Latest AZ-104 Results – Dumps That Deliver
Your success starts here! 1891+ learners already passed with our AZ-104 Dumps PDF.
CertifyCerts – Microsoft AZ-104 Exam Details
| Exam Attribute | Details |
|---|---|
| Exam Name | Microsoft Certified: Azure Administrator Associate |
| Exam Code | AZ-104 |
| Duration | 120-150 minutes |
| Number of Questions | 40-60 questions (varies) |
| Question Types | Multiple choice, multiple select, case studies, drag-and-drop |
| Passing Score | 700 out of 1000 points |
| Languages | English and multiple localized languages |
| Skills Measured | Identity & governance, storage, compute, networking, monitoring |
| Delivery | Online proctored or in-person at Pearson VUE centers |
CertifyCerts – Microsoft AZ-104 Exam Breakdown
| Domain | Weight(%) | Key Skills Tested |
|---|---|---|
| Manage Azure identities & governance | 20-25% | Microsoft Entra ID, RBAC, subscriptions & governance tasks |
| Implement & manage storage | 15-20% | Storage accounts, Azure files & blobs, access control |
| Deploy & manage compute resources | 20-25% | Virtual machines, automation, backups, containers |
| Configure & manage networking | 15-20% | Virtual networks, subnets, NSGs, VNet peering, DNS |
| Monitor & maintain Azure resources | 10-15% | Azure Monitor, alerts, backups, resource health |
Choosing the Right Path for Your AZ-104 Exam Preparation
Welcome to CertifyCerts’s complete guide for the Microsoft Azure Administrator exam. Whether you’re just starting your cloud journey or aiming to boost your Microsoft expertise, our AZ-104 study materials are designed to help you prepare confidently and pass your exam on the first try.
What You’ll Get with CertifyCerts’s AZ-104 Study Material
Our AZ-104 Dumps PDF and online practice tools are built to make your preparation smooth, effective, and results-driven. Here’s what sets our materials apart:
Comprehensive Coverage
We’ve broken down every topic and concept covered in the AZ-104 exam — from Microsoft fundamentals to advanced architectural principles. Each concept is explained in simple, easy-to-understand language, making even complex topics feel approachable.
Real Exam Practice
Our online test engine lets you experience the real exam environment before test day. You’ll get access to a wide range of practice questions aligned with the latest exam objectives — complete with detailed explanations for correct and incorrect answers. It’s the perfect way to measure your progress and sharpen your test-taking skills.
Smart Exam Strategies
Passing the AZ-104 isn’t just about memorizing facts — it’s about strategy. Our guide includes expert tips on managing time, tackling tricky questions, and staying calm under pressure so you can perform your best on exam day.
Hands-On Scenarios
We go beyond theory. You’ll explore real-world Microsoft use cases and architecture examples that help you connect concepts to practical, day-to-day challenges in the IT field.
Why CertifyCerts?
Built by Microsoft Experts
Our AZ-104 Questions and Answers are developed by certified Microsoft professionals who understand the exam inside out. You’re learning from people who’ve been through it and know what it takes to pass.
Full Exam Coverage
No shortcuts here — we cover every domain and objective of the AZ-104 certification to make sure you’re ready for anything the exam throws your way.
Engaging and Easy to Learn
We believe learning should never feel boring. Our materials are structured in a clear, engaging way that keeps you motivated and focused throughout your preparation journey.
Proven Results
Thousands of learners have trusted CertifyCerts to earn their Microsoft certifications — and their success stories speak for themselves. With our help, you can be next.
Start Your Microsoft Journey Today
Take the first step toward becoming a certified Azure Administrator Associate with CertifyCerts. Our up-to-date, expertly curated AZ-104 study materials will guide you every step of the way — from your first study session to your certification success.
Get started today — your Microsoft career breakthrough begins with CertifyCerts!
Question # 1
You have an Azure subscription.You have 100 Azure virtual machines.You need to quickly identify underutilized virtual machines that can have their service tier changed to a lessexpensive offering.Which blade should you use?
A. Metrics
B. Customer insights
C. Monitor
D. Advisor
Question # 2
You have an Azure subscription that contains two virtual machines named VM1 and VM2You create an Azure load balancer.You plan to create a load balancing rule that will load balance HTTPS traffic between VM1 and VM2.Which two additional load balance resources should you create before you can create the load balancing rule?Each correct answer presents part of the solutionMOTL Each correct selection 5 worth one point.
A. a frontend IP address
B. a backend pool
C. a health probe
D. an inbound NAT rule
E. a virtual network
Question # 3
Note: This question is part of a series of questions that present the same scenario. Each question in the seriescontains a unique solution that might meet the stated goals. Some question sets might have more than onecorrect solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questionswill not appear in the review screen.You need to ensure that an Azure Active Directory (Azure AD) user named Admin1 is assigned the requiredrole to enable Traffic Analytics for an Azure subscription.Solution: You assign the Traffic Manager Contributor role at the subscription level to Admin1
A. Yes
B. NO
Question # 4
Note: This question is part of a series of questions that present the same scenario. Each question in the seriescontains a unique solution that might meet the stated goals. Some question sets might have more than onecorrect solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, thesequestions will not appear in the review screen.You manage a virtual network named VNet1 that is hosted in the West US Azure region.VNet1 hosts two virtual machines named VM1 and VM2 that run Windows Server.You need to inspect all the network traffic from VM1 to VM2 for a period of three hours.Solution: From Azure Monitor, you create a metric on Network in and Network Out.Does this meet the goal?
