cert
cert-1
cert-2

Pass Microsoft AZ-104 Exam in First Attempt Guaranteed!

Get 100% Latest Exam Questions, Accurate & Verified Answers to Pass the Actual Exam!
30 Days Free Updates, Instant Download!

cert-5
cert-6
AZ-104 Exam - Verified By Experts
AZ-104 Premium Bundle
$29.98

AZ-104 Premium Bundle

$79.99
$109.97
  • Premium File 606 Questions & Answers. Last update: Oct 30, 2026
  • Training Course 132 Video Lectures
  • Study Guide 458 Pages
 
$109.97
$79.99
accept 453 downloads in last 7 days
block-screenshots
Purchase Microsoft AZ-104 Exam Training Products Individually
Microsoft AZ-104 Premium File
Premium File 606 Q&A
$76.99$69.99
Microsoft AZ-104 Video Training Course
Training Course 132 Lectures
$21.99 $19.99
Microsoft AZ-104 PDF Study Guide
Study Guide 458 Pages
$21.99 $19.99
Microsoft AZ-104 Practice Test 45

Question 440

A client gets an error attempting ordinary GET against an archived blob. What operation is required first?

  1. Initiate blob rehydration to a supported online tier and await completion.
  2. Configure a Blob lifecycle delete action with the appropriate age condition.
  3. Choose a suitable online access tier when prompt access is operationally required.
  4. Inspect recursive copy and include/exclude options for the AzCopy command.

Explanation

Correct Answer

A:

Archived blobs are not directly readable. Rehydration moves the object to an accessible tier and may take hours depending on priority. This matters here because a client gets an error attempting ordinary GET against an archived blob. What operation is required first.

Incorrect Answers

B:

Delete actions remove eligible objects after the configured condition, whereas tier transitions change cost and retrieval behavior.

C:

Archive's rehydration delay conflicts with immediate incident access. Hot or cool/cold tiers preserve direct reads.

D:

AzCopy behavior depends on source paths and recursion or filters. A successful command can still transfer only a subset of intended content. This matters here because a client gets an error attempting ordinary GET against an archived blob. What operation is required first.

Question 441

A troubleshooting log is rarely read but must remain immediately downloadable. Which cost-oriented tier category fits better than Archive?

  1. Compare Hot versus Cool or Cold total storage and transaction costs for the actual access pattern.
  2. Select the Blob archive tier, then rely on container soft delete to guarantee immediate downloads of archived logs.
  3. Move eligible block blobs to the Archive access tier under supported redundancy and retention.
  4. Use an online cool or cold Blob Storage access tier appropriate to access frequency.

Explanation

Correct Answer

D:

Cool and cold tiers allow online retrieval with different storage, transaction, and minimum retention pricing. Archive is offline. This matters here because a troubleshooting log is rarely read but must remain immediately downloadable. Which cost-oriented tier category….

Incorrect Answers

A:

Tier selection requires both storage and retrieval cost calculation. Lowest per-GB storage pricing is not necessarily lowest total cost.

B:

Container recovery cannot make offline archive-tier blobs available for online reads. Choose a compatible cool or cold online tier if immediate retrieval is required.

C:

The Archive tier stores offline data at lower capacity cost with rehydration requirements. This is unsuitable for immediate reads.

Question 442

A team moves a daily-read diagnostic file to Archive and breaks response workflows. What should change?

  1. Grant a scoped SAS or appropriate data role constrained to the destination container.
  2. Choose a suitable online access tier when prompt access is operationally required.
  3. Initiate blob rehydration to a supported online tier and await completion.
  4. Move eligible block blobs to the Archive access tier under supported redundancy and retention.

Explanation

Correct Answer

B:

Archive's rehydration delay conflicts with immediate incident access. Hot or cool/cold tiers preserve direct reads. This matters here because a team moves a daily-read diagnostic file to Archive and breaks response workflows.

Incorrect Answers

A:

Container-scoped permissions limit an external workflow's access surface. Storage account keys would expose broader authorization. This matters here because a team moves a daily-read diagnostic file to Archive and breaks response workflows.

C:

Archived blobs are not directly readable. Rehydration moves the object to an accessible tier and may take hours depending on priority. This matters here because a team moves a daily-read diagnostic file to Archive and breaks response workflows.

D:

The Archive tier stores offline data at lower capacity cost with rehydration requirements. It is unsuitable for immediate reads. This matters here because a team moves a daily-read diagnostic file to Archive and breaks response workflows.

Question 443

A deployment tries to recreate a production storage account that was intended only as a reference. What should be checked?

