The Microsoft AZ-104 Microsoft Azure Administrator Exam is part of the Azure Administrator Associate certification track. It is designed for IT professionals who manage Azure services, including networking, compute, identity, governance, storage, and monitoring. This exam matters for candidates who want to validate practical cloud administration skills and prove they can handle day-to-day Azure operations.
| # | Exam Topics | Sub-Topics | Approximate Weightage (%) |
|---|---|---|---|
| 1 | Implement and manage virtual networking | Virtual networks and subnets; Network security groups; DNS and routing; Private access and connectivity | 25% |
| 2 | Deploy and manage Azure compute resources | Virtual machines; VM availability and scaling; App Service basics; Container and compute deployment | 20% |
| 3 | Manage Azure identities and governance | Microsoft Entra ID users and groups; Role-based access control; Subscriptions and management groups; Policy and locks | 20% |
| 4 | Implement and manage storage | Storage accounts; Blobs, files, queues, and tables; Access tiers and replication; Storage security and access control | 20% |
| 5 | Monitor and maintain Azure resources | Azure Monitor; Alerts and metrics; Log Analytics and diagnostics; Backup and resource health | 15% |
This exam tests more than memorization. Candidates must show practical knowledge of Azure administration, understand how services work together, and apply the right configuration choices in real scenarios. It also checks your ability to solve operational tasks efficiently and maintain secure, reliable cloud resources.
QA4Exam.com offers an Exam PDF with actual questions and answers plus an Online Practice Test for the Microsoft AZ-104 exam. These materials help you study with real exam simulation, so you can get familiar with the question style and pressure before test day.
The questions are updated to stay relevant, and the verified answers help you check your understanding quickly. The practice test also supports time management practice, which is important when you want to finish confidently and pass on your first attempt.
With focused preparation and repeated practice, you can strengthen weak areas and improve your readiness for the Microsoft Azure Administrator Exam.
The exam is for IT professionals who want to validate their ability to manage Azure resources and earn the Azure Administrator Associate certification.
It can be challenging because it tests practical Azure administration skills across networking, compute, identity, storage, and monitoring.
Braindumps alone are not the best approach. You should use them with practice and hands-on understanding to improve your chances of passing.
Hands-on experience is strongly recommended because the exam focuses on real administrative tasks and practical Azure decision-making.
QA4Exam.com dumps are useful for question practice and answer review, but combining them with broader study and practice is the most effective way to prepare.
The Online Practice Test helps you simulate the exam, manage time, review verified answers, and identify weak areas before the real test.
QA4Exam.com provides an Exam PDF with questions and answers and an Online Practice Test for interactive preparation.
You plan to create an Azure virtual machine named VM1 that will be configured as shown in the following exhibit.
The planned disk configurations for VM1 are shown in the following exhibit.




You need to ensure that VM1 can be created in an Availability Zone.
Which two settings should you modify? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
https://docs.microsoft.com/en-us/azure/site-recovery/move-azure-vms-avset-azone https://docs.microsoft.com/en-us/azure/virtual-machines/windows/create-portal-availability-zone https://docs.microsoft.com/en-us/azure/virtual-machines/manage-availability https://docs.microsoft.com/en-us/azure/availability-zones/az-overview#availability-zones
You have an Azure subscription that contains a storage account named contoso2025 and two users named User1 and User2.
You assign User1 the roles shown in the exhibit.

Which two actions can User1 perform? Each correct answer presents a complete solution.
User1 can view blob data and upload blob data because the exhibit shows User1 has the Storage Blob Data Contributor role assigned directly at the storage account scope. Microsoft defines this built-in role as allowing a principal to read, write, and delete Azure Storage containers and blobs. Therefore, User1 has data-plane permissions for Blob Storage, including reading existing blob content and uploading new blobs.
You have an Azure subscription that contains a storage account named storage 1.
You need to ensure that the access keys for storage! rotate automatically.
What should you configure?
