Microsoft AZ-104 Practice Test 60
Question 590
A VM fails during a service incident but the team only uses custom CPU alerts. What other source should they consult?
- Use where for the operation predicate and project for the chosen output columns.
- Run recurring connection monitoring and correlate failures with route and service health changes.
- Correlate source/destination routing, NSG restrictions and service port reachability.
- Correlate regional Azure Service Health notices with VM Resource Health.
Explanation
Correct Answer
D:CPU metrics cannot establish whether an underlying Azure service incident occurred. Platform health sources provide contextual evidence. This matters here because a VM fails during a service incident but the team only uses custom CPU alerts. What other source should they consult.
Incorrect Answers
A:Where selects qualifying rows; project selects displayed fields. Neither operation by itself computes aggregate counts. This matters here because a VM fails during a service incident but the team only uses custom CPU alerts. What other source should they consult.
B:An instantaneous successful test does not prove sustained availability. Repeated probes reveal time-dependent faults. This matters here because a VM fails during a service incident but the team only uses custom CPU alerts. What other source should they consult.
C:A healthy guest application does not guarantee the network path is open. Monitoring spans source, route and endpoint filtering. This matters here because a VM fails during a service incident but the team only uses custom CPU alerts. What other source should they consult.
Question 591
A team needs a view of VM performance, processes and dependencies across a fleet. Which Azure Monitor feature is appropriate?
- Verify the data collection rule association, syslog facility/severity filters and workspace destination.
- Enable VM insights with appropriate Azure Monitor Agent and collection settings.
- Install Azure Monitor Agent and use a data collection rule targeting the required logs.
- Review the action group's webhook receiver URL, authentication and delivery errors.
Explanation
Correct Answer
B:VM insights provides curated performance and dependency monitoring where supported. Data collection and permissions must be configured. This matters here because a team needs a view of VM performance, processes and dependencies across a fleet. Which Azure Monitor feature is….
Incorrect Answers
A:Agent installation alone does not specify every log source or destination. DCR rules determine collected data. This matters here because a team needs a view of VM performance, processes and dependencies across a fleet. Which Azure Monitor feature is….
C:Azure Monitor Agent collects configured guest telemetry through data collection rules into supported destinations. This matters here because a team needs a view of VM performance, processes and dependencies across a fleet. Which Azure Monitor feature is….
D:Alert rules invoke their configured action groups. A stale receiver configuration can fail delivery even when alert detection is correct. This matters here because a team needs a view of VM performance, processes and dependencies across a fleet. Which Azure Monitor feature is….
Question 592
VM insights charts are empty although Azure platform VM metrics exist. What should be checked?
- Verify the data collection rule association, syslog facility/severity filters and workspace destination.
- Inspect agent installation, DCR association and VM insights data collection configuration.
- Inspect the workspace tables and active data collection rules before rewriting the KQL logic.
- Add by Computer or another VM identifier to the summarize aggregation.
Explanation
Correct Answer
B:Platform metrics do not guarantee guest performance counters or process dependency data were collected. VM insights relies on configured telemetry.
Incorrect Answers
A:Agent installation alone does not specify every log source or destination. DCR rules determine collected data. This matters here because vM insights charts are empty although Azure platform VM metrics exist.
C:Queries can return only collected records. An empty table may be a collection problem rather than a KQL syntax failure. This matters here because vM insights charts are empty although Azure platform VM metrics exist.
D:A summarize without grouping calculates one aggregate across all matching rows. A by clause separates per-resource results. This matters here because vM insights charts are empty although Azure platform VM metrics exist.
Question 593
A request includes a metric alert but its signal is a Log Analytics KQL result rather than a platform metric. Which alert type fits?
- Create an Azure Monitor scheduled query alert rule against the KQL result.
- Configure a metric alert only and assume it can execute the Log Analytics KQL query as its platform-metric signal.
- Run Kusto Query Language queries against supported Log Analytics workspace tables.
- Review workbook resource scopes and identifiers after resource migration.
Explanation
Correct Answer
A:Log search alerts evaluate returned query data on configured schedules. Metric alerts target numeric metric signals. This matters here because a request includes a metric alert but its signal is a Log Analytics KQL result rather than a platform metric. Which….
