AZ-104 Azure Administrator Book: Study Guide & Exam Questions

What do you want to practice?

These are the questions on the free pages. Test yourself below, and tick the pages to include in a practice session.

• 1. Part 1: Azure Administrator Prerequisites 19 questions
  • 1.1 Azure Cloud Shell, PowerShell and CLI19 questions

    1. An administrator has only a borrowed tablet with a web browser and no Azure software installed. The administrator needs to restart an Azure virtual machine and check an Azure storage account using that tablet. Why is Azure Cloud Shell able to handle this task?

    • It provides a browser-based authenticated Bash or PowerShell session with current Azure tools that acts with the user's permissions, so no local installation is needed.
    • It permanently installs the Azure CLI, PowerShell modules, and virtual machines onto any device that opens the browser.
    • It grants every browser user full administrator rights to all Azure subscriptions without signing in.
    • It downloads Azure virtual machines and storage accounts to the tablet for offline editing.

    Show answer and explanation

    • It provides a browser-based authenticated Bash or PowerShell session with current Azure tools that acts with the user's permissions, so no local installation is needed.

    Cloud Shell provides an authenticated Bash or PowerShell session in the browser that uses the user's permissions and preinstalled Azure tools, so nothing needs to be installed on the borrowed device.

    2. In Azure Cloud Shell, Microsoft automatically provides the newest Azure CLI and PowerShell modules, so users do not need to manually update those tools before managing resources.

    • True
    • False

    Show answer and explanation

    • True

    Cloud Shell is a managed service that starts each session with current versions available immediately after sign-in.

    3. Azure Cloud Shell is an authenticated shell that does not run on the local device, and protection of data at rest in its infrastructure uses ____ by default.

    • double encryption
    • local-only storage
    • single sign-on

    Show answer

    • Azure Cloud Shell is an authenticated shell that does not run on the local device, and protection of data at rest in its infrastructure uses double encryption by default.

    4. In Classic mode, what exact command opens a file named temp.txt in the Cloud Shell editor from the prompt?

    Show answer and explanation

    • code temp.txt

    Typing code plus the filename launches the editor for that file when Classic mode is enabled.

    5. The code command for launching the Cloud Shell editor works in all Cloud Shell interface modes with no setting change required.

    • True
    • False

    Show answer and explanation

    • False

    The code command works only in Classic mode, which is enabled through the More menu, Settings, and Go to Classic version.

    6. An administrator maps an Azure File Share in Cloud Shell and wants Cloud Shell storage to span several Azure regions automatically. What is true about regions for Cloud Shell storage?

    • The share is tied to a specific region and only one region can hold Cloud Shell storage, so other regions need backup and synchronization.
    • Cloud Shell automatically replicates its storage to every Azure region with no extra work.
    • File Shares cannot be accessed from Cloud Shell under any configuration.
    • Region choice affects only the shell language and has no effect on file storage.

    Show answer and explanation

    • The share is tied to a specific region and only one region can hold Cloud Shell storage, so other regions need backup and synchronization.

    A File Share mapping is tied to a specific region and only one region can hold the Cloud Shell storage allocation, so multi-region access requires backup and synchronization.

    7. A support engineer is in an airport with only a kiosk browser and needs five minutes to restart an Azure virtual machine, run a stored diagnostic script, and make a small script edit. Why is Azure Cloud Shell a suitable choice for this work?

    • It opens a secure browser-based prompt with no plug-ins, supports Bash or PowerShell, persists files between sessions, and provides an editor for quick fixes.
    • It guarantees uninterrupted execution for scripts that run for many hours.
    • It provides sudo access and allows installation of any unsupported tool.
    • It allows many simultaneous sessions for concurrent work across tenants.

    Show answer and explanation

    • It opens a secure browser-based prompt with no plug-ins, supports Bash or PowerShell, persists files between sessions, and provides an editor for quick fixes.

