Practice Free AZ-104 Exam Online Questions
HOTSPOT
You have an Azure subscription that contains a resource group named RG1.
You plan to use an Azure Resource Manager (ARM) template named template1 to deploy resources.
The solution must meet the following requirements:
• Deploy new resources to RG1.
• Remove all the existing resources from RG1 before deploying the new resources.
How should you complete the command? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Explanation:
https://learn.microsoft.com/en-us/powershell/module/az.resources/new-azresourcegroupdeployment?view=azps-9.3.0#-resourcegroupname
Specifies the name of the resource group to deploy.
https://learn.microsoft.com/en-us/powershell/module/az.resources/new-azresourcegroupdeployment?view=azps-9.3.0#-mode
Specifies the deployment mode. The acceptable values for this parameter are:
-Complete: In complete mode, Resource Manager deletes resources that exist in the resource group but are not specified in the template.
– Incremental: In incremental mode, Resource Manager leaves unchanged resources that exist in the resource group but are not specified in the template.
HOTSPOT
You have an Azure subscription that contains a virtual network named VNET in the East Us 2 region. A network interface named VM1-NI is connected to VNET1.
You successfully deploy the following Azure Resource Manager template.

Explanation:
"A resource can only be created in a virtual network that exists in the same region and subscription as the resource." https://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-vnet-plan-design-arm#regions
You have an Azure subscription.
You plan to migrate 50 virtual machines from VMware vSphere to the subscription.
You create a Recovery Services vault.
What should you do next?
- A . Configure an extended network.
- B . Create a recovery plan.
- C . Deploy an Open Virtualization Application (OVA) template to vSphere.
- D . Configure a virtual network.
C
Explanation:
To migrate virtual machines from VMware vSphere to Azure, you need to use Azure Migrate, which is a service that helps you assess and migrate your on-premises workloads to Azure. Azure Migrate uses an appliance that you deploy as an Open Virtualization Application (OVA) template to vSphere. The appliance discovers the virtual machines and sends metadata and performance data to Azure Migrate. You can then use Azure Migrate to assess the readiness, cost, and sizing of the virtual machines for migration. You can also use Azure Migrate to replicate and migrate the virtual machines to Azure.
Reference: About Azure Migrate
Prepare VMware servers for assessment and migration to Azure with Azure Migrate Server Migration
You create an Azure VM named VM1 that runs Windows Server 2019.
VM1 is configured as shown in the exhibit (Click the Exhibit tab.)
You need to enable Desired State Configuration for VM1.
What should you do first?
- A . Configure a DNS name for VM1.
- B . Start VM1.
- C . Capture a snapshot of VM1.
- D . Connect to VM1.
You create an Azure VM named VM1 that runs Windows Server 2019.
VM1 is configured as shown in the exhibit (Click the Exhibit tab.)
You need to enable Desired State Configuration for VM1.
What should you do first?
- A . Configure a DNS name for VM1.
- B . Start VM1.
- C . Capture a snapshot of VM1.
- D . Connect to VM1.
DRAG DROP
You have an Azure subscription that contains a virtual network named VNet1 VNet1 contains virtual machines that have Remote Desktop enabled
Several users plan to work remotely and connect to the virtual machines from a home office.
You need to configure connectivity to the virtual machines to support a Point-to-Site (P2S) VPN connection for each user.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Explanation:
The correct sequence of actions to configure a Point-to-Site (P2S) VPN connection are:
Create a VPN gateway: This is the core component that will handle the VPN connections. It needs to be deployed within VNet1.
Add an IP address pool: This pool defines the range of IP addresses that will be assigned to the VPN clients when they connect.
Create a local network gateway: This represents your on-premises network (in this case, the users’ home offices) and is necessary for the VPN gateway to establish a connection.
HOTSPOT
You have an Azure subscription that contains the resources in the following table.
You install the Web Server (IIS) server role on VM1 and VM2. and then add VM1 and VM2 to LB1.
LB1 is configured as shown in the LB1 exhibit. (Click the LB1 tab.)
Rule1 is configured as shown in the Rule1 exhibit (Click the Rule1 tab.)
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

HOTSPOT
You have an Azure subscription that contains the resources in the following table.
You install the Web Server (IIS) server role on VM1 and VM2. and then add VM1 and VM2 to LB1.
LB1 is configured as shown in the LB1 exhibit. (Click the LB1 tab.)
Rule1 is configured as shown in the Rule1 exhibit (Click the Rule1 tab.)
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

HOTSPOT
You need to identify the storage requirements for Contoso.
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Explanation:
Statement 1: Yes
Contoso is moving the existing product blueprint files to Azure Blob storage which will ensure that the blueprint files are stored in the archive storage tier.
Use unmanaged standard storage for the hard disks of the virtual machines. We use Page Blobs for
these.
Statement 2: No
Azure Table storage stores large amounts of structured data. The service is a NoSQL datastore which accepts authenticated calls from inside and outside the Azure cloud. Azure tables are ideal for storing structured, non-relational data.
Common uses of Table storage include:
You have an Azure subscription That contains a Recovery Services vault named Vault1.
You need to enable multi-user authorization (MAU) for Vaultl.
Which resource should you create first?
- A . a managed identity
- B . a resource guard
- C . an administrative unit
- D . a custom Azure role
B
Explanation:
https://learn.microsoft.com/en-us/azure/backup/multi-user-authorization?tabs=azure-portal&pivots=vaults-recovery-services-vault#before-you-start
Before you start
Ensure the Resource Guard and the Recovery Services vault are in the same Azure region.
Ensure the Backup admin does not have Contributor permissions on the Resource Guard. You can choose to have the Resource Guard in another subscription of the same directory or in another directory to ensure maximum isolation.
Ensure that your subscriptions containing the Recovery Services vault as well as the Resource Guard (in different subscriptions or tenants) are registered to use the providers – Microsoft.RecoveryServices and Microsoft.DataProtection . For more information, see Azure