cert
cert-1
cert-2

Pass Microsoft AZ-104 Exam in First Attempt Guaranteed!

Get 100% Latest Exam Questions, Accurate & Verified Answers to Pass the Actual Exam!
30 Days Free Updates, Instant Download!

cert-5
cert-6
AZ-104 Exam - Verified By Experts
AZ-104 Premium Bundle
$29.98

AZ-104 Premium Bundle

$79.99
$109.97
  • Premium File 606 Questions & Answers. Last update: Oct 30, 2026
  • Training Course 132 Video Lectures
  • Study Guide 458 Pages
 
$109.97
$79.99
accept 453 downloads in last 7 days
block-screenshots
Purchase Microsoft AZ-104 Exam Training Products Individually
Microsoft AZ-104 Premium File
Premium File 606 Q&A
$76.99$69.99
Microsoft AZ-104 Video Training Course
Training Course 132 Lectures
$21.99 $19.99
Microsoft AZ-104 PDF Study Guide
Study Guide 458 Pages
$21.99 $19.99
Microsoft AZ-104 Practice Test 26

Question 250

A planned host maintenance event reboots all VMs placed outside any availability design. What should be corrected?

  1. Inspect cloud-init configuration and logs for the guest image's custom-data processing.
  2. Move to a multi-zone or multi-region resiliency design where supported.
  3. Attach an appropriately sized persistent Azure managed data disk and mount it in the guest.
  4. Review deployment to availability sets or availability zones with appropriate redundancy.

Explanation

Correct Answer

D:

Placement across distinct update domains can reduce simultaneous planned maintenance impact. Plain independent VMs may share risk.

Incorrect Answers

A:

Passing user data to a VM is not identical to executing it. A compatible image and initialization configuration are required. This matters here because a planned host maintenance event reboots all VMs placed outside any availability design.

B:

Availability sets reduce host-level correlated failures but do not create independent zonal or regional facilities.

C:

Managed disks provide durable Azure storage tied to the VM, whereas temporary disks can lose data on deallocation or host events. This matters here because a planned host maintenance event reboots all VMs placed outside any availability design.

Question 251

A finance workload needs Azure compute replicas in physically separated facilities within one region. Which deployment option supports this?

  1. Check managed disk and other retained resource charges separately from VM compute.
  2. Create an availability set and place the supported VMs within it.
  3. Consider an eligible Azure capacity reservation group for supported VM sizes and regions.
  4. Place supported VM instances in different availability zones within the region.

Explanation

Correct Answer

D:

Zones provide distinct facility-level fault isolation in supported regions. An availability set alone does not span separate zones. This matters here because a finance workload needs Azure compute replicas in physically separated facilities within one region. Which….

Incorrect Answers

A:

Deallocation ends normal allocated compute charges but does not automatically delete attached managed disks or public IP resources. This matters here because a finance workload needs Azure compute replicas in physically separated facilities within one region. Which….

B:

Availability sets distribute instances across fault and update domains inside a local datacenter failure boundary. They do not create cross-region replicas. This matters here because a finance workload needs Azure compute replicas in physically separated facilities within one region. Which….

C:

Capacity reservations can secure capacity for specified VM size and zone/region combinations. They are separate from quotas and redundancy.

Question 252

An availability-set deployment loses all replicas during a full datacenter outage. Which design gap is present?

  1. Move to a multi-zone or multi-region resiliency design where supported.
  2. Create an availability set and place the supported VMs within it.
  3. Consider an eligible Azure capacity reservation group for supported VM sizes and regions.
  4. Verify tenant, subscription and resource-provider move limitations before changing ownership.

Explanation

Correct Answer

A:

Availability sets reduce host-level correlated failures but do not create independent zonal or regional facilities. This matters here because an availability-set deployment loses all replicas during a full datacenter outage. Which design gap is present.

Incorrect Answers

B:

Availability sets distribute instances across fault and update domains inside a local datacenter failure boundary. They do not create cross-region replicas. This matters here because an availability-set deployment loses all replicas during a full datacenter outage. Which design gap is present.

C:

Capacity reservations can secure capacity for specified VM size and zone/region combinations. They are separate from quotas and redundancy. This matters here because an availability-set deployment loses all replicas during a full datacenter outage. Which design gap is present.

