DRAG DROP - You have an Azure subscription that contains two virtual networks named VNet1 and VNet2. Virtual machines connect to the virtual networks. The virtual networks have the address spaces and the subnets configured as shown in the following table.
You need to add the address space of 10.33.0.0/16 to VNet1. The solution must ensure that the hosts on VNet1 and VNet2 can communicate. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. Select and Place: 
Free AZ-104 Practice Test Questions and Answers (2026)
You need to identify which storage account can be converted to zone-redundant storage
(ZRS) replication by requesting a live migration from Azure support. What should you
identify?
Which cmdlet should you run to deploy the template?
You plan to monitor storage1 and to configure email notifications for the signals shown in
the following table.
You need to identify the minimum number of alert rules and action groups required for the
planned monitoring.
How many alert rules and action groups should you identify? To answer, select the
appropriate options in the answer area.
Hot Area:

DRAG DROP - You onboard 10 Azure virtual machines to Azure Automation State Configuration. You need to use Azure Automation State Configuration to manage the ongoing consistency of the virtual machine configurations. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. NOTE: More than one order of answer choices is correct. You will receive credit for any of the correct orders you select. Select and Place:
DRAG DROP - You have an on-premises file server named Server1 that runs Windows Server 2016. You have an Azure subscription that contains an Azure file share. You deploy an Azure File Sync Storage Sync Service, and you create a sync group. You need to synchronize files from Server1 to Azure. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. Select and Place:


DRAG DROP - You have an Azure subscription that contains the resources shown in the following table. 
DRAG DROP - You have an Azure Active Directory (Azure AD) tenant that has the contoso.onmicrosoft.com domain name. You have a domain name of contoso.com registered at a third-party registrar. You need to ensure that you can create Azure AD users that have names containing a suffix of @contoso.com. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. Select and Place:
You create a route table named RT1 in the East US Azure region.
To which resources can you associate RT1?
For each of the following statements, select Yes if the statement is true. Otherwise, select
No. Hot Area:

NSG1 is associated to networkinterface1. User1 has role assignments for NSG1 as shown
in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select
No.

