cert
cert-1
cert-2

Pass Microsoft AZ-104 Exam in First Attempt Guaranteed!

Get 100% Latest Exam Questions, Accurate & Verified Answers to Pass the Actual Exam!
30 Days Free Updates, Instant Download!

cert-5
cert-6
AZ-104 Exam - Verified By Experts
AZ-104 Premium Bundle
$29.98

AZ-104 Premium Bundle

$79.99
$109.97
  • Premium File 606 Questions & Answers. Last update: Oct 30, 2026
  • Training Course 132 Video Lectures
  • Study Guide 458 Pages
 
$109.97
$79.99
accept 453 downloads in last 7 days
block-screenshots
Purchase Microsoft AZ-104 Exam Training Products Individually
Microsoft AZ-104 Premium File
Premium File 606 Q&A
$76.99$69.99
Microsoft AZ-104 Video Training Course
Training Course 132 Lectures
$21.99 $19.99
Microsoft AZ-104 PDF Study Guide
Study Guide 458 Pages
$21.99 $19.99
Microsoft AZ-104 Practice Test 36

Question 350

An administrator needs to increase a managed data disk's capacity without replacing a VM. What operations are required?

  1. Plan a region migration using Azure Resource Mover or appropriate replication and recovery tooling.
  2. Resize the VM first and assume the existing data disk will automatically grow without changing its provisioned size.
  3. Attach an appropriately sized persistent Azure managed data disk and mount it in the guest.
  4. Increase the managed disk size and expand the guest partition or filesystem appropriately.

Explanation

Correct Answer

D:

Azure disk size changes allocate block capacity, but the guest OS may need a partition/filesystem extension to use it.

Incorrect Answers

A:

Cross-region VM relocation involves data transfer and dependencies; it is not a simple resource-group reassignment.

B:

Changing compute capacity does not enlarge an Azure managed disk. Increase the disk resource's provisioned capacity and then extend the partition and filesystem inside the guest using a supported procedure.

C:

Managed disks provide durable Azure storage tied to the VM, whereas temporary disks can lose data on deallocation or host events. This matters here because an administrator needs to increase a managed data disk's capacity without replacing a VM. What operations are required.

Question 351

Azure reports a larger disk capacity but Windows still shows the old volume size. What is missing?

  1. Choose an appropriate compute-optimized VM size that satisfies CPU and region capacity needs.
  2. Validate application-level service status separately from the extension's provisioning status.
  3. Extend the Windows partition and file system into the newly allocated disk space.
  4. Restart Windows repeatedly without extending the partition or volume after increasing the underlying managed disk.

Explanation

Correct Answer

C:

The guest filesystem is distinct from the managed disk resource. Updating only the Azure disk property does not grow the volume automatically.

Incorrect Answers

A:

Azure VM families trade off CPU, memory, disk and price. A general-purpose or memory-optimized shape may cost more for the required CPU workload. This matters here because azure reports a larger disk capacity but Windows still shows the old volume size. What is missing.

B:

Extension execution status does not necessarily prove that a custom installed service started correctly. Observe the actual workload outcome. This matters here because azure reports a larger disk capacity but Windows still shows the old volume size. What is missing.

D:

Azure's disk resource can show the larger provisioned capacity while the guest volume remains at its old boundary. Refresh guest-disk discovery and extend the partition/filesystem; restarts by themselves cannot allocate the new space.

Question 352

A virtual machine's original OS disk must be retained during VM deletion for forensics. Which setting should be reviewed?

  1. Enable encryption at host for supported virtual machines and disk configurations.
  2. Deploy an Azure Virtual Machine Scale Set with the required instance model.
  3. Distribute virtual machines across appropriate fault and update domains in an availability set.
  4. Set the OS disk deletion option to detach or retain as appropriate before deleting the VM.

Explanation

Correct Answer

D:

Disk delete options determine whether eligible managed disks are removed with the VM. A retained disk preserves content for investigation. This matters here because a virtual machine's original OS disk must be retained during VM deletion for forensics. Which setting should be reviewed.

Incorrect Answers

A:

Encryption at host covers eligible host-side data paths beyond ordinary persistent managed disk encryption. Support depends on region, VM and disk options. This matters here because a virtual machine's original OS disk must be retained during VM deletion for forensics. Which setting should be reviewed.

B:

VM scale sets manage consistent VM instances and support orchestration, updates and scaling. Managing each VM independently adds overhead. This matters here because a virtual machine's original OS disk must be retained during VM deletion for forensics. Which setting should be reviewed.

