Microsoft Azure
Microsoft Azure Administrator
AZ-104
Popular
Validate your skills as an Azure Administrator with the AZ-104 exam, covering Azure management and governance.
148 questions
0 views
Free
Questions 11–20 of 148
Which service is used for DNS management in Azure?
-
A
Azure DNS
-
B
Traffic Manager
-
C
Network Security Group
-
D
Application Gateway
Explanation
Azure DNS provides domain name system services, while the others serve different networking functions.
A company needs to restrict storage access only to a specific application. What Azure feature can they configure for this purpose?
-
A
Managed Identity
-
B
Firewall Rules
-
C
Public Access
-
D
Role-Based Access Control
Explanation
Role-Based Access Control (RBAC) allows specific permissions while Managed Identity is primarily for authentication.
You are configuring a Virtual Network with multiple subnets. What happens if two subnets have overlapping IP address ranges?
-
A
It causes IP conflicts.
-
B
Both subnets will function properly.
-
C
Only one subnet will be available.
-
D
They require manual approval to merge.
Explanation
Overlapping IP address ranges will cause conflicts and prevent routing between the subnets.
A company needs to recover deleted resources in Azure. Which service provides this feature?
-
A
Azure Backup
-
B
Azure Security Center
-
C
Azure Monitor
-
D
Azure Load Balancer
Explanation
Azure Backup allows recovery of deleted resources, while the other options serve different purposes.
What happens when a virtual machine's Azure Managed Disk is set to 'Read-Only'?
-
A
VM cannot start.
-
B
Cannot write data to it.
-
C
Disk automates backup.
-
D
Allows temporary read-write access.
Explanation
Setting a disk to 'Read-Only' prevents all write operations, unlike the other options.
You are configuring access for Azure resources. Which role should you assign if a user only requires reading permissions?
-
A
Owner
-
B
Contributor
-
C
Reader
-
D
User Access Administrator
Explanation
The 'Reader' role grants read-only access, while other roles allow more permissions.
Which Azure service enables monitoring of application performance?
-
A
Azure Monitor
-
B
Azure Blob Storage
-
C
Azure SQL Database
-
D
Azure DevOps
Explanation
Azure Monitor collects metrics and logs to analyze performance, while others serve different purposes.
A company needs to restrict access to a storage account based on geographic location. What should the administrator configure?
-
A
IP Rules
-
B
Service Endpoints
-
C
RBAC Roles
-
D
Firewalls
Explanation
IP Rules can specify allowed IPs by geolocation, while other options don't manage access by geography.
What happens when you assign a policy that denies resource creation in Azure?
-
A
All resources are deleted
-
B
Resource creation is blocked
-
C
Only VMs are denied
-
D
Policy has no effect
Explanation
The policy directly blocks any resource creation, reinforcing governance, while others misinterpret the policy’s effects.
Which service provides managed Kubernetes in Azure?
-
A
Azure Kubernetes Service
-
B
Azure Functions
-
C
Azure Batch
-
D
Azure Logic Apps
Explanation
Azure Kubernetes Service facilitates managed Kubernetes; the others do not offer Kubernetes capabilities.