    Cloud Shell gives a secure browser prompt with no plug-ins, persists files between sessions, supports Bash or PowerShell, and includes an editor, which matches short on-the-go tasks.

    8. Azure Cloud Shell is a suitable place to run a script that must execute continuously for more than 20 minutes because the session will stay connected indefinitely.

    • True
    • False

    Show answer and explanation

    • False

    Sessions disconnect without warning after 20 minutes of inactivity and the in-memory state is lost, so long-running activities need another environment.

    9. Azure Cloud Shell allows only one instance at a time and is therefore unsuitable for concurrent work across multiple subscriptions or tenants.

    • True
    • False

    Show answer and explanation

    • True

    Only a single Cloud Shell instance is permitted, so parallel multi-subscription or multi-tenant work requires a different setup.

    10. An engineer who needs sudo-level permissions inside the shell or who must install tools that Cloud Shell does not support should use a custom virtual machine or container instead of Cloud Shell.

    • True
    • False

    Show answer and explanation

    • True

    Cloud Shell is a limited environment without sudo access and without support for arbitrary installers; a custom VM or container provides full control.

    11. Match each utility that is preinstalled in Azure Cloud Shell to the category it belongs to.

    • git
    • Kubectl
    • npm
    • sqlcmd Utility

    • Build tools
    • Containers
    • Databases
    • Source control

    Show answer and explanation

    • git: Source control
    • Kubectl: Containers
    • npm: Build tools
    • sqlcmd Utility: Databases

    git is the version-control tool in Cloud Shell.

    Kubectl manages Kubernetes clusters and sits in the containers group.

    npm builds JavaScript packages and sits in the build-tools group.

    sqlcmd Utility connects to databases and sits in the databases group.

    12. Which task can be completed directly in a fresh Azure Cloud Shell session without installing additional software?

    • Manage a Kubernetes cluster with Kubectl and Helm and apply infrastructure as code with Terraform and Ansible
    • Gain sudo administrator rights inside the shell to modify the underlying host operating system
    • Install an arbitrary custom agent that is not listed among Cloud Shell add-ons
    • Keep a single session active for several hours to run a long migration with no timeout

    Show answer and explanation

    • Manage a Kubernetes cluster with Kubectl and Helm and apply infrastructure as code with Terraform and Ansible

    Cloud Shell already includes Docker Machine, Kubectl, Helm, Terraform, and Ansible, so Kubernetes and infrastructure-as-code work needs no installer.

    A junior administrator for a regional food-delivery startup is traveling without the usual admin workstation when an Azure virtual machine running the ordering API stops responding. The only available computer is a relative's Chromebook with a web browser, but the administrator's diagnostic scripts are saved in persistent Cloud Shell storage.

    13. Arrange the steps the traveling administrator should follow to diagnose the unresponsive Azure virtual machine with Cloud Shell, from first to last.

    • Open Cloud Shell so a temporary host preconfigured with Bash and PowerShell is allocated
    • Retrieve diagnostic scripts from CloudDrive or the mapped Azure File Share
    • Run diagnostic and repair commands against the virtual machine
    • Select the preferred shell experience, Bash or PowerShell
    • Sign in through the Azure portal or https://shell.azure.com with the organization's account

    Show answer

    1. Sign in through the Azure portal or https://shell.azure.com with the organization's account
    2. Open Cloud Shell so a temporary host preconfigured with Bash and PowerShell is allocated
    3. Select the preferred shell experience, Bash or PowerShell
    4. Retrieve diagnostic scripts from CloudDrive or the mapped Azure File Share
    5. Run diagnostic and repair commands against the virtual machine

    14. What computing resource supports commands each time a user starts a new Azure Cloud Shell session?

    • A temporary host preconfigured with the latest Bash and PowerShell, allocated for that session
    • A permanent virtual machine assigned once to the user and kept forever
    • The user's local laptop or phone, which becomes the execution host
    • A storage account that compiles shell commands without any compute host

    Show answer and explanation

    • A temporary host preconfigured with the latest Bash and PowerShell, allocated for that session

    Each session gets a temporary host preconfigured with the latest Bash and PowerShell; the host is discarded when the session ends.

