AZ-104 Official Practice Test – Part 3

Welcome to the AZ-104 Official Practice Test – Part 3.

In this part, I have given my detailed explanations of the 10 official questions from Microsoft. Unlike on the Microsoft website, the explanations include screenshots to help you prepare for the AZ-104 exam.

That said, these tests are very simple, and they should only be used to brush up on the basics. The real exam would rarely be this easy. To get more rigorous practice and even in-depth knowledge, check out my AZ-104 practice tests.

Once done, check out the AZ-104 questions Part -4 and the accompanying AZ-104 Practice Test video.

Since applying policies and roles at the management group scope is inherited to all subscriptions and the resource groups within the management group, creating a management group & assigning all subscriptions to it allows for efficient management of access, policies, and compliance across all subscriptions.

So options C, D, and E are the correct answer choices.

Reference Link: https://learn.microsoft.com/en-us/azure/cloud-adoption-framework/ready/azure-setup-guide/organize-resources#management-settings-scope

Managing each subscription individually or applying policies and access control at the individual resource level would not be as efficient or unified.

---

In the Azure Cloud Shell, you can run the Save-AzDeploymentTemplate PowerShell command to save the deployment template to a JSON file.

But note that the PowerShell commands like Save-AzDeploymentTemplate and New-AzDeployment that do not have any indication of scope in their name, work at the subscription scope. So, the deployment that you need to save must already exist at the subscription scope.

Reference Link: https://learn.microsoft.com/en-us/powershell/module/az.resources/save-azdeploymenttemplate

https://learn.microsoft.com/en-us/powershell/module/az.resources/new-azdeployment

After saving the deployment file, you can run the New-AzResourceGroupDeployment command to deploy the saved JSON template at the resource group scope.

Option C is one of the correct answers.

Reference Link: https://learn.microsoft.com/en-us/powershell/module/az.resources/new-azresourcegroupdeployment

Go to the Export template section in the resource group where the VM is deployed and download the template file.

Once you have the template, you can run the same New-AzResourceGroupDeployment command to deploy the template to the resource group.

Option D is the other correct answer.

Reference Link: https://learn.microsoft.com/en-us/azure/azure-resource-manager/templates/export-template-portal#export-template-from-a-resource-group

You can also go to the virtual machine resource -> Export template and click Deploy to deploy a new virtual machine based on the existing VM’s template.

Reference Link:https://learn.microsoft.com/en-us/azure/azure-resource-manager/templates/export-template-portal#export-template-from-a-resource

Option E is the other correct answer.

Option A is incorrect as the Get-AzVM command gets only the properties of an existing virtual machine and the New-AzVM command will create a completely new virtual machine.

Reference Link: https://learn.microsoft.com/en-us/powershell/module/az.compute/get-azvm

https://learn.microsoft.com/en-us/powershell/module/az.compute/new-azvm

The Save-AzDeploymentScriptLog command saves only the log of a deployment script execution to disk. You cannot use this log to create a new VM. Option B is incorrect.

Reference Link:https://learn.microsoft.com/en-us/powershell/module/az.resources/save-azdeploymentscriptlog

---

Well, if you use the Deploy a custom template service from the Azure portal, there are several built-in templates available like Create a Windows virtual machine, etc.,

In this template, one of the things that you can readily configure before deployment is the resource group, although the VM properties like the VM size can also be configured depending on the chosen template.

Further, when you use the PowerShell command New-AzResouceGroupDeployment, the resource group name is one of the required parameters for deploying the template.

So, option C is most likely the correct answer.

Reference Link: https://learn.microsoft.com/en-us/powershell/module/az.resources/new-azresourcegroupdeployment

---

If the individual VMs need to be part of the virtual machine scale set, ensure that you set the availability options to the virtual machine scale set.

Option A is the correct answer.

Reference Link: https://learn.microsoft.com/en-us/azure/virtual-machines/availability

Azure spot instance is used to add virtual machines at a discounted price. The Region and Management options do not allow VMs to be part of a scale set.

Reference Link: https://learn.microsoft.com/en-us/azure/virtual-machines/spot-vms

---

You can hot remove a data disk, which means you can detach a disk from a running virtual machine. Also, you can attach a disk when a VM is running. So, there is no need to stop either of the VMs.