In Azure, a storage account access key provides full access to all data within the account. To reduce risk and follow security best practices, these keys should be rotated (regenerated) periodically.
According to the Microsoft Azure Storage and Security documentation, Azure Key Vault can be used to automate access key rotation for storage accounts.
Azure Key Vault allows you to:
Store and manage secrets, keys, and certificates securely.
Integrate directly with Azure Storage to manage account keys and Shared Access Signatures (SAS).
Enable automated key rotation when using Azure Key Vault managed storage account keys.
Here's how it works:
In Azure Key Vault, add the storage account (storage1) as a managed storage account.
Key Vault periodically regenerates (rotates) the storage access keys automatically.
Applications can retrieve updated keys via Key Vault APIs or managed identities without manual key updates.
This process ensures consistent security and reduces the administrative effort required for key rotation.
Other options such as backup vaults, redundancy, or lifecycle management do not handle access key rotation---they serve data protection or retention purposes, not key management.
Final Verified Answe r: D. an Azure key vault
You have an Azure virtual machine named VM1. VM1 was deployed by using a custom Azure Resource Manager template named ARM1.json.
You receive a notification that VM1 will be affected by maintenance.
You need to move VM1 to a different host immediately.
Solution: From the resource group blade, move VM1 to another resource group.
Does this meet the goal?
Moving a virtual machine (VM) to a different host immediately in Azure is related to host-level maintenance mitigation, not to resource organization.
In this scenario, VM1 is affected by planned maintenance, and the goal is to move VM1 to a different host immediately.
According to Microsoft Azure Administrator documentation:
Moving a VM to another resource group is an Azure Resource Manager (ARM) operation used for administrative organization.
A resource group move does not change:
The physical host
The datacenter
The availability zone
The underlying hardware
Therefore, moving VM1 to another resource group does not relocate the VM to a different host and does not avoid maintenance.
To move a VM to a different host in response to maintenance, supported options include:
Redeploying the VM (which moves it to a new node)
Using Availability Sets or Availability Zones
Using Azure Scheduled Events to prepare workloads
Microsoft documentation explicitly states:
''Moving resources between resource groups does not change the location, availability zone, or the physical host of the resource.''
Because the proposed solution does not move the VM to a new host, it does not meet the goal.
You plan to deploy several Azure virtual machines that will run Windows Server 2022 in a virtual machine scale set by using an Azure Resource Manager template.
You need to ensure that NGINX is available on all the virtual machines after they are deployed.
What should you use?
When deploying Azure Virtual Machine Scale Sets (VMSS) using an Azure Resource Manager (ARM) template, you can automatically install and configure applications or services (like NGINX) on the virtual machines using the Azure Custom Script Extension.
According to the Microsoft Azure Administrator documentation, the Custom Script Extension is used to download and execute scripts on Azure virtual machines after deployment. It is ideal for configuration management, application installation, and post-deployment software setup.
The extension can execute PowerShell or Bash scripts stored in Azure Storage or GitHub repositories. When used with an ARM template, you define the extension in the template's 'resources' section under 'type': 'Microsoft.Compute/virtualMachines/extensions' or 'Microsoft.Compute/virtualMachineScaleSets/extensions'.
Microsoft's official documentation notes:
''The Custom Script Extension for Windows and Linux downloads and executes scripts on Azure virtual machines. This extension is useful for post-deployment configuration, software installation, or any other configuration or management tasks.''
In this case, using Azure Custom Script Extension allows automatic installation of NGINX on all VM instances as soon as they are created in the scale set --- satisfying the requirement that NGINX is available immediately after deployment.
Other options do not fit:
Application Insights is used for monitoring, not configuration.
Publish-AzVMDscConfiguration and New-AzConfigurationAssignment are used for Desired State Configuration (DSC), not lightweight application installation like NGINX.
Hence, the only verified and cost-efficient solution is Azure Custom Script Extension.
Full Exam Access, Actual Exam Questions, Validated Answers, Anytime Anywhere, No Download Limits, No Practice Limits
Get All 477 Questions & Answers