AZ-104 Assessment
Azure Administrator Assessment
AZ-104 Exam Renewal Test
Question 1Â
You manage an Azure App Service named Contoso2022 running on the Standard App Service Plan with five deployment slots already active. A user, User1, holds the Contributor role for Contoso2022. You need to allow User1 to create additional deployment slots.
What should you do?
Assign User1 the Owner role for Contoso2022.
Assign User1 the Website Contributor role for Contoso2022.
Scale out the Contoso2022 App Service plan.
Scale up the Contoso2022 App Service plan.
Reveal Solution
Correct Answer: Assign User1 the Owner role for Contoso2022.
Explanation: The Contributor role does not grant permission to add deployment slots. Only the Owner role provides full control, including creating deployment slots. Scaling options do not impact user permissions.
Question 2
You are deploying the following Azure web apps:
WebApp1: Windows Server 2016
WebApp2: Windows Server 2022
WebApp3: Ubuntu Server
WebApp4: Red Hat Enterprise Linux
What is the minimum number of App Service Plans required?
1
2
3
4
Reveal Solution
Correct Answer: 2
Explanation: Windows-based apps (WebApp1 and WebApp2) can share one App Service Plan. Similarly, Linux-based apps (WebApp3 and WebApp4) can share another. So, only two plans are needed—one for each OS type.
Question 3
You want to deploy a web app named WebApp1 with the following configuration:
Publish type: Docker Container
Operating System: Windows
Region: West US
App Service Plan: ASP-RG1-8bcf
You want WebApp1 to run the ASP.NET V4.8 runtime.
Which setting should you change?
Operating System
Publish
Region
Windows Plan
Reveal Solution
Correct Answer: Publish
Explanation: ASP.NET V4.8 is available only for apps published as “Code,” not containers. To use this runtime, switch the Publish setting from Docker Container to Code.
Question 4
You have a web app named WebApp1 running in a Standard App Service Plan. You plan to add deployment slots.
What is the maximum number of additional deployment slots you can add?
1
4
6
9
Reveal Solution
Correct Answer: 4
Explanation: The Standard App Service Plan allows up to five slots, including the production slot. Therefore, you can add four additional slots.
Question 5
Your Azure virtual network contains:
Subnet1: Connected to virtual machines
Subnet2: Hosting a web app
Subnet3: Hosts container instances
You plan to deploy another container instance named container1.
Which subnet(s) can host container1?
Subnet1 and Subnet3 only
Subnet1, Subnet2, and Subnet3
Subnet2 and Subnet3 only
Subnet3 only
Reveal Solution
Correct Answer: Subnet3 only
Explanation: Azure Container Instances must be deployed in subnets configured to support them. Only Subnet3 is explicitly prepared for containers.
Question 6
You have a Windows Server 2022 VM named VM1 and an Azure Container Registry that stores Image1.
What must you install on VM1 to run Image1?
Azure Portal
Docker
Hyper-V role
.NET Framework 4.7
Reveal Solution
Correct Answer: Docker
Explanation: Docker provides the necessary container runtime to run images pulled from the Azure Container Registry.
Question 7
Your Azure subscription has the following:
Storage Account: storage123
Container Instance: AppContainer
Virtual Network: VirtualNet4 with:
SubnetA (Storage endpoint for Microsoft.Storage)
SubnetB (Hosts AppContainer)
SubnetC (Unused)
You plan to deploy another container instance named container5.
Where can you deploy container5?
SubnetA, SubnetB, and SubnetC
SubnetB and SubnetC only
SubnetB only
SubnetC only
Reveal Solution
Correct Answer: SubnetB and SubnetC only
Explanation: SubnetA is optimized for Storage access and not suitable for containers. Subnets B and C are appropriate for container deployments.
Question 8
You have an Azure storage account with a blob container named container1. You want to manage access to this container.
Which authorization types are valid?
Microsoft Entra ID only
Microsoft Entra ID, Shared Access Signature, or Certificate only
Microsoft Entra ID, Storage Key, or Shared Access Signature only
Microsoft Entra ID, Storage Key, Shared Access Signature, or Certificate
Storage Key or Shared Access Signature only
Reveal Solution
Correct Answer: Microsoft Entra ID, Storage Key, or Shared Access Signature only
Explanation: Certificates are not valid for direct blob access. Valid methods include Entra ID, storage account keys, and SAS.
Question 9Â
You have the following storage accounts:
storage1: StorageV2
storage2: BlobStorage
storage3: FileStorage
Which accounts support lifecycle management?
storage1 and storage2 only
storage1 and storage3 only
storage1 only
storage1, storage2, and storage3
storage2 and storage3 only
Reveal Solution
Correct Answer: storage1 and storage2 only
Explanation: Lifecycle management is supported for Blob data in StorageV2 and BlobStorage accounts only—not FileStorage.
Question 10
You create two encryption scopes in your Azure storage account storage1:
Scope1: Microsoft-managed keys
Scope2: Customer-managed keys (CMK)
Which services can use Scope2?
blob and file only
blob, file, table, and queue
blob only
file only
table and queue only
Reveal Solution
Correct Answer: blob and file only
Explanation: CMK encryption is supported only for blob and file services. Table and queue services only support Microsoft-managed encryption.
We’d love your feedback!
Share your thoughts on the Renewal Test and help us improve by reporting any inaccurate answers.
🔗 Explore more Renewal Tests at mscloudexplorers.com/learn
📘 Discover more Microsoft 365 & Intune-related blogs at mscloudexplorers.com/blog
🔔 Follow us on LinkedIn for regular updates, tips, and community insights.
It’s remarkable to go to see this website and reading the views of all mates about
this post, while I am also keen of getting experience.