C:

Fault domains protect against shared hardware fault, and update domains stagger planned servicing in supported datacenter placements.

Question 353

A deleted VM's OS disk unexpectedly disappeared. Which configuration should be inspected?

  1. Recheck accelerated-networking compatibility of the target VM SKU and NIC state.
  2. Apply the updated scale-set model explicitly to selected instances under the manual upgrade policy.
  3. Review encryption-at-host support and configuration separately from managed disk encryption.
  4. Check the VM OS disk deleteOption and any cleanup automation or policy.

Explanation

Correct Answer

D:

Managed disk retention is conditional on delete settings and separate cleanup. VM deletion does not guarantee every disk is preserved. This matters here because a deleted VM's OS disk unexpectedly disappeared. Which configuration should be inspected.

Incorrect Answers

A:

Not every VM SKU supports accelerated networking. A resize can change which NIC features are available. This matters here because a deleted VM's OS disk unexpectedly disappeared. Which configuration should be inspected.

B:

Manual upgrade mode does not automatically update all existing instances. The model and instance state can diverge until updates are requested. This matters here because a deleted VM's OS disk unexpectedly disappeared. Which configuration should be inspected.

C:

Managed disk server-side encryption and encryption at the host operate at different layers. Configuring one does not imply the other. This matters here because a deleted VM's OS disk unexpectedly disappeared. Which configuration should be inspected.

Question 354

A company wants a reusable hardened Windows VM image distributed to multiple regions. Which Azure image service is appropriate?

  1. Publish a versioned image definition in Azure Compute Gallery with supported regional replication.
  2. Configure an SSH public key for the Linux admin and protect the private key outside Azure.
  3. Plan a region migration using Azure Resource Mover or appropriate replication and recovery tooling.
  4. Choose an appropriate compute-optimized VM size that satisfies CPU and region capacity needs.

Explanation

Correct Answer

A:

Compute Gallery stores and distributes reusable image versions for consistent provisioning across locations. This is more structured than cloning one VM manually.

Incorrect Answers

B:

SSH public-key login avoids password reuse and supports controlled key management. The VM stores only the public key for verification. This matters here because a company wants a reusable hardened Windows VM image distributed to multiple regions. Which Azure image service is….

C:

Cross-region VM relocation involves data transfer and dependencies; it is not a simple resource-group reassignment. This matters here because a company wants a reusable hardened Windows VM image distributed to multiple regions. Which Azure image service is….

D:

Azure VM families trade off CPU, memory, disk and price. A general-purpose or memory-optimized shape may cost more for the required CPU workload. This matters here because a company wants a reusable hardened Windows VM image distributed to multiple regions. Which Azure image service is….

Question 355

A scale set pins image version 1.2.0 but the gallery publishes 1.3.0; the VMs stay unchanged. Why?

  1. Rely only on the scale-set automatic upgrade policy while leaving the image reference pinned to version 1.2.0.
  2. Apply the updated scale-set model explicitly to selected instances under the manual upgrade policy.
  3. Verify image-version reference and scale-set upgrade policy before expecting rollout.
  4. Check the VM size's aggregate disk IOPS and throughput limits.

Explanation

Correct Answer

C:

A pinned image reference remains on its specified version until intentionally updated. Publishing a newer gallery version does not rewrite running instances.

Incorrect Answers

A:

An upgrade policy does not automatically replace an explicitly pinned image version with a newly published gallery version. Update the model reference and apply the supported upgrade process.

B:

Manual upgrade mode does not automatically update all existing instances. The model and instance state can diverge until updates are requested. This matters here because a scale set pins image version 1.2.0 but the gallery publishes 1.3.0; the VMs stay unchanged. Why.

D:

Disk performance can be capped by both individual disk SKUs and total VM throughput. Faster disks cannot exceed the host capability. This matters here because a scale set pins image version 1.2.0 but the gallery publishes 1.3.0; the VMs stay unchanged. Why.

Question 356

An ACI workload needs private access to an application endpoint inside a VNet. What network arrangement is appropriate?

  1. Use the shared network namespace of one container group when localhost coordination is required.
  2. Deploy the container group into an eligible delegated VNet subnet under supported integration.
  3. Set a supported minimum replica count above zero to maintain warm capacity.
  4. Deploy a container group using Azure Container Instances.

Explanation

Correct Answer

B:

ACI VNet integration uses supported subnet configuration to give the group private connectivity. A private registry alone does not connect it to a VNet. This matters here because an ACI workload needs private access to an application endpoint inside a VNet. What network arrangement is appropriate.

