dc dotCreds
Microsoft Azure Administrator (AZ-104)

AZ-104 Practice Test

Work through a fresh 10-question AZ-104 set every day from the same verified live bank used by the app, with exact source links and a countdown to the next rotation.

10 Free Daily Questions Source-backed Explanations 150 Verified Questions

Questions updated at Jul 18, 2026, 1:30 PM CDT

Start Daily Practice Open Dashboard
Go Pro - One Time Unlock

Unlock the full AZ-104 bank

150 verified questions Exam Mode Practice Mode Detailed explanations Weak-area review No subscription - one-time unlock

Get the complete source-backed bank with Interview Questions, the full Study Guide, full Course Notes, detailed explanations, weak-area review, and exam-style practice.

Interview Questions Full Study Guide Full Course Notes Exam Mode Practice Mode Guided Course Detailed explanations Weak-area review No subscription
$4.99 One-time payment
See bundle and PDF options

We will confirm your site email in one quick checkout step.

Why DotCreds?

Practice with explanations that teach.

Source links for every answer Every wrong answer explained Guided Course included Practice and Exam Mode Weak-area tracking Same verified bank on web and iPhone

What you get with free practice

10 Free Questions Daily Fresh set every day from the live bank
Detailed Explanations Learn with clear source-backed answers
Track Your Progress Daily history and performance insights
Upgrade Anytime Unlock the full bank when you are ready
Free AZ-104 practice questions

The website gives you a real daily 10-question AZ-104 set with explanations and source links. If you want the full bank, weak-domain targeting, readiness tracking, and longer tests, use the app.

Today’s Set
10 questions
Rotates at 10:00 AM local time
Progress
0/10
Answered on this page
Accuracy
0%
Loading countdown…

150 verified questions are in the live bank. Free daily questions are selected from a rotating sample set. Unlock Pro to access the full question bank.

Preparing today’s free questions... Ordering the final locked-bank set before showing the practice cards.
Question 1 of 10
Objective 5.1 Monitor and maintain Azure resources

A VM cannot receive expected traffic, and you need to determine whether NSG or routing rules are filtering the flow. Which Network Watcher tool should you use?

Concept tested:
Source:Azure Network Watcher overview
Question 2 of 10
Objective 1.3 Manage Azure identities and governance

A business unit has several Azure subscriptions under one hierarchy. You need a naming policy to apply consistently to all current and future subscriptions in that unit. Where should you assign the policy?

Concept tested:
Question 3 of 10
Objective 2.3 Implement and manage storage

An application requires programmatic access to data within an Azure file share, eliminating the need for interactive VM sessions or remote desktop connections. Which access method is most appropriate?

Concept tested:
Question 4 of 10
Objective 1.2 Manage Azure identities and governance

A database administration group needs to manage Azure SQL databases, but the assignment should be limited to the SQL database group rather than the whole subscription. What should the administrator do?

Concept tested:
Question 5 of 10
Objective 3.4 Deploy and manage Azure compute resources

You need to validate a new App Service version with production-like settings before routing users to it. Which feature should you use?

Concept tested:
Question 6 of 10
Objective 5.2 Monitor and maintain Azure resources

Azure Site Recovery is designed to ensure workload availability through replication, failover, and failback. Which capability set does this service represent?

Concept tested:
Question 7 of 10
Objective 3.2 Deploy and manage Azure compute resources

A database VM needs very high IOPS and throughput with configurable disk performance. Which managed disk type is the strongest fit?

Concept tested:
Question 8 of 10
Objective 2.1 Implement and manage storage

A workload running in Azure needs Blob Storage access without storing account keys or secrets. Which authorization option should you prefer?

Concept tested:
Question 9 of 10
Objective 4.1 Implement and manage virtual networking

A subnet utilizes a network virtual appliance (NVA) for traffic inspection. Within a user-defined route, what next hop type designates this NVA as the destination for routed traffic?

Concept tested:
Question 10 of 10
Objective 4.2 Implement and manage virtual networking

An NSG rule review requires identifying the priority of AllowAzureLoadBalancerInBound. What priority number should you expect?

Concept tested:
Locked preview

You are viewing today’s free 10. Unlock 140 more questions.

Unlock full bank
Daily sample Rotating practice Free daily questions are selected from a rotating sample set.
Pro bank Full access Unlock Pro to access the full question bank, Exam Mode, Practice Mode, and random tests.
AZ-104 Pro $4.99 one-time

Best if you only need this one certification.

50 Exam Practice Test $1.99 one-time

A 50-question AZ-104 PDF for short review sessions. Questions come first, then the answer review and explanations later in the file.

Azure Cloud Bundle $9.99 one-time

Unlock all 5 active Azure Cloud Bundle practice banks in one permanent purchase.

