cannot publish new manifests. Scope and role assignment must allow writes. This matters here because a CI job can pull a registry image but its push receives unauthorized.
Incorrect Answers
A:Revisions identify deployed app configurations and can support switching traffic between versions. Retagging an image alone does not perform traffic cutover.
B:Authentication proves the identity, not its permission to read image manifests and layers. Registry authorization is a separate gate. This matters here because a CI job can pull a registry image but its push receives unauthorized.
D:A pull-specific role minimizes registry privilege. Push authorization would permit unnecessary artifact modification. This matters here because a CI job can pull a registry image but its push receives unauthorized.
Question 259
An application team wants to run one disposable container job without managing a Kubernetes cluster. Which Azure offering fits?
- Set an HTTP scaling trigger on a Container Apps app although no inbound HTTP service or long-running replica is needed.
- Deploy a container group using Azure Container Instances.
- Use Azure Container Registry as the job execution service without deploying any compute resource.
- Set a supported minimum replica count above zero to maintain warm capacity.
Explanation
Correct Answer
B:ACI runs isolated container workloads without maintaining a cluster control plane. It is suitable for simple short-duration tasks.
Incorrect Answers
A:HTTP-based scaling is for a request-serving application. A single disposable run without a cluster-management requirement is better handled by an Azure Container Instances container group.
C:Azure Container Registry stores and distributes container images but does not execute a container job. Azure Container Instances supplies managed compute for a simple disposable container group without operating a Kubernetes control plane.
D:Nonzero minimum replicas reduce cold starts but consume resources during idle periods. A zero minimum optimizes idle cost. This matters here because an application team wants to run one disposable container job without managing a Kubernetes cluster. Which Azure….
Question 260
A job in ACI exits successfully but repeatedly starts again, causing duplicate data imports. What setting is wrong?
- Switch an unrelated Container Apps endpoint to internal ingress to stop an Azure Container Instances job from restarting.
- Deploy the container group into an eligible delegated VNet subnet under supported integration.
- Review the container group's restartPolicy and use Never or OnFailure as appropriate.
- Reduce requested resources or request an eligible regional ACI quota increase.
Explanation
Correct Answer
C:ACI restart policy determines whether completed jobs restart. Always is inappropriate for a one-time successful batch task.
Incorrect Answers
A:ACI restart behavior is controlled by its container-group restart policy. Internal HTTP ingress on another service cannot prevent duplicate job runs.
B:ACI VNet integration uses supported subnet configuration to give the group private connectivity. A private registry alone does not connect it to a VNet.
D:Local Docker execution does not test Azure subscription quota. Deployment requires Azure-side capacity authorization. This matters here because a job in ACI exits successfully but repeatedly starts again, causing duplicate data imports. What setting is wrong.