  1. Expose the storage account ID through a module output but leave its Bicep declaration as a new resource to create.
  2. Change a normal resource declaration to a correctly scoped existing resource declaration where appropriate.
  3. Approve the what-if report but leave a normal create declaration for the already-provisioned production account.
  4. Change the deployment identity principal ID to prevent the template from managing an existing storage account.

Explanation

Correct Answer

B:

A normal declaration describes desired deployment state. An existing declaration is the Bicep mechanism for referencing resources not created by this file. This matters here because a deployment tries to recreate a production storage account that was intended only as a reference.

Incorrect Answers

A:

Publishing a resource ID does not change a create declaration into a read-only reference. Mark the known production account as existing, with its correct name and scope, to avoid an unintended redeployment.

C:

Previewing the erroneous declaration does not prevent its execution later. Reference the storage account as an existing resource at its actual scope where appropriate.

D:

Changing the caller identity does not make a resource declaration reference-only. Declare the account existing at its correct scope instead of recreating it.

Question 444

An infrastructure team repeats the same subnet and NSG pattern in many environments. How should the Bicep files share it?

  1. Add an if condition to the relevant resource or module declaration.
  2. Extract a reusable Bicep module with well-defined parameters and outputs.
  3. Check the plan's resource ID and the web app's inferred or explicit dependency.
  4. Hard-code the same identity resource ID into copied templates instead of extracting the repeated subnet and NSG pattern into a module.

Explanation

Correct Answer

B:

Modules encapsulate repeatable resource patterns and expose a documented contract. Copying identical blocks into every environment complicates updates.

Incorrect Answers

A:

Bicep conditional deployment lets a template include optional resources based on a parameter. Manually deleting source lines is not reusable. This matters here because an infrastructure team repeats the same subnet and NSG pattern in many environments.

C:

A reference to an incorrect plan ID may fail even when both resources are described. Correct symbolic dependency and valid ID resolution are needed. This matters here because an infrastructure team repeats the same subnet and NSG pattern in many environments.

D:

A hard-coded identity reference neither parameterizes the network components nor creates a reusable Bicep module with typed inputs and outputs.

Question 445

A nested module needs to return its created subnet ID to the parent. How should it expose it?

  1. Declare a named output in the module and reference module.outputs from the parent.
  2. Reference a resource symbol inside the module but omit any output declaration and assume the caller sees the subnet ID.
  3. Declare an output in an unrelated root deployment and assume a nested Bicep module publishes its values automatically.
  4. Use what-if and review the deployment mode's deletion semantics before execution.

Explanation

Correct Answer

A:

Module outputs are explicit values made available to callers. A variable inside a module is not automatically visible in the parent. This matters here because a nested module needs to return its created subnet ID to the parent.

Incorrect Answers

B:

Resource symbols are scoped to their own Bicep file. The child module must declare an output and the parent must read moduleName.outputs.outputName to consume the created subnet ID.

C:

An output declared in an unrelated deployment is not automatically visible as a Bicep module output. Put a named output inside the actual module and access it through that module's outputs property in the parent.

D:

Complete mode can remove resources omitted from supported deployment scopes, while incremental mode usually retains them. Destructive changes require explicit approval. This matters here because a nested module needs to return its created subnet ID to the parent.

Question 446

A Bicep deployment should create a diagnostic setting only when a Boolean parameter is true. Which construct supports this?

  1. Declare the storage account with the existing keyword and correct scope.
  2. Set targetScope to subscription and use resource types supported at that scope.
  3. Add an if condition to the relevant resource or module declaration.
  4. Use what-if and review the deployment mode's deletion semantics before execution.

Explanation

Correct Answer

C:

Bicep conditional deployment lets a template include optional resources based on a parameter. Manually deleting source lines is not reusable. This matters here because a Bicep deployment should create a diagnostic setting only when a Boolean parameter is true. Which construct….

Incorrect Answers

A:

The existing modifier references a pre-existing resource and can expose its properties without provisioning a replacement. This matters here because a Bicep deployment should create a diagnostic setting only when a Boolean parameter is true. Which construct….

B:

Bicep targetScope selects the deployment level. Resource groups and policy assignments can use subscription context under appropriate templates. This matters here because a Bicep deployment should create a diagnostic setting only when a Boolean parameter is true. Which construct….

D:

Complete mode can remove resources omitted from supported deployment scopes, while incremental mode usually retains them. Destructive changes require explicit approval. This matters here because a Bicep deployment should create a diagnostic setting only when a Boolean parameter is true. Which construct….

Question 447

The condition evaluates to false but another resource still references the absent diagnostic object. What must be reviewed?