Incorrect Answers
B:A platform metric alert and a Log Analytics scheduled-query alert consume different signal types. A KQL result requires the query-based alert mechanism.
C:KQL provides filtering, aggregation and joins over telemetry such as Heartbeat or event records. It is separate from Azure Resource Graph queries. This matters here because a request includes a metric alert but its signal is a Log Analytics KQL result rather than a platform metric. Which….
D:Many dashboards store explicit resource IDs. Moving or recreating resources can invalidate previously selected targets. This matters here because a request includes a metric alert but its signal is a Log Analytics KQL result rather than a platform metric. Which….
Question 594
A scheduled query alert fires on every evaluation although the intended threshold is count greater than ten. What should be checked?
- Add by Computer or another VM identifier to the summarize aggregation.
- Raise a monthly budget limit to stop a scheduled Log Analytics query alert from firing on every evaluation.
- Look for historical Activity Log exports in the configured retention destination.
- Review query aggregation, measurement threshold, evaluation frequency and failing-period settings.
Explanation
Correct Answer
D:Scheduled query conditions depend on the result shape and threshold configuration. A query returning any row can inadvertently satisfy an overly broad condition. This matters here because a scheduled query alert fires on every evaluation although the intended threshold is count greater than ten.
Incorrect Answers
A:A summarize without grouping calculates one aggregate across all matching rows. A by clause separates per-resource results. This matters here because a scheduled query alert fires on every evaluation although the intended threshold is count greater than ten.
B:A financial budget cannot correct the scheduled query's numerical threshold or failing-period logic. Inspect the query aggregation, alert threshold and evaluation configuration.
C:Native Activity Log is not an indefinite historical archive. Long-term audit depends on prior exports and destination retention. This matters here because a scheduled query alert fires on every evaluation although the intended threshold is count greater than ten.
Question 595
A team wants to fail back before replication to the original region is healthy. What should it verify?
- Review recovery plan group ordering, post-start validation and dependencies.
- Initiate a planned or unplanned Site Recovery failover as appropriate to the incident.
- Check reprotection health and available recovery points before initiating failback.
- Start failback merely because the original VM resource name exists, without verifying reverse replication.
Explanation
Correct Answer
C:Switching primary direction without valid reverse replication can create downtime or data loss. Reprotection is a critical prerequisite.
Incorrect Answers
A:Dependent application tiers must be restored in workable sequence. VM power-on does not guarantee service readiness. This matters here because a team wants to fail back before replication to the original region is healthy.
B:Failover uses replicated state in the recovery region to start supported workloads. A regional outage may require unplanned failover. This matters here because a team wants to fail back before replication to the original region is healthy.
D:The existence of a target VM or resource group does not prove a recoverable reverse replica. Check reprotection state, available recovery points, networking and application consistency before moving production back.
Question 596
A recovery manager wants to orchestrate a three-tier application restart in dependency order during Site Recovery failover. What feature fits?
- Protect every VM separately and assume their application startup dependencies will resolve without ordering.
- Configure the vault's soft-delete retention period as the startup order for a three-tier application.
- Create an ASR recovery plan with ordered groups and supported automation steps.
- Run an isolated Site Recovery test failover using a suitable test network.
Explanation
Correct Answer
C:Recovery plans coordinate groups of protected machines and recovery actions. Starting tiers arbitrarily can break dependencies. This matters here because a recovery manager wants to orchestrate a three-tier application restart in dependency order during Site Recovery….
Incorrect Answers
A:Independent protected VMs do not by themselves coordinate a database, application and web tier. A recovery plan defines ordered groups, manual checkpoints and supported scripts so dependent services start in the right sequence.
B:Retention controls do not start web, service and database tiers in dependency order. A Site Recovery recovery plan groups workloads and runs supported automation steps in sequence.
D:Test failover brings up recovery instances without committing a production cutover. Isolation reduces network and identity collision risk. This matters here because a recovery manager wants to orchestrate a three-tier application restart in dependency order during Site Recovery….
Question 597
The recovered web servers boot before the database service and fail health checks. What should be corrected?
- Restore the Azure VM from an eligible recovery point into the selected resource group.
- Check reprotection health and available recovery points before initiating failback.
- Review recovery plan group ordering, post-start validation and dependencies.
- Reprotect the recovered workload and perform a supported failback sequence when the source is ready.
