Free AZ-104 Exam Braindumps
Microsoft Azure Administrator Questions 161–168 (page: 22)

Updated On: 8-Apr-2026

DRAG DROP (Drag and Drop is not supported)
You have an Azure subscription that contains the storage accounts shown in the following table.


You plan to use AzCopy to copy a blob from container1 directly to share1.
You need to identify which authentication method to use when you use AzCopy.
What should you identify for each account? To answer, drag the appropriate authentication methods to the correct accounts. Each method may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Select and Place:

  1. See Explanation section for answer.

Answer(s): A

Explanation:



Box 1: A shared access signature (SAS) token.
You can provide authorization credentials by using Microsoft Entra ID, or by using a Shared Access Signature (SAS) token.
For Blob storage you can use Microsoft Entra ID & SAS.
Note: In the current release, if you plan to copy blobs between storage accounts, you'll have to append a SAS token to each source URL. You can omit the SAS token only from the destination URL.
Box 2: A shared access signature (SAS) token. For File storage you can only use SAS.


Reference:

https://docs.microsoft.com/en-us/azure/storage/common/storage-use-azcopy-v10



You create an Azure Storage account.
You plan to add 10 blob containers to the storage account.
For one of the containers, you need to use a different key to encrypt data at rest. What should you do before you create the container?

  1. Generate a shared access signature (SAS).
  2. Modify the minimum TLS version.
  3. Rotate the access keys.
  4. Create an encryption scope.

Answer(s): D

Explanation:

Encryption scopes enable you to manage encryption with a key that is scoped to a container or an individual blob. You can use encryption scopes to create secure boundaries between data that resides in the same storage account but belongs to different customers.


Reference:

https://docs.microsoft.com/en-us/azure/storage/blobs/encryption-scope-overview



HOTSPOT (Drag and Drop is not supported)
You have an Azure subscription. The subscription contains a storage account named storage1 that has the lifecycle management rules shown in the following table.


On June 1, you store two blobs in storage1 as shown in the following table.


For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:



Box 1: No
At June 4 Rule1 applied and File1 was moved to archive storage.
At June 6 Rule2, move to cool storage, was not applied as File1 already is in archive storage.
Note: If you define more than one action on the same blob, lifecycle management applies the least expensive action to the blob. For example, action delete is cheaper than action tierToArchive. Action tierToArchive is cheaper than action tierToCool.
Box 2: No
On June1 no rule applies to File2, and it would be stored in the Hot tier.
Box 3: No
On June6 File2 would be moved to the cool storage by Rule2. One June11 File2 would be deleted by Rule3.


Reference:

https://learn.microsoft.com/en-us/azure/storage/blobs/lifecycle-management-overview



HOTSPOT (Drag and Drop is not supported)
You have an Azure subscription.
You plan to deploy a storage account named storage1 by using the following Azure Resource Manager (ARM) template.


For each of the following statements, select Yes if the statement is hue. Otherwise, select No.
NOTE: Each correct selection is worth one point
Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:



Box 1: No
From the exhibit we see:
RestorePolicy Enabled=True, days=6
RestorePolicyProperties
days
how long this blob can be restored. It should be great than zero and less than DeleteRetentionPolicy.days.
* enabled
Blob restore is enabled if set to true.
Box 2: No We see:
Location: East USA Allowblobpublicaccess=Yes
Blob storage can certainly be shared between users in different regions. Blob storage resources are accessible over HTTP protocol so it doesn't really matter where your users are
Note: Region refers to the geographical region in which your account is based.
Data egress refers to any data transferred out of an Azure region. When the data in your storage account is accessed by an application that isn’t running in the same region, you're charged for data egress.
Box 3: Yes We see:
SKU: Standard_LRS (Standard Locally Redundant Storage)
Locally redundant storage (LRS) replicates your storage account three times within a single data center in the
primary region.


Reference:

https://learn.microsoft.com/en-us/azure/templates/microsoft.storage/storageaccounts/ blobservices?pivots=deployment-language-bicep
https://learn.microsoft.com/en-us/azure/storage/common/storage-redundancy



You have an on-premises server that contains a folder named D:\Folder1.
You need to copy the contents of D:\Folder1 to the public container in an Azure Storage account named contosodata.
Which command should you run?

  1. az storage blob copy start D:\Folder1 https:// contosodata.blob.core.windows.net/public
  2. azcopy sync D:\folder1 https://contosodata.blob.core.windows.net/public -- snapshot
  3. azcopy copy D:\folder1 https://contosodata.blob.core.windows.net/public -- recursive
  4. az storage blob copy start-batch D:\Folder1 https:// contosodata.blob.core.windows.net/public

Answer(s): C

Explanation:

AzCopy is a command-line tool for copying data to or from Azure Blob storage, Azure Files, and Azure Table storage, by using simple commands. The commands are designed for optimal performance. Using AzCopy, you can either copy data between a file system and a storage account, or between storage accounts. AzCopy may be used to copy data from local (on-premises) data to a storage account.
Upload contents of a folder to Blob storage
You can use AzCopy to upload all files in a folder to Blob storage on Windows or Linux. To upload all blobs in a folder, enter the following AzCopy command:
azcopy copy "<local-folder-path>" "https://<storage-account-name> Parameter --recursive
Look into subdirectories recursively when uploading from local file system.


