AZ-104 practice questions: 10 free samples from the Azure mock exam

10 questions in the style of the Microsoft Azure Administrator exam, with their answer options. They are 10 of the 41 in the pool the mock draws from; answers and explanations come back when you sit it, and every question is marked against its domain so you can see where you stand.

Sit the full 40-question mock — free, no account

  1. 1. What is the right reason to put resources in the same resource group? The scope ladder

    1. AThey share a lifecycle and would be deployed and deleted together
    2. BThey are owned by the same team
    3. CThey are in the same Region
    4. DThey are the same kind of service

  2. 2. A resource group must contain resources from a single Region. The scope ladder

    1. 3. Which of these does Entra ID not provide? Identity

      1. AConditional access policies
      2. BGroup Policy and Kerberos for domain-joined servers
      3. CMulti-factor authentication
      4. DSingle sign-on for cloud applications

    2. 4. Three app services need the same access to one key vault. Which identity type? Identity

      1. AA service principal with a client secret
      2. BA shared access key stored in configuration
      3. COne user-assigned managed identity, shared by all three
      4. DThree system-assigned identities and three role assignments

    3. 5. A containerised API should scale to zero between bursts, and you do not want a cluster. What fits? Compute and storage

      1. AAKS
      2. BApp Service on a dedicated plan
      3. CA VM scale set
      4. DAzure Container Apps

    4. 6. What is distinctive about the Archive tier? Compute and storage

      1. AIt is limited to one gigabyte per blob
      2. BIt has lower durability than Hot
      3. CThe data is offline and must be rehydrated before it can be read, which takes hours
      4. DIt is slower but still readable directly

    5. 7. An NSG is applied to both the subnet and the network interface. What governs inbound traffic? Networking and resilience

      1. AOnly the one on the interface
      2. BBoth are evaluated — the subnet first, then the interface, and traffic must pass both
      3. CThe one created most recently
      4. DOnly the one on the subnet

    6. 8. Deploying into a paired Region gives you automatic failover for your application. Networking and resilience

      1. 9. What does Azure Hybrid Benefit do? Cost and guidance

        1. AGives free egress between on-premises and Azure
        2. BApplies licences you already own so you pay only the infrastructure rate
        3. CExtends a reservation to a second Region
        4. DDiscounts any workload run in a hybrid network

      2. 10. What does Azure Advisor add over reading the framework? Cost and guidance

        1. AAutomatic remediation of every finding
        2. BA discount on the resources it flags
        3. CA formal certification of compliance
        4. DFindings computed against your actual subscription rather than general advice

      Check your answers

      The mock marks every answer on submit, explains it and breaks the result down by domain. It draws its questions in the published domain weights, and passes at 70% — Microsoft scales to 1000 and passes at 700. A mock cannot reproduce that scaling, so 70% of questions is used as an approximation.

      Start the AZ-104 mock exam

      Not ready yet? The Azure course covers the same domains in short lessons, each with its own questions.

      Exam facts are taken from the official page: learn.microsoft.com. Questions here are written for practice and are not from the real exam.