Microsoft Certification Azure Administrator (AZ-104) 2 — Questions and Answers
Question 1: What is an Azure Availability Set designed to protect against?
- Regional outages
- Hardware failures and planned maintenance within a single datacenter (Correct answer)
- Cost overruns
- Data exfiltration
Correct answer: Hardware failures and planned maintenance within a single datacenter
Availability Sets spread VMs across fault domains and update domains to protect against hardware failures and scheduled maintenance in a single datacenter.
Question 2: Which Azure storage tier is most cost-effective for data that is rarely accessed and can tolerate higher retrieval latency?
- Hot tier
- Cool tier
- Archive tier (Correct answer)
- Premium tier
Correct answer: Archive tier
The Archive tier offers the lowest storage cost for data that is rarely accessed, but retrieval can take hours as data must be rehydrated first.
Question 3: What does Azure Network Security Group (NSG) control?
- Virtual machine sizing
- Inbound and outbound network traffic rules for Azure resources (Correct answer)
- Subscription billing
- Storage encryption
Correct answer: Inbound and outbound network traffic rules for Azure resources
NSGs contain security rules that allow or deny network traffic to and from Azure resources based on source, destination, port, and protocol.
Question 4: Which Azure service provides DNS hosting for domain names and enables low-latency DNS resolution using Microsoft's global network?
- Azure Traffic Manager
- Azure DNS (Correct answer)
- Azure Front Door
- Azure CDN
Correct answer: Azure DNS
Azure DNS hosts DNS zones on Azure's global infrastructure, providing high availability and fast DNS resolution using Microsoft's anycast network.
Question 5: What is the purpose of Azure Bastion?
- Load balancing web applications
- Providing secure RDP/SSH connectivity to VMs without exposing public IP addresses (Correct answer)
- Encrypting storage accounts
- Managing certificates
Correct answer: Providing secure RDP/SSH connectivity to VMs without exposing public IP addresses
Azure Bastion provides browser-based RDP and SSH access to virtual machines directly through the Azure portal, without requiring a public IP on the VM.
Question 6: When configuring Azure VM scale sets, what does 'autoscale' based on a metric do?
- Automatically updates the operating system
- Automatically adds or removes VM instances based on demand metrics like CPU usage (Correct answer)
- Automatically backs up VM data
- Automatically migrates VMs to newer hardware
Correct answer: Automatically adds or removes VM instances based on demand metrics like CPU usage
VM Scale Set autoscale monitors metrics like CPU percentage and automatically scales the instance count in or out to match demand.
Microsoft Certification Azure Administrator (AZ-104) 2
What is an Azure Availability Set designed to protect against?