Reference:

https://learn.microsoft.com/en-us/azure/storage/common/storage-use-azcopy-migrate-on- premises-data



HOTSPOT (Drag and Drop is not supported)
You have an Azure subscription that contains a storage account named storage1. The storage1 account contains a container named container1.
You need to create a lifecycle management rule for storage1 that will automatically move the blobs in container1 to the lowest-cost tier after 90 days.
How should you complete the rule? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

  1. See Explanation section for answer.

Answer(s): A

Explanation:



Box 1: tierToArchive Archive is the lowest cost.
Example,"tierToArchive": { "daysAfterModificationGreaterThan": 90 }:
The following sample policy manages the lifecycle for such data. It applies to block blobs in container “foo”:
Tier blobs to cool storage 30 days after last modification Tier blobs to archive storage 90 days after last modification
Delete blobs 2,555 days (seven years) after last modification Delete blob snapshots 90 days after snapshot creation
{
"rules": [
{
"name": "ruleFoo", "enabled": true, "type": "Lifecycle", "definition": { "filters": {
"blobTypes": [ "blockBlob" ],
"prefixMatch": [ "foo" ]
},
"actions": {
"baseBlob": {
"tierToCool": { "daysAfterModificationGreaterThan": 30 }, "tierToArchive": { "daysAfterModificationGreaterThan": 90 }, "delete": { "daysAfterModificationGreaterThan": 2555 }
},
"snapshot": {
"delete": { "daysAfterCreationGreaterThan": 90 }
}
}
}
}
]
}
Box 2: prefixMatch


Reference:

https://azure.microsoft.com/sv-se/blog/azure-blob-storage-lifecycle-management-now-generally- available/



DRAG DROP (Drag and Drop is not supported)
You have an Azure subscription that contains a virtual machine named VM1.
You need to back up VM1. The solution must ensure that backups are stored across three availability zones in the primary region.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Select and Place:

  1. See Explanation section for answer.

Answer(s): A

Explanation:




Step 1: Create a Recovery Services vault
You can create and configure an Azure Backup Recovery Services vault that stores backups and recovery points.
Azure Backup automatically handles storage for the vault. You need to specify how that storage is replicated. Step 2: Set Replication to Zone-redundant storage (ZRS)
Set storage redundancy
Azure Backup automatically handles storage for the vault. You need to specify how that storage is replicated.
Be sure to change the storage replication type for a Recovery Services vault before you configure a backup in the vault. After you configure a backup, the option to modify is disabled.
Note: Zone-redundant storage (ZRS) replicates your storage account synchronously across three Azure availability zones in the primary region. Each availability zone is a separate physical location with independent power, cooling, and networking.
Step 3: For VM1, create a backup policy and configure the backup. To configure Cross Region Restore for the vault:
From the portal, go to your Recovery Services vault, and then select Properties (under Settings).
Under Backup Configuration, select Update.
3. Under Cross Region Restore, select Enable.


Reference:

https://learn.microsoft.com/en-us/azure/backup/backup-create-rs-vault https://learn.microsoft.com/en-us/azure/storage/common/storage-redundancy



You have an Azure subscription named Subscription1.
You have 5 TB of data that you need to transfer to Subscription1. You plan to use an Azure Import/Export job.
What can you use as the destination of the imported data?

  1. an Azure Cosmos DB database
  2. Azure File Storage
  3. Azure SQL Database
  4. a virtual machine

Answer(s): B

Explanation:

Azure Import/Export service is used to securely import large amounts of data to Azure Blob storage and Azure Files by shipping disk drives to an Azure datacenter. This service can also be used to transfer data from Azure Blob storage to disk drives and ship to your on-premises sites. Data from one or more disk drives can be imported either to Azure Blob storage or Azure Files.
Supply your own disk drives and transfer data with the Azure Import/Export service. You can also use disk drives supplied by Microsoft.
If you want to transfer data using disk drives supplied by Microsoft, you can use Azure Data Box Disk to import
data into Azure. Microsoft ships up to 5 encrypted solid-state disk drives (SSDs) with a 40 TB total capacity per order, to your datacenter through a regional carrier. You can quickly configure disk drives, copy data to disk drives over a USB 3.0 connection, and ship the disk drives back to Azure.
Note:
There are several versions of this question in the exam. The question has two correct answers:
* Azure File Storage
Azure Blob Storage
The question can have other incorrect answer options, including the following:
* a virtual machine
* Azure SQL Database
* Azure Data Factory
* Azure Cosmos DB database
* Azure File Sync Storage Sync Service
Azure Data Lake Store


Reference:

https://learn.microsoft.com/en-us/azure/import-export/storage-import-export-service



Viewing page 22 of 69
Viewing questions 169 - 176 out of 606 questions


Post your Comments and Discuss Microsoft AZ-104 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!