Explanation
Correct Answer
C:Dependent application tiers must be restored in workable sequence. VM power-on does not guarantee service readiness. This matters here because the recovered web servers boot before the database service and fail health checks.
Incorrect Answers
A:Azure Backup restores VM disks and can create a new VM under supported restore workflows. Original network and identity dependencies must be checked. This matters here because the recovered web servers boot before the database service and fail health checks.
B:Switching primary direction without valid reverse replication can create downtime or data loss. Reprotection is a critical prerequisite. This matters here because the recovered web servers boot before the database service and fail health checks.
D:Failback requires replication direction and target infrastructure readiness; the initial failover is not automatically reversible. This matters here because the recovered web servers boot before the database service and fail health checks.
Question 598
An organization wants alerts when backup jobs fail in several Azure vaults. Which monitoring system should be configured?
- Enable Azure Backup reports or supported monitoring exports to a central Log Analytics workspace.
- Revalidate managed identities, data roles, network access and secret dependencies after restore.
- Increase the vault backup policy retention and treat that as automatic alerting for each failed backup job.
- Use Azure Backup monitoring, alerting and reporting for the protected vaults.
Explanation
Correct Answer
D:Backup monitoring captures job failures and protection status. VM CPU metrics do not show recovery-point integrity. This matters here because an organization wants alerts when backup jobs fail in several Azure vaults. Which monitoring system should be configured.
Incorrect Answers
A:Backup reporting consolidates job, item, storage and health details for analysis where supported. It does not require per-VM manual screenshots. This matters here because an organization wants alerts when backup jobs fail in several Azure vaults. Which monitoring system should be configured.
B:Restoring disk state is not the same as restoring every external security relationship. Recreated identities or changed region paths can break key access. This matters here because an organization wants alerts when backup jobs fail in several Azure vaults. Which monitoring system should be configured.
C:Retention settings do not subscribe operations staff to failure notifications. Use supported Azure Backup job monitoring and alert rules.
Question 599
A backup alert was suppressed during maintenance and an important job failed unnoticed. What should be checked?
- Review alert processing suppression, backup job dashboards and escalation policies.
- Create a Backup vault and choose supported data-source protection policies.
- Inspect the backup job history, policy association, VM agent state and failure details.
- Confirm the recovery point consistency type and workload-specific backup requirements.
Explanation
Correct Answer
A:Silencing notifications can conceal material backup failures. Monitoring should keep failure evidence and provide an agreed review process.
Incorrect Answers
B:Backup vaults support selected newer Azure Backup data sources and policy capabilities. They are not interchangeable with Recovery Services vaults for every workload. This matters here because a backup alert was suppressed during maintenance and an important job failed unnoticed.
C:A policy configured on paper does not prove successful execution. Job outcomes and generated recovery points establish actual protection. This matters here because a backup alert was suppressed during maintenance and an important job failed unnoticed.
D:A successful backup operation does not automatically mean every external database transaction was quiesced. Consistency must match application needs. This matters here because a backup alert was suppressed during maintenance and an important job failed unnoticed.
Question 600
A backup team wants to know whether every critical VM has at least one recent successful recovery point. Which report should they inspect?
- Verify the vault's diagnostic routing to the reporting workspace and data ingestion delay.
- Inspect the backup job history, policy association, VM agent state and failure details.
- Daily recovery points can lose far more than one hour of recent changes.
- Review backup item protection status and latest successful recovery points for each VM.
Explanation
Correct Answer
D:Policy assignments describe intent, while actual recovery points show executed protection. Coverage checks need both. This matters here because a backup team wants to know whether every critical VM has at least one recent successful recovery point. Which….
Incorrect Answers
A:Central reporting depends on exported telemetry and timing. Successful local backup jobs do not automatically populate another workspace. This matters here because a backup team wants to know whether every critical VM has at least one recent successful recovery point. Which….
B:A policy configured on paper does not prove successful execution. Job outcomes and generated recovery points establish actual protection. This matters here because a backup team wants to know whether every critical VM has at least one recent successful recovery point. Which….
C:An RPO requirement must match recovery-point frequency and replication behavior. More frequent protection or replication may be needed. This matters here because a backup team wants to know whether every critical VM has at least one recent successful recovery point. Which….