Home/Directory/az 104

az 104 Practice Questions

Page 2 of 3 (230 total questions)

Can Azure Machine Learning train models using data that is stored on-premises?
View Question & Answer ➔
You are designing a CI/CD pipeline. You need a service to compile source code, run tests, and produce software packages that are ready to deploy. Which service handles the build phase?
View Question & Answer ➔
Which Azure DevOps service provides a platform for defining and running automated builds and releases (CI/CD)?
View Question & Answer ➔
What is a 'Self-hosted agent' in Azure Pipelines used for?
View Question & Answer ➔
In a YAML pipeline, what does the 'trigger' section define?
View Question & Answer ➔
What is a 'Deployment Group' in Azure Pipelines Classic release pipelines?
View Question & Answer ➔
Which pipeline component allow you to group multiple related tasks together and define dependencies between them (e.g., 'Build' must finish before 'Test')?
View Question & Answer ➔
What is 'Azure Artifacts' used for in a CI/CD pipeline?
View Question & Answer ➔
Can you use Azure Pipelines to deploy applications to other cloud providers (e.g., AWS or GCP)?
View Question & Answer ➔
What is a 'Variable Group' in Azure Pipelines?
View Question & Answer ➔
In a pipeline, what is the 'Artifact' produced by a build stage?
View Question & Answer ➔
Your team wants to automate the provisioning of infrastructure to ensure consistency across environments. You need to define your infrastructure as code (IaC) using declarative templates. Which service should you use?
View Question & Answer ➔
What is the declarative syntax used in Azure Resource Manager (ARM) templates?
View Question & Answer ➔
An administrator wants to ensure that no one accidentally deletes a production SQL database. Which Azure feature should they use?
View Question & Answer ➔
Which section of an ARM template is used to define values that can be reused throughout the template, such as a storage account name prefix?
View Question & Answer ➔
What is 'Bicep' in the context of Azure?
View Question & Answer ➔
An organization wants to enforce a rule that all resources must be tagged with a 'Department' name. Which tool should be used to automate this enforcement?
View Question & Answer ➔
When deploying an ARM template, which deployment mode deletes resources in the resource group that are NOT specified in the template?
View Question & Answer ➔
What is the purpose of 'Azure Blueprints'?
View Question & Answer ➔
How can an administrator view the status and results of past ARM template deployments for a specific resource group?
View Question & Answer ➔
Which function in an ARM template is used to retrieve a secret (like a connection string) from an Azure Key Vault during deployment?
View Question & Answer ➔
Which Microsoft Entra ID (formerly Azure AD) feature allows users to access cloud applications using their local on-premises passwords without sending the password itself to the cloud?
View Question & Answer ➔
Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?
View Question & Answer ➔
An administrator wants to ensure that users can only log in from managed devices or from specific IP ranges. Which Entra ID feature should be used?
View Question & Answer ➔
What is the primary role of 'Microsoft Entra Connect'?
View Question & Answer ➔
Which Entra ID role is required to manage all aspects of the directory, including creating users and assigning roles?
View Question & Answer ➔
What is 'Self-Service Password Reset' (SSPR)?
View Question & Answer ➔
Which Microsoft Entra ID feature provides just-in-time (JIT) administrative access to resources for a limited time?
View Question & Answer ➔
What is a 'Dynamic Group' in Microsoft Entra ID?
View Question & Answer ➔
Identity Protection in Microsoft Entra ID helps detect and remediate potential vulnerabilities. Which category of 'risk' does it primarily analyze?
View Question & Answer ➔
What is 'Microsoft Entra ID Free' tier primarily missing compared to the 'Premium P1' tier?
View Question & Answer ➔
Your application requires high CPU performance for compute-intensive workloads like video encoding. Which Azure Virtual Machines instance type is optimized for this?
View Question & Answer ➔
An administrator needs to ensure that a set of Azure Virtual Machines are not all restarted at the same time during planned maintenance. Which feature should be used?
View Question & Answer ➔
Which Azure VM feature provides the highest level of availability (99.99% SLA) by protecting against the failure of an entire data center within a region?
View Question & Answer ➔
An administrator wants to automatically increase the number of VM instances in a web tier when CPU usage exceeds 75%. Which service should be used?
View Question & Answer ➔
How can you securely connect to a Windows Azure VM over RDP without exposing port 3389 to the public internet?
View Question & Answer ➔
What is the purpose of the 'Azure VM Agent' installed on a virtual machine?
View Question & Answer ➔
A developer needs to run a bash script on 10 Linux VMs immediately after they are deployed. Which feature is most efficient?
View Question & Answer ➔
Which disk type should be used for intensive database workloads in Azure that require sub-millisecond latency and the highest possible IOPS?
View Question & Answer ➔
What happens if you delete a resource group that contains several virtual machines and a storage account?
View Question & Answer ➔
An administrator needs to move a VM to a different size (e.g., from D2s_v3 to D4s_v3). What is true about this process?
View Question & Answer ➔
Your application requires persistent block storage that survives Azure Virtual Machines instance termination. Which service should you use?
View Question & Answer ➔
You need to create a backup of your Azure Managed Disks volume for disaster recovery. What feature should you use?
View Question & Answer ➔
What is the primary technical difference between 'Unmanaged' and 'Managed' disks in Azure?
View Question & Answer ➔
An administrator wants to increase the size of a managed disk that is currently attached to a running VM. Which step must be performed first?
View Question & Answer ➔
Which managed disk type provides the best balance of cost and performance for most general-purpose workloads like web servers or development environments?
View Question & Answer ➔
What is an Azure 'Disk Snapshot'?
View Question & Answer ➔
Can a single Azure Shared Disk be attached to multiple VMs simultaneously?
View Question & Answer ➔
