AZ-104 Free Practice Questions and Answers

Microsoft AZ-104 Azure Administrator Exam Questions

Last updated on Oct 30, 2026.

606 Questions & Answers

Continue with AZ-104 practice questions on storage recovery, deployment, virtual network connectivity, managed identities, and backup. Select an answer, then choose Reveal Solution to see the reasoning.

Question #6Topic: Storage recovery

A blob was overwritten yesterday, and the storage account has versioning enabled. What is the preferred recovery action?

A. Restore the prior blob version
B. Delete the storage account
C. Disable all access keys
D. Create an NSG rule

Reveal Solution

Correct Answer: A
Blob versioning retains earlier versions so the administrator can restore the required version.

Question #7Topic: App deployment

A team wants to deploy a new web app version and switch traffic back quickly if errors occur. Which approach best supports this?

A. Deploy to a staging slot, validate it, then swap slots
B. Replace the production app manually with no backup
C. Use a new DNS zone for every release
D. Disable monitoring during deployment

Reveal Solution

Correct Answer: A
A staging slot allows validation before a controlled swap and provides a practical rollback path.

Question #8Topic: Virtual network peering

Two Azure VNets in the same region need private connectivity. What should be configured?

A. VNet peering between the networks
B. A public load balancer only
C. A storage queue
D. A management group

Reveal Solution

Correct Answer: A
VNet peering provides private connectivity between virtual networks over the Azure backbone.

Question #9Topic: Managed identity

A VM-hosted script needs read access to one Key Vault without a stored secret. Which combination meets least privilege?

A. Enable a managed identity and grant it only the needed Key Vault data role
B. Use a shared subscription owner credential
C. Put the vault secret in a public repository
D. Grant every VM contributor rights

Reveal Solution

Correct Answer: A
A managed identity avoids a stored credential, and a narrowly scoped role limits access to the required vault operation.

Question #10Topic: Backup

A VM must be recoverable to a previous point after accidental deletion. Which service should be configured?

A. Azure Backup using a Recovery Services vault
B. Azure DNS zone
C. Network Watcher packet capture
D. Storage queue

Reveal Solution

Correct Answer: A
Azure Backup protects supported workloads and keeps recovery points in a vault for restoration.

← Previous Questions Order Premium PDF →

Get the Full Question Set

Order Premium PDF →

Get all 606 questions and answers in the Premium PDF.

Categories: Microsoft

AZ-104 Microsoft Azure Administrator Free Practice Questions and Answers

Microsoft AZ-104 Azure Administrator Exam Questions

Cart (0)