[2025 Practice Exam] Azure Administrator Associate (AZ-104)

Prepare to pass the Microsoft Certified: Azure Administrator Associate (AZ-104) exam and gain the skills needed to confidently manage Azure environments in real-world scenarios. This comprehensive course is designed for IT professionals, system administrators, and cloud engineers who want to master core Azure administrative tasks.

You’ll learn how to manage Azure identities and governance, implement and secure storage solutions, deploy and configure virtual machines and containers, build and manage virtual networks, and monitor resources using Azure-native tools. Through hands-on labs, real-world examples, and exam-focused lessons, you’ll gain both the theoretical knowledge and practical experience required to succeed as an Azure Administrator.

By the end of this course, you’ll not only be well-prepared for the AZ-104 exam but also ready to take on the day-to-day responsibilities of managing Azure resources at an enterprise scale.

Sample Question:

You are an Azure administrator for your organization. A user reports that they are unable to access an Azure virtual machine (VM) that was working previously. You verify that the VM is running. What should you check first?

A. The VM’s system-assigned managed identity
B. The VM’s Boot Diagnostics logs
C. The Network Security Group (NSG) rules
D. The Azure Resource Manager (ARM) template

Correct Answer: C. The Network Security Group (NSG) rules

Explanation:

When a user cannot access a VM but the VM is confirmed to be running, one of the most common issues is network-level access control. Azure Network Security Groups (NSGs) control inbound and outbound traffic to Azure resources. If the correct inbound port (e.g., port 3389 for RDP or port 22 for SSH) is not allowed in the NSG, the user will be unable to connect even if the VM is running.

• A is incorrect because a managed identity is used for resource authentication, not user access.

• B (Boot Diagnostics) helps troubleshoot startup issues, not connectivity.

• D (ARM template) is used for deployment, not runtime configuration.