Option A is the correct answer.

Reference Link: https://learn.microsoft.com/en-us/azure/virtual-machines/windows/detach-disk#detach-a-data-disk-using-the-portal

---

A network interface connects a VM to a subnet. Since VM1 is connected to Subnet1, VM1 already has a network interface attached that is connected to Subnet1. To connect the VM to the other subnet, create a new network interface that is connected to that subnet.

Once done, attach the network interface to the VM. Now the VM has two NICs, each connected to two different subnets. One is a primary NIC and the other is a secondary NIC.

Reference Link: https://learn.microsoft.com/en-us/azure/virtual-network/network-overview#network-interfaces

So, option A is the correct answer.

An IP Group helps you manage IP addresses in bulk for simplifying network rules in Azure Firewall.

Reference Link: https://learn.microsoft.com/en-us/azure/firewall/ip-groups

Option B is incorrect.

If you change the IP configuration of the existing network interface, you move the NIC from one subnet to the other. It doesn’t ensure that a VM is connected to NICs in two subnets.

Option C is incorrect.

A network bridge is not related to Azure. It is a Windows feature that allows you to connect two or more network segments, allowing them to operate as a single network.

Reference Link: https://www.windowscentral.com/how-set-and-manage-network-bridge-connection-windows-10

Option D is incorrect.

---

Since the question is related to planned physical hardware maintenance, we can skip considering the fault domain and consider only the update domain.

Each availability set can be configured with up to 20 update domains. Here we have only 10 update domains. So, each of the first 10 VMs will be placed in a separate update domain in a round-robin way. The next 8 VMs will be distributed similarly across the first 8 update domains.

At any point in time, Microsoft will reboot only one update domain. So, at max 2 VMs will be unavailable.

Option A is the correct answer.

Reference Link: https://learn.microsoft.com/en-us/azure/virtual-machines/availability-set-overview#how-do-availability-sets-work

---

So, this question is asking for two things: logging level and severity. Honestly, this question has a little ambiguity as both options A and B can be chosen for logging levels.

However, since the file system logging is only for temporary debugging, it is safer to go with option A where you can store the data in a blob container up to the retention period for analysis.

Each level of log includes other log categories that are above its severity level. For example, the information level includes Warnings and Errors, in addition to information. The warning level includes only error and warning. So to store all warnings and higher, set the level as a warning.

Option E is the other correct answer.

Reference Link: https://learn.microsoft.com/en-us/azure/app-service/troubleshoot-diagnostic-logs#enable-application-logging-windows

---

With a Basic Azure App Service plan, you can only manually scale. i.e., you can only manually increase the instance count.

To ensure that the web app can scale automatically based on a metric, first, scale up the plan to any plan that supports autoscale. For example, the premium plan.

So option E is one of the correct answer choices.

Now, you can configure a scale-out condition based on rules. Set the Scale mode to Scale based on a metric and set the Metric name as CPU percentage, Metric threshold as 80, and duration as 15 minutes.

Option B is the other correct answer.

We need to scale based on a metric. Scale to a specific instance count cannot help with that.

Option C is incorrect.

Reference Link: https://learn.microsoft.com/en-us/azure/azure-monitor/autoscale/autoscale-get-started

---

Of all the plans, only the Basic, Standard, and Premium plans support custom domains. So, we can ignore the Free plan.

Option B is incorrect.

The Basic plan comes with only 10 GB of storage. So, option A is also incorrect.

Reference Link:https://azure.microsoft.com/en-us/pricing/details/app-service/windows/#pricing

The Standard plan comes with 50 GB of storage.

Reference Link: https://azure.microsoft.com/en-in/pricing/details/app-service/windows-previous/

Further, you can scale the Standard plan up to 10 instances.

Between the Standard and Premium plans, the Standard plan is cheaper.

So, option D is the correct answer.

---

Check out my AZ-104 practice tests (with discount code).

Follow Me to Receive Updates on the AZ-104 Exam

• youtube channel ravikirans
• facebook page ravikirans
• linkedin page ravikirans

---

Want to be notified as soon as I post? Subscribe to the RSS feed / leave your email address in the subscribe section. Share the article to your social networks with the below links so it can benefit others.

Share the AZ-104 Tests in Your Network