What’s includedAZ-900, AZ-104, AZ-305, AZ-700, AZ-400
All Access $6.99/month

Unlock every active practice exam, bundle and path experience, Pro course and study content, and included downloads.

What’s includedEvery current and future active practice exam, All active bundle and career-path practice content, Pro course lessons, study content, and supported paid downloads

Choose an unlock option to continue. We will confirm your site email in one quick checkout step.

Secure checkout powered by Stripe. Source-backed questions. Not brain dumps. Checkout stays on this page and unlocks the same Pro builder on this practice page.
Already Pro? Open dashboard

Purchase options

Unlock the full AZ-104 bank.

Get the full bank, Exam Mode, Practice Mode, question sets, random tests, readiness tracking, saved box scores, and review tools for this exam.

The PDF versions keep questions first and move the answer review, explanations, and distractor notes to the back of the file.

150 verified exam-style questions Every choice explained Exam Mode and Practice Mode Question sets and random tests Readiness score and trends Previous test box scores

You've answered 0/10 questions in today's set.

Locked: 140 more questions in the full bank.

Locked: exam simulation mode, practice mode, readiness tracking, and saved review history.

Checkout stays on this page, so you can keep practicing, unlock the full bank, and start Exam Mode or Practice Mode when you are ready.

Cheat Sheets

7-day score keeper

Answer questions today and this will become a rolling 7-day scorecard.

Local history
Optional progress sync

Keep today’s practice moving

Guest progress saves automatically on this device. Add an email later when you want a magic link that keeps your daily AZ-104 practice in sync across browsers.

Guest progress saves on this device automatically

Guest progress is available without an account.

Official exam resources

Use these official Microsoft resources alongside the daily practice set. They cover the provider's own exam page, study guide, or prep material.

Certification page Microsoft Certified: Azure Administrator Associate Study guide AZ-104 study guide Training Azure Administrator learning path

Need adjacent Microsoft practice pages too? Microsoft practice hub.

Source-backed answer review

The free daily AZ-104 set includes crawlable question text, answer choices, correct answer labels, objective mapping, and source links. Only the first SEO card includes answer explanations and any extra learning features. Pro-only bank questions stay locked; this section mirrors only the 10 free daily questions already shown on this page.

Question 1 A VM cannot receive expected traffic, and you need to determine whether NSG or routing rules are filtering the flow. Which Network Watcher tool should you use?

Answer choices

  1. A. Connection Monitor
  2. B. Packet capture
  3. C. Next hop
  4. D. IP flow verify

Correct answer

IP flow verify

IP flow verify tests whether NSG rules allow or deny a specific network flow.

Wrong-answer review

  • A. Connection Monitor: Connection Monitor: That Network Watcher tool diagnoses a different connectivity question than the one in the stem.
  • B. Packet capture: Packet capture: That Network Watcher tool diagnoses a different connectivity question than the one in the stem.
  • C. Next hop: Next hop: That Network Watcher tool diagnoses a different connectivity question than the one in the stem.

Extra learning features

Why candidates miss this

Packet capture captures network traffic for later analysis, but it does not directly indicate whether NSG rules are filtering traffic. The incorrect assumption is that capturing traffic will inherently reveal NSG rule behavior, when IP flow verify is the specific Network Watcher tool designed to test NSG rule application and determine if traffic is allowed or denied. Likely wrong answer: Packet capture Review focus: Azure Network Watcher IP Flow Verify

Interview question

Q: We're experiencing intermittent connectivity issues to a critical application running on a VM. The application is sometimes reachable, sometimes not. We suspect either the Network Security Groups or the routing rules are to blame. How would you systematically troubleshoot this to pinpoint the root cause? Strong answer: I'd start by using Network Watcher's IP flow verify tool. This lets me simulate a connection from the VM to the destination and see exactly which rules are being applied and whether they're allowing or denying the traffic. I'd test with different ports and protocols to rule out application-specific issues. If IP flow verify doesn't immediately reveal the problem, I'd then examine the routing table for the VM's network interface using Next Hop to ensure traffic is being routed as expected.

  • Systematic troubleshooting approach
  • IP flow verify for NSG/routing analysis
  • Next hop for routing verification
  • Understanding of NSG and routing interaction

Caution: Suggesting a broad approach like 'check the NSGs' without specifying a tool or methodology. Also, be wary of candidates who immediately jump to complex solutions without first trying the simplest, most direct approach.

Why this matters

Monitoring and recovery work depends on picking the tool that produces the right operational signal or recovery behavior. Here, IP flow verify is the decision an administrator would make from the scenario clues.

Objective/domain: Monitor and maintain Azure resources

Source: Azure Network Watcher overview

Question 2 A business unit has several Azure subscriptions under one hierarchy. You need a naming policy to apply consistently to all current and future subscriptions in that unit. Where should you assign the policy?