D:

Supported cross-subscription moves depend on source and destination context, resource dependencies, policies and tenant constraints.

Question 253

A service needs an automatically scaled fleet of identical worker virtual machines. Which Azure resource is best suited?

  1. Apply the updated scale-set model explicitly to selected instances under the manual upgrade policy.
  2. Enable application health reporting and automatic instance repairs for the VM scale set.
  3. Ensure application state and load balancing support failover, not merely VM placement.
  4. Deploy an Azure Virtual Machine Scale Set with the required instance model.

Explanation

Correct Answer

D:

VM scale sets manage consistent VM instances and support orchestration, updates and scaling. Managing each VM independently adds overhead.

Incorrect Answers

A:

Manual upgrade mode does not automatically update all existing instances. The model and instance state can diverge until updates are requested.

B:

Health probes or extensions provide a signal for repair actions. Repair policy can restart, reimage or replace unhealthy instances.

C:

Infrastructure placement increases availability but cannot automatically make a single-host stateful app stateless. Health routing and data continuity are separate needs. This matters here because a service needs an automatically scaled fleet of identical worker virtual machines. Which Azure resource is best suited.

Question 254

A scale set remains at one instance while workload CPU climbs despite an available scale-out policy. What must be checked?

  1. Enable application health reporting and automatic instance repairs for the VM scale set.
  2. Ensure application state and load balancing support failover, not merely VM placement.
  3. Review autoscale rule metrics, thresholds, cooldown and minimum/maximum capacity.
  4. Check the VM size's aggregate disk IOPS and throughput limits.

Explanation

Correct Answer

C:

Autoscale decisions depend on configured evaluation and capacity limits. A scale set does not scale automatically just because it exists.

Incorrect Answers

A:

Health probes or extensions provide a signal for repair actions. Repair policy can restart, reimage or replace unhealthy instances. This matters here because a scale set remains at one instance while workload CPU climbs despite an available scale-out policy.

B:

Infrastructure placement increases availability but cannot automatically make a single-host stateful app stateless. Health routing and data continuity are separate needs. This matters here because a scale set remains at one instance while workload CPU climbs despite an available scale-out policy.

D:

Disk performance can be capped by both individual disk SKUs and total VM throughput. Faster disks cannot exceed the host capability.

Question 255

A VM scale set must detect an unhealthy application instance and replace it under a supported repair policy. What should be configured?

  1. Apply the updated scale-set model explicitly to selected instances under the manual upgrade policy.
  2. Use a suitable VM scale set upgrade policy with health-aware rollout controls.
  3. Set the OS disk deletion option to detach or retain as appropriate before deleting the VM.
  4. Enable application health reporting and automatic instance repairs for the VM scale set.

Explanation

Correct Answer

D:

Health probes or extensions provide a signal for repair actions. Repair policy can restart, reimage or replace unhealthy instances. This matters here because a VM scale set must detect an unhealthy application instance and replace it under a supported repair policy.

Incorrect Answers

A:

Manual upgrade mode does not automatically update all existing instances. The model and instance state can diverge until updates are requested. This matters here because a VM scale set must detect an unhealthy application instance and replace it under a supported repair policy.

B:

Scale-set upgrade policies determine how instance model changes are applied. Health gates and batch sizes reduce rollout risk.

C:

Disk delete options determine whether eligible managed disks are removed with the VM. A retained disk preserves content for investigation.

Question 256

Instances report healthy at the VM power state level but the app is not serving requests. What should monitor app health?

  1. Increase the managed data disk capacity and use that as the only health signal for the application's HTTP endpoint.
  2. Direct new connections to healthy backend instances rather than the failed VM.
  3. Recheck accelerated-networking compatibility of the target VM SKU and NIC state.
  4. Use an application health extension or load-balancer health probe with an appropriate endpoint.

Explanation

Correct Answer

D:

Power-on state is not proof of application readiness. Health integration should observe the workload rather than only VM provisioning state.

Incorrect Answers

A:

Available disk space does not indicate whether the service process is responding or ready for traffic. Configure an application-aware probe or health extension that tests the workload endpoint itself.

B:

Load balancer health probing can remove unhealthy backend targets. A single healthy VM may still be a capacity limitation.

C:

Not every VM SKU supports accelerated networking. A resize can change which NIC features are available.