You need to delete TestRG. What should you do first?
For the Instance limits scale condition setting, you set Maximum to 5.
During a 30-minute period, App1 uses 80 percent of the available memory.
What is the maximum number of instances for App1 during the 30-minute period?What's covered in this practice questions set
3: Deploy and manage Azure compute resources · 6 questions
📖 About this Domain
This domain covers the implementation and management of Azure IaaS and PaaS compute solutions. You will handle the complete lifecycle of virtual machines, containers, and web applications. It is a core competency for the Azure Administrator role, focusing on resource deployment and configuration.
🎓 What You Will Learn
- Deploy and configure virtual machines (VMs) using the Azure portal, ARM templates, and command-line interfaces.
- Automate VM deployments and manage configurations using VM extensions and cloud-init.
- Implement and manage containerized workloads using Azure Container Instances (ACI) and basic Azure Kubernetes Service (AKS) configurations.
- Create and configure Azure App Service Plans and deploy web apps, including scaling and deployment slots.
🛠️ Skills You Will Build
- Automating compute resource provisioning using Infrastructure as Code (IaC) with ARM templates and Bicep.
- Configuring high availability and resilience for IaaS workloads using availability sets, availability zones, and scale sets.
- Deploying and managing containerized applications on Azure's serverless container platform and orchestration service.
- Managing PaaS web hosting environments, including autoscaling, custom domains, and backup configurations.
💡 Top Tips to Prepare
- Master ARM template syntax for deploying VMs with dependent resources like NICs, NSGs, and public IPs.
- Practice extensively with Azure CLI and Azure PowerShell commands for creating and modifying compute resources.
- Clearly differentiate the use cases and SLAs for availability sets versus availability zones for VM fault tolerance.
- Understand the specific scenarios for choosing between VMs, ACI, AKS, and App Service for application hosting.
4: Implement and manage virtual networking · 5 questions
📖 About this Domain
This domain covers the implementation and management of core Azure networking infrastructure. You will configure virtual networks, subnets, and IP addressing to establish a foundational network topology for Azure resources.
🎓 What You Will Learn
- You will learn to create and configure VNets and subnets, including IP address space planning.
- You will learn to filter network traffic using Network Security Groups (NSGs) and Azure Firewall rules.
- You will learn to implement name resolution using Azure DNS private and public zones.
- You will learn to configure VNet peering to connect virtual networks securely across regions.
🛠️ Skills You Will Build
- You will build skills to deploy and manage Azure VNets, subnets, and IP addressing schemes.
- You will build skills in securing network traffic using NSGs, Azure Firewall policies, and Azure Bastion.
- You will build skills to configure Azure Load Balancer and Application Gateway for traffic distribution.
- You will build skills using Network Watcher for network diagnostics and troubleshooting connectivity issues.
💡 Top Tips to Prepare
- Get hands-on practice creating and peering VNets, both for local and global configurations.
- Master the processing logic and priority numbers for NSG inbound and outbound security rules.
- Understand the OSI layer differences between Azure Load Balancer (Layer 4) and Application Gateway (Layer 7).
- Practice configuring Azure DNS, including private zones and auto-registration of VM records.
2: Implement and manage storage · 4 questions
📖 About this Domain
This domain covers the configuration and management of Azure Storage accounts. You will handle data solutions using Azure Blob Storage and Azure Files. Key tasks include securing storage access and managing data with tools like Storage Explorer.
🎓 What You Will Learn
- Create and configure storage accounts, including network access and replication settings.
- Manage Azure Blob Storage by configuring tiers, lifecycle management policies, and object replication.
- Deploy and manage Azure file shares and configure Azure File Sync for hybrid scenarios.
- Secure storage data by generating shared access signatures (SAS), managing access keys, and configuring Azure AD authentication.
🛠️ Skills You Will Build
- You will build the ability to provision and manage storage accounts using the Azure portal, CLI, and PowerShell.
- You will gain proficiency in securing storage endpoints and controlling data access with RBAC and access policies.
- You will develop skills in performing data migration and management tasks using AzCopy and Storage Explorer.
- You will be able to implement a hybrid file share solution by deploying and configuring Azure File Sync.
💡 Top Tips to Prepare
- Get hands-on practice creating storage accounts with varied redundancy options like LRS, ZRS, GRS, and RA-GRS.
- Use the Azure CLI to generate SAS tokens and understand the different permission levels and expiry settings.
- Perform bulk data transfers with AzCopy to and from blob containers to master its command syntax.
- Set up a complete Azure File Sync topology, including installing the agent and creating a sync group.
1: Manage Azure identities and governance · 4 questions
📖 About this Domain
This domain covers identity management using Microsoft Entra ID and Azure governance. You will manage users, groups, and role-based access control (RBAC). It also includes implementing compliance and cost management controls.
🎓 What You Will Learn
- You will learn to manage Microsoft Entra ID objects like users, groups, and configure self-service password reset (SSPR).
- You will learn to implement Azure role-based access control (RBAC) by assigning roles at various scopes like management groups and subscriptions.
- You will learn to enforce resource governance using Azure Policy, resource locks, and tagging strategies.
- You will learn to manage Azure subscriptions, configure cost management alerts, and organize resources with resource groups.
🛠️ Skills You Will Build
- You will build skills to administer Microsoft Entra tenants, including bulk user operations and guest account management.
- You will build skills to secure resource access by assigning built-in and custom RBAC roles effectively.
- You will build skills to apply governance controls like Azure Policy for resource compliance and resource locks to prevent accidental changes.
- You will build skills to analyze Azure costs and implement organizational structures using management groups and subscriptions.
💡 Top Tips to Prepare
- Practice creating users and assigning them to groups using both the Azure portal and PowerShell commands.
- Master the inheritance model of RBAC and understand how permissions are applied at different scopes.
- Differentiate between the functions of Azure Policy for compliance and resource locks for operational protection.
- Get hands-on experience with the Cost Management + Billing blade to set budgets and analyze spending patterns.
5: Monitor and maintain Azure resources · 1 questions
📖 About this Domain
This domain covers the operational management of Azure infrastructure. You will use Azure Monitor for performance tracking and Azure Backup for business continuity. It is critical for maintaining the health and availability of deployed resources.
🎓 What You Will Learn
- Configure Azure Monitor to ingest metrics and logs from IaaS and PaaS resources.
- Create alert rules, action groups, and alert processing rules for proactive notifications.
- Utilize Log Analytics workspaces and Kusto Query Language (KQL) for log data analysis.
- Implement backup and restore operations for Azure VMs using Recovery Services vaults.
🛠️ Skills You Will Build
- Analyzing resource utilization and performance trends using Azure Monitor Metrics.
- Troubleshooting operational issues by executing KQL queries against Log Analytics data.
- Configuring and managing data protection strategies with Azure Backup policies.
- Implementing disaster recovery plans by configuring Azure Site Recovery for VM replication.
💡 Top Tips to Prepare
- Get hands-on practice creating alert rules with different signal types like metric and log.
- Learn the core KQL commands like `where`, `project`, and `summarize` in the Log Analytics demo environment.
- Understand the differences between a Recovery Services vault and a Backup vault.
- Perform a full VM restore and a file-level restore in a lab to understand the process.