A. Yes
B. No
Question # 5
You have an Azure virtual network named VNet1 that contains a subnet named Subnet1. Subnet1 contains three Azure virtual machines. Each virtual machine has a public IP address.The virtual machines host several applications that are accessible over port 443 to user on the Internet.Your on-premises network has a site-to-site VPN connection to VNet1.You discover that the virtual machines can be accessed by using the Remote Desktop Protocol (RDP) from theInternet and from the on-premises network.You need to prevent RDP access to the virtual machines from the Internet, unless the RDP connection isestablished from the on-premises network. The solution must ensure that all the applications can still beaccesses by the Internet users.What should you do?
A. Modify the address space of the local network gateway.
B. Remove the public IP addresses from the virtual machines.
C. Modify the address space of Subnet1.
D. Create a deny rule in a network security group (NSG) that is linked to Subnet1.
Question # 6
You have an Azure Kubernetes Service (AKS) cluster named AKS1.You need to configure cluster autoscaler for AKS1.Which two tools should you use? Each correct answer presents a complete solution,NOTE: Each correct selection is worth one point
A. the set-AzAKs cmdlet
B. the Azure portal
C. The az aks command
D. the kubect1 command
E. the set Azure cmdlet
Question # 7
You have an Azure Storage account named storage1.You plan to use AzCopy to copy data to storage1.You need to identify the storage services in storage1 to which you can copy the data.What should you identify?
A. blob, file, table, and queue
B. blob and file only
C. file and table only
D. file only
E. blob, table, and queue only
Question # 8
You have an Azur« subscription that contains a virtual machine named VM1 and an Azure key vault named KV1.You need to configure encryption for VM1. The solution must meet the following requirements:• Store and use the encryption key in KV1.• Maintain encryption if VM1 is downloaded from Azure.• Encrypt both the operating system disk and the data disks.Which encryption method should you use?
A. encryption at host
B. customer-managed keys
C. Azure Disk Encryption
D. Confidential disk encryption
Question # 9
You have a Microsoft 365 tenant and an Azure Active Directory (Azure AD) tenant named contoso.com.You plan to grant three users named User1, User2, and User3 access to a temporary Microsoft SharePointdocument library named Library1.You need to create groups for the users. The solution must ensure that the groups are deleted automaticallyafter 180 days.Which two groups should you create? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point.
A. a Security group that uses the Assigned membership type
B.an Office 365 group that uses the Assigned membership type
C. an Office 365 group that uses the Dynamic User membership type
D. a Security group that uses the Dynamic User membership type
E. a Security group that uses the Dynamic Device membership type
Question # 10
Note: This question is part of a series of questions that present the same scenario. Each question in the seriescontains a unique solution that might meet the stated goals. Some question sets might have more than onecorrect solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questionswill not appear in the review screen.You have an Azure Active Directory (Azure AD) tenant named Adatum and an Azure Subscription namedSubscription1. Adatum contains a group named Developers. Subscription1 contains a resource group namedDev.You need to provide the Developers group with the ability to create Azure logic apps in the Dev resourcegroup.Solution: On Subscription1, you assign the Logic App Operator role to the Developers group.Does this meet the goal?
A. Yes
B. No
Question # 11
You deploy Azure virtual machines to three Azure regions.Each region contains a virtual network. Each virtual network contains multiple subnets peered in a full meshtopology.Each subnet contains a network security group (NSG) that has defined rules.A user reports that he cannot use port 33000 to connect from a virtual machine in one region to a virtualmachine in another region.Which two options can you use to diagnose the issue? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point.
A. Azure Virtual Network Manager
B. IP flow verify
C. Azure Monitor Network Insights
D. Connection troubleshoot
E. elective security rules
Question # 12
You have an Azure subscription that contains an Azure Stream Analytics job named Job1.You need to monitor input events for Job1 to identify the number of events that were NOT processed.Which metric should you use?
A. Output Events
B. Backlogged Input Events
C. Out-of-Order Events
D. Late Input Events
Question # 13
You have an Azure subscription. The subscription contains virtual machines that connect to a virtual networknamed VNet1.You plan to configure Azure Monitor for VM Insights.You need to ensure that all the virtual machines only communicate with Azure Monitor through VNet1.What should you create first?
A. an Azure Monitor Private Link Scope (AMPIS)
B. a private endpoint
C. a Log Analytics workspace
D. a data collection rule (DCR)
Question # 14
You have an Azure DNS zone named adatum.com. You need to delegate a subdomain named research.adatum.com to a different DNS server in Azure. What should you do?
A. Create an PTR record named research in the adatum.com zone.
B. Create an NS record named research in the adatum.com zone.
C. Modify the SOA record of adatum.com.
D. Create an A record named *. research in the adatum.com zone
Question # 15
You have an Azure subscription that contains a web app named webapp1. You need to add a custom domainnamed www.contoso.com to webapp1. What should you do first?
A. Upload a certificate.
B. Add a connection string.
C. Stop webapp1.
D. Create a DNS record.
The AZ-104 practice tests were accurate and helped me identify weak areas quickly. Scored well on my first attempt!
Julie Wright
CertifyCerts AZ-104 material is really reliable. The PDFs and test engine made exam prep easy and stress-free.
Sebastian Clarke
Finally passed AZ-104! The question explanations helped me understand Azure concepts rather than just memorize answers.
Jordan Holmes
The practice exams were spot on. Felt fully confident walking into the AZ-104 exam.
Maria Gautier
I didn’t expect to score this high on AZ-104! The resources I used were clear, updated, and very practical.
Isadora Galvão
CertifyCerts AZ-104 dumps are accurate and trustworthy. Quick support and detailed content made a big difference.
Jose Antonio Pascual
Passed AZ-104 with ease! Real exam felt very similar to the practice questions I studied. Highly recommend.
Liza Faragó