Question 257

A build service needs to publish signed images but must not manage all registry settings. Which role capability applies?

  1. Give the build identity a pull-only repository role and assume it can publish new signed image artifacts.
  2. Enable internal Container Apps ingress instead of granting the build pipeline its required registry push rights.
  3. Use the shared network namespace of one container group when localhost coordination is required.
  4. Grant appropriately scoped AcrPush or repository writer privileges to the build identity.

Explanation

Correct Answer

D:

Push permissions allow publishing image content while avoiding registry admin credentials. Use repository scope where supported. This matters here because a build service needs to publish signed images but must not manage all registry settings. Which role capability applies.

Incorrect Answers

A:

Pull roles allow artifact reads, not publishing. A supported repository writer or AcrPush authorization is needed for controlled push operations.

B:

Inbound request exposure has no bearing on image artifact publishing. The build identity needs the correct ACR writer permission.

C:

Localhost is scoped to the container group's network environment. Separate groups have different network identities.

Question 258

A CI job can pull a registry image but its push receives unauthorized. What should be reviewed?

  1. Use versioned Container Apps revisions and controlled traffic splitting.
  2. Verify the identity has registry pull rights at the appropriate ACR scope.
  3. Inspect the build principal's ACR write permissions and repository scope.
  4. Grant AcrPull or an applicable repository-level pull permission to its identity.

Explanation

Correct Answer

C:

Read-only registry credentials cannot publish new manifests. Scope and role assignment must allow writes. This matters here because a CI job can pull a registry image but its push receives unauthorized.

Incorrect Answers

A:

Revisions identify deployed app configurations and can support switching traffic between versions. Retagging an image alone does not perform traffic cutover.

B:

Authentication proves the identity, not its permission to read image manifests and layers. Registry authorization is a separate gate. This matters here because a CI job can pull a registry image but its push receives unauthorized.

D:

A pull-specific role minimizes registry privilege. Push authorization would permit unnecessary artifact modification. This matters here because a CI job can pull a registry image but its push receives unauthorized.

Question 259

An application team wants to run one disposable container job without managing a Kubernetes cluster. Which Azure offering fits?

  1. Set an HTTP scaling trigger on a Container Apps app although no inbound HTTP service or long-running replica is needed.
  2. Deploy a container group using Azure Container Instances.
  3. Use Azure Container Registry as the job execution service without deploying any compute resource.
  4. Set a supported minimum replica count above zero to maintain warm capacity.

Explanation

Correct Answer

B:

ACI runs isolated container workloads without maintaining a cluster control plane. It is suitable for simple short-duration tasks.

Incorrect Answers

A:

HTTP-based scaling is for a request-serving application. A single disposable run without a cluster-management requirement is better handled by an Azure Container Instances container group.

C:

Azure Container Registry stores and distributes container images but does not execute a container job. Azure Container Instances supplies managed compute for a simple disposable container group without operating a Kubernetes control plane.

D:

Nonzero minimum replicas reduce cold starts but consume resources during idle periods. A zero minimum optimizes idle cost. This matters here because an application team wants to run one disposable container job without managing a Kubernetes cluster. Which Azure….

Question 260

A job in ACI exits successfully but repeatedly starts again, causing duplicate data imports. What setting is wrong?

  1. Switch an unrelated Container Apps endpoint to internal ingress to stop an Azure Container Instances job from restarting.
  2. Deploy the container group into an eligible delegated VNet subnet under supported integration.
  3. Review the container group's restartPolicy and use Never or OnFailure as appropriate.
  4. Reduce requested resources or request an eligible regional ACI quota increase.

Explanation

Correct Answer

C:

ACI restart policy determines whether completed jobs restart. Always is inappropriate for a one-time successful batch task.

Incorrect Answers

A:

ACI restart behavior is controlled by its container-group restart policy. Internal HTTP ingress on another service cannot prevent duplicate job runs.

B:

ACI VNet integration uses supported subnet configuration to give the group private connectivity. A private registry alone does not connect it to a VNet.

D:

Local Docker execution does not test Azure subscription quota. Deployment requires Azure-side capacity authorization. This matters here because a job in ACI exits successfully but repeatedly starts again, causing duplicate data imports. What setting is wrong.

Microsoft Azure Administrator (AZ-104) Practice Tests