Microsoft Certification Azure Administrator (AZ-104) 1 — Questions and Answers
Question 1: Which Azure service allows you to manage and deploy infrastructure using declarative templates?
- Azure CLI
- Azure Resource Manager (ARM) templates (Correct answer)
- Azure Monitor
- Azure Advisor
Correct answer: Azure Resource Manager (ARM) templates
ARM templates are JSON files that declaratively define Azure infrastructure and are idempotent, meaning repeated deployments produce the same result.
Question 2: What is the purpose of Azure Virtual Network (VNet) peering?
- To scale virtual machines automatically
- To connect two Azure VNets so resources can communicate privately (Correct answer)
- To expose services to the public internet
- To back up virtual machines
Correct answer: To connect two Azure VNets so resources can communicate privately
VNet peering connects two Azure virtual networks, allowing resources in each to communicate as if on the same network without using the public internet.
Question 3: Which Azure role provides full access to manage all Azure resources but does not grant access to manage role assignments?
- Owner
- Contributor (Correct answer)
- Reader
- User Access Administrator
Correct answer: Contributor
The Contributor role grants full access to create and manage Azure resources but cannot assign roles or grant access to others.
Question 4: What does Azure Blob Storage's 'lifecycle management' policy do?
- Automatically backs up blobs to another region
- Automatically transitions or deletes blobs based on rules and age (Correct answer)
- Encrypts blobs at rest
- Replicates blobs across subscriptions
Correct answer: Automatically transitions or deletes blobs based on rules and age
Lifecycle management policies in Azure Blob Storage automatically move data to cooler tiers or delete it based on time-based rules.
Question 5: Which command correctly creates a resource group in Azure CLI?
- az group new --name myRG --location eastus
- az group create --name myRG --location eastus (Correct answer)
- az create group --name myRG --location eastus
- az rg create --name myRG --location eastus
Correct answer: az group create --name myRG --location eastus
The correct Azure CLI command to create a resource group is `az group create` with the `--name` and `--location` parameters.
Question 6: What is the primary function of Azure Load Balancer?
- Storing application data
- Distributing inbound traffic across multiple backend virtual machines (Correct answer)
- Monitoring application performance
- Managing DNS records
Correct answer: Distributing inbound traffic across multiple backend virtual machines
Azure Load Balancer operates at Layer 4 and distributes incoming TCP/UDP traffic across healthy backend pool instances.
Which Azure service allows you to manage and deploy infrastructure using declarative templates?