Microsoft AZ-104 Practice Test 30
Question 290
An organization wants multiple alerts to notify the same on-call team and an ITSM integration. Which Azure object should be reused?
- Configure Azure Backup monitoring and alerts with the appropriate vault scope.
- Copy the full email and webhook destinations into each alert rule instead of reusing an action group.
- Configure Azure Service Health alerts for relevant services and regions.
- Create and reference one Azure Monitor action group with approved receivers.
Explanation
Correct Answer
D:Action groups define reusable notification and action destinations for Azure Monitor alerts. Each alert need not embed separate recipient details.
Incorrect Answers
A:Backup jobs and alerts expose protection failures. A VM's current disk status does not prove a backup succeeded. This matters here because an organization wants multiple alerts to notify the same on-call team and an ITSM integration. Which Azure object….
B:An Azure Monitor action group centralizes recipient and automation actions. Duplicating endpoints separately increases maintenance and drift when on-call routing changes.
C:Service Health reports subscription-affecting incidents, planned maintenance and advisories. It is distinct from one VM's guest application monitoring.
Question 291
Alerts exist but a newly rotated webhook endpoint no longer responds. What must be updated?
- Keep the retired webhook receiver URL and only change the friendly display name of its action group.
- Check guest OS, application service, and network dependencies separately from platform health.
- Recreate the CPU metric rule but leave its referenced action group's webhook receiver pointed at the retired URL.
- Review the action group's webhook receiver URL, authentication and delivery errors.
Explanation
Correct Answer
D:Alert rules invoke their configured action groups. A stale receiver configuration can fail delivery even when alert detection is correct.
Incorrect Answers
A:An action group's display name does not update the endpoint receiving notifications. Check the new webhook URL, authentication and delivery errors after rotating the receiver.
B:Platform availability does not prove an application responds correctly. Resource Health is one signal among several.
C:Metric detection may still fire while delivery fails. Update and test the action-group webhook receiver and delivery authentication, rather than modifying only the alert threshold.
Question 292
An on-call team needs to suppress alerts during a known maintenance window without deleting their detection logic. What feature fits?
- Enable VM insights with appropriate Azure Monitor Agent and collection settings.
- Correlate regional Azure Service Health notices with VM Resource Health.
- Use an Azure Monitor alert processing rule with an appropriate suppression schedule.
- Create an Azure Monitor scheduled query alert rule against the KQL result.
Explanation
Correct Answer
C:Alert processing rules can suppress notifications or apply action groups for matching alerts while preserving alert definitions.
Incorrect Answers
A:VM insights provides curated performance and dependency monitoring where supported. Data collection and permissions must be configured. This matters here because an on-call team needs to suppress alerts during a known maintenance window without deleting their detection logic.….
B:CPU metrics cannot establish whether an underlying Azure service incident occurred. Platform health sources provide contextual evidence. This matters here because an on-call team needs to suppress alerts during a known maintenance window without deleting their detection logic.….
D:Log search alerts evaluate returned query data on configured schedules. Metric alerts target numeric metric signals. This matters here because an on-call team needs to suppress alerts during a known maintenance window without deleting their detection logic.….
Question 293
The monitoring portal still records alerts during maintenance even though notifications were suppressed. Is this expected?
- Interpret an alert-processing rule suppressing action groups as deletion of all previously fired alert records.
- Delete a Cost Management budget to prevent suppressed Azure Monitor alerts from appearing in alert history.
- Distinguish alert evaluation and fired alert records from alert processing notification suppression.
- Review query aggregation, measurement threshold, evaluation frequency and failing-period settings.
Explanation
Correct Answer
C:Suppressing notification actions does not necessarily disable the underlying alert condition. Evidence of the fired alert may remain available.
Incorrect Answers
A:Notification suppression affects downstream actions, not necessarily whether the underlying alert is evaluated or recorded. Verify the rule's scope and the alert history separately.
B:Budget configuration is separate from Azure Monitor alert-processing suppression. A suppressed action group can leave the fired alert record visible for operational review.
D:Scheduled query conditions depend on the result shape and threshold configuration. A query returning any row can inadvertently satisfy an overly broad condition.
Question 294
An on-demand backup job displays Completed but recovery plans expect application consistency. What should be checked?
- Review file recovery prerequisites for the VM OS, encryption and recovery-point type.
- Confirm the recovery point consistency type and workload-specific backup requirements.
- Revalidate managed identities, data roles, network access and secret dependencies after restore.
- Review application-consistent versus crash-consistent recovery point requirements.
Explanation
Correct Answer
B:A successful backup operation does not automatically mean every external database transaction was quiesced. Consistency must match application needs.
Incorrect Answers
A:File recovery has workload and platform limitations. A valid backup may still require a different restore method.
C:Restoring disk state is not the same as restoring every external security relationship. Recreated identities or changed region paths can break key access.
D:Application quiescing and crash consistency differ. The recovery strategy should match the protected workload's tolerance.
Question 295
An Azure VM's OS disk is corrupted and the administrator needs to recover only a particular file from an existing backup. What recovery option is relevant?
- Use Azure Backup file recovery from an eligible VM recovery point.
- Check whether the workload requires a Recovery Services vault rather than the selected Backup vault.
- Review application-consistent versus crash-consistent recovery point requirements.
- Restore the Azure VM from an eligible recovery point into the selected resource group.
Explanation
Correct Answer
A:File recovery can mount or access a recovery point for selective file retrieval. Restoring the entire VM is unnecessary when a file suffices.
Incorrect Answers
B:Backup vault offerings differ by data source. The vault type must align with the protected resource, not merely share the word backup. This matters here because an Azure VM's OS disk is corrupted and the administrator needs to recover only a particular file from an existing….