  1. Verify that the resource's location property actually references the parameter.
  2. Declare the storage account with the existing keyword and correct scope.
  3. Guard dependent references and outputs consistently when the resource is conditionally deployed.
  4. Declare a named output in the module and reference module.outputs from the parent.

Explanation

Correct Answer

C:

Conditional resources can be omitted, so unguarded references can fail. The dependency graph and expressions must handle the disabled case. This matters here because the condition evaluates to false but another resource still references the absent diagnostic object.

Incorrect Answers

A:

Defining a parameter does not apply it unless the resource expression uses that input. An unrelated default does not override a literal resource location. This matters here because the condition evaluates to false but another resource still references the absent diagnostic object.

B:

The existing modifier references a pre-existing resource and can expose its properties without provisioning a replacement. This matters here because the condition evaluates to false but another resource still references the absent diagnostic object.

D:

Module outputs are explicit values made available to callers. A variable inside a module is not automatically visible in the parent. This matters here because the condition evaluates to false but another resource still references the absent diagnostic object.

Question 448

A disk is corrupted but an administrator wants to preserve the current bit-level state before repair. Which resource can capture it?

  1. Create a point-in-time snapshot of the managed disk.
  2. Check managed disk and other retained resource charges separately from VM compute.
  3. Compare disk-level and VM-level IOPS/throughput limits using Azure Monitor metrics.
  4. Inspect cloud-init configuration and logs for the guest image's custom-data processing.

Explanation

Correct Answer

A:

Managed disk snapshots capture persistent disk contents for restore, forensic comparison or new disk creation. They are distinct from guest application-aware backup. This matters here because a disk is corrupted but an administrator wants to preserve the current bit-level state before repair. Which resource….

Incorrect Answers

B:

Deallocation ends normal allocated compute charges but does not automatically delete attached managed disks or public IP resources. This matters here because a disk is corrupted but an administrator wants to preserve the current bit-level state before repair. Which resource….

C:

A VM's aggregate limits can become the bottleneck even when a disk advertises higher performance. Changing disk alone may not help.

D:

Passing user data to a VM is not identical to executing it. A compatible image and initialization configuration are required. This matters here because a disk is corrupted but an administrator wants to preserve the current bit-level state before repair. Which resource….

Question 449

A recovery team restores a disk snapshot but finds the database consistency point was not application-aware. What limitation explains this?

  1. Recognize that the VM temporary disk is nonpersistent through certain host lifecycle events.
  2. Ensure application state and load balancing support failover, not merely VM placement.
  3. Use a supported OS disk swap or recovery workflow with required VM state instead of arbitrary hot detach.
  4. Distinguish crash-consistent disk snapshots from application-consistent backup workflows.

Explanation

Correct Answer

D:

A point-in-time disk snapshot does not automatically quiesce every application. Database consistency may require coordinated backup tooling.

Incorrect Answers

A:

Temporary storage is local to the VM host and should not hold irreplaceable application content. Use persistent managed disks for durable data. This matters here because a recovery team restores a disk snapshot but finds the database consistency point was not application-aware. What….

B:

Infrastructure placement increases availability but cannot automatically make a single-host stateful app stateless. Health routing and data continuity are separate needs. This matters here because a recovery team restores a disk snapshot but finds the database consistency point was not application-aware. What….

C:

The boot OS disk is managed differently from ordinary data disks. Replacing it requires a supported operation and appropriate downtime.

Question 450

A development VM must move from one resource group to another in the same region without changing its IP or OS. Which operation is appropriate?

  1. Use a supported Azure resource move after validating VM dependencies.
  2. Consider an eligible Azure capacity reservation group for supported VM sizes and regions.
  3. Create a point-in-time snapshot of the managed disk.
  4. Move to a multi-zone or multi-region resiliency design where supported.

Explanation

Correct Answer

A:

A resource-group move changes administrative grouping while leaving the region fixed when supported. Linked disks and NICs may need coordinated handling.

Incorrect Answers

B:

Capacity reservations can secure capacity for specified VM size and zone/region combinations. They are separate from quotas and redundancy. This matters here because a development VM must move from one resource group to another in the same region without changing its IP or OS.….

C:

Managed disk snapshots capture persistent disk contents for restore, forensic comparison or new disk creation. They are distinct from guest application-aware backup. This matters here because a development VM must move from one resource group to another in the same region without changing its IP or OS.….

D:

Availability sets reduce host-level correlated failures but do not create independent zonal or regional facilities. This matters here because a development VM must move from one resource group to another in the same region without changing its IP or OS.….

Microsoft Azure Administrator (AZ-104) Practice Tests