To protect data-at-rest for a managed disk using your own encryption keys (BYOK), which service must be used to store the keys?
View Question & Answer ➔
What is the purpose of 'Azure Disk Backup'?
View Question & Answer ➔
Which disk SKU should an administrator choose to handle a SQL Server workload that regularly bursts to 100,000 IOPS?
View Question & Answer ➔
You need to create a logically isolated section of your cloud environment where you can launch resources in a virtual network that you define. Which service provides this?
View Question & Answer ➔
An administrator needs to connect two Azure Virtual Networks (VNets) in the same region so that resources in both VNets can communicate using private IP addresses. Which feature should be used?
View Question & Answer ➔
What is the primary purpose of 'Service Endpoints' in an Azure Virtual Network?
View Question & Answer ➔
Which Azure component is used to define custom routing rules within a VNet to override Azure's default system routes?
View Question & Answer ➔
How can an administrator provide a dedicated, private connection from an on-premises network to Azure that does NOT use the public internet?
View Question & Answer ➔
What is 'Global VNet Peering'?
View Question & Answer ➔
An administrator wants to prevent a specific subnet from communicating with any other subnets within the same VNet. Where should they apply a security rule?
View Question & Answer ➔
What is the function of the 'GatewaySubnet' in an Azure VNet?
View Question & Answer ➔
Which Azure service allows you to use a single domain name for your globally distributed applications and provides automatic failover between regions?
View Question & Answer ➔
What is 'Private Link' (Private Endpoint) used for in Azure?
View Question & Answer ➔
You need stateful firewall rules at the Azure Virtual Machines instance level. What should you configure?
View Question & Answer ➔
How are inbound and outbound rules evaluated in a Network Security Group (NSG)?
View Question & Answer ➔
If a Network Security Group (NSG) is applied to both a Subnet and a Network Interface (NIC), which rule takes precedence for INBOUND traffic?
View Question & Answer ➔
What does the default NSG rule 'AllowVnetInBound' (Priority 65000) allow?
View Question & Answer ➔
An administrator wants to group multiple VMs that perform a similar function (e.g., 'WebServers') into a single entity to simplify NSG rules. What should they use?
View Question & Answer ➔
Which tag can be used in an NSG rule to represent the IP address range of the Azure Load Balancer health probe?
View Question & Answer ➔
Can a single Network Security Group (NSG) be associated with multiple subnets in the same VNet?
View Question & Answer ➔
Which statement is true about the statefulness of Network Security Groups?
View Question & Answer ➔
An administrator needs to temporarily disable an NSG rule without deleting it. What is the best approach?
View Question & Answer ➔
What is the maximum priority number allowed for a user-defined NSG rule?
View Question & Answer ➔
You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?
View Question & Answer ➔
You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?
View Question & Answer ➔
What is the primary difference between Azure Firewall and Network Security Groups (NSGs)?
View Question & Answer ➔
Which Azure Firewall feature allows you to filter outbound traffic based on a list of domain names (e.g., allow *.microsoft.com)?
View Question & Answer ➔
What is 'Azure Firewall Premium' specifically designed for?
View Question & Answer ➔
In a Hub-and-Spoke network topology, where is the Azure Firewall typically deployed?
View Question & Answer ➔
What is 'Threat Intelligence-based filtering' in Azure Firewall?
View Question & Answer ➔
Which Azure component is required to route traffic from a spoke VNet through a central Azure Firewall in the hub?
View Question & Answer ➔
What is 'Azure Firewall Manager'?
View Question & Answer ➔
Is Azure Firewall a stateful service?
View Question & Answer ➔
You need to monitor CPU utilization of your Azure Virtual Machines instances and set up alarms for automated actions. Which service should you use?
View Question & Answer ➔
Your application running on Azure Virtual Machines needs a central location for log aggregation and real-time analysis. Which Azure Monitor capability should you use?
View Question & Answer ➔
Which Azure service is the central hub for all performance and health data for your Azure resources?
View Question & Answer ➔
What is the difference between 'Activity Logs' and 'Resource Logs' (Diagnostic Logs) in Azure Monitor?
View Question & Answer ➔
Which component of Azure Monitor is used to store and query large volumes of log data using the Kusto Query Language (KQL)?
View Question & Answer ➔
To capture guest OS-level telemetry (like RAM usage) from an Azure VM, what must be installed?
View Question & Answer ➔
What is 'Application Insights' primarily used for?
View Question & Answer ➔
An administrator wants to be notified via email when a specific metric (e.g., Disk Write Operations) exceeds a certain threshold. What should they create?
View Question & Answer ➔
What is 'VM Insights'?
View Question & Answer ➔
Which tool provides a real-time 'heat map' of which Azure regions are experiencing service degradations?
View Question & Answer ➔
You need to route traffic to Azure Virtual Machines instances based on URL paths (e.g., '/api' vs '/static'). Which load balancer type should you use?
View Question & Answer ➔
Which load balancing service should you use for web traffic (HTTP/HTTPS) that requires Layer 7 features like URL path-based routing or SSL termination?
View Question & Answer ➔
What is 'Web Application Firewall' (WAF) in the context of an Application Gateway?
View Question & Answer ➔
An administrator wants to route traffic for 'example.com/images/*' to one backend pool and 'example.com/orders/*' to another. Which Application Gateway feature is needed?
View Question & Answer ➔
How does Application Gateway handle SSL/TLS traffic to reduce the load on backend servers?
View Question & Answer ➔
What is the requirement for the backend instances of an Application Gateway?
View Question & Answer ➔
Which Application Gateway feature allows you to host more than one website (e.g., contoso.com and fabrikam.com) on the same public IP address?
View Question & Answer ➔
To improve performance for mobile users, an architect wants to enable HTTP/2 on the Application Gateway. Is this supported?
View Question & Answer ➔
What is the purpose of a 'Health Probe' in an Application Gateway?
View Question & Answer ➔

