Popular
MICROSOFT · AZ-104

Microsoft AZ-104 Exam Practice Questions

606 questionsInstant PDF downloadUpdated September 2026

US$39

Try 10 questions free

Card, Apple Pay or Google Pay. Your PDF is sent by email as soon as you check out.

Pass or your money backFail the exam after using this pack and we refund it. How the guarantee works
Category:
TRY BEFORE YOU BUY

Three of the 606 questions in this pack

Question 1

Your company has serval departments. Each department has a number of virtual machines (VMs).

The company has an Azure subscription that contains a resource group named RG1.

All VMs are located in RG1.

You want to associate each VM with its respective department.

What should you do?

  1. Create Azure Management Groups for each department.
  2. Create a resource group for each department.
  3. Assign tags to the virtual machines.
  4. Modify the settings of the virtual machines.
Show answer and explanation

Correct answer: C. Assign tags to the virtual machines.

Tags are the appropriate mechanism for associating metadata with Azure resources like VMs without restructuring the resource hierarchy. Since all VMs are already in RG1 and the company wants to maintain this structure while simply identifying which department owns each VM, tags provide a lightweight, flexible solution. Tags allow for arbitrary key- value pairs that enable categorization, billing tracking, and automation without moving resources between groups.

Why the other options are wrong

  • A. Management Groups are for managing policies and access across multiple subscriptions and resource groups, not for organizing VMs within a single resource group by department.
  • B. Creating a resource group per department would fragment the existing RG1 structure and contradict the stated requirement that all VMs are located in RG1.
  • D. Modifying VM settings does not provide a systematic way to track and organize VMs by department for reporting or billing purposes.

Question 2

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result.

Establish if the solution satisfies the requirements.

Your company has an Azure Active Directory (Azure AD) subscription.

You want to implement an Azure AD conditional access policy.

The policy must be configured to require members of the Global Administrators group to use Multi-Factor Authentication and an Azure AD-joined device when they connect to Azure AD from untrusted locations.

Solution: You access the multi-factor authentication page to alter the user settings.

Does the solution meet the goal?

  1. Yes
  2. No
Show answer and explanation

Correct answer: B. No

Altering user settings on the multi-factor authentication page configures MFA authentication methods but does not create or configure a conditional access policy. Conditional access policies are specifically configured in Azure AD under the Conditional Access blade, not through the MFA user settings page. The solution addresses only MFA enablement, not the policy requirements for device compliance and location-based restrictions.

Why the other options are wrong

  • A. The MFA settings page is insufficient for implementing conditional access policies, which require explicit policy configuration in the Conditional Access section of Azure AD.

Question 3

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result.

Establish if the solution satisfies the requirements.

Your company has an Azure Active Directory (Azure AD) subscription.

You want to implement an Azure AD conditional access policy.

The policy must be configured to require members of the Global Administrators group to use Multi-Factor Authentication and an Azure AD-joined device when they connect to Azure AD from untrusted locations.

Solution: You access the Azure portal to alter the session control of the Azure AD conditional access policy.

Does the solution meet the goal?

  1. Yes
  2. No
Show answer and explanation

Correct answer: B. No

Session controls in conditional access policies manage ongoing session behavior (such as sign-in frequency and browser session lifetime) but do not enforce MFA or device compliance requirements. Session controls are insufficient to meet the requirement of mandating MFA and Azure AD-joined devices. Grant controls are the correct setting for requiring MFA and device compliance checks during access.

Why the other options are wrong

  • A. Session controls do not enforce authentication method or device requirements; they only manage active session characteristics after initial access decisions are made.

See all 10 free questions Get the full pack, US$39

606 practice questions for Microsoft Azure Administrator (AZ-104), with full explanations.

Every question comes with the correct answer, the reasoning behind it, and a short note on why each wrong option is wrong. Work through it once with the answers, then again with the questions-only copy under exam conditions.

  • 606 questions across all five AZ-104 domains
  • Answers and explanations for every question, including the wrong options
  • A questions-only PDF for timed practice runs
  • Instant delivery by email the moment you check out
  • Free monthly updates for as long as the exam is live
  • Pass or your money back

A failed AZ-104 attempt costs US$165 in the US, plus the weeks it takes to get ready again. This pack is US$39, paid once, and refunded if you fail.

Try 10 questions free before you buy.

Last updated September 2026 · 606 questions

What makes the AZ-104 hard

It is not a pure multiple choice exam. Part of it is hands-on: you complete tasks inside a simulated Azure environment, so recognising the right answer is not enough. You need to know how the resource is actually configured.

The exam spans five areas in 100 minutes: identity and governance, storage, compute, networking and monitoring. Networking and identity are where underprepared candidates tend to lose the most marks, along with anyone meeting the interactive tasks for the first time on the day.

This pack puts all 606 questions in one place, so the question style and the lab-style tasks are familiar long before you book your slot.

About the exam

AZ-104 is Microsoft’s associate-level Azure administration certification. It covers implementing, managing and monitoring an organisation’s Azure environment: identity and governance, storage, compute, virtual networking and monitoring. It is one of the most requested cloud certifications for Azure administrator, cloud engineer and cloud infrastructure roles. There are no formal prerequisites, though AZ-900 level knowledge is recommended. The certification is valid for one year and renews free through an online assessment.

Exam domains

  • Manage Azure identities and governance: 20 to 25%
  • Implement and manage storage: 15 to 20%
  • Deploy and manage Azure compute resources: 20 to 25%
  • Implement and manage virtual networking: 15 to 20%
  • Monitor and maintain Azure resources: 10 to 15%

40 to 60 questions including interactive tasks, 100 minutes, pass mark 700 out of 1000, US$165 in the US (local pricing elsewhere), taken at a Pearson VUE centre or online, valid for one year.

Reviews

There are no reviews yet.

Only logged in customers who have purchased this product may leave a review.

Questions before you buy

What do I get when I buy the Microsoft AZ-104 pack?

606 practice questions as a PDF, each with the correct answer, a full explanation and a note on why the other options are wrong, plus a separate questions-only PDF for timed practice.

How quickly do I receive it?

Straight away. The full PDF and a questions-only copy are emailed to you the moment your payment goes through, and the same links are on your order page.

Is there a free sample?

Yes. Ten questions from this pack, with answers and explanations, are free on this page and as a PDF, so you can judge the quality before you pay.

Are updates included?

Yes. The pack is updated every month for as long as the exam is live, and updates are free for everyone who has bought it.

What if I fail the exam?

We refund the pack. Sit the exam 7 to 30 days after buying, then send your official score report within 7 days of the exam date, as set out in the refund policy.

Can I share it with colleagues?

Each purchase is licensed to one person. For a team, school or training organisation, email support@certstash.com for a licence that fits.