    15. An Azure Cloud Shell session that is idle for 20 minutes terminates, but files previously saved to CloudDrive remain available after starting a new session.

    • True
    • False

    Show answer and explanation

    • True

    Inactivity ends the temporary host and its memory state, while CloudDrive persistence keeps saved files for future sessions.

    Storage1 exists in the subscription. The devices below will be considered for copying data to it.

    Name	Platform
    Device1	Windows 10
    Device2	Linux
    Device3	macOS

    16. From which of these devices can AzCopy be used to copy data into storage1?

    • Device1 only
    • Device1, Device2, and Device3
    • Device1 and Device2 only
    • Device1 and Device3 only

    Show answer and explanation

    • Device1, Device2, and Device3

    Current AzCopy v10 is a self-contained cross-platform binary shipped for Windows, Linux and macOS, so it runs on all three devices. Windows-only limits describe the retired v8 builds.

    An on-premises host holds D:\Folder1. Its contents must be placed into the public container of the account contosodata.

    17. Which command performs the required copy?

    • https://contosodata.blob.core.windows.net/public
    • azcopy sync D:\folder1 https://contosodata.blob.core.windows.net/public --snapshot
    • azcopy copy D:\folder1 https://contosodata.blob.core.windows.net/public --recursive
    • az storage blob copy start-batch D:\Folder1 https://contosodata.blob.core.windows.net/public

    Show answer and explanation

    • azcopy copy D:\folder1 https://contosodata.blob.core.windows.net/public --recursive

    Copying a local directory including subfolders to a container uses azcopy copy with --recursive. A bare URL is not a command, azcopy sync has no --snapshot flag and is meant for reconciliation, and start-batch performs server-side copies between storage locations, not from a local disk.

    Four endpoint devices are under review for running Storage Explorer.

    Name	Platform
    Device1	Windows
    Device2	Ubuntu Linux
    Device3	macOS
    Device4	Android

    18. On which of these devices can Storage Explorer be installed?

    • Device1 only
    • Device1 and Device2 only
    • Device1 and Device3 only
    • Device1, Device2, and Device3 only
    • Device1, Device3, and Device4 only

    Show answer and explanation

    • Device1, Device2, and Device3 only

    Storage Explorer is a desktop program shipped for Windows, macOS and Linux including Ubuntu. No build exists for Android or other mobile systems, so any set naming Device4 or omitting a desktop platform is wrong.

    A user named Admin1 in a new subscription tries to deploy a Marketplace item with a Resource Manager template through PowerShell and receives the following error.

    User failed validation to purchase resources. Error message: 'Legal terms have not been accepted for this item on this subscription. To accept legal terms, please go to the Azure portal (http://go.microsoft.com/fwlink/?LinkId=534873) and configure programmatic deployment for the Marketplace item or create it there for the first time.'

    Admin1 must be able to deploy that Marketplace resource.

    19. What should you do to let Admin1 deploy successfully?

    • From Azure PowerShell, run the Set-AzApiManagementSubscription cmdlet
    • From the Azure portal, register the Microsoft.Marketplace resource provider
    • From Azure PowerShell, run the Set-AzMarketplaceTerms cmdlet
    • From the Azure portal, assign the Billing administrator role to Admin1

    Show answer and explanation

    • From Azure PowerShell, run the Set-AzMarketplaceTerms cmdlet

    The failure states the offer legal terms are unaccepted for the subscription, blocking programmatic deployment. Accepting them with Set-AzMarketplaceTerms for that publisher, product and plan clears the block. Managing API Management subscriptions, registering a nonexistent Marketplace provider, or granting a billing role does not accept offer terms.

In what order?