← PreviousPage 2 of 3Next →

az 104 Practice Questions

Can Azure Machine Learning train models using data that is stored on-premises?

You are designing a CI/CD pipeline. You need a service to compile source code, run tests, and produce software packages that are ready to deploy. Which service handles the build phase?

Which Azure DevOps service provides a platform for defining and running automated builds and releases (CI/CD)?

What is a 'Self-hosted agent' in Azure Pipelines used for?

In a YAML pipeline, what does the 'trigger' section define?

What is a 'Deployment Group' in Azure Pipelines Classic release pipelines?

Which pipeline component allow you to group multiple related tasks together and define dependencies between them (e.g., 'Build' must finish before 'Test')?

What is 'Azure Artifacts' used for in a CI/CD pipeline?

Can you use Azure Pipelines to deploy applications to other cloud providers (e.g., AWS or GCP)?

What is a 'Variable Group' in Azure Pipelines?

In a pipeline, what is the 'Artifact' produced by a build stage?

Your team wants to automate the provisioning of infrastructure to ensure consistency across environments. You need to define your infrastructure as code (IaC) using declarative templates. Which service should you use?

What is the declarative syntax used in Azure Resource Manager (ARM) templates?

An administrator wants to ensure that no one accidentally deletes a production SQL database. Which Azure feature should they use?

Which section of an ARM template is used to define values that can be reused throughout the template, such as a storage account name prefix?

What is 'Bicep' in the context of Azure?

An organization wants to enforce a rule that all resources must be tagged with a 'Department' name. Which tool should be used to automate this enforcement?

When deploying an ARM template, which deployment mode deletes resources in the resource group that are NOT specified in the template?

What is the purpose of 'Azure Blueprints'?

How can an administrator view the status and results of past ARM template deployments for a specific resource group?

Which function in an ARM template is used to retrieve a secret (like a connection string) from an Azure Key Vault during deployment?

Which Microsoft Entra ID (formerly Azure AD) feature allows users to access cloud applications using their local on-premises passwords without sending the password itself to the cloud?

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

An administrator wants to ensure that users can only log in from managed devices or from specific IP ranges. Which Entra ID feature should be used?

What is the primary role of 'Microsoft Entra Connect'?

Which Entra ID role is required to manage all aspects of the directory, including creating users and assigning roles?

What is 'Self-Service Password Reset' (SSPR)?

Which Microsoft Entra ID feature provides just-in-time (JIT) administrative access to resources for a limited time?

What is a 'Dynamic Group' in Microsoft Entra ID?