Incorrect Answers

A:

Localhost is scoped to the container group's network environment. Separate groups have different network identities. This matters here because an ACI workload needs private access to an application endpoint inside a VNet. What network arrangement is appropriate.

C:

Nonzero minimum replicas reduce cold starts but consume resources during idle periods. A zero minimum optimizes idle cost. This matters here because an ACI workload needs private access to an application endpoint inside a VNet. What network arrangement is appropriate.

D:

ACI runs isolated container workloads without maintaining a cluster control plane. This is suitable for simple short-duration tasks.

Question 357

An ACI group fails placement because the requested subnet is not configured for containers. What should be verified?

  1. Set a supported minimum replica count above zero to maintain warm capacity.
  2. Check ACI subnet delegation and supported VNet configuration in the chosen region.
  3. Reduce requested resources or request an eligible regional ACI quota increase.
  4. Use the shared network namespace of one container group when localhost coordination is required.

Explanation

Correct Answer

B:

Subnet compatibility and delegation affect container group deployment. Merely choosing a subnet address range is not sufficient.

Incorrect Answers

A:

Nonzero minimum replicas reduce cold starts but consume resources during idle periods. A zero minimum optimizes idle cost. This matters here because an ACI group fails placement because the requested subnet is not configured for containers.

C:

Local Docker execution does not test Azure subscription quota. Deployment requires Azure-side capacity authorization. This matters here because an ACI group fails placement because the requested subnet is not configured for containers.

D:

Localhost is scoped to the container group's network environment. Separate groups have different network identities. This matters here because an ACI group fails placement because the requested subnet is not configured for containers.

Question 358

An ACI group contains a proxy sidecar and an application process that must share a lifecycle and network context. How should it be defined?

  1. Place the application and sidecar in two separately created ACI container groups and assume they automatically share localhost and lifecycle.
  2. Place the cooperating containers in a single Azure Container Instances container group.
  3. Deploy the container group into an eligible delegated VNet subnet under supported integration.
  4. Configure a Container Apps readiness probe to reflect application startup readiness.

Explanation

Correct Answer

B:

Containers in one group are co-scheduled and can share localhost connectivity and lifecycle controls. Separate groups do not automatically share these.

Incorrect Answers

A:

Separately deployed container groups do not share one local network namespace or coordinated container-group lifecycle. The collaborating containers belong in a single group.

C:

ACI VNet integration uses supported subnet configuration to give the group private connectivity. A private registry alone does not connect it to a VNet. This matters here because an ACI group contains a proxy sidecar and an application process that must share a lifecycle and network context.

D:

Readiness indicates whether a replica should serve requests. Liveness targets failed processes that require restart.

Question 359

Two ACI containers in different groups attempt localhost communication and fail. Why?

  1. Grant AcrPull or an applicable repository-level pull permission to its identity.
  2. Pin the deployed container to a verified immutable image digest.
  3. Deploy the two containers as separate ACI groups and continue addressing each other as localhost.
  4. Use the shared network namespace of one container group when localhost coordination is required.

Explanation

Correct Answer

D:

Localhost is scoped to the container group's network environment. Separate groups have different network identities. This matters here because two ACI containers in different groups attempt localhost communication and fail. Why.

Incorrect Answers

A:

A pull-specific role minimizes registry privilege. Push authorization would permit unnecessary artifact modification. This matters here because two ACI containers in different groups attempt localhost communication and fail. Why.

B:

Digests identify exact content independent of mutable tags. This reduces accidental deployment of an unreviewed artifact. This matters here because two ACI containers in different groups attempt localhost communication and fail. Why.

C:

Localhost networking is shared inside one ACI container group, not across separately isolated groups. Use one group or explicit network endpoints.

Question 360

An ACI deployment asks for more memory than the selected region's allowed container-group capacity. What should be checked?

  1. Inspect external ingress flags and the environment's public network exposure.
  2. Validate container CPU and memory requests against current regional resource quotas.
  3. Validate the cron expression and time-zone interpretation of Container Apps job scheduling.
  4. Deploy a container group using Azure Container Instances.

Explanation

Correct Answer

B:

ACI deployment is constrained by supported resource shapes and subscription quota. A correct container image cannot overcome unavailable capacity.

Incorrect Answers

A:

Ingress type determines the application's network audience. A private app should not have unintended public routing.

C:

Schedules are evaluated according to the service's documented clock semantics. A local-time assumption can shift an execution window.

D:

ACI runs isolated container workloads without maintaining a cluster control plane. It is appropriate for simple short-duration tasks.

Microsoft Azure Administrator (AZ-104) Practice Tests