Answer choices

  1. A. At each virtual machine resource
  2. B. At the management group that contains the subscriptions
  3. C. At one resource group in each subscription
  4. D. At the Azure region used by the resources

Correct answer

At the management group that contains the subscriptions

Objective/domain: Manage Azure identities and governance

Source: Azure Policy overview

Question 3 An application requires programmatic access to data within an Azure file share, eliminating the need for interactive VM sessions or remote desktop connections. Which access method is most appropriate?

Answer choices

  1. A. REST API access
  2. B. Remote Desktop Protocol
  3. C. ExpressRoute FastPath
  4. D. Azure Bastion session

Correct answer

REST API access

Objective/domain: Implement and manage storage

Source: What is Azure Files?

Question 4 A database administration group needs to manage Azure SQL databases, but the assignment should be limited to the SQL database group rather than the whole subscription. What should the administrator do?

Answer choices

  1. A. Create a custom role with permissions limited to SQL databases only
  2. B. Assign the 'SQL DB Reader' role at the resource level
  3. C. Apply the 'SQL DB Contributor' role specifically to the SQL database group
  4. D. Grant the 'Contributor' role for all resources in the subscription

Correct answer

Apply the 'SQL DB Contributor' role specifically to the SQL database group

Objective/domain: Manage Azure identities and governance

Source: Azure role-based access control overview

Question 5 You need to validate a new App Service version with production-like settings before routing users to it. Which feature should you use?

Answer choices

  1. A. A new resource group for the app
  2. B. A deployment slot that can be swapped with production
  3. C. A storage account lifecycle rule
  4. D. An availability set for the App Service plan

Correct answer

A deployment slot that can be swapped with production

Objective/domain: Deploy and manage Azure compute resources

Source: Set up staging environments in Azure App Service

Question 6 Azure Site Recovery is designed to ensure workload availability through replication, failover, and failback. Which capability set does this service represent?

Answer choices

  1. A. Backup, encryption, and recovery
  2. B. Replication, failover, and failback
  3. C. Monitoring, alerts, and reporting
  4. D. Storage, network, and security

Correct answer

Replication, failover, and failback

Objective/domain: Monitor and maintain Azure resources

Source: Azure Site Recovery overview

Question 7 A database VM needs very high IOPS and throughput with configurable disk performance. Which managed disk type is the strongest fit?

Answer choices

  1. A. Ultra Disk
  2. B. Standard HDD
  3. C. Standard SSD
  4. D. Archive tier

Correct answer

Ultra Disk

Objective/domain: Deploy and manage Azure compute resources

Source: Azure managed disk types

Question 8 A workload running in Azure needs Blob Storage access without storing account keys or secrets. Which authorization option should you prefer?

Answer choices

  1. A. Role-based access control (RBAC)
  2. B. Shared key
  3. C. Queue SAS
  4. D. Microsoft Entra ID with managed identities

Correct answer

Microsoft Entra ID with managed identities

Objective/domain: Implement and manage storage

Source: Authorize access to data in Azure Storage

Question 9 A subnet utilizes a network virtual appliance (NVA) for traffic inspection. Within a user-defined route, what next hop type designates this NVA as the destination for routed traffic?

Answer choices

  1. A. Virtual network
  2. B. Internet
  3. C. Virtual appliance
  4. D. None

Correct answer

Virtual appliance

Objective/domain: Implement and manage virtual networking

Source: Virtual network traffic routing

Question 10 An NSG rule review requires identifying the priority of AllowAzureLoadBalancerInBound. What priority number should you expect?

Answer choices

  1. A. 65535
  2. B. 65001
  3. C. 65002
  4. D. 65000

Correct answer

65001

Objective/domain: Implement and manage virtual networking

Source: Network security groups overview

Where to go after the daily web set

How are AZ-104 questions generated?

dotCreds builds AZ-104 practice questions from public exam objectives and Microsoft Learn and exam-objective references. The questions are written for realistic study practice, not copied from exam dumps.

How are explanations sourced?

Each question includes an explanation and, when available, a source link back to the provider documentation or reference used to validate the answer. That keeps the practice tied to study material you can actually review.

What score do I get?

The page tracks today's answered count and accuracy for the 10-question daily set, then saves a 7-day score history on this device so you can see your recent practice trend.

Why use this site?

The site is the fastest way to start AZ-104 practice without installing anything. It is built for daily recall, quick weak-topic discovery, and source-backed explanations you can review immediately.

More Microsoft practice tests

If you're studying adjacent Microsoft certs, these pages use the same daily-question format with source-backed explanations.

AI-901 Practice Test AI-300 Practice Test AZ-900 Practice Test AB-900 Practice Test