C:Application quiescing and crash consistency differ. The recovery strategy should match the protected workload's tolerance. This matters here because an Azure VM's OS disk is corrupted and the administrator needs to recover only a particular file from an existing….
D:Azure Backup restores VM disks and can create a new VM under supported restore workflows. Original network and identity dependencies must be checked. This matters here because an Azure VM's OS disk is corrupted and the administrator needs to recover only a particular file from an existing….
Question 296
An admin attempts file recovery but the selected recovery point's encryption or OS compatibility prevents mounting. What should be checked?
- Confirm the recovery point consistency type and workload-specific backup requirements.
- Review file recovery prerequisites for the VM OS, encryption and recovery-point type.
- Create an ASR recovery plan with ordered groups and supported automation steps.
- Restore the Azure VM from an eligible recovery point into the selected resource group.
Explanation
Correct Answer
B:File recovery has workload and platform limitations. A valid backup may still require a different restore method. This matters here because an admin attempts file recovery but the selected recovery point's encryption or OS compatibility prevents mounting.
Incorrect Answers
A:A successful backup operation does not automatically mean every external database transaction was quiesced. Consistency must match application needs. This matters here because an admin attempts file recovery but the selected recovery point's encryption or OS compatibility prevents mounting.
C:Recovery plans coordinate groups of protected machines and recovery actions. Starting tiers arbitrarily can break dependencies.
D:Azure Backup restores VM disks and can create a new VM under supported restore workflows. Original network and identity dependencies must be checked. This matters here because an admin attempts file recovery but the selected recovery point's encryption or OS compatibility prevents mounting.
Question 297
A production VM is deleted accidentally, and the team must recover it to an alternate resource group from backup. What should be used?
- Automate and rehearse the recovery runbook to reduce actual RTO.
- Use Azure Backup file recovery from an eligible VM recovery point.
- Restore the Azure VM from an eligible recovery point into the selected resource group.
- Review file recovery prerequisites for the VM OS, encryption and recovery-point type.
Explanation
Correct Answer
C:Azure Backup restores VM disks and can create a new VM under supported restore workflows. Original network and identity dependencies must be checked. This matters here because a production VM is deleted accidentally, and the team must recover it to an alternate resource group from backup.
Incorrect Answers
A:Replication alone does not ensure timely application availability. Recovery orchestration and validation consume time.
B:File recovery can mount or access a recovery point for selective file retrieval. Restoring the entire VM is unnecessary when a file suffices. This matters here because a production VM is deleted accidentally, and the team must recover it to an alternate resource group from backup.
D:File recovery has workload and platform limitations. A valid backup may still require a different restore method. This matters here because a production VM is deleted accidentally, and the team must recover it to an alternate resource group from backup.
Question 298
A restored VM starts but cannot reach application dependencies because its network differs. What should be validated?
- Review restored NIC, subnet, NSG, identity and DNS settings after VM recovery.
- Set target VNet, subnet, resource group and other recovery settings in the replication configuration.
- Revalidate managed identities, data roles, network access and secret dependencies after restore.
- Recognize that locally redundant vault storage does not create a secondary-region copy.
Explanation
Correct Answer
A:Backup restores data and compute artifacts, but the environment may need networking and identity reconciliation to return service.
Incorrect Answers
B:Replica disks alone do not ensure a bootable, reachable application VM at the destination. Recovery topology must be configured. This matters here because a restored VM starts but cannot reach application dependencies because its network differs.
C:Restoring disk state is not the same as restoring every external security relationship. Recreated identities or changed region paths can break key access. This matters here because a restored VM starts but cannot reach application dependencies because its network differs.
D:Local redundancy protects local copies; regional disaster recovery requires suitable geo protection and supported restore features.
Question 299
A workload requires protection against malicious deletion of backup recovery points. Which Azure Backup security feature helps?
- Retained backup data remains in the vault until its lifecycle and deletion conditions permit removal.
- Enable soft delete and appropriate backup security controls for the vault.
- Check whether the workload requires a Recovery Services vault rather than the selected Backup vault.
- Use an unplanned failover workflow when the source cannot participate safely.
Explanation
Correct Answer
B:The threat is malicious deletion of restore points. Soft delete gives eligible deleted backup data a recoverable safety period, and stronger vault security controls should restrict or alert on destructive operations before they occur.
Incorrect Answers
A:Stopping future protection and deleting existing recovery data are separate actions. Retention can continue to apply.
C:Backup vault offerings differ by data source. The vault type must align with the protected resource, not merely share the word backup. This matters here because a workload requires protection against malicious deletion of backup recovery points. Which Azure Backup security….
D:Planned failover typically involves source coordination. An unavailable source requires incident-appropriate recovery semantics.
Question 300
An admin deletes backup protection and expects all recovery points to vanish immediately, but data remains recoverable. Why?
- Recognize that vault soft delete can retain backup data beyond ordinary protection stop actions.
- Choose the database service's native backup and point-in-time restore features where supported.
- Assume stopping backup protection instantly purges all recoverable data regardless of vault soft-delete settings.
- Retained backup data remains in the vault until its lifecycle and deletion conditions permit removal.
Explanation
Correct Answer
A:Soft delete intentionally delays permanent deletion under supported settings. Retention protects recovery evidence against quick destructive actions.
Incorrect Answers
B:Managed database platforms offer service-specific automated backups and restore controls. VM backup policies do not cover every PaaS database.
C:Stopping protection does not automatically bypass recovery-point retention or vault soft-delete protection. Those safeguards can retain data even after the active protection job is stopped.
D:Stopping future protection and deleting existing recovery data are separate actions. Retention can continue to apply. This matters here because an admin deletes backup protection and expects all recovery points to vanish immediately, but data remains….