Identity Protection in Microsoft Entra ID helps detect and remediate potential vulnerabilities. Which category of 'risk' does it primarily analyze?

What is 'Microsoft Entra ID Free' tier primarily missing compared to the 'Premium P1' tier?

Your application requires high CPU performance for compute-intensive workloads like video encoding. Which Azure Virtual Machines instance type is optimized for this?

An administrator needs to ensure that a set of Azure Virtual Machines are not all restarted at the same time during planned maintenance. Which feature should be used?

Which Azure VM feature provides the highest level of availability (99.99% SLA) by protecting against the failure of an entire data center within a region?

An administrator wants to automatically increase the number of VM instances in a web tier when CPU usage exceeds 75%. Which service should be used?

How can you securely connect to a Windows Azure VM over RDP without exposing port 3389 to the public internet?

What is the purpose of the 'Azure VM Agent' installed on a virtual machine?

A developer needs to run a bash script on 10 Linux VMs immediately after they are deployed. Which feature is most efficient?

Which disk type should be used for intensive database workloads in Azure that require sub-millisecond latency and the highest possible IOPS?

What happens if you delete a resource group that contains several virtual machines and a storage account?

An administrator needs to move a VM to a different size (e.g., from D2s_v3 to D4s_v3). What is true about this process?

Your application requires persistent block storage that survives Azure Virtual Machines instance termination. Which service should you use?

You need to create a backup of your Azure Managed Disks volume for disaster recovery. What feature should you use?

What is the primary technical difference between 'Unmanaged' and 'Managed' disks in Azure?

An administrator wants to increase the size of a managed disk that is currently attached to a running VM. Which step must be performed first?

Which managed disk type provides the best balance of cost and performance for most general-purpose workloads like web servers or development environments?

What is an Azure 'Disk Snapshot'?

Can a single Azure Shared Disk be attached to multiple VMs simultaneously?

To protect data-at-rest for a managed disk using your own encryption keys (BYOK), which service must be used to store the keys?

What is the purpose of 'Azure Disk Backup'?

Which disk SKU should an administrator choose to handle a SQL Server workload that regularly bursts to 100,000 IOPS?

You need to create a logically isolated section of your cloud environment where you can launch resources in a virtual network that you define. Which service provides this?

An administrator needs to connect two Azure Virtual Networks (VNets) in the same region so that resources in both VNets can communicate using private IP addresses. Which feature should be used?

What is the primary purpose of 'Service Endpoints' in an Azure Virtual Network?

Which Azure component is used to define custom routing rules within a VNet to override Azure's default system routes?

How can an administrator provide a dedicated, private connection from an on-premises network to Azure that does NOT use the public internet?

What is 'Global VNet Peering'?

An administrator wants to prevent a specific subnet from communicating with any other subnets within the same VNet. Where should they apply a security rule?

What is the function of the 'GatewaySubnet' in an Azure VNet?

Which Azure service allows you to use a single domain name for your globally distributed applications and provides automatic failover between regions?

What is 'Private Link' (Private Endpoint) used for in Azure?

You need stateful firewall rules at the Azure Virtual Machines instance level. What should you configure?

How are inbound and outbound rules evaluated in a Network Security Group (NSG)?

If a Network Security Group (NSG) is applied to both a Subnet and a Network Interface (NIC), which rule takes precedence for INBOUND traffic?

What does the default NSG rule 'AllowVnetInBound' (Priority 65000) allow?

An administrator wants to group multiple VMs that perform a similar function (e.g., 'WebServers') into a single entity to simplify NSG rules. What should they use?

Which tag can be used in an NSG rule to represent the IP address range of the Azure Load Balancer health probe?

Can a single Network Security Group (NSG) be associated with multiple subnets in the same VNet?

Which statement is true about the statefulness of Network Security Groups?

An administrator needs to temporarily disable an NSG rule without deleting it. What is the best approach?

What is the maximum priority number allowed for a user-defined NSG rule?

You need to explicitly deny traffic from a specific IP address to your Azure Virtual Machines instances. Can Network Security Groups (NSG) natively handle explicit deny rules?

You need stateless firewall rules at the subnet level in your Azure Virtual Network. What should you configure?

What is the primary difference between Azure Firewall and Network Security Groups (NSGs)?

Which Azure Firewall feature allows you to filter outbound traffic based on a list of domain names (e.g., allow *.microsoft.com)?

What is 'Azure Firewall Premium' specifically designed for?

In a Hub-and-Spoke network topology, where is the Azure Firewall typically deployed?

What is 'Threat Intelligence-based filtering' in Azure Firewall?

Which Azure component is required to route traffic from a spoke VNet through a central Azure Firewall in the hub?

An administrator wants to route traffic for 'example.com/images/' to one backend pool and 'example.com/orders/' to another. Which Application Gateway feature is needed?