AZ-104 practice questions: 10 free samples from the Azure mock exam

10 questions in the style of the Microsoft Azure Administrator exam, with their answer options. They are 10 of the 41 in the pool the mock draws from; answers and explanations come back when you sit it, and every question is marked against its domain so you can see where you stand.

Sit the full 40-question mock — free, no account

  1. 1. What is the right reason to put resources in the same resource group? The scope ladder

    1. AThey share a lifecycle and would be deployed and deleted together
    2. BThey are the same kind of service
    3. CThey are in the same Region
    4. DThey are owned by the same team

  2. 2. A resource group must contain resources from a single Region. The scope ladder

    1. 3. What is the difference between the Owner and Contributor roles? The scope ladder

      1. AContributor can manage resources but cannot grant access to others
      2. BContributor is read-only
      3. COwner works only at subscription scope
      4. DThere is none; the names are aliases

    2. 4. Three app services need the same access to one key vault. Which identity type? Identity

      1. AOne user-assigned managed identity, shared by all three
      2. BA service principal with a client secret
      3. CA shared access key stored in configuration
      4. DThree system-assigned identities and three role assignments

    3. 5. A containerised API should scale to zero between bursts, and you do not want a cluster. What fits? Compute and storage

      1. AApp Service on a dedicated plan
      2. BAKS
      3. CA VM scale set
      4. DAzure Container Apps

    4. 6. What is distinctive about the Archive tier? Compute and storage

      1. AThe data is offline and must be rehydrated before it can be read, which takes hours
      2. BIt has lower durability than Hot
      3. CIt is limited to one gigabyte per blob
      4. DIt is slower but still readable directly

    5. 7. An NSG is applied to both the subnet and the network interface. What governs inbound traffic? Networking and resilience

      1. AOnly the one on the subnet
      2. BBoth are evaluated — the subnet first, then the interface, and traffic must pass both
      3. COnly the one on the interface
      4. DThe one created most recently

    6. 8. Deploying into a paired Region gives you automatic failover for your application. Networking and resilience

      1. 9. What does Azure Hybrid Benefit do? Cost and guidance

        1. AGives free egress between on-premises and Azure
        2. BApplies licences you already own so you pay only the infrastructure rate
        3. CExtends a reservation to a second Region
        4. DDiscounts any workload run in a hybrid network

      2. 10. What does Azure Advisor add over reading the framework? Cost and guidance

        1. AA formal certification of compliance
        2. BA discount on the resources it flags
        3. CAutomatic remediation of every finding
        4. DFindings computed against your actual subscription rather than general advice

      Check your answers

      The mock marks every answer on submit, explains it and breaks the result down by domain. It draws its questions in the published domain weights, and passes at 70% — Microsoft scales to 1000 and passes at 700. A mock cannot reproduce that scaling, so 70% of questions is used as an approximation.

      Start the AZ-104 mock exam

      Not ready yet? The Azure course covers the same domains in short lessons, each with its own questions.

      Exam facts are taken from the official page: learn.microsoft.com. Questions here are written for practice and are not from the real exam.